@sema-agent/server 7.149.0 → 7.150.0

package/dist/boot/parked-revive-gate.js

@@ -13,7 +13,7 @@ function hostGateCwd(config, localRoot) {
     return join(config.localDataRoot ?? localRoot, "parked-revive-unrooted");
 }
 export function createParkedReviveInheritedGate(deps) {
-    const { config, question, approvalExemptionStore, logger, localRoot, approverSeat } = deps;
+    const { config, approvalExemptionStore, logger, localRoot, approverSeat } = deps;
     const slots = deps.slots ?? sandboxPathEnvSlots;
     return async (row, identity) => {
         const metadata = await chainMetadataOf(deps, row, identity);
@@ -32,7 +32,6 @@ export function createParkedReviveInheritedGate(deps) {
         const rootSessionId = row.rootSessionId;
         const baseline = createApprovalBaselinePolicy(config, {
             kind: "durable",
-            question,
             ...(approvalExemptionStore !== undefined && rootSessionId ? { exemption: createSessionExemptionRead(approvalExemptionStore, rootSessionId, logger, "deployment_list", "parked_revive") } : {}),
         });
         const governed = applyRuntimeGovernance({ objective: "", toolPolicy: baseline }, createDeploymentGovernanceInputs(config, pathAdjudication));
@@ -53,7 +52,7 @@ async function chainMetadataOf(deps, row, identity) {
     const forced = caps?.forceDurableGate === true;
     return {
         ...(forced || deps.approverSeat === undefined ? { durableMandate: true } : {}),
-        ...(forced || deps.question === undefined ? { contentMandate: true } : {}),
+        ...(forced || !deps.questionSeat ? { contentMandate: true } : {}),
         ...autoModePostureOf(deps, row, caps),
     };
 }

package/dist/boot/resolve-spec.d.ts

@@ -3,7 +3,6 @@ import { sendUserFileTool } from "../capabilities/send-user-file-tool.js";
 import { selectScenario } from "../capabilities/scenarios.js";
 import type { LoadedSkill } from "../capabilities/skills.js";
 import type { ServiceConfig } from "../config.js";
-import { type LiveQuestionFace } from "../deployment-governance.js";
 import { FleetEventBus } from "../fleet/fleet-bus.js";
 import { type HookLlmCall } from "../hooks/hook-runner.js";
 import type { createHookLlm } from "../hooks/hook-llm.js";
@@ -64,10 +63,10 @@ export interface ResolveSpecCtx {
     /** [ref]:记忆同步腿(开 `MEMORY_SYNC_*` 且记忆引擎接线时在场)—— 项目层准备一步把本任务的项目层交给它跟踪(`memory-project-layer.ts`)。 */
     memorySyncRunner: MemorySyncRunner | undefined;
     durableEnabled: boolean;
-    /** [ref] ([ref] 案二):活体 AskUserQuestion 面(QuestionCoordinator 的判决探针切面)。在场(=
-     *  ASK_QUESTION_ENABLED)时 durable question 门按活流上下文分腿、spec 不再 stamp QUESTION_AWAITS_RESUME
-     *  (否则 spec.onQuestion 恒遮蔽 RunnerDeps.onQuestion 的活人腿);缺席时行为与旧形逐字一致。 */
-    liveQuestionFace: LiveQuestionFace | undefined;
+    /** 问题席在场(= `ASK_QUESTION_ENABLED` 装了 `QuestionCoordinator`,`RunnerDeps.onQuestion` 是它):本仓「问题席在不在」这一事实的**一位**,
+     *  三个读者同读 —— 本文件的 posture 判据与 sentinel 铸不铸、赎回链的 `contentMandate`(`parked-revive-gate.ts`)。在场 ⇒ spec 不铸
+     *  `QUESTION_AWAITS_RESUME`(否则 `spec.onQuestion` 恒遮蔽 `RunnerDeps.onQuestion` 的问题席);落点归 core 的同步优先。 */
+    questionSeat: boolean;
     /**
      * [ref] 件C —— 部署级**活体审批席**(`RunnerDeps.onAsk` 的同源铸法,main.ts 递
      * `createRunnerDepsOnAsk(toolApproval)`;单一属主同 `boot/runner-deps.ts`,与 `parked-revive-gate.ts`

