@sema-agent/server 7.148.0 → 7.150.0

package/dist/boot/stage-07-capability-layer.js

@@ -193,7 +193,7 @@ export async function runStage07(ctx) {
     const parkedReviveSurface = checkpointStore && backgroundAgentStore && builtinDefaultScenario ? createParkedReviveSurface(builtinDefaultScenario, { onBackgroundChildEvent: runnerDeps.onBackgroundChildEvent }) : undefined;
     const parkedReviveInheritedGate = parkedReviveSurface && config.durableApproval
         ? createParkedReviveInheritedGate({
-            config, question, logger, localRoot,
+            config, questionSeat: question !== undefined, logger, localRoot,
             approverSeat: createRunnerDepsOnAsk(toolApproval),
             approvalExemptionStore,
             ...(runnerDeps.runtimeCapsResolver ? { resolveRuntimeCaps: runnerDeps.runtimeCapsResolver } : {}),

package/dist/boot/stage-08-reapers.d.ts

@@ -89,7 +89,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     };
     workflowRunStore: import("../orchestration/workflow-notify-journal.js").JournalingWorkflowRunStore | undefined;
     workflowsCapable: boolean;
-    orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
+    orgDeliveryGate: import("../org-delivery-gate.js").ServerOrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     belowTaskChainPatterns: readonly string[];
@@ -172,6 +172,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     storeEvidence: import("../store-posture.js").StoreEvidence;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
+    localAdmission: import("../plugins/local-data-root-admission.js").LocalDataRootAdmission | undefined;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-09-leader.d.ts

@@ -108,7 +108,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     };
     workflowRunStore: import("../orchestration/workflow-notify-journal.js").JournalingWorkflowRunStore | undefined;
     workflowsCapable: boolean;
-    orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
+    orgDeliveryGate: import("../org-delivery-gate.js").ServerOrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     belowTaskChainPatterns: readonly string[];
@@ -191,6 +191,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     storeEvidence: import("../store-posture.js").StoreEvidence;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
+    localAdmission: import("../plugins/local-data-root-admission.js").LocalDataRootAdmission | undefined;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-10-http-server.d.ts

@@ -1,4 +1,36 @@
+import { brainSummary } from "../brain.js";
+import { type ServiceConfig } from "../config.js";
 import type { runStage09 } from "./stage-09-leader.js";
+/**
+ * 启动协议行 `listening` 的字段(行本身是 `observability/logger.ts` 的 {@link import("../observability/logger.js").STARTUP_PROTOCOL_EVENTS} 一员:不随 `LOG_LEVEL`)。
+ * 铸点 = 本文件 listen 之后那一行(全仓唯一,`test/source-hygiene-gate.test.ts` M7),字面量过 {@link exactListeningLine}(键集恰等于本型,可选键与条件展开同算);
+ * 键集登记在自铸登记表 `listeningLineKey`(`satisfies Record<keyof ListeningLine, …>`:键加一个而登记表没跟 / 多一个 ⇒ tsc 红)。只登顶层键;`brain` 段里的键随 `brainSummary` 走,不在本型。
+ *
+ * 绑址两格,一格一个事实:`bindHost` = 本进程**请求**绑的地址(`resolveBindHost` 的答案 —— `BIND_HOST` 经无鉴权自收窄之后的那一只;答案缺席 = 全接口时是说明串);`boundAddress` = 内核**实际**绑上的地址
+ * (`server.address().address` 原样:`::` / `0.0.0.0` / `127.0.0.1` / `::1` …;配置写 `localhost` 时它是解析出的那一只)。口同理:`port` 读的也是绑定者自己的答案。
+ */
+export interface ListeningLine {
+    readonly port: number;
+    readonly bindHost: string;
+    readonly bindHostNote?: string;
+    readonly boundAddress: string;
+    readonly model: ServiceConfig["model"]["id"];
+    readonly brain: ReturnType<typeof brainSummary>;
+    readonly breakerState: string;
+    readonly session: string;
+    readonly memory: string;
+    readonly instanceId: string;
+    readonly rateLimitPerMin: number;
+    readonly rateLimit: string;
+    readonly maxPrincipalCostUsd: number | null;
+    readonly costQuota: string;
+    readonly toolResultStore: string;
+    readonly otel: string | null;
+    readonly perModelKeys: number;
+    readonly sealedModelKeys: number;
+    readonly sealedPoisonedModels: number;
+    readonly workflowRunStore: string;
+}
 export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>): Promise<{
     drainState: import("../fleet/drain-entry.js").DrainState;
     hookWakeBus: {
@@ -107,7 +139,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     };
     workflowRunStore: import("../orchestration/workflow-notify-journal.js").JournalingWorkflowRunStore | undefined;
     workflowsCapable: boolean;
-    orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
+    orgDeliveryGate: import("../org-delivery-gate.js").ServerOrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     belowTaskChainPatterns: readonly string[];
@@ -186,10 +218,11 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
-    config: import("../config-types.js").ServiceConfig;
+    config: ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     storeEvidence: import("../store-posture.js").StoreEvidence;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
+    localAdmission: import("../plugins/local-data-root-admission.js").LocalDataRootAdmission | undefined;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-10-http-server.js

