@sema-agent/server 3.20.0 → 3.21.0

package/dist/fleet/fleet-bus.d.ts

@@ -291,6 +291,8 @@ export declare class FleetEventBus {
     releaseBackgroundChildLane(scope: string | undefined, childUuid: string): void;
     /** run-leg 车道:该子代是否已有 BCE 真行(有 ⇒ 让位,不铸复合 id 行)。 */
     backgroundChildLaneRow(scope: string | undefined, childUuid: string): string | undefined;
+    /** [2268] 让位迁移料的读面:迁移「只补缺席位」需要看得见存活行现有什么(BCE 是权威车道,不覆盖)。 */
+    taskRow(id: string): Readonly<FleetTaskRow> | undefined;
     /** Upsert a workflow row (MERGE by `id`) + fan out. */
     publishWorkflow(delta: Partial<FleetWorkflowRow> & {
         id: string;

package/dist/fleet/fleet-bus.js

@@ -86,6 +86,10 @@ export class FleetEventBus {
     backgroundChildLaneRow(scope, childUuid) {
         return this.bceClaims.get(FleetEventBus.bceKey(scope, childUuid));
     }
+    /** [2268] 让位迁移料的读面:迁移「只补缺席位」需要看得见存活行现有什么(BCE 是权威车道,不覆盖)。 */
+    taskRow(id) {
+        return this.tasks.get(id);
+    }
     // └────────────────────────────────────────────────────────────────────────────────────────────────┘
     /** Upsert a workflow row (MERGE by `id`) + fan out. */
     publishWorkflow(delta) {
@@ -172,20 +176,43 @@ export function fleetRunPublisher(bus, run) {
      * registry ⇒ 永远没有 BCE 真行,让位就等于让这些 agent 从面板消失。那一形保留复合行,并在帧上带
      * `sourceLane:"run-leg"` 明示这是过渡形——消费端不必再自己发明集合级去重判据。
      */
-    const yieldToBackgroundChildLane = (childTaskId, cid) => {
-        if (bus.backgroundChildLaneRow(run.scope, childTaskId) === undefined)
+    const yieldToBackgroundChildLane = (childTaskId, cid, tickName) => {
+        const bceRowId = bus.backgroundChildLaneRow(run.scope, childTaskId);
+        if (bceRowId === undefined)
             return false;
         if (children.has(cid)) {
             // 我们早于 claim 铸过一行 —— 清场(BCE 侧的后缀扫是同一意图的反应式兜底,两者幂等叠加无害)
             bus.removeTask(cid);
             children.delete(cid);
-            childStartedAt.delete(cid);
+            // ⚠️ childStartedAt 故意不删 —— 它是下面 elapsed 供给的计时基准([2268])
             for (const [k, v] of childByToolCall)
                 if (v === cid)
                     childByToolCall.delete(k);
         }
+        // 🔴 [2268] 迁移料([2269] 认领「迁移」臂):此前让位=删「有名的 run-leg 行」留「无名的 BCE 行」
+        // ((unnamed)/0s/详情空白三症状同源)。tick 手上的显示料补给存活行,**只补缺席位** —— BCE 是权威
+        // 车道,它已有的 name/真 elapsed 一律不碰。elapsed 供给是持续的(本闸每拍都过),不是一次性冻结;
+        // elapsedDonor 记住「这行的 elapsed 是我们供的」,避免把 BCE 自己的真 elapsed 误当缺席重置。
+        // transcriptId 不在 run-leg tick 手上,迁不了(诚实范围;那半归 BCE 行自身后续 tick)。
+        const row = bus.taskRow(bceRowId);
+        if (row) {
+            const donorName = row.name === undefined && tickName !== undefined ? redactSecrets(tickName) : undefined;
+            if (!childStartedAt.has(cid))
+                childStartedAt.set(cid, Date.now());
+            if (elapsedDonor.has(cid) || row.elapsedMs === undefined || row.elapsedMs === 0)
+                elapsedDonor.add(cid);
+            const elapsed = elapsedDonor.has(cid) ? Date.now() - childStartedAt.get(cid) : undefined;
+            if (donorName !== undefined || elapsed !== undefined) {
+                bus.publishTask({
+                    id: bceRowId,
+                    ...(donorName !== undefined ? { name: donorName, agentType: donorName } : {}),
+                    ...(elapsed !== undefined ? { elapsedMs: elapsed } : {}),
+                });
+            }
+        }
         return true;
     };
+    const elapsedDonor = new Set(); // [2268] 我们在为哪些 cid 供 elapsed(见上)
     const sumTokens = (usage) => {
         const u = usage;
         if (!u)
@@ -219,8 +246,8 @@ export function fleetRunPublisher(bus, run) {
             else if (ev.type === "task_progress" && ev.taskId) {
                 // core 1.147 subagent usage tick (per-turn, cumulative) → a CHILD fleet row nested under the run.
                 const cid = childId(ev.taskId);
-                if (yieldToBackgroundChildLane(ev.taskId, cid))
-                    return; // [2070]① BCE 真行在场 ⇒ 让位不铸
+                if (yieldToBackgroundChildLane(ev.taskId, cid, ev.name))
+                    return; // [2070]① BCE 真行在场 ⇒ 让位不铸([2268] 随迁显示料)
                 children.add(cid);
                 // BC-2 (core 1.151): use the subagent's sanitized display `name` (taskName/agent-type) for the child row.
                 // [2070]③:name 缺席时**不铸**(此前回落 taskId=子代 uuid,人眼乱码)——行 IDENTITY 一直是 `cid`
@@ -273,8 +300,8 @@ export function fleetRunPublisher(bus, run) {
             if (ev.type !== "task_progress" || !ev.taskId)
                 return;
             const cid = childId(ev.taskId);
-            if (yieldToBackgroundChildLane(ev.taskId, cid))
-                return; // [2070]① BCE 真行在场 ⇒ 让位不铸
+            if (yieldToBackgroundChildLane(ev.taskId, cid, ev.name))
+                return; // [2070]① BCE 真行在场 ⇒ 让位不铸([2268] 随迁显示料)
             children.add(cid);
             const parentId = ev.parentTaskId && ev.parentTaskId !== run.rootTaskId ? childId(ev.parentTaskId) : run.runId;
             // [WF2-A] redact the forwarded subagent name for parity with the top-level run name (see onEvent above).

