@sema-agent/server 7.96.0 → 7.98.0

package/dist/boot/memory-boundary.d.ts

@@ -54,6 +54,7 @@
  * `TaskSpec.memoryPersistenceCapable` 一条路进去(`boot/resolve-spec.ts` 直通),我方显式**不铸**受限会话、
  * 也**不投**这个读面(硬造一个消费点 = 造给自己看的 wire 键)。哪天真要在诊断面露它,先有消费方需求。
  */
+import { type ExecutionLane, type RemoteExecProvider } from "../execution-lane-caps.js";
 /**
  * [ref] A3 源头修(黑板 [ref]/[ref]/[ref],[ref])—— `memoryPersistenceCapable` 的**装配层有效值**:
  * operator 显式 env 恒赢;env 缺席时,`REMOTE_EXEC=host` 腿自动补 `true`;其余一律缺席(现行为)。
@@ -93,8 +94,8 @@ export interface MemoryWriteBoundaryFacts {
      *  core 7.16.0([ref])之后写家还要再深一层(`<平面>/<label>`),但 label 归引擎注册簿,boot 期说不出口;
      *  平面是**包含关系上等价**的那一只(家恒为平面的直接子目录),所以判据停在平面,不猜 label。 */
     memoryRoot: string | undefined;
-    /** 执行车道名,只进文案(`config.remoteExec?.provider ?? "in-process"`)。 */
-    lane: string;
+    /** 执行车道名,只进文案(归一读口 `executionLaneOf` 的答案;S-602 起不在调用点手写 `?? "in-process"`)。 */
+    lane: ExecutionLane;
     /** 该车道的文件工具是否跑在**本机** fs 上(in-process / `REMOTE_EXEC=host`)。false = 沙箱盘,与记忆根分平面。
      *  ⚠️ 这一位管的是**文件平面**,与下面的 `coreRemoteExecutionEnv` 是**两根轴**,别合并(codex round2
      *  [medium] 就是把它们当成一根轴的后果):`host` 车道的文件平面就是本机(这一位 true),但 core 眼里它
@@ -116,6 +117,20 @@ export interface MemoryWriteBoundaryFacts {
     /** boot 期算得出的文件工具围栏根。空数组 = 算不出(每任务临时目录 / 未配 workspace)⇒ 不判。 */
     containmentRoots: readonly string[];
 }
+/**
+ * S-602 —— 审计的**车道那四位**由本函数从能力表派生(boot/stores.ts 的装配点只调它,不再就地手写):
+ * 改前 stores 里是 `lane === undefined || lane === "host"`(同义折,门 D R3)+ `config.remoteExec !== undefined`
+ * (座位上的裸缺席判,R4)+ `lane ?? "in-process"` ×3(R2)。两根轴各读表里各自那一位,不合并:
+ *  · `hostSemanticsLane` ⇐ `hostFilePlane`(文件平面在不在本机);
+ *  · `coreRemoteExecutionEnv` ⇐ 同名位(core 拿没拿到执行环境)。
+ * 读数逐车道不变(对账:`test/execution-lane-caps.test.ts` 的真装配点联合覆盖格)。`processCwd` 由调用点传
+ * (stores 传 `process.cwd()`),本函数保持纯。
+ */
+export declare function buildMemoryBoundaryLaneFacts(config: {
+    readonly remoteExec?: {
+        readonly provider: RemoteExecProvider;
+    } | undefined;
+}, processCwd: string): Pick<MemoryWriteBoundaryFacts, "lane" | "hostSemanticsLane" | "coreRemoteExecutionEnv" | "containmentRoots">;
 /** 一条启动告警:`tag` 进日志事件名(可被运维按名过滤/告警),`detail` 是给人读的整句(含恢复路径)。 */
 export interface MemoryWriteBoundaryWarning {
     tag: "memory_root_outside_write_boundary" | "memory_remote_lane_write_instruction_dropped";

package/dist/boot/memory-boundary.js

@@ -1,9 +1,20 @@
 import { resolve } from "node:path";
+import { executionLaneCaps, executionLaneOf } from "../execution-lane-caps.js";
 export function effectiveMemoryPersistenceCapable(config) {
     if (config.memoryPersistenceCapable !== undefined)
         return config.memoryPersistenceCapable;
     return config.remoteExec?.provider === "host" ? true : undefined;
 }
+export function buildMemoryBoundaryLaneFacts(config, processCwd) {
+    const lane = executionLaneOf(config.remoteExec?.provider);
+    const caps = executionLaneCaps(lane);
+    return {
+        lane,
+        hostSemanticsLane: caps.hostFilePlane === "supported",
+        coreRemoteExecutionEnv: caps.coreRemoteExecutionEnv === "supported",
+        containmentRoots: lane === "in-process" ? [processCwd] : [],
+    };
+}
 function isInside(child, root) {
     const c = resolve(child);
     const r = resolve(root);

