@sema-agent/server 7.57.0 → 7.59.0

package/USAGE.md

@@ -1285,6 +1285,8 @@ armed ⟺ 本次请求 permissionMode 是 "auto"  ∧  本部署装配了分类
 | 旋钮 | 缺省 | 语义 |
 |---|---|---|
 | `PERMISSIONS_DISABLE_AUTO_MODE` | `false`(opt-in) | CC/center/settings 键名 `permissions.disableAutoMode` 的 **env 腿**(config catalog 登记 center 键名 `permissions.disableAutoMode`,settings-schema 现无 `permissions` 域 ⇒ 目录行 `domainExists:false`):**tighten-only** 棘轮 —— `true` ⇒ 本部署每个 principal 的 `caps.autoMode` 折成 `false`(center 授予 `true` **翻不回**);未设 ⇒ 不动 caps。布尔词表(`true/false/1/0/yes/no/on/off`),词表外的值**拒启**(安全轴旋钮不许静默回默认)。目录行见 `GET /v1/config/catalog`(approval 域,security 轴) |
+| `CROSS_SESSION_INBOUND` | 未设 | 跨终端会话设计线:CC settings 键名 `crossSessionInbound` 的**部署/组织层**(引擎层形的 `managed` 层,CC `policySettings` 对位)—— 本部署对**入站跨会话消息**的治理三态:`accept` 投递 / `hold` 停在收件会话的待审队列(模型看不见、不能据此行动)/ `refuse` 本部署整体退出这条车道。🔴 **未设 ≠ `accept`**:未设 = 这一层不表态,由其余层与引擎的 mode-parity 判定决定。词表外的值**拒启**。⚠️ **生效前提**:引擎的 peer 目录席(`RunnerDeps.peerDirectory`)在场——本版**未接**该席,故本旋钮今天「就位待命」不生效(目录席到货那天零改动即生效);目录行见 `GET /v1/config/catalog`(approval 域,security 轴) |
+| `CROSS_SESSION_DIALOG_EXPIRY` | 未设(⇒ 引擎缺省 `5m`) | 同族:CC settings 键名 `dialogExpiry` 的部署层 —— 被 hold 的跨会话消息等待人审多久后按**安全缺省**结算(过期丢弃,**带回执**告知发送方,不静默吞)。词表 `60s`/`5m`/`10m`/`never`(`never` = 不设期限);未设 ⇒ 本仓**不铸键**,由引擎落它自己的缺省(不复制上游缺省值)。词表外拒启。⚠️ 生效前提同上。另注:CC 的同名键还有第二个消费面(转发到远端客户端的审批对话框停靠时长),本旋钮**今天不驱动**那一面 |
 
 **自查读面**(`GET /v1/capabilities.permissionModeAuto`,壳的 `sema doctor permissions` 消费;下例第一行是
 `intentArming:true`(与带新武装式的 core 同批提货后)的读数——server 7.57 × core 7.2.0 上无 center 的本地部署答

package/dist/approval-card.d.ts

@@ -309,6 +309,34 @@ export type RuleOffersAbsence = z.infer<typeof RuleOffersAbsenceSchema>;
  * 形不合/缺席 ⇒ 不铸键(缺席不是断言 —— 它同时覆盖「有 offers」与结构性无车道的门,core 契约逐字)。
  */
 export declare function readRuleOffersAbsence(req: unknown): RuleOffersAbsence | undefined;
+/** S-114(core 7.4.0 [ref])—— 回落卡的计数与窗。`limit` 是**闭二词**(core d.ts 逐字),两个计数是
+ *  非负整数,`autoDenyAfterMs` 是 core 契约里的 `0..2147483647` 非负整数(`0` = 本卡不武装窗:部署把
+ *  旋钮关了,或 TOTAL 档的卡按 [ref]① 恒 0 等人)。四成员**全必填**——core 的 `DenialLimitFallback` 上
+ *  没有一个可选位,所以「少一位」不是老 core 而是坏值,整键不铸(与 `readRuleEvidence` 的恰一不变量
+ *  同款判据:形不合 ⇒ 丢整键,绝不半铸一张让人误读计数的卡)。 */
+declare const DenialLimitFallbackSchema: z.ZodObject<{
+    consecutive: z.ZodNumber;
+    total: z.ZodNumber;
+    limit: z.ZodEnum<{
+        total: "total";
+        consecutive: "consecutive";
+    }>;
+    autoDenyAfterMs: z.ZodNumber;
+}, z.core.$strict>;
+export type DenialLimitFallback = z.infer<typeof DenialLimitFallbackSchema>;
+/**
+ * `AskRequest.denialLimitFallback`(core 7.4.0 [ref])的**边界窄读** —— 活卡帧与 `card_json` 的唯一铸造点
+ * (与 {@link readRuleOffersAbsence} / {@link readProbeCause} 同款分工),两面结构性同值。
+ *
+ * 四成员皆 core 铸的机器数/闭词(非内容族)⇒ **零 redact**;`.strict()` 让 core 将来加成员时本读面当场
+ * 判假、整键不铸 —— 与 `_GuardAsk` 的差集门是同一件事的两端(编译期点名 + 运行期 fail-closed),新成员
+ * 必须由人处置过才上 wire。缺席/形不合 ⇒ 不铸键(**缺席不是断言**:绝大多数 ask 根本不是回落卡)。
+ *
+ * 🔴 **echo-only**:server 不读它做任何裁决,120s 窗的执行归 core 的 resolveAsk(引擎自有 deadline,
+ * `settledBy:"timeout"` + `autoDenied:true` 由 core 盖章)。据 `autoDenyAfterMs` 在本仓自铸第二只定时器
+ * = 同一语义面两个写者(源头修复纪律),明令禁止。
+ */
+export declare function readDenialLimitFallback(req: unknown): DenialLimitFallback | undefined;
 /**
  * [ref] §3.1 的**中性投影**——呈卡面看到的全部内容,与 wire 面的既有 `ToolApprovalFrame` 解耦。
  *
@@ -379,6 +407,15 @@ export declare const ApprovalCardSchema: z.ZodObject<{
         lane_cannot_speak: "lane_cannot_speak";
         shadowed: "shadowed";
     }>>;
+    denialLimitFallback: z.ZodOptional<z.ZodObject<{
+        consecutive: z.ZodNumber;
+        total: z.ZodNumber;
+        limit: z.ZodEnum<{
+            total: "total";
+            consecutive: "consecutive";
+        }>;
+        autoDenyAfterMs: z.ZodNumber;
+    }, z.core.$strict>>;
     probeCause: z.ZodOptional<z.ZodObject<{
         code: z.ZodString;
         roots: z.ZodObject<{
@@ -478,6 +515,15 @@ export declare const ApprovalCardEnvelopeSchema: z.ZodObject<{
             lane_cannot_speak: "lane_cannot_speak";
             shadowed: "shadowed";
         }>>;
+        denialLimitFallback: z.ZodOptional<z.ZodObject<{
+            consecutive: z.ZodNumber;
+            total: z.ZodNumber;
+            limit: z.ZodEnum<{
+                total: "total";
+                consecutive: "consecutive";
+            }>;
+            autoDenyAfterMs: z.ZodNumber;
+        }, z.core.$strict>>;
         probeCause: z.ZodOptional<z.ZodObject<{
             code: z.ZodString;
             roots: z.ZodObject<{
@@ -694,4 +740,5 @@ export declare function buildApprovalPreambleSseFrames(frames: readonly Approval
     event: string;
     data: unknown;
 }>;
+export {};
 //# sourceMappingURL=approval-card.d.ts.map