package/dist/http/active-run-conflict.d.ts

@@ -0,0 +1,68 @@
+/**
+ * [2252]/[2255]①/[2257] 追加件:409 `conflict.session_active_run` 的**真出路材料**装配(单源)。
+ *
+ * 事故形:park(suspended/needs_review)占着 session claim,客户端每条新提交吃 409,而旧文案只教
+ * cancel(毁灭当前 run)。对 parked 会话,「继续」的唯一合法动作是去**对的** resume 入口决议——但四条
+ * resume 入口各认各的 gate.kind,客户端不知道等的是哪种门,只能试错。本模块把答案放进 409 响应体:
+ *   activeTaskStatus(区分「插话/取消」与「决议/取消」两族出路)
+ *   pendingGate { kind, decidePath }(parked 且真有 pending checkpoint 时)
+ *
+ * 🔴 token 永不上 wire(approvals-assistant 纪律:resume 寻址=sessionId,checkpoint token 是秘密能力)。
+ * 🔴 失败方向:材料是 best-effort 增强——store 面任何失败都不得挡 409 本体,退化为旧形状,绝不 throw。
+ * 🔴 gateKind→入口映射是**这张表在仓里的唯一函数形**;它的知识此前散在 server.ts 三处 guard 文案里
+ *    (`gate_not_tool_approval`/`gate_not_resumable`/`wake.gate_pending` 的指路句)。三处文案与本表若漂移,
+ *    test/session-active-conflict-materials.test.ts 的分门用例会红。认不出的 kind ⇒ null(诚实缺席,不铸假门)。
+ */
+/** 与 runs.ts/tasks.ts 三个 409 位共享的旧文案(byte-frozen:api-error-text-freeze 门认这句)。 */
+export declare const ACTIVE_RUN_CONFLICT_BASE_TEXT = "session already has an active run \u2014 POST /v1/runs/{activeTaskId}/cancel stops it (same-instance interactive runs abort immediately)";
+export interface ActiveRunConflictBody {
+    error: string;
+    errorCode: "conflict.session_active_run";
+    activeTaskId: string | null;
+    activeTaskStatus?: string;
+    pendingGate?: {
+        kind: string;
+        decidePath: string;
+    };
+}
+/** gate.kind → 它的那一个 resume 入口(sessionId/taskId 寻址,无秘密)。 */
+export declare function resumeEntryForGate(kind: string, ids: {
+    sessionId: string;
+    taskId: string;
+}): string | null;
+/** token 泛型:真身是 branded CheckpointToken(秘密能力,只在本函数内部流转,绝不进响应体)。 */
+/**
+ * SSE 车道的 done 帧 result(拒绝形)。与 409 body **同一铸体处** —— 此前 tasks.ts 在 res.write 里
+ * 手搓内联对象挑键,形状没有名字、没有类型、只活在那一行字符串里(conditional-spread 死键的老坑形)。
+ * 这里铸,SDK 的 done 帧 result 类型与本形同车对齐(sdk-api-guarantee-duty),live-contract 套件对已发包真跑。
+ */
+export interface ActiveRunConflictDoneResult {
+    status: "failed";
+    errorMessage: string;
+    activeTaskId: string | null;
+    activeTaskStatus?: string;
+    pendingGate?: {
+        kind: string;
+        decidePath: string;
+    };
+}
+export declare function toDoneFrameResult(body: ActiveRunConflictBody): ActiveRunConflictDoneResult;
+interface ConflictProbeDeps<TToken> {
+    runStore?: {
+        getRun?: (id: string) => Promise<{
+            status?: string;
+        } | null | undefined>;
+    } | undefined;
+    checkpointStore?: {
+        peekPendingScope?: (sessionId: string) => Promise<string | null | undefined>;
+        findPendingTokenBySession?: (sessionId: string, scope?: string) => Promise<TToken | null | undefined>;
+        get?: (token: TToken) => Promise<{
+            gate?: {
+                kind?: string;
+            };
+        } | null | undefined>;
+    } | undefined;
+}
+export declare function buildActiveRunConflict<TToken>(deps: ConflictProbeDeps<TToken>, sessionId: string, activeTaskId: string | null | undefined): Promise<ActiveRunConflictBody>;
+export {};
+//# sourceMappingURL=active-run-conflict.d.ts.map

