@sema-agent/server 7.107.0 → 7.109.0

package/dist/tool-approval.js

@@ -8,7 +8,7 @@ import { approvalPayloadFingerprint } from "./plugins/approval-payload-fingerpri
 import { createLogger } from "./observability/logger.js";
 import { recordFailOpen } from "./observability/fail-open.js";
 import { deriveAskId, deriveAskScopedBatchId, deriveBatchId, MAX_DECISION_NOTE_CHARS } from "./approval-ask-machine.js";
-import { ApprovalCardEnvelopeSchema, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readReadRootCandidate, readRuleEvidence, readRuleOffersAbsence, readRuleOffersAbsenceSeat, readParkRowTrueSeat, readClosedWordSeat, RuleOfferRawSchema, backfillLegacyBatchMemberKind, screenUncoveredDetailSeat, } from "./approval-card.js";
+import { ApprovalCardEnvelopeSchema, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readReadRootCandidate, readRuleEvidence, readRuleOffersAbsence, readRuleOffersAbsenceSeat, readParkRowTrueSeat, readAskClassPair, readClosedWordSeat, RuleOfferRawSchema, backfillLegacyBatchMemberKind, screenUncoveredDetailSeat, } from "./approval-card.js";
 import { MAX_SETTLED_BY_CHARS, POLICY_REFUSAL_DECISION, projectAskTerminalClaimTruth, settledByFitsColumn } from "./plugins/approval-ask-store-sql.js";
 import { settleByPolicy } from "./approval-policy-settlement.js";
 import { governanceAskMarksFor, runWithGovernanceAskScope } from "./governance-ask-marks.js";
@@ -26,6 +26,8 @@ const SUSPENDED_POLL_MAX_PER_TICK = 64;
 const SUSPENDED_POLL_BUDGET_MS = 5_000;
 const EDITED_DECISION_MARK_CAP_MS = 10_000;
 const DEFAULT_WINDOW_MARGIN_MS = 10_000;
+const SHUTDOWN_DRAIN_POLL_MS = 50;
+const SHUTDOWN_BEFORE_PARK = "shutdown_before_park";
 const MAX_ALLOW_SESSIONS = 4096;
 const DEFAULT_ADMIT_MAX_PER_TASK = 32;
 const DEFAULT_ADMIT_MAX_PER_OWNER = 256;
@@ -364,6 +366,10 @@ export class ToolApprovalCoordinator {
     parkedRedeem;
     askAudit;
     sessionGrants;
+    shutdownDraining = false;
+    asksInFlight = 0;
+    parkCommits;
+    parksAwaitingCommit = new Set();
     constructor(opts) {
         this.ruleConsent = opts?.ruleConsent;
         this.ruleScopeRootFor = opts?.ruleScopeRootFor;
@@ -381,6 +387,8 @@ export class ToolApprovalCoordinator {
         this.parkTombstonePerPrincipalMax = opts?.parkTombstonePerPrincipalMax ?? DEFAULT_PARK_TOMBSTONE_PER_PRINCIPAL_MAX;
         this.askAudit = opts?.askAudit;
         this.sessionGrants = opts?.sessionGrants;
+        this.parkCommits = opts?.parkCommits;
+        this.parkCommits?.onParkCommitted((calls) => this.noteParkCommitted(calls));
     }
     unattendedOutcome(site) {
         let outcome;
@@ -644,6 +652,34 @@ export class ToolApprovalCoordinator {
         }
         return n;
     }
+    async drainForShutdown(deadlineMs) {
+        this.shutdownDraining = true;
+        for (const e of [...this.pending.values()])
+            if (e.settledOutcome === undefined)
+                e.forceParkNow();
+        while ((this.asksInFlight > 0 || this.pending.size > 0 || this.streams.size > 0 || this.parksAwaitingCommit.size > 0) && Date.now() < deadlineMs) {
+            await new Promise((r) => setTimeout(r, SHUTDOWN_DRAIN_POLL_MS));
+        }
+        await this.parkCommits?.quiesce(deadlineMs);
+        this.askAudit?.noteLegsInterruptedByShutdown();
+        return { uncommittedParks: [...this.parksAwaitingCommit].map((p) => ({ approvalId: p.approvalId, taskId: p.taskId })) };
+    }
+    noteParkCommitted(calls) {
+        this.settleParksAwaitingCommit((p) => p.executingSessionId === calls.sessionId && calls.toolCallIds.includes(p.toolCallId), "park-committed");
