@sema-agent/server 4.2.0 → 5.0.0

package/dist/lsp/ws-transport.js

@@ -209,7 +209,7 @@ export class WsLspTransport {
  * Returns `undefined` on any failure (→ the manager degrades that language gracefully). `wsUrl` is the
  * `wss://…e2b.dev` URL from `sandbox.getHost(port)`; `rootPath` is the in-sandbox workspace root.
  */
-export async function connectWsLspTransport(wsUrl, rootPath, signal) {
+export async function connectWsLspTransport(wsUrl, rootPath, signal, initializationOptions) {
     let socket;
     try {
         socket = new WebSocket(wsUrl);
@@ -245,6 +245,9 @@ export async function connectWsLspTransport(wsUrl, rootPath, signal) {
             processId: null,
             rootUri: pathToUri(rootPath),
             capabilities: { textDocument: { definition: {}, references: {}, hover: {}, documentSymbol: {}, implementation: {}, callHierarchy: {} }, workspace: { symbol: {} } },
+            // #96 真机门:tls 的 tsserver 路径只能走这里(v4 移除了 CLI 旗);非 tls 服务器按 LSP 规范忽略
+            // 未知 initializationOptions。缺席时不发键(老行为逐字保持)。
+            ...(initializationOptions !== undefined ? { initializationOptions } : {}),
         }, signal);
         transport.notify("initialized", {});
         return transport;

package/dist/main.js

@@ -390,12 +390,10 @@ async function main() {
         maxOutputTokens: capEnv("TASK_MAX_OUTPUT_TOKENS_MAX"),
         maxTurns: capEnv("TASK_MAX_TURNS_MAX"),
     };
-    // F4: human-in-the-loop approval gate (pending state durable so any instance can decide).
-    const approvalStore = backend?.approval ? backend.approval() : undefined; // local omits approval() → legacy poll-gate off (durable HITL needs checkpoint anyway)
-    const approvalEnabled = approvalStore && config.approvalRequire.length > 0;
+    // [2354]/[2356] A-5(5.0.0):F4 轮询门(approvalStore pending 行)整体退役——durable checkpoint 是唯一门形。
     // Finding #2 (edge case): the single-user auto-accept tool-policy BASELINE applies ONLY when the operator
     // expressed NO gate intent. If they SET approval flags (APPROVAL_REQUIRE/APPROVAL_DENY/DURABLE_APPROVAL) but no
-    // backing store is wired (e.g. DB_BACKEND=local → no approvalStore/checkpointStore ⇒ approvalEnabled/durableEnabled
+    // backing store is wired (e.g. DB_BACKEND=local → no checkpointStore ⇒ durableEnabled
     // false), that is a MISCONFIG — do NOT mask it with allow-all; leave toolPolicy undefined so core's UNGATED warning
     // still surfaces it. So the baseline needs single-user turnkey ∧ zero expressed gate intent.
     // 单源在 approval.ts(与 inv#2 同文件)—— 这里原是内联的三格枚举,漏了 approvalNeverAuto,详见该函数顶注。
@@ -585,7 +583,6 @@ async function main() {
         // 构造区上方 const)同实例;ensureChildSessionDurable 见上方构造闭包注释。
         checkpointStore: checkpointStore ? checkpointStore : undefined,
         ensureChildSessionDurable: ensureChildSessionDurable ? ensureChildSessionDurable : undefined,
-        oaApiBaseUrl: config.oaApiBaseUrl, oaServiceToken: config.oaServiceToken, oaIssue: config.oaIssue,
         brandIdentity: config.configProvider === "local",
         // core 1.287 extraTools seam ([802]③ server half): SendUserFile reaches the delegated-child roster. SAME
         // existence gate as the top-level mount (the one sendUserFileToolSpec built above — lane/tenancy/config
@@ -646,7 +643,7 @@ async function main() {
     let runDenySweep;
     // design/158 A10:reaper 段搬到 src/boot/reapers.ts(逐字;deny-sweep 晚绑改取值,见该文件头注)。
     const reaper = startReapers({
-        config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, approvalStore,
+        config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore,
         rateLimiter, costQuota, toolResultStore, fileSnapshotStore, taskAttachmentStore, imageBakes, worktreeReap,
         workflowNotifyGate, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore,
         backgroundAgentStore, mailboxStore,
@@ -704,7 +701,6 @@ async function main() {
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined, // E18 resume-at eventId→entryId map (tidb/pg/local)
-        approvalStore,
         approvalExemptionStore: approvalExemptionStore ? approvalExemptionStore : undefined, // decide remember="session" + list/revoke
         checkpointStore,
         sessionPolicyStore: sessionPolicyStore ? sessionPolicyStore : undefined, // E6 operator session-rule store (PUT/GET /v1/sessions/:id/policy)
@@ -856,8 +852,8 @@ async function main() {
         getKeyResolver: () => configCenter.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
-        selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, approvalEnabled,
-        approvalStore, singleUserAutoAcceptBaseline, checkpointStore, deploymentHooks, imageIndex, perTaskImage,
+        selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore,
+        singleUserAutoAcceptBaseline, checkpointStore, deploymentHooks, imageIndex, perTaskImage,
         sessionEnvSelection,
     });
     const server = createHttpServer({ runner, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });

package/dist/memory-scope.js

@@ -1,7 +1,7 @@
 // design/158 N17: the memory-plane resolvers moved VERBATIM out of security.ts (lens4 §4.1 — "budget.ts"'s
 // sibling finding: security.ts's name says auth, but ~110 of its 765 lines were memory-scope config
-// resolution with nothing to do with authentication). security.ts re-exports all four for compat (its own
-// createAuthorizer still calls memoryScopeFor); index.ts's npm-facing re-export is unaffected (package.json
+// resolution with nothing to do with authentication). security.ts imports memoryScopeFor for its own
+// createAuthorizer; consumers import all four from HERE ([2354] 兼容面全清 — the security.ts compat re-export is gone); index.ts's npm-facing re-export is unaffected (package.json
 // "exports" only ever exposed "." and "./main" — dist/security.js was never a reachable deep-import path).
 import { join } from "node:path";
 import { FileMemoryEngineBackend, resolveMemoryEngineRoot, deriveControlPlaneDir, formatUserScope, formatProjScope } from "@sema-agent/core";

