@sema-agent/settings-schema 15.2.0 → 17.0.0

package/dist/types.js

@@ -30,12 +30,13 @@ import { PREVIOUS_WEB_ADMIN_ENV } from "./previous-web-admin-env.js"; // the pre
 import { retiredEnvRefusal } from "./retired-envs.js"; // the worker env write gate asks the retired-env tombstone table too (one table, one refusal sentence)
 import { Sha256Digest } from "./sha256.js"; // the one `sha256:<hex>` digest form
 import { EXECUTION_LANES, EXECUTION_LANE_WORDS, MEMORY_ENGINE_BACKENDS, SESSION_BACKENDS, STORE_BACKENDS, isBlankCoordinate, retiredLaneWordRefusal } from "./execution-lanes.js"; // 7.0.0 M-R2: the lane / store vocabulary (one exported table)
-import { LANE_ENV_OWNER, isMigratableEnvKey, laneEnvSeat, laneRowOf } from "./execution-lane-index.js"; // package-private indexes derived from that table (none of them is in the barrel)
+import { LANE_ENV_OWNER, envKeyMigration, laneEnvSeat, laneRowOf } from "./execution-lane-index.js"; // package-private indexes derived from that table (none of them is in the barrel)
 import { migrationSignpost, retiredFormSentence, retiredKey } from "./retired-form.js"; // 11.0.0: the ONE retired-form sentence + key tombstone (package-private)
 import { retiredRoleWordsRefusal } from "./retired-role-words.js"; // 12.0.0: the retired role-word tombstone (package-private; SS-M8)
 import { buildQuotedIssue, fixed } from "./quoted-issue.js"; // THE minting point of custom issues (package-private)
 import { AbsoluteHostPath } from "./host-path.js"; // the one host-path shape judge (a task's cwd and a project's folder / file entries)
 import { RFC3339_DATE_TIME } from "./rfc3339.js"; // the package's one RFC 3339 date-time judge (package-private)
+import { DEVICE_RELAY_RULE, deviceRelayFlaws } from "./device-relay.js"; // 16.0.0: the value grammar of the device lane's DEVICE_RELAY_URL (ws(s) URL or the literal none)
 // COARSE, best-effort literal-secret SHAPE detector (NOT exhaustive — the real boundary is the env-NAME schema
 // on structured fields). Rejected in free-form value fields (worker `env`, model `extraBody`), URL components,
 // AND as an env-NAME value (an AWS key id is a valid env-NAME charset yet is a secret VALUE, not a NAME). Case-
@@ -1842,7 +1843,7 @@ const RESERVED_ENV_FIELD = Object.freeze({
     PG_HOST: "runtime.store.db.host", PG_PORT: "runtime.store.db.port", PG_USER: "runtime.store.db.user",
     PG_DATABASE: "runtime.store.db.database", PG_PASSWORD: "secretRefs.dbPasswordEnv",
     // ── runtime.execution(7.0.0):车道词两键 + 车道表里每个名(派生,不手抄)
-    REMOTE_EXEC: "runtime.execution.lane",
+    REMOTE_EXEC: "runtime.execution.lanes",
     // ── fleet 成员身份两键:渲染器按该 worker 的代际写 generation(引擎读回并回声成 EngineSignal.generation)、按该 worker 令牌绑定的 scope 写 scope(引擎读作自身身份的 scope)—— 没有 WorkerSpec 字段能写它们
     [FLEET_GENERATION_ENV]: "(set by the config renderer from the worker's generation — not configurable)",
     [FLEET_SCOPE_ENV]: "(set by the config renderer from the worker's scope — not configurable)",
@@ -1856,7 +1857,7 @@ const RESERVED_ENV_FIELD = Object.freeze({
     [WEB_ADMIN_ENV.tokenFile]: WEB_ADMIN_OPERATOR_FILE_SEAT, [PREVIOUS_WEB_ADMIN_ENV.tokenFile]: WEB_ADMIN_OPERATOR_FILE_SEAT,
     [WEB_ADMIN_ENV.assertionToken]: WEB_ADMIN_ASSERTION_SEAT.token,
     [WEB_ADMIN_ENV.assertionTokenFile]: WEB_ADMIN_OPERATOR_FILE_SEAT,
-    REQUIRE_EXECUTION_LANE: "runtime.execution.lane (the renderer emits REQUIRE_EXECUTION_LANE=true for every declared lane)",
+    REQUIRE_EXECUTION_LANE: "runtime.execution.lanes (the renderer emits REQUIRE_EXECUTION_LANE=true for every declared lane set)",
     ...Object.fromEntries([...LANE_ENV_OWNER].map(([name, owner]) => [name, laneEnvSeat(name, owner)])),
 });
 /** 结构化 WorkerSpec 字段已经产出的 env 名 —— 通用 `env` / `secretEnv` 逃生口**不许**设它们(用专属字段)。由
@@ -1864,11 +1865,13 @@ const RESERVED_ENV_FIELD = Object.freeze({
 export const RESERVED_WORKER_ENV = new Set(Object.keys(RESERVED_ENV_FIELD));
 /**
  * 保留名被 `env` / `secretEnv` 逃生口设置时的拒因:点名键 + 它的唯一写位。句尾恒是「set it via <字段>」(下游按它抽归属字段,不动)。
- * **迁移指路只有一条规则(7.0.1)**:这个键「旧形 ⇒ 迁移能搬」({@link isMigratableEnvKey},与迁移自己识别的键集同一只谓词)就在键名后
- * 带同一句迁移指路(一次性迁移 SS-M4,`migrationSignpost`);搬不了的保留名(`PORT` / `MODEL_*` / `MYSQL_*` …)不带 —— 指一条跑了也没用的迁移比不指更糟。
