@sema-agent/settings-schema 17.2.0 → 18.0.0

package/conformance/cases/c86-a2a-peers-legal/input.json

@@ -0,0 +1,32 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-11-03T00:00:00.000Z"
+  },
+  "domains": {
+    "a2a": {
+      "peers": [
+        {
+          "name": "kb",
+          "url": "https://kb.example/a2a",
+          "headerRefs": {
+            "Authorization": "KB_TOKEN"
+          },
+          "principalHeader": "X-Principal",
+          "allowSkills": [
+            "search"
+          ]
+        },
+        {
+          "name": "ops",
+          "url": "https://ops.example/",
+          "cardUrl": "https://ops.example/agent-card.json",
+          "scenarios": [
+            "oncall"
+          ],
+          "enabled": false
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c86-a2a-peers-legal/meta.json

@@ -0,0 +1,5 @@
+{
+  "contributor": "contract",
+  "claim": "`a2a`(常驻出站 A2A 对端名册)是便携域:两个合法对端在四条腿上同读 —— 缺省物化(缺 `scenarios` ⇒ `[]`、缺 `enabled` ⇒ `true`),停用的对端照样在表里(`enabled: false` 由读方过滤,不是读腿丢),header 值只以 env-NAME 引用出现(`headerRefs`),零告警。本地腿读 `config.d/a2a.json`:在没有这个域的包上,同一份文件报 `unread-config-file`、远端 `/effective.a2a` 原样透传 —— 一个仍按旧读法的读腿会把这条读成「对端名册缺席」或「未校验的原文」。",
+  "firstRedOn": []
+}

package/conformance/cases/c87-a2a-credential-refs-not-partially-salvaged/expected.json

@@ -0,0 +1,123 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "a2a": {
+        "peers": [
+          {
+            "enabled": true,
+            "headerRefs": {
+              "Authorization": "KB_TOKEN"
+            },
+            "name": "kb",
+            "scenarios": [],
+            "url": "https://kb.example/a2a"
+          },
+          {
+            "allowSkills": [
+              "search"
+            ],
+            "enabled": true,
+            "name": "narrow",
+            "scenarios": [],
+            "url": "https://narrow.example/a2a"
+          }
+        ]
+      },
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "atMention": {
+          "mode": "all"
+        },
+        "models": [],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {},
+      "rosters": {
+        "rosters": []
+      },
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "a2a",
+        "identity": {
+          "name": "half"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "peers",
+          1
+        ],
+        "reasonCode": "entry-schema-invalid"
+      },
+      {
+        "domain": "a2a",
+        "kind": "entry-dropped",
+        "path": [
+          "peers",
+          2,
+          "allowSkills",
+          1
+        ],
+        "reasonCode": "entry-schema-invalid"
+      }
+    ],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-11-03T00:00:00.000Z"
+    }
+  },
+  "strictWrite": {
+    "outcome": "rejected",
+    "stage": "validate",
+    "why": "拒:`half` 的一条 header 引用不是 env-NAME、`half` 与 `narrow` 的 `allowSkills` 各有一个空串 —— 写是一个动作,一处坏整份不受理。"
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 3675868689326288
+  }
+}

package/conformance/cases/c87-a2a-credential-refs-not-partially-salvaged/input.json

@@ -0,0 +1,39 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-11-03T00:00:00.000Z"
+  },
+  "domains": {
+    "a2a": {
+      "peers": [
+        {
+          "name": "kb",
+          "url": "https://kb.example/a2a",
+          "headerRefs": {
+            "Authorization": "KB_TOKEN"
+          }
+        },
+        {
+          "name": "half",
+          "url": "https://half.example/a2a",
+          "headerRefs": {
+            "Authorization": "HALF_TOKEN",
+            "X-Tenant": "not an env name"
+          },
+          "allowSkills": [
+            "search",
+            ""
+          ]
+        },
+        {
+          "name": "narrow",
+          "url": "https://narrow.example/a2a",
+          "allowSkills": [
+            "search",
+            ""
+          ]
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c87-a2a-credential-refs-not-partially-salvaged/meta.json