package/dist/observability/metrics.js

@@ -295,6 +295,12 @@ export function createMetrics() {
     // LOCAL floor(now/windowMs); replica clock skew splits a fleet window into disjoint buckets (soft-limit leak).
     m.gauge("fleet_counter_bucket_skew_ms", "DB clock minus local clock in ms (S10) — skew splits cross-replica counter windows");
     m.gauge("fleet_clock_probe_ok", "1 = last DB clock probe succeeded, 0 = failing (skew gauge is stale while 0)");
+    // #96 redesign⑤ (§DESIGN-V2 E): LSP sandbox-bridge lifecycle + session outcomes — previously zero metrics
+    // existed for the whole subsystem (a dead bridge or a stuck restart budget had no fleet-level signal).
+    m.counter("lsp_bridge_start_total", "LSP sandbox bridge (re)starts attempted, by provider and generation");
+    m.counter("lsp_bridge_dead_total", "LSP sandbox bridge generations that died, by reason (the word IS the model-facing unavailableReason)");
+    m.counter("lsp_session_open_total", "LSP session opens, by language and outcome (ok/failed)");
+    m.counter("lsp_session_heal_total", "LSP session heals (dead-transport reopen), by outcome (ok/failed)");
     // S21 — which backend snapshot blobs actually land on (minio|sql). Partial MINIO_* config silently falls to sql.
     m.gauge("snapshot_blob_backend", "1 on the active snapshot-blob backend series (S21), by backend (minio|sql)");
     // S22 — memory embed/KNN runtime failures (boot said vector; runtime silently degrades to lexical).

package/dist/orchestration/workflow-completion-inbox.d.ts

@@ -77,7 +77,7 @@ export declare const SERVED_FENCE_MS: number;
  *
  *  编码=防碰撞元组:域/taskId/status 走 JSON 数组(调用方自由串伪造不了分隔符);`#seq` 尾折在 JSON 之外
  *  ——JSON 段恒以 `"]` 结尾,`#digits` 尾无歧义,于是 {@link foldKeyFamily} 的剥尾语义 AND SQL 双生子
- *  (tidb/pg-workflow-run-store 的 `regexp_replace(run_id, '#[0-9]+$', '')` 家族比对)原样成立——把 seq 折进
+ *  (workflow-run-store-sql 的 `regexp_replace(run_id, '#[0-9]+$', '')` 家族比对)原样成立——把 seq 折进
  *  JSON 元组会让 SQL 侧家族 ack/fence 永 miss(那是另一批的真库改动面,本修有意不碰)。
  *  seq 折入=逐停机周期各自成键(1.283 起 background_agent 四腿 notify 铸 cycleSeq);无 seq=单周期旧键
  *  (bash/monitor terminal/retain 降级,诚实语义)。serve-fence 侧必须用同一函数(或其家族前缀)构造,
@@ -97,9 +97,11 @@ export declare function taskNotificationFoldKey(n: {
  *  task 的 Monitor event 批与 failed 终态在一条腿上互吞;wire 去重要的是逐帧身份,不是 inbox 的双终态列。
  *  `seq` 折入 = 停→唤→停的第二周期同 status 帧各自成键(core 1.283 起 background_agent 四腿 notify 铸
  *  cycleSeq;缺 seq 时旧键曾把二周期 completed 帧在 observer 臂反向吞掉——core [784]④a);无 seq 的帧
- *  (bash/monitor terminal/retain 降级)保持单周期旧键=同键第二帧吞,诚实语义。task_type 缺席(旧 core
- *  内部帧)归 "task" 域——external 帧的 task_type 三来源齐备(notify 端点 core 铸 / inbox entry extras 存
- *  / drain 帧 spread 复原),不会漏域。observer 臂 / stream 臂 / turn-open drain 登记三处必须用本函数
+ *  (bash/monitor terminal/retain 降级)保持单周期旧键=同键第二帧吞,诚实语义。[2373]B-10:core 4.0.0 起
+ *  task_type 是必填闭合枚举——`task_type?` 可选性**不再对应旧 core 帧**,它活着只为家族前缀构造
+ *  (server.ts fleet 腿 `taskNotificationFoldKey({task_id,status})` 同款用法);缺席归 "task" 域的语义
+ *  只在前缀用途下生效。external 帧三来源齐备(notify 端点 core 铸 / inbox entry extras 存 / drain 帧
+ *  spread 复原),不会漏域。observer 臂 / stream 臂 / turn-open drain 登记三处必须用本函数
  *  构键且都传 task_type,键形漂移=去重永 miss。 */
 export declare function taskNotificationStreamKey(n: {
     task_type?: string;