+ * **迁移指路只有一条规则(7.0.1;16.0.0 起点名哪一条)**:这个键「旧形 ⇒ 迁移能搬」(`envKeyMigration`,与迁移自己识别的键集同一只函数)就在键名后
+ * 带搬它那一条迁移的指路句(`migrationSignpost`:6.x 行的键 ⇒ SS-M4;7.0.0 之后才进车道表的键 ⇒ 登记它那一版的迁移);搬不了的保留名(`PORT` / `MODEL_*` / `MYSQL_*` …)
+ * 不带 —— 指一条跑了也没用的迁移比不指更糟。
  */
 function reservedKeyIssue(slot, key) {
-    const signpost = isMigratableEnvKey(key) ? " (" + migrationSignpost("SS-M4", "7.0.0") + ")" : "";
+    const migration = envKeyMigration(key);
+    const signpost = migration !== undefined ? " (" + migrationSignpost(migration.migration, migration.before) + ")" : "";
     return buildQuotedIssue `${fixed(slot)} cannot set reserved key "${key}"${fixed(signpost)} — set it via ${fixed(RESERVED_ENV_FIELD[key])}`;
 }
 /** 逃生口里有墓碑表的旧名 ⇒ 一条 issue,句子是墓碑句本身(`retiredEnvRefusal` —— 唯一铸点,本包不另拼;句里只有表里的名,不回显值)。 */
@@ -1887,63 +1890,101 @@ const nonSecretLiteral = (minLength) => z
     .max(2048)
     .refine((s) => !containsSecretToken(s), buildQuotedIssue `looks like a literal secret — a credential goes in a secretRefs field as an env-NAME, never a value here`);
 /**
- * `runtime.execution` —— 这台 worker 的执行车道(渲染:`REMOTE_EXEC=<lane>` + `REQUIRE_EXECUTION_LANE=true` + coords / secretRefs 逐键)。
- *  - `lane`:{@link EXECUTION_LANE_WORDS} 之一。没有「无手」词。
- *  - `coords`:该车道的**非密坐标**(服务变量名 → 字面值),键 ⊆ 表[lane] 的 `requiredEnv ∪ optionalEnv`;必需键在场且不是空白
- *    (空串或只含空白按缺 —— 唯一判官 `isBlankCoordinate`)。可选键的空串照收(例:`K8S_RUNTIME_CLASS=""` 在引擎里是「不用 Kata」)。
- *  - `secretRefs`:该车道的**密钥**(服务变量名 → 宿主 env-NAME),键 ⊆ 表[lane] 的 `requiredSecretEnv ∪ optionalSecretEnv`,必需键在场。
- *  别车道的键 ⇒ 拒并点名它属于哪条车道;本车道的密钥写进 coords / 坐标写进 secretRefs ⇒ 拒并指路另一栏。
+ * 有文法的车道坐标 → 它的值判官(16.0.0;今天一行)。判的是**在场、非空白**的值(缺席 / 空白归必需栏那两句,所有车道同一只);判官交拒因词,规则句随行。
+ * 键都在车道表的非密坐标栏里(`test/device-relay-16.0.0.test.ts` 钉 device 那一行)。
+ */
+const COORDINATE_VALUE_GRAMMAR = new Map([
+    ["DEVICE_RELAY_URL", { flaws: deviceRelayFlaws, rule: DEVICE_RELAY_RULE }],
+]);
+/** 车道集缺席时的那一句(块在而缺 `lanes`,与 enabled 的 worker 根本没有车道块,同一句)。 */
+const LANES_REQUIRED = `runtime.execution.lanes must be a non-empty list — the worker's ordered execution lane set (the first one is the default) of ${EXECUTION_LANE_WORDS.join(" | ")}, each at most once. There is no "no hands" lane — disable the worker instead`;
+/**
+ * `runtime.execution` —— 这台 worker 的执行车道集(16.0.0;渲染:车道表 `lanes` + `REQUIRE_EXECUTION_LANE=true` + coords / secretRefs 逐键)。
+ *  - `lanes`:**有序、去重、非空**的车道表({@link EXECUTION_LANE_WORDS} 的词),首项 = 缺省。没有「无手」词。
+ *  - `coords`:声明的车道的**非密坐标**(服务变量名 → 字面值),每个键归表里的某一条车道(车道表 `requiredEnv ∪ optionalEnv`);每条声明的车道的必需键都在场且不是空白
+ *    (空串或只含空白按缺 —— 唯一判官 `isBlankCoordinate`);有文法的键({@link COORDINATE_VALUE_GRAMMAR})值还要合它的文法。可选键的空串照收(例:`K8S_RUNTIME_CLASS=""` 在引擎里是「不用 Kata」)。
+ *  - `secretRefs`:声明的车道的**密钥**(服务变量名 → 宿主 env-NAME),每个键归表里的某一条车道,每条声明的车道的必需键在场。
+ *  归表外车道的键 ⇒ 拒并点名它属于哪条车道;密钥写进 coords / 坐标写进 secretRefs ⇒ 拒并指路另一栏。
+ *  `lane`(15.x 的单值)是墓碑:读写两面拒,指路一次性迁移 SS-M12(`lane: L` ⇒ `lanes: [L]`)。
  */
 const ExecutionBlock = z
     .object({
-    lane: z.enum(EXECUTION_LANE_WORDS, { error: (iss) => retiredLaneWordRefusal(iss.input) }), // a retired lane word gets its way out
+    lane: retiredKey("runtime.execution.lane", { retiredIn: "16.0.0", now: "runtime.execution.lanes (an ordered lane set; the first one is the default)", migration: "SS-M12" }),
+    lanes: z
+        .array(z.enum(EXECUTION_LANE_WORDS, { error: (iss) => retiredLaneWordRefusal(iss.input) }), { error: (iss) => (iss.input === undefined ? LANES_REQUIRED : undefined) }) // a retired lane word gets its way out
+        .min(1, { error: LANES_REQUIRED }),
     coords: z.record(ENV_NAME, nonSecretLiteral(0)).prefault({}),
     secretRefs: z.record(ENV_NAME, ENV_NAME).prefault({}),
 })
     .superRefine((x, ctx) => {
-    const row = laneRowOf(x.lane);
+    // 去重:每条车道至多一次,重复的那一格(第二次出现)一条
+    const declared = [];
+    x.lanes.forEach((lane, i) => {
+        if (declared.includes(lane))
+            ctx.addIssue({ code: "custom", path: ["lanes", i], ...buildQuotedIssue `lane "${lane}" is declared twice in runtime.execution.lanes — each lane appears once (the first one is the default)` });
+        else
+            declared.push(lane);
+    });
+    const rows = declared.map(laneRowOf);
     const issue = (slot, key, q) => ctx.addIssue({ code: "custom", path: [slot, key], ...q });
