@sema-agent/server 7.99.0 → 7.100.0

package/dist/boot/config-center.d.ts

@@ -8,6 +8,7 @@ import { type ModelKeyRef } from "../key-resolver.js";
 import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import type { UnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
+import type { ConsolidationSeatWatch } from "./memory-consolidation.js";
 import { type RestartSignal } from "../config-center/facade.js";
 import { type ConfigApplyLedgerView } from "../config-center/apply-ledger.js";
 import type { LimitSync } from "./limit-sync.js";
@@ -43,19 +44,25 @@ export interface ConfigCenterRuntime {
     /** 60s refresh cadence + boot-deferred 到货续接。
      *  `limitSync`([ref] 批1)= 恒构造的两只限额座的换代口:commit 之后**零 await 内**推一把,与 pricing /
      *  keyResolver 那两件派生重建同族(缺席 = 这条腿本部署没装配,例如 run-local)。
-     *  `swapRunnerDeps`(core 7.10.0 `Runner.swapDeps` 一扇门;5.49 起的 `swapModels` 口在 7.10.0 退役、
-     *  本参数同语义改名)= **可换席**的换装口:模型面 plane 变更候选在 commit 前喂给全部 boot Runner
-     *  原子换代(在场 ⇒ models-tiers defer/restart 臂退役,缺席 ⇒ 旧 defer 行为逐字保留);S-174 起
-     *  read **face** 席也走同一只函数(见 refresh 拍里的 `applyCenterReadFace` 调用点)。
+     *  `swapRunnerDeps`(core 7.10.0 `Runner.swapDeps` 一扇门)= **可换席**的换装口,**必填**:模型面 plane
+     *  变更候选在 commit 前喂给全部 boot Runner 原子换代;S-174 起 read **face** 席也走同一只函数(见 refresh
+     *  拍里的 `applyLiveReadFace`)。S-668 波 0 起必填 —— 它缺席的那一形(模型面整面 defer 到重启 + `models-tiers`
+     *  重启片)在生产上从来到不了(stage-08 唯一调用点恒传),随片一起退役;要刷新环就要有 Runner 可换。
      *  `ceilingVerdict`(S-232)= 「配了 $ 天花板但目录未定价」这条判决的活载体,与 `limitSync` **同族同序**
      *  (commit 之后、零 await 内重判一次;判决不翻转就静默)。缺席 = 这条腿本部署没装配(run-local 一次性
-     *  CLI 之后不再有刷新拍,它继续用纯判据判一次)。 */
+     *  CLI 之后不再有刷新拍,它继续用纯判据判一次)。
+     *  `consolidationSeat`(S-668 波 0,过渡)= 整理驱动席的两侧读数口,喂 `memory-consolidation` 重启片;
+     *  缺席 = 阀门关着(没有 boot 烤死的席)。
+     *  `checkpointStorePresent`(S-668 波 2,**必填**)= 部署事实「本进程建没建出 checkpoint 店」(stage-06 的产物,
+     *  不在 ServiceConfig 里)。审批名单转热之后,热腿要用它判 ④「门意图不可服务」(与 boot 拒启同一只判据);
+     *  必填 = 刷新环不可能在不知道这件事的情况下热应用审批名单。 */
     startRefreshLoop(a: {
-        runnerTierFrozen: boolean;
         pricing: ReturnType<typeof buildPricing>;
         limitSync?: LimitSync;
-        swapRunnerDeps?: (next: SwappableDeps) => void;
+        swapRunnerDeps: (next: SwappableDeps) => void;
         ceilingVerdict?: UnpricedCeilingVerdict;
+        consolidationSeat?: ConsolidationSeatWatch;
+        checkpointStorePresent: boolean;
     }): void;
     /** [ref]-2:停刷新环(hardShutdown 收尾链;幂等,未起环时 no-op)。 */
     stopRefreshLoop(): void;
@@ -78,7 +85,8 @@ export interface ConfigCenterRuntime {
     modelReady(): boolean;
     /** /health.restart(orchestrator 自动重启信号)。 */
     restartState(): RestartSignal | undefined;
-    /** /health.modelPlaneDeferred(codex R18 卡死的 plane,无 next-boot handoff)。 */
+    /** /health.modelPlaneDeferred:被扣着、还没有 next-boot handoff 的候选(codex R18 起的状态机)。S-668 波 0 起
+     *  模型面不再 defer,键名保留,今天承载的是 durable LKG 发布债与 skills 债(见 `planeDeferredNoHandoff`)。 */
     planeDeferredState(): {
         version: number;
         since: number;