package/dist/boot/reapers.d.ts

@@ -20,6 +20,7 @@ import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import type { WorkflowNotifyGate, WorkflowNotifyJournalStore } from "../orchestration/workflow-notify-journal.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
+import type { FileHistoryErasureFace } from "../file-history-capture.js";
 import type { ApprovalNonceStore, CheckpointStoreFull, CostQuotaStore, ImageBake, RateLimiterStore, ServiceWorkflowJournalStore, StoreBackend, ToolResultStoreFull } from "../plugins/store-backend.js";
 import type { ToolApprovalCoordinator } from "../tool-approval.js";
 /** [ref] / [ref]§五(sema-comms `audits/failopen-governance-176.md` §7 "Z 类 1 条"):default consecutive-failure
@@ -69,7 +70,8 @@ export interface ReapersCtx {
     rateLimiter: RateLimiter | RateLimiterStore | undefined;
     costQuota: CostQuota | CostQuotaStore | undefined;
     toolResultStore: ToolResultStoreFull | undefined;
-    fileHistoryStore: ReturnType<StoreBackend["fileHistory"]> | undefined;
+    /** S-589:文件历史的**擦除脸**(后端在即在,与 `FILE_HISTORY_CAPTURE` 无关)—— 本段只用它的孤儿 blob GC。 */
+    fileHistoryErasure: FileHistoryErasureFace | undefined;
     taskAttachmentStore: TaskAttachmentStore | undefined;
     imageBakes: ImageBake | undefined;
     worktreeReap: (() => Promise<void>) | undefined;

package/dist/boot/reapers.js

@@ -56,7 +56,7 @@ export function createPlacementAwareReapSessions(deps) {
     };
 }
 export function startReapers(ctx) {
-    const { config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, rateLimiter, costQuota, toolResultStore, fileHistoryStore, taskAttachmentStore, imageBakes, worktreeReap, workflowNotifyGate, workflowRecoverOpts, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore, backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore, getRunDenySweep, } = ctx;
+    const { config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, rateLimiter, costQuota, toolResultStore, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap, workflowNotifyGate, workflowRecoverOpts, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore, backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore, getRunDenySweep, } = ctx;
     const leg = (p) => {
         if (p !== undefined)
             trackMaintenanceLeg(p);
@@ -227,7 +227,7 @@ export function startReapers(ctx) {
         leg(toolResultStore
             ?.reapOlderThan?.(Date.now() - config.toolResultTtlSec * 1000)
             ?.then(() => toolResultReapOlderThanGuard.onSuccess(), toolResultReapOlderThanGuard.onError));
-        leg(fileHistoryStore
+        leg(fileHistoryErasure
             ?.sweepOrphanBlobs?.()
             .then(() => fileHistorySweepOrphanBlobsGuard.onSuccess(), fileHistorySweepOrphanBlobsGuard.onError));
         leg(backend?.legacySnapshotBlobSweep?.()

