@sema-agent/server 7.67.0 → 7.69.0

package/dist/config-center/read-face.js

@@ -1,10 +1,11 @@
-import { compileReadDeny, resolveReadDenyBuiltins } from "@sema-agent/core";
+import { compileReadDeny, isSwappableDepSeat, resolveReadDenyBuiltins } from "@sema-agent/core";
 const KEY_MAP = [
     { centerKey: "face", cfgKey: "readFace", envHolds: (c) => c.readFaceSource === "env" },
     { centerKey: "denyPatterns", cfgKey: "readDenyPatterns", envHolds: (c) => c.readDenyPatterns !== undefined },
     { centerKey: "denyBuiltinTiers", cfgKey: "readDenyBuiltinTiers", envHolds: (c) => c.readDenyBuiltinTiers !== undefined },
     { centerKey: "denyBuiltinExclude", cfgKey: "readDenyBuiltinExclude", envHolds: (c) => c.readDenyBuiltinExclude !== undefined },
 ];
+export const CENTER_READ_FACE_LIVE_KEYS = new Set(KEY_MAP.filter((r) => isSwappableDepSeat(r.cfgKey)).map((r) => r.centerKey));
 class ReadFaceDomainError extends Error {
 }
 function normalizeDenyPatterns(raw) {
@@ -42,17 +43,27 @@ function normalizeNameList(field, raw) {
         return n.trim();
     });
 }
-export function applyCenterReadFace(config, eff, logger) {
+export function applyCenterReadFace(config, eff, logger, apply = { phase: "boot" }) {
     const envHeldKeys = KEY_MAP.filter((r) => r.envHolds(config)).map((r) => r.centerKey);
+    const faceBefore = config.readFace;
+    const report = () => ({ envHeld: envHeldKeys, faceChanged: config.readFace !== faceBefore });
+    const revertFaceToBaseline = () => {
+        if (apply.phase !== "live")
+            return;
+        config.readFace = apply.baseline.readFace;
+        config.readFaceSource = apply.baseline.readFaceSource;
+    };
     const domain = eff.readFace;
-    if (domain === undefined || domain === null)
-        return envHeldKeys;
+    if (domain === undefined || domain === null) {
+        revertFaceToBaseline();
+        return report();
+    }
     if (typeof domain !== "object" || Array.isArray(domain)) {
         logger?.warn("sema_registry_read_face_invalid", {
             detail: `published readFace domain must be an object with optional {face,denyPatterns,denyBuiltinTiers,denyBuiltinExclude} — got ${Array.isArray(domain) ? "array" : typeof domain}`,
             kept: "the deployment's env READ-face posture is unchanged (refusing a malformed domain WHOLE — a half-applied read-containment posture is worse than none)",
         });
-        return envHeldKeys;
+        return report();
     }
     const d = domain;
     const envHeld = KEY_MAP.filter((r) => d[r.centerKey] !== undefined && r.envHolds(config)).map((r) => `${r.cfgKey} (readFace.${r.centerKey})`);
@@ -83,18 +94,23 @@ export function applyCenterReadFace(config, eff, logger) {
             detail: e instanceof Error ? e.message : String(e),
             kept: "the deployment's env READ-face posture is unchanged (refusing the readFace domain WHOLE — applying half of a read-containment posture would read as 'policy landed' while part of it silently did not)",
         });
-        return envHeldKeys;
+        return report();
     }
     if (staged.readFace !== undefined) {
         config.readFace = staged.readFace;
         config.readFaceSource = "center";
     }
-    if (staged.readDenyPatterns !== undefined)
-        config.readDenyPatterns = staged.readDenyPatterns;
-    if (staged.readDenyBuiltinTiers !== undefined)
-        config.readDenyBuiltinTiers = staged.readDenyBuiltinTiers;
-    if (staged.readDenyBuiltinExclude !== undefined)
-        config.readDenyBuiltinExclude = staged.readDenyBuiltinExclude;
+    else {
+        revertFaceToBaseline();
+    }
+    if (apply.phase === "boot") {
+        if (staged.readDenyPatterns !== undefined)
+            config.readDenyPatterns = staged.readDenyPatterns;
+        if (staged.readDenyBuiltinTiers !== undefined)
+            config.readDenyBuiltinTiers = staged.readDenyBuiltinTiers;
+        if (staged.readDenyBuiltinExclude !== undefined)
+            config.readDenyBuiltinExclude = staged.readDenyBuiltinExclude;
+    }
     if (envHeld.length > 0) {
         logger?.warn("sema_registry_read_face_env_wins", {
             keys: envHeld,
@@ -103,11 +119,13 @@ export function applyCenterReadFace(config, eff, logger) {
     }
     if (Object.keys(staged).length > 0) {
         logger?.info("sema_registry_read_face", {
-            applied: Object.keys(staged),
+            applied: Object.keys(staged).filter((k) => apply.phase === "boot" || KEY_MAP.some((r) => r.cfgKey === k && CENTER_READ_FACE_LIVE_KEYS.has(r.centerKey))),
             ...(staged.readFace !== undefined ? { face: staged.readFace } : {}),
-            note: "restart-to-apply — these keys are captured when the runner deps are assembled at boot",
+            note: apply.phase === "boot"
+                ? "boot phase — every seat still bakes into the runner deps that are about to be assembled"
+                : "live phase — the read FACE is hot-swapped into every boot Runner (core swapDeps seat); the deny seats stay boot-baked and keep asking for the `read-face` restart slice",
         });
     }
-    return envHeldKeys;
+    return report();
 }
 //# sourceMappingURL=read-face.js.map

