@sema-agent/server 7.98.0 → 7.100.0

package/dist/config-center/apply-effective.js

@@ -5,9 +5,11 @@ import { buildModelCompat, readModelCompat } from "../model-compat.js";
 import { validateCommandRules } from "../runtime-governance.js";
 import { projectCollabToWorkflows, registerCollabWorkflows } from "../capabilities/collab-workflows.js";
 import { stageLimits } from "./stage-limits.js";
-import { BATCH1_LIMIT_KEYS } from "./hot-keys-registry.js";
+import { APPROVAL_GROUP_KEYS, BATCH1_LIMIT_KEYS } from "./hot-keys-registry.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import { crossInvariant } from "../config-invariants.js";
+import { gateIntentUnserviceableReason } from "../approval.js";
+import { refusedGroups } from "./apply-ledger.js";
 const charsPerTokenOf = (v) => (typeof v === "number" && Number.isFinite(v) && v > 0 ? v : undefined);
 function envDerivedModel(config) {
     const m = config.envModel;
@@ -93,7 +95,7 @@ function stageAtModelAllowlist(raw, models, logger) {
     }
     return names;
 }
-export function applyEffective(config, eff, logger, opts = {}) {
+export function applyEffective(config, eff, logger, opts) {
     const staged = stageEffective(config, eff, logger, opts);
     const gen = opts.generation ?? staged.version;
     const live = appliedGeneration.get(config);
@@ -118,25 +120,30 @@ export function applyEffective(config, eff, logger, opts = {}) {
     commitStaged(config, staged);
     if (ordered)
         appliedGeneration.set(config, gen);
-    opts.report?.({
-        version: staged.version,
-        ...(opts.generation !== undefined ? { ordinal: opts.generation } : {}),
-        limits: {
-            applied: staged.limits.changed,
-            ...(staged.limits.deferred.length > 0 ? { deferred: staged.limits.deferred } : {}),
-            ...(staged.limits.rejected ? { rejected: staged.limits.rejected } : {}),
-        },
-        fullyApplied: staged.limits.rejected === undefined,
-    });
+    if (opts.report) {
+        const report = {
+            version: staged.version,
+            ...(opts.generation !== undefined ? { ordinal: opts.generation } : {}),
+            groups: {
+                limitsHttp: {
+                    applied: staged.limits.changed,
+                    ...(staged.limits.deferred.length > 0 ? { deferred: staged.limits.deferred } : {}),
+                    ...(staged.limits.rejected ? { rejected: staged.limits.rejected } : {}),
+                },
+                approvalGate: groupReportOf(staged.approvalGate),
+            },
+        };
+        opts.report({ ...report, fullyApplied: refusedGroups(report).length === 0 });
+    }
     if (staged.limits.changed.length > 0)
         logger?.info("sema_registry_limits", { version: staged.version, keys: staged.limits.changed });
     if (staged.modelPlane)
         logger?.info("sema_registry_models", staged.modelPlane.infoLine);
-    if (staged.gatesInfo)
-        logger?.info("sema_registry_runtime", staged.gatesInfo);
+    if (staged.approvalGate.next !== undefined)
+        logger?.info("sema_registry_runtime", { version: staged.version, approvalRequire: staged.approvalGate.next });
     if (Object.keys(staged.hot.infoLine).length > 0)
         logger?.info("sema_registry_runtime_hot", staged.hot.infoLine);
-    for (const n of staged.collabPlane?.notices ?? []) {
+    for (const n of staged.collabPlane.notices) {
         if (n.level === "warn")
             logger?.warn(n.msg, n.fields);
         else
@@ -158,10 +165,8 @@ function commitStaged(config, staged) {
         mutateInPlace(config.tiers, mp.activeTiers);
         config.atModelAllowlist = mp.atModelAllowlist;
     }
-    if (staged.gateAssignments) {
-        for (const [k, v] of staged.gateAssignments)
-            config[k] = v;
-    }
+    if (staged.approvalGate.next !== undefined)
+        config.approvalRequire = staged.approvalGate.next;
     for (const [k, v] of staged.limits.assignments)
         config[k] = v;
     for (const k of staged.limits.deletions)
@@ -170,12 +175,11 @@ function commitStaged(config, staged) {
         config.autonomy = staged.hot.autonomyNext;
     if (staged.hot.setCommandPolicy)
         config.commandPolicy = staged.hot.commandPolicyNext;
-    if (staged.collabPlane)
-        registerCollabWorkflows(staged.collabPlane.workflows);
+    registerCollabWorkflows(staged.collabPlane.workflows);
     mutateInPlace(config.projects, staged.projects);
 }
 function stageEffective(config, eff, logger, opts) {
-    if (!opts.teamsOnly && !eff.version) {
+    if (opts.leg === "boot" && !eff.version) {
         logger?.warn("sema_registry_unpublished", {
             version: eff.version,
             note: "empty/unpublished effective config — using env + built-in fallback; publish a config or unset CONFIG_PUBLISH_MODE",
@@ -183,7 +187,7 @@ function stageEffective(config, eff, logger, opts) {
     }
     const enabled = (eff.models?.models ?? []).filter((m) => m.enabled !== false);
     let modelPlane;
-    if (enabled.length > 0 && opts.deferModelPlane !== true) {
+    if (enabled.length > 0) {
         const models = {};
         const modelApiKeyEnv = {};
         const modelApiKeys = {};
@@ -282,21 +286,18 @@ function stageEffective(config, eff, logger, opts) {
