@sema-agent/server 7.103.2 → 7.104.0

package/dist/http/routes/tasks.js

@@ -1,6 +1,6 @@
 import { redactErrorMessage, redactHead, redactTerminalResult } from "../../observability/run-terminal.js";
 import { runWithVerification, runCascade, taskNotificationDedupKey, uuidv7 } from "@sema-agent/core";
-import { graftParkToolCallId, markChildrenStoppedByUserOnAbort, resumeAtHttpStatus, HEARTBEAT_MS } from "../../runs.js";
+import { graftParkToolCallId, markChildrenStoppedByUserOnAbort, syncRefusalHttpStatus, HEARTBEAT_MS } from "../../runs.js";
 import { sealResultForExit, outwardPlane } from "../../terminal.js";
 import { withPrincipal } from "../../observability/principal-context.js";
 import { fleetRunPublisher, fleetRunLabels, fleetRunResiduals, isFleetAgentTerminalNotification } from "../../fleet/fleet-bus.js";
@@ -24,6 +24,7 @@ import { buildActiveRunConflict, toDoneFrameResult } from "../active-run-conflic
 import { commitPlacement, devicePlacementErrorBody } from "../device-placement.js";
 import { headerStr, gatedPrincipal, explicitOperatorOk } from "../principal-gate.js";
 import { failOpenTagForDroppedFrame, recordFailOpen } from "../../observability/fail-open.js";
+import { buildSyncSubmitBody } from "../sync-submit-body.js";
 import { assertNever } from "../route-ctx.js";
 const DISCONNECT_PARK_GRACE_MS = 10_000;
 function sseData(res, payload) {
@@ -31,6 +32,9 @@ function sseData(res, payload) {
     const idLine = typeof anchor === "string" && anchor.length > 0 ? `id: ${anchor}\n` : "";
     res.write(`${idLine}data: ${JSON.stringify(payload)}\n\n`);
 }
+async function mintSubmitExitResult(result, checkpoints) {
+    return redactTerminalResult(sealResultForExit(await graftParkToolCallId(result, checkpoints)));
+}
 function sendSubmitResult(res, resp) {
     const raw = resp.body;
     if (typeof raw === "object" && raw !== null && Object.hasOwn(raw, "retryAfterSec") && "retryAfterSec" in raw) {
@@ -421,7 +425,7 @@ export async function handleTasks(req, res, match, ctx) {
                                     userMsgEntryId = ev.entryId;
                                 const cancelVerbAtDone = ev.type === "done" && durableTaskId !== undefined && cancelledViaVerb.has(durableTaskId);
                                 if (ev.type === "done") {
-                                    finalResult = redactTerminalResult(sealResultForExit(await graftParkToolCallId(ev.result, deps.checkpointStore)));
+                                    finalResult = await mintSubmitExitResult(ev.result, deps.checkpointStore);
                                     if (durableTaskId && finalResult)
                                         finalResult = { ...finalResult, taskId: durableTaskId };
                                     if (cancelVerbAtDone && finalResult !== undefined) {
@@ -652,10 +656,10 @@ export async function handleTasks(req, res, match, ctx) {
                         : withApproval());
                     if (durableTaskId && deps.runStore) {
                         const finalPlane = finalResult ? outwardPlane(finalResult.terminal) : undefined;
-                        if (finalPlane?.status === "suspended" && deps.checkpointStore)
-                            await deps.runStore.setSuspended(durableTaskId);
-                        else if (finalPlane?.status === "needs_review" && deps.checkpointStore)
-                            await deps.runStore.setNeedsReview(durableTaskId);
+                        if (finalResult && finalPlane?.status === "suspended" && deps.checkpointStore)
+                            await deps.runStore.setSuspended(durableTaskId, finalResult);
+                        else if (finalResult && finalPlane?.status === "needs_review" && deps.checkpointStore)
+                            await deps.runStore.setNeedsReview(durableTaskId, finalResult);
                         else if (finalResult && finalPlane)
                             await deps.runStore.setTerminal(durableTaskId, finalPlane.status, finalResult, finalPlane.errorMessage ?? null);
                         else {
@@ -667,7 +671,7 @@ export async function handleTasks(req, res, match, ctx) {
                                     await ledgerSink.flush().catch(() => undefined);
                                     await ledgerSink.appendParked("suspended", {}).catch(() => undefined);
                                 }