@@ -31,6 +31,9 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import { seatText } from "../trace/exit-seat.js";
+function exactListeningLine(line) {
+    return line;
+}
 export async function runStage10(ctx) {
     const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, belowTaskChainPatterns, deploymentMods, deploymentModsLoaded, deviceLane, drainState, dropSessionScopedOf, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, sandboxCapacity, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportStores, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekReading, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sessionResidentBackground, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
@@ -218,7 +221,7 @@ export async function runStage10(ctx) {
         checkpointStore, imageIndex, perTaskImage,
         sessionEnvSelection,
         lockedKeys: governanceSeams.lockedKeys,
-        liveQuestionFace: question,
+        questionSeat: question !== undefined,
         approverSeat: createRunnerDepsOnAsk(toolApproval),
     });
     const runnerFor = createHandsRunnerSelector({ full: runner, handsless: handslessRunner });
@@ -284,11 +287,12 @@ export async function runStage10(ctx) {
         version: serviceVersion(),
         signal: () => mintEngineSignal({ ...deployment, config }),
         modelRefusals: () => deployment.modelRefusalsState?.(),
-        ...(servingLease ? { onCenterCapabilities: (caps) => servingLease.noteCenterCapabilities(caps) } : {}),
+        ...(servingLease ? { onHeartbeat: (hearing) => servingLease.noteHeartbeat(hearing) } : {}),
         ...(fleetUsage ? { usage: fleetUsage } : {}),
         logger: { info: (m, d) => logger.info(m, d ?? {}), warn: (m, d) => logger.warn(m, d ?? {}) },
     });
     webAdmin.onSelfReportChange(() => void fleetClient?.announceNow());
+    servingLease?.onViewChange(() => void fleetClient?.announceNow());
     if (fleetClient) {
         const advertised = config.fleetAdvertiseAddress;
         logger.info("fleet_client_started", { worker: config.webAdmin?.worker, usageReport: fleetUsage !== undefined, announce: advertised !== undefined, ...(advertised !== undefined ? { address: buildDisplaySafeUrl(advertised) } : {}) });
@@ -299,12 +303,13 @@ export async function runStage10(ctx) {
     const bound = server.address();
     if (bound === null || typeof bound === "string")
         throw new Error(`http server listening without a TCP address (server.address() = ${JSON.stringify(bound)})`);
-    logger.info("listening", {
+    logger.info("listening", exactListeningLine({
         port: bound.port,
         bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",
         ...(bindHost === "127.0.0.1" && !config.bindHost
             ? { bindHostNote: "auto-narrowed to loopback: write face is unauthenticated (ALLOW_UNAUTHED_WRITES with no service token). Set BIND_HOST explicitly to override." }
             : {}),
+        boundAddress: bound.address,
         model: config.model.id,
         brain: brainSummary(config),
         breakerState: config.resilience.circuitBreaker ? (breakerState ? `shared(${backend.kind})` : "in-process") : "off",
@@ -327,7 +332,7 @@ export async function runStage10(ctx) {
                     ? `db(${backend.kind})`
                     : "file"
             : "off",
-    });
+    }));
     if (workflowNotifyGate) {
         void workflowNotifyGate
             .recover(workflowRecoverOpts)

package/dist/boot/stores.d.ts

@@ -6,6 +6,7 @@ import type { Metrics } from "../observability/metrics.js";
 import { type MemorySyncStore } from "../plugins/memory-sync-store-pg.js";
 import { type TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import { type StoreBackend } from "../plugins/store-backend.js";
+import type { LocalDataRootAdmission } from "../plugins/local-data-root-admission.js";
 import { type MemoryScopeStores } from "../memory-scope-stores.js";
 import { type StoreEvidence } from "../store-posture.js";
 export interface OpenStoresCtx {
@@ -15,6 +16,8 @@ export interface OpenStoresCtx {
     localRoot: string;
     /** 店的持久性起服证据(起服第 2 段段首 `captureBootStoreEvidence` 取的那一份;直接调本函数的测试同一只取证)。 */
     storeEvidence: StoreEvidence;
+    /** local 数据根准入读数(起服第 1 段在本进程第一笔写之前取的那一只;非 local = `undefined`)。直接调本函数的测试经 `test/helpers/open-stores.ts` 同一只准入取。 */
+    localAdmission: LocalDataRootAdmission | undefined;
 }
 /**
  * durable 回决腿的规则位给 `approval_ask` 加了 `rule_command`/`rule_scope_root` 两列,而 `ensureAsk` 的 INSERT 与每一条读**无条件**引用它们 ⇒ 存量表上整条流内审批协议