             infoLine: { count: enabled.length, default: models.default.id, defaultSource: picked.source, roles: Object.keys(roles), tiers: Object.keys(activeTiers), atModelAllowlist: atModelAllowlist.length, sealedKeys: Object.values(modelApiKeys).filter((v) => typeof v === "string").length, sealedPoisoned: Object.values(modelApiKeys).filter((v) => typeof v !== "string").length },
         };
     }
-    const gates = opts.teamsOnly ? undefined : stageApprovalGate(eff.governance, logger);
+    const approvalGate = stageApprovalGate(config, eff.governance, opts, logger);
     const limits = stageLimits(config, { version: typeof eff.version === "number" ? eff.version : 0, ...("limits" in eff ? { limits: eff.limits } : {}), legacyGates: legacyGateValues(eff.runtime) }, logger);
     const hot = stageRuntimeHot(config, eff.governance, logger);
-    let collabPlane;
-    if (opts.deferModelPlane !== true) {
-        const projected = projectCollabToWorkflows(eff.collab?.templates);
-        const notices = [];
-        if (Object.keys(projected.workflows).length > 0)
-            notices.push({ level: "info", msg: "sema_registry_collab_workflows", fields: { workflows: Object.keys(projected.workflows) } });
-        if (projected.skipped.length > 0)
-            notices.push({ level: "warn", msg: "sema_registry_collab_skipped", fields: { skipped: projected.skipped } });
-        if (projected.notes.length > 0)
-            notices.push({ level: "info", msg: "sema_registry_collab_notes", fields: { notes: projected.notes } });
-        collabPlane = { workflows: projected.workflows, notices };
-    }
+    const projected = projectCollabToWorkflows(eff.collab?.templates);
+    const collabNotices = [];
+    if (Object.keys(projected.workflows).length > 0)
+        collabNotices.push({ level: "info", msg: "sema_registry_collab_workflows", fields: { workflows: Object.keys(projected.workflows) } });
+    if (projected.skipped.length > 0)
+        collabNotices.push({ level: "warn", msg: "sema_registry_collab_skipped", fields: { skipped: projected.skipped } });
+    if (projected.notes.length > 0)
+        collabNotices.push({ level: "info", msg: "sema_registry_collab_notes", fields: { notes: projected.notes } });
+    const collabPlane = { workflows: projected.workflows, notices: collabNotices };
     const projDomain = eff.projects;
     const rawProjects = (projDomain && typeof projDomain === "object" && !Array.isArray(projDomain) &&
         "projects" in projDomain && typeof projDomain.projects === "object"
@@ -316,15 +317,14 @@ function stageEffective(config, eff, logger, opts) {
     return {
         version: typeof eff.version === "number" && Number.isFinite(eff.version) ? eff.version : 0,
         ...(modelPlane !== undefined ? { modelPlane } : {}),
-        ...(gates !== undefined ? { gateAssignments: gates.assignments, ...(gates.info !== undefined ? { gatesInfo: gates.info } : {}) } : {}),
+        approvalGate,
         limits,
         hot,
-        ...(collabPlane !== undefined ? { collabPlane } : {}),
+        collabPlane,
         projects,
     };
 }
 export const RUNTIME_GATE_KEYS = ["rateLimitPerMin", "maxTaskCostUsd", "maxTaskTokens", "maxPrincipalCostUsd", "costQuotaWindowSec"];
-export const BOOT_GATE_KEYS = ["approvalRequire"];
 export function centerManagedConfigKeys(eff) {
     const out = new Set();
     if (!eff)
@@ -372,40 +372,76 @@ export function runtimeGatePresent(rt, key) {
         return typeof v === "number" && v > 0;
     return typeof v === "number";
 }
-function stageApprovalRequire(raw, logger) {
-    const refuse = (detail, names, kept) => {
-        logger?.warn("sema_registry_approval_require_invalid", { detail, names: [...names], kept });
-        return {};
-    };
-    const KEPT_WOULD_MATCH_NOTHING = "the prior approvalRequire is unchanged — the published list would have silently matched nothing";
-    const KEPT_WOULD_REMOVE_GATE = "the prior approvalRequire is unchanged — coercing this malformed value would have silently REMOVED the approval gate";
+const KEPT_WOULD_MATCH_NOTHING = "the prior approvalRequire is unchanged — the published list would have silently matched nothing";
+const KEPT_WOULD_REMOVE_GATE = "the prior approvalRequire is unchanged — coercing this malformed value would have silently REMOVED the approval gate";
+const KEPT_WOULD_NEVER_PARK = "the prior approvalRequire is unchanged — this deployment has nowhere to park a gated call, so applying the list would leave it silently unenforced";
+function stageApprovalRequire(raw) {
     if (!Array.isArray(raw)) {
-        return refuse(`published runtime.approvalRequire must be an ARRAY of whole tool names — got ${raw === null ? "null" : typeof raw}. ` +
-            `Refusing the domain instead of coercing it: an empty list means "no approval gate", so coercing a malformed value would SILENTLY remove the gate.`, [], KEPT_WOULD_REMOVE_GATE);
+        const detail = `published governance.approvalRequire must be an ARRAY of whole tool names — got ${raw === null ? "null" : typeof raw}. ` +
+            `Refusing the group instead of coercing it: an empty list means "no approval gate", so coercing a malformed value would SILENTLY remove the gate.`;
+        return { ok: false, detail, reason: detail, names: [], kept: KEPT_WOULD_REMOVE_GATE };
