@sema-agent/settings-schema 8.1.0 → 8.3.0

package/dist/migrate-workers.d.ts

@@ -21,15 +21,22 @@
  *    (无 host、无 `DB_BACKEND`、无 `tidb` 词)⇒ 不写店,旧字段 dropped。
  *  · **表达不了 ⇒ refused**:值写错了栏(密钥以字面值写在 env、坐标来自宿主密钥)、不认识的词、新旧两形并存、`DB_BACKEND=pg`
  *    配 MySQL 族坐标 —— 迁移不搬值进密钥位、不读宿主密钥、不替运维挑赢家、不换库。
- *  · **终判 = 7.0.0 schema**:迁出来的每只 worker 都过 `WorkerSpec.safeParse`;不过 ⇒ refused,拒因是 schema 自己的 issue
- *    (例:多租户 + host 车道、点了车道却缺必需坐标)。迁移不复述任何一条写闸规则。
+ *
+ * ## 终判(逐行:迁过的行与没动的行同一只)
+ * 每一只**认得出名字**的 worker —— 迁过的、没动的一样 —— 都过读侧自己的判据:**只含这一行的 workers 域**读不读得进
+ * (`WorkersConfig`,就是 `parseDomain("workers")` 用的那一只 schema)。读不进 ⇒ refused,拒因是 schema 自己的 issue(例:多租户 + host
+ * 车道、点了车道却缺必需坐标、`env` 里设了保留名、`replicas` 与 `autoscaling` 并存)。迁移不复述任何一条写闸规则,也不另抄保留名表:
+ * 判据只有读侧那一只。所以 `doc` 里每一只认得出名字的 worker 单独都读得进。
+ *
+ * 整域读侧仍是**最后围栏**,只剩两类归它:认不出名字的条目(不是对象 / 没有字符串名字 —— 迁移不判形,原样留在 `doc`)与跨行规则
+ * (名字 / 路由前缀唯一 —— 两行单独都读得进,合起来才不行,迁移不替运维挑留哪一行)。
  *
  * refused 的 worker **不进**输出 `doc`(中心不加载它、在列表标红点名 `field`;CLI 有 refused 就一字不写),但随 `refused[].original`
  * 逐字带回:`doc` ∪ `refused[].original` 覆盖输入的全部 worker,中心写回前按 `index` 放回(或另存),运维的 spec 不会随迁移消失。
  * 拒因 / dropped 只点名字段,不回显值。
  *
  * ## 幂等
- * 已迁形(没有任何旧键、该有的块都在)⇒ 原样(同一引用)返回、`changed = []`。所以再跑一次 ⇒ 零变化、`doc` 字节相等。
+ * 已迁形且逐行读得进(没有任何旧键、该有的块都在)⇒ 原样(同一引用)返回、`changed = []`。所以再跑一次 ⇒ 零变化、`doc` 字节相等。
  */
 import { type ConfigPath } from "./config-fns.js";
 /** 一个被丢掉的旧字段(引擎本就不读它 —— 通知一行,不是错误)。`field` 相对该 worker 条目;`index` = 它在输入 `workers` 里的下标。 */
@@ -38,7 +45,8 @@ export interface WorkersMigrationDrop {
     readonly index: number;
     readonly field: ConfigPath;
 }
-/** 一只迁不了的 worker(不进输出 `doc`)。`field` 指到要人改的那一格(相对该 worker 条目;终判失败时是 7.0.0 形里的路径),
+/** 一只迁不了的 worker(不进输出 `doc`)。`field` 指到要人改的那一格(相对该 worker 条目;终判拒时是读侧 schema issue 的路径 ——
+ *  迁过的行指迁出形里的格,没动的行指存下来那一行的格),
  *  `reason` 只点名字段、不回显值。`original` = 输入里那一行**逐字**(同一个值,未拷贝未改写)——
  *  🔴 **写回 `doc` 之前必须把每个 `refused[].original` 按 `index` 放回(或另存)**,否则这只 worker 的 spec 随写回从存储里消失,
  *  运维看到的是「worker 不见了」而不是「worker 被标红」。它是调用方自己的数据,原样带回;要记日志,按调用方记那一行的规矩记。 */

