@sema-agent/server 7.141.0 → 7.143.0

package/dist/boot/web-admin.js

@@ -18,6 +18,7 @@ import { createCenterConfigTier } from "../center-config-tier.js";
 import { buildCenterCredentialHealthView, createCenterCredentialRenewer } from "../center-credential-renewer.js";
 import { centerManagedConfigKeys } from "../web-admin-client/apply-effective.js";
 import { configSourceKind, createConfigProvider, raceBootFetch, BOOT_FETCH_DEFERRED } from "../config-provider.js";
+import { REMOTE_CATALOG_SOURCE } from "../env-model-table-gate.js";
 import { ConfigDirUntrustedError } from "../config-dir-trust.js";
 import { createKeyResolver } from "../key-resolver.js";
 import { buildSealedKeyPublicFace, ensureCheckpointCtxSealing, ensureSealedKeyStore, reportExecutionPublicKey } from "../sealed-key.js";
@@ -30,7 +31,7 @@ import { CONFIG_DOMAIN_INVALID_NOTE, buildCandidateRejectedFields, candidateReje
 import { SHA256_HEX_RE } from "../digest-form.js";
 import { BOOT_REJUDGE_OF_REFUSED_GROUP, createConfigApplyLedger, modelPlaneCommitted, refusedGroups } from "../web-admin-client/apply-ledger.js";
 import { announceReadDenyRows, buildDeploymentPostureSeats } from "./runner-deps.js";
-import { echoCallerText } from "../caller-text-echo.js";
+import { seatText } from "../trace/exit-seat.js";
 const MODELS_REJECTION_PHRASE = {
     domain_invalid: "models 域判形失败",
     empty: "读不出(空 / 纯空白:半写或截断)",
@@ -55,11 +56,14 @@ export async function createWebAdminRuntime(ctx) {
     let latestEffective;
     let candidateRejection;
     let judgedOrdinal = 0;
-    const noteCandidateVerdict = (ordinal, rejection) => {
+    let arrivalSeq = 0;
+    const admitArrival = (ordinal, rejection) => {
         if (ordinal < judgedOrdinal)
-            return;
+            return { seq: undefined };
         judgedOrdinal = ordinal;
         candidateRejection = rejection;
+        arrivalSeq += 1;
+        return { seq: arrivalSeq };
     };
     const applyLedger = createConfigApplyLedger();
     let lastPull = "none";
@@ -88,6 +92,7 @@ export async function createWebAdminRuntime(ctx) {
     let bootSkillStale = false;
     let pendingRestart;
     let modelRefusals;
+    let modelRefusalsArrival;
     const cc = config.webAdmin;
     const bootCredential = cc?.credential.read();
     const bootVerdict = bootCredential === undefined ? undefined : judgeCenterCredentialAtBoot(bootCredential);
@@ -161,14 +166,14 @@ export async function createWebAdminRuntime(ctx) {
                 `refusing to start rather than run with every sealed model unusable (no_key_store). Make that directory creatable, owned by ` +
                 `the service user and chmod-able to 0700 on a writable filesystem, or unset SEALED_KEY_DIR to use <data root>/sealed-key.`);
         }
-        logger.warn("sealed_key_store_unavailable", { err: String(err), note: "sealed api keys cannot be unsealed on this host — models carrying sealedApiKey will fail loud per-model" });
+        logger.warn("sealed_key_store_unavailable", { err: seatText("operator-log-text", String(err)), note: "sealed api keys cannot be unsealed on this host — models carrying sealedApiKey will fail loud per-model" });
     }
     let checkpointCtxSealing;
     try {
         checkpointCtxSealing = await ensureCheckpointCtxSealing(sealedKeyDir, logger);
     }
     catch (err) {
-        logger.warn("checkpoint_ctx_sealing_unavailable", { err: err instanceof Error ? err.message : String(err), dir: join(sealedKeyDir, "checkpoint-ctx-keys"), note: "suspended tasks' request credentials cannot be sealed on this host; with durable approvals on the boot refuses — make that directory (under the sealed-key custody directory: SEALED_KEY_DIR, default <data root>/sealed-key) creatable and chmod-able by the service, or repair / remove a key file there whose public and private halves do not belong together" });
+        logger.warn("checkpoint_ctx_sealing_unavailable", { err: seatText("operator-log-text", err instanceof Error ? err.message : String(err)), dir: join(sealedKeyDir, "checkpoint-ctx-keys"), note: "suspended tasks' request credentials cannot be sealed on this host; with durable approvals on the boot refuses — make that directory (under the sealed-key custody directory: SEALED_KEY_DIR, default <data root>/sealed-key) creatable and chmod-able by the service, or repair / remove a key file there whose public and private halves do not belong together" });
     }
     const configProvider = configSourceKind(config) !== undefined
         ? createConfigProvider({
@@ -208,7 +213,7 @@ export async function createWebAdminRuntime(ctx) {
         const domains = verdict.domains.join(",");
         if (candidateRejection?.version === r.effective.version && candidateRejection.domains.join(",") === domains)
             return;
-        noteCandidateVerdict(ordinal, candidateRejectionOf(r, verdict, candidateSource().kind, Date.now()));
+        admitArrival(ordinal, candidateRejectionOf(r, verdict, candidateSource().kind, Date.now()));
         logger.warn("config_candidate_rejected", buildCandidateRejectedFields(r, verdict, leg, { lkgVersion: latestEffective?.version ?? "(env)", ...localDirField }));
     };
     const noteSourceAtApplied = () => {
@@ -217,7 +222,7 @@ export async function createWebAdminRuntime(ctx) {
         if (rejected === undefined || rejected.version === appliedVersion)
             return;
         const gen = generationOf(appliedVersion);
-        noteCandidateVerdict(gen, undefined);
+        admitArrival(gen, undefined);
         if (!cc?.dryRun)
             applyLedger.applied(gen, appliedVersion);
         logger.info("config_source_back_to_applied", {
@@ -234,7 +239,7 @@ export async function createWebAdminRuntime(ctx) {
                 listener(changed);
             }
             catch (err) {
-                logger.warn("self_report_listener_failed", { changed, error: err instanceof Error ? err.message : String(err), note: "a self-report subscriber threw; the state change stands regardless and the next fleet heartbeat carries it" });
+                logger.warn("self_report_listener_failed", { changed, error: seatText("operator-log-text", err instanceof Error ? err.message : String(err)), note: "a self-report subscriber threw; the state change stands regardless and the next fleet heartbeat carries it" });