package/dist/config-center/restart-signal.js

@@ -1,5 +1,6 @@
 import { resolveActiveTiers } from "@sema-agent/settings-schema";
 import { resolveDefaultModelName } from "./apply-effective.js";
+import { CENTER_READ_FACE_LIVE_KEYS } from "./read-face.js";
 const RESTART_SLICES = ["skills", "mcp", "a2a", "scenarios", "runtime-gates", "models-tiers", "degrade-route", "read-face"];
 export function stableStringify(v) {
     if (v === null || typeof v !== "object")
@@ -55,7 +56,7 @@ function restartSliceValue(eff, slice, ctx) {
             if (!d)
                 return null;
             const held = new Set(ctx?.readFaceEnvHeld ?? []);
-            const view = Object.entries(d).filter(([k, v]) => !held.has(k) && v !== undefined);
+            const view = Object.entries(d).filter(([k, v]) => !held.has(k) && !CENTER_READ_FACE_LIVE_KEYS.has(k) && v !== undefined);
             return view.length > 0 ? Object.fromEntries(view) : null;
         }
         case "degrade-route": {

package/dist/config-center/types.d.ts

@@ -47,11 +47,26 @@ export interface CenterModel {
      *  记账时固化进 UsageEntry.{weightedTokens,quotaWeightAtUse} 与 lease weightedTokens 轴;改倍率只影响
      *  此后记账,不回算窗口内历史(registry types.d.ts 同句契约)。 */
     quotaWeight?: number;
-    /** [ref] L2②: per-model declarative thinking config (center roster). defaultThinking = this model's DEFAULT
-     *  tier (resolution chain spec.thinking ?? role.thinking ?? model.defaultThinking); reasoningEffortLevels (openai
-     *  endpoints) = tiers the endpoint accepts. Validated against core's ThinkingLevel in toModel; "off" is dropped. */
-    defaultThinking?: string;
-    reasoningEffortLevels?: string[];
+    /**
+     * S-188(settings-schema 1.10.0 `ModelEntry.compat`)—— 这条目录条目对 **openai-completions 线路**的
+     * 兼容声明,上 core `Model.compat`(`OpenAICompletionsCompat` 五键)。真需求 = vLLM / Qwen 类**缺省开
+     * 思考**的网关:关思考只能靠 `thinkingFormat: "qwen-chat-template"`(`chat_template_kwargs.
+     * enable_thinking=false`),而 `extraBody` 穿不过引擎的 OpenAI 保留键表。
+     *
+     * 🔴 类型是 `unknown` 而不是那个结构,**刻意的**(与 {@link CenterMcpServer.toolFaces} 逐字同姿):本类型
+     * 是两条腿的**承载形**(本地 config.d 经 settings-schema 的 `z.unknown()` 解析透明地过来、远端 /effective
+     * 是直读 JSON),判据与坏形处置的单一属主是 `model-compat.ts` 的 `readModelCompat`(`toModel` 在铸 `Model`
+     * 那一刻调它)。在承载形上先写一个结构,等于把同一张判据表抄成两份(而其中一份没有执行力)。
+     *
+     * ⚠️ 前身两键 `defaultThinking` / `reasoningEffortLevels` 已随本件删除:它们从来没有声明面 ——
+     * settings-schema 的 `ModelEntry` 里没有这两个键,**两条腿**(本地 `parseDomainLoud` / 远端
+     * `readEffectiveWire`)都把它们当未知键剥掉(1.10.0 夹具实测:`unknown-keys-dropped
+     * {keys:["models.0.defaultThinking","models.0.reasoningEffortLevels"]}`),`mapToServiceEffective` 的
+     * CLOSED 投影也从未列过它们。留着 = 一份读不到任何东西的类型承诺 + `compat.reasoningEffortLevels`
+     * 之外的第二个写者([ref]:同一语义面禁两个写者)。roster 级 `defaultThinking` 若要真做,归 schema 补键
+     * 另立单据(见 CHANGELOG 未闭环)。
+     */
+    compat?: unknown;
     /** Generation-tuning passthrough, mirrors core `Model.extraBody` (1.60) — e.g. frequency/presence
      *  penalties that *prevent* degenerate looping. Same category as `cost`/`tier`: logical model metadata,
      *  no secrets. Carried through `toModel()` verbatim. When a center roster replaces the env model this is

package/dist/config-provider.js

@@ -114,6 +114,7 @@ export function mapToServiceEffective(eff, version) {
                 ...(typeof m.charsPerToken === "number" ? { charsPerToken: m.charsPerToken } : {}),
                 ...(m.cost !== undefined ? { cost: m.cost } : {}),
                 ...(m.extraBody !== undefined ? { extraBody: m.extraBody } : {}),
+                ...(m.compat !== undefined ? { compat: m.compat } : {}),
                 ...(m.promptGuidance !== undefined ? { promptGuidance: m.promptGuidance } : {}),
                 enabled: m.enabled,
             })),

