@sema-agent/server 7.145.0 → 7.147.0

package/dist/config-types.d.ts

@@ -22,7 +22,7 @@ import type { GitApiKind } from "./git-api-kind.js";
 import type { CustomPkgSource } from "./sandbox-pkg-source.js";
 import type { MemoryEngineBackend, StoreBackend as StoreBackendWord } from "@sema-agent/settings-schema/execution-lanes";
 import { DRAIN_GRACE_FLOOR_MS } from "@sema-agent/settings-schema/fleet";
-import type { AtMention, SandboxGitConfig } from "@sema-agent/settings-schema";
+import type { AtMention, ProjectRegistration, SandboxGitConfig } from "@sema-agent/settings-schema";
 import type { ModsDeclaration } from "./mods-declaration.js";
 /** [ref]:记忆向量面的 embedder 坐标(env `MEMORY_EMBEDDER_*` 解析结果;单一属主 = 本类型,
  *  `plugins/memory-embedder.ts` 的工厂直接消费它,不复制形状)。语义与三问见
@@ -39,6 +39,9 @@ export interface MemoryEmbedderConfig {
     timeoutMs: number;
     /** 可选 Bearer(自托管 TEI/vllm/ollama 通常不需要;公有云端点需要)。 */
     apiKey?: string;
+    /** 运维已确认「记下的身份与本身份对不上时,清掉向量列、按本身份重嵌」(env `MEMORY_EMBEDDER_REEMBED=<model>/<dimensions>`,
+     *  config 层已判过它恰好点名本身份)。缺席 = 未确认 ⇒ 指纹门对不上就拒启、一行不清。只交给指纹门,不是 transport 参数。 */
+    reembedConfirmed?: true;
 }
 /**
  * [ref] §4 —— 托管留存的**灰度档**闭集。`as const` 数组是词表的唯一真源(config 解析、能力位、审计行
@@ -503,6 +506,159 @@ export interface ImageBakeConfig {
 /** Service configuration, read from environment — the **平铺面**(the ONE storage location for every
  *  field). `ServiceConfig` (bottom of this file) = this flat face **plus** nine read-only group views;
  *  fixtures that CONSTRUCT a config literal build this type and hand it to `attachConfigGroups`. */
+/**
+ * The deployment's execution lane, as COMPOSED ([ref] v1b + [ref]; PEER adapters). Every deployment names it: the env
+ * `REMOTE_EXEC` (one lane word), or — with `CONFIG_PROVIDER=local` — `config.d/remote-exec.json`; the execution-lane composition step
+ * (`boot/execution-lane.ts`) refuses to start when neither declares one. `ServiceConfig.remoteExec` is therefore always present; only the raw
+ * shape `loadConfig()` returns ({@link LoadedConfig}) may lack it. `none` = the agent's tools get no execution environment (no factory,
+ * no `executionEnv`). Secrets (apiKey/privateKey) ONLY from env.
+ *   - `e2b`  → per-task E2B Firecracker VM (isolated, suspendable). The default code-agent worker.
+ *   - `k8s`  → per-task Kata pod on our k3s (isolated, NOT suspendable — no managed memory
+ *              snapshot). Self-hosted sandbox lane; auth = explicit K8S_* env or in-cluster service account.
+ *   - `ssh`  → a real host over SSH (NOT isolated/suspendable; [ref] §5). AI-orchestrated batch deploy.
+ *   - `adb`  → a real device over ADB (NOT isolated/suspendable). On-device APP testing.
+ */
+export type RemoteExecConfig = {
+    provider: "e2b";
+    apiKey: string;
+    template?: string;
+    timeoutMs?: number;
+    livenessMs?: number;
+    allowInternetAccess?: boolean;
+    /** [ref] —— `E2B_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(经唯一的「点名放行」谓词 `allowlistedEnv`,
+     *  空串值照带)。键缺席 = 旋钮未设 / 空串;名单形错(空段 / 非变量名形 / 点名名单型旋钮)拒启,源里没有的名按序号 warn。 */
+    sandboxEnv?: Record<string, string>;
+    mountPath?: string;
+    /** [ref]:崩溃遗留沙盒回收腿(E2B_ORPHAN_RECLAIM,默认 true;判据与 v1 边界见
+     *  plugins/e2b-orphan-reclaim.ts 头注)。 */
+    orphanReclaim?: boolean;
+} | {
+    provider: "k8s";
+    image: string;
+    apiUrl?: string;
+    token?: string;
+    caCert?: string;
+    insecureTls?: boolean;
+    /** `K8S_NAMESPACE` — the namespace the sandbox pods live in. REQUIRED, no default: the loader refuses to start when `REMOTE_EXEC=k8s` names the
+     *  lane without it, so this arm never carries an absent namespace and no consumer needs a fallback of its own. */
+    namespace: string;
+    runtimeClass?: string;
+    mountPath?: string;
+    timeoutMs?: number;
+    /** `K8S_LIVENESS_MS` — the lane's liveness bound (ms; the `E2B_LIVENESS_MS` twin, same parser; absent ⇒ the adapter's
+     *  default 120 s): cuts a command silent for this long ONLY when its caller stated no timeout (`exec-bounds.ts`). */
+    livenessMs?: number;
+    /** Resource-profile knobs: sandbox pod limits (adapter defaults: 2Gi / 1 cpu). */
+    memory?: string;
+    cpu?: string;
+    /** `K8S_SANDBOX_IPV6`(闭集与缺省的属主 `sandbox-egress-policy.ts`):`disabled` ⇒ 沙箱 pod 级 sysctl 关 IPv6;`enabled` ⇒ pod spec 不带 sysctl。
+     *  loader 恒铸;可选只为手搓配置。 */
+    sandboxIpv6?: import("./sandbox-egress-policy.js").SandboxIpv6;
+    /** `K8S_SANDBOX_BROKER_IMAGE` — the member git-credential broker container's image (`containers[1]` of a member's sandbox pod; this
+     *  engine's own image is the recommended value — the broker is a program of this package at a fixed path, `broker/constants.ts`). Absent /
+     *  empty ⇒ the plane is off (`credentialPlane.sandboxGit` = `broker_image_unset`) and no pod carries a broker. */
+    brokerImage?: string;
+    /** `K8S_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同名同形、同一只解析器、同一只谓词 `allowlistedEnv`,
+     *  空串值照带)。只进 pod 容器 env;装配点与包源派生 env 合并一处,显式名单胜。键缺席 = 旋钮未设 / 空串(零转发)。 */
+    sandboxEnv?: Record<string, string>;
+    s3Snapshot?: {
+        endpoint: string;
+        bucket: string;
+        accessKey: string;
+        secretKey: string;
+        region?: string;
+        keyPrefix?: string;
+        presignTtlSec?: number;
+    };
+    /** Workspace persistence by space key (`WORKSPACE_PERSIST`) and snapshots kept per space key (`WORKSPACE_SNAPSHOT_KEEP`).