-                                await deps.runStore.setSuspended(durableTaskId);
+                                await deps.runStore.setSuspended(durableTaskId, null);
                                 settleFleet("suspended");
                             }
                             else {
@@ -710,7 +714,7 @@ export async function handleTasks(req, res, match, ctx) {
                                         await ledgerSink.flush().catch(() => undefined);
                                         await ledgerSink.appendParked("suspended", {}).catch(() => undefined);
                                     }
-                                    await deps.runStore.setSuspended(durableTaskId);
+                                    await deps.runStore.setSuspended(durableTaskId, null);
                                     settleFleet("suspended");
                                 }
                                 else if (finalResult) {
@@ -859,7 +863,7 @@ export async function handleTasks(req, res, match, ctx) {
                         engineResult: result,
                     });
                 }
-                const resumeAtStatus = resumeAtHttpStatus(result);
+                const resumeAtStatus = syncRefusalHttpStatus(result);
                 if (resumeAtStatus) {
                     const resumeAtPlane = outwardPlane(result.terminal);
                     if (durableTaskId && deps.runStore)
@@ -869,22 +873,21 @@ export async function handleTasks(req, res, match, ctx) {
                         : undefined;
                     return { status: resumeAtStatus, body: { errorCode: resumeAtPlane.errorCode, error: redactErrorMessage(resumeAtPlane.errorMessage) ?? "resume-at failed", ...(retryAfterSec !== undefined ? { retryAfterSec } : {}) } };
                 }
+                const exitResult = await mintSubmitExitResult(result, deps.checkpointStore);
                 const syncPlane = outwardPlane(result.terminal);
-                if (syncPlane.status === "suspended" && deps.checkpointStore && deps.runStore && prepared.spec.sessionId) {
-                    if (durableTaskId)
-                        await deps.runStore.setSuspended(durableTaskId);
-                    return { status: 200, body: withSyncSubmitKeys({ taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: "suspended" }) };
+                if (syncPlane.status === "suspended" && deps.checkpointStore && deps.runStore && durableTaskId && prepared.spec.sessionId) {
+                    await deps.runStore.setSuspended(durableTaskId, exitResult);
+                    return { status: 200, body: withSyncSubmitKeys(buildSyncSubmitBody(exitResult, { taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: "suspended" })) };
                 }
-                if (syncPlane.status === "needs_review" && deps.checkpointStore && deps.runStore && prepared.spec.sessionId) {
-                    if (durableTaskId)
-                        await deps.runStore.setNeedsReview(durableTaskId);
-                    return { status: 200, body: withSyncSubmitKeys({ taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: "needs_review" }) };
+                if (syncPlane.status === "needs_review" && deps.checkpointStore && deps.runStore && durableTaskId && prepared.spec.sessionId) {
+                    await deps.runStore.setNeedsReview(durableTaskId, exitResult);
+                    return { status: 200, body: withSyncSubmitKeys(buildSyncSubmitBody(exitResult, { taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: "needs_review" })) };
                 }
                 if (durableTaskId && deps.runStore)
-                    await deps.runStore.setTerminal(durableTaskId, syncPlane.status, sealResultForExit(result), syncPlane.errorMessage ?? null);
+                    await deps.runStore.setTerminal(durableTaskId, syncPlane.status, exitResult, syncPlane.errorMessage ?? null);
                 finalizeTaskResult(result, principal, prepared.spec.objective, prepared.spec.sessionId);
                 noteRunOutcome(result);
-                return { status: 200, body: withSyncSubmitKeys(redactTerminalResult(sealResultForExit(result))) };
+                return { status: 200, body: withSyncSubmitKeys(buildSyncSubmitBody(exitResult)) };
             };
             const resp = await idemCache.run(idemKey, async () => withRunReceipt(await runSyncSubmitLeg()), (r) => r.status < 400);
             sendSubmitResult(res, resp);