             }
         }
     };
@@ -258,8 +263,9 @@ export async function createWebAdminRuntime(ctx) {
         if (!same)
             notifySelfReport("model_refusals");
     };
-    const recordApply = (rep) => {
+    const recordApply = (rep, ticket) => {
         applyLedger.recordApply(rep);
+        modelRefusalsArrival = ticket.seq;
         publishModelRefusals(buildModelRefusalsSignal(rep.modelRefusals));
     };
     let adoptedArtifact;
@@ -326,7 +332,7 @@ export async function createWebAdminRuntime(ctx) {
             });
         }
         catch (e) {
-            logger.warn("center_prompts_store_unwritable", { dir: promptEpochDir, err: String(e), note: "file-backed prompt-epoch store unavailable — memory fallback (the center candidate is not restart-durable); built-ins unaffected" });
+            logger.warn("center_prompts_store_unwritable", { dir: promptEpochDir, err: seatText("operator-log-text", String(e)), note: "file-backed prompt-epoch store unavailable — memory fallback (the center candidate is not restart-durable); built-ins unaffected" });
             return new CenterPromptSource({
                 store: withByDigestBackfill(new MemoryPromptArtifactStore()),
                 stateStore: recordingStateStore(binnedPromptStateStore(storePerBin(() => new MemoryPromptSourceStateStore()))),
@@ -349,7 +355,7 @@ export async function createWebAdminRuntime(ctx) {
             await promptSource.restore();
         }
         catch (e) {
-            logger.warn("center_prompts_catalog_restore_failed", { phase, err: String(e), note: "the persisted center-layer state for this credential identity could not be loaded — the center candidate is absent until the next adopt; built-ins unaffected" });
+            logger.warn("center_prompts_catalog_restore_failed", { phase, err: seatText("operator-log-text", String(e)), note: "the persisted center-layer state for this credential identity could not be loaded — the center candidate is absent until the next adopt; built-ins unaffected" });
         }
         if (cc !== undefined && identity !== undefined && currentIdentity() !== identity) {
             promptStateIdentity = undefined;
@@ -474,7 +480,7 @@ export async function createWebAdminRuntime(ctx) {
             return lkgSurvivesRestart;
         }
         catch (err) {
-            logger.warn("config_lkg_save_failed", { path: lkgPath, err: String(err), note: "durable persist failed — restart signal proceeds anyway (a dead disk + dead center double-fault can re-loop; fix the disk)" });
+            logger.warn("config_lkg_save_failed", { path: lkgPath, err: seatText("operator-log-text", String(err)), note: "durable persist failed — restart signal proceeds anyway (a dead disk + dead center double-fault can re-loop; fix the disk)" });
             return false;
         }
     };
@@ -511,26 +517,28 @@ export async function createWebAdminRuntime(ctx) {
                     await saveLkg(lkgPath, cc?.worker, identity, read.lkg.effective, read.lkg.etag);
                 }
                 catch (err) {
-                    logger.warn("config_lkg_save_failed", { path: lkgPath, err: String(err), note: "the migrated LKG is used from memory this boot; the on-disk copy is migrated again on the next read-back and replaced by the next clean candidate" });
+                    logger.warn("config_lkg_save_failed", { path: lkgPath, err: seatText("operator-log-text", String(err)), note: "the migrated LKG is used from memory this boot; the on-disk copy is migrated again on the next read-back and replaced by the next clean candidate" });
                 }
             }
             logger.info("config_loaded_lkg", { path: lkgPath, savedAt: read.lkg.savedAt, why, scope, note: lkgReadNote(scope) });
             const lkgEffective = read.lkg.effective;
             candidateIdentity.set(lkgEffective, identity);
             bindValidator(read.lkg.etag, identity);
-            return { effective: lkgEffective, ...(read.lkg.etag !== undefined ? { etag: read.lkg.etag } : {}), prompts: read.prompts };
+            return { effective: lkgEffective, ...(read.lkg.etag !== undefined ? { etag: read.lkg.etag } : {}), prompts: read.prompts, catalogSource: REMOTE_CATALOG_SOURCE };
         };
         const bootApplyLkgInline = async (lkgR) => {
             const lkgGen = generationOf(lkgR.effective.version);
             applyLedger.seenTarget(lkgGen, lkgR.effective.version);
+            const lkgArrival = admitArrival(lkgGen, undefined);
             let lkgReport;
             applyEffective(config, lkgR.effective, logger, {
                 leg: "boot",
+                catalogSource: lkgR.catalogSource,
                 sealedKeys,
                 generation: lkgGen,
                 report: (rep) => {
                     lkgReport = rep;
-                    recordApply(rep);
+                    recordApply(rep, lkgArrival);
                 },
             });
             const lkgIdentity = candidateIdentityOf(lkgR.effective);
@@ -562,7 +570,7 @@ export async function createWebAdminRuntime(ctx) {
             }
             catch (applyErr) {
                 lkgBooted = false;
-                logger.warn("config_lkg_apply_failed", { err: String(applyErr), note: "persisted LKG failed to apply — env fallback serves; the cache rewrites on the next clean candidate" });
+                logger.warn("config_lkg_apply_failed", { err: seatText("operator-log-text", String(applyErr)), note: "persisted LKG failed to apply — env fallback serves; the cache rewrites on the next clean candidate" });
             }
         };
         const warnLocalNoModels = (r, verdict) => {
@@ -613,7 +621,7 @@ export async function createWebAdminRuntime(ctx) {
                     }
                     else {
                         warnReadNotices(r, "boot");
-                        logEffectiveDiff(config, r.effective, logger);
+                        logEffectiveDiff(config, r.effective, r.catalogSource, logger);
                         ccEtag = r.etag;
                     }
                 }
@@ -631,14 +639,16 @@ export async function createWebAdminRuntime(ctx) {
                         warnReadNotices(r, "boot");
                         const bootGen = generationOf(r.effective.version);
                         applyLedger.seenTarget(bootGen, r.effective.version);