package/dist/boot/resolve-spec.js

@@ -7,7 +7,7 @@ import { SessionEnvironmentSelection, selectEnvironmentTool } from "../capabilit
 import { sendUserFileTool } from "../capabilities/send-user-file-tool.js";
 import { gateScenarioRequest, mergeUserSkills, selectScenario } from "../capabilities/scenarios.js";
 import { stampHandsLane, toolPolicyForHands } from "../capabilities/hands-lane.js";
-import { shouldDiscloseNoPersistentMemory, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
+import { buildNoticeLaneFacts, shouldDiscloseNoPersistentMemory, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
 import { applyLongtailDefer } from "../capabilities/tool-defer.js";
 import { assertGuardPatternsUsable, buildOnlySensitiveBaselineWarning, createApprovalBaselinePolicy, createDeploymentGovernanceInputs } from "../deployment-governance.js";
 import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScratchpadDir, resumeFactsForLane, scratchpadCoveringTaskRoot } from "../env-facts.js";
@@ -25,7 +25,7 @@ import { isIsolatedExecEnv, routeServiceTask, supPostureOverrides } from "../rou
 import { gateExecutionLane } from "../runtime-caps-resolver.js";
 import { applyRuntimeGovernance, stripDelegationTools } from "../runtime-governance.js";
 import { HttpError, encodeCheckpointScope } from "../security.js";
-import { memorySpecForRequest } from "../memory-scope.js";
+import { memoryProjectKeyFor, memorySpecForRequest } from "../memory-scope.js";
 import { singleMemberOffFieldIssue } from "../request-value-closure.js";
 import { a2aForScenario, mcpForScenario } from "../config-center/facade.js";
 import { normalizeAttachments, normalizeResilience, normalizeResumeAtMode, normalizeSuggestNextPrompts, promptProfileFromBody, resolveTaskLimits, retainBackgroundProcessesFromBody, taskAgentsSpecFragment, toolMaterializeStrategyFromBody, toolNameListFromBody } from "../spec-fields.js";
@@ -36,13 +36,19 @@ import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, acceptAppendSystemPrompt, applyTaskSet
 import { enableForkFromBody, normalizeRetainSubagentSessions, selfOrchestrationFromBody } from "../task-workflow.js";
 import { redactSecrets } from "../trace/redact.js";
 import { DeferredSandboxPathEnv, isSandboxPathAdjudicationLane, sandboxPathEnvSlots } from "./deferred-sandbox-path-env.js";
-import { executionLaneHomeDir } from "../execution-lane-caps.js";
+import { executionLaneCaps, executionLaneHomeDir, executionLaneOf } from "../execution-lane-caps.js";
 import { effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { memoryFaceMounted } from "../memory-scope.js";
 export function createResolveSpec(ctx) {
     const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, fleetBus, hookWakeBus, noteSessionShellGate, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, singleUserAutoAcceptBaseline, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
     assertGuardPatternsUsable(config);
     const onlySensitiveBaseline = buildOnlySensitiveBaselineWarning(config, { durableEnabled, singleUserAutoAcceptBaseline });
+    const realTaskRootOf = (auth) => {
+        if (isSandboxPathAdjudicationLane(config.remoteExec?.provider))
+            return undefined;
+        const sessionCwd = auth?.sessionId ? effectiveHostWorkspace(perSessionCwd.get(auth.sessionId), {}) : undefined;
+        return sessionCwd ?? (config.remoteExec === undefined ? process.cwd() : undefined);
+    };
     if (onlySensitiveBaseline)
         logger.warn(onlySensitiveBaseline.event, onlySensitiveBaseline.fields);
     const resolveSpec = async (body, req, auth, opts) => {
@@ -88,7 +94,7 @@ export function createResolveSpec(ctx) {
     };
     const gateScenarioAndAppend = async (body, auth, opts) => {
         const requested = gateScenarioRequest(await principalCaps?.scenarioRuling(auth?.principal), body.scenario, config.defaultScenario, Object.keys(scenarios), logger);
-        gateExecutionLane(await principalCaps?.executionRuling(auth?.principal), config.remoteExec?.provider ?? "in-process", logger);
+        gateExecutionLane(await principalCaps?.executionRuling(auth?.principal), executionLaneOf(config.remoteExec?.provider), logger);
         const scenarioName = scenarios[requested] ? requested : "default";
         const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal, auth?.sessionId !== undefined ? { sessionId: auth.sessionId } : {});
         const centerDecls = getCenterPrompts()?.declarations;
@@ -144,7 +150,7 @@ export function createResolveSpec(ctx) {
     const bindSettingsCwdEnvAndModel = (body, auth, gated, effMode, opts) => {
         const { objective, parsedSettings } = gated;
         const cwdWriteGate = cwdHonored(config) || deviceCwdHonored(config);
-        const execLane = config.remoteExec?.provider ?? "in-process";
+        const execLane = executionLaneOf(config.remoteExec?.provider);
         if (auth?.sessionId)
             fenceSessionOwner(auth.sessionId, auth.principal ?? null);
         if (typeof body.cwd === "string" && body.cwd.length > 0 && auth?.sessionId) {
@@ -391,7 +397,7 @@ export function createResolveSpec(ctx) {
             })(),
             ...(config.requirePrincipal !== true ? { backgroundScope: "session" } : {}),
             memory: memoryEngine
-                ? memorySpecForRequest(auth?.memoryScope, body.memoryWrite, s4DefaultScopes, { multiTenant: config.requirePrincipal === true }, { memory: body.memory, memoryCapture: body.memoryCapture })
+                ? memorySpecForRequest(auth?.memoryScope, memoryProjectKeyFor(config, auth?.memoryScope, realTaskRootOf(auth)), body.memoryWrite, s4DefaultScopes, { multiTenant: config.requirePrincipal === true }, { memory: body.memory, memoryCapture: body.memoryCapture })
                 : undefined,
             ...((v) => (v !== undefined ? { memoryPersistenceCapable: v } : {}))(effectiveMemoryPersistenceCapable(config)),
             tools: ((base) => {
@@ -450,8 +456,7 @@ export function createResolveSpec(ctx) {
         };
         const pathAdjudication = hostSemanticsLane
             ? (() => {
-                const sessionCwd = auth?.sessionId ? effectiveHostWorkspace(perSessionCwd.get(auth.sessionId), {}) : undefined;
-                const realRoot = sessionCwd ?? (config.remoteExec === undefined ? process.cwd() : undefined);
+                const realRoot = realTaskRootOf(auth);
                 const gateCwd = realRoot ?? join(config.localDataRoot ?? localRoot, "fs-write-gate-unrooted");
                 return {
                     env: new NodeExecutionEnv({ cwd: gateCwd }),
@@ -558,7 +563,7 @@ export function createResolveSpec(ctx) {
             handsReadOnly: governed.handsReadOnly === true,
             excludeAllTools: governed.excludeAllTools === true,
             excludeTools: governed.excludeTools,
-            remoteExecutionEnv: config.remoteExec !== undefined,
+            ...buildNoticeLaneFacts(executionLaneOf(config.remoteExec?.provider)),
         })) {
             governed = { ...governed, promptProvider: withNoPersistentMemoryNotice(governed.promptProvider) };
         }
@@ -619,7 +624,7 @@ export function createResolveSpec(ctx) {
             const isolatedExecEnv = isIsolatedExecEnv(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? config.remoteExec.runtimeClass : undefined);
             const decision = routeServiceTask({
                 isolatedExecEnv,
-                hasExecutionEnv: config.remoteExec != null,
+                hasExecutionEnv: executionLaneCaps(executionLaneOf(config.remoteExec?.provider)).coreRemoteExecutionEnv === "supported",
                 ...(config.autonomy ? { autonomy: config.autonomy } : {}),
                 explicitTeam: body.council === true || body.debate === true || scenarioName === "discuss",
             });