+     *  The loader always mints both on this arm; optional only so hand-built configs may omit them. Effective policy =
+     *  the capability fact `workspaceSpace` (`capability-facts.ts`, the one reading: defaults applied there, absent store ⇒
+     *  unavailable). */
+    workspacePersist?: import("./workspace-space.js").WorkspacePersist;
+    workspaceSnapshotKeep?: number;
+    /** `WORKSPACE_SNAPSHOT_TIMEOUT_MS` — the lane's one data bound (`workspace-space.ts`); the loader always mints it, the boot
+     *  assembly hands it to the adapter as `dataTimeoutMs`, the capability fact reports it (`workspaceSync.timeoutMs`). */
+    workspaceSnapshotTimeoutMs?: number;
+    /** The build-cache volume per workspace space (`WORKSPACE_CACHE=volume`, `_SIZE`, `_MOUNT`; `workspace-cache.ts`); present iff
+     *  `volume`. Effective policy = the capability fact `workspaceCache`. */
+    workspaceCache?: import("./workspace-cache.js").WorkspaceCacheCapability;
+    /** `WORKSPACE_SNAPSHOT_EXCLUDE` — the snapshot's tar exclusion table (closed item form, `workspace-space.ts`); present iff
+     *  non-empty. Handed to the adapter's one tar upload (both snapshot lanes); never on the wire. */
+    workspaceSnapshotExclude?: readonly string[];
+} | {
+    provider: "ssh";
+    host: string;
+    port?: number;
+    username: string;
+    privateKey: string;
+    mountPath?: string;
+    hostKey?: {
+        fingerprintSha256?: string;
+        knownHostsPath?: string;
+    };
+} | {
+    provider: "adb";
+    serial: string;
+    adbPath?: string;
+    mountPath?: string;
+} | {
+    provider: "host";
+    workspaceBase?: string;
+    commandTimeoutMs?: number;
+} | {
+    provider: "none";
+} | {
+    provider: "device";
+    /** `DEVICE_DELIVERY_TIMEOUT_MS`(默认 10s)= 等在途槽的上限;到期 = `device.busy`(§5.5)。 */
+    deliveryTimeoutMs?: number;
+    /** `DEVICE_RECONNECT_GRACE_MS`(默认 120s)= 断连后在途不判丢的窗(§5.4 同 epoch 重连)。 */
+    reconnectGraceMs?: number;
+    /** `DEVICE_EXEC_TIMEOUT_MS`(默认 1800s)= 指令级默认超时;core 的 per-command `timeout` 可收紧。 */
+    execTimeoutMs?: number;
+    /** `DEVICE_MAX_INFLIGHT_PER_DEVICE`(§11-O3 clay 已裁 = 4)。 */
+    maxInflightPerDevice?: number;
+    /** `DEVICE_MAX_PREAUTH_PER_REMOTE`(默认 8;字面 `off` = 显式停用 per-remote 层)= 未鉴权
+     *  握手的 per-remote 并发帽([ref]/[ref]:帽键是裸 remoteAddress——XFF 反代 / 公司 NAT 部署
+     *  形会把全员折叠成单键,per-remote 层退化成共享预算而非公平层,`off` + 全局帽 64 是诚实形)。
+     *  坏值拒启([ref] A 档),词表与拒因见 config.ts `parseDevicePreAuthPerRemoteEnv`。 */
+    maxPreAuthPerRemote?: number | "off";
+    /** `DEVICE_TRUSTED_PROXY_CIDRS`([ref];缺席 = 名单空 = 不读任何代理头,帽键 = socket 对端)= per-remote 帽键的可信代理
+     *  名单(规范 CIDR 文本)。socket 对端落在名单内,汇聚端才读 `X-Forwarded-For`、取自右向左第一个名单外地址作帽键。
+     *  坏项拒启([ref] A 档),拒因见 config.ts `parseDeviceTrustedProxyCidrsEnv`;唯一消费点 = `boot/device-lane.ts` 透传汇聚端。 */
+    trustedProxyCidrs?: readonly string[];
+    /** `DEVICE_ENROLL_TOKEN_TTL_SEC`(§4.7 第五个旋钮;默认 900 = §7-T5 ① 的 15min)= enrollment
+     *  token 的有效期**时长**(整秒,自 **DB now** 起算 —— 时间权威是库,不是副本墙钟)。唯一消费点 =
+     *  签发动词 `POST /v1/devices/enroll-tokens`(`http/routes/devices.ts`);[ref] 之前它刻意未铸
+     *  (端点不存在 ⇒ 铸了就是一个「配了不生效」的死键,[ref] 病族),随该端点同批铸 + 接线。
+     *  域 = `[1, 86400]` 的十进制正整数,坏值**拒启**([ref] A 档;解析器 `parseDeviceEnrollTokenTtlEnv`)。
+     *  缺席 ⇒ 签发点的属主默认 900(不在 config 层抄第二份默认,与本族其余旋钮同姿势)。 */
+    enrollTokenTtlSec?: number;
+    /** `DEVICE_RELAY_URL` = 设备入口的运维声明,**必填**(缺席 / 空串 / 只含空白 ⇒ 配置期拒起:契约包车道表 device 行的必需键,同所有车道的必需键判官 `laneMissingEnv`;值的文法与凭据形由解析器 `parseDeviceRelayUrlEnv` 拒):
+     *  `{ kind: "url" }` = 设备连不到本引擎自己的地址(引擎在中继 / 网关之后)时该拨的那一个 ws(s) URL,**逐字**上能力面 `deviceExecutor.relayUrl`
+     *  (唯一消费点 `http/routes/capabilities.ts`);`{ kind: "none" }`(字面 `none`)= 没有中继,设备按本引擎地址 + `deviceExecutor.wsPath` 拨号,能力面不带 `relayUrl`。
+     *  必填的理由:「设备拨哪里」只有运维知道;缺席曾被读成「直拨」,于是撤掉中继声明而根会话行上还有设备绑定时,设备改拨引擎地址(入口已收窄则拨不到)、
+     *  绑定却留在格上 —— 缺席与「声明了直拨」是两件事,只有后者放行。`none` ∧ 有绑定 ⇒ 起服 warn 点名绑定数(`boot/device-lane.ts`)。
+     *  **不派生**:`FLEET_ADVERTISE_ADDRESS` 是对中心公告的地址(内网 pod IP / 容器别名),受众不是用户机器上的设备;从它拼出来的入口对设备多半不可达。
+     *  URL 形门 = ws / wss 绝对地址,无 userinfo / query / fragment、不带凭据形(值逐字上能力面),坏值**拒启**。 */
+    relay: DeviceRelayDeclaration;
+    /** `DEVICE_SUPERSEDE`(默认 `stale_only`)= 同 deviceId 二连的顶替策略(§5.2)。 */
+    supersede?: "stale_only" | "deny";
+} | {
+    provider: "local-docker";
+    image: string;
+    mountPath?: string;
+    dockerPath?: string;
+    dockerHost?: string;
+    memory?: string;
+    cpus?: number;
+    pidsLimit?: number;
+    dropAllCaps?: boolean;
+    network?: "none" | "bridge" | "host";
+    commandTimeoutMs?: number;
+    /** [ref] —— `DOCKER_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同一只解析器、
+     *  同一只谓词;每条 `docker exec` 以 `-e K=V` 注入)。键缺席 = 旋钮未设 / 空串。 */
+    env?: Record<string, string>;
+};
 export interface ServiceConfigFlat {
     port: number;
     /** OpenAI-compatible model gateway base URL (without /chat/completions) — `MODEL_GATEWAY_BASEURL`.