package/dist/config-types.d.ts

@@ -330,8 +330,23 @@ export interface ServiceConfigFlat {
         /** How long the breaker stays open before a half-open probe (ms). */
         cooldownMs: number;
     };
-    /** Default model the service runs tasks on. */
+    /** Default model the service runs tasks on. **活的** —— center 热应用会整只换掉它
+     *  (`config.model = config.models.default!`,config-center/apply-effective.ts 的 commit 段)。 */
     model: Model;
+    /**
+     * S-188 —— **boot 期 env 派生的那只模型**,`loadConfig()` 铸一次,此后**永不换**(与 `model` 在 boot
+     * 那一刻是同一个对象引用;center 热应用只动 `model`/`models`,不碰这里)。
+     *
+     * 用途只有一个:**BL-8 继承源** —— 一条 center 目录条目省掉 `maxTokens` / `contextWindow` /
+     * `reasoning` / `charsPerToken` / `defaultThinking` / `compat` 时,继承的是**运维在 env 里配的值**。
+     * 读活的 `model` 当继承源是错的(codex 对抗复审 r1 [high] 真复现):首次 commit 之后它已经是**上一代
+     * center 的默认模型**,于是 ①一条条目上的值会成为下一代所有条目的缺省(跨条目污染)②把那个值删掉
+     * 也撤不回来(残留到进程重启)—— 两条都与这几个键成文的语义(「inherits the operator's env values」)相反。
+     *
+     * 🔴 **必填、无可选形**:一个 `?` 会立刻招来一条「缺席就回落 `config.model`」的臂,而那条臂正是本键
+     * 要消灭的东西([ref]:同一语义面禁两个写者)。测试夹具与 `loadConfig` 一样,与 `model` 同源铸。
+     */
+    envModel: Model;
     /** Model catalog by name (1.24): always `default` + the main model's id, plus an optional cheap model.
      *  Used to resolve roles and to allow-list `@-model` mentions. */
     models: Record<string, Model>;
@@ -1692,7 +1707,7 @@ export interface ServiceConfigFlat {
 /** 组:store(持久化)—— DB 引擎三态、session 后端、SQL coords、快照 BLOB / SendUserFile 对象存储。 */
 export type ServiceStoreConfig = Pick<ServiceConfigFlat, "sessionBackend" | "sessionCacheTtlSec" | "storeProbeIntervalMs" | "dbBackend" | "dbBackendExplicit" | "localDataRoot" | "runStoreStrictHydrate" | "tidb" | "pg" | "dbQueryTimeoutMs" | "snapshotBlobStore" | "snapshotBlobSqlMaxBytes" | "snapshotBlobAllowSql" | "fileHistory" | "sendUserFile">;
 /** 组:modelPlane(模型面)—— 网关坐标、Anthropic 路线、韧性旋钮、主/廉价 model entry、role 表、降级梯。 */
-export type ServiceModelPlaneConfig = Pick<ServiceConfigFlat, "gatewayBaseUrl" | "gatewayApiKey" | "gatewayFallbackUrls" | "gatewayMaxRetries" | "anthropic" | "resilience" | "model" | "models" | "modelApiKeyEnv" | "modelApiKeys" | "modelQuotaWeights" | "tiers" | "projects" | "roles" | "atModelAllowlist" | "cascadeLadder" | "degrade">;
+export type ServiceModelPlaneConfig = Pick<ServiceConfigFlat, "gatewayBaseUrl" | "gatewayApiKey" | "gatewayFallbackUrls" | "gatewayMaxRetries" | "anthropic" | "resilience" | "model" | "envModel" | "models" | "modelApiKeyEnv" | "modelApiKeys" | "modelQuotaWeights" | "tiers" | "projects" | "roles" | "atModelAllowlist" | "cascadeLadder" | "degrade">;
 /** 组:approval(审批 / HITL 门)。`directDoorActive` 无 env 解析腿(装配层三域合取的产物),但语义上
  *  就是本组的门状态,故进组;`parseApprovalDomain` 的返回类型相应是 `Omit<…, "directDoorActive">`。 */
 export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalHmacKeys" | "durableApproval" | "durableApprovalSource" | "streamAskWindowMsSource" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "resourceSuspendTotalTokens" | "resourceSuspendTotalBudgetUsd" | "resourceSuspendMaxSlices" | "askQuestionEnabled" | "questionThrottle" | "toolApprovalEnabled" | "permissionRulesEnabled" | "permissionRulesEnabledExplicit" | "streamAskWindowMarginMs" | "streamApproval" | "unattendedApprovalPolicy" | "mcpElicitation" | "sensitiveWritePatterns" | "writeProtectedPaths" | "manualModeShellGate" | "permissionsDisableAutoMode" | "crossSessionInbound" | "crossSessionDialogExpiry">;