-    const owned = (secret) => (secret ? [...row.requiredSecretEnv, ...row.optionalSecretEnv] : [...row.requiredEnv, ...row.optionalEnv]);
+    const owned = (secret) => rows.flatMap((row) => (secret ? [...row.requiredSecretEnv, ...row.optionalSecretEnv] : [...row.requiredEnv, ...row.optionalEnv]));
     const judgeKey = (slot, key) => {
         const wantSecret = slot === "secretRefs";
         const owner = LANE_ENV_OWNER.get(key);
         if (owner === undefined) {
             const allowed = owned(wantSecret);
-            issue(slot, key, buildQuotedIssue `${key} is not ${fixed(wantSecret ? "a secret" : "a coordinate")} of any execution lane — lane "${x.lane}" takes ${fixed(slot)} ${fixed(allowed.length > 0 ? allowed.join(", ") : "(none)")}`);
+            issue(slot, key, buildQuotedIssue `${key} is not ${fixed(wantSecret ? "a secret" : "a coordinate")} of any execution lane — the declared lanes take ${fixed(slot)} ${fixed(allowed.length > 0 ? allowed.join(", ") : "(none)")}`);
             return false;
         }
-        if (owner.lane !== x.lane) {
-            issue(slot, key, buildQuotedIssue `${key} belongs to lane "${fixed(owner.lane)}", not "${x.lane}" — remove it, or set runtime.execution.lane to "${fixed(owner.lane)}"`);
+        if (!declared.includes(owner.lane)) {
+            issue(slot, key, buildQuotedIssue `${key} belongs to lane "${fixed(owner.lane)}", which is not in runtime.execution.lanes — remove it, or add "${fixed(owner.lane)}" to runtime.execution.lanes`);
             return false;
         }
         if (owner.secret !== wantSecret) {
             issue(slot, key, owner.secret
-                ? buildQuotedIssue `${key} is a secret of lane "${x.lane}" — put it in runtime.execution.secretRefs as an env-NAME (never a value in coords)`
-                : buildQuotedIssue `${key} is a non-secret coordinate of lane "${x.lane}" — write its value in runtime.execution.coords`);
+                ? buildQuotedIssue `${key} is a secret of lane "${fixed(owner.lane)}" — put it in runtime.execution.secretRefs as an env-NAME (never a value in coords)`
+                : buildQuotedIssue `${key} is a non-secret coordinate of lane "${fixed(owner.lane)}" — write its value in runtime.execution.coords`);
             return false;
         }
         return true;
     };
     for (const [key, value] of Object.entries(x.coords)) {
-        if (judgeKey("coords", key) && isBlankCoordinate(value) && LANE_ENV_OWNER.get(key)?.required === true) {
-            issue("coords", key, buildQuotedIssue `required coordinate ${key} of lane "${x.lane}" is empty or whitespace-only — it counts as absent, and the engine refuses to start without it`);
+        if (!judgeKey("coords", key))
+            continue;
+        const owner = LANE_ENV_OWNER.get(key);
+        if (isBlankCoordinate(value)) {
+            if (owner?.required === true)
+                issue("coords", key, buildQuotedIssue `required coordinate ${key} of lane "${fixed(owner.lane)}" is empty or whitespace-only — it counts as absent, and the engine refuses to start without it`);
+            continue;
         }
+        const grammar = COORDINATE_VALUE_GRAMMAR.get(key);
+        const flaws = grammar?.flaws(value) ?? [];
+        if (grammar !== undefined && flaws.length > 0)
+            issue("coords", key, buildQuotedIssue `coords.${key} ${fixed(grammar.rule)} — found: ${fixed(flaws.join(", "))}`);
     }
     for (const key of Object.keys(x.secretRefs))
         judgeKey("secretRefs", key);
-    for (const key of row.requiredEnv)
-        if (!Object.hasOwn(x.coords, key))
-            issue("coords", key, buildQuotedIssue `lane "${x.lane}" requires coords.${key} (the engine refuses to start without it)`);
-    for (const key of row.requiredSecretEnv)
-        if (!Object.hasOwn(x.secretRefs, key))
-            issue("secretRefs", key, buildQuotedIssue `lane "${x.lane}" requires secretRefs.${key} — the host env-NAME holding it`);
+    for (const row of rows) {
+        for (const key of row.requiredEnv)
+            if (!Object.hasOwn(x.coords, key))
+                issue("coords", key, buildQuotedIssue `lane "${fixed(row.lane)}" requires coords.${key} (the engine refuses to start without it)`);