     }
     const nonString = raw
         .map((n, i) => (typeof n === "string" ? undefined : { i, t: n === null ? "null" : typeof n }))
         .filter((e) => e !== undefined);
     if (nonString.length > 0) {
-        return refuse(`published runtime.approvalRequire contains ${nonString.length} non-string entr${nonString.length === 1 ? "y" : "ies"} ` +
+        const detail = `published governance.approvalRequire contains ${nonString.length} non-string entr${nonString.length === 1 ? "y" : "ies"} ` +
             `(${nonString.map((e) => `[${e.i}]:${e.t}`).join(", ")}) — every entry must be a whole tool name string. ` +
-            `Refusing the domain instead of dropping them: dropping every entry would SILENTLY remove the approval gate.`, nonString.map((e) => `[${e.i}]`), KEPT_WOULD_REMOVE_GATE);
+            `Refusing the group instead of dropping them: dropping every entry would SILENTLY remove the approval gate.`;
+        return { ok: false, detail, reason: detail, names: nonString.map((e) => `[${e.i}]`), kept: KEPT_WOULD_REMOVE_GATE };
     }
     const names = raw.filter((n) => typeof n === "string").map((n) => n.trim()).filter((n) => n.length > 0);
     const bad = findUnmatchableToolNames(names, { consumer: "tool-name-table", behavior: "deny" });
     if (bad.length > 0) {
-        return refuse(formatUnmatchableToolNames("published runtime.approvalRequire", bad), bad.map((b) => b.name), KEPT_WOULD_MATCH_NOTHING);
+        return {
+            ok: false,
+            detail: formatUnmatchableToolNames("published governance.approvalRequire", bad),
+            reason: `published governance.approvalRequire has ${bad.length} entr${bad.length === 1 ? "y" : "ies"} that match no live tool (retired name / incomplete MCP name / CC-form rule) — the offending entries are named in the sema_registry_approval_require_invalid log line`,
+            names: bad.map((b) => b.name),
+            kept: KEPT_WOULD_MATCH_NOTHING,
+        };
     }
-    return { value: names };
+    return { ok: true, value: names };
 }
-function stageApprovalGate(gov, logger) {
+function unserviceableOnLeg(leg, candidate) {
+    switch (leg.leg) {
+        case "boot":
+            return undefined;
+        case "hot":
+            return gateIntentUnserviceableReason(candidate, leg.checkpointStorePresent);
+        default: {
+            const unknownLeg = leg;
+            throw new Error(`applyEffective: unknown apply leg ${JSON.stringify(unknownLeg)}`);
+        }
+    }
+}
+function groupReportOf(g) {
+    return { applied: g.next !== undefined ? [...APPROVAL_GROUP_KEYS] : [], ...(g.rejected ? { rejected: g.rejected } : {}) };
+}
+const approvalEnvBaseline = new WeakMap();
+function stageApprovalGate(config, gov, leg, logger) {
+    if (!approvalEnvBaseline.has(config))
+        approvalEnvBaseline.set(config, Object.freeze([...config.approvalRequire]));
+    const refuse = (r) => {
+        logger?.warn("sema_registry_approval_require_invalid", { keys: [...APPROVAL_GROUP_KEYS], detail: r.detail, names: [...r.names], kept: r.kept });
+        return { rejected: { keys: [...APPROVAL_GROUP_KEYS], reason: r.reason } };
+    };
     const raw = gov?.approvalRequire;
-    if (!Array.isArray(raw))
-        return { assignments: [] };
-    const staged = stageApprovalRequire(raw, logger);
-    if (staged.value === undefined)
-        return { assignments: [] };
-    return { assignments: [["approvalRequire", staged.value]], info: { approvalRequire: staged.value } };
+    let next;
+    if (raw === undefined) {
+        next = [...approvalEnvBaseline.get(config)];
+    }
+    else {
+        const verdict = stageApprovalRequire(raw);
+        if (!verdict.ok)
+            return refuse(verdict);
+        next = verdict.value;
+    }
+    const unserviceable = unserviceableOnLeg(leg, { ...config, approvalRequire: next });
+    if (unserviceable !== undefined)
+        return refuse({ detail: unserviceable, reason: unserviceable, names: next, kept: KEPT_WOULD_NEVER_PARK });
+    const same = next.length === config.approvalRequire.length && next.every((n, i) => n === config.approvalRequire[i]);
+    return same ? {} : { next };
 }
 function legacyGateValues(rt) {
     const out = {};
@@ -416,16 +452,16 @@ function legacyGateValues(rt) {
             out[k] = rt[k];
     return out;
 }
-export function applyRuntimeGates(config, eff, logger) {
-    const s = stageApprovalGate(eff?.governance, logger);
-    for (const [k, v] of s.assignments)
-        config[k] = v;
+export function applyRuntimeGates(config, eff, leg, logger) {
+    const approval = stageApprovalGate(config, eff?.governance, leg, logger);
+    if (approval.next !== undefined)
+        config.approvalRequire = approval.next;
     const limits = stageLimits(config, { version: 0, legacyGates: legacyGateValues(eff?.runtime) }, logger);
     for (const [k, v] of limits.assignments)
         config[k] = v;
     for (const k of limits.deletions)
         delete config[k];
-    const info = { ...s.info, ...Object.fromEntries(limits.assignments) };
+    const info = { ...(approval.next !== undefined ? { approvalRequire: approval.next } : {}), ...Object.fromEntries(limits.assignments) };
     if (Object.keys(info).length > 0)
         logger?.info("sema_registry_runtime", info);
 }