package/dist/boot/runner-deps.d.ts

@@ -191,7 +191,8 @@ export interface RunnerDepsCtx {
     sessionPolicyStore: ReturnType<StoreBackend["sessionPolicy"]> | undefined;
     runtimeCapsResolver: RunnerDeps["runtimeCapsResolver"];
     /** [ref] per-edited-file rewind history (core `RunnerDeps.fileHistoryStore`; replaces the retired E19
-     *  whole-tree snapshot seat — core 94632197 renamed the seat, not a coexistence). WIRING IS THE OPT-IN. */
+     *  whole-tree snapshot seat — core 94632197 renamed the seat, not a coexistence). WIRING IS THE OPT-IN.
+     *  S-589:值 = `assembleFileHistory` 的捕获脸(后端 ∧ `FILE_HISTORY_CAPTURE`)。 */
     fileHistoryStore: ReturnType<StoreBackend["fileHistory"]> | undefined;
     /** [ref] 车二:持久化权限规则店 provider(core `RunnerDeps.permissionRuleStore`)。缺席 ⇒ 引擎的
      *  `permissionRules.storeWired` 如实报 false、`AskRequest.ruleOffers` 不铸(诚实缺席)。 */

package/dist/boot/session-faces.d.ts

@@ -5,6 +5,7 @@ import type { WorkflowCompletionInbox } from "../orchestration/workflow-completi
 import { PlanCacheProbe } from "../plan-cache-probe.js";
 import type { CheckpointStoreFull, StoreBackend, ToolResultStoreFull } from "../plugins/store-backend.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
+import type { FileHistoryErasureFace } from "../file-history-capture.js";
 import type { OwnerAwareSessionStore } from "../security.js";
 import type { DeviceStore } from "../device-store.js";
 import { SessionWatchRegistry } from "../session-watch.js";
@@ -25,7 +26,9 @@ export interface SessionFacesCtx {
     approvalExemptionStore: ReturnType<StoreBackend["approvalExemption"]> | undefined;
     sessionPolicyStore: ReturnType<StoreBackend["sessionPolicy"]> | undefined;
     taskAttachmentStore: TaskAttachmentStore | undefined;
-    fileHistoryStore: ReturnType<StoreBackend["fileHistory"]> | undefined;
+    /** S-589:文件历史的**擦除脸**(后端在即在,与 `FILE_HISTORY_CAPTURE` 无关;只有删除类动词)。E21 删除读它,
+     *  不读捕获脸 —— 关掉捕获的部署照样要删得掉已捕获的文件字节(旋钮只管写入,从不管擦除)。 */
+    fileHistoryErasure: FileHistoryErasureFace | undefined;
     workflowCompletionInbox: WorkflowCompletionInbox | undefined;
     /** [ref]:会话级任务清单车道(E21 级联的一条腿)。缺席 = 装配未接本车道 ⇒ 无清单可删。 */
     taskListLane: TaskListLane | undefined;

package/dist/boot/session-faces.js

@@ -6,7 +6,7 @@ import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
 import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -66,11 +66,11 @@ export function createSessionFaces(ctx) {
             if (deviceStore)
                 await deviceStore.deleteByRootSession(sessionId);
             dropSessionScoped?.(sessionId);
-            if (fileHistoryStore) {
-                if (typeof fileHistoryStore.deleteBySession === "function")
-                    await fileHistoryStore.deleteBySession(sessionId);
+            if (fileHistoryErasure) {
+                if (typeof fileHistoryErasure.deleteBySession === "function")
+                    await fileHistoryErasure.deleteBySession(sessionId);
                 else {
-                    await fileHistoryStore.reap(sessionId, []);
+                    await fileHistoryErasure.reap(sessionId, []);
                     logger.warn("session_file_history_baselines_retained", {
                         sessionId,
                         note: "the local file-history store has no whole-scope purge verb; boundaries were reaped but v1 baselines (original file bytes) remain under the data root until the upstream purge seam lands — recorded as an open deletion-rights gap, not silent",

