@sema-agent/server 4.3.0 → 5.0.1

package/dist/trace/project.js

@@ -12,6 +12,8 @@ export async function appendModelUsageDelta(append, modelUsage, taskId) {
     const delta = modelUsage?.drain(taskId);
     if (delta) {
         const tagged = {};
+        // [2373]A-4 记账(2026-08-02):usageBasis(与 TraceTurn.tokens.uncachedIn 同族)五端+黑盒仓零运行时读者——
+        // 3.0.0 cache 语义翻转的诚实位,契约正确但暂无消费;web/desktop 接账单面时它是现成的。
         for (const [model, d] of Object.entries(delta))
             tagged[model] = { ...d, usageBasis: "uncached-components-v1" };
         await append("model_usage", { usage: tagged });
@@ -296,6 +298,22 @@ export function steeringInjectedEventData(ev) {
         ...identityFields(ev),
     };
 }
+/** `compaction_outcome`(core 2.5.0 [2105]②:压缩非 compacted 结局——manual /compact 的 mooted/failed
+ *  两条真路)。[2373]A-2/C-2:此前它是**唯一**不走共享 builder、只在 live 腿 res.write 内联挑键的
+ *  内容帧 ⇒ 两条 durable 腿零 case、回放即消失、三方普查各自失明。收进共享白名单 builder,三腿同源。
+ *  outcome/trigger=闭枚举 verbatim;reason=引擎说明文本(可能引用配置值)→ redactSecrets;identity 同款。 */
+export function compactionOutcomeEventData(ev) {
+    // 形参照 contextUsageEventData 先例:全可选 unknown + 内部窄化,call site 免宽铸型(棘轮零新增)。
+    // 🔴 缺键守卫(同款「不合形即缺席」):无条件 String() 会把缺席/非串的键铸成字面 "undefined"/"null"
+    // 落进 durable 行——回放端读到的是一个看起来合法的枚举值,比缺席更难发现。
+    const s = (v) => (typeof v === "string" ? v : undefined);
+    return {
+        ...(s(ev.outcome) !== undefined ? { outcome: s(ev.outcome) } : {}),
+        ...(s(ev.trigger) !== undefined ? { trigger: s(ev.trigger) } : {}),
+        ...(ev.reason !== undefined ? { reason: redactSecrets(String(ev.reason)) } : {}),
+        ...identityFields(ev),
+    };
+}
 /** The `workspace_changed` payload([1559]二 core 裁定:design/99 §E13 旧臂,L1 门本车首次撞见——非新增,
  *  是本门扩 TaskEvent 臂集时第一次显式处置。语义 = bash `cd`/EnterWorktree 移动任务逻辑 cwd 后,在移动
  *  它的工具结算后发一帧,给 shell/宿主 UI 一个路径提示行。cwd 与已展示的工具 args 同信任级[UNTRUSTED,
@@ -395,6 +413,9 @@ export function compactedEventData(ev) {
  *    挂那儿会是"另一次更早的测量顶着同一个名字")。去 turn_end 找是找不到的。
  * 三个字段都是引擎派生的有限数标量 ⇒ 走 finite 门(与 compacted 的 1.289 标量同姿势),非有限即缺席。
  */
+// [2373]A-3 记账(2026-08-02):SDK 有臂、五端零读点(webC Composer 读的是本端自己的 state.context,
+// 非 wire 三键)——半死:契约面已就位、消费端一个都没接。头注下方的三条口径纪律警告的消费者还不存在;
+// 谁要做压缩面板,这是真正需要的量,先上黑板认领。
 export function contextUsageEventData(ev) {
     const n = (v) => (typeof v === "number" && Number.isFinite(v) ? v : undefined);
     return {
@@ -442,6 +463,29 @@ export function toContractTokens(usage) {
         ...(u.cacheWriteTokens != null ? { cacheWrite: u.cacheWriteTokens } : {}),
     };
 }
+/** [2373]C-13:tool_start/tool_end 的**共享挑键**——`projectEvents`(turns 面)与 `mapTraceEvent`
+ *  (trace SSE 面)对同一账本行的字段选择逐字同构,此前两处独立手写,structured/totalChars/label
+ *  三次扩字段各改两遍(见两处对偶注)。收一份:两面各自包装键名皮(id/name/input vs 同名),
+ *  字段集合从此单点演进。 */
+export function toolCallFieldsOf(d) {
+    return {
+        id: String(d.toolCallId ?? ""),
+        name: String(d.toolName ?? ""),
+        ...(typeof d.label === "string" ? { label: d.label } : {}),
+        input: d.args,
+        ...identityFields(d),
+    };
+}
+export function toolResultFieldsOf(d) {
+    return {
+        callId: String(d.toolCallId ?? ""),
+        ...(typeof d.label === "string" ? { label: d.label } : {}),
+        ...(d.truncated ? { truncated: true } : {}),
+        ...(Number.isFinite(d.totalChars) ? { totalChars: d.totalChars } : {}),
+        ...(d.structured !== undefined ? { structured: d.structured } : {}),
+        ...identityFields(d),
+    };
+}
 /** Project a per-task event slice (seq-ascending) into ordered `TraceTurn[]`. Pure + total (never throws). */
 export function projectEvents(events, opts = {}) {
     const turns = [];
@@ -470,14 +514,14 @@ export function projectEvents(events, opts = {}) {
                 break;
             case "tool_start":
                 firstTs ??= ev.ts;
-                blocks.push({ type: "tool-call", id: String(d.toolCallId ?? ""), name: String(d.toolName ?? ""), ...(typeof d.label === "string" ? { label: d.label } : {}), input: d.args, ...identityFields(d) });
+                blocks.push({ type: "tool-call", ...toolCallFieldsOf(d) });
                 break;
             case "tool_end": {
                 const callId = String(d.toolCallId ?? "");
                 // E1: output is read straight off the (already-redacted-at-append) event — no session join. Absent ⇒ undefined.
                 // `structured` (core 1.203 CC card) was redacted at APPEND (toolEndEventData) — passthrough on the read
