@sema-agent/server 7.147.0 → 7.148.0

package/dist/config-provider.js

@@ -1,13 +1,13 @@
-import { readMcpSourceLabel } from "./mcp-source-label.js";
 import { createHmac, randomBytes } from "node:crypto";
 import { splitFoldedReadWarnings, withDroppedCatalogEntries } from "./web-admin-client/read-warnings.js";
 import { FileConfigStore, readEnvModelsDecision } from "@sema-agent/settings-schema/node";
 import { envModelsDecisionTag } from "@sema-agent/settings-schema";
 import { REMOTE_CATALOG_SOURCE } from "./env-model-table-gate.js";
 import { assertLocalConfigDirTrusted } from "./config-dir-trust.js";
-import { danglingRefs, emptyEffective, findSkillContent, promptArtifactFor, renderRefIssue, skillContentHash, } from "@sema-agent/settings-schema";
+import { candidateRefusedBy } from "./config-pull-failure.js";
+import { danglingRefs, emptyEffective, findSkillContent, promptArtifactFor, renderRefIssue, resolveEffectiveForWorker, } from "@sema-agent/settings-schema";
 import { redactSecrets } from "./trace/redact.js";
-import { fetchEffective as remoteFetchEffective, fetchSkillContent as remoteFetchSkillContent, skillToolListsOf, WebAdminHttpError, } from "./web-admin-client/facade.js";
+import { fetchEffective as remoteFetchEffective, fetchSkillContent as remoteFetchSkillContent, WebAdminHttpError, } from "./web-admin-client/facade.js";
 import { remoteConfigProviderUrlRefusal } from "./config-invariants.js";
 import { homedir } from "node:os";
 import { join } from "node:path";
@@ -31,7 +31,7 @@ const redactContractSentence = (text) => redactSecrets(text);
 const redactDroppedEntry = (d) => ({ ...d, error: redactContractSentence(d.error) });
 const redactRefusedDocument = (d) => ({ ...d, error: redactContractSentence(d.error) });
 export const BOOT_FETCH_DEFERRED = Symbol("boot-fetch-deferred");
-export function raceBootFetch(fetch, budgetMs) {
+export function raceBootFetch(pull, budgetMs) {
     if (budgetMs <= 0)
         return Promise.resolve(BOOT_FETCH_DEFERRED);
     let timer;
@@ -39,7 +39,7 @@ export function raceBootFetch(fetch, budgetMs) {
         timer = setTimeout(() => res(BOOT_FETCH_DEFERRED), budgetMs);
         timer.unref?.();
     });
-    return Promise.race([fetch.finally(() => clearTimeout(timer)), budget]);
+    return Promise.race([pull.finally(() => clearTimeout(timer)), budget]);
 }
 export class RemoteConfigProvider {
     cc;
@@ -95,7 +95,15 @@ export class LocalConfigProvider {
     }
     async fetchEffective(etag) {
         await assertLocalConfigDirTrusted({ root: this.root, declaredOwnerUid: this.#declaredOwnerUid });
-        const read = await this.#store.read();
+        let read;
+        try {
+            read = await this.#store.read();
+        }
+        catch (readerError) {
+            if (isFileSystemError(readerError))
+                throw readerError;
+            throw candidateRefusedBy(readerError);
+        }
         const envModels = await readEnvModelsDecision(this.root);
         const catalogSource = { kind: "local", root: this.root, envModels };
         const tag = buildLocalConfigEtag(read.kind === "refused" ? read.version : read.effective.version, envModels);
@@ -128,7 +136,7 @@ export class LocalConfigProvider {
         this.#servedSkills = eff.skills;
         const unreadKeys = localUnreadPromptKeys(eff.prompts);
         return {
-            effective: withDroppedCatalogEntries(mapToServiceEffective(eff, eff.version), folded.droppedCatalogEntries),
+            effective: withDroppedCatalogEntries(publishLocalEffective(eff), folded.droppedCatalogEntries),
             ...(errors.length > 0 ? { domainErrors: errors } : {}),
             ...(droppedEntries.length > 0 ? { droppedEntries } : {}),
             ...(unreadKeys.length > 0 ? { unreadKeys } : {}),
@@ -138,9 +146,15 @@ export class LocalConfigProvider {
         return findSkillContent(this.#servedSkills, contentHash);
     }
 }
+function isFileSystemError(e) {
+    if (!(e instanceof Error))
+        return false;
+    const { syscall, code } = e;
+    return typeof syscall === "string" && typeof code === "string";
+}
 function refusedFaces(read) {
     return {
-        effective: mapToServiceEffective({ ...emptyEffective(), version: read.version }, read.version),
+        effective: publishLocalEffective({ ...emptyEffective(), version: read.version }),
         refusedDocuments: read.refusals.map(redactRefusedDocument),