package/dist/boot/resolve-spec.js

@@ -15,6 +15,9 @@ import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScr
 import { FleetEventBus } from "../fleet/fleet-bus.js";
 import { createSettingsHooksRegistrations, settingsHooksBudgetMs } from "../hooks/hook-runner.js";
 import { headerStr } from "../http/principal-gate.js";
+import { routeListFilter } from "../http/owner-access.js";
+import { projectRegistry } from "../capability-facts.js";
+import { projectContextOf } from "../project-context.js";
 import { explicitOperatorOk } from "../http/server.js";
 import { isAtMentionable, matchCatalogModel, pickUserModel, refusedCatalogEntry, terminalCatalogName } from "../model-select.js";
 import { echoModelRef, modelNotAllowedMessage, modelUnavailableMessage, refusedNameLogField } from "../model-entry-refusal.js";
@@ -48,7 +51,7 @@ import { storedToolAxesRereadM19 } from "../stored-request-tool-axes-m19.js";
 import { storedHooksRereadM20 } from "../stored-request-hooks-m20.js";
 import { storedEnvCredentialsDropM38 } from "../stored-request-env-credentials-m38.js";
 import { serverCredentialValueSources } from "../server-secret-env.js";
-import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, REQUEST_SETTINGS_REFUSAL_PREFIX, SETTINGS_RULE_REFUSAL_CODE, SettingsRuleRefusalError, acceptAppendSystemPrompt, applyTaskSettings, createWorkflowAskPolicy, effectivePermissionMode, effectiveThinking, parseTaskSettings, readSettingsEnv, taskHooksHonored, settingsEnvCredentialIssue, settingsPermissionBucketIssue, withoutKeys } from "../task-settings.js";
+import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, REQUEST_SETTINGS_REFUSAL_PREFIX, SETTINGS_RULE_REFUSAL_CODE, SettingsRuleRefusalError, acceptAppendSystemPrompt, acceptOutputStyle, appendFold, applyTaskSettings, createWorkflowAskPolicy, effectivePermissionMode, effectiveThinking, parseTaskSettings, readSettingsEnv, taskHooksHonored, settingsEnvCredentialIssue, settingsPermissionBucketIssue, withoutKeys } from "../task-settings.js";
 import { tightenOnlySeatIssue } from "../tighten-only-seats.js";
 import { buildNeverAutoRetiredNotice } from "../retired-name-host-notice.js";
 import { entryProblemsFacts } from "../entry-problems.js";
@@ -71,7 +74,7 @@ function unrooted(spec) {
     return resolved;
 }
 export function createResolveSpec(ctx) {
-    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, belowTaskChainPatterns, fleetBus, hookWakeBus, historyAnchors, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, memorySyncRunner, durableEnabled, approvalExemptionStore, checkpointStore, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, loadedSkills, peerDesk, } = ctx;
+    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, belowTaskChainPatterns, fleetBus, hookWakeBus, historyAnchors, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, memorySyncRunner, durableEnabled, approvalExemptionStore, checkpointStore, imageIndex, perTaskImage, sessionEnvSelection, questionSeat, approverSeat, lockedKeys, loadedSkills, peerDesk, } = ctx;
     const deploymentSkillSources = new Map(loadedSkills.map((k) => [k.spec.name, k.source]));
     const scenarioGate = createScenarioGate({ config, scenarios, principalCaps, logger }, "enforce");
     const sessionHeadOf = headReadOf(ownerAware);
@@ -109,9 +112,40 @@ export function createResolveSpec(ctx) {
         }
         if (opts?.leg === "fresh")
             assertRequestMcpEntries(body.mcpServers);
+        const submittedProjectId = auth?.resolvedProjectId ?? (typeof body.projectId === "string" && body.projectId ? body.projectId.toLowerCase() : undefined);
+        const legProjectId = await legProjectIdOf(submittedProjectId, sessionWorkspace, root);
+        let projectContext;
+        if (opts?.leg === "fresh") {
+            const registry = projectRegistry({ config });
+            const decision = projectContextOf({
+                projectId: legProjectId,
+                registry: registry.available ? registry.registry : undefined,
+                viewer: req === undefined ? undefined : routeListFilter(req, { config }, "project-get"),
+                pathsHonored: DEPLOYMENT_SHAPE_PREDICATES.callerOwnsWorkerDisk.holds(config),
+                requestCwd: typeof body.cwd === "string" && body.cwd.length > 0,
+                projectMemoryOff: body.projectMemory === "disabled",
+            });
+            projectContext = decision.context;
+            if (decision.withheldPathItems > 0)
+                logger.warn("task_project_paths_ignored", { lane: config.remoteExec.provider, pathItems: decision.withheldPathItems, sessionId: root });
+            if (projectContext?.brief !== undefined) {
+                const append = acceptAppendSystemPrompt(body.appendSystemPrompt);
+                const style = acceptOutputStyle(body.settings?.outputStyle);
+                const fold = appendFold([append, projectContext.brief, style]);
+                if (fold.chars > MAX_SETTINGS_OUTPUT_STYLE_CHARS) {
+                    const members = append !== undefined ? ["appendSystemPrompt", "projectId"] : ["projectId"];