+                        const bootArrival = admitArrival(bootGen, undefined);
                         let bootReport;
                         applyEffective(config, r.effective, logger, {
                             leg: "boot",
+                            catalogSource: r.catalogSource,
                             sealedKeys,
                             generation: bootGen,
                             report: (rep) => {
                                 bootReport = rep;
-                                recordApply(rep);
+                                recordApply(rep, bootArrival);
                             },
                         });
                         markApplied(bootGen, r.effective);
@@ -651,7 +661,7 @@ export async function createWebAdminRuntime(ctx) {
                             const lkgPlane = await bootFromLkg("boot candidate's model plane was refused", "model-plane");
                             if (lkgPlane) {
                                 let planeReport;
-                                applyEffective(config, withModelPlaneOf(r.effective, lkgPlane.effective), logger, { leg: "boot", sealedKeys, generation: bootGen, report: (rep) => (planeReport = rep) });
+                                applyEffective(config, withModelPlaneOf(r.effective, lkgPlane.effective), logger, { leg: "boot", catalogSource: lkgPlane.catalogSource, sealedKeys, generation: bootGen, report: (rep) => (planeReport = rep) });
                                 if (modelPlaneCommitted(planeReport)) {
                                     bootPlaneEff = lkgPlane.effective;
                                     logger.warn("config_model_plane_from_lkg", { version: r.effective.version, lkgVersion: lkgPlane.effective.version, note: "the live candidate's model plane was refused at boot — serving the LKG's model plane (the catalog and what rides with it) with the live candidate's other groups; the refresh cadence re-judges the candidate" });
@@ -681,10 +691,10 @@ export async function createWebAdminRuntime(ctx) {
             if (err instanceof ConfigDirUntrustedError)
                 throw err;
             if (bootApplyPhase)
-                logger.warn("config_apply_refused", { source: configProvider.kind, err: String(err), note: "the pulled candidate failed to apply at boot — falling back to the LKG / env; this is not a reachability failure" });
+                logger.warn("config_apply_refused", { source: configProvider.kind, err: seatText("operator-log-text", String(err)), note: "the pulled candidate failed to apply at boot — falling back to the LKG / env; this is not a reachability failure" });
             else
-                logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: String(err) });
-            await bootFallBackWhole(`${bootApplyPhase ? "boot apply refused" : "boot fetch failed"}: ${echoCallerText(String(err), { maxChars: 120 })}`);
+                logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: seatText("operator-log-text", String(err)) });
+            await bootFallBackWhole(`${bootApplyPhase ? "boot apply refused" : "boot fetch failed"}: ${seatText("operator-log-text", String(err))}`);
         }
         if (!dryRun && cc !== undefined && currentIdentity() !== promptStateIdentity)
             await rebasePromptState(currentIdentity(), "boot-end");
@@ -746,6 +756,7 @@ export async function createWebAdminRuntime(ctx) {
         restartState: () => buildRestartSignal(pendingRestart, planeDeferredNoHandoff),
         configHandoffState: () => (configProvider === undefined || configProvider.kind === "local" || !lkgSurvivesRestart ? undefined : buildConfigHandoff(latchHandoff(), handoffMissingSince)),
         modelRefusalsState: () => modelRefusals,
+        latestPlaneRefusalState: () => (modelRefusals?.plane !== undefined && modelRefusalsArrival !== undefined && modelRefusalsArrival === arrivalSeq ? modelRefusals.plane : undefined),
         candidateRejectionState: () => (cc?.dryRun ? undefined : candidateRejection),
         configApplyState: () => (configProvider ? applyLedger.view() : undefined),
         centerPullState: () => {
@@ -770,7 +781,7 @@ export async function createWebAdminRuntime(ctx) {
                     toolsShareThisFilesystem: DEPLOYMENT_SHAPE_PREDICATES.toolsOnThisHost.holds(config),
                     logger,
                 }).catch((err) => {
-                    logger.warn("center_plugins_apply_failed", { error: err instanceof Error ? err.message : String(err) });
+                    logger.warn("center_plugins_apply_failed", { error: seatText("operator-log-text", err instanceof Error ? err.message : String(err)) });
                     return undefined;
                 });
                 if (pluginOut) {
@@ -782,7 +793,7 @@ export async function createWebAdminRuntime(ctx) {
             }
             if (bootLkgCandidate && lkgEnabled) {
                 const bootPublished = await persistLkgDurable(bootLkgCandidate.effective, bootLkgCandidate.etag).catch((err) => {
-                    logger.warn("config_lkg_save_failed", { err: String(err), note: "boot LKG persist failed — retained for the per-tick retry" });
+                    logger.warn("config_lkg_save_failed", { err: seatText("operator-log-text", String(err)), note: "boot LKG persist failed — retained for the per-tick retry" });
                     return false;
                 });
                 {
@@ -905,11 +916,12 @@ export async function createWebAdminRuntime(ctx) {
                     const committed = applyEffective(config, eff, logger, {
                         leg: "hot",
                         checkpointStorePresent,
+                        catalogSource: c.catalogSource,
                         sealedKeys,
                         generation: gen,
                         report: (rep) => {
                             report = rep;
-                            recordApply(rep);
+                            recordApply(rep, c.arrival);
                         },
                         ...(planeChanged ? { swapPlane: swapRunnerDeps } : {}),
                     });
@@ -937,14 +949,14 @@ export async function createWebAdminRuntime(ctx) {
                 const demoteToNoCenter = async (awaiting) => {
                     const gen = reserveArrivalGeneration();
