@sema-agent/server 7.137.0 → 7.138.0

package/dist/boot/stage-05-execution-env.d.ts

@@ -1,7 +1,9 @@
 import type { runStage04 } from "./stage-04-stores.js";
 export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>): Promise<{
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -44,18 +46,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-05-execution-env.js

@@ -1,4 +1,4 @@
-import { assertDeploymentModsAdmitted, createDeploymentMods } from "./deployment-mods.js";
+import { assembleDeploymentMods } from "./deployment-mods.js";
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
 import { assertDeviceLaneWired, createDeviceLane } from "./device-lane.js";
 import { assertWorkspaceSpaceReadable, createExecutionEnv } from "./execution-env.js";
@@ -7,6 +7,7 @@ import * as facts from "../capability-facts.js";
 import { sessionStoreLabelOf } from "../store-posture.js";
 import { runStore } from "./late-binds.js";
 import { SANDBOX_GIT_PLANE_OFF_TEXT } from "../sandbox-git-plane.js";
+import { createPeerDesk } from "../peer-seat.js";
 export async function runStage05(ctx) {
     const { backend, config, instanceId, logger, metrics, sessionStore, taskAttachmentStore } = ctx;
     const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, replicaId: instanceId }) : undefined;
@@ -23,10 +24,12 @@ export async function runStage05(ctx) {
     else if (sandboxGitPlane.reason !== "single_user" && sandboxGitPlane.reason !== "lane_without_boundary") {
         logger.info("credential_plane_sandbox_git", { state: "off", reason: sandboxGitPlane.reason, why: SANDBOX_GIT_PLANE_OFF_TEXT[sandboxGitPlane.reason] });
     }
-    const deploymentMods = createDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config) });
     if (config.toolTrace)
         logger.info("tool_trace_enabled", {});
-    await assertDeploymentModsAdmitted(deploymentMods);
-    return { ...ctx, deploymentMods, deviceLane, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
+    const { registrations: deploymentMods, loaded: deploymentModsLoaded } = await assembleDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config), declaration: config.modsDeclaration, logger });
+    const peerDesk = createPeerDesk({ log: logger });
+    metrics.dynamicGauge("peer_registry_entries", "Peer desk entries (declared peer credentials registered for in-flight legs and the roster)", () => peerDesk.size().entries);
+    metrics.dynamicGauge("peer_registry_holders", "Peer desk host leases holding entries, summed across entries", () => peerDesk.size().holders);
+    return { ...ctx, deploymentMods, deploymentModsLoaded, deviceLane, peerDesk, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map

package/dist/boot/stage-06-runners.d.ts

@@ -64,7 +64,9 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -107,18 +109,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-06-runners.js

@@ -28,8 +28,9 @@ import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-author
 import { mountOrgDeliveryGate } from "./org-delivery.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
+import { retentionSweepRuns } from "../plugins/retention-store-sql.js";
 export async function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, engineDataRoot, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, workflowParkDecisions, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const parkCommitted = backend?.checkpoint && config.durableApproval ? createParkCommitWatch(backend.checkpoint(logger)) : undefined;
     const checkpointStore = parkCommitted?.store;
@@ -125,7 +126,7 @@ export async function runStage06(ctx) {
             { name: "checkpointStore", store: checkpointStore },
             { name: "toolResultStore", store: runnerOffloadStore },
         ],
-        retentionExecutorWired: config.retentionSweep.intervalSec > 0 && retentionExecutor !== undefined && retentionLaneStore !== undefined,
+        retentionExecutor: retentionSweepRuns(config.retentionSweep) ? (retentionExecutor ?? null) : null,
     });
     const mcpRevocations = webAdmin.takeMcpRevocations();
     const workflowModelAllowlistSnapshot = workflowModelAllowlistFor(config) ?? [];
@@ -136,6 +137,7 @@ export async function runStage06(ctx) {
         config, logger, metrics, localRoot, promptSource: webAdmin.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
         pricing, tracer, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine,
         engineDataRoot,
+        peerDesk,
         sessionCaptureRecords,
         memorySyncRunner, toolResultStore: runnerOffloadStore, checkpointStore, sessionPolicyStore, runtimeCapsResolver, fileHistoryStore,
         permissionRuleStore: permissionRuleProvider,
@@ -220,6 +222,7 @@ export async function runStage06(ctx) {
             governanceSeams,
             sharedMemoryStores: sharedMemoryStore ? sharedMemoryStore : undefined,
             engineDataRoot,
+            peerDesk,
         }),
         sessionStore: subRunnerSessions,
         onBackgroundChildEvent: runnerDeps.onBackgroundChildEvent ? runnerDeps.onBackgroundChildEvent : undefined,