package/dist/boot/config-center.js

@@ -18,10 +18,10 @@ import { createConfigProvider, raceBootFetch, BOOT_FETCH_DEFERRED } from "../con
 import { executionLaneCaps, executionLaneOf } from "../execution-lane-caps.js";
 import { createKeyResolver } from "../key-resolver.js";
 import { ensureSealedKeyStore, reportExecutionPublicKey } from "../sealed-key.js";
-import { applyEffective, applyCenterReadFace, mutateInPlace, logEffectiveDiff, applyCenterSkills, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, planeHasActiveTiers, fetchPromptArtifact } from "../config-center/facade.js";
+import { applyEffective, applyCenterReadFace, mutateInPlace, logEffectiveDiff, applyCenterSkills, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, fetchPromptArtifact } from "../config-center/facade.js";
 import { createMcpRevocationLedger, enabledMcpEntries } from "../config-center/mcp-revocation.js";
 import { SHA256_HEX_RE } from "../digest-form.js";
-import { createConfigApplyLedger } from "../config-center/apply-ledger.js";
+import { createConfigApplyLedger, refusedGroups } from "../config-center/apply-ledger.js";
 export async function createConfigCenterRuntime(ctx) {
     const { config, logger, metrics, localRoot } = ctx;
     let ccEtag;
@@ -353,7 +353,7 @@ export async function createConfigCenterRuntime(ctx) {
         const bootApplyLkgInline = async (lkgR) => {
             const lkgGen = generationOf(lkgR.effective.version);
             applyLedger.seenTarget(lkgGen, lkgR.effective.version);
-            applyEffective(config, lkgR.effective, logger, { sealedKeys, generation: lkgGen, report: (rep) => applyLedger.recordApply(rep) });
+            applyEffective(config, lkgR.effective, logger, { leg: "boot", sealedKeys, generation: lkgGen, report: (rep) => applyLedger.recordApply(rep) });
             applyLedger.applied(lkgGen, lkgR.effective.version);
             await adoptCenterPrompts(lkgR.effective, "boot-lkg");
             markRosterLanded(lkgR.effective);
@@ -409,6 +409,7 @@ export async function createConfigCenterRuntime(ctx) {
                     applyLedger.seenTarget(bootGen, r.effective.version);
                     let bootReport;
                     applyEffective(config, r.effective, logger, {
+                        leg: "boot",
                         sealedKeys,
                         generation: bootGen,
                         report: (rep) => {
@@ -474,8 +475,10 @@ export async function createConfigCenterRuntime(ctx) {
     let keyResolver;
     const mcpRevocations = createMcpRevocationLedger((ev) => logger.info("mcp_revocation_ledger", { ...(ev.revoked.length > 0 ? { revoked: ev.revoked } : {}), ...(ev.restored.length > 0 ? { restored: ev.restored } : {}) }));
     let mcpRevocationWired = false;
-    const restartCtx = () => ({
+    const restartCtx = (consolidationSeat) => ({
         ...(config.degrade?.reactive ? { reactiveDegradeTo: config.degrade.to } : {}),
+        pluginsAllowHosts: config.pluginsAllowHosts,
+        ...(consolidationSeat !== undefined ? { consolidationSeat } : {}),
         ...(readFaceEnvHeld.length > 0 ? { readFaceEnvHeld } : {}),
         ...(mcpRevocationWired && mcpRevocations.hasBaseline() ? { mcpRevocationLive: true } : {}),
     });
@@ -485,10 +488,6 @@ export async function createConfigCenterRuntime(ctx) {
         const { faceChanged } = applyCenterReadFace(config, eff, logger, { phase: "live", baseline: readFaceBaseline });
         if (!faceChanged)
             return;
-        if (swap === undefined) {
-            logger.warn("read_face_swap_unwired", { face: config.readFace ?? null, phase, note: "the center's read FACE changed but no Runner swap door was wired — the value landed in config while the engine keeps the seat it booted with" });
-            return;
-        }
         try {
             swap({ readFace: config.readFace });
             logger.info("read_face_swapped", { from: before ?? null, to: config.readFace ?? null, phase, note: "hot seat (core swapDeps) — legs that already prepared keep the face they prepared under" });
@@ -644,7 +643,7 @@ export async function createConfigCenterRuntime(ctx) {
             }
         },
         startRefreshLoop(a) {
-            const { runnerTierFrozen, pricing, limitSync, swapRunnerDeps, ceilingVerdict } = a;
+            const { pricing, limitSync, swapRunnerDeps, ceilingVerdict, consolidationSeat, checkpointStorePresent } = a;
             if (configProvider) {
                 const ccRef = config.configCenter;
                 let refreshInFlight = false;
@@ -662,14 +661,14 @@ export async function createConfigCenterRuntime(ctx) {
                         if (r === null && planeDeferredNoHandoff) {
                             const skillsDebt = (planeDeferredNoHandoff.blocked ?? []).includes("skills");
                             const promoted = lkgSurvivesRestart || skillsDebt ? await persistLkgDurable(planeDeferredNoHandoff.candidate, planeDeferredNoHandoff.candidateEtag) : false;
-                            const skillsProofPromotion = !promoted && !lkgSurvivesRestart && skillsDebt && lastPrewarmBodiesVerified && planeDeferredNoHandoff.planeDeferred !== true;
+                            const skillsProofPromotion = !promoted && !lkgSurvivesRestart && skillsDebt && lastPrewarmBodiesVerified;
                             if (skillsProofPromotion) {
                                 pendingRestart = { restartRequired: true, reasons: ["skills"], version: planeDeferredNoHandoff.version, since: Date.now() };
                                 logger.info("config_boot_skill_debt_promoted", { version: planeDeferredNoHandoff.version, note: "skill bodies verified on a source-confirmed-current candidate — the withheld skills restart is now published (non-durable lane, repair proven)" });
                                 planeDeferredNoHandoff = undefined;
                             }
                             else if (promoted) {
-                                const promotedReasons = [...new Set([...(planeDeferredNoHandoff.blocked ?? []), ...(planeDeferredNoHandoff.planeDeferred ? ["models-tiers"] : [])])];
+                                const promotedReasons = [...new Set(planeDeferredNoHandoff.blocked ?? [])];
                                 if (promotedReasons.length > 0) {
                                     pendingRestart = { restartRequired: true, reasons: promotedReasons, version: planeDeferredNoHandoff.version, since: Date.now() };
                                 }
@@ -710,18 +709,17 @@ export async function createConfigCenterRuntime(ctx) {
                             }
                             else {
                                 const planeChanged = modelPlaneChanged(appliedPlaneEff, r.effective);
-                                const planeDeferred = swapRunnerDeps === undefined && (runnerTierFrozen || planeHasActiveTiers(r.effective)) && planeChanged;
                                 let applyReport;
                                 const committed = applyEffective(config, r.effective, logger, {
-                                    teamsOnly: true,