+                    if (style !== undefined)
+                        members.push("settings.outputStyle");
+                    throw new HttpError(400, `the project brief this run inherits from project ${projectContext.projectId} (its goal, notes and context items) folds into one system-prompt block with appendSystemPrompt and settings.outputStyle — combined they must be at most ${MAX_SETTINGS_OUTPUT_STYLE_CHARS} characters (including the 2-char joiners), and they are ${fold.chars}. Shorten what you send, send projectMemory: "disabled" to run without the project's context, or have the project's goal / notes shortened in the registry.`, { code: "request.field_conflict", extra: { ...fieldConflictFacts("system_prompt_fold", members, { count: fold.chars, cap: MAX_SETTINGS_OUTPUT_STYLE_CHARS }) } });
+                }
+            }
+        }
+        else
+            projectContext = opts?.projectContext;
+        const legCwd = projectContext?.cwd ?? body.cwd;
         if (opts?.leg === "fresh") {
             const conflict = scratchpadCoveringTaskRoot({
-                cwd: body.cwd,
+                cwd: legCwd,
                 shellScratchpadDir: body.scratchpadDir,
                 localDataRoot: config.localDataRoot ?? localRoot,
                 sessionId: root,
@@ -119,7 +153,11 @@ export function createResolveSpec(ctx) {
                 callerOwnsWorkerDisk: DEPLOYMENT_SHAPE_PREDICATES.callerOwnsWorkerDisk.holds(config),
             });
             if (conflict) {
-                throw new HttpError(400, `cwd "${conflict.cwd.asSpelled}" is inside this session's scratchpad "${conflict.scratchpadDir.asSpelled}" — the scratchpad is the fs-write gate's EXEMPT directory, so a task rooted there would auto-approve every write under its own root and the engine refuses to build the gate at all (config.write_exempt_dir_covers_root). Point cwd at the project directory instead (or send no cwd and let the session keep the one it has): this session registers the cwd you send, so a task that happens not to mount the write gate would still leave every LATER task on this session rooted in the exemption. A workflow that really is meant to write without prompts says so with a knob that means it (a permission mode, an open write face) and still keeps its root outside the scratchpad — those knobs do not lift this refusal, because the conflict is between two fields of this request, not a permission level.`, { code: "request.field_conflict", extra: { ...fieldConflictFacts("scratchpad_root", body.scratchpadDir === conflict.scratchpadDir.asSpelled ? ["cwd", "scratchpadDir"] : ["cwd"]), cwd: conflict.cwd, scratchpadDir: conflict.scratchpadDir } });
+                const cwdCoordinate = projectContext?.cwd !== undefined ? "projectId" : "cwd";
+                const fields = body.scratchpadDir === conflict.scratchpadDir.asSpelled ? [cwdCoordinate, "scratchpadDir"] : [cwdCoordinate];
+                throw new HttpError(400, cwdCoordinate === "projectId"
+                    ? `the working directory "${conflict.cwd.asSpelled}" this run inherits from project ${projectContext?.projectId} (its first folder) is inside this session's scratchpad "${conflict.scratchpadDir.asSpelled}" — the scratchpad is the fs-write gate's EXEMPT directory, so a task rooted there would auto-approve every write under its own root and the engine refuses to build the gate at all (config.write_exempt_dir_covers_root). Send a cwd outside the scratchpad with this request, or have the project's first folder moved out of it in the registry.`
+                    : `cwd "${conflict.cwd.asSpelled}" is inside this session's scratchpad "${conflict.scratchpadDir.asSpelled}" — the scratchpad is the fs-write gate's EXEMPT directory, so a task rooted there would auto-approve every write under its own root and the engine refuses to build the gate at all (config.write_exempt_dir_covers_root). Point cwd at the project directory instead (or send no cwd and let the session keep the one it has): this session registers the cwd you send, so a task that happens not to mount the write gate would still leave every LATER task on this session rooted in the exemption. A workflow that really is meant to write without prompts says so with a knob that means it (a permission mode, an open write face) and still keeps its root outside the scratchpad — those knobs do not lift this refusal, because the conflict is between two fields of this request, not a permission level.`, { code: "request.field_conflict", extra: { ...fieldConflictFacts("scratchpad_root", fields), cwd: conflict.cwd, scratchpadDir: conflict.scratchpadDir } });
             }
         }
         const offFieldIssue = singleMemberOffFieldIssue(body);
@@ -191,12 +229,12 @@ export function createResolveSpec(ctx) {
         const gated = await gateScenarioAndAppend(body, auth, root, opts, settingsEnv);
         const effMode = effectivePermissionMode(body, gated.parsedSettings.settings);
         assertWriteFaceAdmitted(effMode, config);