package/dist/http/routes/trace-usage.js

@@ -5,7 +5,7 @@ import { sleep } from "../sse-log.js";
 import { bindSseLifecycle } from "../sse-lifecycle.js";
 import { sendJson, sendError, sseHeaders, SSE_MAX_STREAM_MS, SSE_HEARTBEAT_IDLE_MS } from "../send.js";
 import { filterFingerprint } from "../cursor-fingerprint.js";
-import { gatedPrincipal } from "../principal-gate.js";
+import { gatedPrincipal, sendUnauthorized } from "../principal-gate.js";
 import { assertNever } from "../route-ctx.js";
 const TOOL_RESULT_LIMIT_CAP = 262_144;
 const TOOL_RESULT_OFFSET_CAP = 2_147_483_646;
@@ -14,7 +14,7 @@ export async function handleTraceUsage(req, res, match, ctx) {
     const { isFleetWide, safeDecode } = ctx.helpers;
     if (match.decl.id === "tasks-source-summary") {
         if (!isFleetWide(req)) {
-            sendError(res, 401, "auth.unauthorized", "unauthorized");
+            sendUnauthorized(res, "operator");
             return;
         }
         if (!deps.runStore) {
@@ -34,7 +34,7 @@ export async function handleTraceUsage(req, res, match, ctx) {
         const fleetWide = isFleetWide(req);
         const gateOwner = fleetWide ? null : (gatedPrincipal(req, deps.config) || null);
         if (!fleetWide && gateOwner === null) {
-            sendError(res, 401, "auth.unauthorized", "unauthorized");
+            sendUnauthorized(res, "identity");
             return;
         }
         if (!deps.runStore) {
@@ -84,7 +84,7 @@ export async function handleTraceUsage(req, res, match, ctx) {
             const fleetWide = isFleetWide(req);
             const jwtOwner = fleetWide ? undefined : gatedPrincipal(req, deps.config);
             if (!fleetWide && !jwtOwner) {
-                sendError(res, 401, "auth.unauthorized", "unauthorized");
+                sendUnauthorized(res, "identity");
                 return;
             }
             const q = new URLSearchParams(match.search);