+                                    leg: "hot",
+                                    checkpointStorePresent,
                                     sealedKeys,
                                     generation: tickGen,
                                     report: (rep) => {
                                         applyReport = rep;
                                         applyLedger.recordApply(rep);
                                     },
-                                    ...(planeDeferred ? { deferModelPlane: true } : {}),
-                                    ...(swapRunnerDeps !== undefined && planeChanged ? { swapPlane: swapRunnerDeps } : {}),
+                                    ...(planeChanged ? { swapPlane: swapRunnerDeps } : {}),
                                 });
                                 if (!committed)
                                     return "ok";
@@ -732,57 +730,37 @@ export async function createConfigCenterRuntime(ctx) {
                                 mcpRevocations.applyEnabledEntries(enabledMcpEntries(r.effective.mcp));
                                 applyLiveReadFace(r.effective, swapRunnerDeps, "refresh");
                                 applyLedger.applied(tickGen, r.effective.version);
-                                if (planeDeferred) {
-                                    logger.warn("models_tiers_plane_deferred", { version: r.effective.version, note: "tier-frozen Runner: the changed model plane (models/roles/tiers/default) is NOT hot-applied — admission stays on the Runner's generation; restart applies the new plane (models-tiers restart signal rides /health)" });
-                                }
-                                else {
-                                    appliedPlaneEff = r.effective;
-                                    planeDeferredNoHandoff = undefined;
-                                }
+                                appliedPlaneEff = r.effective;
+                                planeDeferredNoHandoff = undefined;
                                 await adoptCenterPrompts(r.effective, "refresh");
-                                if (!planeDeferred)
-                                    markRosterLanded(r.effective);
+                                markRosterLanded(r.effective);
                                 const fullyApplied = applyReport?.fullyApplied !== false;
                                 if (!fullyApplied) {
+                                    ccEtag = undefined;
+                                    const refused = applyReport ? refusedGroups(applyReport) : [];
                                     logger.warn("config_candidate_partially_applied", {
                                         version: r.effective.version,
-                                        rejected: applyReport?.limits.rejected?.keys ?? [],
+                                        rejected: refused.flatMap((g) => g.keys),
+                                        groups: refused.map((g) => g.group),
                                         note: "a group of this candidate was refused — the live config keeps serving the prior values for it; the LKG and the ETag stay on the last FULLY applied generation (this tree is re-judged next tick)",
                                     });
                                     return "ok";
                                 }
                                 const lkgPersisted = await persistLkgDurable(r.effective, r.etag);
-                                const reasons = restartReasons(effective, r.effective, restartCtx());
-                                if (swapRunnerDeps !== undefined) {
-                                    const mi = reasons.indexOf("models-tiers");
-                                    if (mi >= 0)
-                                        reasons.splice(mi, 1);
-                                }
+                                const reasons = restartReasons(effective, r.effective, restartCtx(consolidationSeat?.read()));
                                 const skillsChangeDetected = reasons.includes("skills");
                                 if (bootSkillStale && !skillsChangeDetected)
                                     reasons.push("skills");
-                                if (planeDeferred) {
-                                    if (lkgPersisted) {
-                                        if (!reasons.includes("models-tiers"))
-                                            reasons.push("models-tiers");
-                                        planeDeferredNoHandoff = undefined;
-                                    }
-                                    else {
-                                        const blocked = reasons.splice(0, reasons.length);
-                                        planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), ...(blocked.length > 0 ? { blocked } : {}), planeDeferred: true, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
-                                        logger.warn("models_tiers_deferred_no_handoff", { version: r.effective.version, blockedReasons: blocked, note: "plane deferred but no NEXT-BOOT handoff (LKG disabled/unwritable, or storage not declared restart-surviving — set CONFIG_LKG_DURABLE=true) — the WHOLE restart signal is withheld (it would loop); the old generation keeps serving" });
-                                    }
-                                }
-                                else if (lkgSurvivesRestart && !lkgPersisted) {
+                                if (lkgSurvivesRestart && !lkgPersisted) {
                                     const blocked = reasons.splice(0, reasons.length);
-                                    planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), blocked, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
+                                    planeDeferredNoHandoff = { version: r.effective.version, since: Date.now(), blocked, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
                                     logger.warn("restart_candidate_publication_incomplete", { version: r.effective.version, blockedReasons: blocked, note: "durable LKG declared but the candidate's publication is incomplete (skill bodies unverified) — restart signal withheld; retried every tick until the cache completes" });
                                 }
-                                else if (!planeDeferred && !lkgSurvivesRestart && bootSkillStale && !skillsChangeDetected && !lastPrewarmBodiesVerified) {
+                                else if (!lkgSurvivesRestart && bootSkillStale && !skillsChangeDetected && !lastPrewarmBodiesVerified) {
                                     const i = reasons.indexOf("skills");
                                     if (i >= 0) {
                                         reasons.splice(i, 1);
-                                        planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), blocked: ["skills"], candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
+                                        planeDeferredNoHandoff = { version: r.effective.version, since: Date.now(), blocked: ["skills"], candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