+    }
+    settleParksAwaitingCommit(match, site) {
+        for (const p of [...this.parksAwaitingCommit]) {
+            if (!match(p))
+                continue;
+            this.parksAwaitingCommit.delete(p);
+            try {
+                this.askAudit?.recordSettle(p.settleRecord());
+            }
+            catch (err) {
+                recordFailOpen("server.approval-ask-audit.append-failed", `kind=settle site=${site} err=${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
     admittedCount(taskId) {
         return this.admitByTask.get(taskId) ?? 0;
     }
@@ -740,14 +776,13 @@ export class ToolApprovalCoordinator {
     async sessionGrantUncontestedByRow(origin, req) {
         if (!this.askStore)
             return true;
-        const sourceTaskId = req.sourceTaskId ?? origin.taskId;
-        const askId = deriveAskId(sourceTaskId, origin.taskId, req.toolCallId, origin.legKey, req.delegation?.parentToolCallId);
+        const call = { taskId: origin.taskId, legKey: origin.legKey, toolCallId: req.toolCallId, sourceTaskId: req.sourceTaskId ?? origin.taskId };
         try {
-            const row = await this.withStoreDeadline(this.askStore.getAsk(askId), "getAsk(session-grant-provenance)", DURABLE_CONVERGE_READ_TIMEOUT_MS);
-            return row === null;
+            const rows = await this.withStoreDeadline(this.askStore.listByCall(call), "listByCall(session-grant-provenance)", DURABLE_CONVERGE_READ_TIMEOUT_MS);
+            return rows.length === 0;
         }
         catch (err) {
-            this.noteStoreError(err, "getAsk(session-grant-provenance)");
+            this.noteStoreError(err, "listByCall(session-grant-provenance)");
             return false;
         }
     }
@@ -950,6 +985,7 @@ export class ToolApprovalCoordinator {
                     if (p.targetCtxs?.has(ctx))
                         p.onTargetGone?.(ctx);
                 }
+                this.settleParksAwaitingCommit((p) => p.carrierLeg === ctx, "leg-closed");
                 this.askAudit?.noteLegClosed(ctx.taskId);
             }
         }));
@@ -983,6 +1019,15 @@ export class ToolApprovalCoordinator {
         };
     };
     async askBroadcast(origin, ctxs, req, signal) {
+        this.asksInFlight++;
+        try {
+            return await this.askBroadcastCounted(origin, ctxs, req, signal);
+        }
+        finally {
+            this.asksInFlight--;
+        }
+    }
+    async askBroadcastCounted(origin, ctxs, req, signal) {
         if (signal?.aborted)
             return false;
         const governanceForced = this.governanceForcedOf(origin, req);
@@ -1008,11 +1053,13 @@ export class ToolApprovalCoordinator {
         }
         const id = uuidv7();
         const child = isChildAsk(req);
+        const carrierLeg = child ? undefined : aliveCtxs.find((c) => c.taskId === origin.taskId);
         const bounded = boundArgs(req.args);
         let effectiveGovernanceForced = governanceForced;
         let ruleLaneMaterial = this.buildRuleLaneMaterial(req, origin.owner, governanceForced, origin.sessionId);
         const mandateWord = readClosedWordSeat(req, "mandate");
         const originWord = typeof req.origin === "string" && req.origin.length > 0 ? req.origin : undefined;
+        const askClassPair = readAskClassPair(req);
         const frame = {
             type: "tool_approval",
             approvalId: id,
@@ -1040,6 +1087,7 @@ export class ToolApprovalCoordinator {
             ...(req.mandated === true ? { mandated: true } : {}),
             ...(mandateWord !== undefined ? { mandate: mandateWord } : {}),
