@sema-agent/core 7.0.2 → 7.2.0

package/dist/core/runner/assemble-result.js

@@ -180,5 +180,6 @@ export function assembleResult(spec, sessionId, final, stats, flags) {
     void _internalCompaction;
     if (flags.unpricedSpend)
         delete publicStats.costMicroUsd;
-    return { taskId, ...(flags.runId !== undefined ? { runId: flags.runId } : {}), sessionId, status, ...(flags.model !== undefined ? { model: flags.model } : {}), result: result.trim(), salvagedOutput, blockedReason, errorMessage, errorCode, ...(apiFailure !== undefined ? { apiFailure } : {}), ...(retryAfterMs !== undefined ? { retryAfterMs } : {}), checkpointToken, ...(checkpointId !== undefined ? { checkpointId } : {}), checkpointGate, ...(workspaceRestoreMode !== undefined ? { workspaceRestoreMode } : {}), ...(flags.rewindNotes !== undefined && flags.rewindNotes.length > 0 ? { rewindNotes: flags.rewindNotes } : {}), ...(flags.haltedOnUserRejection === true ? { haltedOnUserRejection: true } : {}), ...(flags.userHalted === true ? { haltedByUser: true } : {}), ...(flags.remoteEnvFailures !== undefined && flags.remoteEnvFailures.length > 0 ? { remoteEnvFailures: flags.remoteEnvFailures } : {}), ...(flags.strandedHumanAnswers !== undefined && flags.strandedHumanAnswers.length > 0 ? { strandedHumanAnswers: flags.strandedHumanAnswers } : {}), ...(flags.effectiveReadFace !== undefined ? { effectiveReadFace: flags.effectiveReadFace } : {}), ...(flags.effectiveReadDenyPatterns !== undefined && flags.effectiveReadDenyPatterns.length > 0 ? { effectiveReadDenyPatterns: flags.effectiveReadDenyPatterns } : {}), ...(flags.effectiveMemoryScopes !== undefined ? { effectiveMemoryScopes: flags.effectiveMemoryScopes } : {}), ...(flags.effectiveReasoning !== undefined ? { effectiveReasoning: flags.effectiveReasoning } : {}), stats: publicStats };
+    const stampHaltedByUser = flags.userHalted === true && status !== "suspended" && status !== "needs_review";
+    return { taskId, ...(flags.runId !== undefined ? { runId: flags.runId } : {}), sessionId, status, ...(flags.model !== undefined ? { model: flags.model } : {}), result: result.trim(), salvagedOutput, blockedReason, errorMessage, errorCode, ...(apiFailure !== undefined ? { apiFailure } : {}), ...(retryAfterMs !== undefined ? { retryAfterMs } : {}), checkpointToken, ...(checkpointId !== undefined ? { checkpointId } : {}), checkpointGate, ...(workspaceRestoreMode !== undefined ? { workspaceRestoreMode } : {}), ...(flags.rewindNotes !== undefined && flags.rewindNotes.length > 0 ? { rewindNotes: flags.rewindNotes } : {}), ...(flags.haltedOnUserRejection === true ? { haltedOnUserRejection: true } : {}), ...(stampHaltedByUser ? { haltedByUser: true } : {}), ...(flags.remoteEnvFailures !== undefined && flags.remoteEnvFailures.length > 0 ? { remoteEnvFailures: [...flags.remoteEnvFailures] } : {}), ...(flags.strandedHumanAnswers !== undefined && flags.strandedHumanAnswers.length > 0 ? { strandedHumanAnswers: flags.strandedHumanAnswers } : {}), ...(flags.effectiveReadFace !== undefined ? { effectiveReadFace: flags.effectiveReadFace } : {}), ...(flags.effectiveReadDenyPatterns !== undefined && flags.effectiveReadDenyPatterns.length > 0 ? { effectiveReadDenyPatterns: flags.effectiveReadDenyPatterns } : {}), ...(flags.effectiveMemoryScopes !== undefined ? { effectiveMemoryScopes: flags.effectiveMemoryScopes } : {}), ...(flags.effectiveReasoning !== undefined ? { effectiveReasoning: flags.effectiveReasoning } : {}), stats: publicStats };
 }