                                         logger.warn("config_boot_skill_debt_withheld", { version: r.effective.version, note: "boot skill debt still unproven on a non-durable deployment (body cache does not verify) — skills restart withheld this tick; re-verified each tick and published once the bodies prove fetchable" });
                                     }
                                 }
@@ -797,7 +775,7 @@ export async function createConfigCenterRuntime(ctx) {
                                 }
                                 logger.info("sema_registry_refreshed", {
                                     version: r.effective.version,
-                                    note: "collab + runtime governance + limits + models/roles/roster hot-applied; skills/mcp/runtime-gates(approvalRequire)/scenarios are restart-to-apply",
+                                    note: "collab + runtime governance (incl. approvalRequire) + limits + models/roles/roster hot-applied; skills/mcp/a2a/scenarios are restart-to-apply",
                                     ...(pendingRestart ? { restartRequired: true, restartReasons: pendingRestart.reasons } : {}),
                                 });
                                 latestEffective = r.effective;
@@ -858,18 +836,17 @@ export async function createConfigCenterRuntime(ctx) {
                         return;
                     }
                     const planeChangedLate = modelPlaneChanged(appliedPlaneEff, r.effective);
-                    const planeDeferredLate = swapRunnerDeps === undefined && (runnerTierFrozen || planeHasActiveTiers(r.effective)) && planeChangedLate;
                     let applyReportLate;
                     const committedLate = applyEffective(config, r.effective, logger, {
-                        teamsOnly: true,
+                        leg: "hot",
+                        checkpointStorePresent,
                         sealedKeys,
                         generation: lateGen,
                         report: (rep) => {
                             applyReportLate = rep;
                             applyLedger.recordApply(rep);
                         },
-                        ...(planeDeferredLate ? { deferModelPlane: true } : {}),
-                        ...(swapRunnerDeps !== undefined && planeChangedLate ? { swapPlane: swapRunnerDeps } : {}),
+                        ...(planeChangedLate ? { swapPlane: swapRunnerDeps } : {}),
                     });
                     if (!committedLate)
                         return;
@@ -879,20 +856,18 @@ export async function createConfigCenterRuntime(ctx) {
                     ceilingVerdict?.judge();
                     applyLiveReadFace(r.effective, swapRunnerDeps, "boot-deferred");
                     applyLedger.applied(lateGen, r.effective.version);
-                    if (planeDeferredLate)
-                        logger.warn("models_tiers_plane_deferred", { version: r.effective.version, note: "tier-frozen Runner (env tiers): the late-boot center model plane is NOT hot-applied — restart applies it" });
-                    else {
-                        appliedPlaneEff = r.effective;
-                        planeDeferredNoHandoff = undefined;
-                    }
+                    appliedPlaneEff = r.effective;
+                    planeDeferredNoHandoff = undefined;
                     await adoptCenterPrompts(r.effective, "boot-deferred");
-                    if (!planeDeferredLate)
-                        markRosterLanded(r.effective);
+                    markRosterLanded(r.effective);
                     const fullyAppliedLate = applyReportLate?.fullyApplied !== false;
                     if (!fullyAppliedLate) {
+                        ccEtag = undefined;
+                        const refusedLate = applyReportLate ? refusedGroups(applyReportLate) : [];
                         logger.warn("config_candidate_partially_applied", {
                             version: r.effective.version,
-                            rejected: applyReportLate?.limits.rejected?.keys ?? [],
+                            rejected: refusedLate.flatMap((g) => g.keys),
+                            groups: refusedLate.map((g) => g.group),
                             note: "late-boot candidate had a refused group — the LKG/ETag stay on the last FULLY applied generation; the refresh cadence re-judges the same tree",
                         });
                         return;
@@ -901,27 +876,10 @@ export async function createConfigCenterRuntime(ctx) {
                     latestEffective = r.effective;
                     ccEtag = r.etag;
                     const lkgPersistedLate = await persistLkgDurable(r.effective, r.etag);
-                    const reasons = restartReasons(undefined, r.effective, restartCtx());
-                    if (swapRunnerDeps !== undefined) {
-                        const miLate = reasons.indexOf("models-tiers");
-                        if (miLate >= 0)
-                            reasons.splice(miLate, 1);
-                    }
-                    if (planeDeferredLate) {
-                        if (lkgPersistedLate) {
-                            if (!reasons.includes("models-tiers"))
-                                reasons.push("models-tiers");
-                            planeDeferredNoHandoff = undefined;
-                        }
-                        else {
-                            const blocked = reasons.splice(0, reasons.length);
-                            planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), ...(blocked.length > 0 ? { blocked } : {}), planeDeferred: true, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
-                            logger.warn("models_tiers_deferred_no_handoff", { version: r.effective.version, blockedReasons: blocked, note: "late-boot plane deferred but no NEXT-BOOT handoff (see CONFIG_LKG_DURABLE) — the WHOLE restart signal is withheld (it would loop); old generation keeps serving" });
-                        }
-                    }
-                    else if (planeDeferredLate === false && lkgSurvivesRestart && !lkgPersistedLate) {
+                    const reasons = restartReasons(undefined, r.effective, restartCtx(consolidationSeat?.read()));
+                    if (lkgSurvivesRestart && !lkgPersistedLate) {
                         const blocked = reasons.splice(0, reasons.length);
-                        planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), blocked, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
+                        planeDeferredNoHandoff = { version: r.effective.version, since: Date.now(), blocked, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
                         logger.warn("restart_candidate_publication_incomplete", { version: r.effective.version, blockedReasons: blocked, note: "late-boot candidate publication incomplete on a durable-declared deployment — restart signal withheld; retried every tick" });
                     }
                     if (reasons.length > 0)