+        for (const key of row.requiredSecretEnv)
+            if (!Object.hasOwn(x.secretRefs, key))
+                issue("secretRefs", key, buildQuotedIssue `lane "${fixed(row.lane)}" requires secretRefs.${key} — the host env-NAME holding it`);
+    }
 });
 /** `MEMORY_ENGINE` 的两个词(引擎目录行的 `enumValues`;引擎还认 true/false/1/0… 两族同义词,结构位只收规范词)。 */
 const MEMORY_ENGINE_SWITCH = ["on", "off"];
 /** 店词 → 是不是 SQL 店。SQL 坐标(`runtime.store.db` + `secretRefs.dbPasswordEnv`)在场 ⇔ 是。穷举表:店词加词 ⇒ 编译红。 */
 const STORE_IS_SQL = { mysql: true, pg: true, local: false, memory: false };
-/** 记忆持久面方言 → 它要求的店(`file` 不要求)。穷举表:方言加词 ⇒ 编译红。 */
-const MEMORY_BACKEND_NEEDS_STORE = { file: undefined, pg: "pg", tidb: "mysql" };
+/** 记忆持久面方言 → 它要求的店(`file` 不要求)。穷举表:方言加词 ⇒ 编译红。16.0.0 起 MySQL 族方言与店同字(`mysql`)。 */
+const MEMORY_BACKEND_NEEDS_STORE = { file: undefined, pg: "pg", mysql: "mysql" };
+/** 15.x 的记忆方言字 `tidb` 的拒句(16.0.0 换成 `mysql`,零别名;读写两面拒,指路一次性迁移 SS-M12)。 */
+const RETIRED_MEMORY_BACKEND_TIDB = retiredFormSentence(`runtime.store.memory.backend "tidb"`, {
+    retiredIn: "16.0.0",
+    now: `"mysql" (the same MySQL-family store; one word with store.backend)`,
+    migration: "SS-M12",
+});
 /**
  * `runtime.store` —— 这台 worker 的持久化(取代 6.x 散落的 `sessionBackend` / `memoryBackend` / `db` / `coords.tidb*` /
  * `secretRefs.tidbPasswordEnv`)。渲染(唯一写者):`DB_BACKEND` / `SESSION_BACKEND` / `MEMORY_ENGINE` / `MEMORY_ENGINE_BACKEND` 恒渲;
@@ -1956,7 +1997,7 @@ const StoreBlock = z.object({
     memory: z
         .object({
         engine: z.enum(MEMORY_ENGINE_SWITCH).default("on"),
-        backend: z.enum(MEMORY_ENGINE_BACKENDS).default("file"),
+        backend: z.enum(MEMORY_ENGINE_BACKENDS, { error: (iss) => (iss.input === "tidb" ? RETIRED_MEMORY_BACKEND_TIDB : undefined) }).default("file"),
     })
         .prefault({}),
     /** SQL 服务器坐标(中立,一份;名族由 `backend` 决定)。 */
@@ -2133,29 +2174,35 @@ const WorkerSpecObject = z.object({
     signature: z.string().optional(),
     notes: z.string().optional(),
 });
-/** 跨字段判据(G1 / G2 / host∧多副本 / store 四条)。每条一个 issue,`path` 指到要改的字段。 */
+/** 跨字段判据(G1 / G2 逐车道 / 单副本车道∧多副本 / store 四条)。每条一个 issue,`path` 指到要改的字段。 */
 function workerSpecIssues(w, ctx) {
     const issue = (path, q) => ctx.addIssue({ code: "custom", path, ...q });
     const { execution, store, requirePrincipal } = w.runtime;
-    // G1:enabled 的 worker 必须声明车道与店(停用的不渲染,可缺)。
+    // G1:enabled 的 worker 必须声明车道集与店(停用的不渲染,可缺)。
     if (w.enabled && execution === undefined) {
-        issue(["runtime", "execution", "lane"], buildQuotedIssue `an enabled worker must declare its execution lane — runtime.execution.lane: ${fixed(EXECUTION_LANE_WORDS.join(" | "))}. Without one it would boot with no hands and still report tasks completed; there is no "no hands" lane — disable the worker instead`);
+        issue(["runtime", "execution", "lanes"], buildQuotedIssue `an enabled worker must declare its execution lanes (without them it would boot with no hands and still report tasks completed) — ${fixed(LANES_REQUIRED)}`);
     }
     if (w.enabled && store === undefined) {
         issue(["runtime", "store", "backend"], buildQuotedIssue `an enabled worker must declare its store — runtime.store.backend: ${fixed(STORE_BACKENDS.join(" | "))}`);
     }
-    if (execution !== undefined) {
-        // G2:多租户姿态不许跑不分租户的车道;出路按表现算(不手写第五份词表)。
-        if (requirePrincipal && laneRowOf(execution.lane).tenantSeparation === "single-user-only") {
-            const outlets = EXECUTION_LANES.filter((r) => r.tenantSeparation === "supported").map((r) => r.lane);
-            issue(["runtime", "execution", "lane"], buildQuotedIssue `runtime.requirePrincipal=true (multi-tenant posture) with the "${execution.lane}" execution lane runs every tenant's Bash on one shared target — this lane does not separate tenants; set runtime.execution.lane to ${fixed(outlets.join(" / "))}, or set runtime.requirePrincipal=false for a single-user worker`);
+    // 每条车道只判第一次出现的那一格(重复那一格已由车道块拒)。
+    const declared = execution === undefined ? [] : execution.lanes.flatMap((lane, i) => (execution.lanes.indexOf(lane) === i ? [{ lane, i, row: laneRowOf(lane) }] : []));
+    // G2:多租户姿态不许跑不分租户的车道 —— 逐车道判,每条一个 issue 落在它那一格;出路按表现算(不手写第五份词表)。