package/dist/config.d.ts

@@ -169,27 +169,6 @@ export declare const hostExecSpoolEnabled: () => boolean;
  *  a loud CONFIG_NOTICES line ("removed-1m"); the center lane's roster culture is explicit declaration.
  *  Shared by the env lane (main + cheap models) and the center lane (sema-registry toModel). */
 export declare function applyAutoCompactWindow(m: Model, explicit?: number): "explicit" | "sonnet5" | "removed-1m" | "removed";
-/**
- * [ref] 件⑤ —— 思考档两键的**闭集词表**与拒启判据(`MODEL_DEFAULT_THINKING` / `MODEL_REASONING_EFFORT_LEVELS`)。
- *
- * 改前两键都走 `isThinkingLevel(...)` **过滤**:拼错的词被**静默丢掉**,而两根旋钮的失败方向恰好都是
- * 「把运维的意图反向执行」——
- *  · `MODEL_DEFAULT_THINKING=hight` ⇒ `defaultThinking` 不铸键 ⇒ 全部任务回落到「无模型级默认档」,
- *    运维以为整台机器抬到了 high;
- *  · `MODEL_REASONING_EFFORT_LEVELS=med,high` ⇒ 只剩 `["high"]`;写成 `med` 一个词则整键落空、
- *    `compat` 不铸 ⇒ 回落 core 的保守梯(`minimal|low|medium|high`),`xhigh`/`max` 被 clamp 下来。
- *    运维配这根旋钮的**全部用途**就是告诉引擎「本端点吃得下更高档」,静默落空 = 高档永远上不去。
- * 两条都是 `MODEL_DEGRADE_ON` / `TASK_TIMEOUT_SEC` 那条族律的同形([ref] A 档:坏值拒启,不静默折默认),
- * 所以改成 boot 响亮拒 —— 与 `MODEL_DEGRADE_ON` 的 `parseDegradeOn` 逐字同款(点名坏词 + 列合法词)。
- *
- * 词表用 `Record<ThinkingLevel, true>` 铸 = 与 llm-core 锁步:上游加一档而这里不补 ⇒ **编译红**
- * (`MODEL_DEGRADE_ON` 的 `Set<DegradeReason>` 同款纪律);目录行的 `enumValues` 由本表派生,
- * 「文档写五档、代码收六档」那种分叉在类型层就不可能发生。
- */
-type ModelThinkingLevel = NonNullable<Model["defaultThinking"]>;
-/** 六档闭集(有序:低→高,取自上表的书写序),目录行 `enumValues` 与两条拒因文案的单一真源。
- *  (`CATALOG_RESTART_SLICES = Object.keys(RESTART_SLICE_SET)` 同款派生式。) */
-export declare const THINKING_LEVELS: readonly ModelThinkingLevel[];
 /**
  * 一条工具名**永不匹配任何现役工具**的三种拼法,及其修正指引。审批/权限名单是 server 侧 ToolPolicy 的
  * RAW 逐字比对(canonicalToolName 折叠面已随 core 5.0.0 [ref] 退役),所以写错的名字不会报错、只会静默

package/dist/config.js

@@ -13,6 +13,7 @@ import { RETENTION_MODES, MEMORY_CONSOLIDATION_MIN_INTERVAL_SEC } from "./config
 import { buildWriteProtectionPosture } from "./write-protection.js";
 import { normalizeSshFingerprint } from "./ssh-host-key.js";
 import { readFaceForPosture } from "./read-face-posture.js";
+import { THINKING_LEVELS, THINKING_FORMATS, buildModelCompat, isThinkingFormat, isThinkingTier } from "./model-compat.js";
 import {} from "./posture-source.js";
 import { CONTROL_AND_BIDI_STRIP_RE } from "./text-bidi.js";
 export { RETENTION_MODES, MEMORY_CONSOLIDATION_MIN_INTERVAL_SEC } from "./config-types.js";
@@ -739,7 +740,11 @@ function parseModelDomain() {
     })();
     const extraBody = buildExtraBody();
     const thinkingDefault = parseDefaultThinking(process.env.MODEL_DEFAULT_THINKING);
-    const effortLevels = parseReasoningEffortLevels(csv("MODEL_REASONING_EFFORT_LEVELS"));
+    const envCompatDeclared = buildModelCompat({
+        reasoningEffortLevels: parseReasoningEffortLevels(csv("MODEL_REASONING_EFFORT_LEVELS")),
+        thinkingFormat: parseThinkingFormat(process.env.MODEL_THINKING_FORMAT),
+    });
