@sema-agent/server 7.137.0 → 7.139.0

package/dist/boot/runner-deps.js

@@ -32,6 +32,7 @@ export const CONFIG_ADVISORY_CLASSIFICATIONS = new Set([
     "file-history-no-store",
     "interaction-posture-refused",
     "memory-tools-not-mounted",
+    "peer-seat-hold",
     "sandbox-admission-unavailable",
     "shared-memory-not-mounted",
 ]);
@@ -131,6 +132,7 @@ export function createSharedRunnerDeps(ctx) {
         lockedConfig: ctx.governanceSeams.lockedConfig,
         retentionPolicy: ctx.governanceSeams.retentionPolicy,
         mcpRevocations: ctx.mcpRevocations ? ctx.mcpRevocations : undefined,
+        peerSeat: ctx.peerDesk.seat,
     };
     return shared;
 }

package/dist/boot/session-faces.d.ts

@@ -21,7 +21,6 @@ import type { createSessionStore } from "../plugins/session-store.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import type { FileHistoryErasureFace } from "../file-history-capture.js";
 import type { OwnerAwareSessionStore } from "../security.js";
-import type { DeviceStore } from "../device-store.js";
 import { SessionWatchRegistry } from "../session-watch.js";
 import type { TaskListLane } from "./task-list-lane.js";
 import { type RunnerDeps } from "@sema-agent/core";
@@ -48,8 +47,6 @@ export interface SessionFacesCtx {
     workflowCompletionInbox: WorkflowCompletionInbox | undefined;
     /** [ref]:会话级任务清单车道(E21 级联的一条腿)。缺席 = 装配未接本车道 ⇒ 无清单可删。 */
     taskListLane: TaskListLane | undefined;
-    /** device lane 的四表店(E21 级联的一条腿:`device_session` 绑定行随会话删)。缺席 = 非 SQL 后端。 */
-    deviceStore: DeviceStore | undefined;
     /** per-session cwd/shellEnv 登记簿的清除口(E21 级联的一条腿,codex R1-F1)。缺席 = 装配未接。 */
     dropSessionScoped: ((sid: string) => void) | undefined;
     /** [ref]:会话盒(`session.<id>`)的信箱 + 它的收件人生命周期面(E21 级联的一条腿)。**成对**在场

package/dist/boot/session-faces.js

@@ -6,11 +6,12 @@ import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
 import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 import { reapSessionBackgroundHard } from "../background-session-reap.js";
-import { probeSessionChildren, retireSessionChildren, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
+import { probeSessionChildren, retireSessionChildren, sessionChildrenScope, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
+import { SessionActiveRunError } from "../execution-placement.js";
 import { headReadOf, redactIncarnations } from "../session-incarnation.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -49,7 +50,7 @@ export function createSessionFaces(ctx) {
                     return { deleted: false };
                 spaceKey = spaceReclaimer !== undefined ? head.incarnation : undefined;
             }
-            const childScope = owner ?? "default";
+            const childScope = sessionChildrenScope(owner);
             const reach = await probeSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
             if (!reach.reachable) {
                 logger.warn("session_delete_children_still_alive", { sessionId, remaining: reach.unreachableHandles.length, handles: reach.unreachableHandles });
@@ -60,8 +61,8 @@ export function createSessionFaces(ctx) {
                 return { active: runs.active };
             {
                 const children = await retireSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
-                if (children.found > 0)
-                    logger.info("session_children_retired", { sessionId, found: children.found, stopped: children.stopped, rounds: children.rounds });
+                if (children.observed.length > 0)
+                    logger.info("session_children_retired", { sessionId, found: children.observed.length, stopped: children.stopped, rounds: children.rounds });
                 if (children.stopped === "incomplete") {
                     logger.warn("session_delete_children_stop_incomplete", { sessionId, remaining: children.remainingHandles.length, handles: children.remainingHandles });
                     throw new SessionChildrenStopIncompleteError(sessionId, children.remainingHandles.length);
@@ -91,8 +92,6 @@ export function createSessionFaces(ctx) {
                 await userInputLedgerStore.deleteBySession(sessionId);
             if (taskListLane)
                 await taskListLane.deleteBySession(sessionId);
-            if (deviceStore)
-                await deviceStore.deleteByRootSession(sessionId);
             dropSessionScoped?.(sessionId);
             if (fileHistoryErasure) {
                 if (typeof fileHistoryErasure.deleteBySession === "function")
@@ -122,7 +121,15 @@ export function createSessionFaces(ctx) {
             }
             if (peerBox !== undefined)
                 await peerBox.store.drop(peerBox.scope, peerBox.handle);
-            const historyDeleted = await ownerAware.deleteSession(sessionId, owner);
+            let historyDeleted;
+            try {
+                historyDeleted = await ownerAware.deleteSession(sessionId, owner);
+            }
+            catch (err) {
+                if (err instanceof SessionActiveRunError)
+                    return { active: err.activeTaskId };
+                throw err;
+            }
             sessionWatchRegistry?.dropSession(sessionId);
             if (historyDeleted && spaceReclaimer !== undefined && spaceKey !== undefined) {
                 void spaceReclaimer.reclaim([{ sessionId, spaceKey }]).catch((err) => {

