@sema-agent/server 7.147.0 → 7.148.0

package/dist/web-admin-client/apply-effective.js

@@ -3,8 +3,9 @@ import { CATALOG_REPLACES_ENV_MODELS_CODE, SandboxGitConfig, WEB_ADMIN_ENV, envM
 import { modelKeyPoison } from "../key-resolver.js";
 import { DEFAULT_MODEL_REF, buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
 import { applyAutoCompactWindow, buildModelCostKey, isRosterGateArmed, ownCredentialHitsInForce, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
-import { NAME_TABLE_BEHAVIOR, retiredWithoutSuccessorEntries } from "../namespaced-rule-name.js";
+import { NAME_TABLE_BEHAVIOR, retiredLeftOutEntries } from "../namespaced-rule-name.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
+import { ASSUMED_CONTEXT_WINDOW } from "../model-context-window.js";
 import { buildModelHeadersKey } from "../model-entry-headers.js";
 import { validateCommandRules } from "../runtime-governance.js";
 import { stageLimits } from "./stage-limits.js";
@@ -14,11 +15,10 @@ import { crossInvariant } from "../config-invariants.js";
 import { DEFAULT_MODEL_MISSING_CODE, REFUSED_NAME_MINTED_CODE, judgeCatalogEntries, mintedRefusedNames, refusalEventOf, refusalWarnFields, refusedNameLogField, refusedNamesLogFields, malformedDroppedCarrierRefusal } from "../model-entry-refusal.js";
 import { judgeModelRouteEndpoint } from "../model-route-endpoint.js";
 import { gateIntentUnserviceableReason } from "../approval.js";
-import { refusedGroups } from "./apply-ledger.js";
+import { modelPlaneOutcomeOf, refusedGroups } from "./apply-ledger.js";
 import { judgeConfigCandidate } from "./candidate-gate.js";
 import { declareServerWithheldEnv, withdrawServerWithheldEnv } from "../server-secret-env.js";
 import { MODEL_ROUTE_ENV_KEYS } from "../model-route-gap.js";
-const charsPerTokenOf = (v) => (typeof v === "number" && Number.isFinite(v) && v > 0 ? v : undefined);
 function envDerivedModel(config) {
     const m = config.envModel;
     if (m === undefined) {
@@ -41,21 +41,18 @@ function toModel(m, envDefaults = {}, logger) {
         api: m.api,
         baseUrl: m.baseUrl ?? "",
         ...mintCapabilityKeys({ reasoning: m.reasoning, vision: m.vision }),
-        contextWindow: m.contextWindow ?? envDefaults.contextWindow ?? 262144,
+        contextWindow: m.contextWindow ?? envDefaults.contextWindow ?? ASSUMED_CONTEXT_WINDOW,
         maxTokens: m.maxTokens ?? envDefaults.maxTokens ?? 4096,
-        ...(charsPerTokenOf(m.charsPerToken) !== undefined || envDefaults.charsPerToken !== undefined
-            ? { charsPerToken: charsPerTokenOf(m.charsPerToken) ?? envDefaults.charsPerToken }
-            : {}),
-        ...buildModelCostKey(m.cost ? { input: m.cost.input, output: m.cost.output, cacheRead: m.cost.cacheRead ?? 0, cacheWrite: m.cost.cacheWrite ?? 0 } : undefined),
-        params: { ...(m.tier ? { tier: m.tier } : {}), promptCacheFamily: m.provider === "anthropic" ? "input-excludes-cached" : "input-includes-cached" },
+        ...(m.charsPerToken !== undefined || envDefaults.charsPerToken !== undefined ? { charsPerToken: m.charsPerToken ?? envDefaults.charsPerToken } : {}),
+        ...buildModelCostKey(m.cost),
+        params: { tier: m.tier, promptCacheFamily: m.provider === "anthropic" ? "input-excludes-cached" : "input-includes-cached" },
         ...(thinkingDefault ? { defaultThinking: thinkingDefault } : {}),