     };
 }
@@ -152,108 +166,9 @@ function localPromptsWire(prompts, version) {
     const artifact = prompts === undefined ? undefined : promptArtifactFor(prompts, null);
     return artifact === undefined ? {} : { prompts: { schemaVersion: 2, artifact: { ...artifact, sourceRevision: `local:r${version}` } } };
 }
-export function mapToServiceEffective(eff, version) {
-    return {
-        version,
-        updatedAt: eff.updatedAt,
-        models: {
-            models: (eff.models.models ?? []).map((m) => ({
-                name: m.name,
-                id: m.id,
-                provider: m.provider,
-                api: m.api,
-                ...(m.baseUrl !== undefined ? { baseUrl: m.baseUrl } : {}),
-                ...(m.apiKeyEnv !== undefined ? { apiKeyEnv: m.apiKeyEnv } : {}),
-                ...(m.sealedApiKey !== undefined ? { sealedApiKey: m.sealedApiKey } : {}),
-                ...(m.quotaWeight !== undefined ? { quotaWeight: m.quotaWeight } : {}),
-                tier: m.tier,
-                ...(m.reasoning !== undefined ? { reasoning: m.reasoning } : {}),
-                ...(m.vision !== undefined ? { vision: m.vision } : {}),
-                ...(m.thinkingLevelMap !== undefined ? { thinkingLevelMap: m.thinkingLevelMap } : {}),
-                ...(m.contextWindow !== undefined ? { contextWindow: m.contextWindow } : {}),
-                ...(m.maxTokens !== undefined ? { maxTokens: m.maxTokens } : {}),
-                ...(typeof m.autoCompactTokens === "number" ? { autoCompactTokens: m.autoCompactTokens } : {}),
-                ...(typeof m.charsPerToken === "number" ? { charsPerToken: m.charsPerToken } : {}),
-                ...(m.cost !== undefined ? { cost: m.cost } : {}),
-                ...(m.extraBody !== undefined ? { extraBody: m.extraBody } : {}),
-                ...(m.compat !== undefined ? { compat: m.compat } : {}),
-                ...(m.headers !== undefined ? { headers: m.headers } : {}),
-                ...(m.promptGuidance !== undefined ? { promptGuidance: m.promptGuidance } : {}),
-                enabled: m.enabled,
-            })),
-            roles: eff.models.roles ?? {},
-            atMention: eff.models.atMention,
-            ...(eff.models.tierGroups !== undefined ? { tierGroups: eff.models.tierGroups } : {}),
-            ...(eff.models.activeTierGroup !== undefined ? { activeTierGroup: eff.models.activeTierGroup } : {}),
-        },
-        ...(eff.collab?.templates?.length ? { collab: { templates: eff.collab.templates } } : {}),
-        ...(eff.plugins?.plugins?.length ? { plugins: { plugins: eff.plugins.plugins } } : {}),
-        a2a: eff.a2a,
-        skills: {
-            skills: (eff.skills.skills ?? []).map((s) => ({
-                name: s.name,
-                description: s.description,
-                scenarios: s.scenarios ?? [],
-                contentHash: skillContentHash(s.content),
-                enabled: s.enabled,
-                ...skillToolListsOf(s),
-            })),
-        },
-        mcp: {
-            servers: (eff.mcp.servers ?? []).map((s) => {
-                const base = {
-                    name: s.name,
-                    scenarios: s.scenarios ?? [],
-                    enabled: s.enabled,
-                    ...(s.allowTools !== undefined ? { allowTools: s.allowTools } : {}),
-                    ...(s.elicitation !== undefined ? { elicitation: s.elicitation } : {}),
-                    ...(s.contentOrigin !== undefined ? { contentOrigin: s.contentOrigin } : {}),
-                    ...readMcpSourceLabel(s.name, s.source),
-                    ...(s.toolFaces !== undefined ? { toolFaces: s.toolFaces } : {}),
-                    ...(s.toolAxes !== undefined ? { toolAxes: s.toolAxes } : {}),
-                    ...(s.sessionMetaKey !== undefined ? { sessionMetaKey: s.sessionMetaKey } : {}),
-                    ...(s.startupTimeoutMs !== undefined ? { startupTimeoutMs: s.startupTimeoutMs } : {}),
-                    ...(s.authForm !== undefined ? { authForm: s.authForm } : {}),
-                    ...(s.entryKind !== undefined ? { entryKind: s.entryKind } : {}),
-                };
-                if (s.transport.kind === "stdio") {
-                    return {
-                        ...base,
-                        transport: {
-                            kind: "stdio",
-                            command: s.transport.command,
