@sema-agent/server 7.146.0 → 7.147.0

package/dist/config.js

@@ -3,7 +3,7 @@ import { DEFAULT_AT_MENTION, DEFAULT_MODEL_REF, mintCapabilityKeys } from "./mod
 import { homedir } from "node:os";
 import { isAbsolute, join, posix as posixPath } from "node:path";
 import { fileURLToPath } from "node:url";
-import { compileAllowList, inheritEnvPolicyProblem, BUILTIN_COMPLIANCE_DENIES, COMPLIANCE_CAPABILITIES, CROSS_SESSION_INBOUND_SETTINGS, CROSS_SESSION_DIALOG_EXPIRY_VALUES, compileReadDeny, resolveReadDenyBuiltins, isModelPriced, PROTOCOL_TABLE, RECOMMENDED_SENSITIVE_PATTERNS, judgeRuleToolName, resolveFileHistoryRetention, resolveLockedKeys, validatePermissionRules, WRITE_PROTECTED_DEFAULT_TABLE, resolveWriteProtectedTable, principalInboxConsumerOf, carriesCredential, isReplicableScope } from "@sema-agent/core";
+import { compileAllowList, inheritEnvPolicyProblem, BUILTIN_COMPLIANCE_DENIES, COMPLIANCE_CAPABILITIES, CROSS_SESSION_INBOUND_SETTINGS, CROSS_SESSION_DIALOG_EXPIRY_VALUES, compileReadDeny, resolveReadDenyBuiltins, isModelPriced, PROTOCOL_TABLE, RECOMMENDED_SENSITIVE_PATTERNS, judgeRuleToolName, resolveFileHistoryRetention, resolveLockedKeys, validatePermissionRules, WRITE_PROTECTED_DEFAULT_TABLE, resolveWriteProtectedTable, principalInboxConsumerOf, carriesCredential, isReplicableScope, resolveBashTimeoutCaps } from "@sema-agent/core";
 import { ROSTER_PRIMARY_ROLES, ROSTER_CHEAP_ROLES, WEB_ADMIN_ENV, retiredEnvRefusal, stripControlAndBidi } from "@sema-agent/settings-schema";
 import { parseApprovalHmacKeys, parsePrincipalJwks } from "./auth-keys.js";
 import { DEFAULT_ELICITATION_THROTTLE } from "./elicitation.js";
@@ -11,6 +11,7 @@ import { buildRuleListJudgeOptions } from "./permission-rule-list.js";
 import { isV2ScopeKey, memoryReplicationCoverage, replicatesProjectLayersOf } from "./memory-scope.js";
 import { memorySyncPeerOf } from "./memory-sync-client.js";
 import { buildMemorySyncIdentityBootRefusal, declaredMemorySyncIdentityFlaw } from "./memory-sync-identity.js";
+import { formatEmbedderIdentityToken, formatReembedAssignment, parseEmbedderIdentityToken } from "./memory-embedder-reembed.js";
 import { assertProjectLayerOwnable } from "./project-identity.js";
 import { projectLayerOwnerOf } from "./project-layer-key.js";
 import { DEFAULT_QUESTION_THROTTLE } from "./question.js";
@@ -24,11 +25,10 @@ import { centerLaneConfigured, pathBaseUrlRefusal } from "./web-admin-client/cen
 import { resolveLocalDataRoot } from "./local-data-root.js";
 import { buildWriteProtectionPosture } from "./write-protection.js";
 import { normalizeSshFingerprint } from "./ssh-host-key.js";
-import { buildReadFacePostureNotice, settleDerivedReadFace } from "./read-face-posture.js";
 import { THINKING_LEVELS, THINKING_FORMATS, buildModelCompat, isThinkingFormat, isThinkingTier } from "./model-compat.js";
 import {} from "./posture-source.js";
 import { COST_QUOTA_WINDOW_SEC_RANGE, costQuotaWindowSecInRange } from "./observability/cost-quota.js";
-import { NAME_TABLE_BEHAVIOR, TOOL_NAME_ROSTER, describeUnmatchableRuleName, ruleEntryToolName, unmatchableRuleNameOf } from "./namespaced-rule-name.js";
+import { NAME_TABLE_BEHAVIOR, TOOL_NAME_ROSTER, describeUnmatchableRuleName, isRetiredWithoutSuccessor, retiredWithoutSuccessorEntries, ruleEntryToolName, unmatchableRuleNameOf } from "./namespaced-rule-name.js";
 import { bakeOperatorPrincipalsRefusal, bakeRunnerCredentialRefusal, centerIdentityRefusal, halfOpenDirectDoorRefusal, leaderDurableStoreRefusal, operatorPrincipalsRequiredRefusal, operatorSingleUserRefusal, remoteConfigProviderUrlRefusal, retentionLaneRefusal, workflowParkDecisionDomainRefusal } from "./config-invariants.js";
 import { declaredSemaConfigDir } from "./sema-config-dir.js";
 import { lkgPathOverrideOf } from "./config-lkg.js";
@@ -39,7 +39,7 @@ import { SANDBOX_IPV6_DEFAULT, SANDBOX_IPV6_WORDS } from "./sandbox-egress-polic
 import { WORKSPACE_CACHE_DEFAULT, WORKSPACE_CACHE_MOUNT_DEFAULT, WORKSPACE_CACHE_MOUNT_RESERVED, WORKSPACE_CACHE_SIZE_DEFAULT, WORKSPACE_CACHE_WORDS, isK8sQuantity, mountsOverlap, reservedMountCollision } from "./workspace-cache.js";
 import { DEPLOYMENT_SHAPE_PREDICATES } from "./deployment-shape.js";
 import { sandboxForwardedEnvOf } from "./execution-config-root.js";
-import { SANDBOX_READ_FLOOR_DEFAULT, SANDBOX_READ_FLOOR_WORDS, executionLaneOf, executionLaneRequiredRefusal, laneMissingEnv, readDeclaredLaneTable } from "./execution-lane-caps.js";
+import { SANDBOX_READ_FLOOR_DEFAULT, SANDBOX_READ_FLOOR_WORDS, laneMissingEnv, readDeclaredLaneTable } from "./execution-lane-caps.js";
 import { MEMORY_ENGINE_BACKENDS, SESSION_BACKENDS, STORE_BACKENDS } from "@sema-agent/settings-schema/execution-lanes";
 import { AUTONOMY_MODES } from "./runtime-governance.js";
 import { MAX_NAMED_INERT_ENTRIES, allowLayerEntryCountIssue, describeInertRuleEntries, inertRuleEntriesOf, inertRuleEntryGuidance, ruleEntryListShapeOk } from "./rule-entry-list.js";
@@ -192,14 +192,6 @@ const CONFIG_NOTICES = [];
 export function drainConfigNotices() {
     return CONFIG_NOTICES.splice(0, CONFIG_NOTICES.length);
 }
-let EXEC_LANE_NOTICE;
-function buildExecLaneNotice(remoteExec) {
-    const lane = executionLaneOf(remoteExec?.provider);
-    return {
-        lane,
-        source: lane === "in-process" ? "default-unset" : DEPLOYMENT_SHAPE_PREDICATES.singleMachineDefaultLane.holds({ remoteExec }) ? "default-local-provider" : "explicit-env",
-    };
-}
 const ENV_VALUE_ECHO_CHARS = 120;
 export function parseConfigProvider() {
     const raw = process.env.CONFIG_PROVIDER;
@@ -208,7 +200,7 @@ export function parseConfigProvider() {
     const word = CONFIG_PROVIDER_WORDS.find((w) => w === raw);
     if (word === undefined) {
         throw new Error(`env CONFIG_PROVIDER="${echoCallerText(raw, { maxChars: ENV_VALUE_ECHO_CHARS })}" must be one of: ${CONFIG_PROVIDER_WORDS.join(", ")} — or leave it unset (then ${WEB_ADMIN_ENV.url}, if set, selects the center as the config source; otherwise this worker is env-only). ` +
-            `The word is matched exactly (no trimming, no case folding). Refusing to boot rather than guessing: the config source, the execution-lane default and the local config root all key on this one word.`);
+            `The word is matched exactly (no trimming, no case folding). Refusing to boot rather than guessing: the config source and the local config root both key on this one word.`);