                 // path so a cold-replay/turns consumer renders the same rich card the live wire carried (additive field).
-                blocks.push({ type: "tool-result", callId, ...(typeof d.label === "string" ? { label: d.label } : {}), output: d.output, ...(d.isError ? { isError: true } : {}), ...(d.truncated ? { truncated: true } : {}), ...(Number.isFinite(d.totalChars) ? { totalChars: d.totalChars } : {}), ...(d.structured !== undefined ? { structured: d.structured } : {}), ...identityFields(d) });
+                blocks.push({ type: "tool-result", ...toolResultFieldsOf(d), output: d.output, ...(d.isError ? { isError: true } : {}) });
                 break;
             }
             case "prompt_assembled":
@@ -525,6 +569,8 @@ export function lastStep(latestEventType, status) {
 /** A run record → the cheap list summary (contract 2.1). Token/cost/turns come from the terminal result.stats;
  *  scenario isn't denormalized on the run row (omitted — a later push-index/column refinement). */
 export function taskSummary(run, latestEventType) {
+    // [2373]D-1(活 bug 修):core 2.0.0 起浮点 costUsd 族整删,stats 只有整数 costMicroUsd —— 旧读点
+    // (costUsd × 1e6)对现役 core 恒缺席,verbatim 透传才是唯一正确形。
     const stats = (run.result?.stats ?? {});
     const terminal = run.status !== "running";
     return {
@@ -538,7 +584,7 @@ export function taskSummary(run, latestEventType) {
         ...(terminal ? { endedAt: run.updatedAt } : {}),
         ...(stats.turns !== undefined ? { turns: stats.turns } : {}),
         ...(stats.tokens !== undefined ? { tokens: stats.tokens } : {}),
-        ...(stats.costUsd !== undefined ? { costMicroUsd: Math.round(stats.costUsd * 1e6) } : {}),
+        ...(stats.costMicroUsd !== undefined ? { costMicroUsd: stats.costMicroUsd } : {}),
         lastStep: lastStep(latestEventType, run.status),
     };
 }
@@ -560,16 +606,23 @@ export function normalizeRunEventType(type) {
 /** Map one durable event → a sema-registry SSE trace event (contract 2.3). null = not a client event. The
  *  durable log is block-grained, so each block ships as one "delta" the client appends (stream mode = "delta"). */
 export function mapTraceEvent(type, seq, data) {
+    const mapped = mapTraceEventInner(type, seq, data);
+    if (mapped === null)
+        return null;
+    // [2373]C-12:data 里补 `type`(=event 名)双发(fleet 流同批;error 帧 arm 自带 type 保持原值)。
+    return { event: mapped.event, data: { type: mapped.event, ...mapped.data } };
+}
+function mapTraceEventInner(type, seq, data) {
     switch (type) {
         case "reasoning":
             return { event: "block-thinking-delta", data: { seq, text: String(data.text ?? "") } };
         case "text":
             return { event: "block-content-delta", data: { seq, text: String(data.text ?? "") } };
         case "tool_start":
-            return { event: "tool-call", data: { seq, id: data.toolCallId, name: data.toolName, ...(typeof data.label === "string" ? { label: data.label } : {}), input: data.args, ...identityFields(data) } };
+            return { event: "tool-call", data: { seq, ...toolCallFieldsOf(data) } };
         case "tool_end":
             // E1: output/truncated are already redacted+bounded at append; pass through. E2: identity additive.
-            return { event: "tool-result", data: { seq, callId: data.toolCallId, ...(typeof data.label === "string" ? { label: data.label } : {}), isError: Boolean(data.isError), ...(data.output !== undefined ? { output: data.output } : {}), ...(data.truncated ? { truncated: true } : {}), ...(Number.isFinite(data.totalChars) ? { totalChars: data.totalChars } : {}), ...(data.structured !== undefined ? { structured: data.structured } : {}), ...identityFields(data) } };
+            return { event: "tool-result", data: { seq, ...toolResultFieldsOf(data), isError: Boolean(data.isError), ...(data.output !== undefined ? { output: data.output } : {}) } };
         case "turn_end": {
             const tokens = toContractTokens(data.usage);
             return { event: "turn", data: { seq, ...(tokens ? { tokens } : {}) } };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "4.3.0",
+  "version": "5.0.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^4.0.0",
+    "@sema-agent/core": "^5.1.0",
     "@sema-agent/registry-core": "^0.13.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -68,7 +68,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "^3.0.0",
+    "@sema-agent/sdk": "^4.0.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",