-                            ...(s.transport.args !== undefined ? { args: s.transport.args } : {}),
-                            ...(s.transport.envRefs !== undefined ? { envRefs: s.transport.envRefs } : {}),
-                        },
-                    };
-                }
-                return {
-                    ...base,
-                    transport: {
-                        kind: "http",
-                        url: s.transport.url,
-                        ...(s.transport.headerRefs !== undefined ? { headerRefs: s.transport.headerRefs } : {}),
-                        ...(s.transport.principalHeader !== undefined ? { principalHeader: s.transport.principalHeader } : {}),
-                        ...(s.transport.assertionHeader !== undefined ? { assertionHeader: s.transport.assertionHeader } : {}),
-                    },
-                };
-            }),
-        },
-        ...localPromptsWire(eff.prompts, version),
-        scenarios: {
-            scenarios: (eff.scenarios.scenarios ?? []).map((sc) => ({
-                name: sc.name,
-                toolset: sc.toolset,
-                enabled: sc.enabled,
-            })),
-        },
-        ...(eff.limits !== undefined ? { limits: eff.limits } : {}),
-        governance: {
-            ...(eff.governance.autonomy !== undefined ? { autonomy: eff.governance.autonomy } : {}),
-            ...(eff.governance.commandPolicy !== undefined ? { commandPolicy: eff.governance.commandPolicy } : {}),
-            ...(eff.governance.approvalRequire !== undefined ? { approvalRequire: eff.governance.approvalRequire } : {}),
-        },
-    };
+export function publishLocalEffective(eff) {
+    const { prompts: _storageForm, ...wire } = resolveEffectiveForWorker(eff, null).config;
+    return { ...wire, ...localPromptsWire(eff.prompts, eff.version) };
 }
 export function createConfigProvider(input) {
     const kind = configSourceKind({ configProvider: input.provider, webAdmin: input.webAdmin });

package/dist/config-pull-failure.d.ts

@@ -0,0 +1,50 @@
+/**
+ * 一次配置拉取失败的**成因** —— 在拉取那一层定一次,失败行(起服 `config_source_unreachable_using_env` / 刷新拍 `web_admin_refresh_failed` /
+ * 迟到起服重拉 `config_boot_arrival_repull_failed` / run-local)读同一个值(错误上的 `pullCause`),不各写一份。
+ *
+ * 判据只有一条:**错误的型**。拉取层自己铸型 —— 契约读腿整包抛 ⇒ 读腿那一处包成 {@link ConfigCandidateRefusedError}({@link candidateRefusedBy};远程腿 `http-client.ts`、本地腿
+ * `config-provider.ts`;本地腿的目录信任拒 `ConfigDirUntrustedError` 是它的子类);应答属于一把已不在用的中心凭证 ⇒ {@link ConfigPullSupersededError}
+ * (起服服务的拉取口 `pullEffective`);其余一切出自拉取口的抛 ⇒ 拉取口包成 {@link ConfigSourceUnreachableError}。所以一只 catch 不用自记「走到哪一段了」:
+ * 是 {@link ConfigPullError} ⇒ 拉取失败(词 = 它的 `pullCause`);不是 ⇒ 拉取已成、后面的段抛的。
+ *
+ * 包装不改运维读到的那一句:包出来的错与原错 `name` / `message` 逐字同(`String(err)` 逐字同),原错挂在 `cause` 上。
+ *
+ * 纯叶(零 import)。
+ */
+/**
+ * 拉取失败的成因闭集(词序即文档序;加词 ⇒ {@link configPullFailureNote} 的穷尽 `switch` 编译红):
+ *  · `unreachable` —— 没拿到候选:传输错 / HTTP 非 2xx / 凭证取不到 / 重定向被拒 / 超时 / 读体途中断;本地腿上文件系统的错(读不到目录里的字节);
+ *  · `rejected` —— 配置源答了,本引擎拒收这份候选:契约读腿整包抛(门控域判形失败、载荷不是有效视图、体不是 JSON),或本地配置目录不被信任;
+ *  · `superseded` —— 应答在飞期间中心凭证换了人,这份应答属于上一把凭证 ⇒ 弃掉(下一拉按现凭证)。
+ */
+export declare const CONFIG_PULL_FAILURE_CAUSES: readonly ["unreachable", "rejected", "superseded"];
+export type ConfigPullFailureCause = (typeof CONFIG_PULL_FAILURE_CAUSES)[number];
+/** 刷新失败行的成因:拉取失败三词之外多一词 `apply_refused`(拉取已成、应用段抛 —— 起服把这一形记成另一个事件 `config_apply_refused`,刷新拍与迟到起服只有一行)。 */
+export type ConfigRefreshFailureCause = ConfigPullFailureCause | "apply_refused";
+/** 拉取层铸的错误型的共同基类(具体型只有下面三只与目录信任拒;成因读 `pullCause`)。 */
+export declare abstract class ConfigPullError extends Error {
+    abstract readonly pullCause: ConfigPullFailureCause;
+    protected constructor(message: string, name: string, options?: ErrorOptions);
+}
+/** `rejected`:配置源答了,本引擎拒收这份候选。读腿处用 {@link candidateRefusedBy} 包读者的原错;目录信任拒(`ConfigDirUntrustedError`)是子类,自铸句子。 */
+export declare class ConfigCandidateRefusedError extends ConfigPullError {
+    readonly pullCause: "rejected";
+    constructor(message: string, name: string, options?: ErrorOptions);
+}
+/** 读腿整包抛 ⇒ `rejected`(与原错 `name` / `message` 逐字同,原错挂 `cause`)。远程腿 `fetchEffective` 与本地腿 `LocalConfigProvider.fetchEffective` 的读腿处各调一次。 */
+export declare function candidateRefusedBy(readerError: unknown): ConfigCandidateRefusedError;
+/** `superseded`:应答属于一把已不在用的中心凭证。 */