package/dist/boot/stage-04-stores.d.ts

@@ -9,6 +9,7 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-04-stores.js

@@ -27,7 +27,7 @@ export async function runStage04(ctx) {
     if (adoptionBoot.scanned > 0 || adoptionBoot.error !== undefined) {
         logger.info("adoption_boot_scan", { ...adoptionBoot });
     }
-    const { brain, pricing, counterDegradeHook, costQuota, modelUsageTracker, promptManifestTracker, fleetUsage, fleetLease, tracer, sideQueryAccounting, toolResultStore, sessionPolicyStore, fileHistoryStore, } = createBudgetAndTracing({ config, logger, metrics, backend, breakerState });
+    const { brain, pricing, counterDegradeHook, costQuota, modelUsageTracker, promptManifestTracker, fleetUsage, fleetLease, tracer, sideQueryAccounting, toolResultStore, sessionPolicyStore, fileHistoryStore, fileHistoryErasure, } = createBudgetAndTracing({ config, logger, metrics, backend, breakerState });
     const permissionRuleStores = config.permissionRulesEnabled && backend ? backend.permissionRule() : undefined;
     const permissionRuleProvider = permissionRuleStores
         ? createPermissionRuleStoreProvider({ durable: permissionRuleStores.durable })
@@ -44,6 +44,6 @@ export async function runStage04(ctx) {
         });
     }
     await auditDormantPermissionRules({ stores: permissionRuleStores, logger, explicit: config.permissionRulesEnabledExplicit });
-    return { ...ctx, brain, costQuota, counterDegradeHook, fileHistoryStore, fleetLease, fleetUsage, memoryBundleFaces, memoryComplianceFaces, memoryOriginFaces, modelUsageTracker, permissionRuleProvider, permissionRuleStores, pricing, promptManifestTracker, ruleConsent, sessionMemoryStatusFace, sessionPolicyStore, sideQueryAccounting, toolResultStore, tracer };
+    return { ...ctx, brain, costQuota, counterDegradeHook, fileHistoryErasure, fileHistoryStore, fleetLease, fleetUsage, memoryBundleFaces, memoryComplianceFaces, memoryOriginFaces, modelUsageTracker, permissionRuleProvider, permissionRuleStores, pricing, promptManifestTracker, ruleConsent, sessionMemoryStatusFace, sessionPolicyStore, sideQueryAccounting, toolResultStore, tracer };
 }
 //# sourceMappingURL=stage-04-stores.js.map

package/dist/boot/stage-05-execution-env.d.ts

@@ -22,6 +22,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-06-runners.d.ts

@@ -83,6 +83,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-07-capability-layer.d.ts

@@ -98,6 +98,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -6,9 +6,9 @@ import { parseCapEnv, parseNumOrFailNonNegative } from "../config.js";
 import { ensureChildSessionDurableWithPromotion } from "../plugins/session-store.js";
 import { webSearchConfigFromEnv, createWebSearchBackend, shouldProbeWebSearchOnBoot } from "../plugins/web-search.js";
 import { createAuthorizer } from "../security.js";
-import { assertGateIntentServiceable, buildForceDurableGateInertNotice, hasOperatorGateIntent } from "../approval.js";
-import { loadSkills } from "../capabilities/skills.js";
-import { toolsRunOnThisHost } from "../task-cwd.js";
+import { assertGateIntentServiceable, buildForceDurableGateInertNotice, buildNoResponderBootWarns, hasOperatorGateIntent } from "../approval.js";
+import { executionLaneOf } from "../execution-lane-caps.js";
+import { loadDeploymentSkills } from "../capabilities/skills.js";
 import { createRepoClient } from "../capabilities/repo-tools.js";
 import { buildScenarios, builtinScenarioDetails } from "../capabilities/scenarios.js";
 import { RateLimiter } from "../observability/rate-limit.js";
@@ -73,16 +73,12 @@ export async function runStage07(ctx) {
             tasksUsable: runStore !== undefined,
         });
     }
-    if ((config.remoteExec === undefined || config.remoteExec.provider === "host") && !toolApproval && !durableEnabled) {
-        logger.warn("fs_write_gate_no_responder", {
-            hint: "host-semantics lane with no approval face: permissionMode default/auto Write/Edit asks will auto-deny (fail-closed); wire TOOL_APPROVAL_ENABLED=true or DURABLE_APPROVAL=true to answer them",
-        });
-    }
-    if (config.selfOrchestrationEnabled && config.remoteExec !== undefined && config.remoteExec.provider !== "host" && !toolApproval && !durableEnabled) {
-        logger.warn("workflow_gate_no_responder", {
-            hint: "self-orchestration with no approval face: permissionMode default/auto/acceptEdits run_workflow asks will auto-deny (fail-closed); wire TOOL_APPROVAL_ENABLED=true or DURABLE_APPROVAL=true to answer them",
-        });
-    }
+    for (const w of buildNoResponderBootWarns({
+        lane: executionLaneOf(config.remoteExec?.provider),
+        selfOrchestrationEnabled: config.selfOrchestrationEnabled,
+        approvalFaceWired: toolApproval !== undefined || durableEnabled,
+    }))
+        logger.warn(w.event, w.fields);
     if (singleUserAutoAcceptBaseline) {
         logger.info("tool_policy_single_user_default", {
             posture: "adjudicated auto-accept — ALL write/hand/MCP tool surfaces auto-allowed (core per-surface UNGATED enumeration suppressed for single-user turnkey)",
@@ -110,7 +106,7 @@ export async function runStage07(ctx) {
         ? backend.rateLimiter(config.rateLimitPerMin, counterDegradeHook).startRefresh()
         : new RateLimiter(config.rateLimitPerMin);
     bindRateLimiter(rateLimiter);
-    let skills = loadSkills(config.skillsDir, { toolsShareThisFilesystem: toolsRunOnThisHost(config) });
+    let skills = loadDeploymentSkills(config);
     skills = await configCenter.applyCenterCapabilities(skills);
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();

package/dist/boot/stage-08-reapers.d.ts

@@ -109,10 +109,9 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
         kind: string;
         streak: number;
         prevStreak: number;
-        error
-        /** 租约 TTL = 2× sweep 间隔(§3)。抢租与每 domain 的续租共用同一个值 —— 两处手抄迟早只改一处。 */
-        ?: string;
+        error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-08-reapers.js