                     applyLedger.seenTarget(gen, NO_CENTER_EFFECTIVE.version);
-                    const hot = await commitHot({ eff: NO_CENTER_EFFECTIVE, prompts: undefined, gen, phase: "no-center" });
+                    const arrival = admitArrival(gen, undefined);
+                    const hot = await commitHot({ eff: NO_CENTER_EFFECTIVE, catalogSource: REMOTE_CATALOG_SOURCE, prompts: undefined, gen, arrival, phase: "no-center" });
                     if (!hot.committed) {
                         throw new Error("the no-center tier was refused (the Runners did not accept the env model table) — the previous account's center configuration is still in force; retried next tick");
                     }
                     if (hot.report !== undefined && !hot.report.fullyApplied) {
                         logger.warn("center_identity_demotion_partial", { groups: refusedGroups(hot.report).map((g) => g.group), note: "a group of the no-center tier was refused — that group keeps its previous values (loud; the env base for that group could not be applied)" });
                     }
-                    noteCandidateVerdict(gen, undefined);
                     latestEffective = undefined;
                     ccEtag = undefined;
                     announceTier(tier.demote(awaiting, hot.report !== undefined ? refusedGroups(hot.report).map((g) => g.group) : []));
@@ -1013,14 +1025,14 @@ export async function createWebAdminRuntime(ctx) {
                                 announceCandidateRejected(r, verdict, arrival !== undefined ? "late-boot" : "refresh", tickGen);
                                 return "ok";
                             }
-                            noteCandidateVerdict(tickGen, undefined);
+                            const tickArrival = admitArrival(tickGen, undefined);
                             warnReadNotices(r, "refresh");
                             if (ccRef?.dryRun) {
-                                logEffectiveDiff(config, r.effective, logger);
+                                logEffectiveDiff(config, r.effective, r.catalogSource, logger);
                                 ccEtag = r.etag;
                             }
                             else {
-                                const hot = await commitHot({ eff: r.effective, prompts: verdict.prompts, gen: tickGen, phase: "refresh" });
+                                const hot = await commitHot({ eff: r.effective, catalogSource: r.catalogSource, prompts: verdict.prompts, gen: tickGen, arrival: tickArrival, phase: "refresh" });
                                 if (!hot.committed)
                                     return "ok";
                                 const applyReport = hot.report;
@@ -1054,7 +1066,7 @@ export async function createWebAdminRuntime(ctx) {
                         }
                     }
                     catch (err) {
-                        logger.warn("web_admin_refresh_failed", { err: String(err), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
+                        logger.warn("web_admin_refresh_failed", { err: seatText("operator-log-text", String(err)), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
                         return "failed";
                     }
                     finally {
@@ -1113,7 +1125,7 @@ export async function createWebAdminRuntime(ctx) {
                             lastPull = "ok";
                     }
                     catch (err) {
-                        logger.warn("web_admin_refresh_failed", { err: String(err), leg: "boot-deferred", note: "etag NOT advanced — the refresh cadence re-fetches and re-applies the same candidate" });
+                        logger.warn("web_admin_refresh_failed", { err: seatText("operator-log-text", String(err)), leg: "boot-deferred", note: "etag NOT advanced — the refresh cadence re-fetches and re-applies the same candidate" });
                     }
                     finally {
                         refreshInFlight = false;
@@ -1127,14 +1139,14 @@ export async function createWebAdminRuntime(ctx) {
                         announceCandidateRejected(r, lateVerdict, "late-boot", lateGen);
                         return;
                     }
-                    noteCandidateVerdict(lateGen, undefined);
+                    const lateArrival = admitArrival(lateGen, undefined);
                     warnReadNotices(r, "boot-deferred");
                     if (ccRef?.dryRun) {
-                        logEffectiveDiff(config, r.effective, logger);
+                        logEffectiveDiff(config, r.effective, r.catalogSource, logger);
                         ccEtag = r.etag;
                         return;
                     }
-                    const hotLate = await commitHot({ eff: r.effective, prompts: lateVerdict.prompts, gen: lateGen, phase: "boot-deferred" });
+                    const hotLate = await commitHot({ eff: r.effective, catalogSource: r.catalogSource, prompts: lateVerdict.prompts, gen: lateGen, arrival: lateArrival, phase: "boot-deferred" });
                     if (!hotLate.committed)
                         return;
                     const applyReportLate = hotLate.report;
@@ -1164,7 +1176,7 @@ export async function createWebAdminRuntime(ctx) {
                     void bootConfigPending.then((r) => {
                         if (r !== null && configProvider.kind === "remote" && candidateIdentityOf(r.effective) !== currentIdentity()) {
                             logger.warn("config_boot_arrival_identity_changed", { note: "the late boot pull landed under a center credential that is no longer current — not adopted; re-pulling once under the current credential" });
-                            void pullEffective(configProvider, undefined).then(continueArrival, (err) => logger.warn("config_boot_arrival_repull_failed", { err: String(err), note: "the refresh cadence retries under the current credential" }));
+                            void pullEffective(configProvider, undefined).then(continueArrival, (err) => logger.warn("config_boot_arrival_repull_failed", { err: seatText("operator-log-text", String(err)), note: "the refresh cadence retries under the current credential" }));
                             return;
                         }
                         continueArrival(r);