package/dist/migrate-workers.js

@@ -21,20 +21,28 @@
  *    (无 host、无 `DB_BACKEND`、无 `tidb` 词)⇒ 不写店,旧字段 dropped。
  *  · **表达不了 ⇒ refused**:值写错了栏(密钥以字面值写在 env、坐标来自宿主密钥)、不认识的词、新旧两形并存、`DB_BACKEND=pg`
  *    配 MySQL 族坐标 —— 迁移不搬值进密钥位、不读宿主密钥、不替运维挑赢家、不换库。
- *  · **终判 = 7.0.0 schema**:迁出来的每只 worker 都过 `WorkerSpec.safeParse`;不过 ⇒ refused,拒因是 schema 自己的 issue
- *    (例:多租户 + host 车道、点了车道却缺必需坐标)。迁移不复述任何一条写闸规则。
+ *
+ * ## 终判(逐行:迁过的行与没动的行同一只)
+ * 每一只**认得出名字**的 worker —— 迁过的、没动的一样 —— 都过读侧自己的判据:**只含这一行的 workers 域**读不读得进
+ * (`WorkersConfig`,就是 `parseDomain("workers")` 用的那一只 schema)。读不进 ⇒ refused,拒因是 schema 自己的 issue(例:多租户 + host
+ * 车道、点了车道却缺必需坐标、`env` 里设了保留名、`replicas` 与 `autoscaling` 并存)。迁移不复述任何一条写闸规则,也不另抄保留名表:
+ * 判据只有读侧那一只。所以 `doc` 里每一只认得出名字的 worker 单独都读得进。
+ *
+ * 整域读侧仍是**最后围栏**,只剩两类归它:认不出名字的条目(不是对象 / 没有字符串名字 —— 迁移不判形,原样留在 `doc`)与跨行规则
+ * (名字 / 路由前缀唯一 —— 两行单独都读得进,合起来才不行,迁移不替运维挑留哪一行)。
  *
  * refused 的 worker **不进**输出 `doc`(中心不加载它、在列表标红点名 `field`;CLI 有 refused 就一字不写),但随 `refused[].original`
  * 逐字带回:`doc` ∪ `refused[].original` 覆盖输入的全部 worker,中心写回前按 `index` 放回(或另存),运维的 spec 不会随迁移消失。
  * 拒因 / dropped 只点名字段,不回显值。
  *
  * ## 幂等
- * 已迁形(没有任何旧键、该有的块都在)⇒ 原样(同一引用)返回、`changed = []`。所以再跑一次 ⇒ 零变化、`doc` 字节相等。
+ * 已迁形且逐行读得进(没有任何旧键、该有的块都在)⇒ 原样(同一引用)返回、`changed = []`。所以再跑一次 ⇒ 零变化、`doc` 字节相等。
  */
 import { formatConfigPath, redactSecrets } from "./config-fns.js";
 import { LANE_ENV_OWNER, STORE_ENV_KEYS, isLaneEnvKey } from "./execution-lane-index.js";
 import { EXECUTION_LANE_WORDS, MEMORY_ENGINE_BACKENDS, STORE_BACKENDS } from "./execution-lanes.js";
-import { WorkerSpec } from "./types.js";
+import { issueText } from "./issue-text.js";
+import { WorkersConfig } from "./types.js";
 function isRec(v) {
     return v !== null && typeof v === "object" && !Array.isArray(v);
 }
@@ -102,8 +110,10 @@ function migrateEntry(raw, index) {
         return refuse(["secretEnv", "REMOTE_EXEC"], "the execution lane is set from a host secret — the migration cannot read it; declare runtime.execution.lane by hand");
     const needLane = !hasExecution && (enabled || laneTouched);
     const needStore = !hasStore && (enabled || storeTouched);
-    if (!needLane && !needStore)
-        return UNCHANGED;
+    if (!needLane && !needStore) {
+        const refusal = rowVerdict(raw, "stored");
+        return refusal === undefined ? UNCHANGED : refuse(refusal.field, refusal.reason);