@@ -646,17 +802,12 @@ export interface ServiceConfigFlat {
      *  Runner construction and re-expanded on every refresh-time plane swap (`Runner.swapDeps`) — HOT, same as
      *  models/roles; mutateInPlace keeps the reference. */
     tiers: Record<string, string>;
-    /** 142-S4(registry-core 0.10.0 projects 域):center 项目登记簿的 service 消费面 —
-     *  键=projectId(PROJECT_ID_REGEX,generic lowercase UUID)。消费点:①`memoryScopeFor` 第三参数
-     *  (projectId 在场 ⇒ 项目盘 v2 键 `proj:<tenant>/<projectId>`);②`defaultScopes` 作
-     *  `TaskSpec.memory.scopes` 的种子(v2 scope 键串,OPEN 值域——本表只登记不解释)。NO env source —
-     *  populated ONLY by applyEffective(mutateInPlace,boot+refresh 整表替换);env lane 恒空(INERT)。
-     *  ProjectRegistration 的审计字段(registeredBy/registeredAt/notes)不进 ServiceConfig(runtime 不消费)。 */
-    projects: Record<string, {
-        displayName?: string;
-        gitRemotes?: string[];
-        defaultScopes?: string[];
-    }>;
+    /** 项目登记簿(settings-schema `projects` 域):键 = projectId(小写规范 UUID),值 = settings-schema 的 `ProjectRegistration` **原样**
+     *  (本仓不持第二份项目型、不挑键 —— 形与判官只在 settings-schema)。读者:`GET /v1/projects` 读面(`http/routes/projects.ts`);
+     *  `defaultScopes` 作 `TaskSpec.memory.scopes` 的种子(v2 scope 键串,OPEN 值域 —— 本表只登记不解释)与 org 记忆准入的部署 scope 集。
+     *  NO env source —— 只由 applyEffective 经 settings-schema 的视图面读函数判过后填(mutateInPlace,boot + refresh 整表替换);
+     *  本地腿恒空(settings-schema 的本地读取集不收 `projects`)。 */
+    projects: Record<string, ProjectRegistration>;
     /** Role → model map (1.24): `subagent`/`summarize` → the cheap model when `MODEL_CHEAP_ID` is set
      *  (delegated children + compaction get cheap), `default` stays on the main model. Keys are the engine's role
      *  words (core `MODEL_ROLES`, six since 7.49.0). */
@@ -889,22 +1040,13 @@ export interface ServiceConfigFlat {
     /** 件A 目录 unavailable 退避窗(ms)——取数失败的退避语义(bound center hammering),不是策略负结果。
      *  默认 10s。env `MEMORY_ORG_UNAVAILABLE_BACKOFF_MS`(numEnvBounded)。 */
     memoryOrgUnavailableBackoffMs: number;
-    /** [ref] v1b + [ref]: opt-in remote execution backend (PEER adapters, chosen by REMOTE_EXEC). Unset
-     *  → in-process stub env ([ref]: this used to read "OA/review deployments", a scenario family retired wholesale
-     *  in 5.0.0 — see RETIRED_ENVS; the real discriminant is CONFIG_PROVIDER, and REQUIRE_EXECUTION_LANE turns this
-     *  arm into a boot refusal). Secrets (apiKey/privateKey) ONLY from env.
-     *   - `e2b`  → per-task E2B Firecracker VM (isolated, suspendable). The default code-agent worker.
-     *   - `k8s`  → per-task Kata pod on our k3s (isolated, NOT suspendable — no managed memory
-     *              snapshot). Self-hosted sandbox lane; auth = explicit K8S_* env or in-cluster service account.
-     *   - `ssh`  → a real host over SSH (NOT isolated/suspendable; [ref] §5). AI-orchestrated batch deploy.