package/dist/capabilities/oa-tools.d.ts

@@ -1,15 +0,0 @@
-import type { ToolSpec } from "@sema-agent/core";
-/**
- * OA scenario — tools are thin HTTP clients to the OA backend's existing APIs (read = /api/v1/*,
- * write = /api/assets/*). The shared service token + the request's principal are forwarded so OA
- * enforces THAT end-user's RBAC + audit (the service never holds per-user creds). Decoupled: the
- * service knows no OA schema/DB — OA stays the source of truth (its /api/v1/meta is self-describing).
- */
-export interface OaCtx {
-    baseUrl: string;
-    token: string;
-    principal?: string;
-}
-export declare function oaTools(ctx: OaCtx): ToolSpec[];
-export declare const oaPrompt: import("@sema-agent/core").PromptProvider;
-//# sourceMappingURL=oa-tools.d.ts.map

package/dist/capabilities/oa-tools.js

@@ -1,54 +0,0 @@
-import { Type } from "typebox";
-import { stablePrompt } from "./prompt.js";
-async function oaFetch(ctx, path, init) {
-    if (!ctx.baseUrl || !ctx.token)
-        return "OA 后端未配置(OA_API_BASEURL / OA_SERVICE_TOKEN)";
-    try {
-        const res = await fetch(ctx.baseUrl + path, {
-            method: init?.method ?? "GET",
-            headers: {
-                "content-type": "application/json",
-                authorization: `Bearer ${ctx.token}`,
-                ...(ctx.principal ? { "x-agent-principal": ctx.principal } : {}),
-            },
-            body: init?.body !== undefined ? JSON.stringify(init.body) : undefined,
-        });
-        const text = await res.text();
-        if (!res.ok)
-            return `OA ${res.status}: ${text.slice(0, 600)}`;
-        return text.slice(0, 60_000);
-    }
-    catch (e) {
-        return `调用 OA 失败：${e.message}`;
-    }
-}
-const needWrite = (ctx) => (!ctx.principal ? "缺少身份(principal)，无法代表用户写库；请让调用方带上 x-agent-principal。" : null);
-export function oaTools(ctx) {
-    const obj = Type.Object({}, { additionalProperties: true });
-    return [
-        { name: "oa_schema", effect: "read", description: "取 OA 数据结构(每类资产的字段/必填/条件必填 requiredWhen/联动 showWhen/枚举、生命周期、表名)。建/改前先调它，别凭记忆。", parameters: Type.Object({}), execute: () => oaFetch(ctx, "/api/v1/meta") },
-        { name: "oa_alerts", effect: "read", description: "派生告警：GP 闲置(已注册未变现) / APP 未上架(已接广告未 LIVE)。", parameters: Type.Object({}), execute: () => oaFetch(ctx, "/api/v1/alerts") },
-        { name: "oa_list", effect: "read", description: "列出某类资产。type∈gp/package/ad-platform/ad-unit/email/environment/proxy。可选 q 关键字。", parameters: Type.Object({ type: Type.String(), q: Type.Optional(Type.String()) }), execute: (a) => { const x = a; return oaFetch(ctx, `/api/v1/entities/${encodeURIComponent(x.type)}${x.q ? `?q=${encodeURIComponent(x.q)}` : ""}`); } },
-        { name: "oa_get", effect: "read", description: "取某资产详情(敏感字段为掩码)。", parameters: Type.Object({ type: Type.String(), id: Type.String() }), execute: (a) => { const x = a; return oaFetch(ctx, `/api/v1/entities/${encodeURIComponent(x.type)}/${encodeURIComponent(x.id)}`); } },
-        { name: "oa_lookup", effect: "read", description: "约定字段值反查(同手机/证件=同一实物)。field: phone|idCardNo|bizLicenseNo。", parameters: Type.Object({ field: Type.String(), value: Type.String() }), execute: (a) => { const x = a; return oaFetch(ctx, `/api/v1/lookup?field=${encodeURIComponent(x.field)}&value=${encodeURIComponent(x.value)}`); } },
-        { name: "oa_create", effect: "write", description: "创建实体(走 OA 校验+当前用户 RBAC+审计)。type + data(字段对象，参照 oa_schema)。失败会返回缺失/非法字段。", parameters: Type.Object({ type: Type.String(), data: obj }), execute: (a) => { const e = needWrite(ctx); if (e)
-                return e; const x = a; return oaFetch(ctx, `/api/assets/${encodeURIComponent(x.type)}`, { method: "POST", body: x.data ?? {} }); } },
-        { name: "oa_update", effect: "write", description: "改字段(敏感留空=保持原值；状态字段改不动，用 oa_transition)。", parameters: Type.Object({ type: Type.String(), id: Type.String(), data: obj }), execute: (a) => { const e = needWrite(ctx); if (e)
-                return e; const x = a; return oaFetch(ctx, `/api/assets/${encodeURIComponent(x.type)}/${encodeURIComponent(x.id)}`, { method: "PATCH", body: x.data ?? {} }); } },
-        { name: "oa_transition", effect: "write", description: "受控状态流转(先 oa_schema 看可用迁移；风险/弃用等需 note)。", parameters: Type.Object({ type: Type.String(), id: Type.String(), to: Type.String(), note: Type.Optional(Type.String()) }), execute: (a) => { const e = needWrite(ctx); if (e)
-                return e; const x = a; return oaFetch(ctx, `/api/assets/${encodeURIComponent(x.type)}/${encodeURIComponent(x.id)}/transition`, { method: "POST", body: { to: x.to, note: x.note ?? null } }); } },
-    ];
-}
-// OA business prompt MOVED OUT — migration complete (design/29, 2026-06-05). Persona / 工作准则 / UI
-// markers (::FORM:: / ::GOTO:: / ::SUGGEST:: / ::ISSUE_FORM::) / 分级确认 / 报bug流程 are OA's business,
-// and OA now injects the WHOLE thing per request via `request.systemPrompt` (it holds the service token,
-// content is stable per OA version → cacheable prefix; page context still rides `objective`). Keeping
-// any of it here would just DUPLICATE OA's prompt, so the base is EMPTY — single source of truth = OA.
-// The service stays business-agnostic: it provides the oa_* tools (referenced by NAME from OA's prompt;
-// they carry their own descriptions) and nothing else. `stablePrompt` keeps STABLE→VARIABLE order —
-// OA's systemPrompt is appended after this (empty) base, before core's <user_memory>.
-// (::ISSUE_FORM:: is parsed/rendered + submitted entirely by OA's frontend via OA /api/ai/issue — the
-//  service never touches it; `open_gitea_issue` remains only as the unattended/automated fallback.)
-const OA_SYSTEM = "";
-export const oaPrompt = stablePrompt(OA_SYSTEM);
-//# sourceMappingURL=oa-tools.js.map