-        const lane = bindSettingsCwdEnvAndModel(body, auth, root, gated, opts);
-        const anchors = await resolveHistoryAnchors(body, req, auth, root);
+        const lane = bindSettingsCwdEnvAndModel(body, auth, root, gated, opts, legCwd);
+        const anchors = await resolveHistoryAnchors(body, req, auth, root, submittedProjectId, legProjectId);
         const projectKey = memoryEngine ? await memoryProjectLayers.prepare(config, auth?.memoryScope, realTaskRootOf(root)) : undefined;
         const runSkills = buildRunSkills({ scenario: gated.cap.skills, request: body.skills, disable: body.disableSkills === true, deploymentSources: deploymentSkillSources }, logger);
-        const spec = assembleSpecLiteral(body, auth, root, req, opts, { ...gated, ...lane, ...anchors, projectKey, a2aPeers, storedToolAxes, runSkills }, effMode);
-        const folded = await foldGovernanceAndSettings(body, auth, root, spec, gated);
+        const spec = assembleSpecLiteral(body, auth, root, req, opts, { ...gated, ...lane, ...anchors, projectKey, a2aPeers, storedToolAxes, runSkills, projectBrief: projectContext?.brief }, effMode);
+        const folded = await foldGovernanceAndSettings(body, auth, root, spec, gated, projectContext?.brief);
         const retiredNotice = opts.onNotice !== undefined ? buildNeverAutoRetiredNotice(gated.parsedSettings.settings?.tightenOnly?.neverAuto, root) : undefined;
         if (retiredNotice !== undefined)
             opts.onNotice?.(retiredNotice);
@@ -206,7 +244,7 @@ export function createResolveSpec(ctx) {
             hostSemanticsLane: folded.hostSemanticsLane,
         });
         const registeredCwd = perSessionCwd.get(root);
-        return { spec: final, facts: { hands: gated.hands, skills: runSkills.roster, sessionWitness: gated.sessionWitness, ...(registeredCwd !== undefined ? { registeredCwd } : {}) } };
+        return { spec: final, facts: { hands: gated.hands, skills: runSkills.roster, sessionWitness: gated.sessionWitness, ...(registeredCwd !== undefined ? { registeredCwd } : {}), ...(projectContext !== undefined ? { projectContext } : {}) } };
     };
     const gateScenarioAndAppend = async (body, auth, root, opts, settingsEnv) => {
         const { parts: subjectParts, person } = identityAxesOf(auth);
@@ -264,15 +302,15 @@ export function createResolveSpec(ctx) {
         }
         return { scenarioName, cap, hands: cap.hands, acceptedAppend, objective, parsedSettings, attachmentNotice, sessionWitness };
     };
-    const bindSettingsCwdEnvAndModel = (body, auth, root, gated, opts) => {
+    const bindSettingsCwdEnvAndModel = (body, auth, root, gated, opts, cwd) => {
         const { objective, parsedSettings } = gated;
         const cwdWriteGate = DEPLOYMENT_SHAPE_PREDICATES.callerCwd.holds(config);
         const execLane = config.remoteExec.provider;
         fenceSessionOwner(root, auth?.subject ?? null, opts.execution.occupant?.incarnation);
-        if (typeof body.cwd === "string" && body.cwd.length > 0) {
-            if (cwdWriteGate && isAbsoluteHostPath(body.cwd))
-                setSessionCwd(root, body.cwd);
-            else if (DEPLOYMENT_SHAPE_PREDICATES.noHandsSingleUser.holds(config) && isAbsoluteHostPath(body.cwd) && satisfiedByProcessCwd(body.cwd, realpathSync))
+        if (typeof cwd === "string" && cwd.length > 0) {
+            if (cwdWriteGate && isAbsoluteHostPath(cwd))
+                setSessionCwd(root, cwd);
+            else if (DEPLOYMENT_SHAPE_PREDICATES.noHandsSingleUser.holds(config) && isAbsoluteHostPath(cwd) && satisfiedByProcessCwd(cwd, realpathSync))
                 logger.debug("task_cwd_inherited", { lane: execLane, sessionId: root });
             else
                 logger.warn("task_cwd_ignored", { honored: cwdWriteGate, lane: execLane, sessionId: root });
@@ -354,7 +392,7 @@ export function createResolveSpec(ctx) {
         }
         return { taskHooks, additionalDirectories, additionalReadDirectories, wireCatalog, picked };
     };
-    const resolveHistoryAnchors = async (body, req, auth, root) => {
+    const resolveHistoryAnchors = async (body, req, auth, root, submittedProjectId, legProjectId) => {
         const anchorReader = req === undefined ? undefined : anchorReaderOf(req, { config, logger }, claimCallerOf(identityAxesOf(auth).subject, config));
         let resumeAtEntryId;
         if (typeof body.resumeAt === "string" && body.resumeAt.length > 0) {
@@ -368,9 +406,7 @@ export function createResolveSpec(ctx) {
                 throw new HttpError(501, "rewind-files-to is not available on this worker (no session-store backend for the anchor map)");
             rewindFilesToEntryId = await resolveHistoryAnchor("rewindFilesTo", anchorsResolvable, anchorReader, root, body.rewindFilesTo, auth?.subject ?? null, "rewindFilesTo");
         }
-        const submittedProjectId = auth?.resolvedProjectId ?? (typeof body.projectId === "string" && body.projectId ? body.projectId.toLowerCase() : undefined);
         const s4DefaultScopes = submittedProjectId ? config.projects[submittedProjectId]?.defaultScopes : undefined;