-     *   - `adb`  → a real device over ADB (NOT isolated/suspendable). On-device APP testing. */
     /**
      * [ref]④ —— `REMOTE_EXEC_HOME_DIR`:**执行环境的 home 目录**(core `ExecutionEnv.homeDir`),
      * `~/…` 形权限规则(`Edit(~/.ssh/**)`)唯一的基,绝对路径。
      *
      * 部署级旋钮,**跨车道同一根**(不按 provider 分七根 —— 它回答的是同一个问题:「这条部署的手,
      * 跑在哪个用户的 home 下」)。显式声明**恒赢**;缺席时只有 home 属于车道本身的那几条车道有答案
-     * (host/in-process = `os.homedir()`、e2b = 平台固定用户),k8s/local-docker(镜像属性)、
+     * (host/none = `os.homedir()`、e2b = 平台固定用户),k8s/local-docker(镜像属性)、
      * ssh(目标机登录用户)、adb/device 一律缺席 ⇒ `~/` 规则在下单时被 422 响亮拒。
      * 声明与出厂答案都只是**主张**:读得出家目录的车道(device 之外的六条)在每只执行环境开起来时拿环境里命令看到的 `$HOME` 证它,
      * 不一致 / 读不出 ⇒ 那只环境不开(拒句点名两值与改法);device 读不了 ⇒ 声明即座,起服披露「来自声明、未实测」。
@@ -912,26 +1054,6 @@ export interface ServiceConfigFlat {
      * 非绝对路径 ⇒ **拒启**([ref] A 档;core 侧同判为 `config.execution_env_home_dir_invalid`)。
      */
     remoteExecHomeDir?: string;
-    /**
-     * [ref] —— `REQUIRE_EXECUTION_LANE`:**「没点名车道」要不要拒启**。默认 **false**(缺省行为逐字不变)。
-     *
-     * `REMOTE_EXEC` 未设/空串 **∧** `CONFIG_PROVIDER ≠ local` ⇒ {@link remoteExec} 缺席 ⇒ `boot/execution-env.ts`
-     * 一条工厂臂都不走 ⇒ core 的 `handsEnabled` 为 false ⇒ **整条手带一件不挂**,而任务照跑、回执
-     * `status=completed`。[ref] 的 fail-closed 门只咬「点了名却配不齐/认不出」,**「根本没点名」是文档化的
-     * 部署姿态**,所以那道门放行。
-     *
-     * 本键把那条姿态交回给运维表态:`true` ⇒ 装配尾**拒启**并点名该设什么(`config.ts` 跨域不变量区)。
-     * 🔴 **为什么默认 off**:今天正在无手运行而自己不知道的部署(根 `docker-compose.yml` / review compose /
-     * `--sandbox=kata` 档 / web-admin 编排器起的 worker)会**升级即挂**,而其中一部分只跑只读/分析任务、
-     * 今天「能用」。缺省翻面留到下一个 major,翻之前生态有一版时间适配。托管清单推荐开
-     * (`docs/DEPLOY-PREREQS.md`)。
-     * 运维读面(2026-09-22 主会话验收订正:车原写「`GET /v1/diagnostics/wiring` 的 `executionLane.requireExecutionLane`」,
-     * 而该端点当时**没有** `executionLane` 段、`src/` 零投影 —— 一句没兑现的承诺,按 [ref] 不信 JSDoc 只信实现行的纪律改写):
-     * boot 期 `exec_lane_selected` 一行(`config.ts` 装配尾,带 `lane` / `source`)+ `GET /v1/config/catalog` 的目录行。
-     * 本键的**有效值今天没有运行期读面**;要出就随 [ref] 的执行座三态在一处铸,不在这里单独长一位。
-     * ([ref] 起诊断面**有了** `executionLane` 段,但它就是能力面那一只投影 `{provider, toolsOnThisHost, isolated?}`,**不带**本键。)
-     */
-    requireExecutionLane: boolean;
     /**
      * 沙箱 git 平面的有效配置块(本部署经凭据代理路由哪些 git origin;契约 `SandboxGitConfig`:规范形 origin ≤ 16、两两不同、`connectUrl` 必 https、空表合法)。
      * **唯一来源 = 中心有效配置**(`/effective` 的 `sandboxGit`,web-admin 按部署登记册投影;无 env 旋钮,本地配置源没有这一块);唯一判官 = `stageEffective`
@@ -939,142 +1061,7 @@ export interface ServiceConfigFlat {
      * 热:读者(平面座 `sandbox-git-plane.ts` 的每一次读)逐次现读这一键,不捕获对象本身。缺席 = 没有这一块(与契约「可选、无默认」同一种缺席读法,不另设 null)。
      */
     sandboxGit?: SandboxGitConfig;
-    remoteExec?: {
-        provider: "e2b";
-        apiKey: string;
-        template?: string;
-        timeoutMs?: number;
-        livenessMs?: number;
-        allowInternetAccess?: boolean;
-        /** [ref] —— `E2B_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(经唯一的「点名放行」谓词 `allowlistedEnv`,
-         *  空串值照带)。键缺席 = 旋钮未设 / 空串;名单形错(空段 / 非变量名形 / 点名名单型旋钮)拒启,源里没有的名按序号 warn。 */
-        sandboxEnv?: Record<string, string>;
-        mountPath?: string;
-        /** [ref]:崩溃遗留沙盒回收腿(E2B_ORPHAN_RECLAIM,默认 true;判据与 v1 边界见
-         *  plugins/e2b-orphan-reclaim.ts 头注)。 */
-        orphanReclaim?: boolean;
-    } | {
-        provider: "k8s";
-        image: string;
-        apiUrl?: string;
-        token?: string;
-        caCert?: string;
-        insecureTls?: boolean;
-        /** `K8S_NAMESPACE` — the namespace the sandbox pods live in. REQUIRED, no default: the loader refuses to start when `REMOTE_EXEC=k8s` names the
-         *  lane without it, so this arm never carries an absent namespace and no consumer needs a fallback of its own. */
-        namespace: string;
-        runtimeClass?: string;
-        mountPath?: string;
-        timeoutMs?: number;
-        /** `K8S_LIVENESS_MS` — the lane's liveness bound (ms; the `E2B_LIVENESS_MS` twin, same parser; absent ⇒ the adapter's
-         *  default 120 s): cuts a command silent for this long ONLY when its caller stated no timeout (`exec-bounds.ts`). */
-        livenessMs?: number;
-        /** Resource-profile knobs: sandbox pod limits (adapter defaults: 2Gi / 1 cpu). */
-        memory?: string;
-        cpu?: string;
-        /** `K8S_SANDBOX_IPV6`(闭集与缺省的属主 `sandbox-egress-policy.ts`):`disabled` ⇒ 沙箱 pod 级 sysctl 关 IPv6;`enabled` ⇒ pod spec 不带 sysctl。
-         *  loader 恒铸;可选只为手搓配置。 */
-        sandboxIpv6?: import("./sandbox-egress-policy.js").SandboxIpv6;
-        /** `K8S_SANDBOX_BROKER_IMAGE` — the member git-credential broker container's image (`containers[1]` of a member's sandbox pod; this
-         *  engine's own image is the recommended value — the broker is a program of this package at a fixed path, `broker/constants.ts`). Absent /
-         *  empty ⇒ the plane is off (`credentialPlane.sandboxGit` = `broker_image_unset`) and no pod carries a broker. */
-        brokerImage?: string;
-        /** `K8S_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同名同形、同一只解析器、同一只谓词 `allowlistedEnv`,
-         *  空串值照带)。只进 pod 容器 env;装配点与包源派生 env 合并一处,显式名单胜。键缺席 = 旋钮未设 / 空串(零转发)。 */
-        sandboxEnv?: Record<string, string>;
-        s3Snapshot?: {
-            endpoint: string;
-            bucket: string;
-            accessKey: string;
-            secretKey: string;
-            region?: string;
-            keyPrefix?: string;
-            presignTtlSec?: number;
-        };
-        /** Workspace persistence by space key (`WORKSPACE_PERSIST`) and snapshots kept per space key (`WORKSPACE_SNAPSHOT_KEEP`).