package/dist/boot/stores.js

@@ -21,7 +21,7 @@ import { LocalTaskAttachmentStore } from "../plugins/local-task-attachment-store
 import { PgTaskAttachmentStore, TiDBTaskAttachmentStore, ensurePgTaskAttachmentSchema, ensureTiDBTaskAttachmentSchema } from "../plugins/task-attachment-store.js";
 import { createSessionStore } from "../plugins/session-store.js";
 import { buildSqlPoolMissingRefusal, missingSqlCoordinateKeys } from "../sql-engine-coordinates.js";
-import { runAndLogOneTimeMigrations } from "../plugins/one-time-migrations.js";
+import { ONE_TIME_MIGRATIONS, runAndLogOneTimeMigrations } from "../plugins/one-time-migrations.js";
 import { createTaskListLane } from "./task-list-lane.js";
 import { ensurePgTaskListSchema, ensureTiDBTaskListSchema } from "../plugins/task-list-store-sql.js";
 import { assertDeviceAuditRebindEventSchema, ensurePgDeviceSchema, ensureTiDBDeviceSchema } from "../plugins/device-store-sql.js";
@@ -65,19 +65,29 @@ export function buildSessionBoxMountLine(verdict) {
         : { level: "warn", fields: { peerLaneMountable: false, peerLaneRefusal: verdict.code, reason: verdict.reason } };
 }
 export async function openStores(ctx) {
-    const { config, logger, metrics, localRoot, storeEvidence } = ctx;
+    const { config, logger, metrics, localRoot, storeEvidence, localAdmission } = ctx;
     let backend;
     let storeDegradedReason;
+    if (config.requirePrincipal && config.dbBackend === "local") {
+        throw new Error("REQUIRE_PRINCIPAL=true is not supported on the local file backend (DB_BACKEND=local): the lane is single-user " +
+            "by construction — a session created before owners were recorded is claimed by the FIRST principal that submits " +
+            "to it during the upgrade window, and the lane's mutual-recognition arms assume one user — so it cannot enforce " +
+            "a multi-tenant session boundary. Use a SQL backend (DB_BACKEND=mysql|pg) for multi-tenant, or run local " +
+            "single-user with REQUIRE_PRINCIPAL=false (a BFF may still inject x-agent-principal per request for memory " +
+            "scoping and audit attribution).");
+    }
     const dsnConfigured = !!(config.tidb || config.pg);
     await ensureSnapshotBuckets(config, logger);
     const wantDb = config.sessionBackend === "tidb" ||
         config.dbBackend === "local" ||
         (config.sessionBackend === "auto" && dsnConfigured);
     if (wantDb) {
-        const opened = await openStoreBackendWithFallback(config, logger, { runStallVerdicts: (landed) => metrics.inc("runs_reaped_total", { kind: "stale" }, landed) });
+        const opened = await openStoreBackendWithFallback(config, logger, { runStallVerdicts: (landed) => metrics.inc("runs_reaped_total", { kind: "stale" }, landed) }, localAdmission, { dataRootMedium: storeEvidence.dataRoot.verdict });
         backend = opened.backend;
         storeDegradedReason = opened.degradedReason;
     }
+    if (backend)
+        assertCloudSnapshotBlobPosture(backend.kind, config);
     {
         const mysqlPool = backend?.mysqlPool?.();
         const pgPool = backend?.pgPool?.();
@@ -108,8 +118,6 @@ export async function openStores(ctx) {
         else if (mysqlPool)
             await assertSessionExtCascadeOn(mysqlDriver(mysqlPool));
     }
-    if (backend)
-        await runAndLogOneTimeMigrations(logger, backend);
     if ((process.env.REWIND_SNAPSHOT_MAX_MB ?? "") !== "") {
         logger.warn("rewind_snapshot_max_mb_retired", {
             note: "REWIND_SNAPSHOT_MAX_MB no longer has an effect: the whole-tree snapshot epoch is retired (S-15); per-edited-file history captures only files the agent touches, with no tree walk and no size gate. Remove the env var. Per-blob SQL sizing is governed by SNAPSHOT_BLOB_SQL_MAX_BYTES / object storage as before.",
@@ -228,6 +236,7 @@ export async function openStores(ctx) {
         degradedReason: storeDegradedReason,
         evidence: storeEvidence,
         memoryRootWired: config.memoryEngineBackend === "file" && memoryEngine !== undefined,
+        localDeclaration: backend?.localStoreDeclaration?.(),
     });
     metrics.setGauge("store_backend_degraded", storePosture.degradedReason !== undefined ? 1 : 0);
     const freshStart = buildStoreFreshStartLine(storePosture, storeEvidence);
@@ -422,25 +431,19 @@ export async function openStores(ctx) {
                 await assertDeviceAuditRebindEventSchema(mysqlDriver(mysqlPool));
         }
     }
-    {
+    const reconcileSchema = async (pending) => {
         const mysqlPool = backend?.mysqlPool?.();
         const pgPool = backend?.pgPool?.();
         if (pgPool)
-            await assertSchemaMatchesCode(async (sql) => (await pgPool.query(sql)).rows, "pg");
+            await assertSchemaMatchesCode(async (sql) => (await pgPool.query(sql)).rows, "pg", pending);
         else if (mysqlPool)
-            await assertSchemaMatchesCode(async (sql) => (await mysqlPool.query(sql))[0], "mysql");
-    }
-    const sessionStore = createSessionStore(config, backend, metrics);
-    if (config.requirePrincipal && backend?.kind === "local") {
-        throw new Error("REQUIRE_PRINCIPAL=true is not supported on the local file backend (DB_BACKEND=local): the lane is single-user " +
-            "by construction — a session created before owners were recorded is claimed by the FIRST principal that submits " +
-            "to it during the upgrade window, and the lane's mutual-recognition arms assume one user — so it cannot enforce " +
-            "a multi-tenant session boundary. Use a SQL backend (DB_BACKEND=mysql|pg) for multi-tenant, or run local " +
-            "single-user with REQUIRE_PRINCIPAL=false (a BFF may still inject x-agent-principal per request for memory " +
-            "scoping and audit attribution).");
-    }
+            await assertSchemaMatchesCode(async (sql) => (await mysqlPool.query(sql))[0], "mysql", pending);
+    };
+    await reconcileSchema(ONE_TIME_MIGRATIONS);
     if (backend)
-        assertCloudSnapshotBlobPosture(backend.kind, config);
+        await runAndLogOneTimeMigrations(logger, backend);
+    await reconcileSchema([]);
+    const sessionStore = createSessionStore(config, backend, metrics);
     if (!config.requirePrincipal && headReadOf(sessionStore) !== undefined) {
         logger.warn("principal_optional", {
             note: "owner-aware session store with REQUIRE_PRINCIPAL=false — owned sessions are protected, but headerless callers can create/share anonymous sessions; set REQUIRE_PRINCIPAL=true for multi-tenant",