+    }
     const w = structuredClone(raw);
     const runtime = isRec(w.runtime) ? w.runtime : {};
     w.runtime = runtime;
@@ -278,17 +288,31 @@ function migrateEntry(raw, index) {
         delete w.env;
     if (isRec(w.secretEnv) && Object.keys(secretEnv).length === 0 && isRec(raw.secretEnv) && Object.keys(raw.secretEnv).length > 0)
         delete w.secretEnv;
-    // 终判 = 7.0.0 schema 本身(迁移不复述写闸规则)
-    const verdict = WorkerSpec.safeParse(w);
-    if (!verdict.success) {
-        const issues = verdict.error.issues;
-        const shown = issues.slice(0, 3).map((i) => `${formatConfigPath(i.path)}: ${i.message}`);
-        const more = issues.length > shown.length ? ` (+${issues.length - shown.length} more)` : "";
-        const first = issues[0];
-        return refuse(first === undefined ? [] : first.path, `after migration the worker is not a valid 7.0.0 WorkerSpec — ${shown.join("; ")}${more}`);
-    }
+    const refusal = rowVerdict(w, "migrated");
+    if (refusal !== undefined)
+        return refuse(refusal.field, refusal.reason);
     return { kind: "migrated", entry: w, dropped };
 }
+/**
+ * 逐行**终判** —— 迁过的行与没动的行同一只(见文件头「终判」):只含这一行的 workers 域读不读得进,判据就是读侧的 `WorkersConfig`
+ * (逐行的规则无论写在 `WorkerSpec` 里还是写在域层,都在;跨行规则一行时不触发)。读得进 ⇒ `undefined`;读不进 ⇒ 第一条 issue 的
+ * 路径(相对该行)+ 至多三条 issue 的句子(经 `issueText`:不回显输入值)。`stage` 只决定拒因说的是哪一份形(迁出形 / 存储形)。
+ */
+function rowVerdict(row, stage) {
+    const verdict = WorkersConfig.safeParse({ workers: [row] });
+    if (verdict.success)
+        return undefined;
+    const issues = verdict.error.issues;
+    const shown = issues.slice(0, 3).map((i) => `${formatConfigPath(rowRelative(i.path))}: ${issueText(i)}`);
+    const more = issues.length > shown.length ? ` (+${issues.length - shown.length} more)` : "";
+    const subject = stage === "migrated" ? "after migration the worker" : "the stored worker";
+    const first = issues[0];
+    return { field: first === undefined ? [] : rowRelative(first.path), reason: `${subject} is not a valid WorkerSpec — ${shown.join("; ")}${more}` };
+}
+/** 一只单行域里的 issue 路径 → 相对那一行(去掉 `["workers", 0]` 前缀;不在那一行下的 issue 原样)。 */
+function rowRelative(path) {
+    return path[0] === "workers" && path[1] === 0 ? path.slice(2) : path;
+}
 /**
  * 迁移一份 workers 域**原始**文档(`{ workers: [...] }`)。不是这个形 ⇒ 原样返回(判形是 `parseDomain` 的事,迁移不抛)。
  * 规则、幂等与 refused 的处置见文件头。