package/dist/boot/stage-02-web-admin-pull.js

@@ -1,7 +1,7 @@
 import { createUnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import { createWebAdminRuntime } from "./web-admin.js";
 import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
-import { serviceConfigSourceKind } from "../config-provider.js";
+import { configSourceKind } from "../config-provider.js";
 import { logConfigDirMigration, migrateLocalConfigDirectory } from "../config-d-migration.js";
 import { assertLocalConfigDirTrusted } from "../config-dir-trust.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "../model-entry-refusal.js";
@@ -10,7 +10,7 @@ import { judgeServedModelRoute } from "../model-route-endpoint.js";
 import { servedModelTableLeg } from "../model-select.js";
 export async function runStage02(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
-    const configSource = serviceConfigSourceKind(config);
+    const configSource = configSourceKind(config);
     if (configSource === "local") {
         await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: config.configLocalOwnerUid });
         logConfigDirMigration(logger, await migrateLocalConfigDirectory(localRoot));

package/dist/boot/stage-04-stores.d.ts

@@ -27,18 +27,7 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-05-execution-env.d.ts

@@ -1,7 +1,9 @@
 import type { runStage04 } from "./stage-04-stores.js";
 export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>): Promise<{
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -44,18 +46,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-05-execution-env.js

@@ -1,4 +1,4 @@
-import { assertDeploymentModsAdmitted, createDeploymentMods } from "./deployment-mods.js";
+import { assembleDeploymentMods } from "./deployment-mods.js";
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
 import { assertDeviceLaneWired, createDeviceLane } from "./device-lane.js";
 import { assertWorkspaceSpaceReadable, createExecutionEnv } from "./execution-env.js";
@@ -7,9 +7,10 @@ import * as facts from "../capability-facts.js";
 import { sessionStoreLabelOf } from "../store-posture.js";
 import { runStore } from "./late-binds.js";
 import { SANDBOX_GIT_PLANE_OFF_TEXT } from "../sandbox-git-plane.js";
+import { createPeerDesk } from "../peer-seat.js";
 export async function runStage05(ctx) {
     const { backend, config, instanceId, logger, metrics, sessionStore, taskAttachmentStore } = ctx;
-    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, replicaId: instanceId }) : undefined;
+    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
     const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, readSandboxGitPlane, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
@@ -23,10 +24,12 @@ export async function runStage05(ctx) {
     else if (sandboxGitPlane.reason !== "single_user" && sandboxGitPlane.reason !== "lane_without_boundary") {
         logger.info("credential_plane_sandbox_git", { state: "off", reason: sandboxGitPlane.reason, why: SANDBOX_GIT_PLANE_OFF_TEXT[sandboxGitPlane.reason] });
     }
-    const deploymentMods = createDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config) });
     if (config.toolTrace)
         logger.info("tool_trace_enabled", {});
-    await assertDeploymentModsAdmitted(deploymentMods);
-    return { ...ctx, deploymentMods, deviceLane, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
+    const { registrations: deploymentMods, loaded: deploymentModsLoaded } = await assembleDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config), declaration: config.modsDeclaration, logger });
+    const peerDesk = createPeerDesk({ log: logger });
+    metrics.dynamicGauge("peer_registry_entries", "Peer desk entries (declared peer credentials registered for in-flight legs and the roster)", () => peerDesk.size().entries);
+    metrics.dynamicGauge("peer_registry_holders", "Peer desk holders of entries (host leases and engine holds), summed across entries", () => peerDesk.size().holders);
+    return { ...ctx, deploymentMods, deploymentModsLoaded, deviceLane, peerDesk, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map