+    if (requirePrincipal) {
+        const outlets = EXECUTION_LANES.filter((r) => r.tenantSeparation === "supported").map((r) => r.lane);
+        for (const { lane, i, row } of declared) {
+            if (row.tenantSeparation !== "single-user-only")
+                continue;
+            issue(["runtime", "execution", "lanes", i], buildQuotedIssue `runtime.requirePrincipal=true (multi-tenant posture) with the "${fixed(lane)}" execution lane runs every tenant's Bash on one shared target — this lane does not separate tenants; remove it from runtime.execution.lanes (lanes that separate tenants: ${fixed(outlets.join(" / "))}), or set runtime.requirePrincipal=false for a single-user worker`);
         }
-        // host ∧ 多副本:副本数有两个旋钮(replicas / autoscaling.maxReplicas,二者互斥),一条规则看「最多几个副本」。
-        if (execution.lane === "host") {
-            const [path, replicas] = w.autoscaling !== undefined ? [["autoscaling", "maxReplicas"], w.autoscaling.maxReplicas] : [["replicas"], w.replicas ?? 1];
-            if (replicas > 1) {
-                issue(path, buildQuotedIssue `the "host" execution lane runs tools on each replica's own filesystem — ${replicas} replicas would hold ${replicas} different workspaces behind one route, so a session's next turn can land where its files are not. Keep a single replica, or choose a lane other than "host"`);
-            }
+    }
+    // 单副本车道 ∧ 多副本:读车道表的 `singleReplica` 列(不点名车道词)。副本数有两个旋钮(replicas / autoscaling.maxReplicas,二者互斥),一条规则看「最多几个副本」;
+    // 表里所有单副本车道合成一条 issue。
+    const singleReplica = declared.filter(({ row }) => row.singleReplica).map(({ lane }) => JSON.stringify(lane));
+    if (singleReplica.length > 0) {
+        const [path, replicas] = w.autoscaling !== undefined ? [["autoscaling", "maxReplicas"], w.autoscaling.maxReplicas] : [["replicas"], w.replicas ?? 1];
+        if (replicas > 1) {
+            issue(path, buildQuotedIssue `runtime.execution.lanes declares ${fixed(singleReplica.join(", "))}, which hold a session's work on one replica (that replica's own filesystem, or the replica its device is connected to) — ${replicas} replicas behind one route would let a session's next turn land on a replica that does not hold it. Keep a single replica, or remove ${fixed(singleReplica.join(", "))} from runtime.execution.lanes`);
         }
     }
     // store 四条:① SQL 店 ⇒ db + dbPasswordEnv 在场;② 非 SQL 店 ⇒ 两者都不在场(①② 是一条规则:SQL 坐标 ⇔ SQL 店);
@@ -2168,7 +2215,7 @@ function workerSpecIssues(w, ctx) {
     // device 车道 ⇒ SQL 池必须开(引擎 `config-invariants.ts:318` `device-durable-store`:设备注册簿 / session↔设备绑定 / 审计都在 SQL 里)。
     // 与 G2 同族(gpt-6 腿 F2)。同族的 `device-durable-approval` 读的是 `DURABLE_APPROVAL`(逃生口里的 env + 姿态缺省),不在结构字段上,
     // 写闸判不了 —— 那一条只在起服拒。
-    if (execution?.lane === "device" && store !== undefined && !sqlPoolOpens) {
+    if (declared.some(({ lane }) => lane === "device") && store !== undefined && !sqlPoolOpens) {
         if (!sql) {
             issue(["runtime", "store", "backend"], buildQuotedIssue `the "device" execution lane keeps its device registry, session↔device binding and audit trail in SQL — store.backend "${store.backend}" has none (the engine refuses to start: device-durable-store); set store.backend to mysql | pg`);
         }
@@ -2339,8 +2386,12 @@ export const HostStatus = z.object({
     host: z.string().min(1).max(HOST_NAME_MAX).regex(/^[a-z0-9][a-z0-9-]*$/, "lowercase letters/digits/-, no spaces"),
     backend: z.enum(["docker", "k8s"]),
     probes: HostProbes,
-    /** 探测时刻(ISO)——机器视图 hover 注明数据口径与此时间(§2-5:是分配额口径的底数,非实时负载)。 */
-    ts: z.string().min(1),
+    /** 探测时刻,RFC 3339(秒必备、带 `Z` / `±hh:mm` 偏移;16.0.0 起判形,此前只判非空串 —— 注释说时刻而不判,读方 `Date.parse` 读成 NaN 的串也收)。
+     *  机器视图 hover 注明数据口径与此时间(§2-5:是分配额口径的底数,非实时负载)。 */
+    ts: RFC3339_DATE_TIME,
+    /** 16.0.0:上报方声明的心跳节律(毫秒,正整数)—— 与实例公告 `InstanceAnnouncement.heartbeatMs` 同一个词、同一个义。缺席 = 没声明(**没有缺省**:
+     *  不替上报方铸一个它没说过的节律)。多久没报算不新鲜是中心的判(窗公式归中心;本包只给字段,不给公式)。 */
+    heartbeatMs: INTEGER.positive().optional(),
 });
 // ── Domain: skills (中心化 skill 分发 — the mcp/skills design note, Roadmap B1) ─────────
 // A skill is a prompt-level capability: frontmatter (name/description/scenarios) + markdown `content`