@@ -0,0 +1,5 @@
+{
+  "contributor": "contract",
+  "claim": "凭据引用集合不可部分抢救:对端 `half` 的 `headerRefs` 里一条引用坏形(值不是 env-NAME)⇒ **整个对端** `entry-dropped`(域 `a2a`、坐标 `[\"peers\",1]`、身份 `half`),不是只丢那一条引用、留下一个带着一半凭据去拨远端的对端;兄弟 `kb` 原样保留。对照组 `narrow`:非凭据集合(`allowSkills`)里的坏元素照旧逐条丢(坐标 `[\"peers\",2,\"allowSkills\",1]`;丢了只会更窄),对端本身活下来。严写腿整份拒。一个对每个 Record 都逐条抢救的读腿会把 `half` 读成「只带 Authorization 的对端」。",
+  "firstRedOn": []
+}

package/conformance/cases/cc01-mcp-toolfaces-non-object/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -161,6 +164,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 197807763204275
+    "localVersion": 3253988119103129
   }
 }

package/conformance/cases/cc02-mcp-source-key-is-transported/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -107,6 +110,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2482576595667034
+    "localVersion": 3591318400132154
   }
 }

package/conformance/cases/cc03-model-compat-unknown-subkey/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -116,6 +119,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 4345724001787046
+    "localVersion": 1663867526020649
   }
 }

package/conformance/cases/cli01-model-name-nfc-vs-nfd/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -112,6 +115,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 694685728514477
+    "localVersion": 2654544430240950
   }
 }

package/conformance/cases/cli02-control-and-zero-width-chars/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -125,6 +128,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 4213710307592750
+    "localVersion": 3769852229872529
   }
 }

package/conformance/cases/cli03-credential-pasted-into-unknown-key/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -121,6 +124,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2617555914511015
+    "localVersion": 1531100058823047
   }
 }

package/conformance/cases/cli04-env-value-with-newline/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -149,6 +152,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2617555914511015
+    "localVersion": 1531100058823047
   }
 }

package/conformance/cases/cli05-long-and-prefix-colliding-names/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -148,6 +151,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 1318036626730287
+    "localVersion": 3555569200054848
   }
 }

package/conformance/cases/t01-absent-domain-key-not-null/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -91,6 +94,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2247688933988744
+    "localVersion": 1409565868890479
   }
 }

package/conformance/cases/t03-prototype-name-key-not-swallowed/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -152,6 +155,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 3232605402901914
+    "localVersion": 3557208461559525
   }
 }

package/conformance/cases/t04-secret-literal-never-in-warning-value/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -108,6 +111,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2614200563056761
+    "localVersion": 3944259292559843
   }
 }

package/conformance/cases/z01-every-domain-empty-object/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -131,6 +134,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 499959296543014
+    "localVersion": 3006809479574243
   }
 }

package/conformance/cases/z02-every-domain-unknown-key/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -425,6 +428,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 567413778934550
+    "localVersion": 1287865876181806
   }
 }