-         *  The loader always mints both on this arm; optional only so hand-built configs may omit them. Effective policy =
-         *  the capability fact `workspaceSpace` (`capability-facts.ts`, the one reading: defaults applied there, absent store ⇒
-         *  unavailable). */
-        workspacePersist?: import("./workspace-space.js").WorkspacePersist;
-        workspaceSnapshotKeep?: number;
-        /** `WORKSPACE_SNAPSHOT_TIMEOUT_MS` — the lane's one data bound (`workspace-space.ts`); the loader always mints it, the boot
-         *  assembly hands it to the adapter as `dataTimeoutMs`, the capability fact reports it (`workspaceSync.timeoutMs`). */
-        workspaceSnapshotTimeoutMs?: number;
-        /** The build-cache volume per workspace space (`WORKSPACE_CACHE=volume`, `_SIZE`, `_MOUNT`; `workspace-cache.ts`); present iff
-         *  `volume`. Effective policy = the capability fact `workspaceCache`. */
-        workspaceCache?: import("./workspace-cache.js").WorkspaceCacheCapability;
-        /** `WORKSPACE_SNAPSHOT_EXCLUDE` — the snapshot's tar exclusion table (closed item form, `workspace-space.ts`); present iff
-         *  non-empty. Handed to the adapter's one tar upload (both snapshot lanes); never on the wire. */
-        workspaceSnapshotExclude?: readonly string[];
-    } | {
-        provider: "ssh";
-        host: string;
-        port?: number;
-        username: string;
-        privateKey: string;
-        mountPath?: string;
-        hostKey?: {
-            fingerprintSha256?: string;
-            knownHostsPath?: string;
-        };
-    } | {
-        provider: "adb";
-        serial: string;
-        adbPath?: string;
-        mountPath?: string;
-    } | {
-        provider: "host";
-        workspaceBase?: string;
-        commandTimeoutMs?: number;
-        singleMachineDefault?: true;
-    } | {
-        provider: "device";
-        /** `DEVICE_DELIVERY_TIMEOUT_MS`(默认 10s)= 等在途槽的上限;到期 = `device.busy`(§5.5)。 */
-        deliveryTimeoutMs?: number;
-        /** `DEVICE_RECONNECT_GRACE_MS`(默认 120s)= 断连后在途不判丢的窗(§5.4 同 epoch 重连)。 */
-        reconnectGraceMs?: number;
-        /** `DEVICE_EXEC_TIMEOUT_MS`(默认 1800s)= 指令级默认超时;core 的 per-command `timeout` 可收紧。 */
-        execTimeoutMs?: number;
-        /** `DEVICE_MAX_INFLIGHT_PER_DEVICE`(§11-O3 clay 已裁 = 4)。 */
-        maxInflightPerDevice?: number;
-        /** `DEVICE_MAX_PREAUTH_PER_REMOTE`(默认 8;字面 `off` = 显式停用 per-remote 层)= 未鉴权
-         *  握手的 per-remote 并发帽([ref]/[ref]:帽键是裸 remoteAddress——XFF 反代 / 公司 NAT 部署
-         *  形会把全员折叠成单键,per-remote 层退化成共享预算而非公平层,`off` + 全局帽 64 是诚实形)。
-         *  坏值拒启([ref] A 档),词表与拒因见 config.ts `parseDevicePreAuthPerRemoteEnv`。 */
-        maxPreAuthPerRemote?: number | "off";
-        /** `DEVICE_ENROLL_TOKEN_TTL_SEC`(§4.7 第五个旋钮;默认 900 = §7-T5 ① 的 15min)= enrollment
-         *  token 的有效期**时长**(整秒,自 **DB now** 起算 —— 时间权威是库,不是副本墙钟)。唯一消费点 =
-         *  签发动词 `POST /v1/devices/enroll-tokens`(`http/routes/devices.ts`);[ref] 之前它刻意未铸
-         *  (端点不存在 ⇒ 铸了就是一个「配了不生效」的死键,[ref] 病族),随该端点同批铸 + 接线。
-         *  域 = `[1, 86400]` 的十进制正整数,坏值**拒启**([ref] A 档;解析器 `parseDeviceEnrollTokenTtlEnv`)。
-         *  缺席 ⇒ 签发点的属主默认 900(不在 config 层抄第二份默认,与本族其余旋钮同姿势)。 */
-        enrollTokenTtlSec?: number;
-        /** `DEVICE_RELAY_URL` = 设备入口的运维声明,**必填**(缺席 / 空串 / 只含空白 ⇒ 配置期拒起:契约包车道表 device 行的必需键,同所有车道的必需键判官 `laneMissingEnv`;值的文法与凭据形由解析器 `parseDeviceRelayUrlEnv` 拒):
-         *  `{ kind: "url" }` = 设备连不到本引擎自己的地址(引擎在中继 / 网关之后)时该拨的那一个 ws(s) URL,**逐字**上能力面 `deviceExecutor.relayUrl`
-         *  (唯一消费点 `http/routes/capabilities.ts`);`{ kind: "none" }`(字面 `none`)= 没有中继,设备按本引擎地址 + `deviceExecutor.wsPath` 拨号,能力面不带 `relayUrl`。
-         *  必填的理由:「设备拨哪里」只有运维知道;缺席曾被读成「直拨」,于是撤掉中继声明而根会话行上还有设备绑定时,设备改拨引擎地址(入口已收窄则拨不到)、
-         *  绑定却留在格上 —— 缺席与「声明了直拨」是两件事,只有后者放行。`none` ∧ 有绑定 ⇒ 起服 warn 点名绑定数(`boot/device-lane.ts`)。
-         *  **不派生**:`FLEET_ADVERTISE_ADDRESS` 是对中心公告的地址(内网 pod IP / 容器别名),受众不是用户机器上的设备;从它拼出来的入口对设备多半不可达。
-         *  URL 形门 = ws / wss 绝对地址,无 userinfo / query / fragment、不带凭据形(值逐字上能力面),坏值**拒启**。 */
-        relay: DeviceRelayDeclaration;
-        /** `DEVICE_SUPERSEDE`(默认 `stale_only`)= 同 deviceId 二连的顶替策略(§5.2)。 */
-        supersede?: "stale_only" | "deny";
-    } | {
-        provider: "local-docker";
-        image: string;
-        mountPath?: string;
-        dockerPath?: string;
-        dockerHost?: string;
-        memory?: string;
-        cpus?: number;
-        pidsLimit?: number;
-        dropAllCaps?: boolean;
-        network?: "none" | "bridge" | "host";
-        commandTimeoutMs?: number;
-        /** [ref] —— `DOCKER_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同一只解析器、
-         *  同一只谓词;每条 `docker exec` 以 `-e K=V` 注入)。键缺席 = 旋钮未设 / 空串。 */
-        env?: Record<string, string>;
-    };
+    remoteExec: RemoteExecConfig;
     /**
      * SVC-3 git-WORKTREE ISOLATION ([ref] CORE-6). Opt-in (WORKTREE_ISOLATION_ENABLED + WORKTREE_REPO_ROOT).