package/dist/remote-exec.d.ts

@@ -64,7 +64,7 @@ export declare const RemoteExecSpec: z.ZodDiscriminatedUnion<"provider", [z.ZodO
     memory?: string | undefined;
     workdir?: string | undefined;
     cpus?: number | undefined;
-    network?: "host" | "none" | "bridge" | undefined;
+    network?: "none" | "host" | "bridge" | undefined;
     mountPath?: string | undefined;
 }, {
     provider: "local-docker";
@@ -72,7 +72,7 @@ export declare const RemoteExecSpec: z.ZodDiscriminatedUnion<"provider", [z.ZodO
     memory?: string | undefined;
     workdir?: string | undefined;
     cpus?: number | undefined;
-    network?: "host" | "none" | "bridge" | undefined;
+    network?: "none" | "host" | "bridge" | undefined;
     mountPath?: string | undefined;
 }>, z.ZodObject<{
     provider: z.ZodLiteral<"e2b">;

package/dist/types.d.ts

@@ -5044,10 +5044,10 @@ declare const CollabTemplate: z.ZodEffects<z.ZodObject<{
         /** Slot id the finalizer anchors to (e.g. the judge slot). Meaningless for type "none". */
         slot: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+        type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
         slot?: string | undefined;
     }, {
-        type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+        type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
         slot?: string | undefined;
     }>;
     sharedContext: z.ZodDefault<z.ZodObject<{
@@ -5093,7 +5093,7 @@ declare const CollabTemplate: z.ZodEffects<z.ZodObject<{
         earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
     };
     finalizer: {
-        type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+        type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
         slot?: string | undefined;
     };
     sharedContext: {
@@ -5125,7 +5125,7 @@ declare const CollabTemplate: z.ZodEffects<z.ZodObject<{
         earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
     };
     finalizer: {
-        type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+        type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
         slot?: string | undefined;
     };
     budget: {
@@ -5159,7 +5159,7 @@ declare const CollabTemplate: z.ZodEffects<z.ZodObject<{
         earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
     };
     finalizer: {
-        type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+        type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
         slot?: string | undefined;
     };
     sharedContext: {
@@ -5191,7 +5191,7 @@ declare const CollabTemplate: z.ZodEffects<z.ZodObject<{
         earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
     };
     finalizer: {
-        type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+        type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
         slot?: string | undefined;
     };
     budget: {
@@ -5272,10 +5272,10 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             /** Slot id the finalizer anchors to (e.g. the judge slot). Meaningless for type "none". */
             slot: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         }, {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         }>;
         sharedContext: z.ZodDefault<z.ZodObject<{
@@ -5321,7 +5321,7 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
         };
         finalizer: {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         };
         sharedContext: {
@@ -5353,7 +5353,7 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
         };
         finalizer: {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         };
         budget: {
@@ -5387,7 +5387,7 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
         };
         finalizer: {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         };
         sharedContext: {
@@ -5419,7 +5419,7 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
         };
         finalizer: {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         };
         budget: {
@@ -5455,7 +5455,7 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
         };
         finalizer: {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         };
         sharedContext: {
@@ -5489,7 +5489,7 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
         };
         finalizer: {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         };
         budget: {
@@ -5525,7 +5525,7 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
         };
         finalizer: {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         };
         sharedContext: {
@@ -5559,7 +5559,7 @@ export declare const CollabConfig: z.ZodEffects<z.ZodObject<{
             earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
         };
         finalizer: {
-            type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+            type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
             slot?: string | undefined;
         };
         budget: {
@@ -11446,10 +11446,10 @@ export declare const DOMAIN_SCHEMAS: {
                 /** Slot id the finalizer anchors to (e.g. the judge slot). Meaningless for type "none". */
                 slot: z.ZodOptional<z.ZodString>;
             }, "strip", z.ZodTypeAny, {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             }, {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             }>;
             sharedContext: z.ZodDefault<z.ZodObject<{
@@ -11495,7 +11495,7 @@ export declare const DOMAIN_SCHEMAS: {
                 earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
             };
             finalizer: {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             };
             sharedContext: {
@@ -11527,7 +11527,7 @@ export declare const DOMAIN_SCHEMAS: {
                 earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
             };
             finalizer: {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             };
             budget: {
@@ -11561,7 +11561,7 @@ export declare const DOMAIN_SCHEMAS: {
                 earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
             };
             finalizer: {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             };
             sharedContext: {
@@ -11593,7 +11593,7 @@ export declare const DOMAIN_SCHEMAS: {
                 earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
             };
             finalizer: {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             };
             budget: {
@@ -11629,7 +11629,7 @@ export declare const DOMAIN_SCHEMAS: {
                 earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
             };
             finalizer: {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             };
             sharedContext: {
@@ -11663,7 +11663,7 @@ export declare const DOMAIN_SCHEMAS: {
                 earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
             };
             finalizer: {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             };
             budget: {
@@ -11699,7 +11699,7 @@ export declare const DOMAIN_SCHEMAS: {
                 earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
             };
             finalizer: {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             };
             sharedContext: {
@@ -11733,7 +11733,7 @@ export declare const DOMAIN_SCHEMAS: {
                 earlyStop?: "consensus" | "stability" | "judge_call" | "verify_pass" | undefined;
             };
             finalizer: {
-                type: "summarize" | "judge" | "vote" | "fuse" | "verify" | "none";
+                type: "none" | "summarize" | "judge" | "vote" | "fuse" | "verify";
                 slot?: string | undefined;
             };
             budget: {