package/dist/plugins/approval-store-sql.d.ts

@@ -1,116 +0,0 @@
-/**
- * Durable approval store for the human-in-the-loop write gate (F4) — SINGLE-FILE DUAL-DIALECT
- * (design/158 A12 定型半场). ONE implementation, TWO dialects; the historical `TiDBApprovalStore` /
- * `PgApprovalStore` class names survive as thin ctor subclasses so every consumer (store-backend.ts,
- * src/index.ts, the approval/audit/security-coverage suites) is untouched.
- *
- * When a gated tool call is about to run, a `pending` row is recorded here; the instance running the
- * task polls it for a decision. Because the row is durable and shared, an operator's approve/deny can
- * land on ANY instance — critical under async runs + a load balancer, where the deciding request and
- * the waiting run are usually on different instances.
- *
- * Unlike the run/checkpoint PG store (whose schema is owned centrally by pg-pool.ts), this file also
- * exports a self-contained PG schema (`PG_APPROVAL_SCHEMA` + `ensureSchema`) — the `approval` table is
- * DISJOINT from the other PG stores' tables, so a CREATE IF NOT EXISTS here shadows nothing. Central
- * aggregation into pg-pool.ts composes it alongside the others. Kept in lock-step with the TiDB store
- * by the shared real-DB integration suite (test/pg-approval-store-integration.test.ts).
- *
- * ── Dialect deltas, kept EXPLICIT ────────────────────────────────────────────────────────────────────
- *   - `?` placeholders vs `$n`
- *   - null-safe scope compare: `<=>` vs `IS NOT DISTINCT FROM` (a NULL scope row — legacy/untenanted
- *     run — is matched by a NULL scope arg; one tenant's scope NEVER matches another's — the
- *     single-DB fleet read guard, defense-in-depth)
- *   - JSON binding: TiDB `JSON.stringify` verbatim vs PG `pgProtocolJsonStringify` (codex R4-H2: the
- *     persisted approval `args` is the operator's REVIEW surface and must agree byte-for-byte with the
- *     policy-executed args — a lossy/rewriting envelope would let an operator approve one payload while
- *     a different one runs)
- *   - affectedRows vs rowCount (via SqlDriver)
- *   - schema ownership: TiDB DDL lives in tidb-pool.ts SCHEMA_STATEMENTS; PG DDL is this file's own
- *     self-contained `PG_APPROVAL_SCHEMA` (see the PG twin's original header — unlike the other PG
- *     stores, `approval` is NOT centrally owned by pg-pool.ts's DDL array, only aggregated into its
- *     `ensureSchema` composition).
- *   - `getStatus` result shape: `RowDataPacket[]` (mysql2 typed query) vs a plain-record `pg` query —
- *     normalized to `SqlRow` by the shared driver, so both arms read the same field names.
- */
-import type { Pool as MySqlPool } from "mysql2/promise";
-import type { Pool as PgPool, PoolClient } from "pg";
-import { type SqlDriver } from "./sql-driver.js";
-export type ApprovalStatus = "pending" | "approved" | "denied" | "expired";
-export interface ApprovalRow {
-    id: string;
-    taskId: string | null;
-    sessionId: string | null;
-    owner: string | null;
-    /** Single-DB fleet scope guard (defense-in-depth): the run's tenant identity, owner-sourced. Reads filter on it. */
-    scope: string | null;
-    toolName: string;
-    args: unknown;
-    status: ApprovalStatus;
-    reason: string | null;
-    decidedBy: string | null;
-    createdAt: string;
-    decidedAt: string | null;
-}
-/** PG translation of the `approval` DDL in tidb-pool.ts SCHEMA_STATEMENTS (JSON→JSONB, DATETIME(3)→TIMESTAMPTZ(3),
- *  inline KEY→separate CREATE INDEX).
- *
- *  SCHEMA POLICY: see the header of pg-pool.ts — the code is the single source of truth, schema changes are
- *  drop-and-recreate, and NO new `ALTER TABLE` seams are added here; fold into the CREATE instead. */
-export declare const PG_APPROVAL_SCHEMA: string[];
-/** Idempotent self-contained schema apply (for the integration test; central aggregation is done separately). */
-export declare function ensureSchema(pool: PgPool | PoolClient): Promise<void>;
-/** Dual-dialect durable approval store. See the file header for the dialect-delta ledger. */
-export declare class SqlApprovalStore {
-    protected readonly db: SqlDriver;
-    constructor(db: SqlDriver);
-    /** Pick the dialect's SQL text. Both statements stay written out at the call site ON PURPOSE. */
-    private q;
-    /** JSON column binding: TiDB stores the string verbatim; PG goes through the LOSSLESS protocol envelope
-     *  (codex R4-H2 — the approval `args` is the operator's review surface and must agree with the
-     *  policy-executed args at the NUL position). */
-    private json;
-    createPending(id: string, scope: string | null, ctx: {
-        taskId?: string | null;
-        sessionId?: string | null;
-        owner?: string | null;
-        toolName: string;
-        args: unknown;
-    }): Promise<void>;
-    getStatus(id: string, scope: string | null): Promise<{
-        status: ApprovalStatus;
-        reason: string | null;
-        decidedBy: string | null;
-    } | undefined>;
-    /** Apply a terminal decision, but only to a still-pending row (CAS). Returns whether it applied. The scope
-     *  guard (null-safe) is carried on the operator path too for consistency with the read paths. */
-    decide(id: string, scope: string | null, decision: "approved" | "denied" | "expired", reason: string | null, decidedBy: string | null): Promise<boolean>;
-    /** Pending approvals (operator queue), scoped to one tenant (single-DB fleet read guard, null-safe), optionally
-     *  further filtered to one owner. */
-    listPending(scope: string | null, owner?: string): Promise<ApprovalRow[]>;
-    get(id: string, scope: string | null): Promise<ApprovalRow | undefined>;
-    /** Operator-only CROSS-tenant by-id read (no scope filter). The F4 operator queue serves/decides across
-     *  tenants by design; the HTTP layer gates this to an operator and then re-binds decide() to the row's OWN
-     *  scope. Tenants NEVER reach this — they use the scope-bound {@link get}. */
-    getById(id: string): Promise<ApprovalRow | undefined>;
-    /** Operator-only CROSS-tenant pending list (no scope filter) — the unfiltered operator queue across all
-     *  tenants. Tenants use the scope-bound {@link listPending}; this is HTTP-gated to an operator.
-     *  🔴 identical SQL text on both dialects (no placeholders, nothing dialect-specific) — kept as ONE literal
-     *  rather than a `q()` pair so a reader isn't misled into looking for a divergence that isn't there. */
-    listPendingAll(): Promise<ApprovalRow[]>;
-    /** Expire pending approvals older than `olderThanMs` (a never-answered operator request). Deliberately GLOBAL
-     *  (NOT scope-filtered): staleness expiry is fleet-level maintenance that protects the worker regardless of
-     *  tenant — a stale row in any scope must be reaped. Scope isolation applies to the per-tenant READ paths, not
-     *  to this maintenance sweep. */
-    expireStale(olderThanMs: number): Promise<number>;
-}
-/** approval row → {@link ApprovalRow} — shared by BOTH dialects. design/158 S8 归位 / A12 收编. */
-export declare function mapRow(r: Record<string, unknown>): ApprovalRow;
-/** MySQL-protocol (TiDB) binding — historical class name + ctor shape preserved. */
-export declare class TiDBApprovalStore extends SqlApprovalStore {
-    constructor(pool: MySqlPool);
-}
-/** PostgreSQL binding — historical class name + ctor shape preserved. */
-export declare class PgApprovalStore extends SqlApprovalStore {
-    constructor(pool: PgPool);
-}
-//# sourceMappingURL=approval-store-sql.d.ts.map