package/dist/boot/stage-06-runners.d.ts

@@ -64,7 +64,9 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -107,18 +109,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-06-runners.js

@@ -28,8 +28,9 @@ import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-author
 import { mountOrgDeliveryGate } from "./org-delivery.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
+import { retentionSweepRuns } from "../plugins/retention-store-sql.js";
 export async function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, engineDataRoot, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, workflowParkDecisions, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const parkCommitted = backend?.checkpoint && config.durableApproval ? createParkCommitWatch(backend.checkpoint(logger)) : undefined;
     const checkpointStore = parkCommitted?.store;
@@ -69,7 +70,6 @@ export async function runStage06(ctx) {
     const retentionLaneStore = backend?.retentionLane?.();
     assertRetentionLaneWirable({
         intervalSec: config.retentionSweep.intervalSec,
-        policy: config.retentionPolicy,
         executor: retentionExecutor,
         stores: [
             { name: "sessionStore", store: sessionStore },
@@ -125,7 +125,7 @@ export async function runStage06(ctx) {
             { name: "checkpointStore", store: checkpointStore },
             { name: "toolResultStore", store: runnerOffloadStore },
         ],
-        retentionExecutorWired: config.retentionSweep.intervalSec > 0 && retentionExecutor !== undefined && retentionLaneStore !== undefined,
+        retentionExecutor: retentionSweepRuns(config.retentionSweep) ? (retentionExecutor ?? null) : null,
     });
     const mcpRevocations = webAdmin.takeMcpRevocations();
     const workflowModelAllowlistSnapshot = workflowModelAllowlistFor(config) ?? [];
@@ -136,6 +136,7 @@ export async function runStage06(ctx) {
         config, logger, metrics, localRoot, promptSource: webAdmin.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
         pricing, tracer, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine,
         engineDataRoot,
+        peerDesk,
         sessionCaptureRecords,
         memorySyncRunner, toolResultStore: runnerOffloadStore, checkpointStore, sessionPolicyStore, runtimeCapsResolver, fileHistoryStore,
         permissionRuleStore: permissionRuleProvider,
@@ -220,6 +221,7 @@ export async function runStage06(ctx) {
             governanceSeams,
             sharedMemoryStores: sharedMemoryStore ? sharedMemoryStore : undefined,
             engineDataRoot,
+            peerDesk,
         }),
         sessionStore: subRunnerSessions,
         onBackgroundChildEvent: runnerDeps.onBackgroundChildEvent ? runnerDeps.onBackgroundChildEvent : undefined,

package/dist/boot/stage-07-capability-layer.d.ts

@@ -80,7 +80,9 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -123,18 +125,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -29,7 +29,7 @@ import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
 import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 export async function runStage07(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, peerDesk, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore);
     const runStore = backend ? backend.run() : undefined;
     bindRunStore(runStore);
@@ -153,7 +153,7 @@ export async function runStage07(ctx) {
         : new RateLimiter(config.rateLimitPerMin);
     bindRateLimiter(rateLimiter);
     let skills = loadDeploymentSkills(config, logger);
-    skills = await webAdmin.applyCenterCapabilities(skills);
+    skills = await webAdmin.applyCenterCapabilities(skills, peerDesk, peerDesk.lease("roster"));
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();
     const webSearch = webSearchCfg ? createWebSearchBackend(webSearchCfg) : undefined;

package/dist/boot/stage-08-reapers.d.ts

@@ -93,7 +93,9 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -136,18 +138,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-09-leader.d.ts