package/dist/boot/web-admin.d.ts

@@ -144,7 +144,7 @@ export interface WebAdminRuntime {
     /** [ref] ②:caps `centerWiring.effectivePull` / `effectiveRevision` 的取值口 —— `lastPull`(新状态,只此一枚:boot 实拉 / 迟到 boot 到货 /
      *  refresh 拍收尾写)+ 与 `configApplyState()` **同一只** ledger 视图的已应用修订号。形与词表见 `web-admin-client/pull-state.ts`。 */
     centerPullState(): CenterPullView;
-    /** DESIGN-278 §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog` 判
+    /** [ref] §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog` 判
      *  `effectiveLane` 的 center 半场。投影自最近一次成功应用的候选(`latestEffective`,LKG/refresh 同一
      *  份推进点;判据单源 = apply-effective.ts `centerManagedConfigKeys`)。`undefined` = 没有配置管道。
      *  ⚠️ 部分应用窗(codex R2-F2 登记):某组整拒时 live config 已吃进其它组而 latestEffective 不推进,

package/dist/capabilities/tool-defer.d.ts

@@ -12,7 +12,7 @@
  *  - 🔴 **候选 ≠ 延迟**(core 7.15.0 [ref] 的行为面收窄,本仓两条真后果见下):候选集整体受**一道**
  *    阈值门,全或无 —— 候选的内联字节(name+description+schema)≥ `floor(上下文 token × 10%) × 3`
  *    才延迟,否则**全内联且不挂 `ToolSearch`**。远端协议铸名因此**不再无条件占位**:本仓缺省窗
- *    (`ASSUMED_CONTEXT_WINDOW`,今天 262144 token)下阈值 = 78 642 字符,一个中小 MCP 名册够不着 ⇒ 首请求带全 schema。
+ *    (`ASSUMED_CONTEXT_WINDOW`,今天 131072 token)下阈值 = 39 321 字符,一个中小 MCP 名册够不着 ⇒ 首请求带全 schema。
  *    唯一不受门的是调用方的 `TaskSpec.deferTools` 字面名单(按字面恒延迟、不计量)。
  *  - `RunnerDeps.deferMode:"auto"` 不是第二道门,而是把候选集**拓宽**到全部 caller spec 后走同一道门 ——
  *    在本仓缺省场景下那会连 Agent 与 Task 四件一起卷进候选(与 CC 姿态相反),所以我们**刻意不开**;