+export declare class ConfigPullSupersededError extends ConfigPullError {
+    readonly pullCause: "superseded";
+    constructor(message: string);
+}
+/** `unreachable`:没拿到候选。拉取口用 {@link asConfigPullError} 包其余一切抛。 */
+export declare class ConfigSourceUnreachableError extends ConfigPullError {
+    readonly pullCause: "unreachable";
+    constructor(transportError: unknown);
+}
+/** 一次拉取的抛 ⇒ 拉取层铸的型(已是 ⇒ 原样;否则 ⇒ `unreachable`)。拉取口(起服服务的 `pullEffective`、run-local 的那一拉)的 catch 只调它。 */
+export declare function asConfigPullError(err: unknown): ConfigPullError;
+/** 失败行的 `note`(穷尽 switch:成因闭集加词不补句 ⇒ 编译红)。 */
+export declare function configPullFailureNote(cause: ConfigPullFailureCause): string;
+//# sourceMappingURL=config-pull-failure.d.ts.map

package/dist/config-pull-failure.js

@@ -0,0 +1,48 @@
+export const CONFIG_PULL_FAILURE_CAUSES = ["unreachable", "rejected", "superseded"];
+const nameOf = (e) => (e instanceof Error ? e.name : "Error");
+const messageOf = (e) => (e instanceof Error ? e.message : String(e));
+export class ConfigPullError extends Error {
+    constructor(message, name, options) {
+        super(message, options);
+        this.name = name;
+    }
+}
+export class ConfigCandidateRefusedError extends ConfigPullError {
+    pullCause = "rejected";
+    constructor(message, name, options) {
+        super(message, name, options);
+    }
+}
+export function candidateRefusedBy(readerError) {
+    return new ConfigCandidateRefusedError(messageOf(readerError), nameOf(readerError), { cause: readerError });
+}
+export class ConfigPullSupersededError extends ConfigPullError {
+    pullCause = "superseded";
+    constructor(message) {
+        super(message, "Error");
+    }
+}
+export class ConfigSourceUnreachableError extends ConfigPullError {
+    pullCause = "unreachable";
+    constructor(transportError) {
+        super(messageOf(transportError), nameOf(transportError), { cause: transportError });
+    }
+}
+export function asConfigPullError(err) {
+    return err instanceof ConfigPullError ? err : new ConfigSourceUnreachableError(err);
+}
+export function configPullFailureNote(cause) {
+    switch (cause) {
+        case "unreachable":
+            return "no candidate was obtained from the config source (transport error, non-2xx answer, credential unavailable, redirect refused, timeout, or a filesystem error reading the local config directory) — the serving config stays as it is and the next pull retries";
+        case "rejected":
+            return "the config source answered but this engine refuses the candidate (a gate domain failed its schema, the payload is not an effective config, or the local config directory is not trusted) — `err` carries the reader's sentence with the field path; fix the named document";
+        case "superseded":
+            return "the answer belonged to a center credential that is no longer current — discarded; the next pull runs under the current credential";
+        default: {
+            const unhandled = cause;
+            throw new Error(`config pull failure: unknown cause ${String(unhandled)}`);
+        }
+    }
+}
+//# sourceMappingURL=config-pull-failure.js.map

package/dist/config-types.d.ts

@@ -24,6 +24,7 @@ import type { MemoryEngineBackend, StoreBackend as StoreBackendWord } from "@sem
 import { DRAIN_GRACE_FLOOR_MS } from "@sema-agent/settings-schema/fleet";
 import type { AtMention, ProjectRegistration, SandboxGitConfig } from "@sema-agent/settings-schema";
 import type { ModsDeclaration } from "./mods-declaration.js";
+import type { LocalDockerCapacityConfig } from "./plugins/local-docker-capacity.js";
 /** [ref]:记忆向量面的 embedder 坐标(env `MEMORY_EMBEDDER_*` 解析结果;单一属主 = 本类型,
  *  `plugins/memory-embedder.ts` 的工厂直接消费它,不复制形状)。语义与三问见
  *  {@link ServiceConfigFlat.memoryEmbedder}。纯数据 —— 端点原文照存(拼 `/embeddings` 是 transport
@@ -359,6 +360,11 @@ export interface A2aServeSkill {
     description?: string;
     /** INTERNAL scenario key this skill runs under. NEVER projected onto the card. */
     scenario: string;
+    /** Who this skill is PUBLISHED to (exact verified principal names). Absent = every caller. A caller whose verified person is
+     *  not listed neither sees the skill on any card nor can name it by id — a PUBLICATION choice, not a capability grant (the
+     *  scenario behind it stays reachable through every entry that does not read skills; the scenario gate is the only authority).