package/dist/http/active-run-conflict.js

@@ -0,0 +1,89 @@
+/**
+ * [2252]/[2255]①/[2257] 追加件:409 `conflict.session_active_run` 的**真出路材料**装配(单源)。
+ *
+ * 事故形:park(suspended/needs_review)占着 session claim,客户端每条新提交吃 409,而旧文案只教
+ * cancel(毁灭当前 run)。对 parked 会话,「继续」的唯一合法动作是去**对的** resume 入口决议——但四条
+ * resume 入口各认各的 gate.kind,客户端不知道等的是哪种门,只能试错。本模块把答案放进 409 响应体:
+ *   activeTaskStatus(区分「插话/取消」与「决议/取消」两族出路)
+ *   pendingGate { kind, decidePath }(parked 且真有 pending checkpoint 时)
+ *
+ * 🔴 token 永不上 wire(approvals-assistant 纪律:resume 寻址=sessionId,checkpoint token 是秘密能力)。
+ * 🔴 失败方向:材料是 best-effort 增强——store 面任何失败都不得挡 409 本体,退化为旧形状,绝不 throw。
+ * 🔴 gateKind→入口映射是**这张表在仓里的唯一函数形**;它的知识此前散在 server.ts 三处 guard 文案里
+ *    (`gate_not_tool_approval`/`gate_not_resumable`/`wake.gate_pending` 的指路句)。三处文案与本表若漂移,
+ *    test/session-active-conflict-materials.test.ts 的分门用例会红。认不出的 kind ⇒ null(诚实缺席,不铸假门)。
+ */
+/** 与 runs.ts/tasks.ts 三个 409 位共享的旧文案(byte-frozen:api-error-text-freeze 门认这句)。 */
+export const ACTIVE_RUN_CONFLICT_BASE_TEXT = "session already has an active run — POST /v1/runs/{activeTaskId}/cancel stops it (same-instance interactive runs abort immediately)";
+/** gate.kind → 它的那一个 resume 入口(sessionId/taskId 寻址,无秘密)。 */
+export function resumeEntryForGate(kind, ids) {
+    switch (kind) {
+        case "tool_approval":
+        case "human":
+        case "irreversible_ask":
+        case "policy_ask":
+            return `/v1/approvals/${ids.sessionId}/decide`;
+        case "plan_review":
+            return `/v1/assistant/tasks/${ids.taskId}/plan_review`;
+        case "resource_limit":
+            return `/v1/assistant/tasks/${ids.taskId}/resume`;
+        case "task_done":
+            return `/v1/sessions/${ids.sessionId}/wake`;
+        default:
+            return null; // 未知门型:宁缺毋假 —— 客户端仍有 activeTaskStatus + cancel 这条保底真路
+    }
+}
+export function toDoneFrameResult(body) {
+    return {
+        status: "failed",
+        errorMessage: body.error,
+        activeTaskId: body.activeTaskId,
+        ...(body.activeTaskStatus !== undefined ? { activeTaskStatus: body.activeTaskStatus } : {}),
+        ...(body.pendingGate !== undefined ? { pendingGate: body.pendingGate } : {}),
+    };
+}
+export async function buildActiveRunConflict(deps, sessionId, activeTaskId) {
+    const base = {
+        error: ACTIVE_RUN_CONFLICT_BASE_TEXT,
+        errorCode: "conflict.session_active_run",
+        activeTaskId: activeTaskId ?? null,
+    };
+    if (!activeTaskId)
+        return base;
+    try {
+        const row = await deps.runStore?.getRun?.(activeTaskId);
+        const status = row?.status;
+        if (status !== "running" && status !== "suspended" && status !== "needs_review")
+            return base;
+        if (status === "running") {
+            return {
+                ...base,
+                error: "session already has an active run — POST /v1/runs/{activeTaskId}/steer injects a message into the running turn (queued, applied at the next turn boundary), or POST /v1/runs/{activeTaskId}/cancel stops it (same-instance interactive runs abort immediately)",