package/dist/boot/stage-07-capability-layer.d.ts

@@ -80,7 +80,9 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -123,18 +125,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -29,7 +29,7 @@ import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
 import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 export async function runStage07(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, peerDesk, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore);
     const runStore = backend ? backend.run() : undefined;
     bindRunStore(runStore);
@@ -153,7 +153,7 @@ export async function runStage07(ctx) {
         : new RateLimiter(config.rateLimitPerMin);
     bindRateLimiter(rateLimiter);
     let skills = loadDeploymentSkills(config, logger);
-    skills = await webAdmin.applyCenterCapabilities(skills);
+    skills = await webAdmin.applyCenterCapabilities(skills, peerDesk, peerDesk.lease("roster"));
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();
     const webSearch = webSearchCfg ? createWebSearchBackend(webSearchCfg) : undefined;

package/dist/boot/stage-08-reapers.d.ts

@@ -93,7 +93,9 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -136,18 +138,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-09-leader.d.ts

@@ -117,7 +117,9 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -160,18 +162,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-09-leader.js

@@ -6,7 +6,7 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, checkpointCtxSealing, config, webAdmin, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, spaceReclaimer, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, checkpointCtxSealing, config, webAdmin, deploymentMods, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, spaceReclaimer, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
@@ -17,7 +17,7 @@ export function runStage09(ctx) {
         userInputLedgerStore,
         ...(spaceReclaimer !== undefined ? { spaceReclaimer } : {}),
     });
-    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, checkpointCtxSealing, governanceSeams, backend, tracer, usageWindowStore, promptSource: webAdmin.promptSource, onError: runnerDeps.onError });
+    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, checkpointCtxSealing, governanceSeams, backend, tracer, usageWindowStore, promptSource: webAdmin.promptSource, onError: runnerDeps.onError, deploymentMods });
     const drainState = { draining: false };
     const authBridgeIssuer = authBridgeIssuerOf(config)?.issuer;
     const webAdminJwtVerifier = authBridgeIssuer

package/dist/boot/stage-10-http-server.d.ts

@@ -116,7 +116,9 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -159,18 +161,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../plugins/store-backend.js").StoreBackend | undefined;

package/dist/boot/stage-10-http-server.js

@@ -29,7 +29,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
+    const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentModsLoaded, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -169,6 +169,7 @@ export async function runStage10(ctx) {
         webSearchProvider,
         sealedKeyPublic: webAdmin.sealedKeyPublic,
         sandboxGitPlane,
+        deploymentModPackages: deploymentModsLoaded.length,
         instanceId,
         capabilities: {
             version: serviceVersion(),
@@ -199,6 +200,7 @@ export async function runStage10(ctx) {
     };
     const resolveSpec = createResolveSpec({
         config, logger, metrics, localRoot, scenarios, loadedSkills, principalCaps, centerRuntimeCapsResolver,
+        peerDesk,
         getKeyResolver: () => webAdmin.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
@@ -212,7 +214,7 @@ export async function runStage10(ctx) {
     const runnerFor = createHandsRunnerSelector({ full: runner, handsless: handslessRunner });
     const sideQuery = createSideQueryLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver() });
     const scenarioGate = createScenarioGate({ config, scenarios, principalCaps, logger }, "peek");
-    const server = createHttpServer({ runner, runnerFor, sideQuery, scenarioGate, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
+    const server = createHttpServer({ runner, runnerFor, sideQuery, scenarioGate, peerDesk, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
     bindServerLateSeats({ config, logger, server });
     const fleetReconcile = startFleetReconciler({
         bus: fleetBus,