package/dist/http/send.d.ts

@@ -8,6 +8,7 @@
  * now imports them from here, so all ~500 existing `sendJson(...)` call sites are unchanged text.
  */
 import type { ServerResponse } from "node:http";
+import { type SessionErrorFace } from "../session-error-wire.js";
 /**
  * [ref](黑板 [ref]②)—— 一条响应「是 SSE 流」的**在场标记**。
  *
@@ -71,5 +72,16 @@ export declare function httpErrorCode(status: number, code?: string): string;
  * `500 corrupt` 并点名那一列)。一只腿之后,新站点只会忘记调它,不会再各自发明一份映射。
  */
 export declare function sendSessionPolicyError(res: ServerResponse, e: unknown): boolean;
+/**
+ * S-612 —— core `SessionError` → 应答,经 {@link sessionErrorHttp} 那**一只**映射(`src/session-error-wire.ts`)。
+ * 回 `true` = 已应答,调用点 `return`;`false` = 不是 `SessionError`,或这个词在这一面上是登记过的留白(站点的既有
+ * 处置照旧 —— 通常是继续上抛到全局兜底)。
+ *
+ * 句子:属主给了固定句就发它(import 面 `invalid_session` 那一句),否则发 core 的原句过既有脱敏(`redactErrorMessage`:
+ * 不抛、有上限)。core 的 `corrupt_session` 原句只点名会话 id 与跳过计数(「Session <id> is unreadable: its log has no
+ * meta header (N of M records skipped as corrupt)」),SQL 两店的原句点名 `<表>.<列>` 与行号 —— 两者都不含盘上路径
+ * (路径只进运维日志:`session_repo_corrupt_read` 行)。
+ */
+export declare function sendSessionError(res: ServerResponse, e: unknown, face: SessionErrorFace): boolean;
 export declare function msg(e: unknown): string;
 //# sourceMappingURL=send.d.ts.map

package/dist/http/send.js

@@ -1,5 +1,7 @@
-import { SessionPolicyError } from "@sema-agent/core";
+import { SessionError, SessionPolicyError } from "@sema-agent/core";
 import { sessionPolicyErrorHttp } from "../session-policy-wire.js";
+import { sessionErrorHttp } from "../session-error-wire.js";
+import { redactErrorMessage } from "../observability/run-terminal.js";
 export const SSE_RESPONSE_MARK = Symbol("sema.http.sse-response");
 export function isSseResponse(res) {
     return res[SSE_RESPONSE_MARK] === true;
@@ -44,6 +46,15 @@ export function sendSessionPolicyError(res, e) {
     sendError(res, h.status, h.errorCode, e.message);
     return true;
 }
+export function sendSessionError(res, e, face) {
+    if (!(e instanceof SessionError))
+        return false;
+    const wire = sessionErrorHttp(e.code, face);
+    if (wire === undefined)
+        return false;
+    sendError(res, wire.status, wire.errorCode, wire.sentence ?? redactErrorMessage(e.message) ?? "session store error");
+    return true;
+}
 export function msg(e) {
     return e instanceof Error ? e.message : String(e);
 }