         ...(compat ? { compat } : {}),
         ...(m.thinkingLevelMap !== undefined ? { thinkingLevelMap: m.thinkingLevelMap } : {}),
         ...(m.extraBody ? { extraBody: m.extraBody } : {}),
         ...buildModelHeadersKey(m.name, m.headers, m.api),
     };
-    const explicitAct = m.autoCompactTokens;
-    applyAutoCompactWindow(model, typeof explicitAct === "number" ? explicitAct : undefined);
+    applyAutoCompactWindow(model, m.autoCompactTokens);
     return model;
 }
 export function mutateInPlace(target, source) {
@@ -368,7 +365,7 @@ function stageModelPlane(config, eff, source, logger, sealedKeys) {
         return stageEnvModelPlane(config);
     const enabled = (eff.models?.models ?? []).filter((m) => m.enabled !== false);
     const verdict = judgeCatalogEntries(enabled, { anthropicRouteMounted: config.anthropic !== undefined }, eff.models?.droppedCatalogEntries);
-    if (enabled.length === 0 && verdict.malformed.length === 0 && verdict.dropped.every((row) => row.identity?.enabled === false))
+    if (!verdict.manages)
         return { stages: {} };
     {
         for (const [name, r] of Object.entries(verdict.refused))
@@ -449,7 +446,7 @@ function stageModelPlane(config, eff, source, logger, sealedKeys) {
         const roles = { ...envPlane.roles, ...centerRoles };
         const activeTiers = {};
         for (const [tier, target] of Object.entries(resolveActiveTiers(eff.models) ?? {})) {
-            if (models[target] !== undefined) {
+            if (Object.hasOwn(models, target)) {
                 activeTiers[tier] = target;
                 continue;
             }
@@ -458,7 +455,7 @@ function stageModelPlane(config, eff, source, logger, sealedKeys) {
         }
         let picked;
         if (usable.length > 0) {
-            const decided = resolveCatalogDefaultModel(eff.models, (n) => models[n] !== undefined, usable[0].name);
+            const decided = resolveCatalogDefaultModel(eff.models, (n) => Object.hasOwn(models, n), usable[0].name);
             switch (decided.kind) {
                 case "named":
                     for (const d of decided.dangling) {
@@ -632,7 +629,7 @@ function stageApprovalRequire(raw) {
             kept: KEPT_WOULD_MATCH_NOTHING,
         };
     }
-    return { ok: true, value: names, skipped: retiredWithoutSuccessorEntries(names, NAME_TABLE_BEHAVIOR) };
+    return { ok: true, value: names, skipped: retiredLeftOutEntries("published governance.approvalRequire", names) };
 }
 function unserviceableOnLeg(leg, candidate) {
     switch (leg.leg) {
@@ -755,7 +752,7 @@ export function logEffectiveDiff(config, eff, catalogSource, logger) {
     logger?.warn("web_admin_dry_run", {
         note: `DRY RUN — web-admin config NOT applied; unset ${WEB_ADMIN_ENV.dryRun} to go live`,
         version: eff.version,
-        wouldOverrideModels: enabled.length > 0,
+        wouldOverrideModels: modelPlaneOutcomeOf(modelPlaneGroupReport(plane)) !== "unmanaged",
         wouldDefaultModel: plane.defaultName ?? null,
         ...(Object.keys(refused).length > 0 ? { wouldRefuse: Object.fromEntries(Object.entries(refused).map(([n, r]) => [n, r.code])) } : {}),
         ...(plane.rejected !== undefined ? { wouldRefuseModelPlane: { invariant: plane.rejected.invariant, code: plane.rejected.code, reason: plane.rejected.reason } } : {}),