@@ -117,7 +117,9 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -160,18 +162,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;

package/dist/boot/stage-09-leader.js

@@ -6,9 +6,8 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, checkpointCtxSealing, config, webAdmin, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, spaceReclaimer, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, checkpointCtxSealing, config, webAdmin, deploymentMods, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, spaceReclaimer, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
-        deviceStore: deviceLane?.store,
         dropSessionScoped,
         config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
         resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure,
@@ -17,7 +16,7 @@ export function runStage09(ctx) {
         userInputLedgerStore,
         ...(spaceReclaimer !== undefined ? { spaceReclaimer } : {}),
     });
-    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, checkpointCtxSealing, governanceSeams, backend, tracer, usageWindowStore, promptSource: webAdmin.promptSource, onError: runnerDeps.onError });
+    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, checkpointCtxSealing, governanceSeams, backend, tracer, usageWindowStore, promptSource: webAdmin.promptSource, onError: runnerDeps.onError, deploymentMods });
     const drainState = { draining: false };
     const authBridgeIssuer = authBridgeIssuerOf(config)?.issuer;
     const webAdminJwtVerifier = authBridgeIssuer

package/dist/boot/stage-10-http-server.d.ts

@@ -116,7 +116,9 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     workflowsCapable: boolean;
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
+    deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
+    peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
@@ -159,18 +161,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     ruleConsent: import("../rules-consent.js").RuleConsentLane | undefined;
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
-    sideQueryAccounting: (principal: string | undefined, r: {
-        model: string;
-        usage?: {
-            input?: number;
-            output?: number;
-            cacheRead?: number;
-            cacheWrite?: number;
-            cost?: {
-                total?: number;
-            };
-        };
-    }) => void;
+    sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../plugins/store-backend.js").StoreBackend | undefined;

package/dist/boot/stage-10-http-server.js

@@ -29,7 +29,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
+    const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentModsLoaded, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -105,6 +105,7 @@ export async function runStage10(ctx) {
         sessionMirrorRuling: principalCaps
             ? async (p) => (await principalCaps.executionRuling(p))?.sessionMirror
             : undefined,
+        executionRuling: principalCaps ? (p) => principalCaps.executionRuling(p) : undefined,
         instrumentDegenerate,
         sideQueryAccounting,
         parkedReviveSurface: parkedReviveSurface ? parkedReviveSurface : undefined,
@@ -118,7 +119,6 @@ export async function runStage10(ctx) {
         planCacheProbe,
     };
     const governance = {
-        authorize,
         webAdminJwtVerifier: webAdminJwtVerifier ? webAdminJwtVerifier : undefined,
         rateLimiter,
         costQuota,
@@ -169,6 +169,7 @@ export async function runStage10(ctx) {
         webSearchProvider,
         sealedKeyPublic: webAdmin.sealedKeyPublic,
         sandboxGitPlane,
+        deploymentModPackages: deploymentModsLoaded.length,
         instanceId,
         capabilities: {
             version: serviceVersion(),
@@ -199,6 +200,7 @@ export async function runStage10(ctx) {
     };
     const resolveSpec = createResolveSpec({
         config, logger, metrics, localRoot, scenarios, loadedSkills, principalCaps, centerRuntimeCapsResolver,
+        peerDesk,
         getKeyResolver: () => webAdmin.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
@@ -212,7 +214,7 @@ export async function runStage10(ctx) {
     const runnerFor = createHandsRunnerSelector({ full: runner, handsless: handslessRunner });
     const sideQuery = createSideQueryLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver() });
     const scenarioGate = createScenarioGate({ config, scenarios, principalCaps, logger }, "peek");
-    const server = createHttpServer({ runner, runnerFor, sideQuery, scenarioGate, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
+    const server = createHttpServer({ runner, runnerFor, sideQuery, scenarioGate, peerDesk, config, authorize, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
     bindServerLateSeats({ config, logger, server });
     const fleetReconcile = startFleetReconciler({
         bus: fleetBus,