             ...(originWord !== undefined ? { origin: originWord } : {}),
+            ...(askClassPair ?? {}),
             ...(typeof req.persistedRuleShadowed === "string" && req.persistedRuleShadowed !== ""
                 ? { persistedRuleShadowed: redactSecrets(req.persistedRuleShadowed).slice(0, MAX_RULE_TEXT_CHARS) }
                 : {}),
@@ -1091,7 +1139,7 @@ export class ToolApprovalCoordinator {
             const sourceTaskId = req.sourceTaskId ?? origin.taskId;
             const runId = origin.taskId;
             const legKey = origin.legKey;
-            askId = deriveAskId(sourceTaskId, runId, req.toolCallId, legKey, req.delegation?.parentToolCallId);
+            askId = deriveAskId(sourceTaskId, runId, legKey, req);
             batchId = this.batchIdFor(askId, sourceTaskId, runId, legKey);
             try {
                 const existingOrCreated = await this.withStoreDeadline(this.askStore.ensureAsk({
@@ -1282,13 +1330,28 @@ export class ToolApprovalCoordinator {
             releaseAdmission();
             if (selfEntry)
                 selfEntry.settledOutcome = outcome;
-            this.askAudit?.recordSettle({
+            const shutdownEnded = this.shutdownDraining && outcome === "expired";
+            const settleRecord = () => ({
                 approvalId: wireApprovalId,
                 outcome,
                 ...(windowRouteUnavailable ? { parkRouted: true } : {}),
                 ...(hostSettledBy !== undefined ? { settledBy: hostSettledBy } : {}),
+                ...(shutdownEnded ? { cause: SHUTDOWN_BEFORE_PARK } : {}),
                 settledAtMs: Date.now(),
             });
+            if (shutdownEnded && windowRouteUnavailable && this.unattendedRoutesToPark && this.parkCommits !== undefined) {
+                this.parksAwaitingCommit.add({
+                    approvalId: wireApprovalId,
+                    taskId: origin.taskId,
+                    carrierLeg,
+                    executingSessionId: req.sourceTaskId,
+                    toolCallId: req.toolCallId,
+                    settleRecord,
+                });
+            }
+            else {
+                this.askAudit?.recordSettle(settleRecord());
+            }
             resolveAllowed({ allowed, ...(allowed && updatedInput !== undefined ? { updatedInput } : {}), ...(allowed && readRootGrant !== undefined ? { readRootGrant } : {}) });
         };
         const broadcastClaimTruth = (read) => {
@@ -1471,7 +1534,7 @@ export class ToolApprovalCoordinator {
             if (done)
                 return;
             if (!this.askStore || askId === undefined || batchId === undefined) {
-                settleParkRouteIfUnsettled();
+                settleParkRouteIfUnsettled(undefined);
                 return;
             }
             windowExpired(undefined);
@@ -1586,10 +1649,12 @@ export class ToolApprovalCoordinator {
             owner: origin.owner,
             toolName: req.toolName,
             toolCallId: req.toolCallId,
-            legTracked: !child && aliveCtxs.some((c) => c.taskId === origin.taskId),
+            legTracked: carrierLeg !== undefined,
             expiresAtMs: persistedExpiresAtMs,
             mintedAtMs: Date.now(),
         });
+        if (this.shutdownDraining)
+            forceParkNow();
         const cardFrame = askId !== undefined && cardForFrame !== undefined
             ? buildApprovalRequestFrame({ askId, taskId: origin.taskId, approvalId: wireApprovalId, card: cardForFrame, expiresAtMs: persistedExpiresAtMs, nowMs: Date.now() })
             : undefined;

