@sema-agent/server 7.52.0 → 7.53.0

package/dist/http/server.js

@@ -22,7 +22,8 @@ import { emitPendingWorkflowCompletions, taskNotificationInboxEntry, taskNotific
 import { HANDS_BAND_TOOL_NAMES } from "../capabilities/hands-lane.js";
 import { fleetRunPublisher, fleetRunLabels, fleetRunResiduals, isFleetAgentTerminalNotification } from "../fleet/fleet-bus.js";
 import { defaultSubagentTailBus, projectTailFrame } from "../fleet/subagent-tail-bus.js";
-import { createApprovalCardEmitter, isApprovalGateKind, resolveApprovalLeg, resolveStreamApprovalGate } from "../tool-approval.js";
+import { APPROVAL_GATE_KINDS, createApprovalCardEmitter, isApprovalGateKind, resolveApprovalLeg, resolveStreamApprovalGate } from "../tool-approval.js";
+import { TERMINAL_PARK_GATE_KINDS } from "../plugins/checkpoint-store-sql.js";
 import { createWallClockJumpGuard } from "../wall-clock-jump-guard.js";
 import {} from "../observability/rate-limit.js";
 import { withPrincipal } from "../observability/principal-context.js";
@@ -43,6 +44,7 @@ import { handleAdoption } from "./routes/adoption.js";
 import { handleRetention } from "./routes/retention-ops.js";
 import { handleAdminDrain } from "./routes/admin-drain.js";
 import { handleAdminConfigRefresh } from "./routes/admin-config-refresh.js";
+import { handleConfigCatalog } from "./routes/config-catalog.js";
 import { handleMemoryOptOut } from "./routes/admin-memory-optout.js";
 import { handleMemoryPolicy } from "./routes/memory-policy.js";
 import { handleMemoryBundle } from "./routes/memory-bundle.js";
@@ -148,6 +150,7 @@ const ROUTE_DOMAINS = [
     handleRetention,
     handleAdminDrain,
     handleAdminConfigRefresh,
+    handleConfigCatalog,
     handleMemoryOptOut,
     handleMemoryPolicy,
     handleMemoryBundle,
@@ -465,6 +468,8 @@ export function createHttpServer(rawDeps) {
             return;
         if (await handleAdminConfigRefresh(req, res, url, ctx))
             return;
+        if (await handleConfigCatalog(req, res, url, ctx))
+            return;
         if (await handleMemoryOptOut(req, res, url, ctx))
             return;
         if (await handleMemoryPolicy(req, res, url, ctx))
@@ -977,7 +982,7 @@ export function createHttpServer(rawDeps) {
     const resumeFleetScope = (req, auth) => req ? (gatedPrincipal(req, deps.config) ?? "default") : (auth.principal ?? "default");
     async function resumeCheckpoint(sessionId, decision, reason, settledBy, req, answer, binding, onResumeCommitted, acceptEarly, decider) {
         const cs = deps.checkpointStore;
-        const token = await cs.findPendingTokenBySession(sessionId);
+        const token = (await cs.findPendingTokenBySession(sessionId, undefined, { gateKinds: APPROVAL_GATE_KINDS })) ?? (await cs.findPendingTokenBySession(sessionId));
         if (binding?.checkpointToken && binding.checkpointToken !== token) {
             let seenUnreadable = false;
             const seen = await cs.get(binding.checkpointToken).catch((e) => {
@@ -1257,7 +1262,7 @@ export function createHttpServer(rawDeps) {
             if (!store)
                 return true;
             try {
-                return (await store.findPendingTokenBySession(sessionId)) === token;
+                return (await store.get(token))?.status === "pending";
             }
             catch {
                 return true;
@@ -1782,7 +1787,8 @@ export function createHttpServer(rawDeps) {
     }
     async function resumePreempted(sessionId, req, acceptEarly) {
         const cs = deps.checkpointStore;
-        const token = await cs.findPendingTokenBySession(sessionId);
+        const RESUMABLE_GATE_KIND = "resource_limit";
+        const token = (await cs.findPendingTokenBySession(sessionId, undefined, { gateKinds: [RESUMABLE_GATE_KIND] })) ?? (await cs.findPendingTokenBySession(sessionId));
         if (!token)
             return { status: 404, body: { error: "no resumable suspension for this task (already running, resumed, or expired)", errorCode: "not_found.suspension" } };
         let cp;
@@ -1795,7 +1801,7 @@ export function createHttpServer(rawDeps) {
         if (!cp)
             return { status: 404, body: { error: "checkpoint not found", errorCode: "not_found.checkpoint" } };
         const gateKind = cp.gate?.kind;
-        if (gateKind !== "resource_limit") {
+        if (gateKind !== RESUMABLE_GATE_KIND) {
             return { status: 409, body: { error: `task is suspended on a '${gateKind ?? "unknown"}' gate, not a resumable resource/preempt suspension — an approval gate must be decided via POST /v1/approvals/:id/decide`, errorCode: "gate_not_resumable" } };
         }
         const ctx = await cs.getCtx(sessionId).catch(() => null);
@@ -1809,12 +1815,13 @@ export function createHttpServer(rawDeps) {
     }
     async function resumeWake(sessionId, message, caller, req, acceptEarly) {
         const cs = deps.checkpointStore;
-        const token = await cs.findPendingTokenBySession(sessionId);
+        const wakeBinding = { gateKinds: TERMINAL_PARK_GATE_KINDS, pick: "oldest" };
+        const token = (await cs.findPendingTokenBySession(sessionId, undefined, wakeBinding)) ?? (await cs.findPendingTokenBySession(sessionId));
         if (!token)
             return { status: 404, body: { error: "no parked checkpoint for this session (nothing to wake)", errorCode: "not_found.parked_checkpoint" } };
         const operator = explicitOperatorOk(caller, deps.config.operatorPrincipals);
         if (!operator) {
-            const scope = await cs.peekPendingScope(sessionId).catch(() => undefined);
+            const scope = await cs.peekPendingScope(sessionId, wakeBinding).then((s) => (s === undefined ? cs.peekPendingScope(sessionId) : s)).catch(() => undefined);
             const decodedScope = scope != null ? decodeCheckpointScope(scope) : undefined;
             if (decodedScope !== undefined && decodedScope !== caller) {
                 return { status: 404, body: { error: "no parked checkpoint for this session (nothing to wake)", errorCode: "not_found.parked_checkpoint" } };
@@ -1875,7 +1882,8 @@ export function createHttpServer(rawDeps) {
             ...(log?.taskId !== undefined ? { taskId: log.taskId } : { sessionId }),
             ...(log?.principalPresent !== undefined ? { principalPresent: log.principalPresent } : {}),
         });
-        const token = await cs.findPendingTokenBySession(sessionId);
+        const PLAN_REVIEW_GATE_KIND = "plan_review";
+        const token = (await cs.findPendingTokenBySession(sessionId, undefined, { gateKinds: [PLAN_REVIEW_GATE_KIND] })) ?? (await cs.findPendingTokenBySession(sessionId));
         if (!token) {
             log404("no-pending-checkpoint");
             return { status: 404, body: { error: "no pending plan_review for this session (already decided or expired)", errorCode: "not_found.plan_review" } };
@@ -1892,7 +1900,7 @@ export function createHttpServer(rawDeps) {
             return { status: 404, body: { error: "checkpoint not found", errorCode: "not_found.checkpoint" } };
         }
         const gateKind = cp.gate?.kind;
-        if (gateKind !== "plan_review") {
+        if (gateKind !== PLAN_REVIEW_GATE_KIND) {
             return {
                 status: 409,
                 body: {
@@ -2027,7 +2035,7 @@ export function createHttpServer(rawDeps) {
         const gateOwner = fleetWide ? null : (gatedPrincipal(req, deps.config) || null);
         return { fleetWide, gateOwner };
     }
-    function runOwnerOk(req, res, owner) {
+    function runOwnerOk(req, res, owner, notFoundForm = "run") {
         const principal = gatedPrincipal(req, deps.config);
         if (deps.config.requirePrincipal && !principal) {
             sendError(res, 401, "auth.principal_required", `missing principal header '${deps.config.principalHeader}'`);
@@ -2035,7 +2043,10 @@ export function createHttpServer(rawDeps) {
         }
         const legacyShellOwner = !deps.config.requirePrincipal && owner === "anon:shell-live" && (principal === undefined || principal === null);
         if (!legacyShellOwner && owner !== null && principal !== owner) {
-            sendError(res, 404, "not_found.run", RUN_NOT_FOUND_MESSAGE);
+            if (notFoundForm === "session")
+                sendError(res, 404, "not_found.session", "session not found");
+            else
+                sendError(res, 404, "not_found.run", RUN_NOT_FOUND_MESSAGE);
             return false;
         }
         return true;
@@ -2114,7 +2125,7 @@ export function createHttpServer(rawDeps) {
             if (deps.backgroundAgentStore === undefined)
                 return false;
             try {
-                const token = await cs.findPendingTokenBySession(sessionId);
+                const token = await cs.findPendingTokenBySession(sessionId, undefined, { gateKinds: APPROVAL_GATE_KINDS });
                 if (!token)
                     return false;
                 const cp = await cs.get(token);
@@ -2286,6 +2297,7 @@ const ROUTE_LABEL_PATTERNS = [
     [/^\/v1\/sessions\/[^/]+\/(wake|fork|init|notify|events|head|mcp|a2a|policy|settings)$/, "/v1/sessions/:id/$verb"],
     [/^\/v1\/admin\/memory-optout\/[^/]+$/, "/v1/admin/memory-optout/:principal"],
     [/^\/v1\/sessions\/[^/]+\/memory\/erase$/, "/v1/sessions/:id/memory/erase"],
+    [/^\/v1\/sessions\/[^/]+\/memory-status$/, "/v1/sessions/:id/memory-status"],
     [/^\/v1\/sessions\/[^/]+\/sync\/(manifest|entries|plan)$/, "/v1/sessions/:id/sync/$verb"],
     [/^\/v1\/sessions\/[^/]+\/sync\/import(\/[^/]+\/entries)?$/, "/v1/sessions/:id/sync/import"],
     [/^\/v1\/sessions\/[^/]+\/sync\/blobs(\/[^/]+)?$/, "/v1/sessions/:id/sync/blobs"],
@@ -2331,6 +2343,7 @@ const ROUTE_LABEL_LITERALS = new Set([
     "/v1/adoption",
     "/v1/admin/drain",
     "/v1/admin/config/refresh",
+    "/v1/config/catalog",
     "/v1/admin/memory-optout",
     "/v1/admin/memory/consolidation/run", "/v1/admin/memory/consolidation",
     "/v1/rules/cc-import/prepare", "/v1/rules/cc-import/redeem",