package/dist/web-admin-client/apply-ledger.d.ts

@@ -70,11 +70,12 @@ export interface ConfigApplyGroupState {
 export interface ConfigApplyLedgerView {
     /** 本副本**最后**见到的源版本(身份标;拉到即算,哪怕候选被整拒)。 */
     readonly configTargetVersion: number;
-    /** 最后一次成功 commit 的源版本(身份标)。 */
+    /** 最后一次**收口**的完整应用版本(身份标):这一代已提交、且应用它的那一拍的重启判定已发布(写口在 web-admin 的拍收口,
+     *  与 `/health.restart` 同一段同步写 ⇒ 读到它到版时 `restart` 已是这一拍的判定)。按组的落地另记在 `groups[*].appliedVersion`(提交即记)。 */
     readonly configAppliedVersion: number;
     /** [ref]:target 的收货序数(进程内单调)——「见过多少代」的推进判据,哈希方向免疫。 */
     readonly configTargetOrdinal: number;
-    /** [ref]:applied 的收货序数。targetOrdinal 推进而这里停滞 = 「改了没生效」的机器判据。 */
+    /** [ref]:applied 的收货序数(与 `configAppliedVersion` 同一次写)。targetOrdinal 推进而这里停滞 = 「改了没生效」的机器判据。 */
     readonly configAppliedOrdinal: number;
     /** target≠applied 的**持续**时长(ms);收敛时键缺席(健康面不制造噪音)。 */
     readonly configApplyStaleMs?: number;
@@ -110,15 +111,23 @@ export declare function refusedGroups(report: ConfigApplyReport): Array<{
     readonly reason: string;
 }>;
 /**
- * O3:这一次 apply 的**模型面组**(组内各域 = `MODEL_PLANE_DOMAINS`)落地了没有(整组被拒 ⇒
- * false;报告缺席 = 没走到 commit ⇒ false,如实)。调用方据此决定「Runner 现在跑的是哪一代模型面」(`appliedPlaneEff`,swap 判据的
- * 基准)、名册门开不开、以及 boot 要不要按组回落 LKG —— 都只许从真落地的模型面推进。
+ * 一次 apply 里**模型面组**(组内各域 = `MODEL_PLANE_DOMAINS`)的结局 —— 闭集三词,调用方穷举:
+ *  · `landed` —— 组内的域真落地了(Runner 换到这一代模型面);
+ *  · `unmanaged` —— 候选**不管**模型面(目录条目批判据的判决位 `manages` 为假:零启用条目,含只有停用的被丢行;降档时服务的已是 env 表也是这一形)——
+ *    上一代 / env 继续服务,**不是拒,也不是落地**;
+ *  · `refused` —— 整组拒(上一代继续服务)。
+ * 调用方据此决定「Runner 现在跑的是哪一代模型面」(`appliedPlaneEff`,swap 判据的基准)、名册门开不开、boot 要不要按组回落 LKG、
+ * 要不要说「在服 LKG 的模型面」—— 只有 `landed` 推进这些;`refused` 才走按组回落;`unmanaged` 两件都不做。
  */
-export declare function modelPlaneCommitted(report: ConfigApplyReport | undefined): boolean;
+export type ModelPlaneOutcome = "landed" | "unmanaged" | "refused";
+/** 模型面组报告 → 结局(组报告的唯一写者是 apply-effective 的 `modelPlaneGroupReport`:`applied` 非空 ⇔ 组内的域被 stage 出来并提交)。dry-run 读同一只。 */
+export declare function modelPlaneOutcomeOf(group: ConfigApplyGroupReport): ModelPlaneOutcome;
+/** 一次 apply 的模型面结局;报告缺席(没走到 commit:CAS 拒 / swap 席拒 / apply 抛)⇒ `undefined`,如实。 */
+export declare function modelPlaneOutcome(report: ConfigApplyReport | undefined): ModelPlaneOutcome | undefined;
 export interface ConfigApplyLedger {
     /** 拉到一个候选(无论后续是否应用)。ordinal=收货序数,version=身份标。 */
     seenTarget(ordinal: number, version: number): void;
-    /** 一个候选整体 commit 成功。 */
+    /** 应用这一代的那一拍收口(已提交 + 重启判定已发布;有组被拒的那一代只推进 target)。 */
     applied(ordinal: number, version: number): void;
     /** 消费 applyEffective 的报告(按组记账)。 */
     recordApply(report: ConfigApplyReport): void;

package/dist/web-admin-client/apply-ledger.js

@@ -10,8 +10,11 @@ export function refusedGroups(report) {
         return r ? [{ group, keys: r.keys, reason: r.reason }] : [];
     });
 }
-export function modelPlaneCommitted(report) {
-    return report !== undefined && report.groups.modelPlane.rejected === undefined;
+export function modelPlaneOutcomeOf(group) {
+    return group.rejected !== undefined ? "refused" : group.applied.length > 0 ? "landed" : "unmanaged";
+}
+export function modelPlaneOutcome(report) {
+    return report === undefined ? undefined : modelPlaneOutcomeOf(report.groups.modelPlane);
 }
 export function createConfigApplyLedger(now = () => Date.now()) {
     let targetOrd = 0;

package/dist/web-admin-client/center-request.d.ts

@@ -67,8 +67,8 @@ export declare function pullViewQuery(view: {
     readonly principal?: string | undefined;
 }): string;
 /**
- * 中心回了重定向(`egress-redirect.ts` 的判据:`opaqueredirect` 或任何 3xx;304 除外,见 {@link NOT_MODIFIED}):不跟、不重试,类型化拒。拒句是 `egress-redirect.ts` 既有 helper 的那一句(与 hook 直连腿 /
- * 记忆 embedder 同一条律),前面冠上这条请求打的那一席;不回显 `Location`。`status` 是中心回的码(续签器据此落「被拒」终态)。
+ * 中心回了重定向(`egress-redirect.ts` 的判据:`opaqueredirect` 或除 304 外的任何 3xx):不跟、不重试,类型化拒。拒句是 `egress-redirect.ts` 那一只出口的那一句(与本仓其余每个出站面同一条律),
+ * 前面冠上这条请求打的那一席;不回显 `Location`。`status` 是中心回的码(续签器据此落「被拒」终态)。
  */
 export declare class CenterRedirectRefusedError extends Error {
     readonly status: number;