package/dist/orchestration/workflow-completion-inbox.js

@@ -69,7 +69,7 @@ export const SERVED_FENCE_MS = 30 * 60 * 1000;
  *
  *  编码=防碰撞元组:域/taskId/status 走 JSON 数组(调用方自由串伪造不了分隔符);`#seq` 尾折在 JSON 之外
  *  ——JSON 段恒以 `"]` 结尾,`#digits` 尾无歧义,于是 {@link foldKeyFamily} 的剥尾语义 AND SQL 双生子
- *  (tidb/pg-workflow-run-store 的 `regexp_replace(run_id, '#[0-9]+$', '')` 家族比对)原样成立——把 seq 折进
+ *  (workflow-run-store-sql 的 `regexp_replace(run_id, '#[0-9]+$', '')` 家族比对)原样成立——把 seq 折进
  *  JSON 元组会让 SQL 侧家族 ack/fence 永 miss(那是另一批的真库改动面,本修有意不碰)。
  *  seq 折入=逐停机周期各自成键(1.283 起 background_agent 四腿 notify 铸 cycleSeq);无 seq=单周期旧键
  *  (bash/monitor terminal/retain 降级,诚实语义)。serve-fence 侧必须用同一函数(或其家族前缀)构造,
@@ -87,9 +87,11 @@ export function taskNotificationFoldKey(n) {
  *  task 的 Monitor event 批与 failed 终态在一条腿上互吞;wire 去重要的是逐帧身份,不是 inbox 的双终态列。
  *  `seq` 折入 = 停→唤→停的第二周期同 status 帧各自成键(core 1.283 起 background_agent 四腿 notify 铸
  *  cycleSeq;缺 seq 时旧键曾把二周期 completed 帧在 observer 臂反向吞掉——core [784]④a);无 seq 的帧
- *  (bash/monitor terminal/retain 降级)保持单周期旧键=同键第二帧吞,诚实语义。task_type 缺席(旧 core
- *  内部帧)归 "task" 域——external 帧的 task_type 三来源齐备(notify 端点 core 铸 / inbox entry extras 存
- *  / drain 帧 spread 复原),不会漏域。observer 臂 / stream 臂 / turn-open drain 登记三处必须用本函数
+ *  (bash/monitor terminal/retain 降级)保持单周期旧键=同键第二帧吞,诚实语义。[2373]B-10:core 4.0.0 起
+ *  task_type 是必填闭合枚举——`task_type?` 可选性**不再对应旧 core 帧**,它活着只为家族前缀构造
+ *  (server.ts fleet 腿 `taskNotificationFoldKey({task_id,status})` 同款用法);缺席归 "task" 域的语义
+ *  只在前缀用途下生效。external 帧三来源齐备(notify 端点 core 铸 / inbox entry extras 存 / drain 帧
+ *  spread 复原),不会漏域。observer 臂 / stream 臂 / turn-open drain 登记三处必须用本函数
  *  构键且都传 task_type,键形漂移=去重永 miss。 */
 export function taskNotificationStreamKey(n) {
     const domain = n.task_type === "external" ? "external" : "task";

package/dist/plugins/breaker-state-sql.d.ts

@@ -1,8 +1,7 @@
 /**
  * Cross-replica circuit-breaker state (core 1.38 `BreakerState`) — SINGLE-FILE DUAL-DIALECT
  * (design/158 A12 定型半场). ONE implementation, TWO dialects; the historical `TiDBBreakerState` /
- * `PgBreakerState` class names survive as thin ctor subclasses (src/plugins/tidb-breaker-state.ts +
- * src/plugins/pg-breaker-state.ts are now re-export shims) so every consumer (store-backend.ts, the
+ * `PgBreakerState` class names survive as thin ctor subclasses in THIS file ([2354]: the old per-dialect shim files are deleted) so every consumer (store-backend.ts, the
  * fake-pool unit suites, the real dual-DB integration suite) is untouched.
  *
  * core's `createCircuitBreakerBrain` defaults to a per-PROCESS Map → on a multi-replica deployment
@@ -26,7 +25,7 @@
  *   - upsert form: `ON DUPLICATE KEY UPDATE … VALUES(col)` vs `ON CONFLICT (breaker_key) DO UPDATE SET
  *     … EXCLUDED.col`
  *   - schema ownership: TiDB DDL lives centrally in tidb-pool.ts; PG DDL is self-contained here
- *     (`PG_BREAKER_STATE_SCHEMA` / `ensureSchema`, re-exported off pg-breaker-state.ts) — disjoint table,
+ *     (`PG_BREAKER_STATE_SCHEMA` / `ensureSchema`, exported from THIS file) — disjoint table,
  *     so a standalone idempotent apply is safe (no central-schema shadowing), mirroring every other PG store.
  * Everything else (write-through logic, the pending-guard race fix, refresh/prune, row→snapshot mapping,
  * opened_at Date handling) is IDENTICAL — the SqlDriver seam (result unwrapping) is what let the row

package/dist/plugins/image-index-sql.d.ts

@@ -3,7 +3,6 @@ import type { Pool as PgPool, PoolClient } from "pg";
 import { type ImageStatus, type ImageIndexEntry, type ImageIndexUpsert, type ImageViewer, type ImageListFilter } from "./store-contracts.js";
 import { type SqlDriver } from "./sql-driver.js";
 export type { ImageNestedBuildMode, ImageCapabilities, ImagePodContract, ImageStatus, ImageVisibility, ImageIndexEntry, ImageIndexUpsert, ImageViewer, ImageListFilter, ImageRow, } from "./store-contracts.js";
-export { mapImageRow as mapRow } from "./store-contracts.js";
 /** PG translation of the `sandbox_image_index` DDL in tidb-pool.ts (JSON→JSONB, DATETIME(3)→TIMESTAMPTZ(3),
  *  TINYINT(1)→SMALLINT(布尔列 PG 映射归一,clay 批 2026-07-26 —— 两方言读回同为 number,写入 0/1,
  *  读侧 `!!` 保持,出口 JS 类型不变), inline UNIQUE KEY/KEY → separate CREATE UNIQUE INDEX / CREATE INDEX). */

package/dist/plugins/image-index-sql.js

@@ -47,7 +47,6 @@ import {
 // backend-neutral store-contracts.ts (design/158 A3 沉底; no adapter imports its twin).
 mapImageRow as mapRow, } from "./store-contracts.js";
 import { mysqlDriver, pgDriver } from "./sql-driver.js";
-export { mapImageRow as mapRow } from "./store-contracts.js";
 /** PG translation of the `sandbox_image_index` DDL in tidb-pool.ts (JSON→JSONB, DATETIME(3)→TIMESTAMPTZ(3),
  *  TINYINT(1)→SMALLINT(布尔列 PG 映射归一,clay 批 2026-07-26 —— 两方言读回同为 number,写入 0/1,
  *  读侧 `!!` 保持,出口 JS 类型不变), inline UNIQUE KEY/KEY → separate CREATE UNIQUE INDEX / CREATE INDEX). */