package/dist/center-refs.d.ts

@@ -8,8 +8,9 @@
  * ## 律(一条)
  * 引用表怎么读、每个变量怎么问、读不出怎么说,只有这一处:
  *  · **引用表经公开的记录读器读**({@link readPlainStringRecord}:同一个函数、同一张原因词表 {@link PLAIN_STRING_RECORD_FAULTS}),不另写形状 / 描述符判据。读不出(整张不是纯数据、有成员的变量名不是串、
- *    读成员就抛、叫 `__proto__` 的成员)⇒ 整台结论 `refs_unreadable`,带读器的词,**一个变量都不问** —— 引用表本身不可信时,问了的值也没有可以挂的地方。
- *    读器会把叫 `__proto__` 的串值成员**剔出副本**交其余;本口不许这样悄悄丢一条引用再挂一台少了鉴权的 server,所以同样答 `refs_unreadable`、词 `member_name_reserved`。
+ *    读成员就抛、叫保留名 `__proto__` / `constructor` / `prototype` 的成员)⇒ 整台结论 `refs_unreadable`,带读器的词,**一个变量都不问** —— 引用表本身不可信时,问了的值也没有可以挂的地方。
+ *    读器会把叫保留名的串值成员**剔出副本**交其余;本口不许这样悄悄丢一条引用再挂一台少了鉴权的 server,所以同样答 `refs_unreadable`、词 `member_name_reserved`,点名第一个(自有键序)。
+ *    保留名只有一张表(`./reserved-member-name`):域 schema 的凭据引用集合拒同一组名字,两个读口同答。
  *  · **查找函数 `lookup(name)` 由调用方给**,本口**不读 `process.env`**(源里没有 `process` / `globalThis`;宿主怎么读环境、读哪一层环境、要不要缓存,都是调用方的事)。没给 / 不是函数 ⇒ `TypeError`
  *    (这是调用方的编程错,不是数据错:不折成成员的 `read_threw`,更不回落任何环境)。
  *  · 每个成员恰问一次 `lookup`(按引用表副本的自有键序 —— 整数形的键在前、其余按记录列出的次序;实参只有变量名一个),判成**一个词**({@link CenterRefMemberVerdict}):
@@ -23,7 +24,7 @@
  *
  * ## 读数的构造
  * 成员表用 `map`,`values` 用 `Object.defineProperty` + 零原型描述符({@link dataDescriptor})逐键写进一个新对象(定义语义,不走 [[Set]]):`Object.prototype` 上挂了数字键 setter 时目标键 `"0"` 的值也不会被吞;
- * `constructor` / `toString` 这类原型链上的名字作目标键照落成自有数据属性。交出的 `values` 原型是 `Object.prototype`,与读器交出的副本同形。
+ * `toString` / `hasOwnProperty` 这类不在保留名表里的原型链名字作目标键照落成自有数据属性。交出的 `values` 原型是 `Object.prototype`,与读器交出的副本同形。
  */
 import { type PlainStringRecordFault } from "./mcp-request-entry.js";
 /** 一个成员没解到的**原因词**,闭集,三个:`missing_name`(查找函数答 `undefined` —— 变量没设)· `not_a_string`(答了别的种类)· `read_threw`(查找函数抛了)。消费方按词分派,穷尽 `switch`,不读句子(本口没有句子)。 */