package/dist/tool-rule-names.d.ts

@@ -0,0 +1,25 @@
+/**
+ * S-919(安全轴,八病审计 SG H2-a)—— 本仓**收紧方向**按引擎工具名匹配的策略臂的**唯一**名字读法。
+ *
+ * ## 规则(一条,与 core 7.36.0 [ref] `NAME_READINGS` 同判)
+ * 一个调用可以答好几个名字:嵌入方工具声明别名(`MyShell{aliases:["Bash"]}`)后,模型按哪个名调它、它的 wire 名、
+ * 解到同一行的其余别名,都是这次调用的名字。core 把**收紧**方向的名单(`policy.nameLists` / `policy.shellToolsList` /
+ * `policy.durableQuestion` / `policy.sensitivePathGuardedByName`)读成 `any` —— 调用答得上的**任何**一个名字在名单里就算
+ * 命中;**授权 / 路由**方向的座(会话放行、审批卡分型、停车行)读 `wire`(`req.toolName`)。core 给宿主的读法端口是包根
+ * `ruleNamesOf(req)`(`dist/core/tool-name-readings.js`,亲读实现:`face.names` 含调用名时取它,否则只有调用名;拼写在先)。
+ *
+ * 本仓照此分两边:
+ *  · **收紧臂**(`APPROVAL_DENY` / `APPROVAL_REQUIRE` / `APPROVAL_NEVER_AUTO`、commandPolicy 的 ask 表、治理 shell 标、
+ *    durable 问题门、supervisor 危险门、workflow 问 / 拒)一律经本函数读全集;
+ *  · **授权 / 路由臂**(会话豁免探针、会话放行键、审批卡分型、停车行的 AskUserQuestion 判别)读 `req.toolName`,不经这里 ——
+ *    用户对 `Bash` 说过的「本会话不再询问」不许替一只叫 `MyShell` 的工具放行(放宽臂不因别名放宽)。
+ *
+ * 修前(≤7.107.0)本仓自写的这些臂只比 `req.toolName`:模型按别名调嵌入方工具时,运维名单一个都不拦(core 同族策略判 deny、
+ * 本仓判 allow)。本仓自身不声明带别名的工具,所以只有经 `resolveSpec` 席挂别名工具的嵌入方走得到。
+ *
+ * 返回**命中的那个名字**(调用答得上的名字里第一个被规则够到的,拼写在先)—— 规则归因(`matchedAskRule`)写运维名单里的那个名,
+ * 不写一个名单里查不到的 wire 名;够不到 ⇒ `undefined`。判定式(精确集 / covering 规则)由调用方给,本函数只管「读哪些名字」。
+ */
+import { type ToolCallRequest } from "@sema-agent/core";
+export declare function heldRuleName(req: Pick<ToolCallRequest, "toolName" | "face">, holds: (name: string) => boolean): string | undefined;
+//# sourceMappingURL=tool-rule-names.d.ts.map

package/dist/tool-rule-names.js

@@ -0,0 +1,5 @@
+import { ruleNamesOf } from "@sema-agent/core";
+export function heldRuleName(req, holds) {
+    return ruleNamesOf(req).find(holds);
+}
+//# sourceMappingURL=tool-rule-names.js.map