package/dist/plugins/local-checkpoint-store.d.ts

@@ -1,5 +1,5 @@
 import { type Checkpoint, type CheckpointSummary, type CheckpointToken, type ReopenReason, type ResolveExpectation, type ResumeOutcome } from "@sema-agent/core";
-import { type PendingCheckpoint } from "./tidb-checkpoint-store.js";
+import { type PendingCheckpoint } from "./checkpoint-store-sql.js";
 export interface LocalCheckpointStoreOptions {
     /** taskId join for the pending card (the local FileRunStore's `getActiveTaskId`). Absent ⇒ `taskId: null`. */
     getActiveTaskId?: (sessionId: string) => Promise<string | undefined>;

package/dist/plugins/local-checkpoint-store.js

@@ -24,7 +24,7 @@ import { createHash } from "node:crypto";
 import { existsSync, readFileSync, readdirSync, renameSync, unlinkSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import { FileCheckpointStore, atomicWriteFile, sanitizePathComponent, } from "@sema-agent/core";
-import { boundedToolInput, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS } from "./tidb-checkpoint-store.js";
+import { boundedToolInput, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS } from "./checkpoint-store-sql.js";
 /** design/80 D-D read-time twin of the TiDB put-time `terminal_at` column (same formula — anti-drift). */
 function terminalAtOf(cp) {
     return Math.max(cp.createdAt + TERMINAL_BACKSTOP_MS, (cp.deadline ?? 0) + TERMINAL_GRACE_MS);

package/dist/plugins/memory-engine-pg.js

@@ -19,7 +19,8 @@
 // Vector rungs (design/81, re-mounted here per §4): lexical (jaccard, byte-equal to FileBackend) →
 // portable (jsonb vectors, in-process cosine) → native (pgvector `<=>` SQL). All three share the
 // cosine-distance contract score ∈ [0,2] — upgrading recall is a config change, not a recalibration.
-import { cosineDistance, jaccardDistance, termSet, isUniqueViolation } from "./memory-engine-vector-util.js";
+import { cosineDistance, jaccardDistance, termSet } from "@sema-agent/core";
+import { isUniqueViolation } from "./memory-engine-vector-util.js";
 import { computeEntryRev, serializeEntryFile } from "@sema-agent/core";
 import { pgSafeJsonStringify, pgHasUnstorable } from "./pg-safe-json.js";
 /** Table names (single source). Deliberately DISJOINT from the legacy `agent_memory*` tables —

package/dist/plugins/memory-engine-tidb.js

@@ -21,7 +21,7 @@
 //   - v1 lexical only:embedder/vector 面无 TiDB 对应(Pg 的 pgvector rung 是 Pg 专属);构造签名保留
 //     opts 但传入 embedder=fail-loud 拒绝,search 恒走 jaccard 词面,haystack 与 Pg/File 逐字节同构
 //     (`${name ?? slug} ${description} ${body}`——memoryBackendContract 的 search 等价断言依赖)。
-import { jaccardDistance, termSet } from "./memory-engine-vector-util.js";
+import { jaccardDistance, termSet } from "@sema-agent/core";
 import { computeEntryRev, serializeEntryFile } from "@sema-agent/core";
 import { pgHasUnstorable } from "./pg-safe-json.js";
 /** Table names (single source) — SAME names as PG_MEMORY_ENGINE_TABLES (the two dialects never share

package/dist/plugins/memory-engine-vector-util.d.ts

@@ -1,8 +1,7 @@
-/** memory-engine 方言实现共用的纯工具函数。三个距离/词集函数 re-export 自 core(1.268.0 起公开导出,
- *  单一语义源;memoryBackendContract 的 search 等价断言依赖同源 haystack 距离)。
+/** memory-engine 方言实现共用的纯工具函数。三个距离/词集函数(termSet/jaccardDistance/cosineDistance)
+ *  在 core(1.268.0 起公开导出,单一语义源)——消费者直引 core([2354] 兼容面全清:此处转口已删)。
  *  `isUniqueViolation` 重新内联:它当年随 core 的 pg **示例适配器**导出面走,core 1.424 按 clay 包卫生令
  *  把整个 examples 面退出 npm 包([1803] BREAKING)⇒ re-export 断源。逐字抄自 core 1.423
  *  `examples/adapters/pg-adapter.js`(纯谓词,无 byte-equal 契约约束)。 */
-export { termSet, jaccardDistance, cosineDistance } from "@sema-agent/core";
 export declare function isUniqueViolation(err: unknown): boolean;
 //# sourceMappingURL=memory-engine-vector-util.d.ts.map

package/dist/plugins/memory-engine-vector-util.js

@@ -1,9 +1,8 @@
-/** memory-engine 方言实现共用的纯工具函数。三个距离/词集函数 re-export 自 core(1.268.0 起公开导出,
- *  单一语义源;memoryBackendContract 的 search 等价断言依赖同源 haystack 距离)。
+/** memory-engine 方言实现共用的纯工具函数。三个距离/词集函数(termSet/jaccardDistance/cosineDistance)
+ *  在 core(1.268.0 起公开导出,单一语义源)——消费者直引 core([2354] 兼容面全清:此处转口已删)。
  *  `isUniqueViolation` 重新内联:它当年随 core 的 pg **示例适配器**导出面走,core 1.424 按 clay 包卫生令
  *  把整个 examples 面退出 npm 包([1803] BREAKING)⇒ re-export 断源。逐字抄自 core 1.423
  *  `examples/adapters/pg-adapter.js`(纯谓词,无 byte-equal 契约约束)。 */
-export { termSet, jaccardDistance, cosineDistance } from "@sema-agent/core";
 export function isUniqueViolation(err) {
     if (typeof err !== "object" || err === null)
         return false;