package/dist/web-admin-client/center-request.js

@@ -4,7 +4,7 @@ import { FLEET_LIVE_PATHS, FLEET_PATHS } from "@sema-agent/settings-schema/fleet
 import { CenterCredentialUnavailableError } from "../center-credential.js";
 import { WEB_ADMIN_ENV, httpUrlFlaws, pathBaseUrlFlaws } from "@sema-agent/settings-schema";
 import { buildHttpUrlRefusal } from "../url-refusal.js";
-import { egressRedirectRefusal } from "../egress-redirect.js";
+import { EgressRedirectRefusedError, createEgressFetch } from "../egress-redirect.js";
 export const SCHEMA_MAJOR_HEADER = "x-sema-schema-major";
 export const CENTER_PULL_TIMEOUT_MS = 8000;
 export const SETTINGS_SCHEMA_VERSION = settingsSchemaPackage.version;
@@ -67,21 +67,21 @@ export class CenterRedirectRefusedError extends Error {
         this.name = "CenterRedirectRefusedError";
     }
 }
-const NOT_MODIFIED = 304;
 async function sendToCenter(fix, url, wire) {
-    const res = await (wire.fetchImpl ?? fetch)(url, {
-        method: wire.method,
-        headers: wire.headers,
-        ...(wire.body !== undefined ? { body: wire.body } : {}),
-        redirect: "manual",
-        signal: AbortSignal.timeout(wire.timeoutMs),
-    });
-    if (res.status === NOT_MODIFIED)
-        return res;
-    const refusal = egressRedirectRefusal(res, fix);
-    if (refusal !== undefined)
-        throw new CenterRedirectRefusedError(res.status, `web-admin center request: ${refusal}`);
-    return res;
+    const egress = createEgressFetch(fix, wire.fetchImpl);
+    try {
+        return await egress(url, {
+            method: wire.method,
+            headers: wire.headers,
+            ...(wire.body !== undefined ? { body: wire.body } : {}),
+            signal: AbortSignal.timeout(wire.timeoutMs),
+        });
+    }
+    catch (err) {
+        if (err instanceof EgressRedirectRefusedError)
+            throw new CenterRedirectRefusedError(err.status, `web-admin center request: ${err.message}`);
+        throw err;
+    }
 }
 export function pathBaseUrlRefusal(subject, raw) {
     const flaws = pathBaseUrlFlaws(raw);

package/dist/web-admin-client/effective-keys.d.ts

@@ -18,7 +18,7 @@ export declare const EFFECTIVE_ENVELOPE_KEYS: readonly ["version", "updatedAt"];
 /** `governance` 域(治理三件)的键集——对账门与 schema `GovernanceConfig.shape` 钉集合等式。 */
 export declare const GOVERNANCE_DOMAIN_KEYS: readonly string[];
 /** EffectiveConfig 上**不是** settings-schema 域的顶层键(键 → 成文理由)。⚠️ 墓碑语义:任一键将来出现在 schema
- *  `DOMAINS` 里 ⇒ 对账门红 ⇒ 清本行 + 接本地腿投影(mapToServiceEffective)+ 复核 restart 片归属。 */
+ *  `DOMAINS` 里 ⇒ 对账门红 ⇒ 清本行 + 核本地腿线上视图(`publishLocalEffective`,契约投影整域承运)+ 复核 restart 片归属。 */
 export declare const NON_DOMAIN_EFFECTIVE_KEYS: Readonly<Record<string, string>>;
 /** schema `DOMAINS` 里 server **不消费**的域(域 → 成文理由)。⚠️ 新域(如 presets)到货而不入本表也不入
  *  EffectiveConfig ⇒ 对账门红 ⇒ 逼一行显式决定(「加了域没人接」从此机器可见,[ref]③)。 */