+     *  NEVER projected onto the card. */
+    audience?: readonly string[];
 }
 /**
  * DESIGN-269 §3.3 车2 —— the server-as-peer block. **Absence IS the OFF state** (`A2A_SERVE_ENABLED`
@@ -378,7 +384,7 @@ export interface A2aServeConfig {
     description?: string;
     /** `A2A_SERVE_URL` — the PUBLIC JSON-RPC endpoint URL announced on the card (http/https, validated). */
     url: string;
-    /** `A2A_SERVE_SKILLS` — declared skills (may be empty: an honest "I take work, I advertise no skill"). */
+    /** `A2A_SERVE_SKILLS` (versioned envelope `{"version":2,"skills":[…]}`) — declared skills (may be empty: an honest "I take work, I advertise no skill"). */
     skills: A2aServeSkill[];
     /** `A2A_SERVE_BLOCKING_WAIT_MS` — how long a `blocking:true` `message/send` waits for a terminal state
      *  before answering `working` and letting the caller poll `tasks/get`. Server-side budget only — it is
@@ -658,6 +664,9 @@ export type RemoteExecConfig = {
     /** [ref] —— `DOCKER_SANDBOX_ENV=NAME,NAME` 点到、且本进程环境里真有的键 ⇒ 原值(与 e2b 的 `sandboxEnv` 同一只解析器、
      *  同一只谓词;每条 `docker exec` 以 `-e K=V` 注入)。键缺席 = 旋钮未设 / 空串。 */
     env?: Record<string, string>;
+    /** 车道容器帽(`DOCKER_MAX_CONTAINERS`)。> 0 才在场;缺席 = 关 = 不建闸
+     *  (`plugins/local-docker-capacity.ts`,计数律与射程的唯一属主)。 */
+    capacity?: LocalDockerCapacityConfig;
 };
 export interface ServiceConfigFlat {
     port: number;
@@ -1859,20 +1868,20 @@ export interface ServiceConfigFlat {
      *  core 自动延迟」这句(本行旧文案)作废:缺省窗下一个中小 MCP 名册够不着阈值,首请求带全 schema。
      *  唯一不受门的是调用方的 `TaskSpec.deferTools` 字面名单。口径全文见 src/capabilities/tool-defer.ts 头注。 */
     toolDeferLongtail: boolean;
-    /** LSP code-intelligence tool ([ref] §13.1): mount core's `lsp` tool, routed to an E2B LSP sidecar. Requires
-     *  REMOTE_EXEC=e2b. Default OFF (the on-the-fly language-server install is heavy until an E2B template bakes it).
-     *  `LSP_ENABLED=true`. */
-    lspEnabled: boolean;
-    /** TOC local LSP (core 1.190 `NodeLspManager`, host lane only): mount core's `lsp` tool over LOCAL `child_process`
-     *  language servers (CC `services/lsp` parity). Unlike the sandbox lane it needs NO baked template — just the
-     *  server binary on PATH, and it DEGRADES gracefully (ENOENT → grep/read) + spawns lazily/cached, so it is DEFAULT
-     *  ON for the host lane (CC-parity); set `LSP_HOST_ENABLED=false` to opt out. (`REMOTE_EXEC=host` only — ssh/adb/
-     *  local-docker can't reach a local child process to the right filesystem.)