package/dist/capability-facts.d.ts

@@ -25,7 +25,6 @@ import type { ServiceBlobExchange, ServiceFileHistoryStore } from "./plugins/sto
 import { resolveStreamApprovalGate, type ApprovalFrameFamily } from "./tool-approval.js";
 import { type WorkspaceSyncCapability } from "./workspace-space.js";
 import type { WorkspaceCacheCapability } from "./workspace-cache.js";
-import { type HeadRead } from "./session-incarnation.js";
 import type { HistoryAnchorReaders } from "./history-anchor.js";
 import type { EngineHandoverDoor } from "./boot/engine-lease.js";
 /** why 闭集:词 → 给运维看的一句义(诊断 / 测试读它;wire 上的拒句由各门自写)。 */
@@ -120,29 +119,40 @@ type Store<K extends keyof Deps> = NonNullable<Deps[K]>;
 type WithMethods<T, K extends keyof T> = T & {
     [P in K]-?: NonNullable<T[P]>;
 };
+/**
+ * 见证里的 run 店 / 会话店 / 会话视图读**随调用方交来的 deps**(`D`):路由层交的是封住的视图(`route-ctx.ts` 的 `RouteDeps`:带属主的读口在型上调不了)⇒ 见证照样封着
+ * (方法在不在照判,见证交给属主存取器的口照读);装配层交完整的店 ⇒ 见证完整。事实不另开一扇读口(视图只在 `owner-access.ts` 的 `sealRouteDeps` 铸一次)。
+ */
+type Held<D, K extends keyof D> = NonNullable<D[K]>;
+/** 判过在场的方法(`K`)在见证上必有;封住的读口在场照样封着(`never`)。 */
+type Present<T, K extends PropertyKey> = T & {
+    [P in K]-?: NonNullable<P extends keyof T ? T[P] : never>;
+};
 /** 持久 run 账面在场 —— `/v1/runs/*` 族、trace / 用量统计、assistant 的 preempt / resume / plan-review、
  *  会话 detach、设备换绑都站在这一只事实上。 */
-export declare function durableRuns(d: Pick<Deps, "runStore">): Fact<"run_store_absent", {
-    runStore: Store<"runStore">;
+export declare function durableRuns<D extends Pick<Deps, "runStore">>(d: D): Fact<"run_store_absent", {
+    runStore: Held<D, "runStore">;
 }>;
-export declare function subagentSteer(d: Pick<Deps, "runStore" | "subagentSteerRegistry">): Fact<"run_store_absent" | "subagent_registry_absent", {
-    runStore: Store<"runStore">;
+export declare function subagentSteer<D extends Pick<Deps, "runStore" | "subagentSteerRegistry">>(d: D): Fact<"run_store_absent" | "subagent_registry_absent", {
+    runStore: Held<D, "runStore">;
     registry: Store<"subagentSteerRegistry">;
 }>;
-export declare function subagentOutput(d: Pick<Deps, "runStore" | "subagentTaskOutput">): Fact<"run_store_absent" | "subagent_output_face_absent", {
-    runStore: Store<"runStore">;
+export declare function subagentOutput<D extends Pick<Deps, "runStore" | "subagentTaskOutput">>(d: D): Fact<"run_store_absent" | "subagent_output_face_absent", {
+    runStore: Held<D, "runStore">;
     output: Store<"subagentTaskOutput">;
 }>;
-export declare function taskHandles(d: Pick<Deps, "runStore" | "taskHandleOutput" | "taskHandleStop">): Fact<"run_store_absent" | "task_handle_faces_absent", {
-    runStore: Store<"runStore">;
+export declare function taskHandles<D extends Pick<Deps, "runStore" | "taskHandleOutput" | "taskHandleStop">>(d: D): Fact<"run_store_absent" | "task_handle_faces_absent", {
+    runStore: Held<D, "runStore">;
     output: Store<"taskHandleOutput">;
     stop: Store<"taskHandleStop">;
 }>;
 /** 会话店按 id 读一行的唯一读口在场(core `headOf`:属主 / 住客 / 叶子一次读;「有没有」与 `session-incarnation.ts` 的 `headReadOf` 同判)。 */
-type HeadReadingSessionStore = WithMethods<OwnerAwareSessionStore, "headOf">;
+type SessionDeps = Pick<Deps, "sessionStorage">;
+type SessionWith<D extends SessionDeps, K extends PropertyKey> = Present<Held<D, "sessionStorage">, K>;
+type HeadReadingSessionStore<D extends SessionDeps> = SessionWith<D, "headOf">;
 /** 会话属主面在场(入站 owner 门的地基;缺它,带会话的门一律 fail-closed)。属主 = `headOf(id)?.owner`。 */
-export declare function sessionOwnership(d: Pick<Deps, "sessionStorage">): Fact<"session_head_face_absent", {
-    sessionStorage: HeadReadingSessionStore;
+export declare function sessionOwnership<D extends SessionDeps>(d: D): Fact<"session_head_face_absent", {
+    sessionStorage: HeadReadingSessionStore<D>;
 }>;
 /**
  * 执行放置读面在场:会话店带执行席(`executionPlacement`:一次行读 = 住客 + 执行放置格;SQL 两孪生与 local 恒带,引擎缺省的内存会话店没有)。
@@ -151,66 +161,62 @@ export declare function sessionOwnership(d: Pick<Deps, "sessionStorage">): Fact<
 export declare function executionPlacementRead(d: Pick<Deps, "sessionStorage">): Fact<"execution_placement_seat_absent", {
     seat: NonNullable<OwnerAwareSessionStore["executionPlacement"]>;
 }>;
-export declare function mcpReconnect(d: Pick<Deps, "runStore" | "sessionStorage">): Fact<"run_store_absent" | "session_head_face_absent", {
-    runStore: Store<"runStore">;
-    sessionStorage: HeadReadingSessionStore;
+export declare function mcpReconnect<D extends Pick<Deps, "runStore" | "sessionStorage">>(d: D): Fact<"run_store_absent" | "session_head_face_absent", {