package/dist/boot/execution-env.d.ts

@@ -1,4 +1,3 @@
-import { NodeLspManager } from "@sema-agent/core";
 import { TaskEnvRegistry } from "../capabilities/sandbox-file-send.js";
 import { SessionEnvironmentSelection } from "../capabilities/select-environment-tool.js";
 import type { ServiceConfig } from "../config.js";
@@ -67,6 +66,6 @@ export declare function createExecutionEnv(ctx: ExecutionEnvCtx): {
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     worktreeReap: (() => Promise<void>) | undefined;
     sendUserFileTaskEnvs: TaskEnvRegistry | undefined;
-    lspManager: import("../lsp/manager.js").E2bLspManager | NodeLspManager | undefined;
+    lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
 };
 //# sourceMappingURL=execution-env.d.ts.map

package/dist/boot/execution-env.js

@@ -1,6 +1,6 @@
 import { existsSync } from "node:fs";
 import { join } from "node:path";
-import { NodeLspManager } from "@sema-agent/core";
+import { createHostLspManager } from "../host-lsp-manager.js";
 import { sandboxSendLaneEnabled, TaskEnvRegistry } from "../capabilities/sandbox-file-send.js";
 import { SessionEnvironmentSelection } from "../capabilities/select-environment-tool.js";
 import { createE2bLspManager } from "../lsp/e2b-manager.js";
@@ -290,7 +290,7 @@ export function createExecutionEnv(ctx) {
         })
         :
             lspProvider === "host" && config.lspHostEnabled && config.requirePrincipal !== true
-                ? new NodeLspManager({ log: (event, fields) => logger.info(event, fields) })
+                ? createHostLspManager((event, fields) => logger.info(event, fields))
                 : undefined;
     if (lspManager)
         logger.info("lsp_enabled", { provider: lspProvider });

package/dist/boot/leader.js

@@ -1,6 +1,7 @@
 import { createLeaderEndpoint } from "../leader/endpoint.js";
 import { createLeaderRunner } from "../leader/wire.js";
 import { buildDeploymentPostureSeats } from "./runner-deps.js";
+import { hasApprovalListIntent } from "../approval.js";
 export function leaderK8sMinioGap(leaderEnabled, leaderProvider, hasS3) {
     if (!(leaderEnabled && leaderProvider === "k8s" && !hasS3))
         return null;
@@ -67,16 +68,18 @@ export function createLeaderFace(ctx) {
             ...(toolResultStore ? { toolResultStore } : {}),
             ...(leaderProvider === "k8s" ? { workspace: "/workspace" } : {}),
             sessionStore,
-            ...(checkpointStore && config.approvalRequire.length > 0
+            ...(checkpointStore
                 ? {
-                    durable: {
-                        checkpointStore,
-                        requireApproval: config.approvalRequire,
-                        deny: config.approvalDeny,
-                        autoBudget: config.approvalAutoBudget,
-                        neverAuto: config.approvalNeverAuto,
-                        ...(config.approvalTimeoutSec > 0 ? { ttlMs: config.approvalTimeoutSec * 1000 } : {}),
-                    },
+                    durable: () => hasApprovalListIntent(config)
+                        ? {
+                            checkpointStore,
+                            requireApproval: config.approvalRequire,
+                            deny: config.approvalDeny,
+                            autoBudget: config.approvalAutoBudget,
+                            neverAuto: config.approvalNeverAuto,
+                            ...(config.approvalTimeoutSec > 0 ? { ttlMs: config.approvalTimeoutSec * 1000 } : {}),
+                        }
+                        : undefined,
                 }
                 : {}),
         }), {