+    const envCompat = provider === "anthropic" ? undefined : envCompatDeclared;
     const model = {
         id: modelId,
         name: modelId,
@@ -761,7 +766,7 @@ function parseModelDomain() {
         ...(optFinitePositiveEnv("MODEL_CHARS_PER_TOKEN") !== undefined ? { charsPerToken: optFinitePositiveEnv("MODEL_CHARS_PER_TOKEN") } : {}),
         params: { promptCacheFamily: provider === "anthropic" ? "input-excludes-cached" : "input-includes-cached" },
         ...(thinkingDefault ? { defaultThinking: thinkingDefault } : {}),
-        ...(effortLevels.length > 0 && provider !== "anthropic" ? { compat: { reasoningEffortLevels: effortLevels } } : {}),
+        ...(envCompat ? { compat: envCompat } : {}),
         ...(extraBody ? { extraBody } : {}),
     };
     const cheapId = process.env.MODEL_CHEAP_ID;
@@ -858,6 +863,7 @@ function parseModelDomain() {
             cooldownMs: numEnv("MODEL_CB_COOLDOWN_MS", "30000"),
         },
         model,
+        envModel: model,
         models,
         modelApiKeyEnv: {},
         modelApiKeys: {},
@@ -878,9 +884,6 @@ function parseModelDomain() {
             : undefined,
     };
 }
-const THINKING_LEVEL_TABLE = { minimal: true, low: true, medium: true, high: true, xhigh: true, max: true };
-export const THINKING_LEVELS = Object.keys(THINKING_LEVEL_TABLE);
-const isThinkingTier = (w) => THINKING_LEVELS.includes(w);
 function parseDefaultThinking(raw) {
     const v = raw?.trim();
     if (v === undefined || v === "")
@@ -904,6 +907,16 @@ function parseReasoningEffortLevels(words) {
     }
     return words.filter(isThinkingTier);
 }
+function parseThinkingFormat(raw) {
+    const v = raw?.trim();
+    if (v === undefined || v === "")
+        return undefined;
+    if (!isThinkingFormat(v)) {
+        throw new Error(`env MODEL_THINKING_FORMAT="${v}" is not a wire thinking format — valid: ${THINKING_FORMATS.join(" | ")}. ` +
+            `A typo dropped SILENTLY would leave a think-by-default gateway thinking on every turn, with nothing in the readings to show it (#210 A 档).`);
+    }
+    return v;
+}
 const DEGRADE_ON_WORDS = new Set(["breaker_open", "rate_limit", "budget", "server_error", "last_resort"]);
 function parseDegradeOn(words) {
     if (words.length === 0)
@@ -1907,7 +1920,7 @@ const STORE_GROUP_KEYS = [
     "tidb", "pg", "dbQueryTimeoutMs", "snapshotBlobStore", "snapshotBlobSqlMaxBytes", "snapshotBlobAllowSql", "fileHistory", "sendUserFile",
 ];
 const MODEL_PLANE_GROUP_KEYS = [
-    "gatewayBaseUrl", "gatewayApiKey", "gatewayFallbackUrls", "gatewayMaxRetries", "anthropic", "resilience", "model", "models",
+    "gatewayBaseUrl", "gatewayApiKey", "gatewayFallbackUrls", "gatewayMaxRetries", "anthropic", "resilience", "model", "envModel", "models",
     "modelApiKeyEnv", "modelApiKeys", "modelQuotaWeights", "tiers", "projects", "roles", "atModelAllowlist", "cascadeLadder", "degrade",
 ];
 const APPROVAL_GROUP_KEYS = [