package/dist/plugins/memory-run-store.d.ts

@@ -22,7 +22,7 @@ import type { RunRecord, SessionSummary, RunEvent } from "./store-contracts.js";
  * injects this probe so the reapers get the SAME two predicates the SQL twins express as EXISTS subqueries:
  *  - hasPending  = EXISTS (checkpoint c WHERE c.session_id = ? AND c.status = 'pending')  — the design/80 D-D
  *    NOT-EXISTS-pending guard: a row whose checkpoint is STILL pending is owned by the checkpoint-state-driven
- *    sweeps and must NEVER be time-reaped (else two-runs-one-session, see tidb-run-store.ts reapSuspended doc).
+ *    sweeps and must NEVER be time-reaped (else two-runs-one-session, see run-store-sql.ts reapSuspended doc).
  *  - hasExpired  = EXISTS (checkpoint ce WHERE ce.session_id = ? AND ce.status = 'expired') — the
  *    failSuspendedWithExpiredCheckpoint driver (checkpoint-STATE-driven, not time-driven).
  * Probe ABSENT (old assembly / no checkpoint store wired) ⇒ the reapers stay honest NO-OPs — without the

package/dist/plugins/memory-session-policy-store.d.ts

@@ -4,7 +4,7 @@
  * WHY THIS EXISTS (and not core's `InMemorySessionPolicyStore`): core's in-memory/file policy stores implement only
  * the core interface (getRules/putRules/listBySession) — they have NO deletion seam, so neither the E21 session purge
  * nor the 2c `overwrite-dst` subsystem wipe can remove policy rows on a backend that uses them (the SQL twins carry
- * `deleteBySession` as a service extension; see tidb/pg-session-policy-store.ts). This store is the delete-capable
+ * `deleteBySession` as a service extension; see session-policy-store-sql.ts). This store is the delete-capable
  * in-memory twin. The seam itself is also requested upstream (core: optional `deleteBySession?` on the interface +
  * the File/InMemory impls) — if core lands it, this class can retire in favor of core's.
  *

package/dist/plugins/memory-session-policy-store.js

@@ -4,7 +4,7 @@
  * WHY THIS EXISTS (and not core's `InMemorySessionPolicyStore`): core's in-memory/file policy stores implement only
  * the core interface (getRules/putRules/listBySession) — they have NO deletion seam, so neither the E21 session purge
  * nor the 2c `overwrite-dst` subsystem wipe can remove policy rows on a backend that uses them (the SQL twins carry
- * `deleteBySession` as a service extension; see tidb/pg-session-policy-store.ts). This store is the delete-capable
+ * `deleteBySession` as a service extension; see session-policy-store-sql.ts). This store is the delete-capable
  * in-memory twin. The seam itself is also requested upstream (core: optional `deleteBySession?` on the interface +
  * the File/InMemory impls) — if core lands it, this class can retire in favor of core's.
  *

package/dist/plugins/memory-sync-store-pg.js

@@ -27,7 +27,7 @@ export async function ensurePgMemorySyncSchema(query) {
     await query(`CREATE INDEX IF NOT EXISTS ${PG_MEMORY_SYNC_TABLES.pushQueue}_next_attempt_idx ON ${PG_MEMORY_SYNC_TABLES.pushQueue} (next_attempt_at)`);
 }
 /** jsonb defense: node-pg hands back parsed objects, but a text-typed round-trip (or a foreign
- *  writer) may yield a string — same posture as parseJson in pg-run-store.ts. */
+ *  writer) may yield a string — same posture as parseJson in run-store-sql.ts. */
 function fromJsonb(v) {
     if (typeof v === "string")
         return JSON.parse(v);

package/dist/plugins/pg-pool.js

@@ -28,14 +28,13 @@ import pg from "pg";
 // Each PG store owns its own (disjoint) tables' DDL via a standalone idempotent ensureSchema; the central apply
 // composes them so production wires ONE ensurePgSchema (the PG twin of tidb-pool's single ensureSchema).
 import { ensureSchema as ensureSessionSchema } from "./pg-session-storage.js";
-import { ensureSchema as ensureToolResultSchema } from "./pg-tool-result-store.js";
+import { ensureSchema as ensureToolResultSchema } from "./tool-result-store-sql.js";
 import { ensureSchema as ensureCostQuotaSchema } from "./pg-cost-quota.js";
 import { ensureSchema as ensureRateLimitSchema } from "./pg-rate-limiter.js";
-import { ensureSchema as ensureBreakerStateSchema } from "./pg-breaker-state.js";
-import { ensureSchema as ensureApprovalSchema } from "./pg-approval-store.js";
-import { ensureSchema as ensureOutcomeLedgerSchema } from "./pg-outcome-ledger.js";
-import { ensureSchema as ensureImageIndexSchema } from "./pg-image-index.js";
-import { ensureSchema as ensureImageBakeSchema } from "./pg-image-bake.js";
+import { ensureSchema as ensureBreakerStateSchema } from "./breaker-state-sql.js";
+import { ensurePgOutcomeLedgerSchema as ensureOutcomeLedgerSchema } from "./outcome-ledger-sql.js";
+import { ensureSchema as ensureImageIndexSchema } from "./image-index-sql.js";
+import { ensurePgImageBakeSchema as ensureImageBakeSchema } from "./image-bake-store-sql.js";
 export const PG_SCHEMA_STATEMENTS = [
     `CREATE TABLE IF NOT EXISTS task_run (
      task_id     VARCHAR(64)  NOT NULL,
@@ -145,7 +144,7 @@ export const PG_SCHEMA_STATEMENTS = [
     `CREATE INDEX IF NOT EXISTS idx_sendfile_link_scope ON sendfile_link (scope, id)`,
     // E6 durable SessionPolicyStore (the PG twin of the TiDB session_policy table; policy_key = sha256(JSON.stringify(
     // [sessionId, principal ?? null])) = a fixed 64-char hash PK; rules JSONB; CAS-versioned tighten-only — see
-    // tidb-pool.ts / tidb-session-policy-store.ts).
+    // tidb-pool.ts / session-policy-store-sql.ts).
     `CREATE TABLE IF NOT EXISTS session_policy (
      policy_key CHAR(64)       NOT NULL,
      session_id VARCHAR(64)    NOT NULL,
@@ -186,7 +185,7 @@ export const PG_SCHEMA_STATEMENTS = [
     // SVC-2 (core CORE-7) durable WorkflowJournalStore — the PG twin of the TiDB workflow_journal table (cross-replica
     // resume journal; (run_id, ordinal) PK = idempotent OVERWRITE upsert; `result` = JSON.stringify(TaskResult)). `result`
     // is TEXT, NOT JSONB — the byte-match contract is "string in, string out" (the store JSON.parses on load); JSONB would
-    // make `pg` auto-parse the row back to an object and break the twin's String()→JSON.parse path. See pg-workflow-journal-store.ts.
+    // make `pg` auto-parse the row back to an object and break the twin's String()→JSON.parse path. See workflow-journal-store-sql.ts.
     `CREATE TABLE IF NOT EXISTS workflow_journal (
      run_id     VARCHAR(191) NOT NULL,
      ordinal    INT          NOT NULL,
@@ -210,7 +209,7 @@ export const PG_SCHEMA_STATEMENTS = [
      claimed_at    BIGINT       NOT NULL,
      PRIMARY KEY (source_run_id, scope)
    )`,
-    // P1 (fleet failover): WorkflowRunStore + completion-inbox PG twins (design doc in tidb-workflow-run-store.ts).
+    // P1 (fleet failover): WorkflowRunStore + completion-inbox PG twins (design doc in workflow-run-store-sql.ts).
     // `run` is TEXT not jsonb (node-pg auto-parse would break the shared String()→JSON.parse path).
     `CREATE TABLE IF NOT EXISTS workflow_run (
      id         VARCHAR(191) NOT NULL,
@@ -332,7 +331,6 @@ export async function ensurePgSchema(pool) {
         await ensureCostQuotaSchema(client);
         await ensureRateLimitSchema(client);
         await ensureBreakerStateSchema(client);
-        await ensureApprovalSchema(client);
         await ensureOutcomeLedgerSchema(client);
         await ensureImageIndexSchema(client);
         await ensureImageBakeSchema(client);