package/dist/boot/memory-consolidation.d.ts

@@ -1,3 +1,4 @@
+import type { RestartSliceCtx } from "../config-center/restart-signal.js";
 import { type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type MemoryBackend, type MemoryConsolidationDriverDeps, type RunMemoryConsolidationOptions, type SessionCaptureRecordStore } from "@sema-agent/core";
 /** D3 投影的座标签闭集。`role:<name>` 里的 name 只可能是 core 的 role 链两跳之一。 */
 export type ConsolidationSeatLabel = "explicit" | "role:consolidate" | "role:summarize";
@@ -30,6 +31,43 @@ export interface ConsolidationDriverSeat {
  * (探针只构造闭包、不发任何请求、无副作用。)
  */
 export declare function resolveConsolidationDriverSeat(deps: MemoryConsolidationDriverDeps): ConsolidationDriverSeat;
+/**
+ * S-668 波 0([ref] §3)—— 整理驱动席的 **restart 读数**。过渡件:**波 1 转热后删**(那时每轮 run 起手
+ * 现取当前代的席,不再有 boot 烤死的席,这只表也就没有要比的东西了)。
+ *
+ * ## 为什么要它
+ *
+ * 席位在 boot 期解析一次(本模块头注「座在启动期解析一次」),core 的解析器把它选中的那只 `Model` 对象焊进
+ * chat 闭包。refresh 拍对模型面的热换(`mutateInPlace` + `swapDeps`)换的是目录里的**值**,够不到那只对象
+ * ⇒ 中心改了 roles / 档位绑定 / 那条目录条目之后,整理跑仍打 boot 那一代。修前没有任何一片签它 —— 它唯一
+ * 沾边的 `models-tiers` 片在生产上恒被摘除(今已退役)—— 于是这块是「静默冷」:既不热应用、也不报重启。
+ *
+ * ## 读法:问 core 的**同一只**解析器,不抄它的 role 链
+ *
+ * 席位 = `consolidate → summarize(含 flash 档位缺省)` 那条链对「env 角色底 + 中心目录 + 档位表」解出来的
+ * 那只 Model;本层抄一份链就是第二真源({@link seatLabel} 注里同一条理由)。做法:拿活配置调
+ * `resolveMemoryConsolidationDriver`,brain 与 per-model 凭据席都换成探针,再调一次它交回的 `chat` ——
+ * core 的 chat 第一件事就是拿**它选中的那只 Model** 问凭据席(`deps.getApiKeyAndHeaders?.(resolved)`,在
+ * 第一个 await 之前同步求值),探针在那一刻记下它并抛停:零请求、零副作用。
+ * ⚠️ 这一步依赖 core chat 闭包的**行为次序**:哪天 core 改成先做别的再问凭据席,探针就截不到 —— 那一刻本函数
+ * **响亮抛**(boot 期抛 = 阀门开着的部署拒启,句子说清原因),不退化成「读不到就当没变」(那正是本件要消灭的
+ * 静默)。钉:test/memory-consolidation-driver.test.ts 的探针格对真 core 跑,提货批当场红。
+ *
+ * ## 指纹里有什么
+ *
+ * 整只 Model 减掉 `cost`:整理跑只读 usage 的 token 数、零处读价目(core 7.29.0 的 driver 实现零 `cost` /
+ * `pricing` 读点),纯改价不该造一次重启。解不出来(中心撤掉了 consolidate / summarize 两跳)⇒ 记成
+ * `{ unresolvable: <core 原句> }`,与 boot 那只不等 ⇒ 签重启;重启会在 D1 拒启、把同一句原句写进拒因 ——
+ * 那正是运维该看见的话,比「这台还在用一只中心已经撤掉的席」诚实。
+ */
+export interface ConsolidationSeatWatch {
+    /** boot 烤进去的席 vs 活配置此刻会解出的席(`restartReasons` 的 `memory-consolidation` 片两侧读数)。 */
+    read(): NonNullable<RestartSliceCtx["consolidationSeat"]>;
+}
+/** 解席的输入面 = boot 期真席用的同三件(活引用:refresh 就地换代,`read()` 每次现取)。 */
+export type ConsolidationSeatPlane = Pick<MemoryConsolidationDriverDeps, "models" | "tiers" | "roles">;
+/** `create*`:返回带捕获状态(boot 那只指纹)的活对象。须在真席解析的**同一时刻**调(同一份输入)。 */
+export declare function createConsolidationSeatWatch(plane: () => ConsolidationSeatPlane): ConsolidationSeatWatch;
 /**
  * **每 scope 单飞**(codex 交叉复审 [high],验真后修)—— 同一 scope 上在飞的那一轮被后来者**并入**,
  * 而不是各起一轮。`create*`:返回带状态的活对象。