package/dist/config-center/apply-ledger.d.ts

@@ -20,7 +20,16 @@
  * 🔴 原子承诺的**域**是单进程(§2):本账记的是「本副本的收敛状态」,不是 fleet 的。fleet 级判据 = 各副本
  * /health 的 applied == target,拉齐工具归运维面。
  */
-/** 一组的收敛状态(批1 只有 limitsHttp 组;后续批次按组追加,读面形不变)。 */
+/**
+ * 世代账按组记账的**组闭集**(读面 `groups` 的键集;加组 = 这里加词,报告形 `Record<组, …>` 随之编译红)。
+ *  · `limitsHttp` —— [ref] 批1 限额组(属主 `stage-limits.ts`);
+ *  · `approvalGate` —— S-668 波 2 审批组(`governance.approvalRequire`;属主 `apply-effective.ts` 的
+ *    `stageApprovalGate`:坏形 / 工具名匹配不到 / ④ 门意图不可服务 ⇒ 整组拒)。
+ * 两组同姿势、各用各的判据表(审批组**不**复用限额组的跨键不变量表 —— 那张表的候选视图只叠限额键)。
+ */
+export declare const CONFIG_APPLY_GROUPS: readonly ["limitsHttp", "approvalGate"];
+export type ConfigApplyGroup = (typeof CONFIG_APPLY_GROUPS)[number];
+/** 一组的收敛状态(读面形对所有组相同)。 */
 export interface ConfigApplyGroupState {
     /** 本组最后一次**真的落地**的源版本(身份标)。 */
     readonly appliedVersion: number;
@@ -48,27 +57,37 @@ export interface ConfigApplyLedgerView {
     readonly configAppliedOrdinal: number;
     /** target≠applied 的**持续**时长(ms);收敛时键缺席(健康面不制造噪音)。 */
     readonly configApplyStaleMs?: number;
-    readonly groups: Readonly<Record<string, ConfigApplyGroupState>>;
+    readonly groups: Readonly<Partial<Record<ConfigApplyGroup, ConfigApplyGroupState>>>;
+}
+/** 一组在一次 apply 里的报告(所有组同形)。 */
+export interface ConfigApplyGroupReport {
+    /** 本世代真正换了值的键。 */
+    readonly applied: readonly string[];
+    /** 值合法但**不热**的键(逐键 defer:变更只能重启生效)。 */
+    readonly deferred?: ReadonlyArray<{
+        readonly key: string;
+        readonly reason: string;
+    }>;
+    /** 整组被拒时的成因(消毒:键名 + 判据文案,绝不带值)。 */
+    readonly rejected?: {
+        readonly keys: readonly string[];
+        readonly reason: string;
+        readonly restartReason?: string;
+    };
 }
-/** applyEffective 的 post-commit 报告(见 apply-effective.ts `ApplyReport`)。 */
+/** applyEffective 的 post-commit 报告(见 apply-effective.ts `ApplyReport`)—— **每一组都报**。 */
 export interface ConfigApplyReport {
     readonly version: number;
     /** [ref]:本候选的收货序数(applyEffective opts.generation 原样带回;缺席=version 兼容臂)。 */
     readonly ordinal?: number;
-    readonly limits: {
-        readonly applied: readonly string[];
-        readonly deferred?: ReadonlyArray<{
-            readonly key: string;
-            readonly reason: string;
-        }>;
-        readonly rejected?: {
-            readonly keys: readonly string[];
-            readonly reason: string;
-            readonly restartReason?: string;
-        };
-    };
-    readonly fullyApplied?: boolean;
+    readonly groups: Readonly<Record<ConfigApplyGroup, ConfigApplyGroupReport>>;
 }
+/** 本报告里被整组拒的那些组(按组闭集序)。空 ⇒ 候选完整应用。两条 commit 腿的「部分应用」warn 与世代账共用。 */
+export declare function refusedGroups(report: ConfigApplyReport): Array<{
+    readonly group: ConfigApplyGroup;
+    readonly keys: readonly string[];
+    readonly reason: string;
+}>;
 export interface ConfigApplyLedger {
     /** 拉到一个候选(无论后续是否应用)。ordinal=收货序数,version=身份标。 */
     seenTarget(ordinal: number, version: number): void;