package/dist/http/sse-lifecycle.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/245 件1 —— 一条 SSE 连接的**关闭清理链**接线口。
+ * [ref] 件1 —— 一条 SSE 连接的**关闭清理链**接线口。
  *
  * ## 为什么必须双监听(而不是只挂 `req`)
  *

package/dist/http/sse-log.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/158 A9 seam —— 通用可恢复 SSE 泵(P2.8),从 `http/server.ts` 整段搬出的原文。
+ * [ref] A9 seam —— 通用可恢复 SSE 泵(P2.8),从 `http/server.ts` 整段搬出的原文。
  *
  * task_run 与 image_bake 两条日志共用同一套 liveness/heartbeat/416/终态复取/15 分钟帽逻辑;域模块
  * (routes/images.ts)与 server.ts 都要用它,所以它必须住在 http/ 叶子里(routes/* 值 import server.ts
@@ -31,7 +31,7 @@ export interface SseLogProvider<E extends {
         data: unknown;
     };
     /**
-     * #151 车3 §5:**开流 preamble** —— 在 416 判定与 `sseHeaders` **之后**、日志 tail **之前**写的
+     * [ref] 车3 §5:**开流 preamble** —— 在 416 判定与 `sseHeaders` **之后**、日志 tail **之前**写的
      * 一批**非账本**帧(今天唯一的用户 = 审批未决卡的全量对账基准)。
      *
      * 🔴 为什么必须是这里的内部 hook,而不是调用方在 `streamSseLog` **之前**自己写:本 helper 的判序是
@@ -44,7 +44,7 @@ export interface SseLogProvider<E extends {
      *
      * 缺席 = 零影响(其余 provider 不实现)。失败/挂起的处置见 {@link collectSsePreamble}。
      *
-     * `signal`(#151 车3 刀 3b,§14.2 遗留记账):有界窗到点时**被 abort** —— 实现方应把它传进自己的
+     * `signal`([ref] 车3 刀 3b,§14.2 遗留记账):有界窗到点时**被 abort** —— 实现方应把它传进自己的
      * store 读口,让那次读当场以 abort 拒绝,而不是留一个「结果已被丢弃、调用链却还在飞」的悬挂读。
      * 可达到的语义与残留边界见 `ApprovalAskStore.listPendingBySession` 的 `signal` 注(驱动无取消 seam)。
      */
@@ -58,16 +58,16 @@ export interface SseLogProvider<E extends {
      */
     onPreambleFailure?(reason: "timeout" | "error", err?: unknown): void;
 }
-/** #151 车3 §5.3:preamble 的**有界**等待上限。挂起的 store 不许拖住开流——开流是壳的主路径,
+/** [ref] 车3 §5.3:preamble 的**有界**等待上限。挂起的 store 不许拖住开流——开流是壳的主路径,
  *  而 preamble 只是一个锦上添花的对账基准。超时即按「无卡集基准」继续(与今天等同)。 */
 export declare const SSE_PREAMBLE_TIMEOUT_MS = 2000;
 /**
- * 跑一次 preamble,**有界 + fail-open**(#151 车3 §5.3)。
+ * 跑一次 preamble,**有界 + fail-open**([ref] 车3 §5.3)。
  *
  * 🔴 只 catch throw 是不够的:store **挂起**(不抛)会把整条开流一起拖住。所以这里是 `Promise.race`
  * 而不是 try/catch —— 两种失败形(抛 / 不返回)各自有一条出路,都落到「零帧 + 一次 warn + 继续开流」。
  *
- * 🔴 #151 车3 刀 3b(§14.2 遗留记账兑现):超时**同时 abort** 一个交给 `preamble` 的 `AbortSignal`。
+ * 🔴 [ref] 车3 刀 3b(§14.2 遗留记账兑现):超时**同时 abort** 一个交给 `preamble` 的 `AbortSignal`。
  * 此前只是「丢结果」,原 promise 仍在飞 —— DB 挂死时的重连风暴会一轮轮往连接池里堆等待者。现在读口
  * 拿到 abort 会当场拒绝,调用链不再累积;库那侧的那条查询仍会跑完(驱动无取消 seam,残留边界见
  * `ApprovalAskStore.listPendingBySession` 的注)。丢结果这条语义不变:preamble 只读,丢弃零副作用。