package/dist/plugins/pg-rate-limiter.d.ts

@@ -8,8 +8,7 @@
  *
  * design/158 A12 C1b: the `PgWriteBehindCounter` this file used to define inline now lives in
  * write-behind-counter.ts as the PG binding of ONE dialect-parameterized counter (the mysql2 twin is
- * `WriteBehindCounter`); the SQL-dialect deltas are documented and branched there. It is re-exported here
- * so the historical import path keeps working.
+ * `WriteBehindCounter`); the SQL-dialect deltas are documented and branched there.
  *
  * Schema: this store's `rate_limit` table is DISJOINT from the other PG stores' tables, so a
  * self-contained {@link PG_RATE_LIMITER_SCHEMA} + {@link ensureSchema} is safe (no shadowing).
@@ -17,8 +16,6 @@
 import type { Pool, PoolClient } from "pg";
 import type { RateDecision, RateGate } from "../observability/rate-limit.js";
 import { type CounterDegradeHook } from "./write-behind-counter.js";
-export { PgWriteBehindCounter } from "./write-behind-counter.js";
-export type { CounterTable } from "./write-behind-counter.js";
 export declare class PgRateLimiter implements RateGate {
     private readonly limit;
     private readonly counter;

package/dist/plugins/pg-rate-limiter.js

@@ -1,5 +1,4 @@
 import { PgWriteBehindCounter } from "./write-behind-counter.js";
-export { PgWriteBehindCounter } from "./write-behind-counter.js";
 /** The counter's table binding for the per-key request rate limit (mirror of the TiDB twin's binding). */
 const RATE_LIMIT_TABLE = { table: "rate_limit", keyCol: "limit_key", valCol: "n" };
 export class PgRateLimiter {

package/dist/plugins/roster-store-sql.d.ts

@@ -21,11 +21,9 @@
  * 是「core 变语义必须先过迁移裁量」的告警钉)。
  */
 import type { Pool } from "mysql2/promise";
-import { normalizeAgentName, type RosterStore, type RosterEntry } from "@sema-agent/core";
+import { type RosterStore, type RosterEntry } from "@sema-agent/core";
 type RosterAccess = Parameters<RosterStore["resolve"]>[1];
 import type { PgQueryFn } from "./pg-query.js";
-/** 兼容名保留(测试/历史引用),现=core 导出直引(私拷已删)。 */
-export declare const normalizeAgentNameLocal: typeof normalizeAgentName;
 export declare const ROSTER_TABLE = "agent_roster";
 export declare function ensureTiDBRosterSchema(pool: Pool): Promise<void>;
 export declare function ensurePgRosterSchema(q: PgQueryFn): Promise<void>;