package/dist/approval-card.js

@@ -226,6 +226,21 @@ export function readRuleOffersAbsence(req) {
     const parsed = RuleOffersAbsenceEnvelopeSchema.safeParse(req);
     return parsed.success ? parsed.data.ruleOffersAbsence : undefined;
 }
+const DenialLimitFallbackSchema = z
+    .object({
+    consecutive: z.number().int().nonnegative(),
+    total: z.number().int().nonnegative(),
+    limit: z.enum(["consecutive", "total"]),
+    autoDenyAfterMs: z.number().int().nonnegative().max(2147483647),
+})
+    .strict();
+const _denialLimitFallbackConformance = [true, true];
+void _denialLimitFallbackConformance;
+const DenialLimitFallbackEnvelopeSchema = z.object({ denialLimitFallback: DenialLimitFallbackSchema.optional() });
+export function readDenialLimitFallback(req) {
+    const parsed = DenialLimitFallbackEnvelopeSchema.safeParse(req);
+    return parsed.success ? parsed.data.denialLimitFallback : undefined;
+}
 export const ApprovalCardSchema = z
     .object({
     toolName: z.string().max(MAX_IDENT),
@@ -245,6 +260,7 @@ export const ApprovalCardSchema = z
     persistedRuleShadowed: z.string().max(MAX_RULE_TEXT_CHARS).optional(),
     ruleOffers: z.array(RuleOfferSchema).max(MAX_RULE_OFFERS).optional(),
     ruleOffersAbsence: RuleOffersAbsenceSchema.optional(),
+    denialLimitFallback: DenialLimitFallbackSchema.optional(),
     probeCause: ProbeCauseSchema.optional(),
     ruleEvidence: RuleEvidenceSchema.optional(),
     fromSubagent: z.literal(true).optional(),
@@ -286,6 +302,7 @@ export function buildApprovalCard(source, req, requiresRealApproval) {
     const probeCause = readProbeCause(req);
     const ruleEvidence = readRuleEvidence(req);
     const ruleOffersAbsence = readRuleOffersAbsence(req);
+    const denialLimitFallback = readDenialLimitFallback(req);
     const toolCallId = clip(source.toolCallId, MAX_IDENT);
     const sourceTaskId = clip(source.sourceTaskId, MAX_IDENT);
     const sourceAgentName = clip(source.sourceAgentName, MAX_AGENT_NAME);
@@ -307,6 +324,7 @@ export function buildApprovalCard(source, req, requiresRealApproval) {
         ...(ruleEvidence !== undefined ? { ruleEvidence } : {}),
         ...(source.ruleOffers !== undefined && source.ruleOffers.length > 0 ? { ruleOffers: source.ruleOffers.map(copyRuleOffer) } : {}),
         ...(ruleOffersAbsence !== undefined ? { ruleOffersAbsence } : {}),
+        ...(denialLimitFallback !== undefined ? { denialLimitFallback } : {}),
         ...(source.fromSubagent === true ? { fromSubagent: true } : {}),
         ...(sourceTaskId !== undefined ? { sourceTaskId } : {}),
         ...(sourceAgentName !== undefined ? { sourceAgentName } : {}),

package/dist/boot/parked-revive-gate.d.ts

@@ -71,6 +71,9 @@ export interface ParkedReviveGateDeps {
     };
     /** host 腿 cwd 占位的落地根(main.ts 的 `localRoot`;`config.localDataRoot` 优先)。 */
     readonly localRoot: string;
+    /** S-133:守卫集 `dataRoot` = boot 已铸的引擎记忆根(`memoryEngine.root`,boot/stores.ts 单一写者),不在本腿重推导
+     *  (重推导 = 第二个写者,7.59.0 重扫 codex 轮抓到 HTTP 腿 fallback 与 stores 不同源正是这一形)。`undefined` = 引擎未接。 */
+    readonly memoryEngineRoot: string | undefined;
     /** 沙箱 lane 的真 env 登记簿。缺省 = 进程内唯一那只(工厂装饰器写的同一个);测试注入自建实例。 */
     readonly slots?: SandboxPathEnvSlots;
 }

package/dist/boot/parked-revive-gate.js

@@ -10,7 +10,7 @@ function hostGateCwd(config, localRoot) {
     return join(config.localDataRoot ?? localRoot, "parked-revive-unrooted");
 }
 export function createParkedReviveInheritedGate(deps) {
-    const { config, question, approvalExemptionStore, logger, localRoot, approverSeat } = deps;
+    const { config, question, approvalExemptionStore, logger, localRoot, approverSeat, memoryEngineRoot } = deps;
     const slots = deps.slots ?? sandboxPathEnvSlots;
     return async (row, identity) => {
         const metadata = await chainMetadataOf(deps, row, identity);
@@ -33,7 +33,7 @@ export function createParkedReviveInheritedGate(deps) {
                 }
                 : {}),
         });
-        const governed = applyRuntimeGovernance({ objective: "", toolPolicy: baseline }, createDeploymentGovernanceInputs(config, pathAdjudication));
+        const governed = applyRuntimeGovernance({ objective: "", toolPolicy: baseline }, createDeploymentGovernanceInputs(config, pathAdjudication, { engineDataRoot: memoryEngineRoot }));
         return {
             parentConstraints: [
                 {

package/dist/boot/resolve-spec.js

@@ -425,7 +425,7 @@ export function createResolveSpec(ctx) {
                     logger: { warn: (event, fields) => logger.warn(event, { ...(fields ?? {}), lane: config.remoteExec?.provider }) },
                 }),
             };
-        const governedBase = applyRuntimeGovernance(spec, createDeploymentGovernanceInputs(config, pathAdjudication));
+        const governedBase = applyRuntimeGovernance(spec, createDeploymentGovernanceInputs(config, pathAdjudication, { engineDataRoot: memoryEngine?.root }));
         let governed = governedBase;
         let effectiveSettings = effMode ? withPermissionMode(parsedSettings.settings, effMode) : parsedSettings.settings;
         if (appendLessPack && effectiveSettings?.outputStyle) {