package/dist/http/server.d.ts

@@ -28,7 +28,7 @@ import type { QuotaTracker } from "../observability/cost-quota.js";
 import type { ModelUsageTracker, PromptManifestTracker } from "../budget.js";
 import { scopedIdempotencyKey } from "./idempotency.js";
 export { scopedIdempotencyKey };
-import type { ConsolidationSeatLabel } from "../boot/memory-consolidation.js";
+import type { ConsolidationSeatLabel, ConsolidationValve } from "../boot/memory-consolidation.js";
 import { streamApprovals, checkQuestionAnswer } from "./routes/approvals-assistant.js";
 export { streamApprovals, checkQuestionAnswer };
 import { cascadeConfig } from "./run-meta.js";
@@ -148,8 +148,9 @@ export interface ServiceStoreDeps {
     /** [ref] per-edited-file rewind history store. Present ⇒ the rewind capabilities are advertised; core uses it
      *  via RunnerDeps.fileHistoryStore (first-touch tracking + per-turn boundaries + tracked-set restore, ANY
      *  env). Also the 2c history-transfer store (exportHistory/importHistory + blob negotiation faces).
-     *  🔴 S-589:这是装配单点 `assembleFileHistory` 的**捕获脸**(后端 ∧ `FILE_HISTORY_CAPTURE`),不是「后端有没有这只店」
-     *  —— 旋钮关着时它缺席,rewind 族四位、能力词 `fileHistoryCapture` 与 2c sync 路由族一起按「店不在」走。
+     *  🔴 S-724:这是装配单点 `assembleFileHistory` 的**店**(后端在即在,与 `FILE_HISTORY_CAPTURE` 无关 —— 旋钮只关捕获,
+     *  落在 core 的 `RunnerDeps.fileHistoryCapture` 上)。rewind 族四位与 2c sync 路由族跟它走;能力词 `fileHistoryCapture`
+     *  = `fileHistoryCaptureOf(本键, config.fileHistoryCapture)`(与 core 捕获位同一只判定)。
      *  擦除(E21 / 孤儿 blob GC)不读本键,读 boot 侧的擦除脸。 */
     fileHistoryStore?: ServiceFileHistoryStore;
     /** D-1 通用文件上传(clay 拍 2026-07-27:独立附件 store,不骑 snapshot blob 面):enables
@@ -341,10 +342,14 @@ export interface ServiceSeamDeps {
      *  run-ledger/checkpoint/tool-result rows, owner-guarded, in one call. Returns `{ deleted }` (idempotent) — or
      *  `{ active }` when the runs-ledger TX re-asserted a still-live run (a concurrent createRun raced the route's
      *  pre-check), which the route maps to 409. Enables DELETE /v1/sessions/:id. Wired by main.ts (all the stores). */
+    /** E21 删除协调器。三种结局:删了 / 有活跑(`{active}`,409 `conflict.session_active_run`)/ S-790:以本会话为根的后台子代没停干净
+     *  (`{childrenAlive}` = 仍活着的子代句柄,409 `conflict.session_children_alive` 的 `remaining[]`;会话记录不动)。 */
     purgeSession?: (sessionId: string, owner: string | null) => Promise<{
         deleted: boolean;
     } | {
         active: string;
+    } | {
+        childrenAlive: readonly string[];
     }>;
     /** [ref]③(b): read a BACKGROUND agent-handle child's final report / current status out of the core
      *  TaskRegistry (the same face the TaskOutput tool reads — agent handles are NEVER in the run store).
@@ -460,6 +465,12 @@ export interface ServiceSeamDeps {
      * 装配漏接 ⇒ tsc 红(本行就是通知);测试桩在 `test/helpers/boot.ts` 显式给 false。
      */
     memoryAutoConsolidationArmed: boolean;
+    /**
+     * S-824 / [ref] + 车PI 修复轮 ④ —— 记忆整理阀门的**生效判决**(boot 第 4 段 `createConsolidationValve`:显式词,或出厂缺省按
+     * 装配结果派生)。配置目录那一行(`GET /v1/config/catalog` 的 `MEMORY_CONSOLIDATION_DRIVER` `effectiveValue`)读它 —— 那一列的契约是
+     * 「本进程实际生效值」,而这根旋钮的生效值只有装配期才知道。🔴 **必填**:装配漏接 ⇒ tsc 红;测试桩在 `test/helpers/boot.ts` 显式给。
+     */
+    memoryConsolidationValve: Pick<ConsolidationValve, "enabled" | "source">;
     /** [ref] 件②(core 5.59.0 `MemoryEngine.listExternalOriginEntries` / `listOriginClearances` /
      *  `clearEntryOrigin`):**外源标记人面**。启用 `GET /v1/memory/origin/external`、
      *  `GET /v1/memory/origin/clearances`、`POST /v1/memory/origin/entries/:entryId/clear`(三口 operator-only)。
@@ -493,7 +504,8 @@ export interface ServiceSeamDeps {
     /** [ref](core 5.58.0 `runMemoryConsolidationDriver`):记忆 **consolidation 阀门**的操作面。
      *  启用 `POST /v1/admin/memory/consolidation/run` 与 `GET /v1/admin/memory/consolidation`(两口 operator-only)。
      *  main.ts 把它接到 `createMemoryConsolidationFaces` 的产物上。
-     *  🔴 缺席的**唯一**成因是「阀门没开」(`MEMORY_CONSOLIDATION_DRIVER` 不是 `on` —— 出厂缺省):
+     *  🔴 缺席的**唯一**成因是「阀门没开」(显式 `MEMORY_CONSOLIDATION_DRIVER=off`,或未设而出厂缺省派生成关 ——
+     *  S-824 / [ref]:整理座落主模型 / 结构上跑不起来;判决属主 `boot/memory-consolidation.ts` `resolveConsolidationValve`):
      *  阀门开着却结构上跑不了的三种形(引擎没接线 / 后端没有控制面归属 / `MEMORY_PROVENANCE=off`)在
      *  **启动期**就被拒了(`boot/memory-consolidation.ts`),那些机器根本起不来。⇒ 缺席形是 **404 族**
      *  (整域不挂),刻意**不是** 501:501 说「换部署形态」,这里的动作是「把旋钮打开」。全文见
@@ -755,6 +767,11 @@ export interface ServiceDeploymentDeps {
      *  ⚠️ 席位只承载**部署默认**:单用户车道上每请求的 `settings.webSearch` 压过它,但那条腿**不经过本席**
      *  (它在场景装配里每请求现算),所以本位不会随调用方漂。 */
     webSearchProvider?: import("../plugins/web-search.js").WebSearchProvider;
+    /** S-737:本进程模型钥匙保管店的**公钥面** —— `GET /v1/capabilities` 的 `sealedKey` 段唯一席位。值**逐字**取自
+     *  config-center 运行时(`boot/config-center.ts` 的 `sealedKeyPublic`,boot 期建的那一只店),路由里不再建店、不读全局。
+     *  类型只有最新那把公钥(`sealed-key.ts` `SealedKeyPublicFace`):私钥、保管路径、持有的旧 id 列表从这一层结构上够不着。
+     *  缺席 = 本进程没有保管店(boot 建店失败,或不是由 composition root 装起来的测试夹具形)⇒ caps 的 `sealedKey` 键缺席。 */
+    sealedKeyPublic?: import("../sealed-key.js").SealedKeyPublicFace;
     /** ① core ruling — SPLIT: `capabilities.workflows` = the ENGINE-CAN axis, boot-computed from core's own
      *  `workflowsCapability(deps)` (hardened script runner ∧ governance), NOT the `Boolean(workflowRunStore)` store
      *  proxy. Orthogonal to `workflowsList` (the durable-list axis = `workflowRunStore`). Falls back to the store