package/dist/boot/webfetch-summarize-lane.js

@@ -1,5 +1,6 @@
 import { createWebFetchSummarizer, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
 import { createPerModelAuthSeat } from "./side-query-lane.js";
+import { seatText } from "../trace/exit-seat.js";
 export function createWebFetchSummarizeLane(ctx) {
     return async (content, prompt, signal) => {
         const model = (() => {
@@ -7,7 +8,7 @@ export function createWebFetchSummarizeLane(ctx) {
                 return coreResolveTaskModel({ modelRole: "summarize" }, { models: ctx.config.models, roles: ctx.config.roles }).model;
             }
             catch (err) {
-                ctx.logger.warn("webfetch_summarizer_model_unresolved", { err: String(err), note: "this fetch falls back to raw page content" });
+                ctx.logger.warn("webfetch_summarizer_model_unresolved", { err: seatText("operator-log-text", String(err)), note: "this fetch falls back to raw page content" });
                 return undefined;
             }
         })();

package/dist/boot/workflow-orchestration.js

@@ -7,6 +7,7 @@ import { FileWorkflowCompletionInbox, InMemoryWorkflowCompletionInbox, buildWork
 import { FileWorkflowNotifyJournalStore, JournalingWorkflowRunStore, WorkflowNotifyGate } from "../orchestration/workflow-notify-journal.js";
 import { SubagentSteerRegistry } from "../orchestration/subagent-steer.js";
 import { WorkflowAgentRegistry } from "../orchestration/workflow-agent-steer.js";
+import { seatText } from "../trace/exit-seat.js";
 export function createWorkflowOrchestration(ctx) {
     const { config, logger, metrics, localRoot, backend, getRunStore } = ctx;
     const workflowBootAtMs = Date.now();
@@ -43,12 +44,12 @@ export function createWorkflowOrchestration(ctx) {
             await workflowCompletionInbox.enqueue(buildWorkflowCompleteInboxEntry(route, p, Date.now()));
         }
         catch (err) {
-            logger.warn("workflow_completion_enqueue_failed", { runId: p.runId, err: String(err) });
+            logger.warn("workflow_completion_enqueue_failed", { runId: p.runId, err: seatText("operator-log-text", String(err)) });
         }
     };
     const workflowNotifyGate = baseWorkflowRunStore && workflowNotifyJournal
         ? new WorkflowNotifyGate(workflowNotifyJournal, baseWorkflowRunStore, deliverWorkflowCompletion, {
-            onError: (stage, runId, err) => logger.warn("workflow_notify_failed", { stage, runId, err: String(err) }),
+            onError: (stage, runId, err) => logger.warn("workflow_notify_failed", { stage, runId, err: seatText("operator-log-text", String(err)) }),
         })
         : undefined;
     const fleetBus = new FleetEventBus();

package/dist/capabilities/builtin-tools.d.ts

@@ -37,7 +37,8 @@ export declare function createSubagentExtraTools(deployment?: SubagentExtraToolS
 /**
  * `onExtraToolsError` 收到的错误 → 运维行 `subagent_extra_tools_error` 的字段:句子,加上错误**自带**的码与 `detail.reason`(在场才铸)。
  * core 7.46.0 [ref] 被拒的 spawn(产物不在名册里)带 `config.extra_tool_names` + `undeclared_name` / `undeclared_origin`;部署工厂自己抛的错多半两位都不带。
- * 本仓不按码分支、不重铸 —— 只把错误说的话原样过境到运维面(修前只记句子,码与原因词丢在这一跳)。
+ * 本仓不按码分支、不重铸 —— 只把错误说的话过境到运维面(修前只记句子,码与原因词丢在这一跳)。码是别人写的串(引擎的 `config.extra_tool_names`,或部署工厂自己抛的错):
+ * 与运维日志里其余各处同一只判官 —— 是码才带 `code`,其余键缺席({@link codeFieldOf})。
  */
 export declare function extraToolsErrorFields(err: unknown): Record<string, unknown>;
 //# sourceMappingURL=builtin-tools.d.ts.map

package/dist/capabilities/builtin-tools.js

@@ -1,5 +1,6 @@
 import { Type } from "typebox";
 import { NOW_TOOL_NAME } from "./host-tool-names.js";
+import { codeFieldOf } from "../terminal.js";
 export function nowTool() {
     return {
         name: NOW_TOOL_NAME,
@@ -21,12 +22,9 @@ export function createSubagentExtraTools(deployment) {
     };
 }
 export function extraToolsErrorFields(err) {
-    const fields = { err: err instanceof Error ? err.message : String(err) };
+    const fields = { err: err instanceof Error ? err.message : String(err), ...codeFieldOf(err) };
     if (err === null || typeof err !== "object")
         return fields;
-    const code = Reflect.get(err, "code");
-    if (typeof code === "string")
-        fields.code = code;
     const detail = Reflect.get(err, "detail");
     const reason = detail !== null && typeof detail === "object" ? Reflect.get(detail, "reason") : undefined;
     if (typeof reason === "string")

package/dist/capabilities/composite-members.d.ts

@@ -45,7 +45,7 @@ export declare const COMPOSITE_CAPABILITY_MEMBERS: {
     readonly centerWiring: readonly ["effectivePull", "effectiveRevision", "lease", "leaseHealth", "failMode", "usageReport", "issuer", "worker", "caller"];
     readonly webSearch: readonly ["backend"];
     readonly background: readonly ["listFace", "exitFaces"];
-    readonly taskSettings: readonly ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks", "pluginHooks", "managedHookGroups", "tightenOnlySeats", "approvalFrameFamilies"];
+    readonly taskSettings: readonly ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks", "pluginHooks", "managedHookGroups", "httpHookAllowlists", "tightenOnlySeats", "approvalFrameFamilies"];
     readonly settings: readonly ["permissions"];
     readonly permissionModeAuto: readonly ["accepted", "classifierSeat", "entitlementSource", "armed", "reason", "model"];
     readonly writeProtection: readonly ["armed", "rows", "replaced"];
@@ -56,6 +56,7 @@ export declare const COMPOSITE_CAPABILITY_MEMBERS: {
     readonly workspaceSync: readonly ["persist", "keep", "timeoutMs", "cache"];
     readonly userAttachments: readonly ["entries", "kinds", "supplies", "limits"];
     readonly credentialPlane: readonly ["sandboxGit"];
+    readonly memorySyncServe: readonly ["identity"];
 };
 type CompositeTable = typeof COMPOSITE_CAPABILITY_MEMBERS;
 /** 值的**具名成员对象臂**(标量 / 字面词 / `false` / `null` / `undefined` / 数组 / 函数臂剥掉)。 */