@@ -5,10 +5,10 @@ import { startRetentionLane, RETENTION_LEASE_TTL_FACTOR } from "./retention-lane
 import { createLimitSync } from "./limit-sync.js";
 import { runDenySweep } from "./late-binds.js";
 export function runStage08(ctx) {
-    const { approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, config, configCenter, costQuota, fileHistoryStore, handslessRunner, handslessSubRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, runnerTierFrozen, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
+    const { approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, config, configCenter, costQuota, fileHistoryErasure, handslessRunner, handslessSubRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, runnerTierFrozen, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
     const reaper = startReapers({
         config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore,
-        rateLimiter, costQuota, toolResultStore, fileHistoryStore, taskAttachmentStore, imageBakes, worktreeReap,
+        rateLimiter, costQuota, toolResultStore, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap,
         workflowNotifyGate, workflowRecoverOpts, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore,
         backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore,
         getRunDenySweep: () => runDenySweep,

package/dist/boot/stage-09-leader.d.ts

@@ -145,6 +145,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-09-leader.js

@@ -6,12 +6,12 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryStore, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
         config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
-        resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore,
+        resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure,
         workflowCompletionInbox, taskListLane, mailboxStore, mailboxRecipientLifecycle,
     });
     const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });

package/dist/boot/stage-10-http-server.d.ts

@@ -145,6 +145,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stores.js

@@ -32,7 +32,7 @@ import { assertSchemaMatchesCode } from "../plugins/schema-consistency.js";
 import { assertCheckpointColumnSchema } from "../plugins/checkpoint-store-sql.js";
 import { assertFileHistorySchema } from "../plugins/file-history-store-sql.js";
 import { resolveStreamApprovalGate } from "../tool-approval.js";
-import { buildMemoryWriteBoundaryAudit, effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
+import { buildMemoryBoundaryLaneFacts, buildMemoryWriteBoundaryAudit, effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { buildMemoryPosture } from "../memory-posture.js";
 import { establishSqlEnginePosture } from "../sql-engine-posture.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
@@ -194,25 +194,19 @@ export async function openStores(ctx) {
         }
     }
     {
-        const lane = config.remoteExec?.provider;
-        const hostSemanticsLane = lane === undefined || lane === "host";
-        const coreRemoteExecutionEnv = config.remoteExec !== undefined;
-        const containmentRoots = lane === undefined ? [process.cwd()] : [];
+        const laneFacts = buildMemoryBoundaryLaneFacts(config, process.cwd());
         const memoryMountRoot = memoryEngine ? memoryMountRootOf(memoryEngine.backend, memoryEngine.root) : undefined;
         const audit = buildMemoryWriteBoundaryAudit({
             memoryRoot: memoryMountRoot,
-            lane: lane ?? "in-process",
-            hostSemanticsLane,
-            coreRemoteExecutionEnv,
+            ...laneFacts,
             declaredCapable: effectiveMemoryPersistenceCapable(config),
-            containmentRoots,
             engineBackend: config.memoryEngineBackend,
         });
         for (const w of audit.warnings)
-            logger.warn(w.tag, { detail: w.detail, lane: lane ?? "in-process", root: memoryMountRoot ?? null });
+            logger.warn(w.tag, { detail: w.detail, lane: laneFacts.lane, root: memoryMountRoot ?? null });
         if (config.memoryPersistenceCapable === undefined && effectiveMemoryPersistenceCapable(config) === true) {
             logger.info?.("memory_persistence_capable_auto_declared", {
-                lane: lane ?? "in-process",
+                lane: laneFacts.lane,
                 detail: "REMOTE_EXEC=host: file tools run on this machine's filesystem, so the assembler declares memoryPersistenceCapable=true (the core-side remote-env withhold would otherwise silently drop the memory WRITE instruction on this lane). Override with MEMORY_PERSISTENCE_CAPABLE=true|false.",
             });
         }