package/dist/web-admin-client/effective-keys.js

@@ -36,6 +36,6 @@ export const DOMAINS_NOT_CONSUMED_BY_SERVER = {
     execution: "per-principal 执法面同 entitlement:ruling 骑 caps view(ExecutionRuling),/effective 域面 server 不读。",
 };
 export const LOCAL_LANE_REMOTE_ONLY_DOMAINS = {
-    projects: "身份台账(design/142 §1.4,与租户身份同风险模型):settings-schema 便携表刻意排除(file-store.ts 成文)——本地腿无此域文件,mapToServiceEffective 不投影;远端腿 verbatim 消费(applyEffective → config.projects)。",
+    projects: "身份台账(design/142 §1.4,与租户身份同风险模型):settings-schema 便携表刻意排除(file-store.ts 成文)——本地腿无此域文件(线上视图里只有契约缺省的空登记簿,解出 `{}` 与缺席同);远端腿 verbatim 消费(applyEffective → config.projects)。",
 };
 //# sourceMappingURL=effective-keys.js.map

package/dist/web-admin-client/entry-metadata.d.ts

@@ -0,0 +1,8 @@
+export declare const ENTRY_METADATA_KEYS: readonly ["notes", "rosters"];
+type EntryMetadataKey = (typeof ENTRY_METADATA_KEYS)[number];
+/** 条目去掉顶层元数据键之后的副本(浅拷;入参不动)。 */
+export declare function withoutEntryMetadata<T extends object>(entry: T): Omit<T, EntryMetadataKey>;
+/** MCP 条目的指纹面:减顶层元数据键 + 分组标签按挂载口的判据读(坏形 ≡ 缺席)。restart 的 mcp 片与撤销台账的恢复指纹同读这一只。 */
+export declare function mcpEntryFingerprintFace(entry: object): Record<string, unknown>;
+export {};
+//# sourceMappingURL=entry-metadata.d.ts.map

package/dist/web-admin-client/entry-metadata.js

@@ -0,0 +1,13 @@
+import { isMcpSourceLabel } from "../mcp-source-label.js";
+export const ENTRY_METADATA_KEYS = ["notes", "rosters"];
+const METADATA = new Set(ENTRY_METADATA_KEYS);
+export function withoutEntryMetadata(entry) {
+    return Object.fromEntries(Object.entries(entry).filter(([key]) => !METADATA.has(key)));
+}
+export function mcpEntryFingerprintFace(entry) {
+    const face = withoutEntryMetadata(entry);
+    if (!isMcpSourceLabel(face.source))
+        delete face.source;
+    return face;
+}
+//# sourceMappingURL=entry-metadata.js.map

package/dist/web-admin-client/http-client.d.ts

@@ -4,7 +4,7 @@ import type { EffectiveConfig, ExecutionRuling } from "./types.js";
 import { type DroppedConfigEntry, type UnreadConfigFile } from "./read-warnings.js";
 import { type CenterEndpoint } from "./center-request.js";
 /** GET the effective config (Bearer + ETag). null = 304 (unchanged). Throws on transport/HTTP error, and on a
- *  payload that is not an effective config at all(非对象 / version 非有限数 / gate 域坏形——[ref] 裁B)。
+ *  payload that is not an effective config at all(非对象 / version 非有限数 / gate 域坏形——[ref] 裁B;这一类抛是 `ConfigCandidateRefusedError`,成因 `rejected`)。
  *  `refusedDocuments`:被拒文档(契约类型 `ConfigDocumentRefusal`,与本地腿同键同义;wire 上只有一种 —— 带事实的退役域,墓碑,成因词 `retired_domain`)不抛 —— 交成发现、那一键不进 effective,
  *  候选判官整拒这份候选。
  *  `domainErrors`:坏 catalog 域(schema default 已落)逐域单列——与本地腿 `FetchEffectiveResult` 同键同义,