+                activeTaskStatus: status,
+            };
+        }
+        // parked:找 pending checkpoint 的门型,指到它的那一个 resume 入口
+        const cs = deps.checkpointStore;
+        let pendingGate;
+        if (cs?.findPendingTokenBySession) {
+            const scope = (await cs.peekPendingScope?.(sessionId)) ?? undefined;
+            const token = scope === null ? null : await cs.findPendingTokenBySession(sessionId, scope);
+            const kind = token ? (await cs.get?.(token))?.gate?.kind : undefined;
+            const decidePath = kind ? resumeEntryForGate(kind, { sessionId, taskId: activeTaskId }) : null;
+            if (kind && decidePath)
+                pendingGate = { kind, decidePath };
+        }
+        return {
+            ...base,
+            error: pendingGate
+                ? `session already has an active run — it is parked waiting for a decision (${status}); resolve it via POST ${pendingGate.decidePath}, or POST /v1/runs/{activeTaskId}/cancel abandons it`
+                : `session already has an active run — it is parked (${status}); POST /v1/runs/{activeTaskId}/cancel abandons it (its pending decision could not be located on this instance)`,
+            activeTaskStatus: status,
+            ...(pendingGate ? { pendingGate } : {}),
+        };
+    }
+    catch {
+        return base; // 材料装配的任何失败都退化为旧形状 —— 增强绝不成为新故障点
+    }
+}
+//# sourceMappingURL=active-run-conflict.js.map

package/dist/http/routes/runs.js

@@ -10,6 +10,7 @@ import { scopedIdempotencyKey } from "../idempotency.js";
 import { streamSseLog } from "../sse-log.js";
 import { normalizeRunEventType } from "../../trace/project.js";
 import { sendJson, sendError, httpErrorCode, sseHeaders } from "../send.js";
+import { buildActiveRunConflict } from "../active-run-conflict.js";
 import { headerStr, gatedPrincipal, explicitOperatorOk } from "../principal-gate.js";
 // server.ts 侧的 routeLabel / isBillableSubmitPath 仍要用下面这些正则,故本模块导出(方向恒为 server.ts → routes/*)。
 export const RUN_ID_RE = /^\/v1\/runs\/([^/]+)(\/events)?$/;
@@ -161,7 +162,8 @@ async function handleRunsBody(req, res, url, ctx, miss) {
                 if (clientTaskId && created.activeTaskId === clientTaskId) {
                     return { status: 202, body: { taskId: clientTaskId, sessionId, status: "running" } };
                 }
-                return { status: 409, body: { error: "session already has an active run — POST /v1/runs/{activeTaskId}/cancel stops it (same-instance interactive runs abort immediately)", errorCode: "conflict.session_active_run", activeTaskId: created.activeTaskId } };
+                // [2255]① 真出路材料:activeTaskStatus + parked 时 pendingGate{kind,decidePath}(best-effort,失败退旧形)
+                return { status: 409, body: await buildActiveRunConflict({ runStore, checkpointStore: deps.checkpointStore }, sessionId, created.activeTaskId) };
             }
             // Durable F4: persist the resume rebuild inputs (sessionId-keyed) so an operator can resume from any
             // replica even after this worker is gone — core's checkpoint blob can't carry service scenario context.