-     *  [ref] B4 (lens4 N7): this lane used to share `LSP_ENABLED` with `lspEnabled` above — one env name driving
-     *  two OPPOSITE defaults. It now has its own knob. 🪦 server 3.0.0: `LSP_ENABLED=false` (the pre-split host
-     *  opt-out) is a **fail-loud tombstone** — it refuses boot naming `LSP_HOST_ENABLED`; `LSP_ENABLED=true` keeps
-     *  its own meaning (the sandbox lane's opt-in above) and is unaffected. */
+    /** Local LSP (core `NodeLspManager`): mount core's `lsp` tool over LOCAL `child_process` language servers (CC `services/lsp`
+     *  parity) — needs just the server binary on PATH, DEGRADES gracefully (ENOENT → grep/read), spawns lazily/cached ⇒ DEFAULT ON
+     *  (`LSP_HOST_ENABLED=false` opts out). The knob is conjoined by the one mint point `createLspManager` with deployment-shape row
+     *  `callerOwnsWorkerDisk` (host lane ∧ single-principal) — no other lane mounts LSP. The sandbox-lane knob `LSP_ENABLED` is a
+     *  tombstone in settings-schema `RETIRED_ENVS` (refused at the top of `loadConfig`; this repo neither reads nor re-words it). */
     lspHostEnabled: boolean;
+    /** `AUTO_BACKGROUND_ON_TIMEOUT` —— 前台 Bash 命令撞上**它自己的**超时时,合格的命令(资格由引擎判:命令里没有 `git`、首词不是 `sleep`)
+     *  被转成后台任务继续跑,而不是被杀(引擎 `HandsBandOptions.autoBackgroundOnTimeout`;引擎缺省关,本服务作为部署者**缺省开**)。
+     *  同一个开关在引擎里还管第二个触发:有人的输入排队等着本轮边界、而合格命令还在跑 ⇒ 引擎把它转后台好让输入送达(引擎刻意只设一个开关)。
+     *  `=false` ⇒ 两件都不做,超时即杀(引擎缺省形)。读点只有一处:手带铸点 `buildHandsBand`(共享基座与 leader 车道同调),每只有手的 Runner 同源。
+     *  CC 2.1.316 对位:合格命令缺省武装(`cli316.js:273095`,合格判 ∧ 非显式后台);env `CLAUDE_CODE_AUTO_BACKGROUND_TIMEOUT_MS` 只缩短超时(`cli316.js:266918`),本服务不设对应旋钮。
+     *  只在能把运行中的命令领养成后台的车道上生效(执行环境 `backgroundCapabilities.supportsDetach`);其余车道值照传、引擎与适配器按契约忽略 ——
+     *  这一根旋钮在本车道上生不生效由 `GET /health` 的 `autoBackgroundOnTimeout`(三词)如实报(`capability-facts.ts` 的事实 `autoBackgroundOnTimeout`)。 */
+    autoBackgroundOnTimeout: boolean;
     /** [ref] —— host-lane language-server env **named allowlist** (`LSP_ENV_ALLOW=NAME,NAME`). The language server's env is
      *  the engine's `inheritedHostEnv("scrub")` (shape rules + this deployment's declared own credentials); each name here is put back **verbatim** from the service's own env on top of that
      *  (`allowlistedEnv`, the same "named keys pass" predicate as the host shell's `inheritEnv:[names]`) — the deployer
@@ -2197,7 +2206,7 @@ export interface ServiceConfigFlat {
      *  判点在三个提交门(`POST /v1/runs` 与 A2A `message/send`、`POST /v1/tasks`、`POST /v1/tasks/stream`)的幂等重放之后;续跑 / 唤醒 / 审批作答不判。
      *  属主 `http/run-concurrency-cap.ts`。 */
     runMaxConcurrent: number;
-    /** `RUN_MAX_CONCURRENT_PER_PRINCIPAL`:同一**已验提交主体**(`gatedPrincipal`,与成本配额门同键)在本副本的在飞 run 上限(整数,0 / 缺省 = 不设)。
+    /** `RUN_MAX_CONCURRENT_PER_PRINCIPAL`:同一**已验提交主体**(`gatedSubject`,与成本配额门同键)在本副本的在飞 run 上限(整数,0 / 缺省 = 不设)。
      *  无主体请求(无头 service 凭据)不判这一帽,只受 {@link ServiceConfigFlat.runMaxConcurrent}。 */
     runMaxConcurrentPerPrincipal: number;
     /** Operator CEILING on per-task cost (USD) / tokens (1.37 budget gate). A request may ask for a
@@ -2347,7 +2356,7 @@ export interface ServiceConfigFlat {
     configProvider?: ConfigProviderWord;
     /** Root dir holding `config.d/<domain>.json` for the local config source. Env: CONFIG_LOCAL_DIR. */
     configLocalDir?: string;
-    /** 本地配置源的目录信任判官(`config-dir-trust.ts`)多信的那一个属主 uid —— 本服务用户与 root 之外,`config.d` 及其路径上的目录与文档还可以属于谁
+    /** 目录信任判官(`config-dir-trust.ts`:本地配置源、LKG 读回、调度共享店三只读者同一只)多信的那一个属主 uid —— 本服务用户与 root 之外,`config.d` / LKG / 调度店及其路径上的目录与文档还可以属于谁
      *  (userns-remap 的 bind-mount 呈现为未映射 uid、运维用户持有的配置)。只放宽属主判据,模式判据照校。缺席 = 只信本服务用户与 root。
      *  Env: CONFIG_LOCAL_OWNER_UID(形错拒启;解析口 `parseConfigLocalOwnerUid`)。 */
     configLocalOwnerUid?: number;
@@ -2369,7 +2378,7 @@ export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled"
  *  config 这一层它只是一句声明。 */