package/dist/web-admin-client/http-client.js

@@ -3,15 +3,34 @@ import { isStringArray, readEffectiveWire, PrincipalCapsWire } from "@sema-agent
 import { separateRetiredDomains, splitFoldedReadWarnings, withDroppedCatalogEntries } from "./read-warnings.js";
 import { CENTER_PULL_TIMEOUT_MS, centerFetch } from "./center-request.js";
 import { answerStillCurrent } from "../center-credential.js";
+import { candidateRefusedBy } from "../config-pull-failure.js";
+import { readUpstreamJson } from "../upstream-body.js";
 export async function fetchEffective(center, etag, fetchImpl, worker) {
     const { res, identity } = await centerFetch(center, { kind: "effective", worker }, { etag, timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (res.status === 304)
         return null;
     if (!res.ok)
         throw new Error(`web-admin HTTP ${res.status}`);
+    let raw;
+    try {
+        raw = await readUpstreamJson(res);
+    }
+    catch (bodyError) {
+        if (bodyError instanceof SyntaxError)
+            throw candidateRefusedBy(bodyError);
+        throw bodyError;
+    }
     const warnings = [];
-    const { body, refusedDocuments } = separateRetiredDomains(await res.json());
-    const wire = readEffectiveWire(body, (w) => warnings.push(w));
+    let body;
+    let refusedDocuments;
+    let wire;
+    try {
+        ({ body, refusedDocuments } = separateRetiredDomains(raw));
+        wire = readEffectiveWire(body, (w) => warnings.push(w));
+    }
+    catch (readerError) {
+        throw candidateRefusedBy(readerError);
+    }
     const { domainErrors, droppedEntries, droppedCatalogEntries, unreadFiles } = splitFoldedReadWarnings(warnings, "center");
     const effective = withDroppedCatalogEntries(wire, droppedCatalogEntries);
     return {
@@ -102,7 +121,7 @@ async function requestPrincipalView(center, principal, etag, fetchImpl, worker)
     if (!res.ok)
         throw new Error(`web-admin principal-caps HTTP ${res.status}`);
     const responseEtag = res.headers.get("etag");
-    const json = await res.json();
+    const json = await readUpstreamJson(res);
     stillCurrent();
     return { json, ...(responseEtag !== null ? { etag: responseEtag } : {}) };
 }
@@ -141,7 +160,7 @@ export async function fetchPromptArtifact(center, artifactDigest, fetchImpl) {
     const { res } = await centerFetch(center, { kind: "prompt-artifact", digest: artifactDigest }, { timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (!res.ok)
         throw new WebAdminHttpError(`prompt artifact HTTP ${res.status} for ${artifactDigest}`, res.status);
-    return await res.json();
+    return await readUpstreamJson(res);
 }
 export async function fetchPromptBlob(center, contentDigest, fetchImpl) {
     const { res } = await centerFetch(center, { kind: "prompt-blob", digest: contentDigest }, { timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });

package/dist/web-admin-client/mcp-revocation.d.ts

@@ -45,7 +45,7 @@ export declare function createMcpRevocationLedger(onChange?: (ev: {
     restored: string[];
 }) => void): McpRevocationLedger;
 /** 一拍 EffectiveConfig 的 ENABLED MCP 服务器条目表(`resolveMcpServers` 同判据:`enabled !== false`;
- *  值=整条目的 key 排序 JSON 指纹,Map 插入序=发布序);mcp 域缺席 ⇒ `null`(台账不动)。
+ *  值=条目的指纹面(`entry-metadata.ts` `mcpEntryFingerprintFace`:减备注 / 名册标签,分组标签按挂载口判据读)的 key 排序 JSON 指纹,Map 插入序=发布序);mcp 域缺席 ⇒ `null`(台账不动)。
  *  指纹序列化器 = `@sema-agent/settings-schema/hash` 的 `stableStringify`([ref] 起;[ref] 2026-08-31 起与 restart-signal 同源:此前本文件
  *  持一份**逐字相同**的私有复刻 `fingerprintOf`;JSON 形输入上字节恒等,golden 钉 test/canonical-json-golden.test.ts)。
  *  两处指纹仍只在各自域内自比、不跨域比对——同源只是去掉一份多余的复刻,不引入跨域约束;也**不**改用

package/dist/web-admin-client/mcp-revocation.js

@@ -1,4 +1,5 @@
 import { stableStringify } from "@sema-agent/settings-schema/hash";
+import { mcpEntryFingerprintFace } from "./entry-metadata.js";
 export function createMcpRevocationLedger(onChange) {
     let baseline;
     let seen;
@@ -41,7 +42,7 @@ export function enabledMcpEntries(mcp) {
     const out = new Map();
     for (const s of mcp.servers) {
         if (s.enabled !== false)
-            out.set(s.name, stableStringify(s));
+            out.set(s.name, stableStringify(mcpEntryFingerprintFace(s)));
     }
     return out;
 }

package/dist/web-admin-client/read-warnings.d.ts

@@ -143,6 +143,7 @@ export declare const DroppedCatalogEntryRow: z.ZodObject<{
         "entry-schema-invalid": "entry-schema-invalid";
         "entry-key-invalid": "entry-key-invalid";
         "entry-unreadable": "entry-unreadable";
+        "entry-unknown-key": "entry-unknown-key";
     }>;
     identity: z.ZodOptional<z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;

package/dist/web-admin-client/read-warnings.js

@@ -209,6 +209,7 @@ function reasonCodeForWire(code) {
         case "entry-schema-invalid":
         case "entry-key-invalid":
         case "entry-unreadable":
+        case "entry-unknown-key":
             return code;
         default: {
             const never = code;