package/dist/boot/web-admin.d.ts

@@ -20,6 +20,7 @@ import { type CandidateRejection } from "../web-admin-client/candidate-gate.js";
 import { type ConfigApplyLedgerView } from "../web-admin-client/apply-ledger.js";
 import type { CenterPullView } from "../web-admin-client/pull-state.js";
 import type { LimitSync } from "./limit-sync.js";
+import type { PeerDesk, PeerLease } from "../peer-seat.js";
 export interface WebAdminRuntimeCtx {
     config: ServiceConfig;
     logger: Logger;
@@ -53,8 +54,10 @@ export interface WebAdminRuntime {
     readonly checkpointCtxSealing: CheckpointCtxSealing | undefined;
     /** core `CenterPromptSource`(RunnerDeps / subRunner 必须同实例)。 */
     readonly promptSource: CenterPromptSource;
-    /** center skills overlay → plugins 消费 → boot LKG 落盘/skill-stale 判定 → mcp 解析。返回新的 skills 表。 */
-    applyCenterCapabilities(skills: LoadedSkill[]): Promise<LoadedSkill[]>;
+    /** center skills overlay → plugins 消费 → boot LKG 落盘/skill-stale 判定 → mcp / a2a 解析。返回新的 skills 表。
+     *  名册(mcp / a2a 两域)条目的件在 `rosterLease`(起服开一只、进程寿命不放)下登记进 `desk`,`config.mcpServers` / `config.a2aPeers`
+     *  里是带引用、不带件值的声明。 */
+    applyCenterCapabilities(skills: LoadedSkill[], desk: Pick<PeerDesk, "declare">, rosterLease: PeerLease): Promise<LoadedSkill[]>;
     /** center 声明场景 overlay(就地写进传入的两张表)。 */
     applyCenterScenarios(t: CenterScenarioOverlayTargets): void;
     /** per-model key resolver 首建(原位调用,见文件头注 5)。 */

package/dist/boot/web-admin.js

@@ -735,7 +735,7 @@ export async function createWebAdminRuntime(ctx) {
                 return "not-wired";
             return (await manualRefresh()) === "failed" ? "failed" : "triggered";
         },
-        async applyCenterCapabilities(skills) {
+        async applyCenterCapabilities(skills, desk, rosterLease) {
             if (effective?.skills)
                 skills = await applySkillsManifest(skills, effective.skills, candidateSource(), logger);
             if (effective?.plugins !== undefined) {
@@ -775,10 +775,10 @@ export async function createWebAdminRuntime(ctx) {
                 }
             }
             if (effective?.mcp)
-                config.mcpServers = resolveMcpServers(effective.mcp, logger);
+                config.mcpServers = resolveMcpServers(effective.mcp, desk, rosterLease, logger);
             mcpRevocations.applyEnabledEntries(enabledMcpEntries(effective?.mcp), { isBaseline: true });
             if (effective?.a2a)
-                config.a2aPeers = resolveA2aPeers(effective.a2a, logger);
+                config.a2aPeers = resolveA2aPeers(effective.a2a, desk, rosterLease, logger);
             return skills;
         },
         applyCenterScenarios(t) {