package/dist/http/server.js

@@ -19,7 +19,7 @@ import { cascadeConfig } from "./run-meta.js";
 export { cascadeConfig };
 import { coarseStatusForState, errorCodeForExit } from "./routes/images.js";
 export { coarseStatusForState, errorCodeForExit };
-import { sendError, httpErrorCode, msg } from "./send.js";
+import { sendError, sendSessionError, httpErrorCode, msg } from "./send.js";
 import { createRequestGuards } from "./request-guards.js";
 import { createAdmission, MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills } from "./admission.js";
 import { createResumeLegs } from "./resume-legs.js";
@@ -107,10 +107,13 @@ export function createHttpServer(rawDeps) {
                 return;
             }
             deps.logger?.error("request_error", { method: req.method, url: req.url, err: redactHead(msg(err), 2000) });
-            if (!res.headersSent)
-                sendError(res, 500, "internal.error", "internal error");
-            else
+            if (res.headersSent) {
                 res.end();
+                return;
+            }
+            if (sendSessionError(res, err, "open"))
+                return;
+            sendError(res, 500, "internal.error", "internal error");
         });
     });
     deps.deviceHub?.attach(server);

package/dist/http/sync-submit-body.d.ts

@@ -0,0 +1,43 @@
+/**
+ * S-173 —— 非流式 `POST /v1/tasks` 的 200 体的**唯一铸点**。
+ *
+ * ## 一条规则
+ * 同步 200 体恒 = **「出口封口 + 脱敏后的引擎结果」**(调用方先 `redactTerminalResult(sealResultForExit(result))`
+ * 铸**一次**,同一份对象既落 run 行、又进本体 —— 两个载体同一只来源);run 还停在门上(park)⇒ 再带
+ * **poll 回执三键** {@link SyncParkReceipt}。park 不是例外:三个 200 出口(终局 / suspended / needs_review)都经本函数。
+ *
+ * ## 修前的病
+ * park 两臂自造 `{ taskId, sessionId, status }`,**没有** `terminal`;同一次 park 在 `/v1/tasks/stream` 的
+ * `done.result` 上是 `terminal.kind === "paused"`,在本腿上是一个状态词 —— 同一事实两形。
+ *
+ * ## 回执三键为什么还在(additive,不是 BREAKING)
+ * 修前的消费方按这三键判读(`status` 词 → 转去 `GET /v1/runs/:taskId` poll)。三键**原值原样**叠在结果之上:
+ *  · `taskId` = 同步腿提交时铸的 durable run id(= 结果自带的 `taskId`:同步腿把它经 `spec.taskId` 交给引擎);
+ *  · `sessionId` = 提交的会话(= 结果自带的 `sessionId`);
+ *  · `status` = **对外词**,即 `GET /v1/runs/:id` 行上的那个词(`outwardPlane(result.terminal).status`,词由 core
+ *    pause registry 的 `taskStatus` 列给)。引擎结果自 core 7.6.0 起**没有** `status` 键(D-8),所以不存在「两个
+ *    status 打架」;这一键只在 park 时在场 —— 终局体上它从 7.64.0 起就不在,本件不把它加回去(那会给终局体
+ *    重新造一个 `terminal.kind` 之外的第二真源)。
+ * 回执叠在结果**之后**:三键的值恒等于修前,消费方读到的字节与修前逐字相同(R5 正控)。
+ *
+ * ## 安全轴
+ * 本函数**不**做封口 / 脱敏 —— 那两件事的属主是 `sealResultForExit`(`terminal.ts`)与 `redactTerminalResult`
+ * (`observability/run-terminal.ts`),调用方铸一次交进来;本函数只负责「体长什么样」。凭据(`paused.token` /
+ * `failed.nestedPause.token`)因此在进本函数之前就已摘掉,幂等缓存存的正是本函数的产物,重放体同体同脱。
+ */
+import type { ParkedRunStatus, PersistedTaskResult } from "../plugins/store-contracts.js";
+/** park 中的 run 在同步 200 体上带的 poll 回执三键(修前 park 体的全部内容,值逐字不变)。 */
+export interface SyncParkReceipt {
+    /** 同步腿提交时铸的 durable run id —— `GET /v1/runs/:taskId` 的 poll 键。 */
+    taskId: string;
+    /** 提交的会话。 */
+    sessionId: string;
+    /** 对外词 = `GET /v1/runs/:id` 行上的 `status`(park 两词之一,闭集从 `RUN_STATUS_CLASS` 派生)。 */
+    status: ParkedRunStatus;
+}
+/**
+ * 铸同步 200 体。`exitResult` = 已封口已脱敏的引擎结果(与 run 行落的是同一份对象);`parkReceipt` 在场 ⇔ run 停在门上。
+ * 返回的是纯数据(无方法、无闭包)⇒ `build*`。
+ */
+export declare function buildSyncSubmitBody<R extends PersistedTaskResult>(exitResult: R, parkReceipt?: SyncParkReceipt): R | (R & SyncParkReceipt);
+//# sourceMappingURL=sync-submit-body.d.ts.map