package/dist/trace/core-keyset-guard.d.ts

@@ -17,7 +17,7 @@
  * ⑨⑩([ref],2026-08-31)把两个最大的 wire 面也纳入:TaskSpec 按「server 有无写点」记 Wired/Unwired,
  * TaskResult 按「转发/摘除」记 Forwarded/Stripped —— 谁改 resolve-spec.ts / runs.ts 的发射点谁同步本文件。
  */
-import type { TaskNotificationPayload, SemaProvenance, BackgroundChildEvent, RosterEntry, AskRequest, CheckpointSummary, PendingAction, TaskEvent, TraceEvent, MailboxMessage, MailboxAppendMessage, TaskSpec, TaskResult, WiringManifest, GateOutcome, GateDisposition, Settlement, PausedCause, WorkflowRun, ReadRootGrantCandidate, McpReconnectResult, McpServerStatus, NodeLspManagerOptions, RunnerDeps } from "@sema-agent/core";
+import type { TaskNotificationPayload, SemaProvenance, BackgroundChildEvent, RosterEntry, AskRequest, CheckpointSummary, PendingAction, TaskEvent, TraceEvent, MailboxMessage, MailboxAppendMessage, TaskSpec, TaskResult, SideQueryResult, WiringManifest, GateOutcome, GateDisposition, Settlement, PausedCause, WorkflowRun, ReadRootGrantCandidate, McpReconnectResult, McpServerStatus, NodeLspManagerOptions, RunnerDeps } from "@sema-agent/core";
 import type { ToolApprovalFrame } from "../tool-approval.js";
 /** 编译期断言:T 必须收敛到 never(有残余键 = tsc 红)。
  *  🔴 **导出**([ref] U1/U2):本仓「词表闭集,未处置成员=编译红」的钉法只许有**一个**形 ——
@@ -43,7 +43,7 @@ type _GuardBgNotifReverse = AssertAllKeysHandled<Exclude<BgNotifProjected | BgNo
 type RosterProjected = "name" | "agentId" | "sessionId" | "toolUseId" | "owner" | "scope" | "sessionScoped" | "rootSessionId" | "model" | "modelFallback" | "createdAt";
 type _GuardRoster = AssertAllKeysHandled<Exclude<keyof RosterEntry, RosterProjected>>;
 type _GuardRosterReverse = AssertAllKeysHandled<Exclude<RosterProjected, keyof RosterEntry>>;
-type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "persistedRuleShadowed" | "probeCause" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "readRootCandidate" | "mandated" | "mandate";
+type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "persistedRuleShadowed" | "probeCause" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "readRootCandidate" | "mandated" | "mandate" | "askClass" | "classes";
 type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "probeReason" | "hasBidiControls" | "previewWithheld" | "execCwd" | "authoredBy";
 type _GuardAsk = AssertAllKeysHandled<Exclude<keyof AskRequest, AskProjected | AskExcluded>>;
 type _GuardAskReverse = AssertAllKeysHandled<Exclude<AskProjected | AskExcluded, keyof AskRequest>>;
@@ -157,6 +157,14 @@ type PausedCauseForwarded = "kind" | "gate" | "checkpointId" | "restoreMode";
 type PausedCauseStripped = "token";
 type _GuardPausedCause = AssertAllKeysHandled<Exclude<keyof PausedCause, PausedCauseForwarded | PausedCauseStripped>>;
 type _GuardPausedCauseReverse = AssertAllKeysHandled<Exclude<PausedCauseForwarded | PausedCauseStripped, keyof PausedCause>>;
+type SideQueryResultForwarded = "text" | "toolCalls" | "model" | "servedModel" | "degraded" | "responseModel" | "usage" | "usageMissing" | "stopReason" | "errorMessage";
+type SideQueryResultStripped = never;
+type _GuardSideQueryResult = AssertAllKeysHandled<Exclude<keyof SideQueryResult, SideQueryResultForwarded | SideQueryResultStripped>>;
+type _GuardSideQueryResultReverse = AssertAllKeysHandled<Exclude<SideQueryResultForwarded | SideQueryResultStripped, keyof SideQueryResult>>;
+type SideQueryToolCallForwarded = "id" | "wireId" | "name" | "args";
+type SideQueryToolCallStripped = never;
+type _GuardSideQueryToolCall = AssertAllKeysHandled<Exclude<keyof SideQueryResult["toolCalls"][number], SideQueryToolCallForwarded | SideQueryToolCallStripped>>;
+type _GuardSideQueryToolCallReverse = AssertAllKeysHandled<Exclude<SideQueryToolCallForwarded | SideQueryToolCallStripped, keyof SideQueryResult["toolCalls"][number]>>;
 type SettlementKeys = Settlement extends infer S ? (S extends object ? keyof S : never) : never;
 type SettlementWhoKeys = Settlement["who"] extends infer W ? (W extends object ? keyof W : never) : never;
 type GateOutcomeProjected = "disposition" | "settlement" | "origin";
@@ -289,6 +297,10 @@ export type CoreKeysetGuards = [
     _GuardTaskResultReverse,
     _GuardPausedCause,
     _GuardPausedCauseReverse,
+    _GuardSideQueryResult,
+    _GuardSideQueryResultReverse,
+    _GuardSideQueryToolCall,
+    _GuardSideQueryToolCallReverse,
     _GuardGateOutcome,
     _GuardGateOutcomeReverse,
     _GuardGateDisposition,

package/dist/trace/engine-notice-wire.d.ts

@@ -16,7 +16,7 @@
  * 同文件 G1 e2e 的全码扇出夹具、以及契约文档附录 D.3 那张表(含**小节标题里的码数** —— 那道门本批
  * 刚立,立完就在下一次加码时自己咬住了)。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
 /**
  * S-690 —— **本仓自铸**的通告码与它们的受众(码 / 铸点 / 受众三者的属主都是本仓)。
@@ -42,6 +42,8 @@ export declare const SERVER_NOTICE_AUDIENCE: {
     readonly "memory.layer_locked_legacy": "operator";
     /** S-612 —— 会话存档部分记录被跳过(唯一铸点 `src/session-records-skipped-notice.ts`);受众 user,理由见白名单键注。 */
     readonly "session.records_skipped": "user";
+    /** S-925 —— 模型调用因建连失败终态(唯一铸点 `src/model-unreachable-notice.ts`);受众 user,理由见白名单键注。 */
+    readonly "server.model_unreachable": "user";
 };
 export type ServerNoticeCode = keyof typeof SERVER_NOTICE_AUDIENCE;
 /** 该码是否本仓自铸(属主判据单点:门与投递面都读这一个)。 */