package/dist/brain.js

@@ -6,7 +6,7 @@ import { createHash } from "node:crypto";
 import { isModelKeyPoison, modelKeyPoisonIdentity } from "./key-resolver.js";
 import { anthropicRouteRoot, brainLaneFor, mountRoutes, routeTableOf } from "./model-provider.js";
 import { openaiRouteBaseUrl } from "./model-route-endpoint.js";
-import { anthropicLaneCredentialOf } from "./model-route-gap.js";
+import { anthropicLaneCredentialOf, declaredCredential } from "./model-route-gap.js";
 import { catalogEntryFingerprint } from "./web-admin-client/restart-signal.js";
 import { buildDisplaySafeRefusal, buildDisplaySafeUrl } from "./trace/redact.js";
 import { createModelReachBrain } from "./model-unreachable-notice.js";
@@ -26,10 +26,10 @@ function breakerRoutesOf(config, r) {
     return r.circuitBreaker ? deploymentGatewayRoots(config).slice(0, -1) : [];
 }
 function deploymentGatewayKey(config) {
-    return config.gatewayBaseUrl !== undefined ? config.gatewayApiKey : undefined;
+    return config.gatewayBaseUrl !== undefined ? declaredCredential(config.gatewayApiKey) : undefined;
 }
 function degradeDeclaredRoot(fallbackBaseUrl, config) {
-    const armed = Boolean(deploymentGatewayKey(config)) && isOffDeploymentRoot(fallbackBaseUrl, config);
+    const armed = deploymentGatewayKey(config) !== undefined && isOffDeploymentRoot(fallbackBaseUrl, config);
     return armed ? config.gatewayBaseUrl : openaiRouteBaseUrl(fallbackBaseUrl, config.gatewayBaseUrl);
 }
 export const FAST_FAIL_MAX_RETRIES = 2;
@@ -110,7 +110,7 @@ export function createBrainAssembly(config, deps = {}) {
                     brainRoutes.anthropic
                 : constructRouteBrain(`degrade target "${degradeTo}"`, [fallbackModel.baseUrl, config.gatewayBaseUrl], () => createOpenAIBrain({
                     ...(fbDeclaredRoot !== undefined ? { baseUrl: fbDeclaredRoot } : {}),
-                    ...(fbDeploymentKey ? { apiKey: fbDeploymentKey } : {}),
+                    ...(fbDeploymentKey !== undefined ? { apiKey: fbDeploymentKey } : {}),
                     ...(config.gatewayMaxRetries !== undefined ? { maxRetries: config.gatewayMaxRetries } : {}),
                     fetchImpl,
                     ...timeouts,
@@ -240,7 +240,7 @@ export function brainSummary(config) {
             if (declaresOwnCredential) {
                 return { reactiveDegradeRoutePairing: "per-model-declared", reactiveDegradeRouteRefusal: null };
             }
-            const verdict = adjudicateModelRoute({ id: target.id, baseUrl: target.baseUrl }, resolveRouteCredential(((key) => (key ? { configApiKey: key } : {}))(deploymentGatewayKey(config))), { baseUrl: degradeDeclaredRoot(target.baseUrl, config) });
+            const verdict = adjudicateModelRoute({ id: target.id, baseUrl: target.baseUrl }, resolveRouteCredential(((key) => (key !== undefined ? { configApiKey: key } : {}))(deploymentGatewayKey(config))), { baseUrl: degradeDeclaredRoot(target.baseUrl, config) });
             return verdict.ok
                 ? { reactiveDegradeRoutePairing: `ok:${verdict.posture}`, reactiveDegradeRouteRefusal: null }
                 : {