package/dist/brain.js

@@ -2,7 +2,8 @@ import { adjudicateModelRoute, createAnthropicBrain, createCircuitBreakerBrain,
 import { routeKeyOf } from "@sema-agent/core";
 import { buildDefaultResilience } from "./config-types.js";
 import { resolveModelApiKey } from "./key-resolver.js";
-import { catalogBrainLane } from "./model-provider.js";
+import { dispatchBrainLane } from "./model-provider.js";
+import { openaiRouteBaseUrl } from "./model-route-endpoint.js";
 import { buildDisplaySafeRefusal, buildDisplaySafeUrl } from "./trace/redact.js";
 function isOffDeploymentRoot(baseUrl, config) {
     if (!baseUrl)
@@ -10,11 +11,17 @@ function isOffDeploymentRoot(baseUrl, config) {
     const entry = routeKeyOf(baseUrl);
     if (entry === "")
         return false;
-    return ![config.gatewayBaseUrl, ...config.gatewayFallbackUrls].some((u) => routeKeyOf(u) === entry);
+    return !deploymentGatewayRoots(config).some((u) => routeKeyOf(u) === entry);
+}
+function deploymentGatewayRoots(config) {
+    return config.gatewayBaseUrl !== undefined ? [config.gatewayBaseUrl, ...config.gatewayFallbackUrls] : [];
+}
+function deploymentGatewayKey(config) {
+    return config.gatewayBaseUrl !== undefined ? config.gatewayApiKey : undefined;
 }
 function degradeDeclaredRoot(fallbackBaseUrl, config) {
-    const armed = Boolean(config.gatewayApiKey) && isOffDeploymentRoot(fallbackBaseUrl, config);
-    return armed ? config.gatewayBaseUrl : (fallbackBaseUrl || config.gatewayBaseUrl);
+    const armed = Boolean(deploymentGatewayKey(config)) && isOffDeploymentRoot(fallbackBaseUrl, config);
+    return armed ? config.gatewayBaseUrl : openaiRouteBaseUrl(fallbackBaseUrl, config.gatewayBaseUrl);
 }
 export const FAST_FAIL_MAX_RETRIES = 2;
 function constructRouteBrain(label, sourceUrls, construct) {
@@ -41,12 +48,12 @@ export function createBrain(config, deps = {}) {
         : fastFailTopology
             ? { maxRetries: FAST_FAIL_MAX_RETRIES }
             : {};
-    const routes = [config.gatewayBaseUrl, ...config.gatewayFallbackUrls];
+    const routes = deploymentGatewayRoots(config);
     const openaiBrains = routes.map((baseUrl, i) => {
         const brain = constructRouteBrain(i === 0 ? "gateway route" : `gateway fallback route[${i - 1}]`, [baseUrl], () => createOpenAIBrain({
             baseUrl,
             get apiKey() {
-                return config.gatewayApiKey;
+                return deploymentGatewayKey(config);
             },
             ...retryCap,
             fetchImpl,
@@ -62,7 +69,11 @@ export function createBrain(config, deps = {}) {
             })
             : brain;
     });
-    const gatewayBrain = openaiBrains.length > 1 ? createFailoverBrain(openaiBrains) : openaiBrains[0];
+    const gatewayBrain = openaiBrains.length === 0
+        ? constructRouteBrain("openai route (no gateway declared)", [], () => createOpenAIBrain({ ...retryCap, fetchImpl, ...timeouts }))
+        : openaiBrains.length > 1
+            ? createFailoverBrain(openaiBrains)
+            : openaiBrains[0];
     const anthropicCfg = config.anthropic;
     const anthropicBrain = anthropicCfg
         ? constructRouteBrain("anthropic route", [anthropicCfg.baseUrl], () => createAnthropicBrain({
@@ -86,9 +97,8 @@ export function createBrain(config, deps = {}) {
         if (fallbackModel) {
             const fbOwnApiKey = () => resolveModelApiKey(fallbackModel.name, config.modelApiKeyEnv ?? {}, process.env, config.modelApiKeys ?? {}) ??
                 resolveModelApiKey(degradeTo, config.modelApiKeyEnv ?? {}, process.env, config.modelApiKeys ?? {});
-            const fallbackLane = catalogBrainLane(fallbackModel.provider);
-            const anthropicLaneHop = fallbackLane === "anthropic" && anthropicBrain !== undefined;
-            const fallback = fallbackLane === "anthropic" && anthropicBrain
+            const anthropicLaneHop = dispatchBrainLane(fallbackModel.provider, anthropicBrain !== undefined) === "anthropic";
+            const fallback = anthropicLaneHop && anthropicBrain
                 ?
                     anthropicBrain
                 : constructRouteBrain(`degrade target "${degradeTo}"`, [fallbackModel.baseUrl, config.gatewayBaseUrl], () => createOpenAIBrain({
@@ -96,7 +106,7 @@ export function createBrain(config, deps = {}) {
                         return degradeDeclaredRoot(fallbackModel.baseUrl, config);
                     },
                     get apiKey() {
-                        return config.gatewayApiKey || undefined;
+                        return deploymentGatewayKey(config) || undefined;
                     },
                     ...(config.gatewayMaxRetries !== undefined ? { maxRetries: config.gatewayMaxRetries } : {}),
                     fetchImpl,
@@ -129,8 +139,10 @@ export function brainSummary(config) {
     const r = config.resilience ?? DEFAULT_RESILIENCE;
     const hasFailover = config.gatewayFallbackUrls.length > 0;
     const breakerActive = r.circuitBreaker && hasFailover;
+    const degradeTarget = config.degrade?.reactive ? config.models?.[config.degrade.to] : undefined;
+    const degradeEndpoint = degradeTarget ? openaiRouteBaseUrl(degradeTarget.baseUrl, config.gatewayBaseUrl) : undefined;
     return {
-        gateway: buildDisplaySafeUrl(config.gatewayBaseUrl),
+        gateway: buildDisplaySafeUrl(config.gatewayBaseUrl ?? "") || null,
         gatewayFallbacks: config.gatewayFallbackUrls.length,
         failover: hasFailover,
         anthropicRoute: Boolean(config.anthropic),
@@ -147,14 +159,12 @@ export function brainSummary(config) {
                 : "engine-default",
         circuitBreakerNoop: r.circuitBreaker && !hasFailover ? "needs ≥2 gateway routes" : null,
         reactiveDegradeTo: config.degrade?.reactive && config.models?.[config.degrade.to] ? config.degrade.to : null,
-        reactiveDegradeBaseUrl: config.degrade?.reactive && config.models?.[config.degrade.to]
-            ? buildDisplaySafeUrl(config.models[config.degrade.to].baseUrl || config.gatewayBaseUrl)
-            : null,
+        reactiveDegradeBaseUrl: buildDisplaySafeUrl(degradeEndpoint ?? "") || null,
         ...((() => {
             const target = config.degrade?.reactive ? config.models?.[config.degrade.to] : undefined;
             if (!target)
                 return { reactiveDegradeRoutePairing: null, reactiveDegradeRouteRefusal: null };
-            if (catalogBrainLane(target.provider) === "anthropic" && config.anthropic) {
+            if (dispatchBrainLane(target.provider, config.anthropic !== undefined) === "anthropic") {
                 return { reactiveDegradeRoutePairing: "anthropic-lane", reactiveDegradeRouteRefusal: null };
             }
             const declaresOwnCredential = config.modelApiKeyEnv?.[target.name] !== undefined ||
@@ -165,12 +175,12 @@ export function brainSummary(config) {
             if (declaresOwnCredential) {
                 return { reactiveDegradeRoutePairing: "per-model-declared", reactiveDegradeRouteRefusal: null };
             }
-            const verdict = adjudicateModelRoute({ id: target.id, baseUrl: target.baseUrl }, resolveRouteCredential({ ...(config.gatewayApiKey ? { configApiKey: config.gatewayApiKey } : {}) }), { baseUrl: degradeDeclaredRoot(target.baseUrl, config) });
+            const verdict = adjudicateModelRoute({ id: target.id, baseUrl: target.baseUrl }, resolveRouteCredential(((key) => (key ? { configApiKey: key } : {}))(deploymentGatewayKey(config))), { baseUrl: degradeDeclaredRoot(target.baseUrl, config) });
             return verdict.ok
                 ? { reactiveDegradeRoutePairing: `ok:${verdict.posture}`, reactiveDegradeRouteRefusal: null }
                 : {
                     reactiveDegradeRoutePairing: `broken:${verdict.code}`,
-                    reactiveDegradeRouteRefusal: buildDisplaySafeRefusal(routeRefusalText(verdict), [target.baseUrl ?? "", degradeDeclaredRoot(target.baseUrl, config)]),
+                    reactiveDegradeRouteRefusal: buildDisplaySafeRefusal(routeRefusalText(verdict), [target.baseUrl ?? "", degradeDeclaredRoot(target.baseUrl, config) ?? ""]),
                 };
         })()),
     };