package/dist/boot/runner-deps.d.ts

@@ -154,7 +154,7 @@ export interface RunnerDepsCtx {
 }
 /** [ref] A10 留档发现②:main runner `RunnerDeps` 与 main.ts subRunner 字面量之间此前手工重复
  * 的 ~15 个键,类型标注见 {@link createSharedRunnerDeps} 头注。 */
-export type SharedRunnerDeps = Pick<RunnerDeps, "brain" | "readFace" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "delegationEntryCaps" | "models" | "roles" | "tiers" | "pricing" | "tracer" | "promptSource" | "executionEnvFactory" | "lspManager" | "backgroundAgentStore" | "mailboxStore" | "rosterStore" | "hooks" | "toolResultStore" | "hands" | "sessionPolicyStore" | "usageWindows" | "usageWindowStore" | "memoryScopeAdmission" | "deploymentMemoryScopes" | "sharedMemoryStores" | "compliancePostureResolver" | "lockedConfig" | "retentionPolicy" | "onNotice" | "mcpRevocations">;
+export type SharedRunnerDeps = Pick<RunnerDeps, "brain" | "readFace" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "delegationEntryCaps" | "crossSessionInbound" | "crossSessionDialogExpiry" | "models" | "roles" | "tiers" | "pricing" | "tracer" | "promptSource" | "executionEnvFactory" | "lspManager" | "backgroundAgentStore" | "mailboxStore" | "rosterStore" | "hooks" | "toolResultStore" | "hands" | "sessionPolicyStore" | "usageWindows" | "usageWindowStore" | "memoryScopeAdmission" | "deploymentMemoryScopes" | "sharedMemoryStores" | "compliancePostureResolver" | "lockedConfig" | "retentionPolicy" | "onNotice" | "mcpRevocations">;
 /**
  * [ref] A10 留档发现②(review 2026-07-29,[ref]§三族A 同源修补的延续):main runner 的
  * `RunnerDeps` 字面量(下方 `createRunnerDeps`)与 `main.ts` 里 subRunner 的 `new Runner({...})`
@@ -260,7 +260,7 @@ export declare function createEngineNoticeSeat(logger: {
  * 「键为 undefined」与「键缺席」对引擎逐字等价)。**不复制引擎缺省**(`roots`/`static-face`/`carry`/`open`/
  * CC parity 20/200 一个都不抄):上游改缺省之日起本仓不会成为第二份真源。
  */
-export type DeploymentPostureSeats = Pick<RunnerDeps, "readFace" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "delegationEntryCaps">;
+export type DeploymentPostureSeats = Pick<RunnerDeps, "readFace" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "delegationEntryCaps" | "crossSessionInbound" | "crossSessionDialogExpiry">;
 export declare function buildDeploymentPostureSeats(config: Pick<ServiceConfig, keyof DeploymentPostureSeats>): DeploymentPostureSeats;
 export declare function createSharedRunnerDeps(ctx: SharedRunnerDepsCtx): SharedRunnerDeps;
 export declare function createRunnerDeps(ctx: RunnerDepsCtx): RunnerDeps;

package/dist/boot/runner-deps.js

@@ -10,6 +10,7 @@ import { defaultEngineNoticeRouter } from "../trace/engine-notice-wire.js";
 import { WorkflowNotifyGate } from "../orchestration/workflow-notify-journal.js";
 import { makeLoadProjectMemory, makeProbeInstructionSources } from "../project-memory.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
+import { buildCrossSessionInboundLayers, crossSessionDialogExpiryOf } from "../cross-session-settings.js";
 export function createRunnerDepsOnAsk(toolApproval) {
     if (!toolApproval)
         return undefined;
@@ -33,6 +34,7 @@ export function createEngineNoticeSeat(logger, router = defaultEngineNoticeRoute
     return warn ? { onNotice: createEngineNoticeForwarder({ warn }, router) } : {};
 }
 export function buildDeploymentPostureSeats(config) {
+    const crossSessionLayers = buildCrossSessionInboundLayers(config);
     const seats = {
         readFace: config.readFace ? config.readFace : undefined,
         readDenyPatterns: config.readDenyPatterns ? config.readDenyPatterns : undefined,
@@ -42,6 +44,8 @@ export function buildDeploymentPostureSeats(config) {
         memoryProvenance: config.memoryProvenance ?? undefined,
         memoryCapturePolicy: config.memoryCapturePolicy ?? undefined,
         delegationEntryCaps: config.delegationEntryCaps ?? undefined,
+        crossSessionInbound: Object.keys(crossSessionLayers).length > 0 ? crossSessionLayers : undefined,
+        crossSessionDialogExpiry: crossSessionDialogExpiryOf(config),
     };
     return seats;
 }