package/dist/boot/stores.js

@@ -1,7 +1,7 @@
 import { join } from "node:path";
 import { FileBackgroundAgentStore, FileMailboxStore, FileRosterStore, InMemoryUsageWindowStore, mailboxCrossProcessMountVerdict } from "@sema-agent/core";
 import { createCorruptReadFailOpenSeat } from "../observability/corrupt-read-seat.js";
-import { createMemorySyncRunner, createMemorySyncTransport } from "../memory-sync-client.js";
+import { buildMemorySyncEnabledFields, createMemorySyncRunner, createMemorySyncTransport } from "../memory-sync-client.js";
 import { memoryEmbedderFor } from "../plugins/memory-embedder.js";
 import { ensurePgMemoryEmbedderMetaSchema, reconcileEmbedderFingerprint } from "../plugins/memory-embedder-fingerprint.js";
 import { PgMemoryEngineBackend, ensurePgMemoryEngineSchema } from "../plugins/memory-engine-pg.js";
@@ -39,7 +39,6 @@ import { buildMemoryPosture } from "../memory-posture.js";
 import { headReadOf } from "../session-incarnation.js";
 import { establishSqlEnginePosture, sqlPoolsOf } from "../sql-engine-posture.js";
 import { buildStorePosture } from "../store-posture.js";
-import { buildDisplaySafeUrl } from "../trace/redact.js";
 const DARK_REASON_PROSE = {
     engine_off: () => "MEMORY_ENGINE=off",
     multi_tenant_file_backend: () => "multi-tenant on the FILE backend (no tenant isolation; set MEMORY_ENGINE_BACKEND=pg|tidb to light up)",
@@ -364,16 +363,17 @@ export async function openStores(ctx) {
     let memorySyncRunner;
     if (config.memorySync) {
         if (memoryEngine) {
+            const transport = createMemorySyncTransport({ url: config.memorySync.url, token: config.memorySync.token });
             memorySyncRunner = createMemorySyncRunner({
                 backend: memoryEngine.backend,
                 scope: config.memorySync.scope,
                 memoryRoot: memoryEngine.root,
-                transport: createMemorySyncTransport({ url: config.memorySync.url, token: config.memorySync.token }),
+                transport,
                 log: logger,
                 ...(config.memorySync.maxPushEntries !== undefined ? { maxPushEntries: config.memorySync.maxPushEntries } : {}),
                 ...(config.memorySync.maxPullEntries !== undefined ? { maxPullEntries: config.memorySync.maxPullEntries } : {}),
             });
-            logger.info("memory_sync_enabled", { url: buildDisplaySafeUrl(config.memorySync.url), scope: config.memorySync.scope, cursorPath: memorySyncRunner.cursorPathFor(config.memorySync.scope) });
+            logger.info("memory_sync_enabled", buildMemorySyncEnabledFields(transport.peer, config.memorySync.scope, memorySyncRunner.cursorPathFor(config.memorySync.scope)));
             memorySyncRunner.trigger("boot");
         }
         else {

package/dist/boot/web-admin.d.ts

@@ -20,6 +20,7 @@ import { type CandidateRejection } from "../web-admin-client/candidate-gate.js";
 import { type ConfigApplyLedgerView } from "../web-admin-client/apply-ledger.js";
 import type { CenterPullView } from "../web-admin-client/pull-state.js";
 import type { LimitSync } from "./limit-sync.js";
+import type { PeerDesk, PeerLease } from "../peer-seat.js";
 export interface WebAdminRuntimeCtx {
     config: ServiceConfig;
     logger: Logger;
@@ -53,8 +54,10 @@ export interface WebAdminRuntime {
     readonly checkpointCtxSealing: CheckpointCtxSealing | undefined;
     /** core `CenterPromptSource`(RunnerDeps / subRunner 必须同实例)。 */
     readonly promptSource: CenterPromptSource;
-    /** center skills overlay → plugins 消费 → boot LKG 落盘/skill-stale 判定 → mcp 解析。返回新的 skills 表。 */
-    applyCenterCapabilities(skills: LoadedSkill[]): Promise<LoadedSkill[]>;
+    /** center skills overlay → plugins 消费 → boot LKG 落盘/skill-stale 判定 → mcp / a2a 解析。返回新的 skills 表。
+     *  名册(mcp / a2a 两域)条目的件在 `rosterLease`(起服开一只、进程寿命不放)下登记进 `desk`,`config.mcpServers` / `config.a2aPeers`
+     *  里是带引用、不带件值的声明。 */
+    applyCenterCapabilities(skills: LoadedSkill[], desk: Pick<PeerDesk, "declare">, rosterLease: PeerLease): Promise<LoadedSkill[]>;
     /** center 声明场景 overlay(就地写进传入的两张表)。 */
     applyCenterScenarios(t: CenterScenarioOverlayTargets): void;
     /** per-model key resolver 首建(原位调用,见文件头注 5)。 */