package/dist/boot/memory-consolidation.js

@@ -16,6 +16,41 @@ export function resolveConsolidationDriverSeat(deps) {
     }
     return { options, seat: seatLabel(deps), model: options.model };
 }
+export function createConsolidationSeatWatch(plane) {
+    const baked = consolidationSeatFingerprint(plane());
+    return { read: () => ({ baked, current: consolidationSeatFingerprint(plane()) }) };
+}
+function consolidationSeatFingerprint(plane) {
+    const stop = new Error("consolidation seat probe: stopped before any request");
+    const refuse = () => {
+        throw stop;
+    };
+    const probeBrain = { stream: refuse, complete: refuse };
+    const seen = {};
+    let options;
+    try {
+        options = resolveMemoryConsolidationDriver({
+            ...plane,
+            brain: probeBrain,
+            getApiKeyAndHeaders: (model) => {
+                seen.model = model;
+                throw stop;
+            },
+        });
+    }
+    catch (err) {
+        return { unresolvable: err instanceof Error ? err.message : String(err) };
+    }
+    void options.chat({ system: "", user: "", maxTokens: 1, temperature: 0 }).catch(() => undefined);
+    if (seen.model === undefined) {
+        throw new Error("MEMORY_CONSOLIDATION_DRIVER=on, but the consolidation seat's restart probe could not observe which model the " +
+            "engine's seat resolver chose (the resolved chat seat no longer asks the per-model credential seat before its " +
+            "first await) — refusing rather than leave this seat's restart signal blind. This is an engine-pickup defect " +
+            "in boot/memory-consolidation.ts (createConsolidationSeatWatch), not a deployment setting.");
+    }
+    const { cost: _cost, ...route } = seen.model;
+    return route;
+}
 function seatLabel(deps) {
     if (deps.memoryConsolidationDriver?.chat !== undefined)
         return "explicit";

package/dist/boot/resolve-spec.d.ts

@@ -79,7 +79,6 @@ export interface ResolveSpecCtx {
      */
     approverSeat: RunnerDepsOnAsk | undefined;
     approvalExemptionStore: ReturnType<StoreBackend["approvalExemption"]> | undefined;
-    singleUserAutoAcceptBaseline: boolean;
     checkpointStore: ReturnType<NonNullable<StoreBackend["checkpoint"]>> | undefined;
     deploymentHooks: NonNullable<RunnerDeps["hooks"]>;
     imageIndex: ReturnType<NonNullable<StoreBackend["imageIndex"]>> | undefined;

package/dist/boot/resolve-spec.js

@@ -10,6 +10,7 @@ import { stampHandsLane, toolPolicyForHands } from "../capabilities/hands-lane.j
 import { buildNoticeLaneFacts, shouldDiscloseNoPersistentMemory, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
 import { applyLongtailDefer } from "../capabilities/tool-defer.js";
 import { assertGuardPatternsUsable, buildOnlySensitiveBaselineWarning, createApprovalBaselinePolicy, createDeploymentGovernanceInputs } from "../deployment-governance.js";
+import { singleUserAutoAcceptBaselineApplies } from "../approval.js";
 import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScratchpadDir, resumeFactsForLane, scratchpadCoveringTaskRoot } from "../env-facts.js";
 import { FleetEventBus } from "../fleet/fleet-bus.js";
 import { composeHooks, createTaskHooks } from "../hooks/hook-runner.js";
@@ -40,9 +41,9 @@ import { executionLaneCaps, executionLaneHomeDir, executionLaneOf } from "../exe
 import { effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { memoryFaceMounted } from "../memory-scope.js";
 export function createResolveSpec(ctx) {
-    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, fleetBus, hookWakeBus, noteSessionShellGate, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, singleUserAutoAcceptBaseline, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
+    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, fleetBus, hookWakeBus, noteSessionShellGate, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
     assertGuardPatternsUsable(config);
-    const onlySensitiveBaseline = buildOnlySensitiveBaselineWarning(config, { durableEnabled, singleUserAutoAcceptBaseline });
+    const onlySensitiveBaseline = buildOnlySensitiveBaselineWarning(config, { durableEnabled, singleUserAutoAcceptBaseline: singleUserAutoAcceptBaselineApplies(config) });
     const realTaskRootOf = (auth) => {
         if (isSandboxPathAdjudicationLane(config.remoteExec?.provider))
             return undefined;
@@ -421,7 +422,7 @@ export function createResolveSpec(ctx) {
                         }
                         : {}),
                 })
-                : singleUserAutoAcceptBaseline
+                : singleUserAutoAcceptBaselineApplies(config)
                     ? createApprovalBaselinePolicy(config)
                     : undefined),
             ...(durableEnabled