package/dist/url-shape.d.ts

@@ -50,6 +50,14 @@ export declare function httpUrlFlaws<P extends HttpUrlPart>(raw: string, forbid:
  * 按座位的本质命名,不按某个消费键名:谁的座位是「后面要拼路径的基址」,谁读它,不各自抄词。
  */
 export declare const PATH_BASE_URL_FORBIDDEN_PARTS: readonly ["userinfo", "query", "fragment"];
+/**
+ * **「逐字发给拨号方的地址」座位禁用的部件**(闭集、冻结、判序;16.0.0)。一个值若是被**逐字发布**、由别人原样去拨的地址(device 车道的设备入口
+ * `DEVICE_RELAY_URL`:引擎把它原样放上能力面,设备拨它):`userinfo` 把凭据发给每个读得到那张能力面的人;`query` / `fragment` 是令牌最常落的位置 ——
+ * 拨号方凭签名鉴权,发布出去的地址里没有凭据的位置。**路径不禁**(中继 / 网关按路径分流)。
+ * 与 {@link PATH_BASE_URL_FORBIDDEN_PARTS} 今天同三词,但理由不同、各自裁:那一张管「往后拼路径会落错位」,这一张管「发布出去的地址里不留凭据位」——
+ * 一个座位改禁哪件,不连带另一个。策略集独立于判官词表 {@link HTTP_URL_PARTS},同上一张的规矩。
+ */
+export declare const DIAL_ADDRESS_URL_FORBIDDEN_PARTS: readonly ["userinfo", "query", "fragment"];
 /**
  * 「后面要拼路径的基址」座位的判:`[]` = 合格,否则按判序交回规则词 —— 就是 {@link httpUrlFlaws} 配 {@link PATH_BASE_URL_FORBIDDEN_PARTS},
  * 不另写判法;规则词的句子取 {@link httpUrlRule}。答案只有词,不含值的任何片段。判**占位展开之后**的值:`http://$(POD_IP):8090` 过
@@ -57,6 +65,16 @@ export declare const PATH_BASE_URL_FORBIDDEN_PARTS: readonly ["userinfo", "query
  * 缺席 / 空串由调用方在判之前处理(对 `""` 本函数答 `not-http-url`)。
  */
 export declare function pathBaseUrlFlaws(url: string): ReadonlyArray<HttpUrlFlaw>;
+/** ws(s) 判官的拒因词(闭集):形不对(`not-ws-url`),或一件被禁的部件在场(与 http(s) 判官同一套部件词)。 */
+export type WsUrlFlaw = "not-ws-url" | HttpUrlPart;
+/** 「不是一个 ws(s) URL」的规则句 —— 只点名规则,不回显值。 */
+export declare const WS_URL_SHAPE_RULE = "is not a parseable ws(s) URL (scheme must be ws or wss, written in full; it must look like ws(s)://host[:port][/path])";
+/**
+ * **ws(s) URL 的形判官**(16.0.0;lift 自 server `parseDeviceRelayUrlEnv` 的形门,规则逐字搬)。ws(s) 是 http(s) 的升级形,层级式 URL 的规则同一套、只换 scheme:
+ * 值必须**照字面**以 `ws://` / `wss://` 起头(大小写不敏感;`wss:host`、前导空白都不算 —— WHATWG 会把它们修成合法 URL,这里按字面拒),
+ * 然后映射成 http(s) 问 {@link httpUrlFlaws} 那一只(本模块不写第二份形规则);它答的 `not-http-url` 在这里读作 `not-ws-url`。合格 ⇒ `[]`。
+ */
+export declare function wsUrlFlaws<P extends HttpUrlPart>(raw: string, forbid: readonly P[]): ReadonlyArray<"not-ws-url" | P>;
 /** 以 `http://` / `https://` 起头(大小写不敏感)—— 一道**语法前缀**守卫,不是形判官:不解析、不看 host / 部件,所以 `https://` 这样的裸 scheme 它也收(见头注「第二个答案」)。
  *  唯一读者是请求面 MCP 传输读器(`readRequestMcpTransport`);S-2106 收口时它退成那个读器座位的「照字面写全」规则,与形判官合取。 */
 export declare function startsWithHttpScheme(raw: string): boolean;

package/dist/url-shape.js

@@ -66,6 +66,14 @@ export function httpUrlFlaws(raw, forbid) {
  * 按座位的本质命名,不按某个消费键名:谁的座位是「后面要拼路径的基址」,谁读它,不各自抄词。
  */
 export const PATH_BASE_URL_FORBIDDEN_PARTS = Object.freeze(["userinfo", "query", "fragment"]);
+/**
+ * **「逐字发给拨号方的地址」座位禁用的部件**(闭集、冻结、判序;16.0.0)。一个值若是被**逐字发布**、由别人原样去拨的地址(device 车道的设备入口
+ * `DEVICE_RELAY_URL`:引擎把它原样放上能力面,设备拨它):`userinfo` 把凭据发给每个读得到那张能力面的人;`query` / `fragment` 是令牌最常落的位置 ——
+ * 拨号方凭签名鉴权,发布出去的地址里没有凭据的位置。**路径不禁**(中继 / 网关按路径分流)。
+ * 与 {@link PATH_BASE_URL_FORBIDDEN_PARTS} 今天同三词,但理由不同、各自裁:那一张管「往后拼路径会落错位」,这一张管「发布出去的地址里不留凭据位」——
+ * 一个座位改禁哪件,不连带另一个。策略集独立于判官词表 {@link HTTP_URL_PARTS},同上一张的规矩。
+ */
+export const DIAL_ADDRESS_URL_FORBIDDEN_PARTS = Object.freeze(["userinfo", "query", "fragment"]);
 /**
  * 「后面要拼路径的基址」座位的判:`[]` = 合格,否则按判序交回规则词 —— 就是 {@link httpUrlFlaws} 配 {@link PATH_BASE_URL_FORBIDDEN_PARTS},
  * 不另写判法;规则词的句子取 {@link httpUrlRule}。答案只有词,不含值的任何片段。判**占位展开之后**的值:`http://$(POD_IP):8090` 过
@@ -75,6 +83,20 @@ export const PATH_BASE_URL_FORBIDDEN_PARTS = Object.freeze(["userinfo", "query",
 export function pathBaseUrlFlaws(url) {
     return httpUrlFlaws(url, PATH_BASE_URL_FORBIDDEN_PARTS);
 }
+/** 「不是一个 ws(s) URL」的规则句 —— 只点名规则,不回显值。 */
+export const WS_URL_SHAPE_RULE = "is not a parseable ws(s) URL (scheme must be ws or wss, written in full; it must look like ws(s)://host[:port][/path])";
+/**
+ * **ws(s) URL 的形判官**(16.0.0;lift 自 server `parseDeviceRelayUrlEnv` 的形门,规则逐字搬)。ws(s) 是 http(s) 的升级形,层级式 URL 的规则同一套、只换 scheme:
+ * 值必须**照字面**以 `ws://` / `wss://` 起头(大小写不敏感;`wss:host`、前导空白都不算 —— WHATWG 会把它们修成合法 URL,这里按字面拒),
+ * 然后映射成 http(s) 问 {@link httpUrlFlaws} 那一只(本模块不写第二份形规则);它答的 `not-http-url` 在这里读作 `not-ws-url`。合格 ⇒ `[]`。
+ */
+export function wsUrlFlaws(raw, forbid) {
+    const scheme = /^wss?:\/\//i.exec(raw)?.[0];
+    if (scheme === undefined)
+        return ["not-ws-url"];
+    const asHttp = `${scheme.length === "wss://".length ? "https" : "http"}://${raw.slice(scheme.length)}`;
+    return httpUrlFlaws(asHttp, forbid).map((f) => (f === "not-http-url" ? "not-ws-url" : f));
+}
 /** 以 `http://` / `https://` 起头(大小写不敏感)—— 一道**语法前缀**守卫,不是形判官:不解析、不看 host / 部件,所以 `https://` 这样的裸 scheme 它也收(见头注「第二个答案」)。
  *  唯一读者是请求面 MCP 传输读器(`readRequestMcpTransport`);S-2106 收口时它退成那个读器座位的「照字面写全」规则,与形判官合取。 */
 export function startsWithHttpScheme(raw) {

package/docs/API-SURFACE.md

@@ -4,9 +4,9 @@
 > 每次全量重算并逐名比对 —— 加 / 删 / 改形一个导出而不重生成本档 ⇒ 红。导出面的每次变动因此以本档的 diff 出现在评审里。
 > 形:`value` = 运行期拿得到的值;`type` = 只在类型层;`value+type` = 同名的值与类型(zod schema 与它推出的类型)。
 