-        const legProjectId = await legProjectIdOf(submittedProjectId, sessionWorkspace, root);
         return { resumeAtEntryId, rewindFilesToEntryId, s4DefaultScopes, legProjectId };
     };
     const declaresInteractivePosture = (body, req, opts) => {
@@ -378,7 +414,7 @@ export function createResolveSpec(ctx) {
             return false;
         if (body.verify === true || body.cascade === true)
             return false;
-        if (liveQuestionFace === undefined)
+        if (!questionSeat)
             return false;
         if (body.interactiveTools === false)
             return false;
@@ -389,11 +425,11 @@ export function createResolveSpec(ctx) {
     };
     const assembleSpecLiteral = (body, auth, root, req, opts, parts, effMode) => {
         const { parts: subjectParts, person } = identityAxesOf(auth);
-        const { scenarioName, cap, hands, acceptedAppend, parsedSettings, attachmentNotice, taskHooks, additionalDirectories, additionalReadDirectories, wireCatalog, picked, resumeAtEntryId, rewindFilesToEntryId, s4DefaultScopes, legProjectId, projectKey, a2aPeers, storedToolAxes, runSkills, } = parts;
+        const { scenarioName, cap, hands, acceptedAppend, parsedSettings, attachmentNotice, taskHooks, additionalDirectories, additionalReadDirectories, wireCatalog, picked, resumeAtEntryId, rewindFilesToEntryId, s4DefaultScopes, legProjectId, projectKey, a2aPeers, storedToolAxes, runSkills, projectBrief, } = parts;
         const spec = {
             objective: attachmentNotice ? `${picked.cleanedObjective}\n\n${attachmentNotice}` : picked.cleanedObjective,
             ...buildPromptSeats(scenarioName, cap.prompt, typeof body.systemPrompt === "string" ? body.systemPrompt : undefined),
-            appendSystemPrompt: acceptedAppend,
+            appendSystemPrompt: appendFold([acceptedAppend, projectBrief]).text,
             ...(body.outputStyle !== undefined ? { outputStyle: body.outputStyle } : {}),
             ...(body.projectMemory !== undefined ? { projectMemory: body.projectMemory } : {}),
             ...(legProjectId !== undefined ? { projectId: legProjectId } : {}),
@@ -522,7 +558,6 @@ export function createResolveSpec(ctx) {
             toolPolicy: toolPolicyForHands(hands, durableEnabled
                 ? createApprovalBaselinePolicy(config, {
                     kind: "durable",
-                    question: liveQuestionFace,
                     ...(approvalExemptionStore !== undefined ? { exemption: createSessionExemptionRead(approvalExemptionStore, root, logger, "deployment_list") } : {}),
                 })
                 : singleUserAutoAcceptBaselineApplies(config)
@@ -543,13 +578,13 @@ export function createResolveSpec(ctx) {
                         totalBudgetUsd: config.resourceSuspendTotalBudgetUsd,
                         maxSlices: config.resourceSuspendMaxSlices,
                     })),
-                    ...(liveQuestionFace === undefined ? { onQuestion: QUESTION_AWAITS_RESUME } : {}),
+                    ...(questionSeat ? {} : { onQuestion: QUESTION_AWAITS_RESUME }),
                 }
                 : {}),
         };
         return spec;
     };
-    const foldGovernanceAndSettings = async (body, auth, root, spec, gated) => {
+    const foldGovernanceAndSettings = async (body, auth, root, spec, gated, projectBrief) => {
         const { acceptedAppend, parsedSettings } = gated;
         const hostSemanticsLane = !DEPLOYMENT_SHAPE_PREDICATES.sandboxPathAdjudication.holds(config);
         const laneHomeBase = () => {
@@ -578,8 +613,9 @@ export function createResolveSpec(ctx) {
         const governedBase = applyRuntimeGovernance(spec, createDeploymentGovernanceInputs(config, pathAdjudication));
         let governed = governedBase;
         let effectiveSettings = parsedSettings.settings;
-        if (effectiveSettings?.outputStyle && acceptedAppend && acceptedAppend.length + 2 + effectiveSettings.outputStyle.length > MAX_SETTINGS_OUTPUT_STYLE_CHARS) {
-            logger.warn("output_style_dropped", { detail: `combined append carriers exceed the ${MAX_SETTINGS_OUTPUT_STYLE_CHARS} cap (rider ${acceptedAppend.length} + style ${effectiveSettings.outputStyle.length}) — style dropped (pre-cap stored body on a resume leg?)`, sessionId: root });
+        const foldedChars = effectiveSettings?.outputStyle ? appendFold([acceptedAppend, projectBrief, effectiveSettings.outputStyle]).chars : 0;
+        if (effectiveSettings?.outputStyle && foldedChars > MAX_SETTINGS_OUTPUT_STYLE_CHARS) {
+            logger.warn("output_style_dropped", { detail: `combined append carriers exceed the ${MAX_SETTINGS_OUTPUT_STYLE_CHARS} cap (rider ${acceptedAppend?.length ?? 0} + project brief ${projectBrief?.length ?? 0} + style ${effectiveSettings.outputStyle.length}, ${foldedChars} with joiners) — style dropped (pre-cap stored body on a resume leg?)`, sessionId: root });
             const { outputStyle: _dropped2, ...rest2 } = effectiveSettings;
             effectiveSettings = Object.keys(rest2).length > 0 ? rest2 : undefined;
         }