package/dist/center-refs.js

@@ -8,8 +8,9 @@
  * ## 律(一条)
  * 引用表怎么读、每个变量怎么问、读不出怎么说,只有这一处:
  *  · **引用表经公开的记录读器读**({@link readPlainStringRecord}:同一个函数、同一张原因词表 {@link PLAIN_STRING_RECORD_FAULTS}),不另写形状 / 描述符判据。读不出(整张不是纯数据、有成员的变量名不是串、
- *    读成员就抛、叫 `__proto__` 的成员)⇒ 整台结论 `refs_unreadable`,带读器的词,**一个变量都不问** —— 引用表本身不可信时,问了的值也没有可以挂的地方。
- *    读器会把叫 `__proto__` 的串值成员**剔出副本**交其余;本口不许这样悄悄丢一条引用再挂一台少了鉴权的 server,所以同样答 `refs_unreadable`、词 `member_name_reserved`。
+ *    读成员就抛、叫保留名 `__proto__` / `constructor` / `prototype` 的成员)⇒ 整台结论 `refs_unreadable`,带读器的词,**一个变量都不问** —— 引用表本身不可信时,问了的值也没有可以挂的地方。
+ *    读器会把叫保留名的串值成员**剔出副本**交其余;本口不许这样悄悄丢一条引用再挂一台少了鉴权的 server,所以同样答 `refs_unreadable`、词 `member_name_reserved`,点名第一个(自有键序)。
+ *    保留名只有一张表(`./reserved-member-name`):域 schema 的凭据引用集合拒同一组名字,两个读口同答。
  *  · **查找函数 `lookup(name)` 由调用方给**,本口**不读 `process.env`**(源里没有 `process` / `globalThis`;宿主怎么读环境、读哪一层环境、要不要缓存,都是调用方的事)。没给 / 不是函数 ⇒ `TypeError`
  *    (这是调用方的编程错,不是数据错:不折成成员的 `read_threw`,更不回落任何环境)。
  *  · 每个成员恰问一次 `lookup`(按引用表副本的自有键序 —— 整数形的键在前、其余按记录列出的次序;实参只有变量名一个),判成**一个词**({@link CenterRefMemberVerdict}):
@@ -23,9 +24,9 @@
  *
  * ## 读数的构造
  * 成员表用 `map`,`values` 用 `Object.defineProperty` + 零原型描述符({@link dataDescriptor})逐键写进一个新对象(定义语义,不走 [[Set]]):`Object.prototype` 上挂了数字键 setter 时目标键 `"0"` 的值也不会被吞;
- * `constructor` / `toString` 这类原型链上的名字作目标键照落成自有数据属性。交出的 `values` 原型是 `Object.prototype`,与读器交出的副本同形。
+ * `toString` / `hasOwnProperty` 这类不在保留名表里的原型链名字作目标键照落成自有数据属性。交出的 `values` 原型是 `Object.prototype`,与读器交出的副本同形。
  */
-import { PLAIN_STRING_RECORD_RESERVED_MEMBER, readPlainStringRecord } from "./mcp-request-entry.js";
+import { readPlainStringRecord } from "./mcp-request-entry.js";
 import { dataDescriptor, inspect } from "./own-key-read.js";
 /** 一个成员没解到的**原因词**,闭集,三个:`missing_name`(查找函数答 `undefined` —— 变量没设)· `not_a_string`(答了别的种类)· `read_threw`(查找函数抛了)。消费方按词分派,穷尽 `switch`,不读句子(本口没有句子)。 */
 export const CENTER_REF_FAULTS = ["missing_name", "not_a_string", "read_threw"];
@@ -55,8 +56,9 @@ export function resolveCenterRefs(refs, lookup) {
     const read = readPlainStringRecord(refs);
     if (!read.ok)
         return { verdict: "refs_unreadable", fault: read.fault, ...(read.member !== undefined ? { member: read.member } : {}) };
-    if (read.reservedMember)
-        return { verdict: "refs_unreadable", fault: "member_name_reserved", member: PLAIN_STRING_RECORD_RESERVED_MEMBER };
+    const [reserved] = read.reservedMembers;
+    if (reserved !== undefined)
+        return { verdict: "refs_unreadable", fault: "member_name_reserved", member: reserved };
     const judged = Object.entries(read.record).map((pair) => ({ key: pair[0], ref: pair[1], answer: answerOf(pair[1], lookup) }));
     const members = judged.map((j) => ({ key: j.key, ref: j.ref, verdict: j.answer.verdict }));
     if (judged.some((j) => j.answer.verdict !== "resolved"))

package/dist/cli.d.ts

@@ -35,5 +35,5 @@ export interface SettingsSchemaCliIo extends ConfigDirectoryIo {
     stderr(text: string): void;
 }
 /** 命令行的覆盖面:全部配置域、retired 域(便携与否不论 —— 离线的 `workers.json` 一样迁)与 `remote-exec.json`。 */
-export declare const COVERED_DOCUMENTS: ("remote-exec" | "models" | "rosters" | "scenarios" | "skills" | "execution" | "plugins" | "systems" | "limits" | "runtime" | "workers" | "hosts" | "projects" | "mcp" | "collab" | "governance" | "entitlement" | "prompts")[];
+export declare const COVERED_DOCUMENTS: ("remote-exec" | "models" | "rosters" | "scenarios" | "skills" | "execution" | "plugins" | "systems" | "limits" | "runtime" | "workers" | "hosts" | "projects" | "mcp" | "collab" | "governance" | "entitlement" | "prompts" | "a2a")[];
 export declare function runSettingsSchemaCli(argv: readonly string[], io: SettingsSchemaCliIo): Promise<number>;