package/dist/boot/stores.js

@@ -1,5 +1,5 @@
 import { join } from "node:path";
-import { FileBackgroundAgentStore, FileMailboxStore, FileRosterStore, FileUsageWindowStore, InMemoryUsageWindowStore } from "@sema-agent/core";
+import { FileBackgroundAgentStore, FileMailboxStore, FileRosterStore, FileUsageWindowStore, InMemoryUsageWindowStore, mailboxCrossProcessMountVerdict } from "@sema-agent/core";
 import { createMemorySyncRunner, createMemorySyncTransport } from "../memory-sync-client.js";
 import { memoryEmbedderFor } from "../plugins/memory-embedder.js";
 import { ensurePgMemoryEmbedderMetaSchema, reconcileEmbedderFingerprint } from "../plugins/memory-embedder-fingerprint.js";
@@ -20,7 +20,7 @@ import { ensurePgTaskListSchema, ensureTiDBTaskListSchema } from "../plugins/tas
 import { assertDeviceAuditRebindEventSchema, ensurePgDeviceSchema, ensureTiDBDeviceSchema } from "../plugins/device-store-sql.js";
 import { mysqlDriver, pgDriver } from "../plugins/sql-driver.js";
 import { assertCloudSnapshotBlobPosture, openStoreBackendWithFallback } from "../plugins/store-backend.js";
-import { buildMemoryRemoteLaneWarn, memoryEngineBackendFor, memoryEngineRemoteLanePosture } from "../memory-scope.js";
+import { buildMemoryRemoteLaneWarn, memoryEngineBackendFor, memoryEngineRemoteLanePosture, memoryEngineRootFor } from "../memory-scope.js";
 import { assertToolResultProvenanceSchema } from "../plugins/tool-result-store-sql.js";
 import { assertPermissionRuleApprovalSchema, assertPermissionRuleTicketSchema } from "../plugins/permission-rule-store-sql.js";
 import { assertApprovalAskRuleMaterialSchema } from "../plugins/approval-ask-store-sql.js";
@@ -168,7 +168,7 @@ export async function openStores(ctx) {
                 ...(embedder !== undefined ? { embedder } : {}),
             });
             vectorMode = pgMem.vectorMode;
-            memoryEngine = { backend: pgMem, root: join(config.localDataRoot ?? localRoot, "memory-work") };
+            memoryEngine = { backend: pgMem, root: memoryEngineRootFor(config, localRoot) };
         }
         else {
             const pool = backend?.mysqlPool();
@@ -180,7 +180,7 @@ export async function openStores(ctx) {
             memorySyncCursors = new TiDBMemorySyncStore(pool);
             const tidbMem = new TiDBMemoryEngineBackend(pool, { history: countedHistorySink(new TiDBMemoryHistoryStore(pool)) });
             vectorMode = tidbMem.vectorMode;
-            memoryEngine = { backend: tidbMem, root: join(config.localDataRoot ?? localRoot, "memory-work") };
+            memoryEngine = { backend: tidbMem, root: memoryEngineRootFor(config, localRoot) };
         }
         logger.info("memory_engine_enabled", {
             enabled: true,
@@ -299,19 +299,26 @@ export async function openStores(ctx) {
         const pgPool = backend?.pgPool?.();
         if (pgPool) {
             await ensurePgMailboxSchema(async (text, params) => pgPool.query(text, params));
-            mailboxStore = new PgMailboxStore(pgPool);
+            mailboxStore = new PgMailboxStore(pgPool, logger);
         }
         else if (mysqlPool) {
             await ensureTiDBMailboxSchema(mysqlPool);
-            mailboxStore = new TiDBMailboxStore(mysqlPool);
+            mailboxStore = new TiDBMailboxStore(mysqlPool, logger);
         }
         else if (backend?.kind === "local") {
             mailboxStore = new FileMailboxStore(config.localDataRoot ?? localRoot, {
                 onCorruptRead: (info) => logger.warn("mailbox_corrupt_read", { path: info.path, reason: info.reason }),
             });
         }
-        if (mailboxStore)
-            logger.info("mailbox_store_enabled", { backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file" });
+        if (mailboxStore) {
+            const laneVerdict = mailboxCrossProcessMountVerdict(mailboxStore);
+            logger.info("mailbox_store_enabled", {
+                backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file",
+                crossProcessSafe: mailboxStore.crossProcessSafe,
+                peerLaneMountable: laneVerdict.ok,
+                ...(laneVerdict.ok ? {} : { peerLaneRefusal: laneVerdict.code }),
+            });
+        }
     }
     let usageWindowStore;
     if (config.usageWindows) {

package/dist/config-catalog.d.ts

@@ -1,32 +1,3 @@
-/**
- * DESIGN-278 §5 S2([ref])—— 配置目录本体:`GET /v1/config/catalog` 的数据层。
- *
- * ## 形
- * 目录 = **逐 env 键**一行(分母 = 全 `src/` 生产运行时的 env 读取点;完备性由
- * `test/config-catalog.test.ts` 的 D1 双向 AST 对账门执法 —— 多一行是幽灵键、少一行是漏登记,两个方向
- * 都当场红)。每行静态登记 `{域、类型、一句话语义、staticDefault?/derivedDefaultNote?、危险轴、center
- * 联接(domain/path/优先序/时机)}`,运行期由 {@link buildConfigCatalog} 补上**本进程实算**的
- * `{envHeld、effectiveLane、effectiveValue、center.managedNow/effectiveNow/domainExists}`。
- *
- * ## 词表纪律([ref]:闭集,未知词=编译红)
- *  · 类型 {@link CATALOG_VALUE_TYPES} / 时机 {@link CATALOG_TIMINGS} / 危险轴 {@link CATALOG_DANGER_AXES}
- *    全是 `as const` 闭集;restart 片集 {@link CATALOG_RESTART_SLICES} 用 `Record<RestartSlice, true>`
- *    锁步 —— core/config-center 的片集变了,这里不改就 tsc 红。
- *  · 域 = `ServiceConfigGroups` 的九组键(类型锁步,不自铸第二份分组)。
- *
- * ## secret 纪律(设计稿 §0.5 补偿条款)
- *  `secret` 类值**永不出本模块**(只回 `{present}`);`opaque` 类(策略 JSON/公钥表/证书)回
- *  `{present, length}`;`url` 类剥 userinfo(config 实算腿与 env 原文腿同裁)。机器钉 =
- *  test/config-catalog.test.ts 的响应体 canary 扫描格 + 名字启发式兜底格。
- *
- * ## 生效时机模型(设计稿 §3:标注是「键 × 写入通道」的属性)
- *  env 腿恒 `deploy`(env 在运行期不可变;retired/无消费键标 `inert`);center 腿按域:limits 热
- *  (costQuotaWindowSec 除外 —— 显式 deferred,铸因 `cost-quota-window`)、governance 热二件、
- *  approvalRequire 走 `runtime-gates` 重启片、readFace 族 `read-face` 片且 **env-wins**(⚪ 成因 a)、
- *  models 面 **本进程实算**(tier 表在场 ⇒ restart/models-tiers,tier-less ⇒ hot)。
- *  readFace 在 settings-schema 现行 DOMAINS 里**没有域**(R-15:暂不开)⇒ `domainExists:false`,
- *  writeLanes 不含 center(⚪ 成因 b 的诚实呈现)。
- */
 import type { ServiceConfig, ServiceConfigGroups } from "./config-types.js";
 import type { ConfigKnobRecord } from "./config.js";
 import type { RestartSlice } from "./config-center/restart-signal.js";