package/dist/boot/retention-lane.d.ts

@@ -1,5 +1,5 @@
 /**
- * [ref] 车2 —— 托管留存的 **sweep lane**(设计稿 `docs/DESIGN-270-retention-lane.md` v1.3 §3/§4/§7)。
+ * [ref] 车2 —— 托管留存的 **sweep lane**(设计稿 `docs/[ref]-retention-lane.md` v1.3 §3/§4/§7)。
  *
  * ── 为什么是独立文件、独立定时器,而不是折进 `startReapers()`(设计稿 §3 首条)───────────────────
  * `boot/reapers.ts` 里那二十条腿全都是**容忍多副本**的幂等清理:每台副本各扫各的,重复扫一遍只是浪费。

package/dist/boot/session-faces.js

@@ -1,5 +1,5 @@
 import { buildRewindHandles, buildSessionAudit, buildSessionAuditLocal, buildSessionAuditPg } from "../audit.js";
-import { readSessionAgent } from "../session-agent.js";
+import { readSessionAgent } from "../http/owner-access.js";
 import { readSessionProjectId, sessionWorkspaceStoreOf } from "../session-workspace.js";
 import { makeDegenerateInstrument } from "../degenerate-instrument.js";
 import { PlanCacheProbe } from "../plan-cache-probe.js";
@@ -24,27 +24,27 @@ export function createSessionFaces(ctx) {
     const ownerAware = sessionStore;
     const headOf = headReadOf(sessionStore);
     const workspaceStore = sessionWorkspaceStoreOf(sessionStore);
-    const sessionAudit = mysqlPool || auditPgPool || auditLocalRows
-        ? async (sessionId, opts) => {
-            const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
-            const audit = mysqlPool
-                ? await buildSessionAudit(mysqlPool, sessionId, handles)
-                : auditPgPool
-                    ? await buildSessionAuditPg(auditPgPool, sessionId, handles)
-                    : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
-            if (!audit)
-                return undefined;
-            const [head, agent, projectId] = await Promise.all([
-                headOf?.(sessionId),
-                opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined,
-                opts !== undefined ? readSessionProjectId(workspaceStore, sessionId) : undefined,
-            ]);
-            const owner = head?.owner;
-            return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}), ...(projectId !== undefined ? { projectId } : {}) };
-        }
-        : undefined;
+    const readSessionView = async (sessionId, opts) => {
+        const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
+        const audit = mysqlPool
+            ? await buildSessionAudit(mysqlPool, sessionId, handles)
+            : auditPgPool
+                ? await buildSessionAuditPg(auditPgPool, sessionId, handles)
+                : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
+        if (!audit)
+            return undefined;
+        const [head, agent, projectId] = await Promise.all([
+            headOf?.(sessionId),
+            opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined,
+            opts !== undefined ? readSessionProjectId(workspaceStore, sessionId) : undefined,
+        ]);
+        const owner = head?.owner;
+        return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}), ...(projectId !== undefined ? { projectId } : {}) };
+    };
+    const sessionAudit = mysqlPool || auditPgPool || auditLocalRows ? readSessionView : undefined;
+    const probeWatchedHead = async (sid) => (headOf === undefined ? { owner: undefined, leafId: null } : ((await headOf(sid)) ?? { owner: undefined, leafId: null }));
     const sessionWatchRegistry = headOf
-        ? new SessionWatchRegistry(async (sid) => (await headOf(sid)) ?? { owner: undefined, leafId: null }, {
+        ? new SessionWatchRegistry(probeWatchedHead, {
             hotMs: posIntEnv(process.env.SESSION_EVENTS_HOT_MS, 200),
             warmMs: posIntEnv(process.env.SESSION_EVENTS_WARM_MS, 2000),
             maxWatchedSessions: posIntEnv(process.env.SESSION_EVENTS_MAX_PROBES, 512, 100_000),