     }
     return word;
 }
@@ -254,10 +246,6 @@ export function logConfigDiagnostics(logger) {
             }
         }
     }
-    const laneNotice = EXEC_LANE_NOTICE;
-    EXEC_LANE_NOTICE = undefined;
-    if (laneNotice && logger.info)
-        logger.info("exec_lane_selected", { lane: laneNotice.lane, source: laneNotice.source });
     if (logger.debug) {
         for (const k of configKnobTable()) {
             logger.debug("config_knob_polarity", {
@@ -407,8 +395,21 @@ function parseDeviceRelayUrlEnv(raw) {
     }
     return { kind: "url", url: raw };
 }
+export function entryDeclarableRemoteExec(lane) {
+    switch (lane) {
+        case "host":
+            return {
+                provider: "host",
+                ...(process.env.HOST_WORKSPACE_BASE ? { workspaceBase: process.env.HOST_WORKSPACE_BASE } : {}),
+                ...((n) => (n !== undefined ? { commandTimeoutMs: n } : {}))(optNumEnvStrict("HOST_COMMAND_TIMEOUT_MS")),
+            };
+        case "none":
+            return { provider: "none" };
+    }
+}
+const envNamesNoLane = (raw) => raw === undefined || raw === "";
 function declaredExecutionLane(raw) {
-    if (raw === undefined || raw === "")
+    if (envNamesNoLane(raw))
         return undefined;
     const table = readDeclaredLaneTable(raw);
     if ("refusal" in table)
@@ -422,7 +423,7 @@ function declaredExecutionLane(raw) {
     const missing = laneMissingEnv(lane, process.env);
     if (missing.length > 0) {
         throw new Error(`REMOTE_EXEC=${lane} but required env ${missing.join(", ")} ${missing.length === 1 ? "is" : "are"} unset, empty or whitespace-only — it counts as absent: ` +
-            `refusing to start rather than silently downgrading to the host/in-process lane (#157; set ${missing.length === 1 ? "it" : "them"}, or unset REMOTE_EXEC if you meant no sandbox lane).`);
+            `refusing to start rather than silently running on another lane (#157; set ${missing.length === 1 ? "it" : "them"}, or declare REMOTE_EXEC=none if the agent's tools need no execution environment).`);
     }
     return lane;
 }
@@ -563,9 +564,9 @@ function ownCredentialNameProblem(name, channel) {
 }
 const NAMES_IN_FORCE = {
     LSP_ENV_ALLOW: (c) => c.lspEnvAllow,
-    E2B_SANDBOX_ENV: (c) => (c.remoteExec?.provider === "e2b" ? Object.keys(sandboxForwardedEnvOf(c)) : []),
-    K8S_SANDBOX_ENV: (c) => (c.remoteExec?.provider === "k8s" ? Object.keys(sandboxForwardedEnvOf(c)) : []),
-    DOCKER_SANDBOX_ENV: (c) => (c.remoteExec?.provider === "local-docker" ? Object.keys(sandboxForwardedEnvOf(c)) : []),
+    E2B_SANDBOX_ENV: (c) => (c.remoteExec.provider === "e2b" ? Object.keys(sandboxForwardedEnvOf(c)) : []),
+    K8S_SANDBOX_ENV: (c) => (c.remoteExec.provider === "k8s" ? Object.keys(sandboxForwardedEnvOf(c)) : []),
+    DOCKER_SANDBOX_ENV: (c) => (c.remoteExec.provider === "local-docker" ? Object.keys(sandboxForwardedEnvOf(c)) : []),
 };
 const SERVER_ENV_NAME_ALLOWLIST_KNOBS = Object.keys(NAMES_IN_FORCE);
 export function sandboxEnvNamesInForce(seats) {
@@ -1060,16 +1061,17 @@ function parseModelDomain() {
     }
     const extraBody = buildExtraBody();
     const thinkingDefault = parseDefaultThinking(process.env.MODEL_DEFAULT_THINKING);
-    const envCompatDeclared = buildModelCompat({
+    const envApi = provider === "anthropic" ? "anthropic-messages" : "openai-completions";
+    const envCompatDeclared = buildModelCompat("openai-completions", {
         reasoningEffortLevels: parseReasoningEffortLevels(csv("MODEL_REASONING_EFFORT_LEVELS")),
         thinkingFormat: parseThinkingFormat(process.env.MODEL_THINKING_FORMAT),
     });
-    const envCompat = provider === "anthropic" ? undefined : envCompatDeclared;
+    const envCompat = envApi === "openai-completions" ? envCompatDeclared : undefined;
     const modelCapability = { reasoning: parseBoolWord("MODEL_REASONING", process.env.MODEL_REASONING), vision: parseBoolWord("MODEL_VISION", process.env.MODEL_VISION) };
     const model = {
         id: modelId,
         name: modelId,
-        api: provider === "anthropic" ? "anthropic-messages" : "openai-completions",
+        api: envApi,
         provider,
         baseUrl: "",
         ...mintCapabilityKeys(modelCapability),
@@ -1312,7 +1314,8 @@ function findUnmatchableToolNames(names, opts) {
             }
         }
         const subject = opts.consumer === "tool-name-table" ? name : ruleEntryToolName(name);
-        const verdict = unmatchableRuleNameOf(subject, opts.behavior);
+        const judged = unmatchableRuleNameOf(subject, opts.behavior);
+        const verdict = opts.noticeSeat !== undefined && isRetiredWithoutSuccessor(judged) ? undefined : judged;
         if (verdict?.kind === "retired") {
             out.push({ name, guidance: describeUnmatchableRuleName(verdict, subject), reason: verdict.kind });
             continue;
@@ -1425,9 +1428,21 @@ function parseApprovalDomain(ctx) {
     const dgHmacKeys = parseApprovalHmacKeys(process.env.APPROVAL_HMAC_KEYS, announceKeySetRejection("APPROVAL_HMAC_KEYS"));
     const durableApproval = postureOn("DURABLE_APPROVAL", infraReady);
     const rejectUnmatchableToolNames = (envName, names) => {
-        const unmatchable = unmatchableToolNamesRefusal(envName, names, { consumer: "tool-name-table", behavior: NAME_TABLE_BEHAVIOR });
+        const unmatchable = unmatchableToolNamesRefusal(envName, names, { consumer: "tool-name-table", behavior: NAME_TABLE_BEHAVIOR, noticeSeat: "server" });
         if (unmatchable !== undefined)
             throw new Error(unmatchable.message);
+        const skipped = retiredWithoutSuccessorEntries(names, NAME_TABLE_BEHAVIOR);
+        if (skipped.length > 0) {
+            CONFIG_NOTICES.push({
+                level: "warn",
+                event: "approval_list_legacy_tool_name",
+                fields: {
+                    env: envName,
+                    entries: JSON.stringify(skipped.map((s) => s.entry)),
+                    note: `${skipped.map((s) => `${displayListEntry(s.entry)} (${s.guidance})`).join("; ")} — ${skipped.length === 1 ? "a tool name" : "tool names"} the engine retired with no successor: ${skipped.length === 1 ? "it reaches" : "they reach"} no tool this server knows, so ${skipped.length === 1 ? "the entry guards" : "the entries guard"} nothing (kept as written: a tool of that exact name mounted by an embedder is still matched) and the server starts. Remove ${skipped.length === 1 ? "it" : "them"} from ${envName} if written for the retired tool.`,
+                },
+            });
+        }
         return names;
     };
     return {
@@ -1659,6 +1674,7 @@ function parseMemoryEmbedder(ctx) {
     const dimRaw = process.env.MEMORY_EMBEDDER_DIM || undefined;
     const apiKey = process.env.MEMORY_EMBEDDER_API_KEY || undefined;
     const timeoutRaw = process.env.MEMORY_EMBEDDER_TIMEOUT_MS || undefined;
+    const reembedRaw = process.env.MEMORY_EMBEDDER_REEMBED || undefined;
     const trio = [
         ["MEMORY_EMBEDDER_ENDPOINT", endpoint],
         ["MEMORY_EMBEDDER_MODEL", model],
@@ -1666,8 +1682,11 @@ function parseMemoryEmbedder(ctx) {
     ];
     const missing = trio.filter(([, v]) => v === undefined).map(([name]) => name);
     if (missing.length === 3) {
-        if (timeoutRaw !== undefined || apiKey !== undefined) {
-            throw new Error(`MEMORY_EMBEDDER_TIMEOUT_MS/MEMORY_EMBEDDER_API_KEY are set but the embedder itself is not configured — refusing to start half-configured (set MEMORY_EMBEDDER_ENDPOINT, MEMORY_EMBEDDER_MODEL and MEMORY_EMBEDDER_DIM to enable the memory vector plane, or unset the other MEMORY_EMBEDDER_* keys)`);
+        const dependents = [["MEMORY_EMBEDDER_TIMEOUT_MS", timeoutRaw], ["MEMORY_EMBEDDER_API_KEY", apiKey], ["MEMORY_EMBEDDER_REEMBED", reembedRaw]]
+            .filter(([, v]) => v !== undefined)
+            .map(([name]) => name);
+        if (dependents.length > 0) {
+            throw new Error(`${dependents.join("/")} ${dependents.length === 1 ? "is" : "are"} set but the embedder itself is not configured — refusing to start half-configured (set MEMORY_EMBEDDER_ENDPOINT, MEMORY_EMBEDDER_MODEL and MEMORY_EMBEDDER_DIM to enable the memory vector plane, or unset the other MEMORY_EMBEDDER_* keys)`);
         }
         return undefined;
     }
@@ -1690,12 +1709,26 @@ function parseMemoryEmbedder(ctx) {
     if (!ctx.memoryEngineEnabled) {
         throw new Error("MEMORY_EMBEDDER_* is set but MEMORY_ENGINE=off — the memory engine is not wired at all, so the embedder would never be called; unset one of the two (#228)");
     }
+    if (reembedRaw !== undefined) {
+        const configured = formatEmbedderIdentityToken({ model, dimensions });
+        const confirmed = parseEmbedderIdentityToken(reembedRaw);
+        if (confirmed === undefined) {
+            throw new Error(`MEMORY_EMBEDDER_REEMBED=${JSON.stringify(reembedRaw.length > 200 ? `${reembedRaw.slice(0, 200)}…` : reembedRaw)} is not a re-embed confirmation — the value must name the embedder identity being confirmed as <model>/<dimensions> ` +
+                `(for this configuration: ${formatReembedAssignment({ model, dimensions })}). It confirms that the memory vector column may be cleared and re-embedded into that identity when the recorded identity does not match; ` +
+                "an on/off value is refused because it would also confirm the NEXT model change. Fix the value or unset it.");
+        }
+        if (confirmed.model !== model || confirmed.dimensions !== dimensions) {
+            throw new Error(`MEMORY_EMBEDDER_REEMBED=${formatEmbedderIdentityToken(confirmed)} confirms re-embedding into a different identity than the configured embedder ${configured} ` +
+                `(MEMORY_EMBEDDER_MODEL / MEMORY_EMBEDDER_DIM) — a stale confirmation never clears vectors for another model. Set ${formatReembedAssignment({ model, dimensions })} to confirm this change, or unset it.`);
+        }
+    }
     return {
         endpoint,
         model,
         dimensions,
         timeoutMs: numEnvBounded("MEMORY_EMBEDDER_TIMEOUT_MS", "30000", 1000, 300_000),
         ...(apiKey !== undefined ? { apiKey } : {}),
+        ...(reembedRaw !== undefined ? { reembedConfirmed: true } : {}),
     };
 }
 function parseMemoryConsolidationDriver() {
@@ -1959,8 +1992,14 @@ function parseAuthDomain(ctx) {
         principalJwtMaxTtlSec,
     };
 }
+export const BG_AGENT_SILENCE_FLOOR_MS = 10 * 60_000;
+export function backgroundAgentStallFloorMs(f) {
+    const personWaitMs = Math.max(f.streamApproval.windowMs, f.streamApproval.unreachedTtlMs, (f.questionThrottle ?? DEFAULT_QUESTION_THROTTLE).ttlMs, f.mcpElicitation.throttle.ttlMs);
+    return Math.max(BG_AGENT_SILENCE_FLOOR_MS, personWaitMs + f.commandCeilingMs);
+}
 function parseOrchestrationDomain(ctx) {
     const { postureOn, singleUserTurnkey } = ctx;
+    const backgroundAgentStallFloor = backgroundAgentStallFloorMs({ ...ctx.personGates, commandCeilingMs: resolveBashTimeoutCaps().maxMs });
     const workflowSizeGuidelineRaw = process.env.WORKFLOW_SIZE_GUIDELINE;
     if (workflowSizeGuidelineRaw !== undefined && !["small", "medium", "large", "unrestricted"].includes(workflowSizeGuidelineRaw)) {
         throw new Error(`WORKFLOW_SIZE_GUIDELINE must be small|medium|large|unrestricted, got "${workflowSizeGuidelineRaw}"`);
@@ -1983,7 +2022,6 @@ function parseOrchestrationDomain(ctx) {
         ? { readFace: enumEnv("READ_FACE", "roots", ["open", "roots"]), readFaceSource: "env" }
         : { readFaceSource: "engine-default" };
     return {
-        requireExecutionLane: boolEnv("REQUIRE_EXECUTION_LANE", false),
         ...readFaceFacts,
         ...optionalEnumKey("taskWriteFaceEscalation", "TASK_WRITE_FACE_ESCALATION", process.env.TASK_WRITE_FACE_ESCALATION, TASK_WRITE_FACE_ESCALATIONS),
         ...(process.env.READ_DENY_PATTERNS !== undefined ? { readDenyPatterns: parseReadDenyPatternsEnv(process.env.READ_DENY_PATTERNS) } : {}),
@@ -2064,12 +2102,8 @@ function parseOrchestrationDomain(ctx) {
                                         ...(process.env.ADB_MOUNT_PATH ? { mountPath: process.env.ADB_MOUNT_PATH } : {}),
                                     }
                                     :
-                                        declaredLane === "host"
-                                            ? {
-                                                provider: "host",
-                                                ...(process.env.HOST_WORKSPACE_BASE ? { workspaceBase: process.env.HOST_WORKSPACE_BASE } : {}),
-                                                ...((n) => (n !== undefined ? { commandTimeoutMs: n } : {}))(optNumEnvStrict("HOST_COMMAND_TIMEOUT_MS")),
-                                            }
+                                        declaredLane === "host" || declaredLane === "none"
+                                            ? entryDeclarableRemoteExec(declaredLane)
                                             :
                                                 declaredLane === "local-docker" && process.env.DOCKER_IMAGE
                                                     ? {
@@ -2103,9 +2137,7 @@ function parseOrchestrationDomain(ctx) {
                                                                 ...(process.env.DEVICE_SUPERSEDE ? { supersede: enumEnv("DEVICE_SUPERSEDE", "stale_only", ["stale_only", "deny"]) } : {}),
                                                             }
                                                             :
-                                                                ctx.configProvider === "local"
-                                                                    ? { provider: "host", singleMachineDefault: true }
-                                                                    : undefined,
+                                                                undefined,
         worktreeIsolation: boolEnv("WORKTREE_ISOLATION_ENABLED", false) && process.env.WORKTREE_REPO_ROOT
             ? {
                 repoRoot: process.env.WORKTREE_REPO_ROOT,
@@ -2136,7 +2168,8 @@ function parseOrchestrationDomain(ctx) {
         workflowRunRetentionMs: clampEnvWithWarn("WORKFLOW_RUN_RETENTION_MS", String(30 * 24 * 60 * 60 * 1000), 60_000),
         ...(usageWindows ? { usageWindows } : {}),
         backgroundAgentRetentionMs: clampEnvWithWarn("BG_AGENT_RETENTION_MS", String(7 * 24 * 60 * 60 * 1000), 60_000),
-        backgroundAgentStaleRunningMs: clampEnvWithWarn("BG_AGENT_STALE_RUNNING_MS", String(15 * 60_000), 10 * 60_000),
+        backgroundAgentStaleRunningMs: clampEnvWithWarn("BG_AGENT_STALE_RUNNING_MS", String(15 * 60_000), BG_AGENT_SILENCE_FLOOR_MS),
+        backgroundAgentStallMs: clampEnvWithWarn("BG_AGENT_STALL_MS", String(backgroundAgentStallFloor), backgroundAgentStallFloor),
         backgroundAgentParkClaimStaleMs: clampEnvWithWarn("BG_AGENT_PARK_CLAIM_STALE_MS", String(60 * 60_000), 60_000),
         rosterRetentionMs: clampEnvWithWarn("ROSTER_RETENTION_MS", String(30 * 24 * 60 * 60 * 1000), 60_000),
         leaderRunStaleMs: clampEnvWithWarn("LEADER_RUN_STALE_MS", String(26 * 60 * 60 * 1000), 60_000),
@@ -2541,11 +2574,11 @@ const AUTH_GROUP_KEYS = [
     "principalJwtMaxTtlSec", "authBridgeIssuer", "bindHost", "bindHostSource",
 ];
 const ORCHESTRATION_GROUP_KEYS = [
-    "sandboxGit", "remoteExec", "remoteExecHomeDir", "requireExecutionLane", "worktreeIsolation", "leaderEnabled", "leaderFanoutEnabled", "routerEnabled", "selfOrchestrationEnabled",
+    "sandboxGit", "remoteExec", "remoteExecHomeDir", "worktreeIsolation", "leaderEnabled", "leaderFanoutEnabled", "routerEnabled", "selfOrchestrationEnabled",
     "selfOrchestrationModels", "selfOrchestrationWorkerIsolation", "forkEnabled", "experimentalObserverAgents",
     "schedulerEnabled", "schedulerSessionWakeup", "schedulerSessionLifetime", "schedulerStorePath", "planModeEnabled", "hooksTimeoutMs", "workflowRunStoreBackend",
     "workflowOrphanGraceMs", "workflowJournalRetentionMs", "workflowRunRetentionMs", "usageWindows", "workflowAgentsReadOnly",
-    "workflowSizeGuideline", "backgroundAgentRetentionMs", "backgroundAgentStaleRunningMs",
+    "workflowSizeGuideline", "backgroundAgentRetentionMs", "backgroundAgentStaleRunningMs", "backgroundAgentStallMs",
     "backgroundAgentParkClaimStaleMs", "delegationEntryCaps", "rosterRetentionMs", "leaderRunStaleMs", "scratchpadSweepTtlMs", "sandboxPkgSource", "sandboxPkgSourceCustom",
     "sessionAutoTitle", "sessionAutoTitleSource", "selectEnvironmentTool", "envFactsEnabled", "toolDeferLongtail", "lspEnabled", "lspHostEnabled", "lspEnvAllow",
     "imageBakes", "readFace", "readFaceSource", "taskWriteFaceEscalation", "readDenyPatterns", "readDenyBuiltinTiers", "readDenyBuiltinExclude", "readDenyFloorRequired", "sandboxReadFloor",
@@ -2599,6 +2632,9 @@ export function attachConfigGroups(flat) {
     }
     return flat;
 }
+function attachLoadedConfigGroups(flat) {
+    return attachConfigGroups(flat);
+}
 function k8sWorkspaceStore() {
     const workspacePersist = enumEnv("WORKSPACE_PERSIST", WORKSPACE_PERSIST_DEFAULT, WORKSPACE_PERSIST_WORDS);
     const workspaceSnapshotKeep = numEnvBounded("WORKSPACE_SNAPSHOT_KEEP", String(WORKSPACE_SNAPSHOT_KEEP_DEFAULT), WORKSPACE_SNAPSHOT_KEEP_RANGE.min, WORKSPACE_SNAPSHOT_KEEP_RANGE.max);
@@ -2669,7 +2705,6 @@ function k8sWorkspaceCache() {
     return { mount, size };
 }
 export function loadConfig() {
-    EXEC_LANE_NOTICE = undefined;
     rejectRetiredEnvs();
     CONFIG_WARNINGS.length = 0;
     CONFIG_NOTICES.length = 0;
@@ -2689,11 +2724,7 @@ export function loadConfig() {
     const approval = parseApprovalDomain({ postureOn, singleUserTurnkey, infraReady: durableStoreReady });
     const memory = parseMemoryDomain({ requirePrincipal });
     const auth = parseAuthDomain({ requirePrincipal });
-    const orchestration = parseOrchestrationDomain({ postureOn, singleUserTurnkey, configProvider });
-    settleDerivedReadFace(orchestration, singleUserTurnkey);
-    const readFaceNotice = buildReadFacePostureNotice(orchestration);
-    if (readFaceNotice !== undefined)
-        CONFIG_NOTICES.push({ level: "info", ...readFaceNotice });
+    const orchestration = parseOrchestrationDomain({ postureOn, singleUserTurnkey, personGates: approval });
     const limitsHttp = parseLimitsHttpDomain();
     const observability = parseObservabilityDomain();
     const integrations = parseIntegrationsDomain({ requirePrincipal, configProvider });
@@ -2755,12 +2786,7 @@ export function loadConfig() {
     if (parkDecisionDomainRefusal !== undefined) {
         throw new Error(parkDecisionDomainRefusal);
     }
-    const laneRequiredRefusal = executionLaneRequiredRefusal(orchestration);
-    if (laneRequiredRefusal !== undefined) {
-        throw new Error(laneRequiredRefusal);
-    }
-    EXEC_LANE_NOTICE = buildExecLaneNotice(orchestration.remoteExec);
-    return attachConfigGroups({
+    return attachLoadedConfigGroups({
         ...store,
         ...modelPlane,
         ...approval,

package/dist/degenerate-instrument.js

@@ -1,6 +1,6 @@
 import { failureCodeOf } from "./terminal.js";
 import { StoredSession } from "@sema-agent/core";
-import { TiDBSessionStorage } from "./plugins/tidb-session-storage.js";
+import { TiDBSessionStorage } from "./stores-sql/tidb-session-storage.js";
 const SUBSTANTIVE_CHARS = 200;
 const REP_WINDOW = 8192;
 const MIN_REPEATS = 3;

package/dist/deploy-facts.js

@@ -1,5 +1,6 @@
 import { TENANT_SEPARATION_WORDS } from "@sema-agent/settings-schema/execution-lanes";
-import { CHECKPOINT_CTX_KEY_SUBDIR, SEALED_KEY_DIR_MODE, SEALED_KEY_FILE_MODE } from "./sealed-key-layout.js";
+import { CHECKPOINT_CTX_KEY_SUBDIR, SEALED_KEY_DIR_MODE } from "./sealed-key-layout.js";
+import { OWNER_ONLY_FILE_MODE } from "./plugins/owner-only-file-mode.js";
 export const DEPLOY_FACTS_DIR = "deploy/facts";
 export const DEPLOY_FACTS_MEMBERS = ["lanes", "sandbox-rbac", "sealed-key"];
 export const DEPLOY_FACTS_CHANGES_FILE = "CHANGES.json";
@@ -65,7 +66,7 @@ export const SEALED_KEY_FACTS = {
     dirPath: SEALED_KEY_DIR_PATH_FORMS[0],
     subdirs: [CHECKPOINT_CTX_KEY_SUBDIR],
     dirMode: octal(SEALED_KEY_DIR_MODE),
-    fileMode: octal(SEALED_KEY_FILE_MODE),
+    fileMode: octal(OWNER_ONLY_FILE_MODE),
     requirements: SEALED_KEY_REQUIREMENTS,
 };
 export const SEALED_KEY_FACTS_SCHEMA = {

package/dist/deployment-shape.d.ts

@@ -9,7 +9,7 @@
  * ## 两根轴,每根轴一个读口(原始配置键只在这两个函数里被读)
  *  · `principal` —— 运维的 `REQUIRE_PRINCIPAL` 声明({@link readPrincipalAxis})。
  *  · `lane` —— `REMOTE_EXEC` 的归一车道词(`executionLaneOf`,认不出 ⇒ `undefined`,行必须 fail-closed)+ 那条车道的能力表行 +
- *    这份部署上执行环境的能力块(唯一作者 `capabilitiesFor`;k8s 的快照店是它的输入)+ 车道子旋钮(k8s 运行时类、隐式 host 尾臂记号)({@link readLaneAxis})。
+ *    这份部署上执行环境的能力块(唯一作者 `capabilitiesFor`;k8s 的快照店是它的输入)+ 车道子旋钮(k8s 运行时类)({@link readLaneAxis})。
  *
  * ## 轴列不是注释,是型
  * 每行的判官只收到它**声明**的那几根轴的事实({@link DeploymentShapeFacts}),读不到配置本身 —— 判官碰一根没声明的轴 = 编译红;
@@ -34,14 +34,14 @@ export interface PrincipalAxisFacts {
     /** 运维声明了 `REQUIRE_PRINCIPAL=true`。 */
     readonly declared: boolean;
 }
-/** `lane` 轴读的配置键:已装配的 `remoteExec` 里本表用得到的那几键(`ServiceConfig` 的判别联合每一臂结构上都满足)。 */
+/** `lane` 轴读的配置键:**已合成**的 `remoteExec` 里本表用得到的那几键(`ServiceConfig` 的判别联合每一臂结构上都满足;车道必在 ——
+ *  没有声明的部署在执行车道合成步拒启)。`provider` 收开放串:手搓的部署形 / 外部输入上认不出的词 ⇒ 行在 `lane` 那一格 fail-closed。 */
 export interface LaneAxisInput {
-    readonly remoteExec?: {
-        readonly provider?: string | undefined;
+    readonly remoteExec: {
+        readonly provider: string;
         readonly runtimeClass?: string | undefined;
         readonly s3Snapshot?: unknown;
-        readonly singleMachineDefault?: boolean | undefined;
-    } | undefined;
+    };
 }
 /** `lane` 轴的事实。 */
 export interface LaneAxisFacts {
@@ -53,8 +53,6 @@ export interface LaneAxisFacts {
     readonly block: ExecutionEnvCapabilities | undefined;
     /** k8s 的 `runtimeClass`(别的车道 `undefined`)。 */
     readonly k8sRuntimeClass: string | undefined;
-    /** host 车道值上带「单机形缺省」记号(唯一写者 = `config.ts` 三元链的隐式 host 尾臂;显式 `REMOTE_EXEC=host` 与文件覆写都不带)。 */
-    readonly singleMachineDefault: boolean;
 }
 /** 轴全集(闭集)→ 读入形与事实型。加一根轴 = 在这里加一键 + {@link readAxis} 的穷举 switch 加一臂(漏一处即编译红)。 */
 interface AxisShapes {
@@ -99,8 +97,8 @@ export declare const DEPLOYMENT_SHAPE_PREDICATES: Readonly<{
     callerOwnsWorkerDisk: DeploymentShapePredicate<"lane" | "principal">;
     /** wire `executionLane.toolsOnThisHost` 与出厂 / 中心技能的 `baseDir`:只问文件系统同一性,与租户无关(出厂内容每个租户拿到同一份)。 */
     toolsOnThisHost: DeploymentShapePredicate<"lane">;
-    /** `REMOTE_EXEC` 未设的进程内形(没有手)且单主:进程级消费者(hooks 命令、项目上下文本机读、卡批规则 root)看到的就是引擎自己的进程 cwd / env。 */
-    inProcessSingleUser: DeploymentShapePredicate<"lane" | "principal">;
+    /** 无手形(声明 `none`;判据读执行环境块 `io`,不点名车道词)且单主:进程级消费者(hooks 命令、项目上下文本机读、卡批规则 root)看到的就是引擎自己的进程 cwd / env。 */
+    noHandsSingleUser: DeploymentShapePredicate<"lane" | "principal">;
     /** 任务层替部署声明宿主姿态(bypassPermissions 开写面 / host shell 继承整份环境)的射程:device 车道上跨租户宿主穿越结构性不存在(clay 裁定③)。 */
     taskHostPostureDeclarations: DeploymentShapePredicate<"lane" | "principal">;
     /** 写门走代理裁决(执行环境块 `hostLocalPaths` 为假:路径不是本 worker 盘上的文件);认不出的词 ⇒ 走代理(代理 slot 空 ⇒ 写门 fail-closed)。 */
@@ -121,8 +119,19 @@ export declare const DEPLOYMENT_SHAPE_PREDICATES: Readonly<{
      * 读者:boot `remote_exec_enabled.suspendable`。
      */
     suspendableHands: DeploymentShapePredicate<"lane">;
-    /** 读者两处:`config.ts` 车道落点一行的 `source`(覆写之前)与 `boot/execution-env.ts` 的 `remote_exec_real_system.note`(覆写之后)—— 同一个记号、两个时刻。 */
-    singleMachineDefaultLane: DeploymentShapePredicate<"lane">;
+    /**
+     * 即时回退的工作区是否活过一次执行 —— run 外回退口(`POST /v1/sessions/:id/rewind-files`)写下的文件要落在一棵下一次执行就从它开始的工作区里;
+     * 工作区随执行结束一起没了(或下一次执行从别处重建它)的部署上,引擎照样恢复、台账照样报「恢复了」,结果却到不了任何人手里(静默的写面 fail-open)。
+     * 按车道穷举(新车道 = 编译红;认不出的车道 ⇒ 不成立):
+     *  · `host`:调用方声明的项目目录 ⇔ 车道能力 `callerCwd` 在这台部署上成立(单主;多租形上每个任务一只用完即删的目录)。单只会话还要本进程登记过它的 cwd、且那只目录实在 —— 那一半是口的 409,不是部署形;
+     *  · `device` / `ssh` / `adb`:一台常驻的真机器,环境拆毁 = 断连,不删文件;
+     *  · `local-docker`(拆毁 = `docker rm -f`)/ `e2b`(拆毁 = 杀 VM):每个任务一只新环境;
+     *  · `k8s`:不开工作区持久化 ⇒ 一次性 pod;开了 ⇒ 下一次执行从快照店恢复工作区,而工作区填充链(恢复后的附件填充)与拆毁时的快照持久化都还没纳入回退用途
+     *    (回退那一次取环境照样填充附件、存新快照,存失败也进不了回退的应答)⇒ 本版不成立,重开另票(用途感知的填充 + 持久化结果进回退应答);
+     *  · `none`:没有执行环境(能力事实先判无手车道,这里照样表态)。
+     * 读者:能力事实 `sessionRewindFiles`(能力位与该口的 501 同读这一行)。
+     */
+    rewindableWorkspace: DeploymentShapePredicate<"lane" | "principal">;
 }>;
 export {};
 //# sourceMappingURL=deployment-shape.d.ts.map

package/dist/deployment-shape.js

@@ -1,16 +1,15 @@
-import { capabilitiesFor, executionLaneCaps, executionLaneOf, handsOnWorkerFilePlane } from "./execution-lane-caps.js";
+import { capabilitiesFor, executionLaneCaps, executionLaneOf, handsOnWorkerFilePlane, laneWiresExecutionEnv } from "./execution-lane-caps.js";
 function readPrincipalAxis(deployment) {
     return { declared: deployment.requirePrincipal === true };
 }
 function readLaneAxis(deployment) {
     const declaration = deployment.remoteExec;
-    const lane = executionLaneOf(declaration?.provider);
+    const lane = executionLaneOf(declaration.provider);
     return {
         lane,
         caps: lane === undefined ? undefined : executionLaneCaps(lane),
         block: capabilitiesFor(deployment),
-        k8sRuntimeClass: lane === "k8s" ? declaration?.runtimeClass : undefined,
-        singleMachineDefault: lane === "host" && declaration?.singleMachineDefault === true,
+        k8sRuntimeClass: lane === "k8s" ? declaration.runtimeClass : undefined,
     };
 }
 function readAxis(axis, deployment) {
@@ -52,7 +51,7 @@ export const DEPLOYMENT_SHAPE_PREDICATES = Object.freeze({
     callerCwd: createPredicate(["lane", "principal"], "车道 × 租户 / 设备归属:调用方送来的 cwd(与 settings.env)被尊重 —— host 车道且单主,或 device 车道。", ({ lane, principal }) => lane.caps !== undefined && capabilityHolds(lane.caps.callerCwd, principal)),
     callerOwnsWorkerDisk: createPredicate(["lane", "principal"], "车道 × 租户:手就在本 worker 的盘上且部署只有一个主人 —— 这块盘上的路径就是调用方自己的。", ({ lane, principal }) => lane.lane !== undefined && handsOnWorkerFilePlane(lane.lane) && !principal.declared),
     toolsOnThisHost: createPredicate(["lane"], "车道:工具跑的那台机器就是本进程这台(手挂上了且文件平面在本 worker 盘上;车道列 handsOnWorkerFilePlane)。", ({ lane }) => lane.lane !== undefined && handsOnWorkerFilePlane(lane.lane)),
-    inProcessSingleUser: createPredicate(["lane", "principal"], "车道 × 租户:进程内车道(REMOTE_EXEC 未设)且部署只有一个主人。", ({ lane, principal }) => lane.lane === "in-process" && !principal.declared),
+    noHandsSingleUser: createPredicate(["lane", "principal"], "车道 × 租户:无手车道(声明 none;车道列 laneWiresExecutionEnv 为假)且部署只有一个主人。", ({ lane, principal }) => lane.lane !== undefined && !laneWiresExecutionEnv(lane.lane) && !principal.declared),
     taskHostPostureDeclarations: createPredicate(["lane", "principal"], "车道 × 租户 / 设备归属:任务层可以替部署声明宿主姿态 —— device 车道(发起者自己的设备),或单主部署。", ({ lane, principal }) => lane.lane === "device" || !principal.declared),
     sandboxPathAdjudication: createPredicate(["lane"], "车道:写门的路径事实要经代理到执行环境里取(文件平面不在本 worker 盘上;认不出的车道也走代理)。", ({ lane }) => lane.block === undefined || !lane.block.hostLocalPaths),
     sandboxSendUserFile: createPredicate(["lane", "principal"], "车道 × 租户:SendUserFile 的沙箱直传腿可以挂(沙箱盘 = 租户自己的任务工作区,或共享真机上的单主部署)。", ({ lane, principal }) => lane.caps !== undefined && capabilityHolds(lane.caps.sandboxSendUserFile, principal)),
@@ -67,6 +66,25 @@ export const DEPLOYMENT_SHAPE_PREDICATES = Object.freeze({
         return runtimeClass.startsWith("kata") || VM_ISOLATION_RUNTIME_CLASSES.has(runtimeClass);
     }),
     suspendableHands: createPredicate(["lane"], "车道:执行环境可挂起(e2b;k8s 以配了 S3 工作区快照店为前提)。", ({ lane }) => lane.block?.suspendable === true),
-    singleMachineDefaultLane: createPredicate(["lane"], "车道:host 车道是单机形缺省落点(REMOTE_EXEC 未设 ∧ CONFIG_PROVIDER=local,没人点名)。", ({ lane }) => lane.singleMachineDefault),
+    rewindableWorkspace: createPredicate(["lane", "principal"], "车道 × 租户:即时回退的工作区活过一次执行 —— 单主 host、device、ssh、adb 成立;多租 host、local-docker、e2b 每个任务重建工作区;k8s 的工作区填充与快照持久化尚未纳入回退。", ({ lane, principal }) => {
+        switch (lane.lane) {
+            case "host":
+                return lane.caps !== undefined && capabilityHolds(lane.caps.callerCwd, principal);
+            case "device":
+            case "ssh":
+            case "adb":
+                return true;
+            case "k8s":
+            case "local-docker":
+            case "e2b":
+            case "none":
+            case undefined:
+                return false;
+            default: {
+                const unhandled = lane.lane;
+                throw new Error(`rewindableWorkspace: no ruling for lane ${String(unhandled)}`);
+            }
+        }
+    }),
 });
 //# sourceMappingURL=deployment-shape.js.map

package/dist/env-facts.d.ts

@@ -1,5 +1,5 @@
 import type { ImageCapabilities } from "./plugins/store-contracts.js";
-import type { RemoteExecProvider } from "./execution-lane-caps.js";
+import type { ExecutionLane } from "./execution-lane-caps.js";
 export interface SandboxEnvFacts {
     profile?: string;
     capabilities?: string[];
@@ -54,7 +54,7 @@ export declare function buildEnvFacts(opts: {
  *  codex 复审 medium:k8s 必须按**有效快照能力**分叉,不能只看车道名——s3Snapshot 未配=park-only,
  *  resume 是全新 pod 且**工作区不恢复**,「文件已从快照恢复」那句会让模型信赖不存在的文件(比缺席
  *  更糟的谎)。 */
-export declare function resumeFactsForLane(provider: RemoteExecProvider | undefined, // 车道词 = settings-schema 词表正本(经本仓读口取型,不手抄;表加词 ⇒ 下方穷举 switch 编译红)
+export declare function resumeFactsForLane(provider: ExecutionLane, // 车道词 = settings-schema 词表正本(经本仓读口取型,不手抄;表加词 ⇒ 下方穷举 switch 编译红)
 caps?: {
     k8sSnapshot?: boolean;
 }): SandboxEnvFacts["resumeFacts"] | undefined;
@@ -73,6 +73,8 @@ export declare function scratchpadSessionSegment(sessionId: string): string;
  *  intermediate artifacts survive across turns/resume legs). Exported as the single source both the envFacts
  *  composer (below) and the future createFsWriteGatePolicy `exemptDirs` wiring ([ref]①, 1.290) must use. */
 export declare function scratchpadDirFor(localDataRoot: string, sessionId: string): string;
+/** 所有会话段的父目录 `<localDataRoot>/scratchpad`(段路径、过期清扫与一次性迁移 M39 的名册同读这一只)。 */
+export declare function scratchpadRootFor(localDataRoot: string): string;
 /** Resolve + CREATE the session scratchpad dir (mkdir -p, idempotent). Returns the path, or undefined when
  *  creation fails (honest-facts posture: never advertise a directory that does not exist — same class as
  *  egress/pkgSource "don't declare what you don't know"). Lifecycle: the reaper primitives live below —
@@ -149,7 +151,7 @@ export declare function screenShellScratchpadDir(raw: unknown, opts: {
  *    就是凭空多一条 400)。只判其一会留一条**跨请求**的洞:一条请求供一只合法壳 scratchpad 把判据引开、
  *    同时把 cwd 指进自算那只,放行后 cwd 坐进会话表,下一条不带路径字段的请求回落自算形、死在引擎构造期,
  *    而它根本没送过 cwd(codex r2 [medium] 实证);
- *  · **`in-process` 车道(provider 未设)不在射程**:那条腿的门根是**进程自己的 cwd**,与请求字段无关 ——
+ *  · **无手的 `none` 车道不在射程**:那条腿的门根是**进程自己的 cwd**,与请求字段无关 ——
  *    对着一个请求字段拒一件不是它造成的事,是把诊断指向错的地方(如实登记,不假装覆盖)。
  */
 export declare function scratchpadCoveringTaskRoot(args: {
@@ -183,7 +185,7 @@ export declare function sweepStaleScratchpads(localDataRoot: string, opts: {
 }): Promise<number>;
 /** Map the exec-lane posture to the egress fact (the model must know when downloads can't work). */
 export declare function egressForRemoteExec(remoteExec: {
-    provider?: string;
+    provider: string;
     allowInternetAccess?: boolean;
-} | undefined): "none" | "full" | undefined;
+}): "none" | "full" | undefined;
 //# sourceMappingURL=env-facts.d.ts.map

package/dist/env-facts.js

@@ -1,5 +1,6 @@
 import { isAbsolute, join, resolve, sep } from "node:path";
 import { mkdir, readdir, rm, stat } from "node:fs/promises";
+import { ensureDir } from "@sema-agent/core";
 import { createHash } from "node:crypto";
 import { isAbsoluteHostPath } from "@sema-agent/settings-schema";
 import { dirCoversPath, normalizeAbsolutePathLexically } from "./task-cwd.js";
@@ -41,7 +42,7 @@ export function resumeFactsForLane(provider, caps) {
         case "device":
             return { scratch: "preserved" };
         case "host":
-        case undefined:
+        case "none":
             return { scratch: "preserved" };
         case "local-docker":
             return undefined;
@@ -57,7 +58,10 @@ export function scratchpadSessionSegment(sessionId) {
     return `${cleaned.length > 0 ? cleaned : "_"}-${digest}`;
 }
 export function scratchpadDirFor(localDataRoot, sessionId) {
-    return join(localDataRoot, "scratchpad", scratchpadSessionSegment(sessionId));
+    return join(scratchpadRootFor(localDataRoot), scratchpadSessionSegment(sessionId));
+}
+export function scratchpadRootFor(localDataRoot) {
+    return join(localDataRoot, "scratchpad");
 }
 export async function ensureScratchpadDir(localDataRoot, sessionId, warn) {
     const dir = scratchpadDirFor(localDataRoot, sessionId);
@@ -71,7 +75,7 @@ export async function ensureScratchpadDir(localDataRoot, sessionId, warn) {
         return undefined;
     }
     try {
-        await mkdir(dir, { recursive: true });
+        ensureDir(dir);
         return dir;
     }
     catch {
@@ -147,7 +151,7 @@ export async function purgeScratchpadDir(localDataRoot, sessionId) {
     }
 }
 export async function sweepStaleScratchpads(localDataRoot, opts) {
-    const root = join(localDataRoot, "scratchpad");
+    const root = scratchpadRootFor(localDataRoot);
     let names;
     try {
         names = await readdir(root);
@@ -175,9 +179,9 @@ export async function sweepStaleScratchpads(localDataRoot, opts) {
     return removed;
 }
 export function egressForRemoteExec(remoteExec) {
-    if (remoteExec?.provider === "e2b")
+    if (remoteExec.provider === "e2b")
         return remoteExec.allowInternetAccess === false ? "none" : "full";
-    if (remoteExec?.provider === "k8s")
+    if (remoteExec.provider === "k8s")
         return "full";
     return undefined;
 }

package/dist/execution-config-root.d.ts

@@ -1,16 +1,16 @@
-import { type LaneHomeDeployment, type RemoteExecProvider } from "./execution-lane-caps.js";
+import { type ExecutionLane, type LaneHomeDeployment } from "./execution-lane-caps.js";
 /** 选中车道转进沙箱的 env 那一座(`ServiceConfig.remoteExec` 的判别联合每一臂结构上都满足:e2b / k8s 的 `sandboxEnv`、local-docker 的 `env`,别的臂两键都没有)。 */
 export interface SandboxEnvSeat {
-    readonly remoteExec?: {
-        readonly provider: RemoteExecProvider;
+    readonly remoteExec: {
+        readonly provider: ExecutionLane;
         readonly sandboxEnv?: Readonly<Record<string, string>> | undefined;
         readonly env?: Readonly<Record<string, string>> | undefined;
-    } | undefined;
+    };
 }
 /** 求配置根要读的部署事实(`ServiceConfig` 结构上满足;存体预判的问点传活配置整份)。 */
 export interface ExecutionConfigRootDeployment extends LaneHomeDeployment, SandboxEnvSeat {
     readonly agentConfigDir?: string;
-    readonly remoteExec?: SandboxEnvSeat["remoteExec"];
+    readonly remoteExec: SandboxEnvSeat["remoteExec"];
 }
 /**
  * 被选中的沙箱车道上运维点名转进沙箱的 env(e2b / k8s 的 `sandboxEnv`、local-docker 的 `env` —— 名单型旋钮经 `allowlistedEnv` 取的原值);