-子路径 24 条(资产出口 `./package.json` / `./fleet-paths.json` 不是模块,不列),导出名合计 1468 个(同名在多条子路径上各计一次)。
+子路径 24 条(资产出口 `./package.json` / `./fleet-paths.json` 不是模块,不列),导出名合计 1472 个(同名在多条子路径上各计一次)。
 
-## `.`(766)
+## `.`(772)
 
 - `ABSOLUTE_HOST_PATH_MAX` — value
 - `ACCESS_TOKEN_TTL_SECONDS` — value
@@ -94,8 +94,11 @@
 - `DEVICE_CODE_TTL_SECONDS` — value
 - `DEVICE_GRANT_TYPE` — value
 - `DEVICE_POLL_INTERVAL_SECONDS` — value
+- `DEVICE_RELAY_NONE` — value
+- `DEVICE_RELAY_RULE` — value
 - `DIALOG_EXPIRY_DEFAULT` — value
 - `DIALOG_EXPIRY_VALUES` — value
+- `DIAL_ADDRESS_URL_FORBIDDEN_PARTS` — value
 - `DIRECTORY_ADDED_SOURCES` — value
 - `DISCLOSABLE_IDENTITY_RE` — value
 - `DISPATCH_STRATEGIES` — value
@@ -457,7 +460,6 @@
 - `STALE_SESSION_RECORD_MS` — value
 - `STORE_BACKENDS` — value
 - `SUBMIT_IDEMPOTENCY_KEY` — value
-- `SUMMARIZE_MODEL_MISSING_CODE` — value
 - `SafetyMergeCategory` — type
 - `SafetyMergeMember` — type
 - `SandboxGitConfig` — value+type
@@ -581,6 +583,7 @@
 - `WORKER_PULL_TOKEN` — value
 - `WORKER_RESOURCE_PRESETS` — value
 - `WORKSPACE_TRUST_STATES` — value
+- `WS_URL_SHAPE_RULE` — value
 - `WarningKind` — type
 - `WarningProjection` — type
 - `WebAdminCapabilities` — value+type
@@ -602,6 +605,7 @@
 - `WorkspaceTrustState` — type
 - `WorktreeCreateHookInput` — value
 - `WorktreeRemoveHookInput` — value
+- `WsUrlFlaw` — type
 - `aggregateUsage` — value
 - `applyProjectPatch` — value
 - `buildEffective` — value
@@ -624,6 +628,7 @@
 - `describeNotStringArray` — value
 - `describeNotStringRecord` — value
 - `describeValueShape` — value
+- `deviceRelayFlaws` — value
 - `domainWriteRole` — value
 - `drainVerdict` — value
 - `effectiveScopeRole` — value
@@ -774,6 +779,7 @@
 - `withheldNameToken` — value
 - `workerRouteKey` — value
 - `workersReferencingSecret` — value
+- `wsUrlFlaws` — value
 
 ## `./types`(147)
 
@@ -1170,9 +1176,8 @@
 - `tightenVerdict` — value
 - `trustRank` — value
 
-## `./node`(50)
+## `./node`(49)
 
-- `BundleInspection` — type
 - `ConfigBundle` — type
 - `ConfigDirectoryDocument` — type
 - `ConfigDirectoryIo` — type
@@ -1184,6 +1189,7 @@
 - `EnvModelsDecisionWrite` — type
 - `EnvModelsMigration` — type
 - `EnvModelsMint` — type
+- `FileConfigRead` — type
 - `FileConfigStore` — value+type
 - `LocalConfig` — type
 - `MigrateConfigDirectoryOptions` — type
@@ -1199,7 +1205,6 @@
 - `createFileSchedulerStore` — value
 - `domainFilePath` — value
 - `exportBundle` — value
-- `inspectBundle` — value
 - `listRequiredEnvNames` — value
 - `loadEnvFile` — value
 - `loadLocalConfig` — value
@@ -1354,7 +1359,7 @@
 - `interpolateHookEnvVars` — value
 - `stopAttributionText` — value
 
-## `./fleet`(86)
+## `./fleet`(85)
 
 - `AggregatedPrincipalUsage` — type
 - `CATALOG_REPLACES_ENV_MODELS_CODE` — value
@@ -1411,7 +1416,6 @@
 - `SERVING_LEASE_VERDICTS` — value
 - `STALE_HEARTBEAT_MULTIPLIER` — value
 - `SUBMIT_IDEMPOTENCY_KEY` — value
-- `SUMMARIZE_MODEL_MISSING_CODE` — value
 - `ServingLeaseDeniedReason` — value+type
 - `ServingLeaseReading` — type
 - `ServingLeaseRequest` — value+type