      * When set, the deployment's `executionEnvFactory` is wrapped so an agent core marks `isolation:"worktree"`
@@ -1299,6 +1286,10 @@ export interface ServiceConfigFlat {
     attachmentMimeAllowlist?: string[];
     /** D-1 未绑定附件 TTL(上传后从未被任何 task 引用的行,过期由 reaper 收割;缺省 24h)。 */
     attachmentUnboundTtlMs: number;
+    /** 收编批量导入 `POST /v1/adoption/:id/sessions`:每请求最多几个会话信封(`ADOPTION_IMPORT_MAX_SESSIONS`;缺省 / 地板见 `adoption/import-limits.ts`)。 */
+    adoptionImportMaxSessions: number;
+    /** 收编批量导入:每个会话信封最多多少字节(信封 JSON 的 UTF-8 字节;`ADOPTION_IMPORT_MAX_SESSION_BYTES`;缺省 / 地板 / 上帽见 `adoption/import-limits.ts`)。 */
+    adoptionImportMaxSessionBytes: number;
     /** Header carrying the authenticated principal (S6). Identity never comes from the body. */
     principalHeader: string;
     /** Require the principal header on task requests (set true in multi-tenant production). */
@@ -1358,13 +1349,23 @@ export interface ServiceConfigFlat {
     /** Principals allowed to act as OPERATORS (`OPERATOR_PRINCIPALS`): every operator face reads it through the one reading
      *  `explicitOperatorOk` (`http/principal-gate.ts`) — e.g. the F4 approval queue (`/v1/approvals`): list ANY owner's pending +
      *  decide. A non-operator principal may only LIST ITS OWN pending. **Empty = no one is an operator** ([ref]: the old
-     *  "empty = everyone on the approval queue" reading is gone); a single-user deployment that wants to be its own operator
-     *  declares {@link operatorSingleUser}. */
+     *  "empty = everyone on the approval queue" reading is gone). A single-user deployment must answer "who operates it" — a named list here or {@link operatorSingleUser}; neither ⇒ refusal
+     *  (`operator-declaration-required`: the server process refuses at boot stage 1, and `createHttpServer` refuses for every assembler, embedders included). */
     operatorPrincipals: string[];
     /** `OPERATOR_SINGLE_USER=true` —— 单用户形显式声明「这台部署的每个调用方都是运维」([ref],[ref] ① 裁 A)。缺席 = 不声明(没人是,除非在名单里)。
      *  只在单用户形(`REQUIRE_PRINCIPAL` 未开)且名单为空时成立 —— 否则拒启(`config-invariants.ts` 的 `operator-single-user`:一个事实一个来源)。
+     *  单用户形上它与具名名单二者必有其一,都没有 ⇒ 拒启(服务进程起服第 1 段;嵌入方在 `createHttpServer`;`operator-declaration-required`,[ref];`false` 与缺席同判)。
      *  env 独有(没有中心写位),起服冻结。读法只有 `explicitOperatorOk` / `operatorRosterPresent` 两只。 */
     operatorSingleUser?: boolean;
+    /**
+     * `SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT` —— 「出示这台部署的 service 凭据、不报主体的调用方是谁」的**唯一声明座**。缺省 `true`(不设 = 今天的读法):
+     * 它代部署本人说话(fleet 调用方,运维聚合口的 service 臂);`false` ⇒ 它是**无身份调用方**,各面按既有的「过了凭据门、没有主体」那一臂答
+     * (fleet 读面 401 identity、运维聚合口 401 operator、舰队流多租 401 principal_required / 单用户落 `default`、写档 401 identity、无主 placed 子代 404)。
+     * 只改一处:`http/principal-gate.ts` 的 `actsForDeployment` 多这一个合取项 —— 它的两个读者(fleet 调用方的凭据臂、`/metrics*` 的 service 臂)一次继承,
+     * 零新拒码、零新闸点;自报位 `/health.auth.serviceTokenActsForDeployment` = 配了 service 凭据 ∧ 本位。没配 service 凭据的部署上声明 `false` 是空真(那一臂本来就够不着)。
+     * env 独有(词表布尔,词表外拒启;没有 `config.d` 文件形、没有中心写位),起服读一次、热路径够不着(不是热键)。
+     */
+    serviceTokenActsForDeployment: boolean;
     /**
      * DESIGN-278 §5 S2([ref])—— `GET /v1/config/catalog`(配置目录自描述端点)的显式旋钮。
      * 默认 **ON**(设计稿 §0.5:合规部署可关)。端点本身已是 operator-only(`explicitOperatorOk`,
@@ -1615,7 +1616,7 @@ export interface ServiceConfigFlat {
      *  tools for a declared `plan` itself, and no plan entry clamps the hands (only `AUTONOMY=read-only` does). */
     planModeEnabled: boolean;
     /**
-     * `HOOKS_TIMEOUT_MS` —— 请求 `settings.hooks` 那张 mods 注册(`settings.hooks`)每个 handler 的时间预算(ms;一个事件跑一遍本请求的钩子条目)。
+     * `HOOKS_TIMEOUT_MS` —— 请求 hooks 的每张车道注册(`settings.hooks` / `settings.hooks.managed`,各一份同值)每个 handler 的时间预算(ms;一个事件跑一遍这条车道的钩子条目)。
      * **缺席 = 不铸键**;唯一读法 = `hooks/hook-runner.ts` 的 `settingsHooksBudgetMs`(未设 ⇒ 600000,单条命令超时的上限;这只数是引擎的钟,不是钩子子进程的墙钟)。
      *
      * 🔴 `0` 是有效值(引擎按字面:零预算,下一个定时器拍就到期),不是「未设」;
@@ -1663,6 +1664,13 @@ export interface ServiceConfigFlat {