package/dist/http/routes/tasks.js

@@ -10,6 +10,7 @@ import { turnEndEventData, contextUsageEventData, toolStartEventData, toolEndEve
 import { cascadeConfig, runMeta } from "../run-meta.js";
 import { scopedIdempotencyKey } from "../idempotency.js";
 import { sendJson, sendError, sseHeaders } from "../send.js";
+import { buildActiveRunConflict, toDoneFrameResult } from "../active-run-conflict.js";
 import { headerStr, gatedPrincipal } from "../principal-gate.js";
 export async function handleTasks(req, res, url, ctx) {
     const miss = { fell: false };
@@ -216,10 +217,11 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                     if (created.ok)
                         deps.sessionTitler?.maybeTitle(prepared.spec.sessionId, prepared.spec.objective, typeof prepared.spec.model === "string" ? prepared.spec.model : prepared.spec.model?.id); // fire-and-forget; in-titler dedupe;model 跟 turn([1992]②)
                     if (!created.ok) {
-                        const conflict = { error: "session already has an active run — POST /v1/runs/{activeTaskId}/cancel stops it (same-instance interactive runs abort immediately)", errorCode: "conflict.session_active_run", activeTaskId: created.activeTaskId };
+                        const conflict = await buildActiveRunConflict({ runStore: deps.runStore, checkpointStore: deps.checkpointStore }, prepared.spec.sessionId, created.activeTaskId); // [2255]① 真出路材料
                         // Headers are already SSE — encode the rejection as the stream's terminal event; the 409 in
                         // the returned resp is for a deduplicated concurrent caller (and is never idem-cached).
-                        res.write(`data: ${JSON.stringify({ type: "done", result: { status: "failed", errorMessage: conflict.error, activeTaskId: conflict.activeTaskId } })}\n\n`);
+                        // done 帧 additive 携带同一份材料 —— 形状铸在 toDoneFrameResult(有名字有类型),不在这行内联挑键。
+                        res.write(`data: ${JSON.stringify({ type: "done", result: toDoneFrameResult(conflict) })}\n\n`);
                         return { status: 409, body: conflict };
                     }
                     durableTaskId = tid;
@@ -971,7 +973,7 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                     const tid = uuidv7();
                     const created = await deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", runMeta(prepared, source));
                     if (!created.ok)
-                        return { status: 409, body: { error: "session already has an active run — POST /v1/runs/{activeTaskId}/cancel stops it (same-instance interactive runs abort immediately)", errorCode: "conflict.session_active_run", activeTaskId: created.activeTaskId } };
+                        return { status: 409, body: await buildActiveRunConflict({ runStore: deps.runStore, checkpointStore: deps.checkpointStore }, prepared.spec.sessionId, created.activeTaskId) }; // [2255]① 真出路材料
                     deps.sessionTitler?.maybeTitle(prepared.spec.sessionId, prepared.spec.objective, typeof prepared.spec.model === "string" ? prepared.spec.model : prepared.spec.model?.id); // fire-and-forget;model 跟 turn([1992]②)
                     durableTaskId = tid;
                 }

package/dist/plugins/file-run-store.js

@@ -293,8 +293,17 @@ export class FileRunStore {
      *  [1.207 codex M1] 负向形漏 blocked/timeout);claim 释放保持无条件(幂等)。 */
     async setTerminal(taskId, status, result, error) {
         const r = this.runs.get(taskId);
-        if (!r)
+        if (!r) {
+            // [2255]③ claim 孤儿修:行不在(跨进程窗 —— claim 落盘、行未落/已失;R9 只兜同进程写失败)时,
+            // 终局动词仍必须能放锁:cancel 是文案承诺的用户自救路,它对孤儿失效=会话钉死到 reaper/boot。
+            // 反查 active 索引找持有该 taskId 的 session(O(claims),claims 数=活跃会话数,小)。
+            for (const [sessionId, tid] of this.active)
+                if (tid === taskId) {
+                    this.releaseClaim(sessionId);
+                    break;
+                }
             return;
+        }
         if (r.status === "running" || r.status === "suspended" || r.status === "needs_review") {
             r.status = status;
             r.result = result;
@@ -535,8 +544,10 @@ export class FileRunStore {
      */
     async reapSuspended(olderThanMs) {
         const probe = this.checkpointProbe;
-        if (!probe)
+        if (!probe) {
+            this.sweepClaims();
             return 0;
+        } // [2255]③:时间腿无 probe=诚实 NO-OP,但 claim 不变式维护不跟 probe 走
         const cutoff = Date.now() - olderThanMs;
         let reaped = 0;
         for (const r of this.runs.values()) {
@@ -566,8 +577,10 @@ export class FileRunStore {
      */
     async failSuspendedWithExpiredCheckpoint() {
         const probe = this.checkpointProbe;
-        if (!probe)
+        if (!probe) {
+            this.sweepClaims();
             return 0;
+        } // [2255]③ 同上
         let reaped = 0;
         for (const r of this.runs.values()) {
             if (r.status !== "suspended" && r.status !== "needs_review")