package/dist/http/sync-submit-body.js

@@ -0,0 +1,4 @@
+export function buildSyncSubmitBody(exitResult, parkReceipt) {
+    return parkReceipt === undefined ? exitResult : { ...exitResult, ...parkReceipt };
+}
+//# sourceMappingURL=sync-submit-body.js.map

package/dist/http/wire-types.d.ts

@@ -9,6 +9,7 @@
 import type { A2aServerSpec, AgentDefinition, ApproverPosture, McpServerSpec, SkillSpec } from "@sema-agent/core";
 import type { SettingsPermissionMode } from "../task-settings.js";
 import type { wiringManifestFaceEventData } from "../trace/project.js";
+import type { buildSyncSubmitBody } from "./sync-submit-body.js";
 export interface TaskRequestBody {
     objective: string;
     sessionId?: string;
@@ -173,8 +174,10 @@ export interface TaskRequestBody {
     };
     /** [ref] file restore ([ref]): with `resumeAt`, ALSO converge the working tree's **agent-edited files**
      *  (the tracked set — nothing else is visible to the history, so a user's parallel work is structurally
-     *  untouchable) to that entry's history boundary. Capture needs no request anymore: first-touch tracking is
-     *  always on when the deployment wires a history store. Requires a FileHistoryStore. */
+     *  untouchable) to that entry's history boundary. Capture needs no request: first-touch tracking is on
+     *  whenever the deployment wires a history store, unless `FILE_HISTORY_CAPTURE=false` (the deployment's capture
+     *  switch) or this request's {@link fileHistory} turns it off — restore reads what the store already holds
+     *  either way. Requires a FileHistoryStore. */
     restoreFiles?: boolean;
     /** DV-15: opt-in tolerance for a PARTIAL file restore (default = loud terminal failure carrying the per-file
      *  ledger; `true` = keep going and disclose the same ledger on the result's rewindNotes). */
@@ -189,6 +192,17 @@ export interface TaskRequestBody {
      *  value is the same handle as `resumeAt` (the prompt's taskId); the service resolves it → the entry id. Honored ONLY
      *  when `resumeAt` is ABSENT (the two modes are mutually exclusive). Requires the anchor map + a FileHistoryStore. */
     rewindFilesTo?: string;
+    /** S-724(core 7.31.0 #1048 `TaskSpec.fileHistory`)—— 请求级的**文件历史关断词**,唯一词 `"disabled"`(core 的拼法,
+     *  与 `checkpointStore` 同;没有 `"enabled"` —— 缺席就是「部署说了算」的唯一形,声明只能单向收紧)。`"disabled"` ⇒
+     *  这条 run 零历史店调用:编辑照常落盘,但不做首次触碰备份、不铸回合边界、不做 fork 携带;委派出去的子代继承
+     *  (core `ParentSpecSeat` 从本位铸,本仓零接线)。`wiring_manifest.fileHistory` 报 `"disabled"`。
+     *  同一个提交里再要还原(`restoreFiles` / `rewindFilesTo` / 退役 `rewindFiles`)= 体内矛盾 ⇒ **受理时** 400
+     *  `request.field_conflict`(`request-value-closure.ts` 的 `FILE_HISTORY_DISABLED_NO_RESTORE`):core 的 `rewind.capture_disabled`
+     *  落在会话按 `resumeAt` 分叉之后、拒后不回滚,所以本层在副作用之前拒。续跑腿不过这道门。
+     *  ⚠️ 拼写门**两腿同判、响亮拒**:fresh 400 `request.field_invalid`;resume 重放同判(与 `memoryCapture` / `memory`
+     *  同一张单成员闭集表,`request-value-closure.ts` 的 `singleMemberOffFieldIssue`)。
+     *  Rides the persisted body onto resume legs —— 它是这条 run 的策略,不是一次性历史动作(与 `rewindFilesTo` 不同,续跑不剥)。 */
+    fileHistory?: "disabled";
     /** [ref] (core 1.246): per-task resilience INTENT flags. allowDegrade/allowFailover are caller-facing;
      *  bypassBreaker is operator-only (resolveSpec drops it for non-operators — a permission downgrade, not a 400). */
     resilience?: {
@@ -238,8 +252,8 @@ export interface TaskRequestBody {
      *  behavior). Purely a render channel — core never merges the child stream into the parent's model context. */
     forwardSubagentEvents?: boolean;
     /** G3([ref] 壳侧承诺③/[ref]③):壳供 per-session scratchpad 路径(壳 vendored getScratchpadDir 的
-     *  约定路径)。接受后优先于 server 自算,同源喂 envFacts.scratchpadDir 事实 + fs-write gate exemptDirs +
-     *  additionalDirectories 根围栏——壳提示词与 server 写门指同一个目录。验收 fail-closed(单用户 +
+     *  约定路径)。接受后优先于 server 自算,同源喂 envFacts.scratchpadDir 宣告(core 据它开根围栏的洞,
+     *  S-842 起是唯一写者)+ fs-write gate exemptDirs——壳提示词与 server 写门指同一个目录。验收 fail-closed(单用户 +
      *  host-semantics lane + 绝对路径/深度/长度门,规则在 env-facts.acceptShellScratchpadDir),拒收形
      *  warn 后回落自算——「没到货引擎忽略 = 无害 additive」的对偶:异形键忽略,任务照跑。 */
     scratchpadDir?: string;
@@ -546,7 +560,11 @@ export type ApprovalStaleCurrentPending = {
  *  `unknown`,产物按段 present-iff 铸)。所以这一行**不**声称「wire 上的每一段都有静态型」;它声称的是
  *  「这一键的值恒等于那只投影器的产物」,而那正是消费端唯一需要的那句话。段级判据的属主在 core。 */
 export type WiringManifestReceipt = ReturnType<typeof wiringManifestFaceEventData>;
-/** S-528 —— `POST /v1/tasks`(**非流式**)200 体在 core `TaskResult` / park 回执之外带的**附加键**。
+/** S-173 —— `POST /v1/tasks`(**非流式**)200 体的值形(不含下方 {@link SyncSubmitExtraKeys}),**从铸点返回型派生**:
+ *  「封口脱敏后的引擎结果」,park 时再叠 poll 回执三键 `{taskId, sessionId, status}`。键表的唯一属主是
+ *  `http/sync-submit-body.ts` 的 `buildSyncSubmitBody`(结果的键集属主是 core `TaskResult`),这里不手抄一张。 */
+export type SyncSubmitBody = ReturnType<typeof buildSyncSubmitBody>;
+/** S-528 —— `POST /v1/tasks`(**非流式**)200 体在 {@link SyncSubmitBody}(引擎结果 / park 回执)之外带的**附加键**。
  *
  *  两键都是 **additive + present-iff**,同一只装饰点铸(`routes/tasks.ts` 的 `withSyncSubmitKeys`),
  *  所以三处 200 出口(终局 / suspended / needs_review)与幂等重放腿自动同形:

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export { loadConfig, type ServiceConfig } from "./config.js";
+export { composeExecutionLane, assertExecutionLaneInvariants } from "./boot/execution-lane.js";
 export { createBrain } from "./brain.js";
 export { createSessionStore } from "./plugins/session-store.js";
 export { createStoreBackend, type StoreBackend, type SessionCaptureRecordSource } from "./plugins/store-backend.js";

package/dist/index.js

@@ -1,4 +1,5 @@
 export { loadConfig } from "./config.js";
+export { composeExecutionLane, assertExecutionLaneInvariants } from "./boot/execution-lane.js";
 export { createBrain } from "./brain.js";
 export { createSessionStore } from "./plugins/session-store.js";
 export { createStoreBackend } from "./plugins/store-backend.js";