+    runStore: Held<D, "runStore">;
+    sessionStorage: HeadReadingSessionStore<D>;
 }>;
 /**
  * 在飞 run 的切档口(`POST /v1/runs/:id/permission-mode`)= 持久 run 账面 ∧ checkpoint 店(ctx 面)。后一格是承重的:切档要读这条 run 的
  * **存储体**(本任务 settings 的 kill-switch 由受理判官折,与提交口同一份事实),也要把准入的词写回存储体(run 模式词的唯一来源,续跑腿读它);
  * 没有 ctx 面的部署两件都做不了 ⇒ 不提供这一口(能力位 `permissionModeWrite` 同读本事实)。
  */
-export declare function permissionModeWrite(d: Pick<Deps, "runStore" | "checkpointStore">): Fact<"run_store_absent" | "checkpoint_store_absent", {
-    runStore: Store<"runStore">;
+export declare function permissionModeWrite<D extends Pick<Deps, "runStore" | "checkpointStore">>(d: D): Fact<"run_store_absent" | "checkpoint_store_absent", {
+    runStore: Held<D, "runStore">;
     checkpointStore: Store<"checkpointStore">;
 }>;
-export declare function sessionAuditView(d: Pick<Deps, "sessionAudit">): Fact<"session_audit_absent", {
-    sessionAudit: Store<"sessionAudit">;
+export declare function sessionAuditView<D extends Pick<Deps, "sessionAudit">>(d: D): Fact<"session_audit_absent", {
+    sessionAudit: Held<D, "sessionAudit">;
 }>;
 /** 会话 SSE(watch 注册表 ∧ 头读:属主门与叶子都是 `headOf` 的投影)。 */
-export declare function sessionEventStream(d: Pick<Deps, "sessionWatch" | "sessionStorage">): Fact<"session_watch_absent" | "session_head_face_absent", {
+export declare function sessionEventStream<D extends Pick<Deps, "sessionWatch" | "sessionStorage">>(d: D): Fact<"session_watch_absent" | "session_head_face_absent", {
     watch: Store<"sessionWatch">;
-    sessionStorage: HeadReadingSessionStore;
+    sessionStorage: HeadReadingSessionStore<D>;
 }>;
 type SessionLister = NonNullable<OwnerAwareSessionStore["listSessions"]>;
 /** 会话枚举面:会话店的 `listSessions` —— 唯一的会话 lister(run 店不列会话:只有 run 行、没有会话行的面答不了「有哪些会话」)。见证 = 已绑好宿主的那一只。 */
 export declare function sessionList(d: Pick<Deps, "sessionStorage">): Fact<"session_lister_absent", {
     lister: SessionLister;
 }>;
-export declare function sessionFork(d: Pick<Deps, "sessionStorage">): Fact<"session_fork_face_absent" | "session_head_face_absent", {
-    sessionStorage: WithMethods<OwnerAwareSessionStore, "headOf" | "fork">;
+export declare function sessionFork<D extends SessionDeps>(d: D): Fact<"session_fork_face_absent" | "session_head_face_absent", {
+    sessionStorage: SessionWith<D, "headOf" | "fork">;
 }>;
 /** 会话行可写位(`PATCH /v1/sessions/:id`):会话店的头读(属主 + 化身一次读 —— 门判属主,那一读就是写原语的行期望)∧ 行格写原语(锁内判、提交后另读应答行)。
  *  三只 durable 店(SQL 双生 / local)都带;内存 dev 店没有行写口 ⇒ 501。
  *  本面**没有**独立能力位(契约附录 B.2c 登记):老 worker 对这一动词答 405,本事实为假的部署答 501;条件写也没有 —— 列表行上有 `rowTag` 即支持。 */
-export declare function sessionPatch(d: Pick<Deps, "sessionStorage">): Fact<"session_row_faces_absent", {
-    sessionStorage: WithMethods<OwnerAwareSessionStore, "headOf" | "writeSessionRowCells">;
+export declare function sessionPatch<D extends SessionDeps>(d: D): Fact<"session_row_faces_absent", {
+    sessionStorage: SessionWith<D, "headOf" | "writeSessionRowCells">;
 }>;
-/** 删除门读的会话店视图:按 id 读 = 删除门那一只头读,行格的 placement 问询 = 店自己的那一只。门照旧由属主存取器读头(`admitSessionById`),读的就是这一只。 */
-type DeletionGateStore = Pick<OwnerAwareSessionStore, "placementOf"> & {
-    readonly headOf: HeadRead;
-};
 /**
- * 会话删除面(purge 协调器 ∧ 删除门的头读)。见证 = 协调器 + 删除门的店视图 {@link DeletionGateStore}:按 id 读是 `deletionHeadReadOf`(local 店删到一半的行也答得出属主,
- * 开始删它的那位重发收得完;别的店 = `headOf`)—— 与协调器围栏读同一只。
+ * 会话删除面(purge 协调器 ∧ 会话店的头读)。见证 = 协调器 + 判过头读在场的会话店;删除门读哪一只头(删到一半的行也答得出属主的那一只,与协调器围栏读同一只)
+ * 只由属主存取器的删除口判(`owner-access.ts` 的 `admitSessionForDeletion`)。
  */
-export declare function sessionDelete(d: Pick<Deps, "purgeSession" | "sessionStorage">): Fact<"session_purge_absent" | "session_head_face_absent", {
+export declare function sessionDelete<D extends Pick<Deps, "purgeSession" | "sessionStorage">>(d: D): Fact<"session_purge_absent" | "session_head_face_absent", {
     purge: Store<"purgeSession">;
-    gateStore: DeletionGateStore;
+    sessionStorage: HeadReadingSessionStore<D>;
 }>;
-export declare function sessionPolicy(d: Pick<Deps, "sessionPolicyStore" | "sessionStorage">): Fact<"session_policy_store_absent" | "session_head_face_absent", {
+export declare function sessionPolicy<D extends Pick<Deps, "sessionPolicyStore" | "sessionStorage">>(d: D): Fact<"session_policy_store_absent" | "session_head_face_absent", {
     policyStore: Store<"sessionPolicyStore">;
-    sessionStorage: HeadReadingSessionStore;
+    sessionStorage: HeadReadingSessionStore<D>;