package/dist/web-admin-client/restart-signal.js

@@ -3,14 +3,18 @@ import { stableStringify } from "@sema-agent/settings-schema/hash";
 import { DEFAULT_PLUGIN_ALLOW_HOSTS, materializablePlugins } from "../capabilities/center-plugins.js";
 import { CENTER_READ_FACE_LIVE_KEYS } from "./read-face.js";
 import { enabledA2aPeerView } from "./skills-mcp.js";
+import { mcpEntryFingerprintFace, withoutEntryMetadata } from "./entry-metadata.js";
 const RESTART_SLICES = ["skills", "mcp", "a2a", "scenarios", "degrade-route", "read-face", "memory-consolidation"];
 function enabledOnly(rows) {
     if (!rows)
         return null;
     return rows.filter((r) => r.enabled !== false);
 }
+function enabledEntriesFingerprint(rows, face = withoutEntryMetadata) {
+    return enabledOnly(rows)?.map((r) => face(r)) ?? null;
+}
 export function catalogEntryFingerprint(entry) {
-    const { cost, quotaWeight: _quotaWeight, enabled: _enabled, ...route } = entry;
+    const { cost, quotaWeight: _quotaWeight, enabled: _enabled, ...route } = withoutEntryMetadata(entry);
     return { ...route, costDeclared: cost !== undefined };
 }
 function planeEntriesFingerprint(rows) {
@@ -35,19 +39,19 @@ function restartSliceValue(eff, slice, ctx) {
         return null;
     switch (slice) {
         case "skills": {
-            const skills = enabledOnly(eff.skills?.skills);
+            const skills = enabledEntriesFingerprint(eff.skills?.skills);
             const materialized = materializablePlugins(eff, ctx?.pluginsAllowHosts ?? DEFAULT_PLUGIN_ALLOW_HOSTS);
             const plugins = materialized.length > 0 ? materialized : null;
             return skills === null && plugins === null ? null : { skills, plugins };
         }
         case "mcp":
-            return enabledOnly(eff.mcp?.servers);
+            return enabledEntriesFingerprint(eff.mcp?.servers, mcpEntryFingerprintFace);
         case "a2a": {
             const views = (eff.a2a?.peers ?? []).flatMap((peer) => enabledA2aPeerView(peer) ?? []);
             return views.length > 0 ? views : null;
         }
         case "scenarios":
-            return enabledOnly(eff.scenarios?.scenarios);
+            return enabledEntriesFingerprint(eff.scenarios?.scenarios);
         case "read-face": {
             const d = eff.readFace;
             if (!d)

package/dist/web-admin-client/skills-mcp.d.ts

@@ -17,8 +17,8 @@ export type SkillBodySource = Pick<ConfigProvider, "fetchSkillContent" | "skillB
  * **在场 ⇒ 整只数组原样**(含 `[]`;不去重、不排序、不判拼写 —— settings-schema 14.4.0 的读法一句话,判官在引擎:`allowedTools` 是 allow 规则来源、`disallowedTools` 拒侧读成空的条目让
  * 那次激活 fail-closed)。数组复制一份:规格上的数组是引擎规格自己的,不与配置源手里的 manifest / 本地店对象共享。
  *
- * 本函数住在技能域的读口旁,三个读者共用 —— 本地腿 CLOSED 投影(`config-provider.ts` 的 `mapToServiceEffective`)、manifest → 规格的铸点({@link applySkillsManifest})、
- * 已装技能 ↔ manifest 的投影一致判据({@link installedSkillMatchesManifest}):三处各写一份键表就是下一次同形丢位([ref] 族)。契约再加一个技能键时的看守不在这里,
+ * 本函数住在技能域的读口旁,两个读者共用 —— manifest → 规格的铸点({@link applySkillsManifest})、
+ * 已装技能 ↔ manifest 的投影一致判据({@link installedSkillMatchesManifest}):两处各写一份键表就是下一次同形丢位(本地腿的 manifest 由契约 `toSkillsManifest` 铸,条目整只过境,不再有第三份键表)。契约再加一个技能键时的看守不在这里,
  * 在 `test/skill-tool-lists-carry.test.ts` 的键处置表(按 `keyof SkillSpec` 铸型)与 `test/settings-schema-consumption-gates.test.ts` 门 4(叶路径由契约形状派生)。
  */
 export declare function skillToolListsOf(source: {