package/dist/http/verify-rounds.d.ts

@@ -1,12 +1,12 @@
 /**
- * design/97 R9 — the verify-rounds shape (used by the developer-mode independent-verification gate, 1.44) pulled
+ * [ref] R9 — the verify-rounds shape (used by the developer-mode independent-verification gate, 1.44) pulled
  * out to a NEUTRAL LEAF: it was three copies of the same anonymous `{ maxRounds: number; costCeilingMicroUsd?:
  * number }` object type (route-ctx.ts ×2, runs.ts `runInBackground`'s public signature) plus four call sites in
  * http/server.ts that each re-derived the same "verify:true → clamp rounds + fold cost ceiling" expression from a
  * request body. A leaf (not server.ts itself) so route-ctx.ts — which must never value-import server.ts (that
  * closes the runtime module-load cycle test/module-cycle-gate.test.ts guards) — can `import type` the shape from
  * one place. server.ts imports {@link clampVerifyRounds} from here; tests import it from HERE too
- * ([2354] 兼容面全清:server.ts 的保深路径 re-export 已删).
+ * ([ref] 兼容面全清:server.ts 的保深路径 re-export 已删).
  */
 import type { TaskRequestBody } from "./wire-types.js";
 /** Verification-rounds config threaded onto a task's `verify`/resume paths (see {@link verifyRoundsFromBody}). */
@@ -19,6 +19,6 @@ export declare function clampVerifyRounds(v: unknown): number;
 /** `undefined` when `body.verify` is not `true` (the caller didn't opt into the gate); otherwise the clamped
  *  rounds + (if `maxCostUsd` is a positive number) the same USD→micro-USD cost ceiling the cascade lane uses.
  *  Same expression that lived inline at all four verify/resume call sites in http/server.ts (fresh-submit,
- *  resumeCheckpoint, resumePreempted, resumePlanReview) — collected here VERBATIM (design/97 R9). */
+ *  resumeCheckpoint, resumePreempted, resumePlanReview) — collected here VERBATIM ([ref] R9). */
 export declare function verifyRoundsFromBody(body: Pick<TaskRequestBody, "verify" | "verifyRounds" | "maxCostUsd">): VerifyRoundsSpec | undefined;
 //# sourceMappingURL=verify-rounds.d.ts.map

package/dist/http/wire-gate.d.ts

@@ -1,11 +1,11 @@
 /**
- * D-0 (design/80 §1): the single source of truth for the `CheckpointGate.kind` values the service emits on the
+ * D-0 ([ref] §1): the single source of truth for the `CheckpointGate.kind` values the service emits on the
  * wire. The suspend path surfaces the gate VERBATIM (`append("suspended", { gate })`, server.ts), and the
  * agent-client SDK renders these as typed arms (an unknown kind falls through the SDK's open `(string & {})`
  * arm and renders generically). This explicit mirror exists so the compile-time guards below + the contract
  * test (`test/wire-gate-contract.test.ts`) keep the wire/SDK in lockstep with core — the guarantee the SDK's
  * own `spec.test.ts` cannot give (it hardcodes the kinds without importing core, so it would stay GREEN the
- * moment core adds a 6th kind; design/80 §3 #10 was therefore unenforced until this).
+ * moment core adds a 6th kind; [ref] §3 #10 was therefore unenforced until this).
  */
 export declare const WIRE_GATE_KINDS: readonly ["human", "irreversible_ask", "resource_limit", "needs_review", "task_done", "plan_review"];
 export type WireGateKind = (typeof WIRE_GATE_KINDS)[number];