package/dist/config-fns.d.ts

@@ -570,6 +570,7 @@ export declare const DOMAIN_READ_FALLBACK: {
     readonly projects: "throw";
     readonly prompts: "default";
     readonly limits: "throw";
+    readonly a2a: "default";
 };
 /** Per-domain ENTRY-SALVAGE policy (12.3.0, S-1494) — may the view-face domain reader ({@link parseDomainSalvaged}) drop single bad
  *  entries (an array element, a Record value, and — recursively — a bad entry inside a surviving entry) and read the rest?
@@ -605,7 +606,10 @@ export declare const DOMAIN_READ_FALLBACK: {
  *    - governance: NONE — a dropped commandPolicy / approvalRequire row is a guardrail silently gone (放权,不许).
  *    - entitlement: NONE — a dropped tier / subject / binding / budget group changes who may do what (放权,不许).
  *    - execution: NONE — a dropped lane / public key changes the execution mandate (放权,不许).
- *    - limits: NONE — a dropped allowlist row changes a published ceiling (the domain is the one publishing seat of those ceilings). */
+ *    - limits: NONE — a dropped allowlist row changes a published ceiling (the domain is the one publishing seat of those ceilings).
+ *    - a2a: SALVAGE (18.0.0) — the peer roster is a capability catalog like mcp: a dropped peer is one remote agent fewer. A peer's
+ *      credential references (`headerRefs`) are in {@link ATOMIC_SALVAGE}: a bad reference drops the whole peer, never the reference
+ *      alone (a peer kept with half of its credentials is the wrong failure direction). */
 export declare const DOMAIN_ENTRY_SALVAGE: {
     readonly models: "salvage";
     readonly rosters: "none";
@@ -623,6 +627,7 @@ export declare const DOMAIN_ENTRY_SALVAGE: {
     readonly projects: "salvage";
     readonly prompts: "none";
     readonly limits: "none";
+    readonly a2a: "salvage";
 };
 /** 一个读者向店要文档的口:配置域,以及墓碑表里的retired 域({@link RETIRED_DOMAINS})—— 后者只为让墓碑看见没迁的旧文档。 */
 export type StoredDocumentReader = (d: DomainName | RetiredDomainName) => unknown;