package/dist/plugins/approval-store-sql.js

@@ -1,150 +0,0 @@
-import { parseJsonStrict as parseJson, toIsoOrNull as iso } from "./sql-row-helpers.js";
-import { mysqlDriver, pgDriver, dialectProtocolJsonEncoder } from "./sql-driver.js";
-/** PG translation of the `approval` DDL in tidb-pool.ts SCHEMA_STATEMENTS (JSON→JSONB, DATETIME(3)→TIMESTAMPTZ(3),
- *  inline KEY→separate CREATE INDEX).
- *
- *  SCHEMA POLICY: see the header of pg-pool.ts — the code is the single source of truth, schema changes are
- *  drop-and-recreate, and NO new `ALTER TABLE` seams are added here; fold into the CREATE instead. */
-export const PG_APPROVAL_SCHEMA = [
-    `CREATE TABLE IF NOT EXISTS approval (
-     id          VARCHAR(64)  NOT NULL,
-     task_id     VARCHAR(64),
-     session_id  VARCHAR(64),
-     owner       VARCHAR(190),
-     -- Single-DB fleet scope guard (tenant isolation). NULLABLE on purpose: a NULL-scope row is an untenanted
-     -- run, and every read/decide path matches it with \`scope IS NOT DISTINCT FROM $n\` (the PG twin of TiDB
-     -- \`<=>\`) so NULL matches only NULL and one tenant's scope NEVER matches another's.
-     scope       VARCHAR(190),
-     tool_name   VARCHAR(190) NOT NULL,
-     args        JSONB,
-     status      VARCHAR(16)  NOT NULL,
-     reason      TEXT,
-     decided_by  VARCHAR(190),
-     created_at  TIMESTAMPTZ(3) NOT NULL,
-     decided_at  TIMESTAMPTZ(3),
-     PRIMARY KEY (id)
-   )`,
-    `CREATE INDEX IF NOT EXISTS idx_approval_owner_status ON approval (owner, status)`,
-    `CREATE INDEX IF NOT EXISTS idx_approval_status ON approval (status)`,
-    `CREATE INDEX IF NOT EXISTS idx_approval_scope_status ON approval (scope, status)`,
-];
-/** Idempotent self-contained schema apply (for the integration test; central aggregation is done separately). */
-export async function ensureSchema(pool) {
-    for (const stmt of PG_APPROVAL_SCHEMA)
-        await pool.query(stmt);
-}
-/** Dual-dialect durable approval store. See the file header for the dialect-delta ledger. */
-export class SqlApprovalStore {
-    db;
-    constructor(db) {
-        this.db = db;
-    }
-    /** Pick the dialect's SQL text. Both statements stay written out at the call site ON PURPOSE. */
-    q(tidb, pg) {
-        return this.db.dialect === "tidb" ? tidb : pg;
-    }
-    /** JSON column binding: TiDB stores the string verbatim; PG goes through the LOSSLESS protocol envelope
-     *  (codex R4-H2 — the approval `args` is the operator's review surface and must agree with the
-     *  policy-executed args at the NUL position). */
-    json(value, label) {
-        return dialectProtocolJsonEncoder(this.db.dialect)(value, label);
-    }
-    async createPending(id, scope, ctx) {
-        await this.db.query(this.q("INSERT INTO approval (id, task_id, session_id, owner, scope, tool_name, args, status, created_at) " +
-            "VALUES (?,?,?,?,?,?,?,'pending',?)", "INSERT INTO approval (id, task_id, session_id, owner, scope, tool_name, args, status, created_at) " +
-            "VALUES ($1,$2,$3,$4,$5,$6,$7::jsonb,'pending',$8)"), [
-            id,
-            ctx.taskId ?? null,
-            ctx.sessionId ?? null,
-            ctx.owner ?? null,
-            scope,
-            ctx.toolName,
-            ctx.args == null ? null : this.json(ctx.args, "approval args"),
-            new Date(),
-        ]);
-    }
-    async getStatus(id, scope) {
-        // null-safe scope match (`<=>` / `IS NOT DISTINCT FROM`): a NULL scope row (legacy / untenanted run) is
-        // matched by a NULL scope arg, and a tenant's scope NEVER matches another tenant's — the single-DB fleet
-        // read guard (defense-in-depth).
-        const { rows } = await this.db.query(this.q("SELECT status, reason, decided_by FROM approval WHERE id = ? AND scope <=> ?", "SELECT status, reason, decided_by FROM approval WHERE id = $1 AND scope IS NOT DISTINCT FROM $2"), [id, scope]);
-        const r = rows[0];
-        if (!r)
-            return undefined;
-        return { status: r.status, reason: r.reason ?? null, decidedBy: r.decided_by ?? null };
-    }
-    /** Apply a terminal decision, but only to a still-pending row (CAS). Returns whether it applied. The scope
-     *  guard (null-safe) is carried on the operator path too for consistency with the read paths. */
-    async decide(id, scope, decision, reason, decidedBy) {