package/dist/budget.d.ts

@@ -5,7 +5,7 @@
  *   ④ createTracer    — core's content-free TraceEvents → /metrics (spend, first-token, tool calls).
  *   ⑤ cappedCeiling  — clamp a caller's requested per-task budget DOWN to the operator ceiling.
  */
-import { type Model, type ModelPricing, type TracerHook } from "@sema-agent/core";
+import { type AccountRow, type Model, type ModelPricing, type TracerHook } from "@sema-agent/core";
 import type { Metrics } from "./observability/metrics.js";
 import type { QuotaTracker } from "./observability/cost-quota.js";
 import type { FleetUsageBins } from "./fleet-client.js";
@@ -116,23 +116,25 @@ export declare function createTracer(metrics: Pick<Metrics, "inc" | "observe">,
  * (tokens×quotaWeight,weight-at-burn 固化)、micro-USD 同轴。装配点与 createTracer 同一处(main.ts),
  * 传同一组实例——两臂永不分家。
  *
- * 已知残差(codex R3 medium,记档):cost 源=core SideQueryResult.usage.cost.total(brain 层计价),
- * OpenAI cache-heavy 输入按全价入账(tracer 的 e.costMicroUsd 是 cache-family-aware 价)——方向=多收
- * (保守,绝不少收);根修=core 在 SideQueryResult 上回权威 costMicroUsd(已提货 core)。model 标签/
+ * 金额源 = 引擎定价的账行 `SideQueryResult.account.costMicroUsd`(core 7.59.0:与 run 的旁路调用同一只定价函数、
+ * 按部署价表、按实际作答的模型)—— 与 tracer 的 `e.costMicroUsd` 同一口径;缺席 = 那只模型没有价表 = **未知**(不编 0)。
+ * 适配器自报的 `usage.cost.total`(cache 命中按全价)不是金额源(7.58.x 及更早读它,cache-heavy 时多收)。model 标签 /
  * weight 键用**路由身份 r.model**(池配置有界)非 servedModel(provider 上报,无界)。
  */
-export declare function createSideQueryAccountant(metrics: Pick<Metrics, "inc">, costQuota?: QuotaTracker, fleetUsage?: Pick<FleetUsageBins, "record">, fleetLease?: Pick<FleetLeaseManager, "recordSpend">, quotaWeightFor?: (model: string) => number): (principal: string | undefined, r: {
-    model: string;
-    usage?: {
-        input?: number;
-        output?: number;
-        cacheRead?: number;
-        cacheWrite?: number;
-        cost?: {
-            total?: number;
-        };
+export interface SideQueryAccountingInput {
+    readonly model: string;
+    /** 引擎归一的计数(`input` 已是 uncached 量,见函数体 [ref] 注)。 */
+    readonly usage?: {
+        readonly input?: number;
+        readonly output?: number;
+        readonly cacheRead?: number;
+        readonly cacheWrite?: number;
     };
-}) => void;
+    /** 引擎定价的账行(`origin: "side_query"`);只读它的 `costMicroUsd`。 */
+    readonly account?: AccountRow;
+}
+export type SideQueryAccounting = (principal: string | undefined, r: SideQueryAccountingInput) => void;
+export declare function createSideQueryAccountant(metrics: Pick<Metrics, "inc">, costQuota?: QuotaTracker, fleetUsage?: Pick<FleetUsageBins, "record">, fleetLease?: Pick<FleetLeaseManager, "recordSpend">, quotaWeightFor?: (model: string) => number): SideQueryAccounting;
 /**
  * ⑤ Resolve a per-task budget: honor the caller's requested value but never let it EXCEED the operator
  * ceiling. `0`/unset ceiling = no limit (returns the caller's value, or undefined). A non-positive /

package/dist/budget.js

@@ -144,8 +144,8 @@ export function createSideQueryAccountant(metrics, costQuota, fleetUsage, fleetL
         const cacheRead = typeof r.usage?.cacheRead === "number" ? r.usage.cacheRead : 0;
         const cacheWrite = typeof r.usage?.cacheWrite === "number" ? r.usage.cacheWrite : 0;
         const promptTokens = input + cacheRead + cacheWrite;
-        const costTotal = typeof r.usage?.cost?.total === "number" ? r.usage.cost.total : undefined;
-        const micro = costTotal !== undefined ? Math.round(costTotal * 1_000_000) : undefined;
+        const costMicro = r.account?.costMicroUsd;
+        const micro = typeof costMicro === "number" && Number.isFinite(costMicro) ? Math.round(costMicro) : undefined;
         if (micro !== undefined && micro > 0) {
             metrics.inc("model_cost_micro_usd_total", { model: r.model }, micro);
             if (principal)