package/dist/web-admin-client/types.d.ts

@@ -71,8 +71,7 @@ export interface CenterModel {
      * `readEffectiveWire`)都把它们当未知键剥掉(1.10.0 夹具实测:`unknown-keys-dropped
      * {keys:["models.0.defaultThinking","models.0.reasoningEffortLevels"]}`;settings-schema 3.0.0 起同一条
      * 告警的坐标是**段数组** `{keys:[["models",0,"defaultThinking"],…]}`,出门形走 `formatConfigPath`),
-     * `mapToServiceEffective` 的
-     * CLOSED 投影也从未列过它们。留着 = 一份读不到任何东西的类型承诺 + `compat.reasoningEffortLevels`
+     * 当年本地腿的 CLOSED 投影(已删)也从未列过它们。留着 = 一份读不到任何东西的类型承诺 + `compat.reasoningEffortLevels`
      * 之外的第二个写者([ref]:同一语义面禁两个写者)。roster 级 `defaultThinking` 若要真做,归 schema 补键
      * 另立单据(见 CHANGELOG 未闭环)。
      */

package/dist/workspace-space.d.ts

@@ -139,8 +139,9 @@ export interface EndedSpace {
  *  no second read to fail — a head read that throws fails the delete itself (retried to convergence). */
 export type CacheReclaimReason = "delete_failed" | "budget";
 /**
- * The ONE reclaim seat for an ended space — called where a space ENDS: the session-delete coordinator (`boot/session-faces.ts` `purgeSession`)
- * and the managed-retention sweep after it deletes session trees (`boot/retention-lane.ts`); neither writes a reclaim of its own. It reclaims
+ * The ONE reclaim seat for an ended space — called where a space ENDS, through the one session-erase settler (`session-erase.ts`
+ * `createSessionEraseSettler`) both deciders run after a session tree is erased: the session-delete coordinator (`boot/session-faces.ts` `purgeSession`)
+ * and the managed-retention sweep (`boot/retention-lane.ts`); neither writes a reclaim of its own. It reclaims
  * everything the space left behind: the cache volume (when configured), the `space/` snapshot partition and the session's park snapshots whose names carry the ended occupant's ownership mark (when a
  * snapshot store is configured; old-form / `none` park objects are left to the bucket's lifecycle rule). ONE call runs under ONE
  * absolute deadline (`dataTimeoutMs`) built at its entry — the cache volume and the objects of every space in the call; a space the deadline passed

package/docs/DEVICE-EXECUTOR-PROTOCOL.md

@@ -13,7 +13,7 @@ dials the device, so the device needs no inbound port, no public address and no
 
 | Plane | Transport | Who calls whom | Where it is specified |
 |---|---|---|---|
-| Management / enrollment / binding | HTTPS, JSON | the user's client calls the server | the repository's `docs/ASSISTANT-WIRE-CONTRACT.md` §14 (not shipped in the npm package) |
+| Management / enrollment / binding | HTTPS, JSON | the user's client calls the server | the server's wire contract, device-management section (internal record, not shipped) |
 | Executor | WebSocket (upgrade on the WS path below), text frames, JSON | the device connects out to the server | **this document** |
 
 **Discovery before you connect**: `GET /v1/capabilities` carries a `deviceExecutor` key — either `false`
@@ -1103,6 +1103,6 @@ The short version for an executor implementer:
   *different* device is refused — changing devices is an explicit rebind action, never an implicit one;
 - a non-device deployment refuses the key outright rather than ignoring it.
 
-The full contract — request shapes, every refusal code, the rebind verb, and the disclosed races — is in
-the repository's `docs/ASSISTANT-WIRE-CONTRACT.md` §14.6 and, for the management verbs, §14.1–14.5 (not shipped in the npm package). It is not repeated
-here.
+The full contract — request shapes, every refusal code, the rebind verb, and the disclosed races — is part of
+the server's wire contract, in its device-lane section (the first-bind write protocol and the management verbs;
+internal record, not shipped). It is not repeated here.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.147.0",
+  "version": "7.148.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -14,6 +14,9 @@
     "./main": {
       "default": "./dist/main.js"
     },
+    "./model-plane-probe": {
+      "default": "./dist/model-plane-probe.js"
+    },
     "./device-protocol": {
       "types": "./dist/device-protocol.d.ts",
       "default": "./dist/device-protocol.js"
@@ -78,8 +81,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
-    "@sema-agent/core": "7.65.0",
-    "@sema-agent/settings-schema": "20.0.0",
+    "@sema-agent/core": "7.66.0",
+    "@sema-agent/settings-schema": "24.0.0",
     "e2b": "2.36.0",
     "libsodium-wrappers": "0.8.4",
     "mysql2": "3.22.6",