-        const res = await this.db.query(this.q("UPDATE approval SET status = ?, reason = ?, decided_by = ?, decided_at = ? WHERE id = ? AND scope <=> ? AND status = 'pending'", "UPDATE approval SET status = $1, reason = $2, decided_by = $3, decided_at = $4 WHERE id = $5 AND scope IS NOT DISTINCT FROM $6 AND status = 'pending'"), [decision, reason, decidedBy, new Date(), id, scope]);
-        return res.affected === 1;
-    }
-    /** Pending approvals (operator queue), scoped to one tenant (single-DB fleet read guard, null-safe), optionally
-     *  further filtered to one owner. */
-    async listPending(scope, owner) {
-        const { rows } = owner
-            ? await this.db.query(this.q("SELECT * FROM approval WHERE status = 'pending' AND scope <=> ? AND owner = ? ORDER BY created_at ASC", "SELECT * FROM approval WHERE status = 'pending' AND scope IS NOT DISTINCT FROM $1 AND owner = $2 ORDER BY created_at ASC"), [scope, owner])
-            : await this.db.query(this.q("SELECT * FROM approval WHERE status = 'pending' AND scope <=> ? ORDER BY created_at ASC", "SELECT * FROM approval WHERE status = 'pending' AND scope IS NOT DISTINCT FROM $1 ORDER BY created_at ASC"), [scope]);
-        return rows.map(mapRow);
-    }
-    async get(id, scope) {
-        const { rows } = await this.db.query(this.q("SELECT * FROM approval WHERE id = ? AND scope <=> ?", "SELECT * FROM approval WHERE id = $1 AND scope IS NOT DISTINCT FROM $2"), [id, scope]);
-        return rows[0] ? mapRow(rows[0]) : undefined;
-    }
-    /** Operator-only CROSS-tenant by-id read (no scope filter). The F4 operator queue serves/decides across
-     *  tenants by design; the HTTP layer gates this to an operator and then re-binds decide() to the row's OWN
-     *  scope. Tenants NEVER reach this — they use the scope-bound {@link get}. */
-    async getById(id) {
-        const { rows } = await this.db.query(this.q("SELECT * FROM approval WHERE id = ?", "SELECT * FROM approval WHERE id = $1"), [id]);
-        return rows[0] ? mapRow(rows[0]) : undefined;
-    }
-    /** Operator-only CROSS-tenant pending list (no scope filter) — the unfiltered operator queue across all
-     *  tenants. Tenants use the scope-bound {@link listPending}; this is HTTP-gated to an operator.
-     *  🔴 identical SQL text on both dialects (no placeholders, nothing dialect-specific) — kept as ONE literal
-     *  rather than a `q()` pair so a reader isn't misled into looking for a divergence that isn't there. */
-    async listPendingAll() {
-        const { rows } = await this.db.query("SELECT * FROM approval WHERE status = 'pending' ORDER BY created_at ASC");
-        return rows.map(mapRow);
-    }
-    /** Expire pending approvals older than `olderThanMs` (a never-answered operator request). Deliberately GLOBAL
-     *  (NOT scope-filtered): staleness expiry is fleet-level maintenance that protects the worker regardless of
-     *  tenant — a stale row in any scope must be reaped. Scope isolation applies to the per-tenant READ paths, not
-     *  to this maintenance sweep. */
-    async expireStale(olderThanMs) {
-        const cutoff = new Date(Date.now() - olderThanMs);
-        const res = await this.db.query(this.q("UPDATE approval SET status = 'expired', reason = 'timed out before decision', decided_at = ? " +
-            "WHERE status = 'pending' AND created_at < ?", "UPDATE approval SET status = 'expired', reason = 'timed out before decision', decided_at = $1 " +
-            "WHERE status = 'pending' AND created_at < $2"), [new Date(), cutoff]);
-        return res.affected;
-    }
-}
-/** approval row → {@link ApprovalRow} — shared by BOTH dialects. design/158 S8 归位 / A12 收编. */
-export function mapRow(r) {
-    return {
-        id: String(r.id),
-        taskId: r.task_id ?? null,
-        sessionId: r.session_id ?? null,
-        owner: r.owner ?? null,
-        scope: r.scope ?? null,
-        toolName: String(r.tool_name),
-        args: parseJson(r.args),
-        status: r.status,
-        reason: r.reason ?? null,
-        decidedBy: r.decided_by ?? null,
-        createdAt: iso(r.created_at),
-        decidedAt: iso(r.decided_at),
-    };
-}
-/** MySQL-protocol (TiDB) binding — historical class name + ctor shape preserved. */
-export class TiDBApprovalStore extends SqlApprovalStore {
-    constructor(pool) {
-        super(mysqlDriver(pool));
-    }
-}
-/** PostgreSQL binding — historical class name + ctor shape preserved. */
-export class PgApprovalStore extends SqlApprovalStore {
-    constructor(pool) {
-        super(pgDriver(pool));
-    }
-}
-//# sourceMappingURL=approval-store-sql.js.map