package/dist/http/wire-types.d.ts

@@ -1,5 +1,5 @@
 /**
- * HTTP wire REQUEST types (design/158 A4) — pure type shapes of the task-submit surface, moved VERBATIM out of
+ * HTTP wire REQUEST types ([ref] A4) — pure type shapes of the task-submit surface, moved VERBATIM out of
  * http/server.ts so a caller that needs only the request SHAPE (security.ts's authorizer signature; embedders via
  * index.ts) depends on a type-only LEAF instead of the whole 10k-line route module. server.ts re-exports
  * {@link TaskRequestBody}, so every existing import site keeps working unchanged. Conservative scope for the first
@@ -20,7 +20,7 @@ export interface TaskRequestBody {
     scenario?: string;
     /** dispatch-gateway failover 幂等第二级:caller-minted 任务 id(uuidv7)。同 owner 重放同 id ⇒ 幂等重放;
      *  异 owner ⇒ 409 `conflict.run_exists`;非 uuidv7 ⇒ 400 `request.id_invalid`(routes/runs.ts:192-208 真验收)。
-     *  [2400] TR-16 连带:此键此前只活在 runs.ts 读点,导出类型漏declared——CAPS-OPS-13 同族第 9 键。 */
+     *  [ref] TR-16 连带:此键此前只活在 runs.ts 读点,导出类型漏declared——CAPS-OPS-13 同族第 9 键。 */
     taskId?: string;
     images?: Array<{
         data: string;
@@ -33,7 +33,7 @@ export interface TaskRequestBody {
      *  上限 16/task;未知或他人 id → 400(fresh 腿)。⚠️ 名为 `attachmentIds` 而非 `attachments`——
      *  后者已被系统提醒配置键占用(本接口 :464,core spec.attachments 镜像)。 */
     attachmentIds?: string[];
-    /** design/112 C1 (core 1.181): the CLIENT/gateway's view of the user — used by core to localize the env block's
+    /** [ref] C1 (core 1.181): the CLIENT/gateway's view of the user — used by core to localize the env block's
      *  date to the user's zone + surface who the agent acts for. The shell/gateway fills it from a verified user
      *  identity (NOT the model). core validates timeZone (invalid → UTC, never mislabeled). Pass-through to
      *  `spec.clientContext`; `locale` was removed in core 1.186 (dead field) so only timeZone+userEmail are accepted. */
@@ -47,7 +47,7 @@ export interface TaskRequestBody {
      *  SERVICE_AUTH_TOKEN reaches here (same boundary as `businessContext`). Keep it STABLE per
      *  integrator-version (it's part of the cacheable prefix); put per-request context in `objective`. */
     systemPrompt?: string;
-    /** Append-only system prompt rider ([1476] R1 / [1478] R2 ruling): passes through to core's
+    /** Append-only system prompt rider ([ref] R1 / [ref] R2 ruling): passes through to core's
      *  `TaskSpec.appendSystemPrompt` (≈ CC `--append-system-prompt`) — a STABLE block composed after the scenario
      *  base + `systemPrompt`, before the volatile tail (prefix-cache friendly). First-class lane for the shell's
      *  product-knowledge block, so `settings.outputStyle` stays a real output style (a future center-issued style
@@ -64,7 +64,7 @@ export interface TaskRequestBody {
      *  (config.models keys), so it picks WHICH configured model but can never inject one. Wins over an inline
      *  @mention; an unknown name falls through to mention/default (lenient). Never a baseUrl/apiKey. */
     model?: string;
-    /** [1479]① Cheap-model gear for within-task compaction/summarize (core design/145 `TaskSpec.compactionModel`):
+    /** [ref]① Cheap-model gear for within-task compaction/summarize (core [ref] `TaskSpec.compactionModel`):
      *  a catalog INTENT like `model` (name/tier word/id), gated against the SAME expanded allow-list — picks WHICH
      *  configured model compacts, never injects one. core clamps window-unsafe picks back to the main model with
      *  `modelFallback` attribution on the `compacted` event. Absent ⇒ the `summarize` role / main model (status quo).
@@ -123,7 +123,7 @@ export interface TaskRequestBody {
      *  finite, ≥1, floored, capped at 10; anything else ⇒ key omitted (core's own default). Meaningless without
      *  `outputSchema` (core ignores it there). */
     outputRetries?: number;
-    /** Within-task compaction tuning (core design/145 `TaskSpec.compaction`). ⚠️ ONLY `clampTolerance` is a caller
+    /** Within-task compaction tuning (core [ref] `TaskSpec.compaction`). ⚠️ ONLY `clampTolerance` is a caller
      *  knob — the rest of core's compaction object is an OPERATOR axis and is deliberately not on the wire, so this
      *  type is narrower than core's field on purpose. `boot/resolve-spec.ts` accepts a finite number in [0,1] and
      *  omits the whole `compaction` key otherwise. Pairs with `compactionModel` (which gear compacts). */
@@ -141,7 +141,7 @@ export interface TaskRequestBody {
      *  The service resolves eventId→the persisted SessionTreeEntry.id (the anchor map) in resolveSpec; an unknown
      *  eventId is a 4xx (never silently dropped). Requires a session. Absent ⇒ continue from the current leaf. */
     resumeAt?: string;
-    /** [833] rewind exclusive mode (core 1.292 `TaskSpec.resumeAtMode`): qualifies the `resumeAt` target. `"at"`
+    /** [ref] rewind exclusive mode (core 1.292 `TaskSpec.resumeAtMode`): qualifies the `resumeAt` target. `"at"`
      *  (default when absent — zero regression) keeps the target message in the branched context; `"before"` branches at
      *  the target's PARENT, EXCLUDING the target itself (the exclusive-rewind shape: "remove this prompt and everything
      *  after it"). core enforces the "before" edges and the service passes its rejection codes through UNCHANGED for the
@@ -150,7 +150,7 @@ export interface TaskRequestBody {
      *  `rewind_snapshot.unresolvable` (rewindFiles: no snapshot at/above the "before" branch point). Only meaningful
      *  WITH `resumeAt` — sent alone it's a 400 (fail-loud, not a silent no-op). */
     resumeAtMode?: string;
-    /** design/114 Phase3 (reuse-path warm-resume): require the `sessionId` to ALREADY exist. When `true` and the session
+    /** [ref] Phase3 (reuse-path warm-resume): require the `sessionId` to ALREADY exist. When `true` and the session
      *  is genuinely missing (expired / purged / never created), the run FAILS LOUD (`resume.session_not_found`) instead
      *  of silently starting a fresh empty session ("looks warm, actually fresh"). Absent/`false` ⇒ the historical
      *  create-on-miss. Fails loud with NO sessionId too (nothing to resume). Rides the persisted body onto resume legs. */
@@ -163,7 +163,7 @@ export interface TaskRequestBody {
         count?: number;
         role?: string;
     };
-    /** S-15 file restore (design/381): with `resumeAt`, ALSO converge the working tree's **agent-edited files**
+    /** [ref] file restore ([ref]): with `resumeAt`, ALSO converge the working tree's **agent-edited files**
      *  (the tracked set — nothing else is visible to the history, so a user's parallel work is structurally
      *  untouchable) to that entry's history boundary. Capture needs no request anymore: first-touch tracking is
      *  always on when the deployment wires a history store. Requires a FileHistoryStore. */
@@ -181,16 +181,16 @@ export interface TaskRequestBody {
      *  value is the same handle as `resumeAt` (the prompt's taskId); the service resolves it → the entry id. Honored ONLY
      *  when `resumeAt` is ABSENT (the two modes are mutually exclusive). Requires the anchor map + a FileHistoryStore. */
     rewindFilesTo?: string;
-    /** design/131 (core 1.246): per-task resilience INTENT flags. allowDegrade/allowFailover are caller-facing;
+    /** [ref] (core 1.246): per-task resilience INTENT flags. allowDegrade/allowFailover are caller-facing;