package/dist/plugins/roster-store-sql.js

@@ -1,6 +1,4 @@
 import { normalizeAgentName } from "@sema-agent/core";
-/** 兼容名保留(测试/历史引用),现=core 导出直引(私拷已删)。 */
-export const normalizeAgentNameLocal = normalizeAgentName;
 export const ROSTER_TABLE = "agent_roster";
 /** 行 → RosterEntry(缺席键省略,core 形逐字;session_scoped 数值/布尔双方言归一)。
  *  core 1.365 BREAKING:owner/scope 升类型必填——两方言 CREATE 直接建成 NOT NULL(当年的「清死行 +
@@ -114,7 +112,7 @@ export async function ensurePgRosterSchema(q) {
 /** upsert 参数序(两方言共用;core 1.365 起 owner/scope 类型必填——键列直取,与 core upsertKey 同键)。 */
 function upsertParams(entry, now) {
     return [
-        normalizeAgentNameLocal(entry.name),
+        normalizeAgentName(entry.name),
         entry.owner,
         entry.scope,
         entry.name,
@@ -148,7 +146,7 @@ export class TiDBRosterStore {
          session_scoped = VALUES(session_scoped), root_session_id = VALUES(root_session_id), model = VALUES(model), created_at_ms = VALUES(created_at_ms), recorded_at_ms = VALUES(recorded_at_ms)`, p.map((v) => (typeof v === "boolean" ? (v ? 1 : 0) : v)));
     }
     async resolve(name, access) {
-        const key = normalizeAgentNameLocal(name);
+        const key = normalizeAgentName(name);
         if (key === "")
             return undefined;
         const [rows] = (await this.pool.query(`SELECT ${COLS} FROM ${ROSTER_TABLE} WHERE ${RESOLVE_WHERE_TIDB} ORDER BY created_at_ms DESC, recorded_at_ms DESC, agent_id DESC LIMIT 1`, [key, access.scope ?? null, access.owner ?? null, access.sessionId ?? null, access.sessionId ?? null]));
@@ -185,7 +183,7 @@ export class PgRosterStore {
          recorded_at_ms = EXCLUDED.recorded_at_ms`, upsertParams(entry, this.clock()));
     }
     async resolve(name, access) {
-        const key = normalizeAgentNameLocal(name);
+        const key = normalizeAgentName(name);
         if (key === "")
             return undefined;
         const { rows } = await this.q(`SELECT ${COLS} FROM ${ROSTER_TABLE} WHERE ${RESOLVE_WHERE_PG} ORDER BY created_at_ms DESC, recorded_at_ms DESC, agent_id DESC LIMIT 1`, [key, access.scope ?? null, access.owner ?? null, access.sessionId ?? null, access.sessionId ?? null]);

package/dist/plugins/store-backend.d.ts

@@ -3,27 +3,19 @@ import type { Pool as PgPool } from "pg";
 import type { SessionStore, SessionPolicyStore, FileSnapshotStore, WorkflowJournalStore, ToolResultStore } from "@sema-agent/core";
 import { type FileSnapshotBounds } from "@sema-agent/core";
 import { type OutcomeSink } from "./file-outcome-sink.js";
-import { type InboxWarn } from "./tidb-workflow-run-store.js";
+import { type InboxWarn } from "./workflow-run-store-sql.js";
 import { FileRunStore } from "./file-run-store.js";
 import { LocalCheckpointStore } from "./local-checkpoint-store.js";
 import { FileResumeAnchorStore } from "./file-resume-anchor-store.js";
 import { type ApprovalExemptionStore } from "./approval-exemption-store.js";
 import { type SendFileLedger } from "./send-file-ledger.js";
-import { TiDBResumeAnchorStore } from "./tidb-resume-anchor-store.js";
-import { PgResumeAnchorStore } from "./pg-resume-anchor-store.js";
+import { TiDBResumeAnchorStore, PgResumeAnchorStore } from "./resume-anchor-store-sql.js";
 import type { ServiceConfig } from "../config-types.js";
-import { TiDBRunStore } from "./tidb-run-store.js";
-import { PgRunStore } from "./pg-run-store.js";
-import { TiDBCheckpointStore } from "./tidb-checkpoint-store.js";
-import { PgCheckpointStore } from "./pg-checkpoint-store.js";
-import { TiDBApprovalStore } from "./tidb-approval-store.js";
-import { PgApprovalStore } from "./pg-approval-store.js";
-import { TiDBImageIndex } from "./tidb-image-index.js";
-import { PgImageIndex } from "./pg-image-index.js";
-import { TiDBImageBake } from "./tidb-image-bake.js";
-import { PgImageBake } from "./pg-image-bake.js";
-import { TiDBBreakerState } from "./tidb-breaker-state.js";
-import { PgBreakerState } from "./pg-breaker-state.js";
+import { TiDBRunStore, PgRunStore } from "./run-store-sql.js";
+import { TiDBCheckpointStore, PgCheckpointStore } from "./checkpoint-store-sql.js";
+import { TiDBImageIndex, PgImageIndex } from "./image-index-sql.js";
+import { TiDBImageBake, PgImageBake } from "./image-bake-store-sql.js";
+import { TiDBBreakerState, PgBreakerState } from "./breaker-state-sql.js";
 import { TiDBCostQuota } from "./tidb-cost-quota.js";
 import { PgCostQuota } from "./pg-cost-quota.js";
 import { TiDBRateLimiter } from "./tidb-rate-limiter.js";
@@ -79,7 +71,6 @@ export type ServiceWorkflowJournalStore = WorkflowJournalStore & {
      *  TaskResult-bearing table (the per-run deleteByRun has no run-store reap hook). Local InMemory omits it. */
     reapExpired?(now: number, maxAgeMs: number): Promise<number>;
 };
-export type ApprovalStore = TiDBApprovalStore | PgApprovalStore;
 export type ImageIndex = TiDBImageIndex | PgImageIndex;
 export type ImageBake = TiDBImageBake | PgImageBake;
 /** The FULL checkpoint store (core CheckpointStore + the service operator-queue/ctx methods listPending/
@@ -155,7 +146,6 @@ export interface StoreBackend {
     checkpoint?(logger?: {
         info?(msg: string, meta?: unknown): void;
     }): CheckpointStoreFull;
-    approval?(): ApprovalStore;
     toolResult?(): ToolResultStoreFull;
     imageIndex?(): ImageIndex;
     imageBake?(): ImageBake;