package/dist/config-center/apply-ledger.js

@@ -1,3 +1,10 @@
+export const CONFIG_APPLY_GROUPS = ["limitsHttp", "approvalGate"];
+export function refusedGroups(report) {
+    return CONFIG_APPLY_GROUPS.flatMap((group) => {
+        const r = report.groups[group].rejected;
+        return r ? [{ group, keys: r.keys, reason: r.reason }] : [];
+    });
+}
 export function createConfigApplyLedger(now = () => Date.now()) {
     let targetOrd = 0;
     let appliedOrd = 0;
@@ -6,6 +13,21 @@ export function createConfigApplyLedger(now = () => Date.now()) {
     const rejectedOrds = new Set();
     let divergedSince;
     const groups = {};
+    const nextGroupState = (prev, r, version) => {
+        if (r.rejected) {
+            return {
+                appliedVersion: prev?.appliedVersion ?? 0,
+                ...(prev?.deferredKeys ? { deferredKeys: prev.deferredKeys } : {}),
+                lastRejected: { keys: [...r.rejected.keys], reason: r.rejected.reason, version, at: now() },
+                ...(r.rejected.restartReason ? { deferredKeys: r.rejected.keys.map((key) => ({ key, reason: r.rejected.restartReason })) } : {}),
+            };
+        }
+        return {
+            appliedVersion: version,
+            ...(r.deferred && r.deferred.length > 0 ? { deferredKeys: r.deferred.map((d) => ({ key: d.key, reason: d.reason })) } : {}),
+            ...(prev?.lastRejected ? { lastRejected: prev.lastRejected } : {}),
+        };
+    };
     const reconcile = () => {
         if (targetOrd === appliedOrd)
             divergedSince = undefined;
@@ -32,28 +54,13 @@ export function createConfigApplyLedger(now = () => Date.now()) {
             reconcile();
         },
         recordApply(report) {
-            const prev = groups.limitsHttp;
             const ord = report.ordinal ?? report.version;
-            if (report.limits.rejected)
+            if (refusedGroups(report).length > 0)
                 rejectedOrds.add(ord);
             else
                 rejectedOrds.delete(ord);
-            if (report.limits.rejected) {
-                groups.limitsHttp = {
-                    appliedVersion: prev?.appliedVersion ?? 0,
-                    ...(prev?.deferredKeys ? { deferredKeys: prev.deferredKeys } : {}),
-                    lastRejected: { keys: [...report.limits.rejected.keys], reason: report.limits.rejected.reason, version: report.version, at: now() },
-                    ...(report.limits.rejected.restartReason
-                        ? { deferredKeys: report.limits.rejected.keys.map((key) => ({ key, reason: report.limits.rejected.restartReason })) }
-                        : {}),
-                };
-                return;
-            }
-            groups.limitsHttp = {
-                appliedVersion: report.version,
-                ...(report.limits.deferred && report.limits.deferred.length > 0 ? { deferredKeys: report.limits.deferred.map((d) => ({ key: d.key, reason: d.reason })) } : {}),
-                ...(prev?.lastRejected ? { lastRejected: prev.lastRejected } : {}),
-            };
+            for (const g of CONFIG_APPLY_GROUPS)
+                groups[g] = nextGroupState(groups[g], report.groups[g], report.version);
         },
         view() {
             const stale = divergedSince !== undefined ? now() - divergedSince : undefined;