package/dist/http/route-ctx.d.ts

@@ -16,7 +16,7 @@
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { HostDecision } from "../host-decision.js";
-import type { TaskStream, TaskSpec, TaskResult, QuestionAnswer, CheckpointToken, ResumeOutcome, Runner } from "@sema-agent/core";
+import type { TaskStream, TaskSpec, TaskResult, QuestionAnswer, CheckpointToken, ResumeOutcome, Runner, EngineNotice } from "@sema-agent/core";
 import type { FlatServiceDeps, RequestAuth } from "./server.js";
 import type { TaskRequestBody, DecideBinding } from "./wire-types.js";
 import type { IdempotencyCache } from "./idempotency.js";
@@ -122,6 +122,10 @@ export interface PreparedTaskSubmission {
     cascade?: boolean;
     jobId?: string;
     body: TaskRequestBody;
+    /** L-167:**装配期**铸下的、这条会话的用户面 `EngineNotice`(今天只有请求腿 MCP 注入被丢弃一族)。
+     *  装配跑在这条腿的通告口开张之前,所以铸点交不出去 —— 由腿在 `registerEngineNoticeLeg` 那一拍
+     *  经 `pending` 一起投(投递单点仍是那一只注册助手,不新开第二条机制)。缺席 = 本次装配没铸下任何通告。 */
+    engineNotices?: readonly EngineNotice[];
 }
 /** B4①(命名化):`driveResumeIntoRunLog` 的入参形(resume 家族共用)——原为 9 成员内联匿名对象。 */
 export interface DriveResumeArgs {
@@ -136,6 +140,19 @@ export interface DriveResumeArgs {
     resumeObjective: string;
     outcome: ResumeOutcome;
     verifyRounds: VerifyRoundsSpec | undefined;
+    /**
+     * **R-1**(车CJ 收车档 §10 R-1;S-185 批落地)—— 本条 resume 腿**装配期**铸下的用户面通告
+     * (`PreparedTaskSubmission.engineNotices` 的 resume 孪生;今天唯一一族:`mcp.injection_dropped`)。
+     *
+     * 为什么 resume 腿也要投:一条 park 任务的 body 是**存量**的,它自己那几条丢弃在首跑那一拍确实已经
+     * 披露过一次 —— 但**部署侧在 park 期间新占了一个名字**(center 加了同名 MCP server)这一形,只有
+     * 续跑这一拍才第一次发生,而它此前只有运维日志、用户面一个字都没有。⇒ 不投的代价是「我批准之后
+     * 我的 MCP 又少了一台,而没有任何人告诉我」;投的代价是存量丢弃在每次续跑各重说一遍(每腿每名一条,
+     * 由铸点的 per-leg 去重与 32 名上限天然兜住)。两害相权取后者:重复是噪声,缺席是失明。
+     *
+     * 缺席/空 ⇒ 与修前逐字相同(腿开口时 `pending` 不带任何东西)。
+     */
+    engineNotices?: readonly EngineNotice[];
     /** codex M2: side-effects that must land AFTER the markResuming CAS is WON (decide accepted, sibling races
      *  lost — never fires on the 409/404 paths) and BEFORE the model leg drives (so the resumed leg's own next
      *  ask sees them — the decide leg's exemption grant). Contract: must not throw (callers swallow internally);
@@ -150,6 +167,26 @@ export interface DriveResumeArgs {
     mintFreshRun?: {
         source: string;
     };
+    /**
+     * S-185 车CM —— **workflow 出身 park 的决定**,随本次续跑走 core 的可信 run 通道
+     * (`RunInternals.workflowParkedResume`)。
+     *
+     * 为什么是这里、为什么是这个形:core 给部署方留的**唯一**通道就是它(d.ts 逐字:「A host that decided a
+     * workflow child's parked checkpoint **launches the run that re-invokes** `Workflow({resumeFromRunId})`
+     * with the decision here」)。宿主这一跑的模型再调一次 `Workflow({resumeFromRunId})` 时,工具的
+     * `parkedResume` dep 只挑出 `runId` 命中这次 resume 源的条目,交给 `RunWorkflowOptions.parkedResume`,
+     * 于是那个 parked ordinal 带着人的决定继续,而不是再 park 一次。
+     *
+     * 🔴 **TRUSTED**:它绝不是 `TaskSpec` 字段、也绝不是工具参数(模型不能决定一次审批)。唯一的铸点是
+     * `/decide` 的第三条车道(判据属主 = `parked-decide.ts` 的 `planWorkflowParkedDecide` 顶注)。
+     * 缺席 ⇒ 本位对这条腿是完整 no-op,与本批之前逐字相同。
+     */
+    workflowParkedResume?: ReadonlyArray<{
+        runId: string;
+        token: string;
+        outcome: ResumeOutcome;
+        inheritedGate?: unknown;
+    }>;
     /** [ref]([ref] Inkglow 案 → [ref]① 定谳):**200 受理语义**——调用方声明「我的消费方按 poll/SSE 跟
      *  终态,别让 HTTP 等模型往返」。在场为 `true` 时本腿在**受理点**(`resumeStream` 解析之后)立刻把
      *  `200 {taskId, status:"resuming", bindingEnforced:true}` 交回调用方,模型腿(流迭代 + 行驱动)继续
@@ -293,7 +330,12 @@ export interface RouteLegs {
     resumeWake(sessionId: string, message: string | undefined, caller: string | undefined, req: IncomingMessage | undefined, 
     /** [ref] 件 S-1:透传给 {@link DriveResumeArgs.acceptEarly}(200 受理语义)。HTTP `/wake` 腿传 `true`
      *  —— 本腿走 `mintFreshRun`,受理体里的 `taskId` 因此是**新铸的**那个(壳的 poll 锚)。 */
-    acceptEarly?: boolean): Promise<{
+    acceptEarly?: boolean, 
+    /** S-185 车CM:透传给 {@link DriveResumeArgs.workflowParkedResume}(语义与 TRUSTED 纪律的属主在那条
+     *  顶注)。HTTP `/wake` 腿**不设**此位 —— 它是 `/decide` 第三条车道的专用席,而两条腿共用这一条驱动
+     *  路径正是 `notify-wake.ts` 那条「wake 会烧模型,所以复用 resume 家族的同一条腿、不自建第二条驱动
+     *  路径」的成文纪律。 */
+    workflowParkedResume?: DriveResumeArgs["workflowParkedResume"]): Promise<{
         status: number;
         body: object;
     }>;

package/dist/http/routes/approvals-assistant.js

@@ -199,6 +199,7 @@ async function handleApprovalsAssistantBody(req, res, url, ctx, miss) {
                     ...(s.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                     ...(s.denialLimitFallback !== undefined ? { denialLimitFallback: s.denialLimitFallback } : {}),
                     ...(s.origin !== undefined ? { origin: s.origin } : {}),
+                    ...(s.classifierUnavailable !== undefined ? { classifierUnavailable: s.classifierUnavailable } : {}),
                     objective: ctx?.body?.objective ?? null,
                     input,
                 };

package/dist/http/routes/capabilities.js

@@ -195,6 +195,7 @@ async function handleCapabilitiesBody(req, res, url, ctx, miss) {
             ...(m.contextWindow ? { contextWindow: m.contextWindow } : {}),
             ...(m.maxTokens ? { maxOutputTokens: m.maxTokens } : {}),
             ...(m.reasoning ? { supportedEffortLevels: [...DEFAULT_EFFORT_LEVELS] } : {}),
+            ...(m.compat !== undefined ? { compat: m.compat } : {}),
             ...(atAllowlist.length > 0 ? { atMentionable: isModelAllowlisted(name, atCatalog, atAllowlist) } : {}),
             routePairing: routePairingOf(deps, name, m),
         }));