package/dist/core/runner/prepare-task.d.ts

@@ -24,13 +24,14 @@ import { type ToolManifestRow } from "../../prompt-assembly/tool-catalog.js";
 import type { ToolDisclosureManifest } from "../trace.js";
 import { type ClearedProjectionLedger, type ContextEditMachine, type OccurrenceIndex } from "../context-edit.js";
 import type { TaskNotificationPayload } from "../task-notification.js";
+import type { RemoteExecutionEnv, SnapshotId } from "../remote-env.js";
 import { type CwdRef, type ReadFace } from "../../tools/fs/index.js";
 import { type WorkflowSizeGuideline } from "../../orchestration/workflow-size-guideline.js";
 import type { Runner } from "./runtask.js";
 import { type CheckpointGate, type CheckpointState, type CheckpointToken, type ResourceLedger, type PlatformLimitReason, type ResourceLimitReason } from "../checkpoint-store.js";
 import { type WiringManifest } from "../wiring-manifest.js";
 import type { ActiveWorktreeSession, AgentMessage, AgentTool, ExecutionEnv } from "../../internal/harness.js";
-import type { NestedUsageAccum, RunnerDeps, TaskEvent, TaskResult, TaskSpec, ToolActivity, ToolEffect } from "../types.js";
+import type { NestedUsageAccum, RemoteEnvFailureNote, RunnerDeps, TaskEvent, TaskResult, TaskSpec, ToolActivity, ToolEffect } from "../types.js";
 import type { RepairBundle } from "../../agents/repair-loop.js";
 /** Test seam (mirrors `__resetToolModelGateAnnouncements`): never called by production code.
  *  Re-arms BOTH arms (a WeakMap has no clear — it is re-minted). */
@@ -1121,7 +1122,8 @@ export interface PrepareResume {
      *  to restore — prepare rebuilds the per-task env via `deps.executionEnvFactory` then `resumeVM(snapshotId)`
      *  + `postResumeInit()` (instead of running on a fresh, empty env). Threaded HERE (not via `ResumeTaskConfig`)
      *  so the factory stays a deployment-level `RunnerDeps` capability and never pollutes `TaskSpec` — preserving
-     *  the "untrusted caller can't inject an env" red line (remote-env.ts:234, code-ready council round-2). */
+     *  the "untrusted caller can't inject an env" red line ({@link import("../remote-env.js").ExecutionEnvFactory}'s
+   *  own contract states it: "Lives on `RunnerDeps` (deployment-level) — NOT on `TaskSpec`"; code-ready council round-2). */
     workspaceHandle?: import("../remote-env.js").WorkspaceHandle;
     /**
      * design/174 — the call id of the CONTENT ask whose answer an operator's approval was spent on, when
@@ -1895,6 +1897,43 @@ export declare function batchContextAt(messages: AgentMessage[], currentId: stri
     batchToolCallIds: string[];
     completedCallIds: string[];
 };
+/**
+ * design/384 slice 2 — the ONE compensation for a paused-but-unparked VM, shared by the fence's
+ * post-pause checkpoints (③ in the park closure, ④ in the saga) and the saga's put-failure absent
+ * arm (previously inline there: same two hops, one implementation now, so the three sites cannot
+ * drift). Restores the workspace (bounded transient retry) then re-establishes consistency
+ * (`postResumeInit`), both hops under one INDEPENDENT `AbortSignal.timeout(io.boundMs)` —
+ * deliberately NOT the run/cut signal: the remote contract answers an already-aborted signal
+ * `{ok:false,"aborted"}`, so gating the restore on the very signal whose firing caused the
+ * compensation made it die instantly and strand the paused VM on exactly the run-abort arm that
+ * needs it most. The adapter signal is best-effort (a deaf adapter ignores it), so the caller's
+ * await is ALSO raced against the same bound — bounded decision, three outcomes:
+ *  · settled ok  ⇒ the VM is running again ({ok:true});
+ *  · settled not-ok / threw ⇒ recorded + disclosed, {ok:false} — the caller takes its fatal
+ *    fail-closed arm (abort the run; never continue on a paused VM);
+ *  · bound fires with the adapter still in flight ⇒ {ok:false} NOW, and the in-flight call
+ *    continues DETACHED + swallow-guarded with the late-settlement split:
+ *     – late SUCCESS: a running VM now exists with no run and no committed row to own it — the
+ *       detached continuation compensates the compensation with `destroy()` (the adapter's own
+ *       best-effort contract, swallow-guarded, disclosed);
+ *     – late FAILURE: disclosed; the VM is most likely still paused — provider-side TTL/GC
+ *       territory, and the disclosure is the end of this engine's obligation (a deaf adapter's
+ *       stranded VM is that adapter's own defect surface).
+ * Decide-then-disclose throughout: `io.disclose`/`io.noteFailure` must be swallow-guarded by the
+ * caller's binding, and nothing they do can change the returned verdict. Never throws. Exported for
+ * direct unit pinning (the bounded/deaf/late arms need a small bound; production binds the
+ * `PARK_COMPENSATION_TIMEOUT_MS` constant at the one call-site closure).
+ */
+export declare function compensateUnparkedPause(remoteEnv: RemoteExecutionEnv, snapshotId: SnapshotId, io: {
+    boundMs: number;
+    noteFailure: (note: RemoteEnvFailureNote) => void;
+    disclose: (err: unknown) => void;
+}): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+}>;
 /**
  * rescan C5 — the ONE spelling of the placement fields' empty-string discipline: `""` is absence
  * wearing clothes (the resume entry's principal-rung posture), and every placement read that must