package/dist/boot/runner-deps.d.ts

@@ -5,8 +5,8 @@
  * `deps-literal-shape-gate` 的顶层条件展开门覆盖面不变);新增的只有 import 与包壳。
  *
  * ⚠️ **位置即契约**:必须晚于 stores/exec-env/coordinators/workflow 段(所有键都是它们的产物),
- * 且早于 `new Runner(runnerDeps)` —— Runner 构造会冻结 tier 展开后的私有目录副本
- * (`runnerTierFrozen` 判据就取自构造那一刻的 `config.tiers`)。
+ * 且早于 `new Runner(runnerDeps)` —— Runner 构造时展开 tier 表成私有目录副本(之后的换代经
+ * `Runner.swapDeps` 换进,见 boot/stage-08-reapers.ts)。
  * `getRunStore()` 是唯一的晚绑取值(runStore 在本段之后才构造),原文靠同作用域前向引用。
  */
 import { type CacheBreakFinding, type RunnerDeps, type WorkflowRunStore, type AskOutcome } from "@sema-agent/core";

package/dist/boot/stage-05-execution-env.d.ts

@@ -5,7 +5,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    lspManager: import("../lsp/manager.js").E2bLspManager | import("@sema-agent/core").NodeLspManager | undefined;
+    lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;

package/dist/boot/stage-06-runners.d.ts

@@ -13,6 +13,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;
     checkpointStore: import("../plugins/store-backend.js").CheckpointStoreFull | undefined;
+    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
     durableEnabled: boolean;
     elicitation: import("../elicitation.js").ElicitationCoordinator | undefined;
     fleetBus: import("../fleet/fleet-bus.js").FleetEventBus;
@@ -33,7 +34,6 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
-    runnerTierFrozen: boolean;
     runtimeCapsPeekResolver: import("../runtime-caps-resolver.js").EntitlementsResolverFn | undefined;
     sendFileLedger: import("../plugins/send-file-ledger.js").SendFileLedger | undefined;
     sendUserFileEmitter: import("../capabilities/send-user-file-tool.js").SendUserFileEmitter | undefined;
@@ -66,7 +66,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    lspManager: import("../lsp/manager.js").E2bLspManager | import("@sema-agent/core").NodeLspManager | undefined;
+    lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;

package/dist/boot/stage-06-runners.js

@@ -10,7 +10,7 @@ import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { backendOwnsControlPlane } from "../memory-operator-faces.js";
 import { createHookLlm, buildHookFailureText } from "../hooks/hook-llm.js";
 import { assertRetentionLaneWirable } from "./retention-lane.js";
-import { assertConsolidationDriverWirable, buildConsolidationValveAudit, createMemoryConsolidationFaces, resolveConsolidationDriverSeat } from "./memory-consolidation.js";
+import { assertConsolidationDriverWirable, buildConsolidationValveAudit, createConsolidationSeatWatch, createMemoryConsolidationFaces, resolveConsolidationDriverSeat } from "./memory-consolidation.js";
 import { createPerModelAuthSeat } from "./side-query-lane.js";
 import { createWorkflowOrchestration } from "./workflow-orchestration.js";
 import { createLiveCoordinators } from "./coordinators.js";
@@ -72,6 +72,7 @@ export function runStage06(ctx) {
             getApiKeyAndHeaders: createPerModelAuthSeat(() => configCenter.getKeyResolver()),
         })
         : undefined;
+    const consolidationSeatWatch = consolidationSeat ? createConsolidationSeatWatch(() => ({ models: config.models, tiers: config.tiers, roles: config.roles })) : undefined;
     const memoryConsolidationFaces = consolidationSeat && memoryEngine
         ? createMemoryConsolidationFaces(memoryEngine, {
             seat: consolidationSeat,
@@ -130,7 +131,6 @@ export function runStage06(ctx) {
     });
     const runner = new Runner(runnerDeps);
     const handslessRunner = new Runner(withoutExecutionEnv(runnerDeps));
-    const runnerTierFrozen = Object.keys(config.tiers).length > 0;
     const { hookModelFor, hookLlm } = createHookLlm({ config, getKeyResolver: () => configCenter.getKeyResolver(), metrics });
     const hookAgentRunner = new Runner({ ...runnerDeps, sessionStore: new TtlSessionStore({ defaultTtlDays: 1 / 24 }) });
     const agentHookCall = async ({ prompt, model, timeoutMs, system }) => {
@@ -212,6 +212,6 @@ export function runStage06(ctx) {
     };
     const subRunner = new Runner(subRunnerDeps);
     const handslessSubRunner = new Runner(withoutExecutionEnv(subRunnerDeps));
-    return { ...ctx, approvalAskAudit, centerRuntimeCapsResolver, checkpointStore, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, handslessSubRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runnerTierFrozen, runtimeCapsPeekResolver, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionShellGateRegistry, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subRunnerSessions, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable };
+    return { ...ctx, approvalAskAudit, centerRuntimeCapsResolver, checkpointStore, consolidationSeatWatch, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, handslessSubRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekResolver, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionShellGateRegistry, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subRunnerSessions, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable };
 }
 //# sourceMappingURL=stage-06-runners.js.map