package/dist/config-catalog.js

@@ -1,3 +1,4 @@
+import { CROSS_SESSION_INBOUND_SETTINGS, CROSS_SESSION_DIALOG_EXPIRY_VALUES } from "@sema-agent/core";
 export const CATALOG_VALUE_TYPES = ["boolean", "number", "string", "enum", "csv", "json", "path", "url", "secret", "opaque"];
 export const CATALOG_TIMINGS = ["hot", "restart", "deploy", "inert"];
 export const CATALOG_DANGER_AXES = ["security", "billing", "data"];
@@ -84,6 +85,8 @@ export const CONFIG_CATALOG = [
     r("CONFIG_REQUIRE_ROSTER", "integrations", "boolean", "远程 registry 非 dryRun 时布防 ready 门:roster 未落地 ⇒ 计费提交 503 + /health ready:false(严格 'true')", { staticDefault: "false" }),
     r("CORS_ORIGIN", "auth", "csv", "CORS 白名单(单值 v1 兼容回显;多值按请求 Origin 匹配 + Vary;未设=无 CORS 面)", { danger: SEC, configKey: "corsOrigins" }),
     r("COST_QUOTA_WINDOW_SEC", "limitsHttp", "number", "per-principal 成本配额窗长(秒);SQL 腿窗长进桶主键 ⇒ center 腿显式 deferred(重启生效)", { staticDefault: "86400", danger: BILL, configKey: "costQuotaWindowSec", center: cLimits("costQuotaWindowSec", { timing: "restart", restartReason: "cost-quota-window" }) }),
+    r("CROSS_SESSION_DIALOG_EXPIRY", "approval", "enum", "held 跨会话消息等待人审的期限(CC settings 键名 dialogExpiry;未设=不铸键,引擎自落缺省 5m;词表外拒启)", { danger: SEC, enumValues: [...CROSS_SESSION_DIALOG_EXPIRY_VALUES], configKey: "crossSessionDialogExpiry", derivedDefaultNote: "缺席 ⇒ 不铸键,core 自缺省 5m", resolve: (c) => c.crossSessionDialogExpiry ?? null }),
+    r("CROSS_SESSION_INBOUND", "approval", "enum", "入站跨会话消息的部署/组织层治理(CC settings 键名 crossSessionInbound 的 managed 层;未设=本层不表态≠accept;词表外拒启)", { danger: SEC, enumValues: [...CROSS_SESSION_INBOUND_SETTINGS], configKey: "crossSessionInbound", derivedDefaultNote: "缺席 ⇒ managed 层不设,由其余层与 mode-parity 决定", resolve: (c) => c.crossSessionInbound ?? null }),
     r("DB_BACKEND", "store", "enum", "store 后端引擎选择(mysql 兼容/pg/本机文件店/纯内存)", { enumValues: ["mysql", "pg", "local", "memory"], danger: DATA, derivedDefaultNote: "裸 boot ⇒ local(多租户裸 boot ⇒ memory + notice);有 SQL 信号 ⇒ mysql", configKey: "dbBackend", resolve: (c) => c.dbBackend }),
     r("DB_QUERY_TIMEOUT_MS", "store", "number", "per-query DB 超时(ms;坏值回默认姿态+warn,绝不 NaN 进 driver)", { derivedDefaultNote: "缺席 ⇒ 池级不设/计数族 30s(按引擎)", configKey: "dbQueryTimeoutMs" }),
     r("DEFAULT_SCENARIO", "integrations", "string", "出厂缺省场景(编码产品出厂态;通用中性 persona 用 default 显式选回)", { staticDefault: "code", configKey: "defaultScenario" }),

package/dist/config-center/http-client.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { readEffectiveWire, PrincipalCapsWire } from "@sema-agent/settings-schema";
 import { centerPromptsFromEffective } from "../prompts-domain-validate.js";
+import { foldEffectiveReadWarning } from "./read-warnings.js";
 export async function fetchEffective(baseUrl, token, etag, fetchImpl = fetch, worker) {
     const scheme = new URL(baseUrl).protocol;
     if (scheme !== "http:" && scheme !== "https:")
@@ -21,17 +22,12 @@ export async function fetchEffective(baseUrl, token, etag, fetchImpl = fetch, wo
         delete wire.prompts;
     else
         wire.prompts = centerPrompts;
-    const domainErrors = warnings
-        .map((w) => w.kind === "domain-defaulted"
-        ? { domain: w.domain, error: (w.error instanceof Error ? w.error.message : String(w.error)).slice(0, 600) }
-        : w.kind === "unknown-keys-dropped"
-            ? { domain: w.domain, error: `unknown keys dropped by domain schema: ${w.keys.join(", ")}`.slice(0, 600) }
-            : w.kind === "unknown-keys-carried"
-                ? { domain: w.domain, error: `unknown keys carried to consumer (spelling?): ${w.keys.join(", ")}`.slice(0, 600) }
-                : w.kind === "unread-config-file"
-                    ? { domain: w.domain ?? "config.d", error: `unread config file ${w.file} (${w.why})`.slice(0, 600) }
-                    : undefined)
-        .filter((r) => r !== undefined);
+    const domainErrors = [];
+    for (const w of warnings) {
+        const f = foldEffectiveReadWarning(w);
+        if (f !== null)
+            domainErrors.push(f);
+    }
     const effective = wire;
     return { effective, etag: res.headers.get("etag") ?? undefined, ...(domainErrors.length > 0 ? { domainErrors } : {}) };
 }

package/dist/config-center/read-warnings.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `EffectiveReadWarning` → 候选门口径的**单点**折叠(本地腿 `config-provider.ts` 与远程腿 `http-client.ts` 共用;
+ * 两腿各抄一份映射正是漂移的成因——远程腿曾漏掉一次改动,版本超前的 center 多一个字段就整份远程 refresh 整拒)。
+ *
+ * **律只有一条:未知键 = 候选门错误,零特例。** 「别的写者按契约放的扩展键」(壳写在 models 条目上的 `sema*`)
+ * 不是本函数要分辨的事——那由 settings-schema 的 `EXTENSION_NAMESPACES` 在**声明处**说清(登记的键既不点名也不计数,
+ * 1.5.0 起);到了这里的每一个键都是「写了没生效」的拼错或越界,与 domain-defaulted 同级。此前本仓在下游按 kind/
+ * 按域/按键路径闭集/按 64 满额四层猜意图,每层都被下一轮复审打穿——意图只能在声明处说,消费方不猜。
+ *
+ * 截断:schema 的键列表有界(64),超界带 `truncatedFrom`(真实总数)——文案如实带上,消费方永远不把有界列表当穷举。
+ * 词表是闭集:`switch` 穷举 `kind`,schema 加新 kind 这里编译红,不会静默漏臂。
+ */
+import type { EffectiveReadWarning } from "@sema-agent/settings-schema";
+export type FoldedReadWarning = {
+    readonly domain: string;
+    readonly error: string;
+};
+/** null = 不入诊断面(`hosts-grandfathered`:值已被收编接受,与本地店同口径)。 */
+export declare function foldEffectiveReadWarning(w: EffectiveReadWarning): FoldedReadWarning | null;
+//# sourceMappingURL=read-warnings.d.ts.map