package/dist/capabilities/execution-lane.d.ts

@@ -1,18 +1,16 @@
-import type { RemoteExecProvider } from "../execution-lane-caps.js";
+import { type ExecutionLane, type RemoteExecProvider } from "../execution-lane-caps.js";
 export interface ExecutionLaneCapability {
-    /** 本部署的执行车道词(闭集 = {@link RemoteExecProvider};`REMOTE_EXEC` 未设 ⇒ `"host"`,见头注)。 */
-    readonly provider: RemoteExecProvider;
+    /** 本部署的执行车道词(闭集 = {@link ExecutionLane} 八词;`REMOTE_EXEC` 未设 ⇒ `"in-process"`,见头注 S-602 段)。 */
+    readonly provider: ExecutionLane;
     /** 工具跑的那台机器就是本进程这台吗(= server 盘上的绝对路径对模型的工具有没有意义)。
      *  属主 = `task-cwd.ts` 的 {@link toolsRunOnThisHost},与 `skills[].baseDir` 的铸点同一只函数。 */
     readonly toolsOnThisHost: boolean;
 }
 /**
  * 部署席 → 消费端窄投影。形照 `projectWebSearchCapability` / `projectSqlEngineCapability`:
- * **只 import 型**,不碰 config.ts,于是本模块是叶。
+ * 不碰 config.ts(只从车道表模块取词与归一读口,那是叶),于是本模块是叶。
  *
- * 🔴 **唯一**写缺席折词的地方。`"host"` 这个字面量不入 `api-notice-text-freeze`:它是
- * {@link RemoteExecProvider} 的成员,配置联合里那条臂改名 ⇒ 本行当场 tsc 红(S-382 对三个 provider 词
- * 免入表的同一条理由 —— 会静默漂的只有**本仓自铸**的词,这里一个都没有)。
+ * 🔴 本处**不写**任何缺席折词(S-602 门 D):缺席归一只在 {@link executionLaneOf} 一处。
  */
 export declare function projectExecutionLaneCapability(config: {
     readonly remoteExec?: {