package/docs/CONFORMANCE.md

@@ -181,15 +181,9 @@ conformance/
     input.json                # { meta:{version,updatedAt}, domains:{…}, wirePayload?, localFiles? }
     expected.json             # 每条腿一格(四条一条不少):显式 golden / {derive:true}(只 wire / localRoot)/ {applicable:false,why}
     meta.json                 # { contributor, claim, secrets?, firstRedOn, note? }
-  migrate-workers/<id>/       # 7.0.0:workers 域一次性迁移的冻结金样(不是读腿语料,kit 不跑它)
-    input.json                # 原始 6.x workers 文档 { workers:[…] }(`meta.inputFrom` 在场 ⇒ 由加冕脚本取那条的输出生成)
-    expected.json             # migrateWorkersDomain(input) = { doc, changed, dropped, refused }(refused[].original = 输入那一行逐字)
-    meta.json                 # { contributor, claim, inputFrom? }
 ```
 
-- **迁移金样**(7.0.0 起,`m01–m05`:G5 正臂 / G5 幂等 / G5 refused / G7b / 8.2.0 逐行终判 —— 没动的行在 `env` 里设了保留名)给接 `migrateWorkersDomain` 的消费方(web-admin 的 workers 读口)
-  对拍用:把 `input.json` 喂进你的读口,`doc` / `changed` / `dropped` / `refused` 应逐字等于 `expected.json`,再对 `doc` 跑一次应零变化。
-  本仓 `test/conformance-workers-7.0.0.test.ts` 钉着这三件;`npm run conformance:bless`(全量)同时加冕它们。迁移窗口关闭时整个目录随迁移代码删除。
+- **迁移金样**:7.0.0 的 workers 迁移金样目录随那只迁移函数在 11.0.0 删了(树里没有它);一次性迁移族的对拍读 `./one-time-migrations` 的收据与本仓的迁移钉。
 
 - **真源是 `domains`**(各域原始文档)。`wire` / `local-root` 两腿的**入参与期望**都由变换表派生;
   派生解释不了的腿写显式期望并带 `why`。`strictWrite` 的入参与真源恒等、期望恒为显式金样(§6 的「期望从哪来」表)。

package/docs/CONSUMER-INTEGRATION.md

@@ -130,9 +130,9 @@
 
 | import | 内容 | 浏览器安全 |
 |---|---|---|
-| `@sema-agent/settings-schema` | 纯契约+resolver:zod 域类型 / `EffectiveConfig`·`EffectiveWire` / `buildEffective` / `resolveEffectiveForWorker` / `ConfigReader` / `isDomainName` / `NON_SECRET_URL` / `RemoteExecSpec` / `ConfigPath`·`formatConfigPath`(3.0.0,§0.1)/ `EXECUTION_LANES` 等六个词表常量与 `migrateWorkersDomain`(7.0.0,§0.2) | ✅ |
+| `@sema-agent/settings-schema` | 纯契约+resolver:zod 域类型 / `EffectiveConfig`·`EffectiveWire` / `buildEffective` / `resolveEffectiveForWorker` / `ConfigReader` / `isDomainName` / `NON_SECRET_URL` / `RemoteExecSpec` / `ConfigPath`·`formatConfigPath`(3.0.0,§0.1)/ `EXECUTION_LANES` 等六个词表常量(7.0.0,§0.2;车道集 16.0.0)与设备入口的值判官 `deviceRelayFlaws`(16.0.0) | ✅ |
 | `@sema-agent/settings-schema/execution-lanes` | 7.0.0 车道 / 店词表正本(`EXECUTION_LANES` 等,与主桶同一模块实例),给只要词表的客户端组件;15.2.0 起另含车道坐标「空白按缺」的判官 `isBlankCoordinate`(与包根同一个函数对象,零依赖叶模块) | ✅ |
-| `@sema-agent/settings-schema/node` | node-only:`FileConfigStore` / `loadLocalConfig`·`loadRemoteExec`·`writeRemoteExec`·`loadEnvFile` / `writeBundle`·`readBundle`·`exportBundle`·`inspectBundle`(15.2.0:`config.d` 文件层的类型化拒单,词表 `CONFIG_DOCUMENT_REFUSAL_REASONS` 在包根) / `validateDomain`·`writeDomainFile`·`listRequiredEnvNames` | ❌(node) |
+| `@sema-agent/settings-schema/node` | node-only:`FileConfigStore` / `loadLocalConfig`·`loadRemoteExec`·`writeRemoteExec`·`loadEnvFile` / `writeBundle`·`readBundle`·`exportBundle`;单读口 `FileConfigStore.read()`(16.0.0:effective + 告警,或 `config.d` 文件层的类型化拒单 + 版本;词表 `CONFIG_DOCUMENT_REFUSAL_REASONS` 在包根) / `validateDomain`·`writeDomainFile`·`listRequiredEnvNames` | ❌(node) |
 | `@sema-agent/settings-schema/conformance` | 跨仓一致性门 kit(3.0.0 新增;8.0.0 四条腿 + 表态律):金样语料 + 比对器,见 §11 | ❌(node,语料落盘) |
 
 ## 2. 单机(本地)模式 —— `FileConfigStore` 是真实接线,`loadLocalConfig(root)` 是便捷一把梭
@@ -248,7 +248,7 @@ server 直接拒启,不是静默降级。上一代 `SEMA_REGISTRY_*` 八名(`URL
   同一只读口**:`readModelRefusals(body)`,`body` 传 `/health` 体或已 parse 的公告都行(它只读 `modelRefusals` 键);别直接
   读公告上的字段 —— 字段是 wire 形 `ModelRefusalsWire`(码是开放串),读口才按本包闭集收窄成 `ModelRefusalsSignal`。
   形 = `{ entries: { <条目名>: <码> }, plane?: <组拒码> }`,**名 → 码就是全部**:不带上游 id / provider / 坏字段 / 拒因句
-  (那些留在引擎日志里)。码是本包的**闭集**(`MODEL_ENTRY_REFUSAL_CODES` 两码 / `MODEL_PLANE_REFUSAL_CODES` 四码,各有
+  (那些留在引擎日志里)。码是本包的**闭集**(`MODEL_ENTRY_REFUSAL_CODES` 两码 / `MODEL_PLANE_REFUSAL_CODES` 五码,各有
   `z.enum` 与型)—— 渲染按码穷举 `switch`,别手抄词表。**集外码 = 没说**:本包版本不认识的码,读口把那一条(或 `plane`)
   丢掉,丢到空就回 `undefined`;心跳照收、存行照存 wire 形(web-admin 升级本包后同一行读出新码)—— 版本错位不会拖垮心跳。心跳上
   `modelRefusals` 形坏(比如空信号)同样只降为缺席,不拒整条心跳。web-admin 若要给形坏留痕,自己对**请求原体**的 `modelRefusals`