package/dist/config-center/read-warnings.js

@@ -0,0 +1,36 @@
+const MAX_ERROR_CHARS = 600;
+const cap = (s) => s.slice(0, MAX_ERROR_CHARS);
+const keyList = (prefix, keys, truncatedFrom) => {
+    const total = truncatedFrom ?? keys.length;
+    const budget = MAX_ERROR_CHARS - prefix.length;
+    const shown = [];
+    let used = 0;
+    const suffixFor = (n) => (n < total ? ` (+${total - n} more, list truncated)` : "");
+    for (const k of keys) {
+        const piece = (shown.length > 0 ? ", " : "") + k;
+        if (used + piece.length + suffixFor(shown.length + 1).length > budget)
+            break;
+        shown.push(k);
+        used += piece.length;
+    }
+    return `${prefix}${shown.join(", ")}${suffixFor(shown.length)}`;
+};
+export function foldEffectiveReadWarning(w) {
+    switch (w.kind) {
+        case "hosts-grandfathered":
+            return null;
+        case "domain-defaulted":
+            return { domain: w.domain, error: cap(w.error instanceof Error ? w.error.message : String(w.error)) };
+        case "unknown-keys-dropped":
+            return { domain: w.domain, error: keyList("unknown keys dropped by domain schema: ", w.keys, w.truncatedFrom) };
+        case "unknown-keys-carried":
+            return { domain: w.domain, error: keyList("unknown keys carried to consumer (spelling?): ", w.keys, w.truncatedFrom) };
+        case "unread-config-file":
+            return { domain: w.domain ?? "config.d", error: cap(`unread config file ${w.file} (${w.why})`) };
+        default: {
+            const never = w;
+            throw new Error(`unhandled EffectiveReadWarning kind: ${JSON.stringify(never)}`);
+        }
+    }
+}
+//# sourceMappingURL=read-warnings.js.map

package/dist/config-provider.d.ts

@@ -7,6 +7,9 @@ import { fetchEffective as remoteFetchEffective, fetchSkillContent as remoteFetc
  *  连坐全包回落 env——坏域按该域 schema default 落+错误单列,好域照常生效;caller(main.ts)对每条打
  *  per-domain warn 点名坏域。gate 域(governance/rosters/…)坏文件 tolerant 仍 throw(READ 容错不放宽
  *  gate fail-loud,registry-core 半场精化)——那条路走既有的整包 catch。 */
+/** 壳写在 `config.d/models.json` 条目上的装饰键(`sema*`)自 settings-schema 1.5.0 起是**声明过的扩展命名空间**
+ *  (`EXTENSION_NAMESPACES`):schema 照旧 strip、但不再报「未知键」,所以本函数收到的每一个未知键都是拼错/越界 ⇒ 候选门错误。
+ *  此前把这类键当「通知」放行的整套下游机制(域豁免/键路径闭集/满额特判/单独的通知面)已全部撤回——意图在声明处说,消费方不猜。 */
 export type FetchEffectiveResult = {
     effective: EffectiveConfig;
     etag?: string;

package/dist/config-provider.js

@@ -1,4 +1,5 @@
 import { createHmac, randomBytes } from "node:crypto";
+import { foldEffectiveReadWarning } from "./config-center/read-warnings.js";
 import { FileConfigStore } from "@sema-agent/settings-schema/node";
 import { findSkillContent, skillContentHash, refIntegrityIssues, siblingResolver, } from "@sema-agent/settings-schema";
 import { redactSecrets } from "./trace/redact.js";
@@ -62,14 +63,9 @@ export class LocalConfigProvider {
         const store = this.#injectedStore ??
             new FileConfigStore(this.root, {
                 onWarning: (w) => {
-                    if (w.kind === "domain-defaulted")
-                        parseWarnings.push({ domain: w.domain, error: w.error instanceof Error ? w.error.message : String(w.error) });
-                    else if (w.kind === "unknown-keys-dropped")
-                        parseWarnings.push({ domain: w.domain, error: `unknown keys dropped by domain schema: ${w.keys.join(", ")}` });
-                    else if (w.kind === "unknown-keys-carried")
-                        parseWarnings.push({ domain: w.domain, error: `unknown keys carried to consumer (spelling?): ${w.keys.join(", ")}` });
-                    else if (w.kind === "unread-config-file")
-                        parseWarnings.push({ domain: w.domain ?? "config.d", error: `unread config file ${w.file} (${w.why})` });
+                    const f = foldEffectiveReadWarning(w);
+                    if (f !== null)
+                        parseWarnings.push(f);
                 },
             });
         const { effective: eff, domainErrors } = await store.getEffective({ tolerant: true });

package/dist/config-types.d.ts

@@ -6,7 +6,7 @@
  *  compiling unchanged. All imports below are top-level `import type` (erased — never a load edge,
  *  see test/module-cycle-gate.test.ts header on verbatimModuleSyntax). */
 import type { SealedKeyPoison } from "./sealed-key.js";
-import type { A2aServerSpec, CompliancePosture, FileHistoryRetentionPolicy, LockedKey, McpServerSpec, Model, ModelRoles, RetentionPolicy } from "@sema-agent/core";
+import type { A2aServerSpec, CompliancePosture, CrossSessionDialogExpiry, CrossSessionInboundSetting, FileHistoryRetentionPolicy, LockedKey, McpServerSpec, Model, ModelRoles, RetentionPolicy } from "@sema-agent/core";
 import type { ApprovalHmacKey, PrincipalJwtKey } from "./auth-keys.js";
 import type { ElicitationThrottle } from "./elicitation.js";
 import type { QuestionThrottle } from "./question.js";
@@ -1299,6 +1299,16 @@ export interface ServiceConfigFlat {
      *  「缺席=不阻」⇒ 壳发 `permissionMode:"auto"` 即武装)。词表外的值 boot 拒启(安全轴旋钮不许静默回默认)。
      *  合成点 = `boot/runtime-caps.ts` 最外层(applyLocalAutoModeDeny);读面 = `/v1/capabilities.permissionModeAuto`。 */
     permissionsDisableAutoMode: boolean;
+    /** S-111([ref] §4.4)—— CC `settings.crossSessionInbound` 的**部署/组织层**(引擎层形的 `managed` 层,
+     *  CC `policySettings` 对位):本部署对入站跨会话消息的治理三态。`accept` 投递 / `hold` 停在收件会话的待审
+     *  队列 / `refuse` 整体退出车道。**未设 = 本层不设**(不是 accept):引擎读作「managed 层未表态」,由其余层
+     *  与 mode-parity 决定。词表外的值 boot 拒启(保护型旋钮不许静默回默认)。
+     *  ⚠️ 供层点 = `cross-session-settings.ts`,生效前提 = 引擎的 peer 目录席在场(座缺席 ⇒ 整条车道不挂)。 */
+    crossSessionInbound?: CrossSessionInboundSetting;
+    /** S-111 —— CC `settings.dialogExpiry` 的部署层:held 跨会话消息等待人审多久后按安全缺省结算(带回执过期,
+     *  不静默吞)。`"never"` = 不设期限。**未设 ⇒ 不铸键**,由引擎落它自己的缺省(`"5m"`)——本仓不复制上游
+     *  缺省值。词表外 boot 拒启。⚠️ CC 同名键还有第二个消费面(远端审批对话框停靠时长),本旋钮今天不驱动它。 */
+    crossSessionDialogExpiry?: CrossSessionDialogExpiry;
     /** [ref]④ defer face (EXPERIMENTAL, default OFF): mark the default scenario's LONG-TAIL first-party tools
      *  (today = SelectEnvironment only) `defer:true` (core tool-disclosure: the model sees a placeholder until it
      *  ToolSearch-loads the schema). Assessment says the win is marginal for us (spec.tools total ≈4.2k tokens, of
@@ -1628,7 +1638,7 @@ export type ServiceStoreConfig = Pick<ServiceConfigFlat, "sessionBackend" | "ses
 export type ServiceModelPlaneConfig = Pick<ServiceConfigFlat, "gatewayBaseUrl" | "gatewayApiKey" | "gatewayFallbackUrls" | "gatewayMaxRetries" | "anthropic" | "resilience" | "model" | "models" | "modelApiKeyEnv" | "modelApiKeys" | "modelQuotaWeights" | "tiers" | "projects" | "roles" | "atModelAllowlist" | "cascadeLadder" | "degrade">;
 /** 组:approval(审批 / HITL 门)。`directDoorActive` 无 env 解析腿(装配层三域合取的产物),但语义上
  *  就是本组的门状态,故进组;`parseApprovalDomain` 的返回类型相应是 `Omit<…, "directDoorActive">`。 */
-export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalHmacKeys" | "durableApproval" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "resourceSuspendTotalTokens" | "resourceSuspendTotalBudgetUsd" | "resourceSuspendMaxSlices" | "askQuestionEnabled" | "questionThrottle" | "toolApprovalEnabled" | "permissionRulesEnabled" | "permissionRulesEnabledExplicit" | "streamAskWindowMarginMs" | "streamApproval" | "unattendedApprovalPolicy" | "mcpElicitation" | "sensitiveWritePatterns" | "manualModeShellGate" | "permissionsDisableAutoMode">;
+export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalHmacKeys" | "durableApproval" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "resourceSuspendTotalTokens" | "resourceSuspendTotalBudgetUsd" | "resourceSuspendMaxSlices" | "askQuestionEnabled" | "questionThrottle" | "toolApprovalEnabled" | "permissionRulesEnabled" | "permissionRulesEnabledExplicit" | "streamAskWindowMarginMs" | "streamApproval" | "unattendedApprovalPolicy" | "mcpElicitation" | "sensitiveWritePatterns" | "manualModeShellGate" | "permissionsDisableAutoMode" | "crossSessionInbound" | "crossSessionDialogExpiry">;
 /** 组:memory(记忆面 + TOC 同步腿)。 */
 export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled" | "memoryEngineDir" | "memoryEngineRemoteLaneAllowed" | "memoryEngineBackend" | "memoryScope" | "memoryPersistenceCapable" | "memorySync" | "memoryEmbedder" | "memoryOrgAdmissionMode" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "memoryConsolidationDriver" | "memoryOrgDirectoryJson" | "memoryOrgGrantTtlMs" | "memoryOrgUnavailableBackoffMs" | "projectMemoryEnabled" | "syncImportLeaseStaleSec">;
 /** 组:auth(鉴权 / 身份 / 治理棒)。`commandPolicy` 只有 sema-registry 腿(无 env 标量形),故 env 解析