package/dist/boot/stage-03-store-backend.js

@@ -1,10 +1,10 @@
-import { uuidv7 } from "@sema-agent/core";
+import { processInstanceId } from "../process-instance.js";
 import { openStores } from "./stores.js";
 export async function runStage03(ctx) {
     const { config, localAdmission, localRoot, logger, metrics, storeEvidence } = ctx;
     const { backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, sessionCaptureRecords, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportStores, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngine, storeSweep, } = await openStores({ config, logger, metrics, localRoot, storeEvidence, localAdmission });
     const adoptionWiring = { memoryEngine: memoryExportStores !== undefined, taskAttachment: taskAttachmentStore !== undefined };
-    const instanceId = uuidv7();
+    const instanceId = processInstanceId();
     return { ...ctx, adoptionWiring, backend, backgroundAgentStore, breakerState, engineDataRoot, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportStores, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecords, sessionStore, sqlEngine, storePosture, storeSweep, taskAttachmentStore, taskListLane, usageWindowStore };
 }
 //# sourceMappingURL=stage-03-store-backend.js.map

package/dist/boot/stage-06-runners.js

@@ -1,7 +1,6 @@
 import { createSessionEraseSettler } from "../session-erase.js";
 import { Runner, InMemoryToolResultStore, TtlSessionStore, uuidv7, createAllowDenyPolicy, workflowsCapability } from "@sema-agent/core";
 import { createEngineSessionRulesSeat } from "../session-rules-seat.js";
-import { headReadOf } from "../session-incarnation.js";
 import { outwardPlane } from "../terminal.js";
 import { createSessionTitler } from "../session-titler.js";
 import { cardRuleScopeRoot } from "../task-cwd.js";
@@ -133,7 +132,7 @@ export async function runStage06(ctx) {
     }
     const mcpRevocations = webAdmin.takeMcpRevocations();
     const workflowModelAllowlistSnapshot = workflowModelAllowlistFor(config) ?? [];
-    const engineSessionRules = sessionPolicyStore ? createEngineSessionRulesSeat(sessionPolicyStore, headReadOf(sessionStore)) : undefined;
+    const engineSessionRules = sessionPolicyStore ? createEngineSessionRulesSeat(sessionPolicyStore, sessionStore) : undefined;
     const runnerDeps = createRunnerDeps({
         consolidationSeat,
         commitCoAuthor,

package/dist/boot/stage-07-capability-layer.js

@@ -193,7 +193,7 @@ export async function runStage07(ctx) {
     const parkedReviveSurface = checkpointStore && backgroundAgentStore && builtinDefaultScenario ? createParkedReviveSurface(builtinDefaultScenario, { onBackgroundChildEvent: runnerDeps.onBackgroundChildEvent }) : undefined;
     const parkedReviveInheritedGate = parkedReviveSurface && config.durableApproval
         ? createParkedReviveInheritedGate({
-            config, question, logger, localRoot,
+            config, questionSeat: question !== undefined, logger, localRoot,
             approverSeat: createRunnerDepsOnAsk(toolApproval),
             approvalExemptionStore,
             ...(runnerDeps.runtimeCapsResolver ? { resolveRuntimeCaps: runnerDeps.runtimeCapsResolver } : {}),

package/dist/boot/stage-10-http-server.d.ts

@@ -1,4 +1,36 @@
+import { brainSummary } from "../brain.js";
+import { type ServiceConfig } from "../config.js";
 import type { runStage09 } from "./stage-09-leader.js";
+/**
+ * 启动协议行 `listening` 的字段(行本身是 `observability/logger.ts` 的 {@link import("../observability/logger.js").STARTUP_PROTOCOL_EVENTS} 一员:不随 `LOG_LEVEL`)。
+ * 铸点 = 本文件 listen 之后那一行(全仓唯一,`test/source-hygiene-gate.test.ts` M7),字面量过 {@link exactListeningLine}(键集恰等于本型,可选键与条件展开同算);
+ * 键集登记在自铸登记表 `listeningLineKey`(`satisfies Record<keyof ListeningLine, …>`:键加一个而登记表没跟 / 多一个 ⇒ tsc 红)。只登顶层键;`brain` 段里的键随 `brainSummary` 走,不在本型。
+ *
+ * 绑址两格,一格一个事实:`bindHost` = 本进程**请求**绑的地址(`resolveBindHost` 的答案 —— `BIND_HOST` 经无鉴权自收窄之后的那一只;答案缺席 = 全接口时是说明串);`boundAddress` = 内核**实际**绑上的地址
+ * (`server.address().address` 原样:`::` / `0.0.0.0` / `127.0.0.1` / `::1` …;配置写 `localhost` 时它是解析出的那一只)。口同理:`port` 读的也是绑定者自己的答案。
+ */
+export interface ListeningLine {
+    readonly port: number;
+    readonly bindHost: string;
+    readonly bindHostNote?: string;
+    readonly boundAddress: string;
+    readonly model: ServiceConfig["model"]["id"];
+    readonly brain: ReturnType<typeof brainSummary>;
+    readonly breakerState: string;
+    readonly session: string;
+    readonly memory: string;
+    readonly instanceId: string;
+    readonly rateLimitPerMin: number;
+    readonly rateLimit: string;
+    readonly maxPrincipalCostUsd: number | null;
+    readonly costQuota: string;
+    readonly toolResultStore: string;
+    readonly otel: string | null;
+    readonly perModelKeys: number;
+    readonly sealedModelKeys: number;
+    readonly sealedPoisonedModels: number;
+    readonly workflowRunStore: string;
+}
 export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>): Promise<{
     drainState: import("../fleet/drain-entry.js").DrainState;
     hookWakeBus: {
@@ -186,7 +218,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
-    config: import("../config-types.js").ServiceConfig;
+    config: ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     storeEvidence: import("../store-posture.js").StoreEvidence;
     webAdmin: import("./web-admin.js").WebAdminRuntime;