 }>;
-type SyncSessionStore = WithMethods<OwnerAwareSessionStore, "exportEntries" | "exportEntriesStream" | "beginImportStaging" | "headOf" | "sessionSummaryOf" | "writeSessionRowCells">;
+type SyncSessionStore<D extends SessionDeps> = SessionWith<D, "exportEntries" | "exportEntriesStream" | "beginImportStaging" | "headOf" | "sessionSummaryOf" | "writeSessionRowCells">;
 type SessionSyncWhy = "store_backend_absent" | "file_history_store_absent" | "session_export_absent" | "session_import_staging_absent" | "session_row_faces_absent" | "policy_purge_absent";
 /** 会话对等同步的**对话半族**(manifest / entries / plan / import 两相):后端 ∧ 文件历史店 ∧ 导出两面 ∧ staged 导入面 ∧
  *  会话行三口(门读头 `headOf` —— 属主 + 化身一次读,属主判门、化身给 identical 短路腿;manifest 带 `title` / `pinned`;导入经行格写原语以 `replay` 写者
  *  按导入落定的那一位住客重放它们)∧ policy 店能清(overwrite-dst 的 commit 要擦目的端旧 policy 行)。
  *  文件历史的 blob 搬运是另一只事实。 */
-export declare function sessionSync(d: Pick<Deps, "backend" | "sessionStorage" | "fileHistoryStore" | "sessionPolicyStore">): Fact<SessionSyncWhy, {
-    backend: Store<"backend">;
-    sessionStorage: SyncSessionStore;
+export declare function sessionSync<D extends Pick<Deps, "backend" | "sessionStorage" | "fileHistoryStore" | "sessionPolicyStore">>(d: D): Fact<SessionSyncWhy, {
+    backend: Held<D, "backend">;
+    sessionStorage: SyncSessionStore<D>;
     historyStore: ServiceFileHistoryStore;
 }>;
 /** 会话同步的**文件历史半族**:对话半族 ∧ 文件历史店带 blob 交换组(只有 SQL 两只店有)。「店能不能交换 blob」只在 `blobExchangeOf` 判一次(core 判官),
@@ -231,10 +237,12 @@ type RewindFilesWhy = "file_history_store_absent" | "session_head_face_absent" |
  * 动词本身是引擎 `Runner` 的必有成员(型上必在),不是一格。
  * 见证 = 判过在场的设施(历史店 · 手柄翻译的两只读店 · 会话店);路由在拒臂之后只读见证。
  */
-export declare function sessionRewindFiles(d: Pick<Deps, "fileHistoryStore" | "resumeAnchorStore" | "runStore" | "sessionStorage" | "config" | "backend">): Fact<RewindFilesWhy, {
+export declare function sessionRewindFiles<D extends Pick<Deps, "fileHistoryStore" | "resumeAnchorStore" | "runStore" | "sessionStorage" | "config" | "backend">>(d: D): Fact<RewindFilesWhy, {
     historyStore: ServiceFileHistoryStore;
-    anchors: HistoryAnchorReaders;
-    sessionStorage: HeadReadingSessionStore;
+    anchors: HistoryAnchorReaders & {
+        readonly runs: Held<D, "runStore">;
+    };
+    sessionStorage: HeadReadingSessionStore<D>;
 }>;
 /**
  * 同一口的 `dryRun` **带不带改动统计** —— 能力位 `sessionRewindFilesPreview`。= 立即回退可用 ∧ 店实现了 core 契约的可选座 `diffStats`
@@ -291,11 +299,11 @@ export declare function deviceLane(d: Pick<Deps, "deviceHub">): Fact<"device_hub
     hub: Store<"deviceHub">;
 }>;
 /** 设备管理三动词(列 / 读 / 换绑):hub ∧ 设备店 ∧ 入网 ∧ 持久 run 账面(换绑的「无在飞 run」门要它)。 */
-export declare function deviceManagement(d: Pick<Deps, "deviceHub" | "deviceStore" | "deviceEnrollment" | "runStore">): Fact<"device_hub_absent" | "device_store_absent" | "device_enrollment_absent" | "run_store_absent", {
+export declare function deviceManagement<D extends Pick<Deps, "deviceHub" | "deviceStore" | "deviceEnrollment" | "runStore">>(d: D): Fact<"device_hub_absent" | "device_store_absent" | "device_enrollment_absent" | "run_store_absent", {
     hub: Store<"deviceHub">;
     store: Store<"deviceStore">;
     enrollment: Store<"deviceEnrollment">;
-    runStore: Store<"runStore">;
+    runStore: Held<D, "runStore">;
 }>;
 export declare function fleetStream(d: Pick<Deps, "fleetBus">): Fact<"fleet_bus_absent", {
     fleetBus: Store<"fleetBus">;
@@ -344,10 +352,10 @@ export declare function memorySyncServe(d: Pick<Deps, "memorySync" | "config">):
  * 会话记忆同步触发口(`POST /v1/sessions/:id/memory/sync`):本机同步腿在场 ∧ 持久 run 账面(读集 = 会话最近一条已结腿的记忆观测;收割栅栏读会话的 run 认领)
  * ∧ 会话头读(属主门与 `sourceRevision` = 同一次头读的叶子)。
  */
-export declare function sessionMemorySync(d: Pick<Deps, "memorySyncLeg" | "runStore" | "sessionStorage">): Fact<"memory_sync_leg_absent" | "run_store_absent" | "session_head_face_absent", {
+export declare function sessionMemorySync<D extends Pick<Deps, "memorySyncLeg" | "runStore" | "sessionStorage">>(d: D): Fact<"memory_sync_leg_absent" | "run_store_absent" | "session_head_face_absent", {
     leg: Store<"memorySyncLeg">;
-    runStore: Store<"runStore">;
-    sessionStorage: HeadReadingSessionStore;
+    runStore: Held<D, "runStore">;
+    sessionStorage: HeadReadingSessionStore<D>;
 }>;
 /** 跨主体投递门在座(`POST /v1/principal-inbox/messages` 的可用性门与能力位 `principalInboxDelivery` 同读这一只)。门的装配本身是
  *  一道合取(收件箱消费方声明 ∧ 耐久 mailbox ∧ org 成员目录 ∧ 配额店,缺一拒启 —— `boot/stage-06-runners.ts`),