package/dist/config.js

@@ -2,7 +2,7 @@ import { readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { BUILTIN_COMPLIANCE_DENIES, COMPLIANCE_CAPABILITIES, compileReadDeny, resolveReadDenyBuiltins, CODE_AGENT_PROMPT, formatUserScope, PROTOCOL_TABLE, protocolOf, RECOMMENDED_SENSITIVE_PATTERNS, RETIRED_TOOL_NAMES, resolveFileHistoryRetention, resolveLockedKeys, validatePermissionRules } from "@sema-agent/core";
+import { BUILTIN_COMPLIANCE_DENIES, COMPLIANCE_CAPABILITIES, CROSS_SESSION_INBOUND_SETTINGS, CROSS_SESSION_DIALOG_EXPIRY_VALUES, compileReadDeny, resolveReadDenyBuiltins, CODE_AGENT_PROMPT, formatUserScope, PROTOCOL_TABLE, protocolOf, RECOMMENDED_SENSITIVE_PATTERNS, RETIRED_TOOL_NAMES, resolveFileHistoryRetention, resolveLockedKeys, validatePermissionRules } from "@sema-agent/core";
 import { ROSTER_PRIMARY_ROLES, ROSTER_CHEAP_ROLES } from "@sema-agent/settings-schema";
 import { parseApprovalHmacKeys, parsePrincipalJwks } from "./auth-keys.js";
 import { DEFAULT_ELICITATION_THROTTLE } from "./elicitation.js";
@@ -420,6 +420,15 @@ function enumEnv(name, fallback, allowed) {
         throw new Error(`env ${name}="${v}" must be one of: ${allowed.join(", ")}`);
     return v;
 }
+function optionalEnumKey(key, envName, raw, allowed) {
+    if (raw === undefined || raw === "")
+        return {};
+    if (!allowed.includes(raw)) {
+        throw new Error(`env ${envName}="${raw.slice(0, 120)}" must be one of: ${allowed.join(", ")} — or leave it UNSET to say nothing on this layer. ` +
+            `Refusing to boot rather than reading a misspelled value as "unset": that runs the deployment with NO policy on this axis while the operator believes one is configured`);
+    }
+    return { [key]: raw };
+}
 function headerNameEnv(name, fallback) {
     const v = env(name, fallback);
     if (!/^[A-Za-z0-9_-]+$/.test(v))
@@ -980,6 +989,8 @@ function parseApprovalDomain(ctx) {
                 `Refusing to boot rather than treating a misspelled value as "unset": that silently ran the deployment with NO shell gate while the operator believed one was configured`);
         })(process.env.MANUAL_MODE_SHELL_GATE),
         permissionsDisableAutoMode: boolEnv("PERMISSIONS_DISABLE_AUTO_MODE", false),
+        ...optionalEnumKey("crossSessionInbound", "CROSS_SESSION_INBOUND", process.env.CROSS_SESSION_INBOUND, CROSS_SESSION_INBOUND_SETTINGS),
+        ...optionalEnumKey("crossSessionDialogExpiry", "CROSS_SESSION_DIALOG_EXPIRY", process.env.CROSS_SESSION_DIALOG_EXPIRY, CROSS_SESSION_DIALOG_EXPIRY_VALUES),
         mcpElicitation: {
             enabled: boolEnv("MCP_ELICITATION_ENABLED", false),
             throttle: {
@@ -1792,7 +1803,7 @@ const APPROVAL_GROUP_KEYS = [
     "approvalRequire", "approvalDeny", "approvalTimeoutSec", "approvalAutoBudget", "approvalNeverAuto",
     "approvalHmacKeys", "durableApproval", "directApprovalDoor", "directDoorActive", "resourceSuspend",
     "resourceSuspendTtlSec", "resourceSuspendTotalTokens", "resourceSuspendTotalBudgetUsd", "resourceSuspendMaxSlices", "askQuestionEnabled", "questionThrottle", "toolApprovalEnabled", "permissionRulesEnabled", "permissionRulesEnabledExplicit", "streamAskWindowMarginMs", "streamApproval", "unattendedApprovalPolicy", "mcpElicitation",
-    "sensitiveWritePatterns", "manualModeShellGate", "permissionsDisableAutoMode",
+    "sensitiveWritePatterns", "manualModeShellGate", "permissionsDisableAutoMode", "crossSessionInbound", "crossSessionDialogExpiry",
 ];
 const MEMORY_GROUP_KEYS = [
     "memoryEngineEnabled", "memoryEngineDir", "memoryEngineRemoteLaneAllowed", "memoryEngineBackend", "memoryScope",