      *  bypassBreaker is operator-only (resolveSpec drops it for non-operators — a permission downgrade, not a 400). */
     resilience?: {
         allowDegrade?: boolean;
         allowFailover?: boolean;
         bypassBreaker?: boolean;
     };
-    /** design/132 (core 1.249): one-shot end-game verification nudge — opt-in by the AUTONOMY caller. */
+    /** [ref] (core 1.249): one-shot end-game verification nudge — opt-in by the AUTONOMY caller. */
     finalVerification?: boolean;
-    /** [854]④ per-request 配速——core 5.8.0 时限重构后的键集(#124):`maxWalltimeMs`(毫秒,opt-in 墙钟)/
+    /** [ref]④ per-request 配速——core 5.8.0 时限重构后的键集([ref]):`maxWalltimeMs`(毫秒,opt-in 墙钟)/
      *  `maxOutputTokens`/`maxTurns`,均正整数;可选运营方上限旋钮各自封顶(TASK_TIMEOUT_MAX_SEC 保**秒**义,
      *  对毫秒键封顶 ×1000)。旧键 `timeoutSec` 与 deadline 族三 opt-out(机制退役)fresh-submit 400 响亮
      *  点名替代;`maxWalltimeMs` 缺席时保持既有 tenancy 墙钟姿势(resolveTaskLimits,spec-fields.ts)。 */
@@ -203,9 +203,9 @@ export interface TaskRequestBody {
             at?: [number, number];
         };
     };
-    /** design/133 (core 1.251) + G1 (core 1.253): turn-boundary attachment reminders (todo / changed-files /
+    /** [ref] (core 1.251) + G1 (core 1.253): turn-boundary attachment reminders (todo / changed-files /
      *  plan-mode) + one-shot boundary notices (post-compaction background-task recap / deferred-tools delta).
-     *  [2400] CAPS-OPS-13:本类型经 src/index.ts 导出给 embedder——键集必须与真验收面(spec-fields.ts
+     *  [ref] CAPS-OPS-13:本类型经 src/index.ts 导出给 embedder——键集必须与真验收面(spec-fields.ts
      *  normalizeAttachments 10 键 / normalizeLimits 6 键)同源;此前少 8 键 ⇒ agentListing:false(唯一能关
      *  core 默认开列表注入的通道)与三个 deadline opt-out 在类型面失踪。agentListing/skillsListing 是
      *  boolean 透传(core DEFAULT-ON,explicit false 才关);budgetUsd/mcpInstructions 只认 literal true;
@@ -229,13 +229,13 @@ export interface TaskRequestBody {
      *  log, so a shell can render the child's transcript live ("enter 看详情"). Default OFF = progress-only (prior
      *  behavior). Purely a render channel — core never merges the child stream into the parent's model context. */
     forwardSubagentEvents?: boolean;
-    /** G3([816] 壳侧承诺③/[820]③):壳供 per-session scratchpad 路径(壳 vendored getScratchpadDir 的
+    /** G3([ref] 壳侧承诺③/[ref]③):壳供 per-session scratchpad 路径(壳 vendored getScratchpadDir 的
      *  约定路径)。接受后优先于 server 自算,同源喂 envFacts.scratchpadDir 事实 + fs-write gate exemptDirs +
      *  additionalDirectories 根围栏——壳提示词与 server 写门指同一个目录。验收 fail-closed(单用户 +
      *  host-semantics lane + 绝对路径/深度/长度门,规则在 env-facts.acceptShellScratchpadDir),拒收形
      *  warn 后回落自算——「没到货引擎忽略 = 无害 additive」的对偶:异形键忽略,任务照跑。 */
     scratchpadDir?: string;
-    /** design/122 (core 1.225): opt-in — RETAIN settled sub-agent sessions so the shell can revive one
+    /** [ref] (core 1.225): opt-in — RETAIN settled sub-agent sessions so the shell can revive one
      *  (`POST /v1/runs/:id/subagents/:target/resume`, CC dfe parity). `true` = core defaults (30min ttl / 16 max);
      *  an object tunes them (service-clamped: ttlMs ≤24h, max ≤64 — retention pins sessions in memory within the
      *  run). Default OFF = throwaway children (a resume then 409s `resume.retain_off`). Run-scoped: everything is
@@ -244,7 +244,7 @@ export interface TaskRequestBody {
         ttlMs?: number;
         max?: number;
     };
-    /** [876] per-task custom subagents (core 1.295 `TaskSpec.agents` — CC `.claude/agents/` parity): the shell sends
+    /** [ref] per-task custom subagents (core 1.295 `TaskSpec.agents` — CC `.claude/agents/` parity): the shell sends
      *  its resolved agent definitions per request. Whitelist-validated FAIL-LOUD at submit (unknown keys 400 — an
      *  agent definition silently losing a `denyTools`/`isolation` field is a silent widening, the opposite failure
      *  mode of the resilience "tolerate unknown keys" posture; `permissionMode` deliberately NOT accepted — core call,
@@ -253,24 +253,24 @@ export interface TaskRequestBody {
      *  fail-closed; advertised via capabilities.taskAgents). ≤32 per request. Rides the persisted body onto resume
      *  legs (defensive per-item DROP there, never a brick). */
     agents?: AgentDefinition[];
-    /** [854]② (core 1.295 `TaskSpec.retainBackgroundProcesses`): opt-out of the task-end reaping of session
+    /** [ref]② (core 1.295 `TaskSpec.retainBackgroundProcesses`): opt-out of the task-end reaping of session
      *  background processes ("keep my dev server running"). On the host lane this is a RESOURCE-RESIDENCY grant, so
      *  it takes the same single-user gate as backgroundShell/hooks (multi-tenant warns + ignores; advertised via
      *  capabilities.retainBackgroundProcesses). Boolean fail-loud at submit; only `true` rides the spec. */
     retainBackgroundProcesses?: boolean;
-    /** [1052]② (core 1.314 工具面控制批): roster 真卸载清单(schema 不上 wire,manifest 收窄)。wire 工具名;
+    /** [ref]② (core 1.314 工具面控制批): roster 真卸载清单(schema 不上 wire,manifest 收窄)。wire 工具名;
      *  tighten-only(core 继承不变量 union 进子 spawn)。数组-of-string fail-loud at submit。 */
     excludeTools?: string[];
-    /** [1052]② (core 1.314): design/36 延迟披露清单(占位上 wire,ToolSearch 激活)——cli「Workflow 默认开
+    /** [ref]② (core 1.314): [ref] 延迟披露清单(占位上 wire,ToolSearch 激活)——cli「Workflow 默认开
      *  不暴露」的承载位。同 excludeTools 的校验/继承姿势。 */
     deferTools?: string[];
-    /** [1144]/[1146] (core 1.328 R2): 提示词双形轴——simple(CC 212 短形,引擎缺省)| classic(长形,可按
+    /** [ref]/[ref] (core 1.328 R2): 提示词双形轴——simple(CC 212 短形,引擎缺省)| classic(长形,可按
      *  任务/模型试分)。纯呈现轴无租户门;枚举 fail-loud at submit;缺省不挂键。 */
     promptProfile?: "simple" | "classic";
-    /** [2856]②(core 5.14.0 座已在,`TaskSpec.toolMaterializeStrategy`):deferred 工具在**激活之后**怎么给
+    /** [ref]②(core 5.14.0 座已在,`TaskSpec.toolMaterializeStrategy`):deferred 工具在**激活之后**怎么给
      *  模型供 schema。`static` = 占位符形不变(激活只改可调用性,广告的 schema 仍是空对象);`swap` = 激活
      *  后下一轮把占位符换成真 schema。
-     *  为什么要上 wire:cli 的 #181 取证表明,忠实跟随广告 schema 解码的 provider(openai-completions 车道)
+     *  为什么要上 wire:cli 的 [ref] 取证表明,忠实跟随广告 schema 解码的 provider(openai-completions 车道)
      *  在 `static` 下会**无界循环** —— 每轮发 `{}` → invalidArgumentsRejection → 下一轮广告仍空,纠错回路
      *  结构上无效。core 的缺省链是 `spec.toolMaterializeStrategy ?? env ?? <core 缺省>`,而**进程级 env 说不了
      *  「每个模型」的话**(模型目录车道 per-model api 可混),所以必须有一个**按任务**的位子——这条理由与
@@ -284,26 +284,26 @@ export interface TaskRequestBody {
     toolMaterializeStrategy?: "static" | "swap";
     /** R4 (CC parity): the LIGHT top-level per-turn permission-mode intent (CC `permissionMode`). The shell sends
      *  the RAW mode (axis-agnostic, no client-side interpretation); the SERVICE interprets it tighten-only vs the
-     *  deployment baseline. Post-[816] all FIVE modes are honored as gate-SHAPE choices (`plan` ⇒ read-only hands +
+     *  deployment baseline. Post-[ref] all FIVE modes are honored as gate-SHAPE choices (`plan` ⇒ read-only hands +
      *  `present_plan`; `acceptEdits`/`bypassPermissions`/`auto` select how much the mode-derived fs-write ask gate
      *  asks — they can never subtract from deployment/operator policy, tightenTaskSpec deny-wins; the old "LOOSEN →
-     *  coerced to default" note was pre-[816] doc-rot). Folds onto the SAME tighten-only governance as
+     *  coerced to default" note was pre-[ref] doc-rot). Folds onto the SAME tighten-only governance as