package/dist/config-fns.js

@@ -23,7 +23,7 @@ import { isJsonArray, isPlainJsonObject, jsonShapeOf } from "./plain-json-object
 import { carriesUserinfo, secretScanForms } from "./secret-scan.js"; // package-private normalization (both scanners read it) + the userinfo judgement (not in the barrel)
 import { sha256Hex } from "./sha256.js";
 import { unwrapSchema } from "./zod-unwrap.js"; // package-private: the ONE reading of zod's wrapper layers (salvage + the one-time migrations share it)
-import { DOMAIN_SCHEMAS, InfraCostRates, LimitsConfig, PRIVATE_KEY_PEM_HEADER, RETIRED_DOMAINS, SkillsManifestSchema, containsSecretToken, isDomainName, isRetiredDomainName, renderQuotedSentence, retiredDomainSentence } from "./types.js";
+import { ATOMIC_SALVAGE, DOMAIN_SCHEMAS, InfraCostRates, LimitsConfig, PRIVATE_KEY_PEM_HEADER, RETIRED_DOMAINS, SkillsManifestSchema, containsSecretToken, isDomainName, isRetiredDomainName, renderQuotedSentence, retiredDomainSentence } from "./types.js";
 /** Redact secret-shaped tokens from a validation MESSAGE — a zod error echoes the offending value (e.g.
  *  `received 'sk-live-…'`), so a secret pasted into the WRONG field would leak via the error string. Redacts
  *  space-spanning auth credentials (`Bearer <token>`) FIRST (the token pass can't see across the space), then
@@ -197,6 +197,10 @@ export const DOMAIN_WRITE_ROLE = {
     // limits (0.19.0): editor —— 与它的前身 runtime 域(11.0.0 retired)同档,刻意不抬 publisher:本域是纯数值
     // 旋钮,无 prompt 注入面、无凭据、无可执行内容;真正的执法点在消费方的限额闸,发布闸(PUBLISH_MODE /
     // 审批流)才是"要不要多一道人"的属主。default 即 editor,故不列条目;此注释即该裁定的落点。
+    // a2a (18.0.0): a peer is a remote agent whose skills are mounted into the agent's tool surface, plus the env-NAMEs that
+    // carry its credentials — the same executable-surface + credential-reference profile as mcp, so the same raised gate.
+    // Written out (not left to the default) because the default would be the WRONG answer here.
+    a2a: "publisher",
 };
 /** The minimum role required to write `domain` (the raised gate for skills/mcp, else editor). */
 export function domainWriteRole(domain) {
@@ -495,6 +499,9 @@ function salvageLayerUnsafe(schema, raw) {
     const patch = {};
     for (const [field, fieldSchema] of Object.entries(shape)) {
         const collection = unwrapSchema(fieldSchema);
+        // 凭据引用集合(按 schema 身份,见 ATOMIC_SALVAGE)不下钻:它是一个值,坏一项 ⇒ 它所属的条目在上一层整条判不过、整条丢。
+        if (ATOMIC_SALVAGE.has(collection))
+            continue;
         const isArray = collection instanceof z.ZodArray;
         if (!isArray && !(collection instanceof z.ZodRecord))
             continue; // 不是条目集合:连读都不读(少触发一次访问器)
@@ -1006,6 +1013,8 @@ export const DOMAIN_READ_FALLBACK = {
     // 降级成空域 = 中央发布的成本/限流天花板整片蒸发,消费方回自己的 env 底(可能宽得多)= 预算轴放权。
     // 消费方 fail-static 在上一份好配置严格更好。
     limits: "throw",
+    // a2a(18.0.0):能力目录(同 mcp)—— 整域读不进 ⇒ 空名册 = 不拨任何对端(能力消失,fail-closed;没有闸因此丢掉)。
+    a2a: "default",
 };
 /** Per-domain ENTRY-SALVAGE policy (12.3.0, S-1494) — may the view-face domain reader ({@link parseDomainSalvaged}) drop single bad
  *  entries (an array element, a Record value, and — recursively — a bad entry inside a surviving entry) and read the rest?
@@ -1041,7 +1050,10 @@ export const DOMAIN_READ_FALLBACK = {
  *    - governance: NONE — a dropped commandPolicy / approvalRequire row is a guardrail silently gone (放权,不许).
  *    - entitlement: NONE — a dropped tier / subject / binding / budget group changes who may do what (放权,不许).
  *    - execution: NONE — a dropped lane / public key changes the execution mandate (放权,不许).
- *    - limits: NONE — a dropped allowlist row changes a published ceiling (the domain is the one publishing seat of those ceilings). */
+ *    - limits: NONE — a dropped allowlist row changes a published ceiling (the domain is the one publishing seat of those ceilings).
+ *    - a2a: SALVAGE (18.0.0) — the peer roster is a capability catalog like mcp: a dropped peer is one remote agent fewer. A peer's
+ *      credential references (`headerRefs`) are in {@link ATOMIC_SALVAGE}: a bad reference drops the whole peer, never the reference
+ *      alone (a peer kept with half of its credentials is the wrong failure direction). */
 export const DOMAIN_ENTRY_SALVAGE = {
     models: "salvage",
     rosters: "none",
@@ -1059,6 +1071,7 @@ export const DOMAIN_ENTRY_SALVAGE = {
     projects: "salvage",
     prompts: "none",
     limits: "none",
+    a2a: "salvage",
 };
 /**
  * Merge every domain into the effective config a consumer pulls. Shared by all store impls.
@@ -1111,6 +1124,7 @@ export function buildEffective(version, getRaw, updatedAt, onWarning) {
         // `{}` 不下发中心层,default 不扩权)。
         prompts: parseOr("prompts", getRaw("prompts")),
         limits: parseOr("limits", getRaw("limits")),
+        a2a: parseOr("a2a", getRaw("a2a")),
     };
 }
 /** READ-side tolerant judgment for a GET /effective **wire payload**(the {@link EffectiveWire} contract)at