package/dist/types.js

@@ -17,7 +17,7 @@
  */
 import { z } from "zod";
 import { MAX_EXTRA_BODY_DEPTH } from "./hash.js"; // reconcile the extraBody depth cap with the hash cap (R18)
-import { DispatchPolicy, FLEET_GENERATION_ENV } from "./fleet.js"; // WorkerSpec.fleet.dispatch (scheduling framework D3)
+import { DispatchPolicy, FLEET_GENERATION_ENV, FLEET_SCOPE_ENV } from "./fleet.js"; // WorkerSpec.fleet.dispatch (scheduling framework D3)
 import { carriesUserinfo, percentLayers } from "./secret-scan.js"; // package-private normalization + the userinfo judgement (not in the barrel)
 import { EXECUTION_LANES, EXECUTION_LANE_WORDS, MEMORY_ENGINE_BACKENDS, SESSION_BACKENDS, STORE_BACKENDS } from "./execution-lanes.js"; // 7.0.0 M-R2: the lane / store vocabulary (one exported table)
 import { LANE_ENV_OWNER, MIGRATION_SIGNPOST, isMigratableEnvKey, laneEnvSeat, laneRowOf } from "./execution-lane-index.js"; // package-private indexes derived from that table (not in the barrel)
@@ -1569,8 +1569,9 @@ const RESERVED_ENV_FIELD = Object.freeze({
     PG_DATABASE: "runtime.store.db.database", PG_PASSWORD: "secretRefs.dbPasswordEnv",
     // ── runtime.execution(7.0.0):车道词两键 + 车道表里每个名(派生,不手抄)
     REMOTE_EXEC: "runtime.execution.lane",
-    // ── fleet 成员身份:渲染器按该 worker 的代际写它,引擎读回并回声成 EngineSignal.generation —— 没有 WorkerSpec 字段能写它
+    // ── fleet 成员身份两键:渲染器按该 worker 的代际写 generation(引擎读回并回声成 EngineSignal.generation)、按该 worker 令牌绑定的 scope 写 scope(引擎读作自身身份的 scope)—— 没有 WorkerSpec 字段能写它们
     [FLEET_GENERATION_ENV]: "(set by the config renderer from the worker's generation — not configurable)",
+    [FLEET_SCOPE_ENV]: "(set by the config renderer from the worker's scope — not configurable)",
     REQUIRE_EXECUTION_LANE: "runtime.execution.lane (the renderer emits REQUIRE_EXECUTION_LANE=true for every declared lane)",
     ...Object.fromEntries([...LANE_ENV_OWNER].map(([name, owner]) => [name, laneEnvSeat(name, owner)])),
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/settings-schema",
-  "version": "8.1.0",
+  "version": "8.3.0",
   "description": "Sema settings schema — pure config contract (zod domains + effective-config + roster resolution + ref-integrity + remoteExec) shared by sema-registry, sema-server, and the TOC desktop/CLI. One source of truth. (Renamed at 1.0.0 from @sema-agent/registry-core — name and docs only, no behavior change; note the range moves 0.19.0 -> 1.0.0, so a dependency must become ^1.0.0. The old names @sema-agent/registry-core <=0.19.0 and @sema-ai/registry-core remain published, frozen, for migration.)",
   "type": "module",
   "license": "BUSL-1.1",
@@ -59,6 +59,7 @@
       "default": "./dist/config-fns.js"
     },
     "./package.json": "./package.json",
+    "./fleet-paths.json": "./dist/fleet-paths.json",
     "./conformance": {
       "types": "./dist/conformance/index.d.ts",
       "default": "./dist/conformance/index.js"
@@ -123,7 +124,7 @@
     "node": ">=20.3.0"
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json && node scripts/gen-fleet-paths.mjs",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",