 export type ServiceAuthConfig = Pick<ServiceConfigFlat, "authToken" | "authTokens" | "allowUnauthedWrites" | "corsOrigins" | "principalHeader" | "requirePrincipal" | "autonomy" | "commandPolicy" | "compliancePosture" | "lockedConfigKeys" | "configCatalogEnabled" | "retentionPolicy" | "retentionSweep" | "operatorPrincipals" | "operatorSingleUser" | "serviceTokenActsForDeployment" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "authBridgeIssuer" | "principalJwtMaxTtlSec" | "bindHost" | "bindHostSource">;
 /** 组:orchestration(编排 + 执行车道 + 沙箱面 + workflow/后台 agent 存留)。 */
-export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "sandboxGit" | "remoteExec" | "remoteExecHomeDir" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerSessionLifetime" | "schedulerStorePath" | "planModeEnabled" | "hooksTimeoutMs" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "usageWindows" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentStallMs" | "backgroundAgentParkClaimStaleMs" | "delegationEntryCaps" | "rosterRetentionMs" | "leaderRunStaleMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sandboxPkgSourceCustom" | "sessionAutoTitle" | "sessionAutoTitleSource" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspEnabled" | "lspHostEnabled" | "lspEnvAllow" | "imageBakes" | "readFace" | "readFaceSource" | "taskWriteFaceEscalation" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "readDenyFloorRequired" | "sandboxReadFloor" | "agentConfigDir" | "configLkgPath" | "configLkgEnabled">;
+export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "sandboxGit" | "remoteExec" | "remoteExecHomeDir" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerSessionLifetime" | "schedulerStorePath" | "planModeEnabled" | "hooksTimeoutMs" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "usageWindows" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentStallMs" | "backgroundAgentParkClaimStaleMs" | "delegationEntryCaps" | "rosterRetentionMs" | "leaderRunStaleMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sandboxPkgSourceCustom" | "sessionAutoTitle" | "sessionAutoTitleSource" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspHostEnabled" | "lspEnvAllow" | "autoBackgroundOnTimeout" | "imageBakes" | "readFace" | "readFaceSource" | "taskWriteFaceEscalation" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "readDenyFloorRequired" | "sandboxReadFloor" | "agentConfigDir" | "configLkgPath" | "configLkgEnabled">;
 /** 组:limitsHttp(HTTP 面 + 各类上限/配额/回收窗)。 */
 export type ServiceLimitsHttpConfig = Pick<ServiceConfigFlat, "port" | "attachmentOrphanGraceMs" | "workspaceFileMaxBytes" | "attachmentMaxBytes" | "attachmentMimeAllowlist" | "attachmentUnboundTtlMs" | "adoptionImportMaxSessions" | "adoptionImportMaxSessionBytes" | "infraCostRates" | "drainGraceMs" | "drainSecondSignalMinGapMs" | "sighupIdleGraceMs" | "parentPid" | "engineAutoExit" | "engineLingerMs" | "engineOrphanLingerMs" | "engineFirstAttachMs" | "engineHandoverLingerMs" | "rateLimitPerMin" | "runMaxConcurrent" | "runMaxConcurrentPerPrincipal" | "maxTaskCostUsd" | "maxTaskTokens" | "maxPrincipalCostUsd" | "costQuotaWindowSec" | "reapIntervalSec" | "runStaleSec" | "toolResultTtlSec">;
 /** 组:observability(可观测)。 */

package/dist/config.d.ts

@@ -205,7 +205,7 @@ export declare function entryDeclarableRemoteExec(lane: EntryDeclarableLane): Re
  *
  *  Semantics are the two dialects' semantics VERBATIM — an opt-in knob is `boolEnv(x, false)`, an opt-out knob is
  *  `boolEnv(x, true)` — for the two literals and for unset. Anything else goes through `parseBoolWord` ([ref]-rc2,
- *  [ref]): `1`/`0`/`yes`/`no`/`on`/`off` in any case are read as the operator meant them (`LSP_ENABLED=1` reads as
+ *  [ref]): `1`/`0`/`yes`/`no`/`on`/`off` in any case are read as the operator meant them (`LEADER_ENABLED=1` reads as
  *  "on" to a human, and now to the parser too), and an unknown word REFUSES TO BOOT — it no longer lands on the
  *  default with a warning (that was this helper's first form, retired with [ref]-rc2; [ref] corrected this note).