package/dist/plugins/file-workflow-journal-store.d.ts

@@ -1,12 +0,0 @@
-/**
- * SVC-2 — FILE-backed durable WorkflowJournalStore for the LOCAL (TOC) backend.
- *
- * Now a RE-EXPORT of core's copy (the write-here-then-core-adopts 剧本): the implementation was written here for server
- * 1.89.0, then adopted verbatim by core (`@sema-agent/core` 1.223.0, file
- * `src/stores/file/workflow-journal-store.ts` — crash-safe per-run JSONL, scope-guarded [CORE-9],
- * idempotent-per-ordinal, oversize skip-journal, traversal-runId load degrade, 0o600/0o700). One source of
- * truth in core; the SQL twins (tidb/pg) stay service-side (dialect = deployment glue). The service test
- * suite (test/file-workflow-journal-store.test.ts) keeps pinning the contract through this re-export.
- */
-export { FileWorkflowJournalStore } from "@sema-agent/core";
-//# sourceMappingURL=file-workflow-journal-store.d.ts.map

package/dist/plugins/file-workflow-journal-store.js

@@ -1,12 +0,0 @@
-/**
- * SVC-2 — FILE-backed durable WorkflowJournalStore for the LOCAL (TOC) backend.
- *
- * Now a RE-EXPORT of core's copy (the write-here-then-core-adopts 剧本): the implementation was written here for server
- * 1.89.0, then adopted verbatim by core (`@sema-agent/core` 1.223.0, file
- * `src/stores/file/workflow-journal-store.ts` — crash-safe per-run JSONL, scope-guarded [CORE-9],
- * idempotent-per-ordinal, oversize skip-journal, traversal-runId load degrade, 0o600/0o700). One source of
- * truth in core; the SQL twins (tidb/pg) stay service-side (dialect = deployment glue). The service test
- * suite (test/file-workflow-journal-store.test.ts) keeps pinning the contract through this re-export.
- */
-export { FileWorkflowJournalStore } from "@sema-agent/core";
-//# sourceMappingURL=file-workflow-journal-store.js.map

package/dist/plugins/pg-approval-store.d.ts

@@ -1,9 +0,0 @@
-/**
- * Thin re-export shim (design/158 A12 收编 — see src/plugins/approval-store-sql.ts for the
- * implementation, now SINGLE-FILE DUAL-DIALECT alongside the TiDB twin). Class name, ctor arity,
- * and every exported type/const/helper stay EXACTLY as they were so no consumer (pg-pool.ts's
- * central schema composition, store-backend.ts, test/pg-approval-store-integration.test.ts) has
- * to move.
- */
-export { PgApprovalStore, PG_APPROVAL_SCHEMA, ensureSchema, type ApprovalRow, type ApprovalStatus, } from "./approval-store-sql.js";
-//# sourceMappingURL=pg-approval-store.d.ts.map

package/dist/plugins/pg-approval-store.js

@@ -1,9 +0,0 @@
-/**
- * Thin re-export shim (design/158 A12 收编 — see src/plugins/approval-store-sql.ts for the
- * implementation, now SINGLE-FILE DUAL-DIALECT alongside the TiDB twin). Class name, ctor arity,
- * and every exported type/const/helper stay EXACTLY as they were so no consumer (pg-pool.ts's
- * central schema composition, store-backend.ts, test/pg-approval-store-integration.test.ts) has
- * to move.
- */
-export { PgApprovalStore, PG_APPROVAL_SCHEMA, ensureSchema, } from "./approval-store-sql.js";
-//# sourceMappingURL=pg-approval-store.js.map