package/dist/plugins/memory-run-store.js

@@ -127,8 +127,15 @@ export class MemoryRunStore {
      *  [1.207 codex M1] 负向形漏 blocked/timeout);claim 释放保持无条件(幂等)。 */
     async setTerminal(taskId, status, result, error) {
         const r = this.runs.get(taskId);
-        if (!r)
+        if (!r) {
+            // [2255]③ file 孪生同判据(parity oracle):行缺席时终局动词仍放锁(反查 active)。
+            for (const [sessionId, tid] of this.active)
+                if (tid === taskId) {
+                    this.active.delete(sessionId);
+                    break;
+                }
             return;
+        }
         if (r.status === "running" || r.status === "suspended" || r.status === "needs_review") {
             r.status = status;
             r.result = result;
@@ -328,8 +335,10 @@ export class MemoryRunStore {
      */
     async reapSuspended(olderThanMs) {
         const probe = this.checkpointProbe;
-        if (!probe)
+        if (!probe) {
+            this.releaseTerminalClaims();
             return 0;
+        } // [2255]③ claim 不变式维护不跟 probe 走
         const cutoff = Date.now() - olderThanMs;
         let reaped = 0;
         for (const r of this.runs.values()) {
@@ -358,8 +367,10 @@ export class MemoryRunStore {
      */
     async failSuspendedWithExpiredCheckpoint() {
         const probe = this.checkpointProbe;
-        if (!probe)
+        if (!probe) {
+            this.releaseTerminalClaims();
             return 0;
+        } // [2255]③ claim 不变式维护不跟 probe 走
         let reaped = 0;
         for (const r of this.runs.values()) {
             if (r.status !== "suspended" && r.status !== "needs_review")

package/dist/plugins/run-store-sql.js

@@ -520,6 +520,12 @@ export class SqlRunStore {
             // claim — the session stays locked until an operator resumes it or reapSuspended expires it. (Was
             // `<> 'running'`, which would have prematurely unlocked a parked suspended session.)
             await conn.query(this.q("DELETE ta FROM task_active ta JOIN task_run tr ON ta.task_id = tr.task_id WHERE tr.status NOT IN ('running','suspended','needs_review')", "DELETE FROM task_active ta USING task_run tr WHERE ta.task_id = tr.task_id AND tr.status NOT IN ('running','suspended','needs_review')"));
+            // [2255]③ 孤儿 claim 清扫(纵深防御):claim 无对应 task_run 行时,三处 INNER JOIN 释放腿永远碰不到
+            // 它。正常路径不产孤儿(createRun 单事务、setTerminal 无条件 DELETE、deleteBySession 同事务对称)——
+            // 这形只来自带外(手工 SQL/半截迁移),但一旦出现该 session 只剩 cancel 一条自救路。挂在 reapStale
+            // (每 tick 无条件跑)一处即可。同文双方言(关联 NOT EXISTS 指向**另一张**表,两引擎都合法);
+            // 无竞态:createRun 的 claim+row 同事务提交,已提交的 claim 必有行。
+            await conn.query(this.q("DELETE FROM task_active WHERE NOT EXISTS (SELECT 1 FROM task_run tr WHERE tr.task_id = task_active.task_id)", "DELETE FROM task_active WHERE NOT EXISTS (SELECT 1 FROM task_run tr WHERE tr.task_id = task_active.task_id)"));
         });
         return reaped;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "3.20.0",
+  "version": "3.21.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -68,7 +68,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "^2.2.0",
+    "@sema-agent/sdk": "^2.3.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",