      *  failed/stoppedBy=system(诚实终态,跨实例读面永不虚构存活)。core 契约要求 ≥10min(60s 心跳的
      *  安全裕度),**下限 10min 硬钳**。Default 15min。`BG_AGENT_STALE_RUNNING_MS`。 */
     backgroundAgentStaleRunningMs: number;
+    /** 会话驻留后台子代理的**停滞收割窗**(ms):一行 `running` 的会话驻留后台子代理最后一次工具活动距今超过它 ⇒ 引擎把行收成 `killed`(归因 `system`)、
+     *  run 中止(引擎的 `TaskRegistry.reapStaleSessionBackgroundAgents`;按静默判,不按年龄)。收割在 `/health.inflight` 计法表的读口上、数活之前做
+     *  (`session-resident-background.ts`)—— 判停四处与 `/health` 读同一只读口,于是阻断集里的后台子代理一项有了上界。
+     *  与 `backgroundAgentStaleRunningMs` 不是同一个窗:那只量**写者进程**的 60 s 心跳(进程死没死),这只量**子代**的工具活动(子代卡没卡),
+     *  一条 30 min 的工具调用就是 30 min 静默。缺省 = 下限 = `backgroundAgentStallFloorMs(…)` 的派生值(等人的四个窗取大 + 引擎单命令上限,
+     *  单用户 posture 下 ≈ 24 h 10 min),只许拉大,没有「关」。`BG_AGENT_STALL_MS`。 */
+    backgroundAgentStallMs: number;
     /** core 1.382([ref],[ref] 提货单④)`TaskRegistry.reconcileParkedAgents` 的 stale-claim 清算窗
      *  ——core 该整块逻辑被 `opts.staleClaimMaxAgeMs !== undefined` 门住,缺席 = **整块清算永不运行**
      *  (claim 后 claimer 进程崩死的行永久卡在"已 claim 不可再 claim"态,只能等 checkpoint TTL 自然过期;
@@ -1891,7 +1899,7 @@ export interface ServiceConfigFlat {
      *  under the shared-engine shape (several shell sessions on one config, engine rides the FIRST shell's process
      *  group per the T11 anti-orphan call) other live sessions may still be using this engine, so an unconditional
      *  drain kills a peer mid-turn (499) and 503s new submits. Instead SIGHUP arms an idle watch: shut down only
-     *  after `inflight()` (bg/resume legs + live streams) has been 0 for this long, WITHOUT flipping `draining`
+     *  after `inflight()` (bg/resume legs + live streams + background sub-agents that outlived their leg — the blocking set `http + leader + backgroundAgents`; session-resident background shells/monitors are in the `/health.inflight` total but do not block) has been 0 for this long, WITHOUT flipping `draining`
      *  (peers stay fully served). A true orphan (last window closed) self-terminates when the window expires —
      *  T11 stands, just bounded instead of immediate. A SECOND SIGHUP (or SIGTERM) escalates to the normal drain
      *  path. Default 120s, floor 5s. Env: SIGHUP_IDLE_GRACE_MS. */
@@ -1940,6 +1948,20 @@ export interface ServiceConfigFlat {
      *  `SEMA_PARENT_PID` 在不在场(operator-knob 铁律)。 Env: `ENGINE_ORPHAN_LINGER_MS`(默认 2000,闭区间
      *  [1000, 86400000])。 */
     engineOrphanLingerMs: number;
+    /** [ref]:**首次附着前**的宽限窗 —— 引擎起服以来还没有过任何非探针 HTTP 请求(态「候首触」)时,三合取要**持续**成立多久才自退;
+     *  生效窗 = `max(`{@link engineLingerMs}`, 本值)`(宽限只拉长不缩短;`ENGINE_AUTO_EXIT` 关着 ⇒ owned 窗 = ∞ ⇒ 它也是 ∞)。首个非探针请求
+     *  到达之后回到 {@link engineLingerMs}、单向;父死之后一律 {@link engineOrphanLingerMs}(孤儿压过候首触)。默认 **180000**:防的是一次性
+     *  `-p` 壳在 spawn 与首次接触之间被饿住(高载宿主 / CI)超过 owned 窗 —— 从没被碰过的引擎此前按 owned 窗自退,壳醒来起步失败。
+     *  `0` = 不给额外宽限(逐字回到本键之前的行为);小于 owned 窗的值同样落成 owned 窗。与两只静默窗**同一只校验器、同一对上下界**,
+     *  多放行字面 `0`(别的零形照常拒);`1..999`(秒当毫秒)与其余坏值**拒启**;解析**无条件**(operator-knob 铁律)。 Env: `ENGINE_FIRST_ATTACH_MS`(默认 180000,
+     *  取值 `0` 或闭区间 [1000, 86400000])。 */
+    engineFirstAttachMs: number;
+    /** [ref]([ref] v3):**交接车道**的静默窗 —— 壳经 `POST /v1/engine/handover` 把引擎交给后台、自己退出之后,三合取(无附着 ∧ 无在飞 ∧
+     *  无运行中、引擎一退就会被收掉的后台 shell)要**持续**成立多久才自退。下一只壳 `POST /v1/engine/attach` 即离开本车道。默认 **1800000**(30 min):
+     *  防的是「用户忘了后台引擎」,不是上限 —— 后台 shell 在跑时本窗不起算(那正是选「后台继续」的意思)。与其余三只窗**同一只校验器**,下界单独是
+     *  60000(交接后的窗比壳重启窗还短没有意义);坏值**拒启**;解析**无条件**(operator-knob 铁律,不看 `ENGINE_AUTO_EXIT` / `SEMA_PARENT_PID`)。
+     *  Env: `ENGINE_HANDOVER_LINGER_MS`(默认 1800000,闭区间 [60000, 86400000])。 */
+    engineHandoverLingerMs: number;
     /** E23 (shell-host contract): inbound MCP elicitation HITL. When enabled, the service mounts `RunnerDeps.onElicit` + the
      *  `POST /v1/elicitations/:id/respond` route so an opted-in MCP server (`McpServerSpec.elicitation`, itself default
      *  OFF) can ask the END USER for input mid-tool-call. LIVE-ONLY (no durable suspend; lost on crash/replica-change).