      *  `settings.permissions.defaultMode` (the heavier bundle), so it's a lighter alias, not a second path.
-     *  #157-②: CLOSED enum on the wire — an unknown word 400s at submit (`request.field_invalid`, sibling of
+     *  [ref]-②: CLOSED enum on the wire — an unknown word 400s at submit (`request.field_invalid`, sibling of
      *  promptProfile) instead of silently coercing to `default`; resume replay of a stored body stays lenient
      *  (coercePermissionMode). */
     permissionMode?: "default" | "acceptEdits" | "plan" | "bypassPermissions" | "auto";
     /** MF-30 memory PAUSE (shell-host contract, option B per-request — clay 2026-06-27): `false` makes THIS run
-     *  read-only over long-term memory (`TaskSpec.memory.writeScope:null` — the design/138 memory ENGINE materializes/
+     *  read-only over long-term memory (`TaskSpec.memory.writeScope:null` — the [ref] memory ENGINE materializes/
      *  reads but its harvest commits nothing). Absent/`true` ⇒ normal read+write. The shell's `/memory` pause carries
      *  this per request (no stored per-session flag). Re-applies on resume (rides in the persisted body).
-     *  ⚠️ **NOT the same axis as the deployment's `MEMORY_PERSISTENCE_CAPABLE:false`** (core 5.27.0 / [3612] F2):
+     *  ⚠️ **NOT the same axis as the deployment's `MEMORY_PERSISTENCE_CAPABLE:false`** (core 5.27.0 / [ref] F2):
      *  that one declares the SESSION restricted — materialize/search/harvest serve the committed account and
      *  unbacked disk divergence is refused (`restricted_divergence`). A `writeScope:null` PLANE keeps its ordinary
      *  adopt-on-read semantics: a paused run still sees the user's hand-edits and git-pull drops, it just commits
      *  nothing. Restriction is the session's DECLARATION, never the plane's structure. */
     memoryWrite?: boolean;
-    /** design/383 §2.1(core 7.0.0 片2/3;server S-49):**session 记忆采集 opt-out 声明** —— `"off"` = 「本会话
+    /** [ref] §2.1(core 7.0.0 片2/3;server [ref]):**session 记忆采集 opt-out 声明** —— `"off"` = 「本会话
      *  不进长期记忆」:单成员闭集,**没有** `"on"`(缺席就是照常采集的唯一形)。透传为 `TaskSpec.memory.capture`,
      *  由 core 按部署姿态(`MEMORY_CAPTURE_POLICY`)+ 该 principal 的 `allowMemoryOptOut` verdict 裁:拒 = 403
      *  `memory.capture_optout_denied`。**一次性**:声明落一条单向控制面记录,后续 resume 恒不采集(record wins),
@@ -314,11 +314,11 @@ export interface TaskRequestBody {
      *  记忆面暗的部署(引擎未接线 / 多租户)上本键随 `memory` 整体缺席而无处落 —— 那里本就零采集。
      *  Rides the persisted body onto resume legs(与 memoryWrite 同姿势)。 */
     memoryCapture?: "off";
-    /** 142-S4 projectId 线程化(design/142 §2):这个 run 归属的项目(center 登记簿键,generic lowercase
+    /** 142-S4 projectId 线程化([ref] §2):这个 run 归属的项目(center 登记簿键,generic lowercase
      *  UUID — core S1 `resolveProjectId` marker 或 S3 无仓 mint 的产物;客户端只透传,零铸造权威)。是「哪个
      *  项目」的选择器,不是身份/capability — scope 的 tenant 段永远来自 verified principal。SHAPE 门在
      *  authorizer(core `PROJECT_ID_REGEX`,不合形状=422 typed `invalid_project_id`)。**大小写不敏感收、
-     *  归一小写用**(A-033.1/#256:词法与 core 的格式单源对齐,带 /i;收下后折小写再派生 scope/查表 ——
+     *  归一小写用**([ref]/[ref]:词法与 core 的格式单源对齐,带 /i;收下后折小写再派生 scope/查表 ——
      *  同一个 id 的两种大小写写法落同一只记忆盘)。多租户 DB 记忆面下它把派生
      *  scope 从 user 盘切到项目盘(`proj:<tenant>/<projectId>`)并以 config.projects[projectId].defaultScopes
      *  作 memory.scopes 种子;单用户部署忽略派生(memoryScopeFor 不变),仅 defaultScopes 种子生效。
@@ -330,7 +330,7 @@ export interface TaskRequestBody {
      *  (a caller can't point a shared/cloud worker at an arbitrary host path). Validated absolute (prepareSpec 400s a
      *  relative cwd — it would silently resolve against the SERVICE process cwd). */
     cwd?: string;
-    /** design/119 (CC `--add-dir`, core `TaskSpec.additionalDirectories`): extra host dirs the FILE tools may reach
+    /** [ref] (CC `--add-dir`, core `TaskSpec.additionalDirectories`): extra host dirs the FILE tools may reach
      *  beyond the containment root. 🔒 Gated exactly like `cwd`/`shellEnv` — honored ONLY on the single-user host
      *  lane (`task-cwd.ts` `cwdHonored`); off that lane `boot/resolve-spec.ts` drops them with a loud
      *  `task_additional_directories_ignored` (never silently). SHAPE is fail-loud at submit (absolute host paths,
@@ -340,7 +340,7 @@ export interface TaskRequestBody {
      *  resume legs. */
     additionalDirectories?: string[];
     additionalReadDirectories?: string[];
-    /** [1909]⑧/[1910]/[1911] (core 5.23.0 `TaskSpec.oneShot`): this SUBMISSION is one-shot — no later turn exists
+    /** [ref]⑧/[ref]/[ref] (core 5.23.0 `TaskSpec.oneShot`): this SUBMISSION is one-shot — no later turn exists
      *  in which an async background notification could land (the archetypal case is a headless `sema -p` whose
      *  process exits when the turn ends). PER-REQUEST on purpose: "does this submission expect to be continued" is
      *  a property of the submission, not of the connection it arrived on. core consumes it as GUIDANCE ONLY (the
@@ -356,7 +356,7 @@ export interface TaskRequestBody {
      *  worker, not the exec env); IGNORED on multi-tenant deployments (can't make the shared worker run an arbitrary
      *  command). Validated + gated downstream; the center/config baseline wins on a name clash.
      *
-     *  design/378(core 5.60.0):条目上可选的 `contentOrigin`(`"local"|"execution"|"external"`)= **内容
+     *  [ref](core 5.60.0):条目上可选的 `contentOrigin`(`"local"|"execution"|"external"`)= **内容
      *  出处声明**,只影响记忆写治理(会话污染标记),对审批门/策略/角色表零作用。缺席 = pre-378 逐字节
      *  现行为(判 external)。🔴 **新提交(fresh)腿上,词表外的值 ⇒ 同步 400 `request.field_invalid`** ——
      *  静默丢会把一次信任边界声明变成探针。⚠️ **耐久 resume 腿上不拒**:那条腿重放的是存量 body,4xx 会把
@@ -391,10 +391,10 @@ export interface TaskRequestBody {
     enableFork?: boolean;
     [k: string]: unknown;
 }
-/** design/80 D-1: the operator-echoed decision-action binding carried on POST /v1/approvals/:sessionId/decide([2373]C-4:裸 :id 臂已删).
+/** [ref] D-1: the operator-echoed decision-action binding carried on POST /v1/approvals/:sessionId/decide([ref]C-4:裸 :id 臂已删).
  *  All optional for back-compat — a legacy BFF caller omitting them resumes on the current-pending values
  *  exactly as before (the pre-D-1 path), tracked by a deprecation counter.
- *  design/158 A9: hoisted VERBATIM out of `createHttpServer`'s closure so the approvals/assistant route domain
+ *  [ref] A9: hoisted VERBATIM out of `createHttpServer`'s closure so the approvals/assistant route domain
  *  and the resume leg can name the SAME shape without a routes/* → server.ts value edge. */
 export type DecideBinding = {
     /** The capability token the operator actually SAW (from listPending). A mismatch with the current pending
@@ -404,10 +404,10 @@ export type DecideBinding = {
     boundCallId?: string;
     /** The server-minted opaque boundInputHash the operator saw — echoed VERBATIM (never recomputed here). */
     boundInputHash?: string;
-    /** design/37 edit: operator-corrected tool args, applied by core AFTER the binding check, on approve only. */
+    /** [ref] edit: operator-corrected tool args, applied by core AFTER the binding check, on approve only. */
     updatedInput?: unknown;
 };
-/** S-02([5522]④→[5525] 坐标轮换判定):409 `approval_stale` 拒体上的 additive 机读指路 ——
+/** [ref]([ref]④→[ref] 坐标轮换判定):409 `approval_stale` 拒体上的 additive 机读指路 ——
  *  **本会话当前 pending** 的 D-1 回显坐标,让持旧坐标的壳一跳重定位(免重拉列表)。
  *  键名/键形与 GET /v1/approvals 的 pending 行逐字同名(壳复用同一解析)。
  *  🔴 恒**不含** checkpointToken(runs.ts §12-C:resume 凭证从不外发);只在当前 pending **在场**、