package/dist/boot/stage-10-http-server.js

@@ -31,6 +31,9 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import { seatText } from "../trace/exit-seat.js";
+function exactListeningLine(line) {
+    return line;
+}
 export async function runStage10(ctx) {
     const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, belowTaskChainPatterns, deploymentMods, deploymentModsLoaded, deviceLane, drainState, dropSessionScopedOf, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, sandboxCapacity, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportStores, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekReading, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sessionResidentBackground, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
@@ -218,7 +221,7 @@ export async function runStage10(ctx) {
         checkpointStore, imageIndex, perTaskImage,
         sessionEnvSelection,
         lockedKeys: governanceSeams.lockedKeys,
-        liveQuestionFace: question,
+        questionSeat: question !== undefined,
         approverSeat: createRunnerDepsOnAsk(toolApproval),
     });
     const runnerFor = createHandsRunnerSelector({ full: runner, handsless: handslessRunner });
@@ -284,11 +287,12 @@ export async function runStage10(ctx) {
         version: serviceVersion(),
         signal: () => mintEngineSignal({ ...deployment, config }),
         modelRefusals: () => deployment.modelRefusalsState?.(),
-        ...(servingLease ? { onCenterCapabilities: (caps) => servingLease.noteCenterCapabilities(caps) } : {}),
+        ...(servingLease ? { onHeartbeat: (hearing) => servingLease.noteHeartbeat(hearing) } : {}),
         ...(fleetUsage ? { usage: fleetUsage } : {}),
         logger: { info: (m, d) => logger.info(m, d ?? {}), warn: (m, d) => logger.warn(m, d ?? {}) },
     });
     webAdmin.onSelfReportChange(() => void fleetClient?.announceNow());
+    servingLease?.onViewChange(() => void fleetClient?.announceNow());
     if (fleetClient) {
         const advertised = config.fleetAdvertiseAddress;
         logger.info("fleet_client_started", { worker: config.webAdmin?.worker, usageReport: fleetUsage !== undefined, announce: advertised !== undefined, ...(advertised !== undefined ? { address: buildDisplaySafeUrl(advertised) } : {}) });
@@ -299,12 +303,13 @@ export async function runStage10(ctx) {
     const bound = server.address();
     if (bound === null || typeof bound === "string")
         throw new Error(`http server listening without a TCP address (server.address() = ${JSON.stringify(bound)})`);
-    logger.info("listening", {
+    logger.info("listening", exactListeningLine({
         port: bound.port,
         bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",
         ...(bindHost === "127.0.0.1" && !config.bindHost
             ? { bindHostNote: "auto-narrowed to loopback: write face is unauthenticated (ALLOW_UNAUTHED_WRITES with no service token). Set BIND_HOST explicitly to override." }
             : {}),
+        boundAddress: bound.address,
         model: config.model.id,
         brain: brainSummary(config),
         breakerState: config.resilience.circuitBreaker ? (breakerState ? `shared(${backend.kind})` : "in-process") : "off",
@@ -327,7 +332,7 @@ export async function runStage10(ctx) {
                     ? `db(${backend.kind})`
                     : "file"
             : "off",
-    });
+    }));
     if (workflowNotifyGate) {
         void workflowNotifyGate
             .recover(workflowRecoverOpts)

package/dist/boot/web-admin.d.ts

@@ -144,7 +144,7 @@ export interface WebAdminRuntime {
     /** [ref] ②:caps `centerWiring.effectivePull` / `effectiveRevision` 的取值口 —— `lastPull`(新状态,只此一枚:boot 实拉 / 迟到 boot 到货 /
      *  refresh 拍收尾写)+ 与 `configApplyState()` **同一只** ledger 视图的已应用修订号。形与词表见 `web-admin-client/pull-state.ts`。 */
     centerPullState(): CenterPullView;
-    /** DESIGN-278 §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog` 判
+    /** [ref] §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog` 判
      *  `effectiveLane` 的 center 半场。投影自最近一次成功应用的候选(`latestEffective`,LKG/refresh 同一
      *  份推进点;判据单源 = apply-effective.ts `centerManagedConfigKeys`)。`undefined` = 没有配置管道。
      *  ⚠️ 部分应用窗(codex R2-F2 登记):某组整拒时 live config 已吃进其它组而 latestEffective 不推进,