package/dist/capabilities/composite-members.js

@@ -6,7 +6,7 @@ export const COMPOSITE_CAPABILITY_MEMBERS = {
     centerWiring: ["effectivePull", "effectiveRevision", "lease", "leaseHealth", "failMode", "usageReport", "issuer", "worker", "caller"],
     webSearch: ["backend"],
     background: ["listFace", "exitFaces"],
-    taskSettings: ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks", "pluginHooks", "managedHookGroups", "tightenOnlySeats", "approvalFrameFamilies"],
+    taskSettings: ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks", "pluginHooks", "managedHookGroups", "httpHookAllowlists", "tightenOnlySeats", "approvalFrameFamilies"],
     settings: ["permissions"],
     permissionModeAuto: ["accepted", "classifierSeat", "entitlementSource", "armed", "reason", "model"],
     writeProtection: ["armed", "rows", "replaced"],
@@ -17,6 +17,7 @@ export const COMPOSITE_CAPABILITY_MEMBERS = {
     workspaceSync: ["persist", "keep", "timeoutMs", "cache"],
     userAttachments: ["entries", "kinds", "supplies", "limits"],
     credentialPlane: ["sandboxGit"],
+    memorySyncServe: ["identity"],
 };
 export function gateCompositeMembers(body) {
     return body;

package/dist/capabilities/hands-lane.d.ts

@@ -12,8 +12,8 @@
  *     不是静默继承 full(词表闭集纪律)。
  *  ② {@link HANDS_EXCLUSIVE_TOOL_NAMES} + {@link handsDenyPolicy} —— 纵深:hands=none 的任务即便被误接到
  *     有手 Runner 上,手独占名单逐一 deny。**不是**主保证(主保证是根本不挂 factory ⇒ 工具面不可见)。
- *  ③ {@link stampHandsLane} / {@link handsLaneOf} —— 车道作为 TaskSpec 上的**显式字段**([ref]):
- *     resolveSpec 出口铸一次,执行点读一次,**缺席即拒**(不是回落最宽车道)。
+ *  ③ {@link createHandsRunnerSelector} —— 车道是这条腿的部署事实(`leg-facts.ts`:装配器出口铸一次,两只漏斗以装配输出调选路器时读一次),
+ *     **缺席即拒**(不是回落最宽车道)。
  */
 import { type Runner, type TaskSpec, type ToolPolicy } from "@sema-agent/core";
 /** 场景对手带工具面的表态(闭集)。`full` = core 手带 band 照常 mount;`none` = 不挂 executionEnvFactory 的 Runner。 */
@@ -114,32 +114,7 @@ export declare function tightenWithHandsDeny(base: ToolPolicy | undefined): Tool
 /** 装配点的取用形:`full` 原样放行基线,`none` 叠 deny。**穷举 switch**,无缺省臂。 */
 export declare function toolPolicyForHands(hands: ScenarioHands, base: ToolPolicy | undefined): ToolPolicy | undefined;
 /**
- * 执行车道在 TaskSpec 上的**显式字段键**([ref];修前是一张以 spec **对象身份**为键的 WeakMap 旁表)。
- *
- * 为什么是 symbol 而不是字符串键:`TaskSpec` 是**上游 core 的类型面**,一个字符串键会进
- * `Object.keys` / `JSON.stringify` / core 自己的键审计,等于 server 在别人的契约上私自加一个键;
- * symbol 键随 spread(`{...spec}`)与 rest 解构(`const {objective, ...taskConfig} = spec`)结构性
- * 地跟着走,却对上游的键面**不可见**(结构化克隆与 JSON 同样跳过 symbol 键)。于是「车道是 spec 上
- * 的一个字段、复制 spec 不丢车道」与「不污染上游契约」两件事同时成立。
- *
- * 修前的旁表要求「从 resolveSpec 出来的那一只对象必须一路原样活到执行点」——一条**隐形**的对象身份
- * 契约:任何一次 `{...spec}` 都会静默把车道降级成最宽的 `full`(实测:登记 `none` 的 spec 复制后
- * `laneOf` 答 `full`)。字段化把那条隐形要求整条删掉。
- */
-export declare const HANDS_LANE_FIELD: unique symbol;
-/** 已铸车道的 TaskSpec。铸点唯一(`boot/resolve-spec.ts` 的 resolveSpec 出口),读点唯一({@link handsLaneOf})。 */
-export type LanedTaskSpec = TaskSpec & {
-    readonly [HANDS_LANE_FIELD]: ScenarioHands;
-};
-/**
- * 铸车道(**单一属主**:只允许 resolveSpec 的出口调用)。
- *
- * 字段是 `enumerable`(所以复制得走)、`writable:false` + `configurable:false`(所以同一只 spec 被
- * 第二次铸车道会当场 TypeError —— 两个写者是漂移的成因,响亮好过后到者悄悄赢)。
- */
-export declare function stampHandsLane<T extends TaskSpec>(spec: T, hands: ScenarioHands): T & LanedTaskSpec;
-/**
- * 车道字段缺席的拒因 —— 具名类,便于调用点/测试按类型判,而不是嗅文案。
+ * 车道读不到的拒因 —— 具名类,便于调用点/测试按类型判,而不是嗅文案。
  *
  * 🔴 **刻意不是 `HttpError`、刻意不铸新的 wire 错误码**:它落到 `http/server.ts` 的兜底 catch,
  * wire 上是 500 `internal.error`(内部文本不回显,只进 `request_error` 日志行)。理由两条:
@@ -153,19 +128,14 @@ export declare class HandsLaneUnstampedError extends Error {
     constructor();
 }
 /**
- * 读车道 —— **缺席即拒**([ref] P 类:车道选择是保护型量,fail-closed;`observability/fail-open.ts`
- * 头注把「车道选择」逐字列在「正解是 fail-closed,不是留痕后继续放行」那一族里)。
+ * 装配点的选路席:`{full, handsless}` 两只 Runner + 这条腿的车道 ⇒ 本任务跑哪一只。公共缝 `runnerFor(spec)` 的生产实现;
+ * 两只漏斗(受理 / 续跑)以**装配器输出的那一只对象**调它(`leg-facts.ts`:读在 `stampSpecRoot` 复制之前)。
  *
- * 修前此处是 `?? "full"`:一只没经过本仓 resolver 的 spec 会**静默拿到最宽的车道**(全量可写手带)。
- * 「唯一可达形是测试桩」这个论证不是防线 —— 它是一句关于今天调用图的断言,而防线要防的正是明天多出
- * 来的第二个执行点。缺席现在整只拒(500 + 日志留原句),而不是把一个未经裁定的任务放进有手车道。
- */
-export declare function handsLaneOf(spec: TaskSpec): ScenarioHands;
-/**
- * 装配点的选路席:`{full, handsless}` 两只 Runner + 车道字段 ⇒ 本任务跑哪一只。
+ * 车道读不到 ⇒ **缺席即拒**([ref] P 类:车道选择是保护型量,fail-closed;`observability/fail-open.ts` 头注把「车道选择」逐字列在
+ * 「正解是 fail-closed,不是留痕后继续放行」那一族里)。读不到的两种来路:嵌入方自带的 `resolveSpec`(不铸本仓的腿事实),
+ * 或有人把复制品交了进来(读晚了)—— 都整只拒(500 + 日志留原句),绝不把一个未经裁定的任务放进最宽的有手车道。
  *
- * 具名工厂而不是在 main.ts 手搓闭包:选路规则(读字段 → 穷举 switch)于是只有**一份实现**,
- * 测试与生产装配拿的是同一只(手搓等价闭包 = 第二真源,正是本件要删的那一类)。
+ * 具名工厂而不是在 main.ts 手搓闭包:选路规则(读车道 → 穷举 switch)于是只有**一份实现**,测试与生产装配拿的是同一只。
  */
 export declare function createHandsRunnerSelector(pair: HandsRunnerPair): (spec: TaskSpec) => Runner;
 //# sourceMappingURL=hands-lane.d.ts.map