package/dist/config-center/center-request.d.ts

@@ -0,0 +1,60 @@
+import { type CenterCredentialSource } from "../center-credential.js";
+export declare const SCHEMA_MAJOR_HEADER = "x-sema-schema-major";
+/** 已装 settings-schema 的 major(机器派生)。版本号不成形 ⇒ 模块装载即抛(装坏了的包不该带着一个猜出来的
+ *  major 去跟中心协商 wire 形)。 */
+export declare const SETTINGS_SCHEMA_MAJOR: string;
+/** 一个中心端点 = 基址 + 凭证来源(`ServiceConfig.configCenter` 结构上满足)。 */
+export interface CenterEndpoint {
+    readonly baseUrl: string;
+    readonly credential: CenterCredentialSource;
+}
+/** 中心路由闭集。 */
+export type CenterRoute = {
+    readonly kind: "effective";
+    readonly worker?: string | undefined;
+    readonly principal?: string | undefined;
+} | {
+    readonly kind: "skill-content";
+    readonly contentHash: string;
+} | {
+    readonly kind: "prompt-artifact";
+    readonly digest: string;
+} | {
+    readonly kind: "prompt-blob";
+    readonly digest: string;
+} | {
+    readonly kind: "fleet-leases";
+} | {
+    readonly kind: "fleet-instances";
+} | {
+    readonly kind: "fleet-usage";
+} | {
+    readonly kind: "execution-keys";
+};
+/**
+ * 拉取视图(`/api/config/effective`)查询串的**唯一拼装点**:`?principal=`(per-principal 视图)、`?worker=`
+ * (worker 作用域视图;对 `wpt_<self>` 是授权必需,对全量令牌无害)。
+ * [ref] E-15:执行体绑 scope 的参数将来加在这里(契约字段 settings-schema 6.0.0;本批不铸)。
+ */
+export declare function pullViewQuery(view: {
+    readonly worker?: string | undefined;
+    readonly principal?: string | undefined;
+}): string;
+export interface CenterRequestInit {
+    readonly method?: "GET" | "POST" | "DELETE";
+    /** JSON 请求体(在场 ⇒ `content-type: application/json`)。 */
+    readonly json?: unknown;
+    /** 条件请求(`if-none-match`)。 */
+    readonly etag?: string | undefined;
+    readonly timeoutMs: number;
+    readonly fetchImpl?: typeof fetch;
+}
+/**
+ * 对中心发一条请求。返回响应与**这次请求所用凭证的身份**(调用方据此给拿回来的候选打分箱标记,
+ * 见 `boot/config-center.ts` 的 LKG / prompt 状态分箱)。
+ */
+export declare function centerFetch(center: CenterEndpoint, route: CenterRoute, init: CenterRequestInit): Promise<{
+    res: Response;
+    identity: string;
+}>;
+//# sourceMappingURL=center-request.d.ts.map

package/dist/config-center/center-request.js

@@ -0,0 +1,71 @@
+import settingsSchemaPackage from "@sema-agent/settings-schema/package.json" with { type: "json" };
+import { CenterCredentialUnavailableError } from "../center-credential.js";
+export const SCHEMA_MAJOR_HEADER = "x-sema-schema-major";
+export const SETTINGS_SCHEMA_MAJOR = (() => {
+    const version = settingsSchemaPackage.version;
+    const m = /^(\d+)\.\d+\.\d+/.exec(version);
+    if (m === null)
+        throw new Error(`cannot derive ${SCHEMA_MAJOR_HEADER}: @sema-agent/settings-schema package.json has version ${JSON.stringify(version)}`);
+    return m[1];
+})();
+export function pullViewQuery(view) {
+    const parts = [];
+    if (view.principal !== undefined)
+        parts.push(`principal=${encodeURIComponent(view.principal)}`);
+    if (view.worker)
+        parts.push(`worker=${encodeURIComponent(view.worker)}`);
+    return parts.length === 0 ? "" : `?${parts.join("&")}`;
+}
+function contentRoot(kind) {
+    switch (kind) {
+        case "user-jwt":
+            return "/api/v1/me";
+        case "pull-token":
+        case "none":
+            return "/api/config";
+    }
+}
+function routePath(route, kind) {
+    switch (route.kind) {
+        case "effective":
+            return `/api/config/effective${pullViewQuery(route)}`;
+        case "skill-content":
+            return `${contentRoot(kind)}/skills/content/${encodeURIComponent(route.contentHash)}`;
+        case "prompt-artifact":
+            return `${contentRoot(kind)}/prompts/epoch-artifacts/${encodeURIComponent(route.digest)}`;
+        case "prompt-blob":
+            return `${contentRoot(kind)}/prompts/blobs/${encodeURIComponent(route.digest)}`;
+        case "fleet-leases":
+            return "/api/fleet/leases";
+        case "fleet-instances":
+            return "/api/fleet/instances";
+        case "fleet-usage":
+            return "/api/fleet/usage";
+        case "execution-keys":
+            return "/api/config/execution-keys";
+    }
+}
+export async function centerFetch(center, route, init) {
+    const scheme = new URL(center.baseUrl).protocol;
+    if (scheme !== "http:" && scheme !== "https:")
+        throw new Error(`SEMA_REGISTRY_URL must be http(s), got "${scheme}"`);
+    const cred = center.credential.read();
+    if (!cred.ok)
+        throw new CenterCredentialUnavailableError(cred.reason);
+    const headers = { [SCHEMA_MAJOR_HEADER]: SETTINGS_SCHEMA_MAJOR };
+    if (cred.kind !== "none")
+        headers.authorization = `Bearer ${cred.bearer}`;
+    if (init.json !== undefined)
+        headers["content-type"] = "application/json";
+    if (init.etag)
+        headers["if-none-match"] = init.etag;
+    const url = `${center.baseUrl.replace(/\/+$/, "")}${routePath(route, cred.kind)}`;
+    const res = await (init.fetchImpl ?? fetch)(url, {
+        method: init.method ?? "GET",
+        headers,
+        ...(init.json !== undefined ? { body: JSON.stringify(init.json) } : {}),
+        signal: AbortSignal.timeout(init.timeoutMs),
+    });
+    return { res, identity: cred.identity };
+}
+//# sourceMappingURL=center-request.js.map