@@ -2170,6 +2192,14 @@ export interface ServiceConfigFlat {
     logLevel: "debug" | "info" | "warn" | "error";
     /** Per-principal request cap per minute on task/run endpoints. 0 disables. */
     rateLimitPerMin: number;
+    /** `RUN_MAX_CONCURRENT`:本副本**在飞 run 的全局上限**(整数,0 / 缺省 = 不设)。一条新提交要起 run 时,在飞数已到帽 ⇒ 429 `limit.rate_exceeded`
+     *  + 机读 `reason: "run_concurrency_cap"` + `retryAfterSec: 5`(同值 `Retry-After` 头)。数的是 `inflightRuns ∪ steerableRuns`(与 `drainState.inflight` 同源);
+     *  判点在三个提交门(`POST /v1/runs` 与 A2A `message/send`、`POST /v1/tasks`、`POST /v1/tasks/stream`)的幂等重放之后;续跑 / 唤醒 / 审批作答不判。
+     *  属主 `http/run-concurrency-cap.ts`。 */
+    runMaxConcurrent: number;
+    /** `RUN_MAX_CONCURRENT_PER_PRINCIPAL`:同一**已验提交主体**(`gatedPrincipal`,与成本配额门同键)在本副本的在飞 run 上限(整数,0 / 缺省 = 不设)。
+     *  无主体请求(无头 service 凭据)不判这一帽,只受 {@link ServiceConfigFlat.runMaxConcurrent}。 */
+    runMaxConcurrentPerPrincipal: number;
     /** Operator CEILING on per-task cost (USD) / tokens (1.37 budget gate). A request may ask for a
      *  LOWER limit but is capped to this; 0/unset = no ceiling. The review gateway sets these to stop a
      *  single task from burning the shared cloud key. Enforced by core (failed + errorCode budget.*). */
@@ -2337,11 +2367,11 @@ export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled"
  *  三者都是 operator 在配置面写下的**治理声明**(与 autonomy/commandPolicy 同族),不是存储旋钮
  *  ——`retentionPolicy` 尤其容易被误归 store 组:它的消费点是 core 的启动期能力校验与将来的调度面,
  *  config 这一层它只是一句声明。 */
-export type ServiceAuthConfig = Pick<ServiceConfigFlat, "authToken" | "authTokens" | "allowUnauthedWrites" | "corsOrigins" | "principalHeader" | "requirePrincipal" | "autonomy" | "commandPolicy" | "compliancePosture" | "lockedConfigKeys" | "configCatalogEnabled" | "retentionPolicy" | "retentionSweep" | "operatorPrincipals" | "operatorSingleUser" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "authBridgeIssuer" | "principalJwtMaxTtlSec" | "bindHost" | "bindHostSource">;
+export type ServiceAuthConfig = Pick<ServiceConfigFlat, "authToken" | "authTokens" | "allowUnauthedWrites" | "corsOrigins" | "principalHeader" | "requirePrincipal" | "autonomy" | "commandPolicy" | "compliancePosture" | "lockedConfigKeys" | "configCatalogEnabled" | "retentionPolicy" | "retentionSweep" | "operatorPrincipals" | "operatorSingleUser" | "serviceTokenActsForDeployment" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "authBridgeIssuer" | "principalJwtMaxTtlSec" | "bindHost" | "bindHostSource">;
 /** 组:orchestration(编排 + 执行车道 + 沙箱面 + workflow/后台 agent 存留)。 */
-export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "sandboxGit" | "remoteExec" | "remoteExecHomeDir" | "requireExecutionLane" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerSessionLifetime" | "schedulerStorePath" | "planModeEnabled" | "hooksTimeoutMs" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "usageWindows" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentParkClaimStaleMs" | "delegationEntryCaps" | "rosterRetentionMs" | "leaderRunStaleMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sandboxPkgSourceCustom" | "sessionAutoTitle" | "sessionAutoTitleSource" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspEnabled" | "lspHostEnabled" | "lspEnvAllow" | "imageBakes" | "readFace" | "readFaceSource" | "taskWriteFaceEscalation" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "readDenyFloorRequired" | "sandboxReadFloor" | "agentConfigDir" | "configLkgPath" | "configLkgEnabled">;
+export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "sandboxGit" | "remoteExec" | "remoteExecHomeDir" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerSessionLifetime" | "schedulerStorePath" | "planModeEnabled" | "hooksTimeoutMs" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "usageWindows" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentStallMs" | "backgroundAgentParkClaimStaleMs" | "delegationEntryCaps" | "rosterRetentionMs" | "leaderRunStaleMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sandboxPkgSourceCustom" | "sessionAutoTitle" | "sessionAutoTitleSource" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspEnabled" | "lspHostEnabled" | "lspEnvAllow" | "imageBakes" | "readFace" | "readFaceSource" | "taskWriteFaceEscalation" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "readDenyFloorRequired" | "sandboxReadFloor" | "agentConfigDir" | "configLkgPath" | "configLkgEnabled">;
 /** 组:limitsHttp(HTTP 面 + 各类上限/配额/回收窗)。 */
-export type ServiceLimitsHttpConfig = Pick<ServiceConfigFlat, "port" | "attachmentOrphanGraceMs" | "workspaceFileMaxBytes" | "attachmentMaxBytes" | "attachmentMimeAllowlist" | "attachmentUnboundTtlMs" | "infraCostRates" | "drainGraceMs" | "drainSecondSignalMinGapMs" | "sighupIdleGraceMs" | "parentPid" | "engineAutoExit" | "engineLingerMs" | "engineOrphanLingerMs" | "rateLimitPerMin" | "maxTaskCostUsd" | "maxTaskTokens" | "maxPrincipalCostUsd" | "costQuotaWindowSec" | "reapIntervalSec" | "runStaleSec" | "toolResultTtlSec">;
+export type ServiceLimitsHttpConfig = Pick<ServiceConfigFlat, "port" | "attachmentOrphanGraceMs" | "workspaceFileMaxBytes" | "attachmentMaxBytes" | "attachmentMimeAllowlist" | "attachmentUnboundTtlMs" | "adoptionImportMaxSessions" | "adoptionImportMaxSessionBytes" | "infraCostRates" | "drainGraceMs" | "drainSecondSignalMinGapMs" | "sighupIdleGraceMs" | "parentPid" | "engineAutoExit" | "engineLingerMs" | "engineOrphanLingerMs" | "engineFirstAttachMs" | "engineHandoverLingerMs" | "rateLimitPerMin" | "runMaxConcurrent" | "runMaxConcurrentPerPrincipal" | "maxTaskCostUsd" | "maxTaskTokens" | "maxPrincipalCostUsd" | "costQuotaWindowSec" | "reapIntervalSec" | "runStaleSec" | "toolResultTtlSec">;
 /** 组:observability(可观测)。 */
 export type ServiceObservabilityConfig = Pick<ServiceConfigFlat, "metricsToken" | "traceToken" | "toolTrace" | "traceThinking" | "logLevel" | "otel">;
 /** 组:integrations(外部集成)。`mcpServers` / `a2aPeers` 由 web-admin 适配器填(无 env 腿),归本组。 */
@@ -2362,4 +2392,17 @@ export interface ServiceConfigGroups {
 /** Service configuration = 平铺面(唯一存储处,消费点原样) ∩ 九个组视图(additive,不可枚举)。 */
 export interface ServiceConfig extends ServiceConfigFlat, ServiceConfigGroups {
 }
+/**
+ * `loadConfig()` 的产物 —— **raw** 形(合成之前):执行车道可以缺席(env `REMOTE_EXEC` 未设;`CONFIG_PROVIDER=local` 下车道也可以由
+ * `config.d/remote-exec.json` 声明,读它是合成步的事)。缺席不是任何车道:读者不得把它折成某条车道。只有执行车道合成步
+ * (`boot/execution-lane.ts` 的 `composeExecutionLane`)把它收成 {@link ServiceConfig}(composed:`remoteExec` 必在)—— 没有显式声明 ⇒ 拒启。
+ * 装配链上合成之后的每一段、`createHttpServer`、run-local 只收 composed 形 ⇒ 漏调合成步的嵌入方 tsc 红(这就是通知)。
+ * 组视图 `orchestration` 与平铺面是同一个对象的两个取景器,所以车道位在两处一起放宽。
+ */
+export type LoadedConfig = Omit<ServiceConfig, "remoteExec" | "orchestration"> & {
+    remoteExec?: RemoteExecConfig;
+    orchestration: Omit<ServiceOrchestrationConfig, "remoteExec"> & {
+        remoteExec?: RemoteExecConfig;
+    };
+};
 //# sourceMappingURL=config-types.d.ts.map