package/dist/plugins/pg-breaker-state.d.ts

@@ -1,8 +0,0 @@
-/**
- * Re-export shim (design/158 A12 收编) — the real implementation moved to breaker-state-sql.ts
- * (single-file dual-dialect: `SqlBreakerState` + the `TiDBBreakerState`/`PgBreakerState` ctor subclasses).
- * Kept so every consumer's `from "./pg-breaker-state.js"` import (incl. pg-pool.ts's central ensureSchema
- * composition and the real dual-DB integration suite) keeps working unchanged.
- */
-export { PgBreakerState, PG_BREAKER_STATE_SCHEMA, ensureSchema } from "./breaker-state-sql.js";
-//# sourceMappingURL=pg-breaker-state.d.ts.map

package/dist/plugins/pg-breaker-state.js

@@ -1,8 +0,0 @@
-/**
- * Re-export shim (design/158 A12 收编) — the real implementation moved to breaker-state-sql.ts
- * (single-file dual-dialect: `SqlBreakerState` + the `TiDBBreakerState`/`PgBreakerState` ctor subclasses).
- * Kept so every consumer's `from "./pg-breaker-state.js"` import (incl. pg-pool.ts's central ensureSchema
- * composition and the real dual-DB integration suite) keeps working unchanged.
- */
-export { PgBreakerState, PG_BREAKER_STATE_SCHEMA, ensureSchema } from "./breaker-state-sql.js";
-//# sourceMappingURL=pg-breaker-state.js.map

package/dist/plugins/pg-checkpoint-store.d.ts

@@ -1,10 +0,0 @@
-/**
- * PostgreSQL `CheckpointStore` — the implementation now lives in the single-file dual-dialect
- * `checkpoint-store-sql.ts` (design/158 A12 定型半场), alongside its TiDB twin so the dialect deltas
- * (placeholders, ON CONFLICT, `IS NOT DISTINCT FROM` + its placeholder-arity consequence, the lossless
- * JSON envelope) read side by side instead of drifting across two files.
- *
- * This file is the historical import path: class name and ctor shape unchanged.
- */
-export { PgCheckpointStore } from "./checkpoint-store-sql.js";
-//# sourceMappingURL=pg-checkpoint-store.d.ts.map

package/dist/plugins/pg-checkpoint-store.js

@@ -1,10 +0,0 @@
-/**
- * PostgreSQL `CheckpointStore` — the implementation now lives in the single-file dual-dialect
- * `checkpoint-store-sql.ts` (design/158 A12 定型半场), alongside its TiDB twin so the dialect deltas
- * (placeholders, ON CONFLICT, `IS NOT DISTINCT FROM` + its placeholder-arity consequence, the lossless
- * JSON envelope) read side by side instead of drifting across two files.
- *
- * This file is the historical import path: class name and ctor shape unchanged.
- */
-export { PgCheckpointStore } from "./checkpoint-store-sql.js";
-//# sourceMappingURL=pg-checkpoint-store.js.map

package/dist/plugins/pg-file-snapshot-store.d.ts

@@ -1,8 +0,0 @@
-/**
- * Thin re-export shim (design/158 A12 定型半场) — the real implementation collapsed into
- * `file-snapshot-store-sql.ts` (single file, dual dialect). Kept so every existing import path
- * (store-backend.ts, the migration script, the contract/integration/minio-equivalence suites) is
- * untouched: same class name, same ctor arity, same exported surface.
- */
-export { PgFileSnapshotStore } from "./file-snapshot-store-sql.js";
-//# sourceMappingURL=pg-file-snapshot-store.d.ts.map

package/dist/plugins/pg-file-snapshot-store.js

@@ -1,8 +0,0 @@
-/**
- * Thin re-export shim (design/158 A12 定型半场) — the real implementation collapsed into
- * `file-snapshot-store-sql.ts` (single file, dual dialect). Kept so every existing import path
- * (store-backend.ts, the migration script, the contract/integration/minio-equivalence suites) is
- * untouched: same class name, same ctor arity, same exported surface.
- */
-export { PgFileSnapshotStore } from "./file-snapshot-store-sql.js";
-//# sourceMappingURL=pg-file-snapshot-store.js.map

package/dist/plugins/pg-image-bake.d.ts

@@ -1,12 +0,0 @@
-/**
- * PostgreSQL BAKE store — the implementation now lives in the single-file dual-dialect
- * `image-bake-store-sql.ts` (design/158 A12 定型半场), alongside its TiDB twin so the dialect deltas
- * (placeholders, ON CONFLICT, jsonb casts, the admission-statement divergence, the PG-only
- * protocol-byte defenses) read side by side instead of drifting across two files.
- *
- * This file is the historical import path: class name, ctor shape, `PG_IMAGE_BAKE_SCHEMA` and
- * `ensureSchema` are unchanged, so pg-pool.ts / store-backend.ts / the integration suite are untouched.
- */
-export { PgImageBake, PG_IMAGE_BAKE_SCHEMA, ensurePgImageBakeSchema as ensureSchema } from "./image-bake-store-sql.js";
-export type { BakeStatus, BakeState, BakeErrorCode, BakeRecord, BakeEvent, CreateBakeInput, BakeTerminal, } from "./store-contracts.js";
-//# sourceMappingURL=pg-image-bake.d.ts.map