package/dist/key-resolver.d.ts

@@ -10,7 +10,7 @@ import { type SealedKeyPoison } from "./sealed-key.js";
  * regression). When no per-model keys are configured at all this returns `undefined`, leaving the spec
  * field unset so core's default path is byte-for-byte unchanged.
  *
- * Only the api KEY is per-model; the base URL stays brain-owned (design/15) — core's seam carries
+ * Only the api KEY is per-model; the base URL stays brain-owned ([ref]) — core's seam carries
  * `{ apiKey, headers? }`, not a baseUrl. Same-account-rotation could round-robin inside this function.
  *
  * `modelApiKeys` (sealed-box custody) carries per-model entries unsealed from `ModelEntry.sealedApiKey` —

package/dist/leader/diffout.d.ts

@@ -1,5 +1,5 @@
 /**
- * v2 MVP M2 — diff-OUT-of-container (design/50 §7 solution (b), V2-MVP-PLAN.md, findings F1/F3, council#1/#13/#14).
+ * v2 MVP M2 — diff-OUT-of-container ([ref] §7 solution (b), V2-MVP-PLAN.md, findings F1/F3, council#1/#13/#14).
  *
  * The Coordinator pulls a worker's commits as a patch series over `execStream` `git format-patch --stdout` —
  * the diff comes OUT of the worker container, **no push credentials ever go IN** (preserves §5/F3 isolation).
@@ -41,7 +41,7 @@ export type PullDiffResult = {
 /**
  * 一次 diff 的字节帽(pull 腿与 push/上行腿**共用同一个数**)。
  *
- * 🔴 exported 是判据的一部分(2026-08-08,#176 二轮扫描 finding):`diffup.ts` 原先另抄了一份同值常量,
+ * 🔴 exported 是判据的一部分(2026-08-08,[ref] 二轮扫描 finding):`diffup.ts` 原先另抄了一份同值常量,
  * 而它**本就已经** `import { safeRev } from "./diffout.js"` —— 依赖边在,共享零成本。两份手抄的后果不是
  * 「多写一行」,是**单边改值后上行/pull 两腿对同一个 diff 的过/拒判定分家**:同一份补丁在一条腿上过、
  * 另一条腿上被截断,而两处都「按自己的常量」正确工作,没有任何一处会报错。