package/dist/capabilities/mcp-probe.d.ts

@@ -34,6 +34,7 @@
  */
 import { type McpServerSpec } from "@sema-agent/core";
 import type { DeclarationRefusal } from "../request-declaration-refusal.js";
+import { type McpDraft, type PeerDesk } from "../peer-seat.js";
 /**
  * 本面的**拒码闭集**(设计稿 §2 的四枚)。闭集写成型,是为了让 {@link MCP_PROBE_HTTP_STATUS} 那张表
  * 「漏一枚 = 编译红」—— [ref] 的安全轴纪律:词表是闭集,未处置的成员必须是编译错误而不是运行期惊喜。
@@ -163,25 +164,29 @@ export interface McpProbeRefusal {
     readonly facts?: DeclarationRefusal["facts"];
 }
 /**
- * `POST …/probe` 的体读器:闭形、逐条点名、零静默丢。成功 ⇒ 交给 core 的 `specs`(**原样**转发被读出来的
- * 条目,`McpServerSpec` 的可选键一个都不重写 —— 重写就是在 core 的型上做第二次投影)。
+ * `POST …/probe` 的体读器:闭形、逐条点名、零静默丢。成功 ⇒ 每条申报的**草稿**(被读出来的条目经 `toMcpDraft` 拆成声明 + 件,
+ * 声明里 `McpServerSpec` 的可选键一个都不重写 —— 重写就是在 core 的型上做第二次投影)。
  *
  * ## 申报「能不能原样用」:问提交腿 fresh 门**同一只**回答者,不另判
  * 本面只判自己那一层(体是对象、顶层只受理 `mcpServers`、这个键必填);`mcpServers` 本身 —— 列表的形、上限、每条的键名与键值 —— 全部交给
  * `task-mcp.ts` 的 `requestMcpDeclarationRefusal`,拒(码 + 句 + `unknownKeys` + 撞帽 / url 带凭据两形的机读位)原样转述:同一份申报在两扇门上只有一个答案,零拨号之前就给。
- * 回答者受理的申报由**同一只**读器(`validateRequestMcp`)交回,读器的产物就是申报本身(只差判官自己的合法归一),经 `toCoreMcpServerSpec`
- * 得到的就是一条任务提交会交给引擎的那一份 —— 本面拨的正是它。读器只在回答者受理之后才跑,所以它对重放存量 body 才有的降级留痕
- * (`source` 写坏的 F 类丢弃)不会在一次被拒的探测上虚记。
+ * 回答者受理的申报由**同一只**读器(`validateRequestMcp`)交回,读器的产物就是申报本身(只差判官自己的合法归一),经 `toMcpDraft`
+ * 拆出的草稿就是一条任务提交会交给铸点的那一份 —— 走查在自己的租约下铸它(见 {@link createMcpProbeWalk}),本面拨的正是铸出的声明。读器只在回答者受理之后才跑,
+ * 所以它对重放存量 body 才有的降级留痕(`source` 写坏的 F 类丢弃)不会在一次被拒的探测上虚记。
  *
- * ## 唯一一处按门分的后果:声明了 `assertionHeader`(引擎尚无断言头座)
+ * ## 唯一一处按门分的后果:声明了 `assertionHeader`(本部署的对端座对断言一种引用恒拒、没有断言来源)
  * 事实只有一个、读它的谓词只有一只(`specWithholdsMcpAssertionHeader`,读发送开关 `MCP_ASSERTION_HEADER_SENT`):这台 server 声明的断言头本版**承载、不发送**,交给引擎的规格里没有它。
  * 新提交照挂并给运维一行 info(`mcp_assertion_header_not_sent`;settings 面同读法);本面**整条拒** —— 拨出去的不是申报的那一份,一台握手放行、
  * 调用才要断言的对端会被答成 connected,而它的调用会被拒。判据同一只、后果按门分(与重放腿对同一组身份头「降级到升级前读法」同一个姿势);
- * 引擎长出同名座的那天,开关翻真,`toCoreMcpServerSpec` 的剥键与这一拒一起退役(`mcp-assertion-header.ts` 的退役门编译红)。
+ * 开关与它的退役门在 `mcp-assertion-header.ts`(押在对端座上)。
+ *
+ * ## 带件的申报(`transport.headers` / `transport.env`):与任务提交同一条路
+ * 件进草稿、不进声明;走查在自己的宿主租约下把件登记进部署的对端座,交给引擎的声明只带一只引用,引擎在起子进程 / 发请求时向同一只座要 ——
+ * 拨出去的就是申报的那一份,件形的判(多行值、协议自有头名 …)也是任务那一份判。
  */
 export declare function readMcpProbeBody(raw: unknown): {
     ok: true;