package/dist/leader/merge.d.ts

@@ -60,9 +60,14 @@ export interface IntegrationRepair {
 /**
  * S-113 / clay [ref] ④ — **合不上 = 交给用户**(对齐 CC 形)。`git apply --3way` 冲突时的产出:冲突**路径**
  * (不含内容)+ 哪几只 worker 的补丁已经进树,由 leader 铸成 `LeaderResult.conflict` 段交到用户手上。
- * 本段刻意**只有路径与身份**:CC 259 语料对 collapse / conflict resolution 零命中,CC 的并行是同机 teammates
- * 各 worktree、结束由 git 重放到用户 HEAD、冲突列给用户(cli259.js @2303113)——没有任何模型去读别的 worker
- * 的 diff。7.83.0 删掉的那条「冲突解决模型」通道(它的类型面与 `LEADER_CONFLICT_ROUNDS` 旋钮)正是此意。
+ * 本段刻意**只有路径与身份**,不把任何 worker 的 diff 交给模型。CC 对照(2.1.280 语料):`conflict resolution` 零命中,
+ * `collapse` 的 169 处命中里没有一处与「把并行 worker 收成一个」相关(UI 折叠 / context collapse 一类);teammates 各一个
+ * worktree,团队收尾对每个成员的 worktree 只做移除(移不掉就保留),这条路径上没有 merge / 重放回用户 HEAD(cli280.js:214129
+ * `swarm_team_cleanup` / `le`);`/batch` 是每个隔离 worktree agent 各开一个 PR(cli280.js:224700)。旧引的
+ * `cli259.js @2303113` 不是 teammates,而是 Directory sync:agent 未发布的 commit 重建到用户 HEAD 上,重放冲突时 commit
+ * 停到一个 ref、改动以未提交编辑留在工作树且用户的行胜出 —— 冲突是告诉**模型**的(路径 + blob id,不含 diff 正文;
+ * cli280.js:247957)。「CC 里没有模型读别的 worker 的 diff」只有缺席证据,未闭环(车LZ X2)。
+ * 7.83.0 删掉的那条「冲突解决模型」通道(它的类型面与 `LEADER_CONFLICT_ROUNDS` 旋钮)正是此意。
  */
 export interface MergeConflict {
     /** 有冲突标记或 `.rej` 的路径(**不含内容**;`.rej` 后缀已剥,指向源文件)。 */

package/dist/memory-incident-sink.js

@@ -1,3 +1,4 @@
+import { redactIncarnations } from "./session-incarnation.js";
 export function createMemoryEngineIncidentSink(deps) {
     return (err, ctx) => {
         const code = err?.code;
@@ -5,7 +6,7 @@ export function createMemoryEngineIncidentSink(deps) {
         deps.logger.warn("memory_engine_incident", {
             ...(ctx?.sessionId !== undefined ? { sessionId: ctx.sessionId } : {}),
             code: codeText ?? null,
-            detail: String(err),
+            detail: redactIncarnations(String(err)),
         });
         deps.metrics?.inc("memory_engine_incident_total", { code: codeText ?? "none" });
     };

package/dist/model-select.d.ts

@@ -1,3 +1,4 @@
+import { type Model, type RunnerDeps } from "@sema-agent/core";
 import type { ModelEntryRefusal } from "./model-entry-refusal.js";
 /**
  * Resolve the model ref for a task spec from the request (CLI `/model` picker + `run --model`).
@@ -28,6 +29,14 @@ import type { ModelEntryRefusal } from "./model-entry-refusal.js";
  *  `resolveModel("default", catalog)` 解它)。**单点**:读面要说「这台部署的主模型是谁」时读同一个词
  *  (`auto-mode-face.ts` 的席解析器入参),两处各写一个 `"default"` 字面串正是漂移的成因。 */
 export declare const DEFAULT_MODEL_REF = "default";
+/**
+ * 本仓给一条**没选模型**的 task 铸的主模型 —— {@link DEFAULT_MODEL_REF} 在**展开**目录上(与引擎构造期 `expandTiers(models, tiers)`
+ * 之后再解逐字同源)解到的那只**目录条目**(对象引用)。`boot/resolve-spec.ts` 每条 spec 都盖 `spec.model`,所以引擎眼里的 main
+ * 恒是它,**不是** core 的 `default` **角色**链。解不出 ⇒ 抛(core 的拒句);调用方决定披露形。
+ * 读它的两处(`auto-mode-face.ts` 的分类器席 / `boot/memory-consolidation.ts` 的整理座是否落主模型)调这同一只 —— 车PI 修复轮 ⑦(h)
+ * 起不再各抄一份「展开 + 解」。
+ */
+export declare function resolveMainModel(plane: Pick<RunnerDeps, "models" | "tiers">): Model;
 export declare function resolveTaskModel(bodyModel: unknown, objective: string, catalog: Record<string, unknown>, allowlist?: readonly string[], refusals?: Readonly<Record<string, ModelEntryRefusal>>): {
     model: string;
     cleanedObjective: string;

package/dist/model-select.js

@@ -1,5 +1,9 @@
-import { expandTiers, parseModelMention } from "@sema-agent/core";
+import { expandTiers, parseModelMention, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
 export const DEFAULT_MODEL_REF = "default";
+export function resolveMainModel(plane) {
+    const expanded = expandTiers(plane.models, plane.tiers ?? {}) ?? plane.models;
+    return coreResolveTaskModel({ model: DEFAULT_MODEL_REF }, { ...(expanded !== undefined ? { models: expanded } : {}) }).model;
+}
 export function resolveTaskModel(bodyModel, objective, catalog, allowlist, refusals) {
     const mention = parseModelMention(objective, [...Object.keys(refusals ?? {}), ...Object.keys(catalog)]);
     const mentionUsable = mention.model !== undefined && Object.hasOwn(catalog, mention.model) ? mention.model : undefined;