@@ -368,20 +376,21 @@ export declare function engineHandover(d: Pick<Deps, "drainState">): Fact<"engin
 export declare function operatorLane(d: {
     readonly config: Pick<ServiceConfig, "operatorPrincipals" | "operatorSingleUser">;
 }): Fact<"operator_principals_empty">;
-type AdoptionCapableBackend = Store<"backend"> & {
+/** 带收编日志的后端(见证随调用方的 deps:路由层的后端视图上店工厂照样封着)。 */
+type AdoptionCapableBackend<D extends Pick<Deps, "backend">> = Held<D, "backend"> & {
     adoptionLog(): ReturnType<NonNullable<Store<"backend">["adoptionLog"]>>;
 };
-export declare function adoption(d: Pick<Deps, "config" | "backend">): Fact<"operator_principals_empty" | "adoption_store_absent", {
-    backend: AdoptionCapableBackend;
+export declare function adoption<D extends Pick<Deps, "config" | "backend">>(d: D): Fact<"operator_principals_empty" | "adoption_store_absent", {
+    backend: AdoptionCapableBackend<D>;
 }>;
-type AdoptionImportSessionStore = WithMethods<OwnerAwareSessionStore, "beginImportStaging">;
+type AdoptionImportSessionStore<D extends SessionDeps> = SessionWith<D, "beginImportStaging">;
 /**
  * 收编批量导入(`POST /v1/adoption/:id/sessions`)与能力位 `adoptionImport` 的部署半:收编日志 ∧ 会话店的暂存导入面(派生 id 那一格占没占由提交的属主判答,不另要头读面)。
  * **不判运维名册**:这扇门不是 operator 面 —— 调用者是那条收编行的源主体本人(名单空了,已收编的行照样在)。
  */
-export declare function adoptionSessionImport(d: Pick<Deps, "backend" | "sessionStorage">): Fact<"adoption_store_absent" | "session_import_staging_absent", {
-    backend: AdoptionCapableBackend;
-    sessionStorage: AdoptionImportSessionStore;
+export declare function adoptionSessionImport<D extends Pick<Deps, "backend" | "sessionStorage">>(d: D): Fact<"adoption_store_absent" | "session_import_staging_absent", {
+    backend: AdoptionCapableBackend<D>;
+    sessionStorage: AdoptionImportSessionStore<D>;
 }>;
 export declare function memoryBundle(d: Pick<Deps, "config" | "memoryBundleExport" | "memoryBundleImport">): Fact<"operator_principals_empty" | "memory_bundle_faces_absent", {
     exportScopes: Store<"memoryBundleExport">;
@@ -417,9 +426,9 @@ export declare function ruleLaneForCaller(d: Pick<Deps, "ruleConsent">, principa
 export declare function mcpInjection(d: Pick<Deps, "config">): Fact<"caller_mcp_injection_refused">;
 /** server-as-peer:旋钮开 ∧ 持久 run 账面在场。两只 JSON-RPC 方法(`message/send` / `tasks/get`)都要 run 店 ——
  *  没有它,这个 peer 什么都做不了,对外就不该存在(卡与 RPC 一起 404)。 */
-export declare function a2aServe(d: Pick<Deps, "config" | "runStore">): Fact<"a2a_serve_off" | "run_store_absent", {
+export declare function a2aServe<D extends Pick<Deps, "config" | "runStore">>(d: D): Fact<"a2a_serve_off" | "run_store_absent", {
     serve: NonNullable<ServiceConfig["a2aServe"]>;
-    runStore: Store<"runStore">;
+    runStore: Held<D, "runStore">;
 }>;
 /** 引擎能不能自编排(core 单源 `workflowsCapability`,boot 算好经 `workflowsCapable` 递来;缺席回落行店代理)。 */
 export declare function selfOrchestrationEngine(d: Pick<Deps, "workflowsCapable" | "workflowRunStore">): Fact<"workflow_engine_absent">;
@@ -473,10 +482,11 @@ export declare function deploymentModPackages(d: Pick<Deps, "deploymentModPackag
 export declare function hostScheduler(c: Pick<ServiceConfig, "schedulerEnabled" | "requirePrincipal" | "remoteExec">): Fact<"scheduler_disabled" | "multi_tenant_deployment" | "not_host_lane">;
 /**
  * 前台命令超时转后台(`AUTO_BACKGROUND_ON_TIMEOUT`)在这台部署上生不生效:旋钮开 ∧ 本车道的执行环境能把**运行中的**命令领养成后台任务。
- * 「能领养」就是执行环境的 `backgroundCapabilities.supportsDetach`,三只声明它的适配器(host / k8s / e2b)上它与后台 shell 的 `supported` 是同一个值 ——
- * 所以按能力表的 `backgroundShell` 一位读:`supported`(k8s / e2b)⇒ 能;`single-user-only`(只有 host 一行)⇒ 单用户且 host 后台 shell 开关开着才能 ——
- * 开关是第二参 `hostBackgroundShellOn`,调用方交 `hostBackgroundShellEnabled()`(`HOST_BG_ENABLED`;host 适配器的能力位读同一只;本模块零 I/O,不自己读 env)。
- * 对账钉 `test/auto-background-on-timeout.test.ts` 逐车道拿装配出的真执行环境的 `supportsDetach` 与本事实对拍。
+ * 「能领养」就是执行环境的 `backgroundCapabilities.supportsDetach`,三只声明它的适配器(host / k8s / e2b)上它与后台 shell 的 `supported` 是同一个值,
+ * 这个值的**唯一**答者是部署形行 `DEPLOYMENT_SHAPE_PREDICATES.backgroundShell`(读能力表那一位:k8s / e2b 任何租户,host 只单主)—— 适配器与本事实读同一行,
+ * 本事实不再自己读能力表的三档。host 另有一个全局关停开关(`HOST_BG_ENABLED`),是旋钮不是部署形,所以只在 host 车道上、在行之上合取:
+ * 开关是第二参 `hostBackgroundShellOn`,调用方交 `hostBackgroundShellEnabled()`(host 适配器的能力位读同一只;本模块零 I/O,不自己读 env)。
+ * 同读钉 `test/auto-background-on-timeout.test.ts` ③ 逐车道 × 单主 / 多租拿装配出的真执行环境的 `supported` / `supportsDetach` 与本事实、行对读。
  * 旋钮先判:关着的部署不论车道都答 `auto_background_off`(运维旋钮无条件,不支持的车道不拒启,只如实报)。
  * `/health.autoBackgroundOnTimeout` 投它的三词({@link autoBackgroundOnTimeoutWord})。
  */