package/dist/http/routes/runs.js

@@ -1609,7 +1609,7 @@ export async function createDurableRun(req, res, ctx, prepared, idemKey) {
                 windowMs: deps.config.streamApproval?.windowMs,
                 windowMarginMs: deps.config.streamAskWindowMarginMs,
             }
-            : undefined, deps.checkpointStore);
+            : undefined, deps.checkpointStore, prepared.engineNotices);
         return { status: 202, body: { taskId, sessionId, status: "running" } };
     }, (r) => r.status === 202);
     return resp;

package/dist/http/routes/tasks.js

@@ -299,6 +299,7 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                 const noticeLedger = ledgerSink;
                 const unregisterEngineNotice = registerEngineNoticeLeg({
                     sessionId: prepared.spec.sessionId,
+                    ...(prepared.engineNotices !== undefined ? { pending: prepared.engineNotices } : {}),
                     live: (row) => {
                         if (res.writableEnded || res.destroyed) {
                             recordFailOpen(failOpenTagForDroppedFrame("engine_notice"), "frame=engine_notice");

package/dist/http/routes/workflows.js

@@ -2,6 +2,7 @@ import { persistedPlaneOf } from "../../terminal.js";
 import { z } from "zod";
 import { getWorkflowRun, subscribeWorkflow, deriveAgentDisplayStatus, callKeyOrdinal } from "@sema-agent/core";
 import { redactSteerIn, STEER_IN_MAX_CHARS, STEER_IN_MAX_REQUEST_CHARS } from "../../orchestration/workflow-agent-steer.js";
+import { journalEntryOfRow, journalEntryPayload, journalRowPayloadOf } from "../../orchestration/workflow-journal-entry.js";
 import { redactSecrets } from "../../trace/redact.js";
 import { createHash } from "node:crypto";
 import { redactErrorMessage, redactHead } from "../../observability/run-terminal-log.js";
@@ -75,6 +76,13 @@ async function handleWorkflowsReadBody(req, res, url, ctx, miss) {
             const MAX_ROW_BYTES = 64 * 1024;
             const firstLine = (t) => (t ? redactHead(t.split("\n")[0], 300) : undefined);
             const MAX_RESULT_CHARS = 2000;
+            const projectEntry = (callKey, r, parked) => parked ? { ...projectResult(callKey, r), parked: true } : projectResult(callKey, r);
+            const oversizeStub = (callKey, resultBytes) => ({
+                callKey,
+                ordinal: callKeyOrdinal(callKey),
+                truncated: true,
+                resultBytes,
+            });
             const projectResult = (callKey, r) => {
                 const memoKey = `${wfId}\u0000${callKey}\u0000${createHash("sha256").update(JSON.stringify(r)).digest("hex")}`;
                 const hit = journalProjectionMemo.get(memoKey);
@@ -109,13 +117,14 @@ async function handleWorkflowsReadBody(req, res, url, ctx, miss) {
                 const page = await js.loadPage(wfId, scope, { offset: jOffset, limit: jLimit, maxResultBytes: MAX_ROW_BYTES });
                 projected = page.map((row) => {
                     if (row.resultJson === null) {
-                        return { callKey: row.callKey, ordinal: callKeyOrdinal(row.callKey), truncated: true, resultBytes: row.resultBytes };
+                        return oversizeStub(row.callKey, row.resultBytes);
                     }
                     try {
-                        return projectResult(row.callKey, JSON.parse(row.resultJson));
+                        const { payload, parked } = journalEntryPayload(journalEntryOfRow(row.callKey, row.resultJson));
+                        return projectEntry(row.callKey, payload, parked);
                     }
                     catch {
-                        return { callKey: row.callKey, ordinal: callKeyOrdinal(row.callKey), truncated: true, resultBytes: row.resultBytes };
+                        return oversizeStub(row.callKey, row.resultBytes);
                     }
                 });
             }
@@ -125,10 +134,9 @@ async function handleWorkflowsReadBody(req, res, url, ctx, miss) {
                     .sort((a, b) => callKeyOrdinal(a.callKey) - callKeyOrdinal(b.callKey))
                     .slice(jOffset, jOffset + jLimit)
                     .map((en) => {
-                    const bytes = Buffer.byteLength(JSON.stringify(en.result));
-                    return bytes > MAX_ROW_BYTES
-                        ? { callKey: en.callKey, ordinal: callKeyOrdinal(en.callKey), truncated: true, resultBytes: bytes }
-                        : projectResult(en.callKey, en.result);
+                    const { payload, parked } = journalEntryPayload(en);
+                    const bytes = Buffer.byteLength(journalRowPayloadOf(en));
+                    return bytes > MAX_ROW_BYTES ? oversizeStub(en.callKey, bytes) : projectEntry(en.callKey, payload, parked);
                 });
             }
             sendJson(res, 200, { runId: wfId, entries: projected, ...(projected.length === jLimit ? { nextOffset: jOffset + jLimit } : {}) });