package/dist/capabilities/hands-lane.js

@@ -1,4 +1,5 @@
 import { handBandEffects, judgeRuleToolName, combinePolicies, createAllowDenyPolicy } from "@sema-agent/core";
+import { legFactsOf } from "../leg-facts.js";
 import { TOOL_NAME_ROSTER } from "../namespaced-rule-name.js";
 export function withoutHands(deps) {
     const { executionEnvFactory: _handsDropped, ...rest } = deps;
@@ -29,7 +30,7 @@ export const HANDS_BAND_TOOL_NAMES = Object.freeze([
     "ExitWorktree",
     "ListAgents",
 ].filter((n, i, all) => judgeRuleToolName(n, TOOL_NAME_ROSTER).kind === "current" && all.indexOf(n) === i));
-export const HANDS_DUAL_USE_TOOL_NAMES = Object.freeze(["TaskOutput", "TaskStop", "SendMessage", "AgentTranscript", "ListAgents"]);
+export const HANDS_DUAL_USE_TOOL_NAMES = Object.freeze(["TaskStop", "SendMessage", "AgentTranscript", "ListAgents"]);
 export const HANDS_EXCLUSIVE_TOOL_NAMES = Object.freeze(HANDS_BAND_TOOL_NAMES.filter((n) => !HANDS_DUAL_USE_TOOL_NAMES.includes(n)));
 export const OFFICE_KEPT_HAND_TOOL_NAMES = Object.freeze(["Read", "Glob", "Grep"]);
 export const OFFICE_EXCLUDED_TOOL_NAMES = Object.freeze(HANDS_EXCLUSIVE_TOOL_NAMES.filter((n) => !OFFICE_KEPT_HAND_TOOL_NAMES.includes(n)));
@@ -48,24 +49,18 @@ export function toolPolicyForHands(hands, base) {
             return tightenWithHandsDeny(base);
     }
 }
-export const HANDS_LANE_FIELD = Symbol("sema-server.handsLane");
-export function stampHandsLane(spec, hands) {
-    Object.defineProperty(spec, HANDS_LANE_FIELD, { value: hands, enumerable: true, writable: false, configurable: false });
-    return spec;
-}
 export class HandsLaneUnstampedError extends Error {
     constructor() {
         super("execution lane is not stamped on this task spec — refusing to run it rather than falling back to the widest (full-hands) lane");
         this.name = "HandsLaneUnstampedError";
     }
 }
-export function handsLaneOf(spec) {
-    const lane = spec[HANDS_LANE_FIELD];
-    if (lane === undefined)
-        throw new HandsLaneUnstampedError();
-    return lane;
-}
 export function createHandsRunnerSelector(pair) {
-    return (spec) => pickHandsRunner(handsLaneOf(spec), pair);
+    return (spec) => {
+        const hands = legFactsOf(spec)?.hands;
+        if (hands === undefined)
+            throw new HandsLaneUnstampedError();
+        return pickHandsRunner(hands, pair);
+    };
 }
 //# sourceMappingURL=hands-lane.js.map