package/dist/cross-session-settings.d.ts

@@ -0,0 +1,70 @@
+/**
+ * S-111 件③ —— 跨会话入站治理的**三层供给**([ref] §4.4)。
+ *
+ * 分工(单一属主):**判定归引擎**(`resolveCrossSessionInboundSetting` 的层次收紧 + `judgeCrossSessionInbound`
+ * 的 mode-parity 与 hold 因由,全在 core 的纯函数里);**本仓只供层**。本文件不判、不折、不比较秩——
+ * 它只回答一个问题:「managed / user / repo 这三层,本部署各自的值从哪里来?」
+ *
+ * ## 三层来源(逐层如实,缺席也点名)
+ *
+ * | 层 | 引擎语义(CC 对位) | 本仓的源 | 今日状态 |
+ * |---|---|---|---|
+ * | `managed` | `policySettings`(组织/部署强制层) | `CROSS_SESSION_INBOUND` 部署旋钮 | **已接线** |
+ * | `user` | `userSettings`/`flagSettings`(用户自己的层) | `body.settings.crossSessionInbound` | **缺席**,见下 |
+ * | `repo` | `localSettings`/`projectSettings`(仓库层) | 本服务没有项目层 settings 源 | **缺席** |
+ *
+ * ### `user` 层为什么今天缺席(诚实面,不是遗漏)
+ *
+ * 引擎的座位 `RunnerDeps.crossSessionInbound` 是**部署级**的(一个 Runner 单例,getter 无会话上下文),
+ * 而 `crossSessionInbound` 在 CC 里是**每会话**的 settings 值。本服务是「一个 Runner × 多会话」的宿主:
+ * 把某一次提交的 `body.settings.crossSessionInbound` 塞进部署级座位,等于让 A 会话的设置去治理 B 会话的
+ * 排水——比不接线更糟,且是静默的。可选的补法只有两条,都不在本件射程内:
+ *   (a) 引擎开一个**每任务**座(形如既有的 `TaskSpec.autoModeRequested` 意图座)——上游诉求,已留档;
+ *   (b) 本仓用 per-run 异步上下文托住层,并保证**每一条** run 腿都建立该上下文——漏一条腿 =
+ *       用户设的 `refuse` 静默失效 = 安全轴 fail-open,不许半接。
+ * 在 (a)/(b) 落地之前,提交面对这两个键**明拒**(`TASK_SETTINGS_UNSUPPORTED_KEYS`,400 体 `unsupportedKeys`
+ * 逐字列名),而不是「受理但不执行」——在保护型配置上那是静默的假安全;宽容层(RESUME 重放)结构上不读它们。
+ *
+ * ### 另一件如实:整条车道今日未挂
+ *
+ * 两个座位在引擎侧都**以 `RunnerDeps.peerDirectory` 在场为前提**(座缺席 ⇒ 跨会话车道整条不挂,
+ * 每个面与 pre-385 构建逐字节相同)。本仓的 peer 目录席位是另一件欠账,故本文件铸出的层今天是
+ * **就位待命**而非生效中。这不改变供层的正确性:目录席到货那天零改动即生效。
+ */
+import type { CrossSessionDialogExpiry, CrossSessionInboundSetting, CrossSessionInboundSettingLayers } from "@sema-agent/core";
+/** 引擎层形的层名 —— 从 core 的类型上取,**引擎加一层 = 本文件编译错**(下面两处闭集都锁在这个联合上)。 */
+export type CrossSessionInboundLayerName = keyof CrossSessionInboundSettingLayers;
+/** 层名的运行时闭集(与类型同源:表的键即闭集,表不全 = 编译错)。 */
+export declare const CROSS_SESSION_INBOUND_LAYER_NAMES: readonly ["managed", "user", "repo"];
+export interface CrossSessionInboundLayerSource {
+    /** 这一层的值在本仓从哪里来(缺席的层写清「为什么没有源」,不留空)。 */
+    readonly source: string;
+    /** 今天真的接线了吗。`false` = 本仓恒不铸这一层的键(引擎读作「该层未设」)。 */
+    readonly wired: boolean;
+}
+/**
+ * **三层来源登记表** —— 头注那张表的机器可读形,同时是 {@link buildCrossSessionInboundLayers} 的驱动表。
+ * 一处改、两处同步:把某层翻 `wired: true` 而不给取值臂,构造时**响亮抛**(见下),不会静默铸空层。
+ */
+export declare const CROSS_SESSION_INBOUND_LAYER_SOURCES: Record<CrossSessionInboundLayerName, CrossSessionInboundLayerSource>;
+/** 本文件读的部署配置切片(与 `ServiceConfig` 的两个可选键同名同形)。 */
+export interface CrossSessionSettingsConfig {
+    crossSessionInbound?: CrossSessionInboundSetting;
+    crossSessionDialogExpiry?: CrossSessionDialogExpiry;
+}
+/**
+ * 按 {@link CROSS_SESSION_INBOUND_LAYER_SOURCES} 铸引擎层形。
+ *
+ * 纯数据出参(`build*` 命名律);未接线的层**恒不铸键** —— 引擎把缺席读作「该层未设」,与铸一个
+ * `undefined` 值不同(后者会让层次解析多走一趟无谓的读)。
+ */
+export declare function buildCrossSessionInboundLayers(cfg: CrossSessionSettingsConfig): CrossSessionInboundSettingLayers;
+/**
+ * 部署级 `dialogExpiry`(held 跨会话消息等待人审的期限)。未设 ⇒ **不铸键**,由引擎落它自己的缺省
+ * (`CROSS_SESSION_DIALOG_EXPIRY_DEFAULT` = `"5m"`)—— 本仓不复制上游缺省值,免得两处各写一个数。
+ *
+ * ⚠️ 同名 CC 键还有**第二个**消费面(转发到远端客户端的审批对话框停靠时长)。本函数只答跨会话这一面;
+ * 停靠面的接线是另一件,今天两者不共享这一个旋钮,发布面如实说明。
+ */
+export declare function crossSessionDialogExpiryOf(cfg: CrossSessionSettingsConfig): CrossSessionDialogExpiry | undefined;
+//# sourceMappingURL=cross-session-settings.d.ts.map