package/dist/config-center/facade.d.ts

@@ -25,14 +25,20 @@
  *     reference. Both brains re-resolve `model.baseUrl || config.baseUrl` inside `buildRequest()` on every
  *     call (core 2.1.0 `brain/openai.js` + `brain/anthropic.js`), so a moved gateway takes effect on the
  *     next task with no restart.
- *   - the same plane under a **tier-frozen** Runner — deferred, not hot: core expands a PRIVATE catalog copy
- *     at construction, so `main` defers the whole plane and the `models-tiers` restart slice signals.
- *   - **`degrade-route`** — the one genuinely boot-frozen catalog consumer left: reactive degrade
+ *   - tiers (and the whole plane under an active tier table) — **HOT** as well: core expands a PRIVATE catalog
+ *     copy at Runner construction, and the refresh loop swaps every changed plane into all boot Runners before
+ *     commit (`Runner.swapDeps`, core 7.10.0; production always wires it). The old "tier-frozen ⇒ defer to restart"
+ *     arm and its `models-tiers` restart slice retired in S-668 波 0 — `/v1/models` and tier-word routing move on
+ *     the same tick.
+ *   - **`degrade-route`** — one of the two genuinely boot-frozen catalog consumers left (the other is the
+ *     memory-consolidation driver seat, last bullet): reactive degrade
  *     (`MODEL_DEGRADE_REACTIVE`) bakes the target Model + its gateway + its key into the brain composition
  *     at boot. It cannot be hot-applied without rebuilding the brain, so it is registered on the existing
  *     restartRequired /health contract instead (see `restart-signal.ts`). Fail-loud beats serving a stale
  *     gateway silently on the rate-limit path.
- *   - skills/mcp/scenarios/runtime-gates — restart-to-apply by construction (baked into the boot wiring).
+ *   - skills(+plugins)/mcp/a2a/scenarios — restart-to-apply by construction (baked into the boot
+ *     wiring); so is the memory-consolidation driver's model seat (`memory-consolidation` slice, S-668 波 0).
+ *     (`governance.approvalRequire` left this list in S-668 波 2 — its own staged group, hot on both legs.)
  *
  * ([ref] A13, internal-lossless) This module is now a FACADE: the implementation lives
  * alongside it in `src/config-center/` split by responsibility group (HTTP client / EffectiveConfig
@@ -43,7 +49,7 @@
  */
 export { fetchEffective, fetchPrincipalCaps, fetchPrincipalOrgMemory, ConfigCenterHttpError, fetchSkillContent, fetchPromptArtifact, fetchPromptBlob, } from "./http-client.js";
 export { mutateInPlace, applyEffective, type ApplyReport, applyRuntimeGates, applyRuntimeHot, resolveDefaultModelName, logEffectiveDiff, } from "./apply-effective.js";
-export { restartReasons, planeHasActiveTiers, modelPlaneChanged, type RestartSlice, type RestartSliceCtx, type RestartSignal, } from "./restart-signal.js";
+export { restartReasons, modelPlaneChanged, type RestartSlice, type RestartSliceCtx, type RestartSignal, } from "./restart-signal.js";
 export { applyCenterSkills, resolveMcpServers, mcpForScenario, resolveA2aPeers, a2aForScenario } from "./skills-mcp.js";
 export { applyCenterReadFace, CENTER_READ_FACE_LIVE_KEYS, type CenterReadFaceApply, type CenterReadFaceReport, type ReadFaceBaseline } from "./read-face.js";
 export type { CenterSkillManifest, CenterMcpServer, CenterA2aPeer, CenterModel, CenterReadFace, EffectiveConfig, ExecutionRuling, SessionMirrorRuling, } from "./types.js";