  *
@@ -300,9 +300,9 @@ export declare function isRosterGateArmed(webAdmin: ServiceConfig["webAdmin"]):
  *     {@link findCcRuleFormNames}(它同时是 `allow` 腿的**唯一**判据,见下方例外说明)。
  *   - 退役名(`bash`/`Task`/`KillShell`…)与 pre-prefix 短名(`figma__x`):[ref](core 7.41.0 [ref])起判据是 core 导出的
  *     **那一只** `judgeRuleToolName`(准备阶段、两只会话规则店、本仓会话规则写口同调),本函数零手写臂;指引 = core 表给的现役指引 /
- *     补全协议前缀。退役名里**没有后继**的那一种(判词 `retired` 不带 `currentName`:`TeamCreate` / `TaskOutput` / `MultiEdit`)不在拒面 ——
- *     `namespaced-rule-name.ts` 的 `isRetiredWithoutSuccessor` 是唯一读法:**有通告席的表**({@link UnmatchableToolNameJudgment} 的 `noticeSeat`)上这一行不拒、原样留着,
- *     读这张表的一方说一句(引擎读的请求规则桶由引擎通告;只有本服务读的运维 / 中心名单由装配处日志点名);没有通告席的表(请求体 `neverAuto`)照拒。
+ *     补全协议前缀。退役名里**没有后继**的那一种(`TeamCreate` / `TaskOutput` / `MultiEdit`)不在拒面 ——
+ *     唯一读法 = 引擎的账(core 7.66.0 [ref],`namespaced-rule-name.ts` 的 `isRetiredLeftOut`):**有通告席的表**({@link UnmatchableToolNameJudgment} 的 `noticeSeat`)上这一行不拒、原样留着,
+ *     读这张表的一方说一句(引擎读的请求规则桶由引擎通告;只有本服务读的运维 / 中心名单由装配处日志点名;请求体 `neverAuto` 由本服务据账铸通告)。
  *   - 够不着挂载工具的协议名:**对端段铸不出**(`mcp__github.com`、`mcp__github.com__*`、对端段里的部分通配 `mcp__git*`、超长 / 归一后带连串下划线的服务器段、对端段为空的
  *     `mcp__` / `mcp____x`)—— 前缀对,但引擎铸注册名时归一对端段,而规则对对端段逐字比,永不匹配。判官是引擎的 `judgeRuleToolName`(core 7.43.0 [ref] (b)
  *     的判词 `unmintable_segment`,句子带它的 guidance 与 1:1 现名);本仓 7.116.0–7.117.x 那只自比 `mintNamespacePrefix` 的对照随之退役。
@@ -365,10 +365,10 @@ export type UnmatchableToolNameJudgment = {
     readonly behavior: PermissionRule["behavior"];
     readonly pathBases?: PathRuleBases;
     /**
-     * 这张表上退役且**无后继**的名字({@link isRetiredWithoutSuccessor})由谁说那一句:`engine` = 引擎准备期名字审计铸 `config.legacy_tool_name`
-     * (表经带名单投影的策略到达引擎:请求体 `settings.permissions.deny` / `ask`);`server` = 本服务读这张表的那一处落一行日志(运维 `APPROVAL_REQUIRE` /
-     * `DENY` / `NEVER_AUTO` 起服、中心 `governance.approvalRequire` 落配)。**在场才不拒**:不拒必须配恰一句话;缺席 = 这张表没有通告席(请求体
-     * `settings.permissions.neverAuto`:引擎不读这张表,它编成的策略不带名单投影)⇒ 照拒;放行那一天由本服务铸通告(引擎导出「条目 + 句」源之后),那时加第三个席位词。
+     * 这张表上退役且**无后继**的名字(引擎的账 {@link isRetiredLeftOut})由谁说那一句:`engine` = 引擎准备期名字审计铸 `config.legacy_tool_name`
+     * (表经带名单投影的策略到达引擎:请求体 `settings.permissions.deny` / `ask`);`server` = 本服务读这张表的那一处说(运维 `APPROVAL_REQUIRE` /
+     * `DENY` / `NEVER_AUTO` 起服日志、中心 `governance.approvalRequire` 落配日志、请求体 `settings.permissions.neverAuto` 的用户面通告 —— 后者 core 7.66.0 [ref] 起:
+     * 本服务据引擎的账铸 `config.legacy_tool_name`,句子与 detail 是引擎的)。**在场才不拒**:不拒必须配恰一句话;缺席 = 这张表没有人说话 ⇒ 照拒。
      */
     readonly noticeSeat?: "engine" | "server";
 };
@@ -582,12 +582,4 @@ export declare function splitLocalRoots(a: {
     dataRoot: string;
     configRoot: string;
 } | undefined;
-export declare function resolveBindHost(config: {
-    bindHost?: string;
-    /** 缝合审 M5:`bindHost` 的**来源**决定它算不算 operator 明示,见下。 */
-    bindHostSource?: "BIND_HOST" | "HOST";
-    allowUnauthedWrites?: boolean;
-    authToken?: string;
-    authTokens?: Record<string, string>;
-}): string | undefined;
 //# sourceMappingURL=config.d.ts.map