package/dist/http/server.d.ts

@@ -1,6 +1,6 @@
 import http from "node:http";
 import type { IncomingMessage } from "node:http";
-import { type Runner, type TaskSpec, type TaskResult, type WorkflowRunStore, type MemoryEntry, type MemoryExportBundle, type MemoryImportReport, type EntryProvenanceAccount, type MemoryErasureAttestation, type MemoryEntryOrigin, type OriginClearanceRow, type SessionMemoryStatus, type ConsolidationRunReceipt, type ConsolidationDriverRunRow, type SideQuerySpec, type SideQueryResult, type Brain } from "@sema-agent/core";
+import { type Runner, type TaskSpec, type TaskResult, type WorkflowRunStore, type MemoryEntry, type MemoryExportBundle, type MemoryImportReport, type EntryProvenanceAccount, type MemoryErasureAttestation, type MemoryEntryOrigin, type OriginClearanceRow, type SessionMemoryStatus, type ConsolidationRunReceipt, type ConsolidationDriverRunRow, type SideQuerySpec, type SideQueryResult, type Brain, type EngineNotice } from "@sema-agent/core";
 import type { TaskRequestBody } from "./wire-types.js";
 import type { ServiceConfig } from "../config-types.js";
 import { type RestartSignal, type SessionMirrorRuling } from "../config-center/facade.js";
@@ -92,9 +92,17 @@ export interface ServiceCoreDeps {
      *  `boot/resolve-spec.ts` 的 `declaresInteractivePosture`)。缺席/false ⇒ 无人腿,不声明 posture ——
      *  bg(`POST /v1/runs`)、A2A、resume、cron/wake 一律走这一侧,行为字节不变。
      *  ⚠️ 它是**腿身份**不是能力表态:绝不从请求体读,只由路由装配点按 URL 定(客户端说了不算)。 */
+    /** `opts.onNotice` (L-167, core 7.9.1):装配期铸下的、**这条会话**的用户面通告(今天只有一族:请求腿
+     *  MCP 注入被丢弃)。装配跑在通告腿开口**之前**(`prepareSpec` → 路由注册 `registerEngineNoticeLeg`),
+     *  所以它不能在铸点直接 `route()` ——收下来交给调用腿,由腿在开口那一拍连同 `pending` 一起投。
+     *  缺席(桩)⇒ 只走结构化日志终点,行为逐字不变。
+     *  ⚠️ 7.69.0(R-1)起 **resume 家族也递这一位** —— 四条 resume 腿收敛到 `resolveResumeSpec` 一只 resolver,
+     *  通告口接一次、四腿同得(见 http/server.ts 的 `resolveResumeSpec` 顶注);此处旧注写作「resume 家族缺席」
+     *  已过期,按新行为改。 */
     resolveSpec: (body: TaskRequestBody, req: IncomingMessage | undefined, auth?: RequestAuth, opts?: {
         leg?: "fresh" | "resume";
         liveStream?: boolean;
+        onNotice?: (notice: EngineNotice) => void;
     }) => TaskSpec | Promise<TaskSpec>;
     /**
      * [ref] 场景 hands lane 选路:按 `resolveSpec` 刚产出的 TaskSpec 取本任务的执行 Runner。
@@ -151,6 +159,11 @@ export interface ServiceStoreDeps {
      *  (subscribeWorkflow) and works whenever self-orchestration is on, store or not. Runs are owner-gated by
      *  `scope` (= the creating principal). Also drives `capabilities.workflowsList` (= "can durably LIST runs"). */
     workflowRunStore?: WorkflowRunStore;
+    /** S-185 车CM:workflow 出身 park 的**有界 join** 索引 —— 与 `workflowRunStore` **成对**才构成第三条
+     *  车道(索引只回答「去哪条 run 找」,行本体与赎回键仍以 run 的 blob 为准)。与 RunnerDeps 侧同实例
+     *  (boot/workflow-orchestration.ts);任一缺席 = 那条车道不存在(workflow 出身的 park 落 legacy 腿,
+     *  与本批之前逐字同形)。契约与单写者纪律的属主 = orchestration/workflow-agent-session-index.ts。 */
+    workflowAgentSessionIndex?: import("../orchestration/workflow-agent-session-index.js").WorkflowAgentSessionIndex;
     /** [ref] journal 读面(PAIR-REVIEW 修车批):GET /v1/workflows/:runId/journal 的数据源——与 runner 侧
      *  workflowJournalStore 同一实例(main.ts backend.workflowJournal());缺席=501(与 workflowRunStore 同门)。 */
     workflowJournalStore?: import("@sema-agent/core").WorkflowJournalStore;
@@ -676,7 +689,7 @@ export interface ServiceDeploymentDeps {
      *  `workflowModelAllowlistFor(config)` 算一次(与 createRunnerDeps 喂给 core `workflowGovernanceBaseline.
      *  workflowModelAllowlist` 的同一只函数、同一 config 代际),多租户 fail-closed 的 undefined 在装配点
      *  折 `[]` ⇒ 生产装配下本席**恒在场**。为什么不让能力面每请求活派生:core 5.49 起 models plane 经
-     *  `Runner.swapModels` 永久热,而 governance allowlist 是 Runner 构造期快照 —— 活派生会在热加目录键后
+     *  `Runner.swapDeps` 永久热,而 governance allowlist 是 Runner 构造期快照 —— 活派生会在热加目录键后
      *  长期广告一个 core 必拒的词(教学面超前执法面,直到重启)。广告**引擎真快照**让「能力面教的」与
      *  「core 收到的 allowlist」结构性恒等。缺席(遗留 stub 装配)⇒ 能力面回落活 config 派生(测试便利,
      *  生产路径到不了)。 */