package/dist/boot/web-admin.js

@@ -17,7 +17,7 @@ import { answerStillCurrent, centerStateBin, credentialIdentityNow, judgeCenterC
 import { createCenterConfigTier } from "../center-config-tier.js";
 import { buildCenterCredentialHealthView, createCenterCredentialRenewer } from "../center-credential-renewer.js";
 import { centerManagedConfigKeys } from "../web-admin-client/apply-effective.js";
-import { createConfigProvider, raceBootFetch, serviceConfigSourceKind, BOOT_FETCH_DEFERRED } from "../config-provider.js";
+import { configSourceKind, createConfigProvider, raceBootFetch, BOOT_FETCH_DEFERRED } from "../config-provider.js";
 import { ConfigDirUntrustedError } from "../config-dir-trust.js";
 import { createKeyResolver } from "../key-resolver.js";
 import { buildSealedKeyPublicFace, ensureCheckpointCtxSealing, ensureSealedKeyStore, reportExecutionPublicKey } from "../sealed-key.js";
@@ -161,7 +161,7 @@ export async function createWebAdminRuntime(ctx) {
     catch (err) {
         logger.warn("checkpoint_ctx_sealing_unavailable", { err: err instanceof Error ? err.message : String(err), dir: join(sealedKeyDir, "checkpoint-ctx-keys"), note: "suspended tasks' request credentials cannot be sealed on this host; with durable approvals on the boot refuses — make that directory (under the sealed-key custody directory: SEALED_KEY_DIR, default <data root>/sealed-key) creatable and chmod-able by the service, or repair / remove a key file there whose public and private halves do not belong together" });
     }
-    const configProvider = serviceConfigSourceKind(config) !== undefined
+    const configProvider = configSourceKind(config) !== undefined
         ? createConfigProvider({
             ...(config.configProvider ? { provider: config.configProvider } : {}),
             ...(cc ? { webAdmin: { baseUrl: cc.baseUrl, credential: cc.credential, worker: cc.worker, dryRun: cc.dryRun } } : {}),
@@ -735,7 +735,7 @@ export async function createWebAdminRuntime(ctx) {
                 return "not-wired";
             return (await manualRefresh()) === "failed" ? "failed" : "triggered";
         },
-        async applyCenterCapabilities(skills) {
+        async applyCenterCapabilities(skills, desk, rosterLease) {
             if (effective?.skills)
                 skills = await applySkillsManifest(skills, effective.skills, candidateSource(), logger);
             if (effective?.plugins !== undefined) {
@@ -775,10 +775,10 @@ export async function createWebAdminRuntime(ctx) {
                 }
             }
             if (effective?.mcp)
-                config.mcpServers = resolveMcpServers(effective.mcp, logger);
+                config.mcpServers = resolveMcpServers(effective.mcp, desk, rosterLease, logger);
             mcpRevocations.applyEnabledEntries(enabledMcpEntries(effective?.mcp), { isBaseline: true });
             if (effective?.a2a)
-                config.a2aPeers = resolveA2aPeers(effective.a2a, logger);
+                config.a2aPeers = resolveA2aPeers(effective.a2a, desk, rosterLease, logger);
             return skills;
         },
         applyCenterScenarios(t) {