-    specs: McpServerSpec[];
+    drafts: McpDraft[];
 } | {
     ok: false;
     refusal: McpProbeRefusal;
@@ -194,8 +199,28 @@ export declare function readMcpProbeBody(raw: unknown): {
  * 无 principal(单用户部署上恒如此)折成 `local`:那台机器上只有一个人。
  */
 export declare function buildMcpProbeIdentity(principal: string | undefined): string;
-/** 缓存键 = `(身份, sha256(规范化 specs))`。**纯数据** ⇒ `build*`。 */
-export declare function buildMcpProbeCacheKey(principal: string | undefined, specs: readonly McpServerSpec[]): string;
+/**
+ * 一次探测问的是什么 —— 两条口各一臂,**谁写的申报**就是判别位:
+ *  · `deployment`(`GET /v1/capabilities/mcp`)= 本部署名册里这个场景挂的声明。它们起服时已在名册租约下铸过(件在对端座里、声明只带引用),
+ *    走查直接拨、不开租约、不再登记;
+ *  · `caller`(`POST …/probe`)= 调用方自带申报的草稿(声明 + 件)。走查在自己的宿主租约下经唯一铸点登记件,见 {@link createMcpProbeWalk}。
+ * 两臂的声明都由同一只座作答。缓存键、走查、失败归属(谁写的申报谁的错)都读这一只输入。
+ */
+export type McpProbeInput = {
+    readonly declaredBy: "deployment";
+    readonly specs: readonly McpServerSpec[];
+} | {
+    readonly declaredBy: "caller";
+    readonly drafts: readonly McpDraft[];
+};
+/** 这次探测申报了几台(零台 ⇒ 诚实空面,不进缓存、不占限速、不开租约)。 */
+export declare function countMcpProbeDeclarations(input: McpProbeInput): number;
+/**
+ * 缓存键 = `(身份, sha256(规范化的整份输入))`。**对输入算**:键在缓存命中 / 在途帽 / 限速三道前置拒里就要用,那时还没有登记任何件(登记在走查里),
+ * 所以只能对问的那一份算 —— 调用方臂的件在键内(只差凭据的两份申报是两次走查,与件写在声明里时同义),申报方也在键内(同一份声明在两臂上是两件事)。
+ * 部署臂的声明带的是引用,同一进程同内容同 id,换了名册的件就换了 id。键只在进程内的表里用,不出门。**纯数据** ⇒ `build*`。
+ */
+export declare function buildMcpProbeCacheKey(principal: string | undefined, input: McpProbeInput): string;
 /** 限速键(设计稿 §3:`mcp-probe:<身份>`)。**纯数据** ⇒ `build*`。 */
 export declare function buildMcpProbeRateKey(principal: string | undefined): string;
 /** 本域独占的运行期状态(每 server 实例一份 —— 模块级会把缓存与限速窗跨实例串味)。 */
@@ -281,7 +306,7 @@ export interface McpProbeWalk {
     readonly answer: Promise<McpProbeFaceBody>;
     readonly dials: Promise<unknown>;
 }
-export declare function createMcpProbeWalk(specs: readonly McpServerSpec[], principal: string | undefined, now?: () => number): McpProbeWalk;
+export declare function createMcpProbeWalk(input: McpProbeInput, principal: string | undefined, desk: PeerDesk, now?: () => number): McpProbeWalk;
 /**
  * 下标对齐的**内部断言**没过(行数 ≠ 申报数,或读数条数 ≠ 行数):core 的 `@contract mcp.probe.index_aligned` 在今天结构上保证它不发生,
  * 所以它一旦发生,是**这台服务内部的读数违约**,不是调用方的申报写错 —— 修申报修不好它。**具名型**而不是按文案或按「非 Incomplete 的 reject」分诊: