@sema-agent/server 7.146.0 → 7.148.0

package/dist/config-types.d.ts

@@ -22,8 +22,9 @@ import type { GitApiKind } from "./git-api-kind.js";
 import type { CustomPkgSource } from "./sandbox-pkg-source.js";
 import type { MemoryEngineBackend, StoreBackend as StoreBackendWord } from "@sema-agent/settings-schema/execution-lanes";
 import { DRAIN_GRACE_FLOOR_MS } from "@sema-agent/settings-schema/fleet";
-import type { AtMention, SandboxGitConfig } from "@sema-agent/settings-schema";
+import type { AtMention, ProjectRegistration, SandboxGitConfig } from "@sema-agent/settings-schema";
 import type { ModsDeclaration } from "./mods-declaration.js";
+import type { LocalDockerCapacityConfig } from "./plugins/local-docker-capacity.js";
 /** [ref]:记忆向量面的 embedder 坐标(env `MEMORY_EMBEDDER_*` 解析结果;单一属主 = 本类型,
  *  `plugins/memory-embedder.ts` 的工厂直接消费它,不复制形状)。语义与三问见
  *  {@link ServiceConfigFlat.memoryEmbedder}。纯数据 —— 端点原文照存(拼 `/embeddings` 是 transport
@@ -39,6 +40,9 @@ export interface MemoryEmbedderConfig {
     timeoutMs: number;
     /** 可选 Bearer(自托管 TEI/vllm/ollama 通常不需要;公有云端点需要)。 */
     apiKey?: string;
+    /** 运维已确认「记下的身份与本身份对不上时,清掉向量列、按本身份重嵌」(env `MEMORY_EMBEDDER_REEMBED=<model>/<dimensions>`,
+     *  config 层已判过它恰好点名本身份)。缺席 = 未确认 ⇒ 指纹门对不上就拒启、一行不清。只交给指纹门,不是 transport 参数。 */
+    reembedConfirmed?: true;
 }
 /**
  * [ref] §4 —— 托管留存的**灰度档**闭集。`as const` 数组是词表的唯一真源(config 解析、能力位、审计行
@@ -356,6 +360,11 @@ export interface A2aServeSkill {
     description?: string;
     /** INTERNAL scenario key this skill runs under. NEVER projected onto the card. */
     scenario: string;
+    /** Who this skill is PUBLISHED to (exact verified principal names). Absent = every caller. A caller whose verified person is
+     *  not listed neither sees the skill on any card nor can name it by id — a PUBLICATION choice, not a capability grant (the
+     *  scenario behind it stays reachable through every entry that does not read skills; the scenario gate is the only authority).
+     *  NEVER projected onto the card. */
+    audience?: readonly string[];
 }
 /**
  * DESIGN-269 §3.3 车2 —— the server-as-peer block. **Absence IS the OFF state** (`A2A_SERVE_ENABLED`
@@ -375,7 +384,7 @@ export interface A2aServeConfig {
     description?: string;
     /** `A2A_SERVE_URL` — the PUBLIC JSON-RPC endpoint URL announced on the card (http/https, validated). */
     url: string;
-    /** `A2A_SERVE_SKILLS` — declared skills (may be empty: an honest "I take work, I advertise no skill"). */
+    /** `A2A_SERVE_SKILLS` (versioned envelope `{"version":2,"skills":[…]}`) — declared skills (may be empty: an honest "I take work, I advertise no skill"). */
     skills: A2aServeSkill[];
     /** `A2A_SERVE_BLOCKING_WAIT_MS` — how long a `blocking:true` `message/send` waits for a terminal state
      *  before answering `working` and letting the caller poll `tasks/get`. Server-side budget only — it is
@@ -503,6 +512,162 @@ export interface ImageBakeConfig {
 /** Service configuration, read from environment — the **平铺面**(the ONE storage location for every
  *  field). `ServiceConfig` (bottom of this file) = this flat face **plus** nine read-only group views;
  *  fixtures that CONSTRUCT a config literal build this type and hand it to `attachConfigGroups`. */
+/**
+ * The deployment's execution lane, as COMPOSED ([ref] v1b + [ref]; PEER adapters). Every deployment names it: the env
+ * `REMOTE_EXEC` (one lane word), or — with `CONFIG_PROVIDER=local` — `config.d/remote-exec.json`; the execution-lane composition step
+ * (`boot/execution-lane.ts`) refuses to start when neither declares one. `ServiceConfig.remoteExec` is therefore always present; only the raw
+ * shape `loadConfig()` returns ({@link LoadedConfig}) may lack it. `none` = the agent's tools get no execution environment (no factory,
+ * no `executionEnv`). Secrets (apiKey/privateKey) ONLY from env.
+ *   - `e2b`  → per-task E2B Firecracker VM (isolated, suspendable). The default code-agent worker.
+ *   - `k8s`  → per-task Kata pod on our k3s (isolated, NOT suspendable — no managed memory
+ *              snapshot). Self-hosted sandbox lane; auth = explicit K8S_* env or in-cluster service account.
+ *   - `ssh`  → a real host over SSH (NOT isolated/suspendable; [ref] §5). AI-orchestrated batch deploy.
+ *   - `adb`  → a real device over ADB (NOT isolated/suspendable). On-device APP testing.
+ */
+export type RemoteExecConfig = {
+    provider: "e2b";
+    apiKey: string;
+    template?: string;
+    timeoutMs?: number;
+    livenessMs?: number;
+    allowInternetAccess?: boolean;
+    /** [ref] —— `E2B_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(经唯一的「点名放行」谓词 `allowlistedEnv`,
+     *  空串值照带)。键缺席 = 旋钮未设 / 空串;名单形错(空段 / 非变量名形 / 点名名单型旋钮)拒启,源里没有的名按序号 warn。 */
+    sandboxEnv?: Record<string, string>;
+    mountPath?: string;
+    /** [ref]:崩溃遗留沙盒回收腿(E2B_ORPHAN_RECLAIM,默认 true;判据与 v1 边界见
+     *  plugins/e2b-orphan-reclaim.ts 头注)。 */
+    orphanReclaim?: boolean;
+} | {
+    provider: "k8s";
+    image: string;
+    apiUrl?: string;
+    token?: string;
+    caCert?: string;
+    insecureTls?: boolean;
+    /** `K8S_NAMESPACE` — the namespace the sandbox pods live in. REQUIRED, no default: the loader refuses to start when `REMOTE_EXEC=k8s` names the
+     *  lane without it, so this arm never carries an absent namespace and no consumer needs a fallback of its own. */
+    namespace: string;
+    runtimeClass?: string;
+    mountPath?: string;
+    timeoutMs?: number;
+    /** `K8S_LIVENESS_MS` — the lane's liveness bound (ms; the `E2B_LIVENESS_MS` twin, same parser; absent ⇒ the adapter's
+     *  default 120 s): cuts a command silent for this long ONLY when its caller stated no timeout (`exec-bounds.ts`). */
+    livenessMs?: number;
+    /** Resource-profile knobs: sandbox pod limits (adapter defaults: 2Gi / 1 cpu). */
+    memory?: string;
+    cpu?: string;
+    /** `K8S_SANDBOX_IPV6`(闭集与缺省的属主 `sandbox-egress-policy.ts`):`disabled` ⇒ 沙箱 pod 级 sysctl 关 IPv6;`enabled` ⇒ pod spec 不带 sysctl。
+     *  loader 恒铸;可选只为手搓配置。 */
+    sandboxIpv6?: import("./sandbox-egress-policy.js").SandboxIpv6;
+    /** `K8S_SANDBOX_BROKER_IMAGE` — the member git-credential broker container's image (`containers[1]` of a member's sandbox pod; this
+     *  engine's own image is the recommended value — the broker is a program of this package at a fixed path, `broker/constants.ts`). Absent /
+     *  empty ⇒ the plane is off (`credentialPlane.sandboxGit` = `broker_image_unset`) and no pod carries a broker. */
+    brokerImage?: string;
+    /** `K8S_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同名同形、同一只解析器、同一只谓词 `allowlistedEnv`,
+     *  空串值照带)。只进 pod 容器 env;装配点与包源派生 env 合并一处,显式名单胜。键缺席 = 旋钮未设 / 空串(零转发)。 */
+    sandboxEnv?: Record<string, string>;
+    s3Snapshot?: {
+        endpoint: string;
+        bucket: string;
+        accessKey: string;
+        secretKey: string;
+        region?: string;
+        keyPrefix?: string;
+        presignTtlSec?: number;
+    };
+    /** Workspace persistence by space key (`WORKSPACE_PERSIST`) and snapshots kept per space key (`WORKSPACE_SNAPSHOT_KEEP`).
+     *  The loader always mints both on this arm; optional only so hand-built configs may omit them. Effective policy =
+     *  the capability fact `workspaceSpace` (`capability-facts.ts`, the one reading: defaults applied there, absent store ⇒
+     *  unavailable). */
+    workspacePersist?: import("./workspace-space.js").WorkspacePersist;
+    workspaceSnapshotKeep?: number;
+    /** `WORKSPACE_SNAPSHOT_TIMEOUT_MS` — the lane's one data bound (`workspace-space.ts`); the loader always mints it, the boot
+     *  assembly hands it to the adapter as `dataTimeoutMs`, the capability fact reports it (`workspaceSync.timeoutMs`). */
+    workspaceSnapshotTimeoutMs?: number;
+    /** The build-cache volume per workspace space (`WORKSPACE_CACHE=volume`, `_SIZE`, `_MOUNT`; `workspace-cache.ts`); present iff
+     *  `volume`. Effective policy = the capability fact `workspaceCache`. */
+    workspaceCache?: import("./workspace-cache.js").WorkspaceCacheCapability;
+    /** `WORKSPACE_SNAPSHOT_EXCLUDE` — the snapshot's tar exclusion table (closed item form, `workspace-space.ts`); present iff
+     *  non-empty. Handed to the adapter's one tar upload (both snapshot lanes); never on the wire. */
+    workspaceSnapshotExclude?: readonly string[];
+} | {
+    provider: "ssh";
+    host: string;
+    port?: number;
+    username: string;
+    privateKey: string;
+    mountPath?: string;
+    hostKey?: {
+        fingerprintSha256?: string;
+        knownHostsPath?: string;
+    };
+} | {
+    provider: "adb";
+    serial: string;
+    adbPath?: string;
+    mountPath?: string;
+} | {
+    provider: "host";
+    workspaceBase?: string;
+    commandTimeoutMs?: number;
+} | {
+    provider: "none";
+} | {
+    provider: "device";
+    /** `DEVICE_DELIVERY_TIMEOUT_MS`(默认 10s)= 等在途槽的上限;到期 = `device.busy`(§5.5)。 */
+    deliveryTimeoutMs?: number;
+    /** `DEVICE_RECONNECT_GRACE_MS`(默认 120s)= 断连后在途不判丢的窗(§5.4 同 epoch 重连)。 */
+    reconnectGraceMs?: number;
+    /** `DEVICE_EXEC_TIMEOUT_MS`(默认 1800s)= 指令级默认超时;core 的 per-command `timeout` 可收紧。 */
+    execTimeoutMs?: number;
+    /** `DEVICE_MAX_INFLIGHT_PER_DEVICE`(§11-O3 clay 已裁 = 4)。 */
+    maxInflightPerDevice?: number;
+    /** `DEVICE_MAX_PREAUTH_PER_REMOTE`(默认 8;字面 `off` = 显式停用 per-remote 层)= 未鉴权
+     *  握手的 per-remote 并发帽([ref]/[ref]:帽键是裸 remoteAddress——XFF 反代 / 公司 NAT 部署
+     *  形会把全员折叠成单键,per-remote 层退化成共享预算而非公平层,`off` + 全局帽 64 是诚实形)。
+     *  坏值拒启([ref] A 档),词表与拒因见 config.ts `parseDevicePreAuthPerRemoteEnv`。 */
+    maxPreAuthPerRemote?: number | "off";
+    /** `DEVICE_TRUSTED_PROXY_CIDRS`([ref];缺席 = 名单空 = 不读任何代理头,帽键 = socket 对端)= per-remote 帽键的可信代理
+     *  名单(规范 CIDR 文本)。socket 对端落在名单内,汇聚端才读 `X-Forwarded-For`、取自右向左第一个名单外地址作帽键。
+     *  坏项拒启([ref] A 档),拒因见 config.ts `parseDeviceTrustedProxyCidrsEnv`;唯一消费点 = `boot/device-lane.ts` 透传汇聚端。 */
+    trustedProxyCidrs?: readonly string[];
+    /** `DEVICE_ENROLL_TOKEN_TTL_SEC`(§4.7 第五个旋钮;默认 900 = §7-T5 ① 的 15min)= enrollment
+     *  token 的有效期**时长**(整秒,自 **DB now** 起算 —— 时间权威是库,不是副本墙钟)。唯一消费点 =
+     *  签发动词 `POST /v1/devices/enroll-tokens`(`http/routes/devices.ts`);[ref] 之前它刻意未铸
+     *  (端点不存在 ⇒ 铸了就是一个「配了不生效」的死键,[ref] 病族),随该端点同批铸 + 接线。
+     *  域 = `[1, 86400]` 的十进制正整数,坏值**拒启**([ref] A 档;解析器 `parseDeviceEnrollTokenTtlEnv`)。
+     *  缺席 ⇒ 签发点的属主默认 900(不在 config 层抄第二份默认,与本族其余旋钮同姿势)。 */
+    enrollTokenTtlSec?: number;
+    /** `DEVICE_RELAY_URL` = 设备入口的运维声明,**必填**(缺席 / 空串 / 只含空白 ⇒ 配置期拒起:契约包车道表 device 行的必需键,同所有车道的必需键判官 `laneMissingEnv`;值的文法与凭据形由解析器 `parseDeviceRelayUrlEnv` 拒):
+     *  `{ kind: "url" }` = 设备连不到本引擎自己的地址(引擎在中继 / 网关之后)时该拨的那一个 ws(s) URL,**逐字**上能力面 `deviceExecutor.relayUrl`
+     *  (唯一消费点 `http/routes/capabilities.ts`);`{ kind: "none" }`(字面 `none`)= 没有中继,设备按本引擎地址 + `deviceExecutor.wsPath` 拨号,能力面不带 `relayUrl`。
+     *  必填的理由:「设备拨哪里」只有运维知道;缺席曾被读成「直拨」,于是撤掉中继声明而根会话行上还有设备绑定时,设备改拨引擎地址(入口已收窄则拨不到)、
+     *  绑定却留在格上 —— 缺席与「声明了直拨」是两件事,只有后者放行。`none` ∧ 有绑定 ⇒ 起服 warn 点名绑定数(`boot/device-lane.ts`)。
+     *  **不派生**:`FLEET_ADVERTISE_ADDRESS` 是对中心公告的地址(内网 pod IP / 容器别名),受众不是用户机器上的设备;从它拼出来的入口对设备多半不可达。
+     *  URL 形门 = ws / wss 绝对地址,无 userinfo / query / fragment、不带凭据形(值逐字上能力面),坏值**拒启**。 */
+    relay: DeviceRelayDeclaration;
+    /** `DEVICE_SUPERSEDE`(默认 `stale_only`)= 同 deviceId 二连的顶替策略(§5.2)。 */
+    supersede?: "stale_only" | "deny";
+} | {
+    provider: "local-docker";
+    image: string;
+    mountPath?: string;
+    dockerPath?: string;
+    dockerHost?: string;
+    memory?: string;
+    cpus?: number;
+    pidsLimit?: number;
+    dropAllCaps?: boolean;
+    network?: "none" | "bridge" | "host";
+    commandTimeoutMs?: number;
+    /** [ref] —— `DOCKER_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同一只解析器、
+     *  同一只谓词;每条 `docker exec` 以 `-e K=V` 注入)。键缺席 = 旋钮未设 / 空串。 */
+    env?: Record<string, string>;
+    /** 车道容器帽(`DOCKER_MAX_CONTAINERS`)。> 0 才在场;缺席 = 关 = 不建闸
+     *  (`plugins/local-docker-capacity.ts`,计数律与射程的唯一属主)。 */
+    capacity?: LocalDockerCapacityConfig;
+};
 export interface ServiceConfigFlat {
     port: number;
     /** OpenAI-compatible model gateway base URL (without /chat/completions) — `MODEL_GATEWAY_BASEURL`.
@@ -646,17 +811,12 @@ export interface ServiceConfigFlat {
      *  Runner construction and re-expanded on every refresh-time plane swap (`Runner.swapDeps`) — HOT, same as
      *  models/roles; mutateInPlace keeps the reference. */
     tiers: Record<string, string>;
-    /** 142-S4(registry-core 0.10.0 projects 域):center 项目登记簿的 service 消费面 —
-     *  键=projectId(PROJECT_ID_REGEX,generic lowercase UUID)。消费点:①`memoryScopeFor` 第三参数
-     *  (projectId 在场 ⇒ 项目盘 v2 键 `proj:<tenant>/<projectId>`);②`defaultScopes` 作
-     *  `TaskSpec.memory.scopes` 的种子(v2 scope 键串,OPEN 值域——本表只登记不解释)。NO env source —
-     *  populated ONLY by applyEffective(mutateInPlace,boot+refresh 整表替换);env lane 恒空(INERT)。
-     *  ProjectRegistration 的审计字段(registeredBy/registeredAt/notes)不进 ServiceConfig(runtime 不消费)。 */
-    projects: Record<string, {
-        displayName?: string;
-        gitRemotes?: string[];
-        defaultScopes?: string[];
-    }>;
+    /** 项目登记簿(settings-schema `projects` 域):键 = projectId(小写规范 UUID),值 = settings-schema 的 `ProjectRegistration` **原样**
+     *  (本仓不持第二份项目型、不挑键 —— 形与判官只在 settings-schema)。读者:`GET /v1/projects` 读面(`http/routes/projects.ts`);
+     *  `defaultScopes` 作 `TaskSpec.memory.scopes` 的种子(v2 scope 键串,OPEN 值域 —— 本表只登记不解释)与 org 记忆准入的部署 scope 集。
+     *  NO env source —— 只由 applyEffective 经 settings-schema 的视图面读函数判过后填(mutateInPlace,boot + refresh 整表替换);
+     *  本地腿恒空(settings-schema 的本地读取集不收 `projects`)。 */
+    projects: Record<string, ProjectRegistration>;
     /** Role → model map (1.24): `subagent`/`summarize` → the cheap model when `MODEL_CHEAP_ID` is set
      *  (delegated children + compaction get cheap), `default` stays on the main model. Keys are the engine's role
      *  words (core `MODEL_ROLES`, six since 7.49.0). */
@@ -889,22 +1049,13 @@ export interface ServiceConfigFlat {
     /** 件A 目录 unavailable 退避窗(ms)——取数失败的退避语义(bound center hammering),不是策略负结果。
      *  默认 10s。env `MEMORY_ORG_UNAVAILABLE_BACKOFF_MS`(numEnvBounded)。 */
     memoryOrgUnavailableBackoffMs: number;
-    /** [ref] v1b + [ref]: opt-in remote execution backend (PEER adapters, chosen by REMOTE_EXEC). Unset
-     *  → in-process stub env ([ref]: this used to read "OA/review deployments", a scenario family retired wholesale
-     *  in 5.0.0 — see RETIRED_ENVS; the real discriminant is CONFIG_PROVIDER, and REQUIRE_EXECUTION_LANE turns this
-     *  arm into a boot refusal). Secrets (apiKey/privateKey) ONLY from env.
-     *   - `e2b`  → per-task E2B Firecracker VM (isolated, suspendable). The default code-agent worker.
-     *   - `k8s`  → per-task Kata pod on our k3s (isolated, NOT suspendable — no managed memory
-     *              snapshot). Self-hosted sandbox lane; auth = explicit K8S_* env or in-cluster service account.
-     *   - `ssh`  → a real host over SSH (NOT isolated/suspendable; [ref] §5). AI-orchestrated batch deploy.
-     *   - `adb`  → a real device over ADB (NOT isolated/suspendable). On-device APP testing. */
     /**
      * [ref]④ —— `REMOTE_EXEC_HOME_DIR`:**执行环境的 home 目录**(core `ExecutionEnv.homeDir`),
      * `~/…` 形权限规则(`Edit(~/.ssh/**)`)唯一的基,绝对路径。
      *
      * 部署级旋钮,**跨车道同一根**(不按 provider 分七根 —— 它回答的是同一个问题:「这条部署的手,
      * 跑在哪个用户的 home 下」)。显式声明**恒赢**;缺席时只有 home 属于车道本身的那几条车道有答案
-     * (host/in-process = `os.homedir()`、e2b = 平台固定用户),k8s/local-docker(镜像属性)、
+     * (host/none = `os.homedir()`、e2b = 平台固定用户),k8s/local-docker(镜像属性)、
      * ssh(目标机登录用户)、adb/device 一律缺席 ⇒ `~/` 规则在下单时被 422 响亮拒。
      * 声明与出厂答案都只是**主张**:读得出家目录的车道(device 之外的六条)在每只执行环境开起来时拿环境里命令看到的 `$HOME` 证它,
      * 不一致 / 读不出 ⇒ 那只环境不开(拒句点名两值与改法);device 读不了 ⇒ 声明即座,起服披露「来自声明、未实测」。
@@ -912,26 +1063,6 @@ export interface ServiceConfigFlat {
      * 非绝对路径 ⇒ **拒启**([ref] A 档;core 侧同判为 `config.execution_env_home_dir_invalid`)。
      */
     remoteExecHomeDir?: string;
-    /**
-     * [ref] —— `REQUIRE_EXECUTION_LANE`:**「没点名车道」要不要拒启**。默认 **false**(缺省行为逐字不变)。
-     *
-     * `REMOTE_EXEC` 未设/空串 **∧** `CONFIG_PROVIDER ≠ local` ⇒ {@link remoteExec} 缺席 ⇒ `boot/execution-env.ts`
-     * 一条工厂臂都不走 ⇒ core 的 `handsEnabled` 为 false ⇒ **整条手带一件不挂**,而任务照跑、回执
-     * `status=completed`。[ref] 的 fail-closed 门只咬「点了名却配不齐/认不出」,**「根本没点名」是文档化的
-     * 部署姿态**,所以那道门放行。
-     *
-     * 本键把那条姿态交回给运维表态:`true` ⇒ 装配尾**拒启**并点名该设什么(`config.ts` 跨域不变量区)。
-     * 🔴 **为什么默认 off**:今天正在无手运行而自己不知道的部署(根 `docker-compose.yml` / review compose /
-     * `--sandbox=kata` 档 / web-admin 编排器起的 worker)会**升级即挂**,而其中一部分只跑只读/分析任务、
-     * 今天「能用」。缺省翻面留到下一个 major,翻之前生态有一版时间适配。托管清单推荐开
-     * (`docs/DEPLOY-PREREQS.md`)。
-     * 运维读面(2026-09-22 主会话验收订正:车原写「`GET /v1/diagnostics/wiring` 的 `executionLane.requireExecutionLane`」,
-     * 而该端点当时**没有** `executionLane` 段、`src/` 零投影 —— 一句没兑现的承诺,按 [ref] 不信 JSDoc 只信实现行的纪律改写):
-     * boot 期 `exec_lane_selected` 一行(`config.ts` 装配尾,带 `lane` / `source`)+ `GET /v1/config/catalog` 的目录行。
-     * 本键的**有效值今天没有运行期读面**;要出就随 [ref] 的执行座三态在一处铸,不在这里单独长一位。
-     * ([ref] 起诊断面**有了** `executionLane` 段,但它就是能力面那一只投影 `{provider, toolsOnThisHost, isolated?}`,**不带**本键。)
-     */
-    requireExecutionLane: boolean;
     /**
      * 沙箱 git 平面的有效配置块(本部署经凭据代理路由哪些 git origin;契约 `SandboxGitConfig`:规范形 origin ≤ 16、两两不同、`connectUrl` 必 https、空表合法)。
      * **唯一来源 = 中心有效配置**(`/effective` 的 `sandboxGit`,web-admin 按部署登记册投影;无 env 旋钮,本地配置源没有这一块);唯一判官 = `stageEffective`
@@ -939,146 +1070,7 @@ export interface ServiceConfigFlat {
      * 热:读者(平面座 `sandbox-git-plane.ts` 的每一次读)逐次现读这一键,不捕获对象本身。缺席 = 没有这一块(与契约「可选、无默认」同一种缺席读法,不另设 null)。
      */
     sandboxGit?: SandboxGitConfig;
-    remoteExec?: {
-        provider: "e2b";
-        apiKey: string;
-        template?: string;
-        timeoutMs?: number;
-        livenessMs?: number;
-        allowInternetAccess?: boolean;
-        /** [ref] —— `E2B_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(经唯一的「点名放行」谓词 `allowlistedEnv`,
-         *  空串值照带)。键缺席 = 旋钮未设 / 空串;名单形错(空段 / 非变量名形 / 点名名单型旋钮)拒启,源里没有的名按序号 warn。 */
-        sandboxEnv?: Record<string, string>;
-        mountPath?: string;
-        /** [ref]:崩溃遗留沙盒回收腿(E2B_ORPHAN_RECLAIM,默认 true;判据与 v1 边界见
-         *  plugins/e2b-orphan-reclaim.ts 头注)。 */
-        orphanReclaim?: boolean;
-    } | {
-        provider: "k8s";
-        image: string;
-        apiUrl?: string;
-        token?: string;
-        caCert?: string;
-        insecureTls?: boolean;
-        /** `K8S_NAMESPACE` — the namespace the sandbox pods live in. REQUIRED, no default: the loader refuses to start when `REMOTE_EXEC=k8s` names the
-         *  lane without it, so this arm never carries an absent namespace and no consumer needs a fallback of its own. */
-        namespace: string;
-        runtimeClass?: string;
-        mountPath?: string;
-        timeoutMs?: number;
-        /** `K8S_LIVENESS_MS` — the lane's liveness bound (ms; the `E2B_LIVENESS_MS` twin, same parser; absent ⇒ the adapter's
-         *  default 120 s): cuts a command silent for this long ONLY when its caller stated no timeout (`exec-bounds.ts`). */
-        livenessMs?: number;
-        /** Resource-profile knobs: sandbox pod limits (adapter defaults: 2Gi / 1 cpu). */
-        memory?: string;
-        cpu?: string;
-        /** `K8S_SANDBOX_IPV6`(闭集与缺省的属主 `sandbox-egress-policy.ts`):`disabled` ⇒ 沙箱 pod 级 sysctl 关 IPv6;`enabled` ⇒ pod spec 不带 sysctl。
-         *  loader 恒铸;可选只为手搓配置。 */
-        sandboxIpv6?: import("./sandbox-egress-policy.js").SandboxIpv6;
-        /** `K8S_SANDBOX_BROKER_IMAGE` — the member git-credential broker container's image (`containers[1]` of a member's sandbox pod; this
-         *  engine's own image is the recommended value — the broker is a program of this package at a fixed path, `broker/constants.ts`). Absent /
-         *  empty ⇒ the plane is off (`credentialPlane.sandboxGit` = `broker_image_unset`) and no pod carries a broker. */
-        brokerImage?: string;
-        /** `K8S_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同名同形、同一只解析器、同一只谓词 `allowlistedEnv`,
-         *  空串值照带)。只进 pod 容器 env;装配点与包源派生 env 合并一处,显式名单胜。键缺席 = 旋钮未设 / 空串(零转发)。 */
-        sandboxEnv?: Record<string, string>;
-        s3Snapshot?: {
-            endpoint: string;
-            bucket: string;
-            accessKey: string;
-            secretKey: string;
-            region?: string;
-            keyPrefix?: string;
-            presignTtlSec?: number;
-        };
-        /** Workspace persistence by space key (`WORKSPACE_PERSIST`) and snapshots kept per space key (`WORKSPACE_SNAPSHOT_KEEP`).
-         *  The loader always mints both on this arm; optional only so hand-built configs may omit them. Effective policy =
-         *  the capability fact `workspaceSpace` (`capability-facts.ts`, the one reading: defaults applied there, absent store ⇒
-         *  unavailable). */
-        workspacePersist?: import("./workspace-space.js").WorkspacePersist;
-        workspaceSnapshotKeep?: number;
-        /** `WORKSPACE_SNAPSHOT_TIMEOUT_MS` — the lane's one data bound (`workspace-space.ts`); the loader always mints it, the boot
-         *  assembly hands it to the adapter as `dataTimeoutMs`, the capability fact reports it (`workspaceSync.timeoutMs`). */
-        workspaceSnapshotTimeoutMs?: number;
-        /** The build-cache volume per workspace space (`WORKSPACE_CACHE=volume`, `_SIZE`, `_MOUNT`; `workspace-cache.ts`); present iff
-         *  `volume`. Effective policy = the capability fact `workspaceCache`. */
-        workspaceCache?: import("./workspace-cache.js").WorkspaceCacheCapability;
-        /** `WORKSPACE_SNAPSHOT_EXCLUDE` — the snapshot's tar exclusion table (closed item form, `workspace-space.ts`); present iff
-         *  non-empty. Handed to the adapter's one tar upload (both snapshot lanes); never on the wire. */
-        workspaceSnapshotExclude?: readonly string[];
-    } | {
-        provider: "ssh";
-        host: string;
-        port?: number;
-        username: string;
-        privateKey: string;
-        mountPath?: string;
-        hostKey?: {
-            fingerprintSha256?: string;
-            knownHostsPath?: string;
-        };
-    } | {
-        provider: "adb";
-        serial: string;
-        adbPath?: string;
-        mountPath?: string;
-    } | {
-        provider: "host";
-        workspaceBase?: string;
-        commandTimeoutMs?: number;
-        singleMachineDefault?: true;
-    } | {
-        provider: "device";
-        /** `DEVICE_DELIVERY_TIMEOUT_MS`(默认 10s)= 等在途槽的上限;到期 = `device.busy`(§5.5)。 */
-        deliveryTimeoutMs?: number;
-        /** `DEVICE_RECONNECT_GRACE_MS`(默认 120s)= 断连后在途不判丢的窗(§5.4 同 epoch 重连)。 */
-        reconnectGraceMs?: number;
-        /** `DEVICE_EXEC_TIMEOUT_MS`(默认 1800s)= 指令级默认超时;core 的 per-command `timeout` 可收紧。 */
-        execTimeoutMs?: number;
-        /** `DEVICE_MAX_INFLIGHT_PER_DEVICE`(§11-O3 clay 已裁 = 4)。 */
-        maxInflightPerDevice?: number;
-        /** `DEVICE_MAX_PREAUTH_PER_REMOTE`(默认 8;字面 `off` = 显式停用 per-remote 层)= 未鉴权
-         *  握手的 per-remote 并发帽([ref]/[ref]:帽键是裸 remoteAddress——XFF 反代 / 公司 NAT 部署
-         *  形会把全员折叠成单键,per-remote 层退化成共享预算而非公平层,`off` + 全局帽 64 是诚实形)。
-         *  坏值拒启([ref] A 档),词表与拒因见 config.ts `parseDevicePreAuthPerRemoteEnv`。 */
-        maxPreAuthPerRemote?: number | "off";
-        /** `DEVICE_TRUSTED_PROXY_CIDRS`([ref];缺席 = 名单空 = 不读任何代理头,帽键 = socket 对端)= per-remote 帽键的可信代理
-         *  名单(规范 CIDR 文本)。socket 对端落在名单内,汇聚端才读 `X-Forwarded-For`、取自右向左第一个名单外地址作帽键。
-         *  坏项拒启([ref] A 档),拒因见 config.ts `parseDeviceTrustedProxyCidrsEnv`;唯一消费点 = `boot/device-lane.ts` 透传汇聚端。 */
-        trustedProxyCidrs?: readonly string[];
-        /** `DEVICE_ENROLL_TOKEN_TTL_SEC`(§4.7 第五个旋钮;默认 900 = §7-T5 ① 的 15min)= enrollment
-         *  token 的有效期**时长**(整秒,自 **DB now** 起算 —— 时间权威是库,不是副本墙钟)。唯一消费点 =
-         *  签发动词 `POST /v1/devices/enroll-tokens`(`http/routes/devices.ts`);[ref] 之前它刻意未铸
-         *  (端点不存在 ⇒ 铸了就是一个「配了不生效」的死键,[ref] 病族),随该端点同批铸 + 接线。
-         *  域 = `[1, 86400]` 的十进制正整数,坏值**拒启**([ref] A 档;解析器 `parseDeviceEnrollTokenTtlEnv`)。
-         *  缺席 ⇒ 签发点的属主默认 900(不在 config 层抄第二份默认,与本族其余旋钮同姿势)。 */
-        enrollTokenTtlSec?: number;
-        /** `DEVICE_RELAY_URL` = 设备入口的运维声明,**必填**(缺席 / 空串 / 只含空白 ⇒ 配置期拒起:契约包车道表 device 行的必需键,同所有车道的必需键判官 `laneMissingEnv`;值的文法与凭据形由解析器 `parseDeviceRelayUrlEnv` 拒):
-         *  `{ kind: "url" }` = 设备连不到本引擎自己的地址(引擎在中继 / 网关之后)时该拨的那一个 ws(s) URL,**逐字**上能力面 `deviceExecutor.relayUrl`
-         *  (唯一消费点 `http/routes/capabilities.ts`);`{ kind: "none" }`(字面 `none`)= 没有中继,设备按本引擎地址 + `deviceExecutor.wsPath` 拨号,能力面不带 `relayUrl`。
-         *  必填的理由:「设备拨哪里」只有运维知道;缺席曾被读成「直拨」,于是撤掉中继声明而根会话行上还有设备绑定时,设备改拨引擎地址(入口已收窄则拨不到)、
-         *  绑定却留在格上 —— 缺席与「声明了直拨」是两件事,只有后者放行。`none` ∧ 有绑定 ⇒ 起服 warn 点名绑定数(`boot/device-lane.ts`)。
-         *  **不派生**:`FLEET_ADVERTISE_ADDRESS` 是对中心公告的地址(内网 pod IP / 容器别名),受众不是用户机器上的设备;从它拼出来的入口对设备多半不可达。
-         *  URL 形门 = ws / wss 绝对地址,无 userinfo / query / fragment、不带凭据形(值逐字上能力面),坏值**拒启**。 */
-        relay: DeviceRelayDeclaration;
-        /** `DEVICE_SUPERSEDE`(默认 `stale_only`)= 同 deviceId 二连的顶替策略(§5.2)。 */
-        supersede?: "stale_only" | "deny";
-    } | {
-        provider: "local-docker";
-        image: string;
-        mountPath?: string;
-        dockerPath?: string;
-        dockerHost?: string;
-        memory?: string;
-        cpus?: number;
-        pidsLimit?: number;
-        dropAllCaps?: boolean;
-        network?: "none" | "bridge" | "host";
-        commandTimeoutMs?: number;
-        /** [ref] —— `DOCKER_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同一只解析器、
-         *  同一只谓词;每条 `docker exec` 以 `-e K=V` 注入)。键缺席 = 旋钮未设 / 空串。 */
-        env?: Record<string, string>;
-    };
+    remoteExec: RemoteExecConfig;
     /**
      * SVC-3 git-WORKTREE ISOLATION ([ref] CORE-6). Opt-in (WORKTREE_ISOLATION_ENABLED + WORKTREE_REPO_ROOT).
      * When set, the deployment's `executionEnvFactory` is wrapped so an agent core marks `isolation:"worktree"`
@@ -1366,11 +1358,12 @@ export interface ServiceConfigFlat {
     /** Principals allowed to act as OPERATORS (`OPERATOR_PRINCIPALS`): every operator face reads it through the one reading
      *  `explicitOperatorOk` (`http/principal-gate.ts`) — e.g. the F4 approval queue (`/v1/approvals`): list ANY owner's pending +
      *  decide. A non-operator principal may only LIST ITS OWN pending. **Empty = no one is an operator** ([ref]: the old
-     *  "empty = everyone on the approval queue" reading is gone); a single-user deployment that wants to be its own operator
-     *  declares {@link operatorSingleUser}. */
+     *  "empty = everyone on the approval queue" reading is gone). A single-user deployment must answer "who operates it" — a named list here or {@link operatorSingleUser}; neither ⇒ refusal
+     *  (`operator-declaration-required`: the server process refuses at boot stage 1, and `createHttpServer` refuses for every assembler, embedders included). */
     operatorPrincipals: string[];
     /** `OPERATOR_SINGLE_USER=true` —— 单用户形显式声明「这台部署的每个调用方都是运维」([ref],[ref] ① 裁 A)。缺席 = 不声明(没人是,除非在名单里)。
      *  只在单用户形(`REQUIRE_PRINCIPAL` 未开)且名单为空时成立 —— 否则拒启(`config-invariants.ts` 的 `operator-single-user`:一个事实一个来源)。
+     *  单用户形上它与具名名单二者必有其一,都没有 ⇒ 拒启(服务进程起服第 1 段;嵌入方在 `createHttpServer`;`operator-declaration-required`,[ref];`false` 与缺席同判)。
      *  env 独有(没有中心写位),起服冻结。读法只有 `explicitOperatorOk` / `operatorRosterPresent` 两只。 */
     operatorSingleUser?: boolean;
     /**
@@ -1680,6 +1673,13 @@ export interface ServiceConfigFlat {
      *  failed/stoppedBy=system(诚实终态,跨实例读面永不虚构存活)。core 契约要求 ≥10min(60s 心跳的
      *  安全裕度),**下限 10min 硬钳**。Default 15min。`BG_AGENT_STALE_RUNNING_MS`。 */
     backgroundAgentStaleRunningMs: number;
+    /** 会话驻留后台子代理的**停滞收割窗**(ms):一行 `running` 的会话驻留后台子代理最后一次工具活动距今超过它 ⇒ 引擎把行收成 `killed`(归因 `system`)、
+     *  run 中止(引擎的 `TaskRegistry.reapStaleSessionBackgroundAgents`;按静默判,不按年龄)。收割在 `/health.inflight` 计法表的读口上、数活之前做
+     *  (`session-resident-background.ts`)—— 判停四处与 `/health` 读同一只读口,于是阻断集里的后台子代理一项有了上界。
+     *  与 `backgroundAgentStaleRunningMs` 不是同一个窗:那只量**写者进程**的 60 s 心跳(进程死没死),这只量**子代**的工具活动(子代卡没卡),
+     *  一条 30 min 的工具调用就是 30 min 静默。缺省 = 下限 = `backgroundAgentStallFloorMs(…)` 的派生值(等人的四个窗取大 + 引擎单命令上限,
+     *  单用户 posture 下 ≈ 24 h 10 min),只许拉大,没有「关」。`BG_AGENT_STALL_MS`。 */
+    backgroundAgentStallMs: number;
     /** core 1.382([ref],[ref] 提货单④)`TaskRegistry.reconcileParkedAgents` 的 stale-claim 清算窗
      *  ——core 该整块逻辑被 `opts.staleClaimMaxAgeMs !== undefined` 门住,缺席 = **整块清算永不运行**
      *  (claim 后 claimer 进程崩死的行永久卡在"已 claim 不可再 claim"态,只能等 checkpoint TTL 自然过期;
@@ -1868,20 +1868,20 @@ export interface ServiceConfigFlat {
      *  core 自动延迟」这句(本行旧文案)作废:缺省窗下一个中小 MCP 名册够不着阈值,首请求带全 schema。
      *  唯一不受门的是调用方的 `TaskSpec.deferTools` 字面名单。口径全文见 src/capabilities/tool-defer.ts 头注。 */
     toolDeferLongtail: boolean;
-    /** LSP code-intelligence tool ([ref] §13.1): mount core's `lsp` tool, routed to an E2B LSP sidecar. Requires
-     *  REMOTE_EXEC=e2b. Default OFF (the on-the-fly language-server install is heavy until an E2B template bakes it).
-     *  `LSP_ENABLED=true`. */
-    lspEnabled: boolean;
-    /** TOC local LSP (core 1.190 `NodeLspManager`, host lane only): mount core's `lsp` tool over LOCAL `child_process`
-     *  language servers (CC `services/lsp` parity). Unlike the sandbox lane it needs NO baked template — just the
-     *  server binary on PATH, and it DEGRADES gracefully (ENOENT → grep/read) + spawns lazily/cached, so it is DEFAULT
-     *  ON for the host lane (CC-parity); set `LSP_HOST_ENABLED=false` to opt out. (`REMOTE_EXEC=host` only — ssh/adb/
-     *  local-docker can't reach a local child process to the right filesystem.)
-     *  [ref] B4 (lens4 N7): this lane used to share `LSP_ENABLED` with `lspEnabled` above — one env name driving
-     *  two OPPOSITE defaults. It now has its own knob. 🪦 server 3.0.0: `LSP_ENABLED=false` (the pre-split host
-     *  opt-out) is a **fail-loud tombstone** — it refuses boot naming `LSP_HOST_ENABLED`; `LSP_ENABLED=true` keeps
-     *  its own meaning (the sandbox lane's opt-in above) and is unaffected. */
+    /** Local LSP (core `NodeLspManager`): mount core's `lsp` tool over LOCAL `child_process` language servers (CC `services/lsp`
+     *  parity) — needs just the server binary on PATH, DEGRADES gracefully (ENOENT → grep/read), spawns lazily/cached ⇒ DEFAULT ON
+     *  (`LSP_HOST_ENABLED=false` opts out). The knob is conjoined by the one mint point `createLspManager` with deployment-shape row
+     *  `callerOwnsWorkerDisk` (host lane ∧ single-principal) — no other lane mounts LSP. The sandbox-lane knob `LSP_ENABLED` is a
+     *  tombstone in settings-schema `RETIRED_ENVS` (refused at the top of `loadConfig`; this repo neither reads nor re-words it). */
     lspHostEnabled: boolean;
+    /** `AUTO_BACKGROUND_ON_TIMEOUT` —— 前台 Bash 命令撞上**它自己的**超时时,合格的命令(资格由引擎判:命令里没有 `git`、首词不是 `sleep`)
+     *  被转成后台任务继续跑,而不是被杀(引擎 `HandsBandOptions.autoBackgroundOnTimeout`;引擎缺省关,本服务作为部署者**缺省开**)。
+     *  同一个开关在引擎里还管第二个触发:有人的输入排队等着本轮边界、而合格命令还在跑 ⇒ 引擎把它转后台好让输入送达(引擎刻意只设一个开关)。
+     *  `=false` ⇒ 两件都不做,超时即杀(引擎缺省形)。读点只有一处:手带铸点 `buildHandsBand`(共享基座与 leader 车道同调),每只有手的 Runner 同源。
+     *  CC 2.1.316 对位:合格命令缺省武装(`cli316.js:273095`,合格判 ∧ 非显式后台);env `CLAUDE_CODE_AUTO_BACKGROUND_TIMEOUT_MS` 只缩短超时(`cli316.js:266918`),本服务不设对应旋钮。
+     *  只在能把运行中的命令领养成后台的车道上生效(执行环境 `backgroundCapabilities.supportsDetach`);其余车道值照传、引擎与适配器按契约忽略 ——
+     *  这一根旋钮在本车道上生不生效由 `GET /health` 的 `autoBackgroundOnTimeout`(三词)如实报(`capability-facts.ts` 的事实 `autoBackgroundOnTimeout`)。 */
+    autoBackgroundOnTimeout: boolean;
     /** [ref] —— host-lane language-server env **named allowlist** (`LSP_ENV_ALLOW=NAME,NAME`). The language server's env is
      *  the engine's `inheritedHostEnv("scrub")` (shape rules + this deployment's declared own credentials); each name here is put back **verbatim** from the service's own env on top of that
      *  (`allowlistedEnv`, the same "named keys pass" predicate as the host shell's `inheritEnv:[names]`) — the deployer
@@ -1908,7 +1908,7 @@ export interface ServiceConfigFlat {
      *  under the shared-engine shape (several shell sessions on one config, engine rides the FIRST shell's process
      *  group per the T11 anti-orphan call) other live sessions may still be using this engine, so an unconditional
      *  drain kills a peer mid-turn (499) and 503s new submits. Instead SIGHUP arms an idle watch: shut down only
-     *  after `inflight()` (bg/resume legs + live streams — the blocking set `http + leader`; session-resident background shells/monitors are in the `/health.inflight` total but do not block) has been 0 for this long, WITHOUT flipping `draining`
+     *  after `inflight()` (bg/resume legs + live streams + background sub-agents that outlived their leg — the blocking set `http + leader + backgroundAgents`; session-resident background shells/monitors are in the `/health.inflight` total but do not block) has been 0 for this long, WITHOUT flipping `draining`
      *  (peers stay fully served). A true orphan (last window closed) self-terminates when the window expires —
      *  T11 stands, just bounded instead of immediate. A SECOND SIGHUP (or SIGTERM) escalates to the normal drain
      *  path. Default 120s, floor 5s. Env: SIGHUP_IDLE_GRACE_MS. */
@@ -2206,7 +2206,7 @@ export interface ServiceConfigFlat {
      *  判点在三个提交门(`POST /v1/runs` 与 A2A `message/send`、`POST /v1/tasks`、`POST /v1/tasks/stream`)的幂等重放之后;续跑 / 唤醒 / 审批作答不判。
      *  属主 `http/run-concurrency-cap.ts`。 */
     runMaxConcurrent: number;
-    /** `RUN_MAX_CONCURRENT_PER_PRINCIPAL`:同一**已验提交主体**(`gatedPrincipal`,与成本配额门同键)在本副本的在飞 run 上限(整数,0 / 缺省 = 不设)。
+    /** `RUN_MAX_CONCURRENT_PER_PRINCIPAL`:同一**已验提交主体**(`gatedSubject`,与成本配额门同键)在本副本的在飞 run 上限(整数,0 / 缺省 = 不设)。
      *  无主体请求(无头 service 凭据)不判这一帽,只受 {@link ServiceConfigFlat.runMaxConcurrent}。 */
     runMaxConcurrentPerPrincipal: number;
     /** Operator CEILING on per-task cost (USD) / tokens (1.37 budget gate). A request may ask for a
@@ -2356,7 +2356,7 @@ export interface ServiceConfigFlat {
     configProvider?: ConfigProviderWord;
     /** Root dir holding `config.d/<domain>.json` for the local config source. Env: CONFIG_LOCAL_DIR. */
     configLocalDir?: string;
-    /** 本地配置源的目录信任判官(`config-dir-trust.ts`)多信的那一个属主 uid —— 本服务用户与 root 之外,`config.d` 及其路径上的目录与文档还可以属于谁
+    /** 目录信任判官(`config-dir-trust.ts`:本地配置源、LKG 读回、调度共享店三只读者同一只)多信的那一个属主 uid —— 本服务用户与 root 之外,`config.d` / LKG / 调度店及其路径上的目录与文档还可以属于谁
      *  (userns-remap 的 bind-mount 呈现为未映射 uid、运维用户持有的配置)。只放宽属主判据,模式判据照校。缺席 = 只信本服务用户与 root。
      *  Env: CONFIG_LOCAL_OWNER_UID(形错拒启;解析口 `parseConfigLocalOwnerUid`)。 */
     configLocalOwnerUid?: number;
@@ -2378,7 +2378,7 @@ export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled"
  *  config 这一层它只是一句声明。 */
 export type ServiceAuthConfig = Pick<ServiceConfigFlat, "authToken" | "authTokens" | "allowUnauthedWrites" | "corsOrigins" | "principalHeader" | "requirePrincipal" | "autonomy" | "commandPolicy" | "compliancePosture" | "lockedConfigKeys" | "configCatalogEnabled" | "retentionPolicy" | "retentionSweep" | "operatorPrincipals" | "operatorSingleUser" | "serviceTokenActsForDeployment" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "authBridgeIssuer" | "principalJwtMaxTtlSec" | "bindHost" | "bindHostSource">;
 /** 组:orchestration(编排 + 执行车道 + 沙箱面 + workflow/后台 agent 存留)。 */
-export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "sandboxGit" | "remoteExec" | "remoteExecHomeDir" | "requireExecutionLane" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerSessionLifetime" | "schedulerStorePath" | "planModeEnabled" | "hooksTimeoutMs" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "usageWindows" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentParkClaimStaleMs" | "delegationEntryCaps" | "rosterRetentionMs" | "leaderRunStaleMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sandboxPkgSourceCustom" | "sessionAutoTitle" | "sessionAutoTitleSource" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspEnabled" | "lspHostEnabled" | "lspEnvAllow" | "imageBakes" | "readFace" | "readFaceSource" | "taskWriteFaceEscalation" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "readDenyFloorRequired" | "sandboxReadFloor" | "agentConfigDir" | "configLkgPath" | "configLkgEnabled">;
+export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "sandboxGit" | "remoteExec" | "remoteExecHomeDir" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerSessionLifetime" | "schedulerStorePath" | "planModeEnabled" | "hooksTimeoutMs" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "usageWindows" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentStallMs" | "backgroundAgentParkClaimStaleMs" | "delegationEntryCaps" | "rosterRetentionMs" | "leaderRunStaleMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sandboxPkgSourceCustom" | "sessionAutoTitle" | "sessionAutoTitleSource" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspHostEnabled" | "lspEnvAllow" | "autoBackgroundOnTimeout" | "imageBakes" | "readFace" | "readFaceSource" | "taskWriteFaceEscalation" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "readDenyFloorRequired" | "sandboxReadFloor" | "agentConfigDir" | "configLkgPath" | "configLkgEnabled">;
 /** 组:limitsHttp(HTTP 面 + 各类上限/配额/回收窗)。 */
 export type ServiceLimitsHttpConfig = Pick<ServiceConfigFlat, "port" | "attachmentOrphanGraceMs" | "workspaceFileMaxBytes" | "attachmentMaxBytes" | "attachmentMimeAllowlist" | "attachmentUnboundTtlMs" | "adoptionImportMaxSessions" | "adoptionImportMaxSessionBytes" | "infraCostRates" | "drainGraceMs" | "drainSecondSignalMinGapMs" | "sighupIdleGraceMs" | "parentPid" | "engineAutoExit" | "engineLingerMs" | "engineOrphanLingerMs" | "engineFirstAttachMs" | "engineHandoverLingerMs" | "rateLimitPerMin" | "runMaxConcurrent" | "runMaxConcurrentPerPrincipal" | "maxTaskCostUsd" | "maxTaskTokens" | "maxPrincipalCostUsd" | "costQuotaWindowSec" | "reapIntervalSec" | "runStaleSec" | "toolResultTtlSec">;
 /** 组:observability(可观测)。 */
@@ -2401,4 +2401,17 @@ export interface ServiceConfigGroups {
 /** Service configuration = 平铺面(唯一存储处,消费点原样) ∩ 九个组视图(additive,不可枚举)。 */
 export interface ServiceConfig extends ServiceConfigFlat, ServiceConfigGroups {
 }
+/**
+ * `loadConfig()` 的产物 —— **raw** 形(合成之前):执行车道可以缺席(env `REMOTE_EXEC` 未设;`CONFIG_PROVIDER=local` 下车道也可以由
+ * `config.d/remote-exec.json` 声明,读它是合成步的事)。缺席不是任何车道:读者不得把它折成某条车道。只有执行车道合成步
+ * (`boot/execution-lane.ts` 的 `composeExecutionLane`)把它收成 {@link ServiceConfig}(composed:`remoteExec` 必在)—— 没有显式声明 ⇒ 拒启。
+ * 装配链上合成之后的每一段、`createHttpServer`、run-local 只收 composed 形 ⇒ 漏调合成步的嵌入方 tsc 红(这就是通知)。
+ * 组视图 `orchestration` 与平铺面是同一个对象的两个取景器,所以车道位在两处一起放宽。
+ */
+export type LoadedConfig = Omit<ServiceConfig, "remoteExec" | "orchestration"> & {
+    remoteExec?: RemoteExecConfig;
+    orchestration: Omit<ServiceOrchestrationConfig, "remoteExec"> & {
+        remoteExec?: RemoteExecConfig;
+    };
+};
 //# sourceMappingURL=config-types.d.ts.map