package/dist/config-center/facade.js

@@ -1,6 +1,6 @@
 export { fetchEffective, fetchPrincipalCaps, fetchPrincipalOrgMemory, ConfigCenterHttpError, fetchSkillContent, fetchPromptArtifact, fetchPromptBlob, } from "./http-client.js";
 export { mutateInPlace, applyEffective, applyRuntimeGates, applyRuntimeHot, resolveDefaultModelName, logEffectiveDiff, } from "./apply-effective.js";
-export { restartReasons, planeHasActiveTiers, modelPlaneChanged, } from "./restart-signal.js";
+export { restartReasons, modelPlaneChanged, } from "./restart-signal.js";
 export { applyCenterSkills, resolveMcpServers, mcpForScenario, resolveA2aPeers, a2aForScenario } from "./skills-mcp.js";
 export { applyCenterReadFace, CENTER_READ_FACE_LIVE_KEYS } from "./read-face.js";
 //# sourceMappingURL=facade.js.map

package/dist/config-center/hot-keys-registry.d.ts

@@ -6,7 +6,7 @@
  * 键 → 组 → 换代手法 → **参数化用例 ID**(不是文件名——文件名粒度挡不住「文件在、用例没了」)。
  *
  * 机器门在 test/config-hot/batch1-hot-keys-registry.test.ts:登记为热却没有三断言用例 = 红;
- * 表的键集与 stage 真正消费的键集(`BATCH1_LIMIT_KEYS`)不等 = 红。
+ * 表的键集与 stage 真正消费的键集(`BATCH1_LIMIT_KEYS` ∪ `APPROVAL_GROUP_KEYS`)不等 = 红。
  *
  * ⚠️ 本表**只登记已落地的批**。批2-4 的键在各自批次里追加(设计稿 §6),不提前写进来 —— 一个「登记为热
  * 但没接线」的条目正是本表要消灭的那种谎。
@@ -27,8 +27,8 @@ export interface HotKeyEntry {
     readonly key: keyof ServiceConfigFlat;
     readonly group: keyof ServiceConfigGroups;
     readonly form: HotKeyForm;
-    /** 落地批次(设计稿 §6 的批号)。 */
-    readonly batch: 1;
+    /** 落地批次:1 = [ref] 批1(limitsHttp 组);2 = S-668 波 2(审批组 —— [ref] §6 原排的「批2」)。 */
+    readonly batch: 1 | 2;
     readonly cases: HotKeyCases;
 }
 /**
@@ -57,6 +57,13 @@ export declare const DEFERRED_LIMIT_KEYS: ReadonlyArray<{
     readonly restartReason: string;
     readonly why: string;
 }>;
-/** 热键表 = 批1 消费键集**减去**显式 deferred 的那些(表只登记真的热的键)。 */
+/**
+ * S-668 波 2([ref] §3)—— **审批组**真正接线的键:`apply-effective.ts` 的 `stageApprovalGate` 消费、报告(世代账
+ * `groups.approvalGate`)与拒绝(拒因的键名)都取这一张表。换代手法 A′:消费点本就逐请求现读活 config(审批基线 /
+ * SendUserFile 子代闸 / 会话与记忆读面 / parked 赎回),leader 腿与单用户基线改成现读之后,热只差 refresh 腿的写口。
+ */
+export declare const APPROVAL_GROUP_KEYS: readonly ["approvalRequire"];
+export type ApprovalGroupKey = (typeof APPROVAL_GROUP_KEYS)[number];
+/** 热键表 = 批1 消费键集**减去**显式 deferred 的那些 + 审批组(表只登记真的热的键)。 */
 export declare const HOT_KEYS_REGISTRY: readonly HotKeyEntry[];
 //# sourceMappingURL=hot-keys-registry.d.ts.map

package/dist/config-center/hot-keys-registry.js

@@ -29,11 +29,15 @@ export const DEFERRED_LIMIT_KEYS = [
     },
 ];
 const DEFERRED_KEYS = new Set(DEFERRED_LIMIT_KEYS.map((d) => d.key));
-export const HOT_KEYS_REGISTRY = BATCH1_LIMIT_KEYS.filter((key) => !DEFERRED_KEYS.has(key)).map((key) => ({
-    key,
-    group: "limitsHttp",
-    form: (B_SETTER_KEYS.includes(key) ? "B-setter" : "A-prime"),
-    batch: 1,
-    cases: cases(key),
-}));
+export const APPROVAL_GROUP_KEYS = ["approvalRequire"];
+export const HOT_KEYS_REGISTRY = [
+    ...BATCH1_LIMIT_KEYS.filter((key) => !DEFERRED_KEYS.has(key)).map((key) => ({
+        key,
+        group: "limitsHttp",
+        form: (B_SETTER_KEYS.includes(key) ? "B-setter" : "A-prime"),
+        batch: 1,
+        cases: cases(key),
+    })),
+    ...APPROVAL_GROUP_KEYS.map((key) => ({ key, group: "approval", form: "A-prime", batch: 2, cases: cases(key) })),
+];
 //# sourceMappingURL=hot-keys-registry.js.map