package/dist/leader/diffup.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/68 §8 F2(a) — worker SELF-UPLOAD diff-out (the factory-env counterpart of diffout.ts's pullDiff).
+ * [ref] §8 F2(a) — worker SELF-UPLOAD diff-out (the factory-env counterpart of diffout.ts's pullDiff).
  *
  * With a factory env the runner owns the container lifecycle (create at task start, destroy at finish — and
  * durable suspend only produces a complete ownedEnv on this path), so the leader can no longer pull the diff

package/dist/leader/endpoint.d.ts

@@ -66,7 +66,7 @@ export declare function createLeaderEndpoint(runLeader: (body: LeaderRequestBody
      *  runLeader 的内部实现细节,依旧保持 pure/testable。不传 = 向后兼容旧行为(只查 objective) ——
      *  本文件其余全部既有用例都用最小 {objective} payload,不能被这个修复打红。 */
     requiredFields?: readonly string[];
-    /** #193 车4 件1:durable 登记表。缺席 ⇒ 显式的单副本内存降级臂(见文件头注)。 */
+    /** [ref] 车4 件1:durable 登记表。缺席 ⇒ 显式的单副本内存降级臂(见文件头注)。 */
     store?: LeaderRunStore;
 }): LeaderEndpoint;
 //# sourceMappingURL=endpoint.d.ts.map

package/dist/leader/fanout.d.ts

@@ -1,5 +1,5 @@
 /**
- * v2 MVP — leader fan-out composition layer (design/50 §3, V2-MVP-PLAN.md M1, core seam).
+ * v2 MVP — leader fan-out composition layer ([ref] §3, V2-MVP-PLAN.md M1, core seam).
  *
  * Runs N sub-task workers in parallel over `runner.runTaskStream` sharing ONE AbortController, bounded by a
  * Semaphore, with an overall deadline (no infinite wait — council#5), and a
@@ -7,7 +7,7 @@
  * snapshot — closing the late-registration race (council round-2). Returns a typed WorkerReport per worker (council#6 — the
  * Coordinator needs a defined shape to route diffs in merge(b)).
  *
- * ── 重复 spawn 的去重由谁负责(#193 车4 件1,台账 P1-9③ 更正)────────────────────────────────────
+ * ── 重复 spawn 的去重由谁负责([ref] 车4 件1,台账 P1-9③ 更正)────────────────────────────────────
  * 这段头注**曾经**写着 fan-out 带一道「concurrency claim(run-store createRun unique-key CAS)」并称
  * 「the rule-5 dual-session tax solved at worker scale」。亲读后裁定:那道 claim 全链路无人传,而且
  * **由构造即无效** —— 它的 CAS 键是 `(workerId, sessionId)`,而 sessionId 是 `wire.ts` 每次现铸的
@@ -41,15 +41,15 @@ export interface WorkerReport {
     error?: string;
     /** The worker's TaskResult.stats (tokens/cost/turns) — for the value-campaign cost accounting. */
     stats?: TaskResult["stats"];
-    /** design/52 L3a module sub-gate: did this worker's module pass the per-module judge (after any repair)? */
+    /** [ref] L3a module sub-gate: did this worker's module pass the per-module judge (after any repair)? */
     moduleJudge?: "pass" | "fail";
     /** Number of bounded repairs the module sub-gate spent on this worker (0 = passed first try). */
     repairs?: number;
-    /** design/74 Slice 6: the terminal checkpoint gate when a worker is still SUSPENDED (the leader auto-resumed
+    /** [ref] Slice 6: the terminal checkpoint gate when a worker is still SUSPENDED (the leader auto-resumed
      *  it up to its bound but it didn't fully complete — e.g. the overall deadline hit or the slice cap). Present
      *  ⇒ resumable: the operator/leader can escalate (more budget) or accept the belt-diff partial progress. */
     checkpointGate?: TaskResult["checkpointGate"];
-    /** design/74 Slice 6: the worker's terminal `TaskResult.errorCode` (e.g. `limits.max_cost_exceeded` on an
+    /** [ref] Slice 6: the worker's terminal `TaskResult.errorCode` (e.g. `limits.max_cost_exceeded` on an
      *  exhausted resume, `limits.max_turns_exceeded` — core 5.8.0 码名轴) — surfaced for /v1/leader observability. */
     errorCode?: TaskResult["errorCode"];
     /** LEADER-REPAIRLOOP-INTEGRATION §10.6 (THE push chokepoint): the `runRepairLoop` terminal a single-agent
@@ -95,7 +95,7 @@ export interface FanOutOptions {
      *  cancelled worker actually aborts (else the overall-timeout's `await work` can never unblock). Like the default
      *  path it need not catch — runOne maps a throw to failed/timeout. */
     runWorker?: (st: FanOutSubtask, signal: AbortSignal) => Promise<WorkerReport>;
-    /** Replan-lite C4 (design/68 §6): when a worker settles SUSPENDED, immediately cancelAll the rest — the
+    /** Replan-lite C4 ([ref] §6): when a worker settles SUSPENDED, immediately cancelAll the rest — the
      *  suspended worker itself has already settled (its stream is deregistered), so the cancel sweep cannot
      *  touch its checkpoint/paused env (the destroy-exemption falls out of the registration lifecycle). */
     cancelOnSuspend?: boolean;

package/dist/leader/grader-env-factory.d.ts

@@ -20,7 +20,7 @@
  * built. v1 reuses the integration sandbox (R1) + re-seeds it (R2) instead. **There is no config key that turns
  * such a factory on** — an earlier revision of this header named one and shipped a `throw`-only stub beside it,
  * but no such key ever existed in `config.ts`, so an operator following that text set an env var that did
- * nothing. Both the stub and the promise were removed (#193 车4 件3 / staleness ledger P2-9); the auto-accept
+ * nothing. Both the stub and the promise were removed ([ref] 车4 件3 / staleness ledger P2-9); the auto-accept
  * slice, when it happens, is a new design件 that lands its factory, its wiring and its knob in one batch.
  *
  * Everything here is additive + OFF by default: nothing in this file runs unless the Stage-2 seams call it behind