package/dist/plugins/store-backend.js

@@ -4,48 +4,34 @@
  * subsystem. main.ts wires through this instead of `new TiDB*(pool)` so `DB_BACKEND=pg` boots the whole service on
  * PG with zero call-site churn. The twins are interchangeable behaviourally (one shared real-DB integration suite
  * keeps them in lock-step); the unions below exist only because TS private fields make the concrete classes
- * nominally distinct (run/approval/imageIndex/imageBake have no core interface — the rest implement one).
+ * nominally distinct (run/imageIndex/imageBake have no core interface — the rest implement one).
  */
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { FileStorageBackend, FileSessionRepo, DEFAULT_SNAPSHOT_BOUNDS } from "@sema-agent/core";
-import { FileWorkflowJournalStore } from "./file-workflow-journal-store.js";
-import { TiDBOutcomeLedger } from "./tidb-outcome-ledger.js";
-import { PgOutcomeLedger } from "./pg-outcome-ledger.js";
+import { FileWorkflowJournalStore } from "@sema-agent/core";
+import { TiDBOutcomeLedger, PgOutcomeLedger } from "./outcome-ledger-sql.js";
 import { FileOutcomeSink } from "./file-outcome-sink.js";
-import { TiDBWorkflowRunStore, TiDBWorkflowCompletionInbox, TiDBWorkflowNotifyJournalStore } from "./tidb-workflow-run-store.js";
-import { PgWorkflowRunStore, PgWorkflowCompletionInbox, PgWorkflowNotifyJournalStore } from "./pg-workflow-run-store.js";
+import { TiDBWorkflowRunStore, TiDBWorkflowCompletionInbox, TiDBWorkflowNotifyJournalStore, PgWorkflowRunStore, PgWorkflowCompletionInbox, PgWorkflowNotifyJournalStore } from "./workflow-run-store-sql.js";
 import { FileRunStore } from "./file-run-store.js";
 import { LocalSessionStore } from "./local-session-store.js";
 import { LocalCheckpointStore } from "./local-checkpoint-store.js";
 import { FileResumeAnchorStore } from "./file-resume-anchor-store.js";
 import { TiDBApprovalExemptionStore, PgApprovalExemptionStore, FileApprovalExemptionStore } from "./approval-exemption-store.js";
 import { TiDBSendFileLedger, PgSendFileLedger, FileSendFileLedger } from "./send-file-ledger.js";
-import { TiDBResumeAnchorStore } from "./tidb-resume-anchor-store.js";
-import { PgResumeAnchorStore } from "./pg-resume-anchor-store.js";
-import { TiDBSessionPolicyStore } from "./tidb-session-policy-store.js";
-import { PgSessionPolicyStore } from "./pg-session-policy-store.js";
-import { TiDBWorkflowJournalStore } from "./tidb-workflow-journal-store.js";
-import { PgWorkflowJournalStore } from "./pg-workflow-journal-store.js";
-import { TiDBFileSnapshotStore } from "./tidb-file-snapshot-store.js";
-import { PgFileSnapshotStore } from "./pg-file-snapshot-store.js";
+import { TiDBResumeAnchorStore, PgResumeAnchorStore } from "./resume-anchor-store-sql.js";
+import { TiDBSessionPolicyStore, PgSessionPolicyStore } from "./session-policy-store-sql.js";
+import { TiDBWorkflowJournalStore, PgWorkflowJournalStore } from "./workflow-journal-store-sql.js";
+import { TiDBFileSnapshotStore, PgFileSnapshotStore } from "./file-snapshot-store-sql.js";
 import { MinioBlobBackend, SqlBlobBackend } from "./blob-backend.js";
 import { createTidbPool, ensureSchema as ensureTidbSchema } from "./tidb-pool.js";
 import { createPgPool, ensurePgSchema, pgPoolOptions } from "./pg-pool.js";
-import { TiDBRunStore } from "./tidb-run-store.js";
-import { PgRunStore } from "./pg-run-store.js";
-import { TiDBCheckpointStore } from "./tidb-checkpoint-store.js";
-import { PgCheckpointStore } from "./pg-checkpoint-store.js";
-import { TiDBApprovalStore } from "./tidb-approval-store.js";
-import { PgApprovalStore } from "./pg-approval-store.js";
-import { TiDBToolResultStore } from "./tidb-tool-result-store.js";
-import { PgToolResultStore } from "./pg-tool-result-store.js";
-import { TiDBImageIndex } from "./tidb-image-index.js";
-import { PgImageIndex } from "./pg-image-index.js";
-import { TiDBImageBake } from "./tidb-image-bake.js";
-import { PgImageBake } from "./pg-image-bake.js";
-import { TiDBBreakerState } from "./tidb-breaker-state.js";
-import { PgBreakerState } from "./pg-breaker-state.js";
+import { TiDBRunStore, PgRunStore } from "./run-store-sql.js";
+import { TiDBCheckpointStore, PgCheckpointStore } from "./checkpoint-store-sql.js";
+import { TiDBToolResultStore, PgToolResultStore } from "./tool-result-store-sql.js";
+import { TiDBImageIndex, PgImageIndex } from "./image-index-sql.js";
+import { TiDBImageBake, PgImageBake } from "./image-bake-store-sql.js";
+import { TiDBBreakerState, PgBreakerState } from "./breaker-state-sql.js";
 import { TiDBCostQuota } from "./tidb-cost-quota.js";
 import { PgCostQuota } from "./pg-cost-quota.js";
 import { TiDBRateLimiter } from "./tidb-rate-limiter.js";
@@ -117,7 +103,6 @@ class TiDBBackend {
     completionInbox(onWarn) { return new TiDBWorkflowCompletionInbox(this.pool, onWarn); } // P1: cross-replica push half
     notifyJournal() { return new TiDBWorkflowNotifyJournalStore(this.pool); } // 1.108: cross-replica at-least-once notify
     checkpoint(logger) { return new TiDBCheckpointStore(this.pool, logger); }
-    approval() { return new TiDBApprovalStore(this.pool); }
     toolResult() { return new TiDBToolResultStore(this.pool); }
     imageIndex() { return new TiDBImageIndex(this.pool); }
     imageBake() { return new TiDBImageBake(this.pool); }
@@ -151,7 +136,6 @@ class PgBackend {
     completionInbox(onWarn) { return new PgWorkflowCompletionInbox(this.pool, onWarn); } // P1: cross-replica push half
     notifyJournal() { return new PgWorkflowNotifyJournalStore(this.pool); } // 1.108: cross-replica at-least-once notify
     checkpoint(logger) { return new PgCheckpointStore(this.pool, logger); }
-    approval() { return new PgApprovalStore(this.pool); }
     toolResult() { return new PgToolResultStore(this.pool); }
     imageIndex() { return new PgImageIndex(this.pool); }
     imageBake() { return new PgImageBake(this.pool); }