package/dist/capabilities/mcp-probe.d.ts

@@ -354,8 +354,9 @@ export declare function buildMcpProbeInflightRefusal(): McpProbeRefusal;
  * 在任何传输被触碰**之前**就被拒)。
  *
  * 异源复核 [medium]:修前这一形在两条口上都被抛给分派器尾 ⇒ `500 internal.error`。可自带申报那一口的申报
- * 是**调用方**写的,把它答成 500 是把调用方的错说成这台机器故障;中心申报那一口反过来 —— 那是部署方写的,
- * 5xx 才是对的方向。⇒ 一条规则:**谁写的申报,谁的错**。
+ * 是**调用方**写的,把它答成 500 是把调用方的错说成这台机器故障 ⇒ 自带申报那一口答 400 `request.field_invalid`(本句)。
+ * 中心申报那一口**不走本句**:那是部署方写的、部署上挂不起来,引擎的拒按同步提交腿读的同一张「码 → 状态」表读成应答
+ * (409 `config.mcp_server_name_collision` + 引擎原句,`http/engine-refusal.ts`),与同一份声明集在提交腿上的答复同码同状态同句。
  *
  * 🔴 **不回显因由**:那句话来自申报集本身,可能带调用方的内情(名字、地址形)。调用方手里有自己的体,
  * 点名「两台撞了命名空间」就够他自己找;原文留在那一层的日志里。

package/dist/capabilities/scenarios.d.ts

@@ -5,6 +5,7 @@ import { type RepoReadClient } from "./repo-tools.js";
 import { type LoadedSkill, type RunSkillEntry, type ScenarioSkillEntry, type SkillSource } from "./skills.js";
 import { type ScenarioHands } from "./hands-lane.js";
 import type { DelegationRootWitness } from "../delegated-session-owner.js";
+import type { BackgroundCompletionSinkFor } from "../session-notify-door.js";
 /**
  * Scenario routing — a deployment serves many scenarios from one image. Each request's `scenario`
  * selects a pre-wired capability bundle: tools (incl. subagent roster) + its prompt seats + skills.
@@ -85,7 +86,8 @@ export interface ScenarioContext {
     /**
      * [ref] / [ref]:**委派树根的见证**(停驻挂点的属主来源)—— 根会话 id + 调用方判断那一刻读到的根行住客(`delegated-session-owner.ts` 的 `DelegationRootWitness`)。
      * 由**每一个**接了停驻挂点的取用方显式交出(一条读法,没有回落):请求腿 = 本请求经鉴权解析的会话与受理时那一读(`boot/resolve-spec.ts`);`/decide` 赎回面 = 行上的
-     * `rootSessionId` 与赎回腿写口放行的那一位住客(`parked-revive-surface.ts`,交不交座都交)。它**只**喂停驻挂点,不挂任何会话级设施(那是 {@link sessionId} 的事,
+     * `rootSessionId` 与赎回腿写口放行的那一位住客(`parked-revive-surface.ts`,交不交座都交)。它喂停驻挂点与 Runner 之外的后台子代完成 relay(会话通知门的目标住客:属主与化身),
+     * 不挂任何会话级设施(那是 {@link sessionId} 的事,
      * 判据是「这只 bundle 是不是在那只会话上取用的」,与属主来源是两个独立判据)。缺席 = 没有根可交(boot 期探针、run-local、行上没有根)⇒ 律给哨兵。
      * 挂点在停驻那一刻再读一次根行:住客不是见证的那一位(删了、同 id 被重新登记)⇒ 停驻否决 —— 不按新住客认领。
      */
@@ -157,6 +159,14 @@ export interface ScenarioDeps {
      * 停驻都经它(子代沿用父的委派工具实例)。
      */
     ensureChildSessionDurable?: (sessionId: string, root: DelegationRootWitness | undefined) => Promise<void>;
+    /**
+     * **Runner 之外的后台子代完成**交给哪里 —— 按委派树根见证({@link ScenarioContext.delegationRoot})造委派工具挂载期的 `background.notify`。
+     * 停驻赎回腿的复活、操作员 `handle.resume` 都不是哪一次 run 内的调用,没有调用车道;引擎只在能解出一只完成 sink(调用 ?? 挂载)时才起后台续跑,
+     * 解不出 ⇒ 拒(`revive.no_background`)。sink = 委派树根会话的会话通知门(`session-notify-door.ts` 的 `createBackgroundCompletionRelay`;律与地址、
+     * 竞态、条目形都写在那里)。Runner 之内的调用照旧走调用车道,这只 sink 不被调。缺席(没有门的装配:run-local)⇒ 不接 ——
+     * 不接一只空 sink(接了 = 引擎起续跑、完成没人收)。
+     */
+    backgroundCompletionSinkFor?: BackgroundCompletionSinkFor;
     /**
      * [ref]([ref] F2 症状 → [ref] 定谳):**会话级**任务清单店解析器,属主 =
      * `boot/task-list-lane.ts` 的 {@link import("../boot/task-list-lane.js").createTaskListLane}

package/dist/capabilities/scenarios.js

@@ -59,6 +59,7 @@ export function buildScenarios(deps) {
                             ...(deps.backgroundAgentStore ? { agentStore: deps.backgroundAgentStore } : {}),
                             ...(deps.checkpointStore ? { checkpointStore: deps.checkpointStore } : {}),
                             ...(ensureChildSessionDurable !== undefined ? { ensureChildSessionDurable: (childSessionId) => ensureChildSessionDurable(childSessionId, delegationRoot) } : {}),
+                            ...(deps.backgroundCompletionSinkFor !== undefined && delegationRoot !== undefined ? { notify: deps.backgroundCompletionSinkFor(delegationRoot) } : {}),
                         },
                         ...createSubagentExtraTools(deps.subagentExtraTools),
                         ...(deps.logger