package/dist/trace/engine-notice-wire.js

@@ -27,6 +27,7 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     "approval.read_root_grant_rejected",
     "instructions.source_changed",
     "session.records_skipped",
+    "server.model_unreachable",
     "classifier.unavailable",
     "config.permission_mode_unavailable",
     "permission.ask_released_by_mode",
@@ -37,6 +38,7 @@ export const SERVER_NOTICE_AUDIENCE = {
     "instructions.source_changed": "user",
     "memory.layer_locked_legacy": "operator",
     "session.records_skipped": "user",
+    "server.model_unreachable": "user",
 };
 export function isServerNoticeCode(code) {
     return Object.hasOwn(SERVER_NOTICE_AUDIENCE, code);

package/dist/trace/project.d.ts

@@ -298,7 +298,9 @@ export declare function toolEndEventData(ev: {
  * ## 信任划线
  *  · `toolCallId` / `toolName` —— 调用 id(🔴 S-283 订正:出身是**服务商**在 tool_use / tool_calls 里给的,引擎缺席时自铸兜底、越界时折叠 ——
  *    此前写「引擎铸」不实)与名册里的工具名(与 `tool_start` 逐字同源)⇒ verbatim。调用 id 这一族的形状在**全部面的共同入口**一次施加 ——
- *    core 7.36.0(#1207)brain 建调用那一行的准入(在形原样 / 越界单射折叠,原字节只在转录 `ToolCall.wireId`),逐帧面收到的恒是在形的引擎 id;
+ *    core 7.36.0(#1207)brain 建调用那一行的准入(在形原样 / 越界单射折叠,原字节只在转录 `ToolCall.wireId`),一方 brain 新铸的调用在逐帧面上
+ *    恒是在形的引擎 id(残余两条 S-921:≤7.106.0 写下的存量行 resume 出来的帧是服务商原串逐字;宿主 Brain 不准入 KL-1207-a —— 详见
+ *    run-terminal `admitProviderEcho` 顶注);
  *    本仓不设第二道闸(见 run-terminal `admitProviderEcho` 顶注;S-890 关)。
  *  · `elapsedTimeSeconds` —— 引擎铸的整秒,单调、一 call 一个原点 ⇒ 有限数才铸键。
  *  · `output` —— 🔴 **UNTRUSTED RAW**,core 逐字「exactly as `tool_end.output`: process output that may

package/dist/trace/project.js

@@ -1,5 +1,5 @@
 import { admitProviderEcho, redactErrorMessage, redactModelText } from "../observability/run-terminal.js";
-import { isAskClass, isAskOrigin, isPermissionMode, isPersistedRuleMandate, MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, TEAM_ROLES, ToolRoster, ToolRosterDelta, WRITE_PROTECTION_TARGET_VIEWS } from "@sema-agent/core";
+import { isAskClass, isAskOrigin, isModeReleaseReason, isPermissionMode, isPersistedRuleMandate, MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, TEAM_ROLES, ToolRoster, ToolRosterDelta, WRITE_PROTECTION_TARGET_VIEWS } from "@sema-agent/core";
 import { Value } from "typebox/value";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { redactSecrets, redactDeep } from "./redact.js";
@@ -126,11 +126,10 @@ function modeLedgerDefect(d) {
         return "disposition.released.origin is outside the closed set";
     if (o.mandate !== undefined && !isPersistedRuleMandate(o.mandate))
         return "disposition.released.mandate is outside the closed set";
-    if (o.reason !== undefined && !(typeof o.reason === "string" && Object.hasOwn(RELEASE_REASON_WORDS, o.reason)))
+    if (o.reason !== undefined && !isModeReleaseReason(o.reason))
         return "disposition.released.reason is outside the closed set";
     return false;
 }
-const RELEASE_REASON_WORDS = { rule_unreadable: true };
 function screenedGateOrThrow(v) {
     if (v === null || typeof v !== "object") {
         if (v !== undefined)

package/dist/trace/self-minted-wire.d.ts

@@ -0,0 +1,71 @@
+/** 一个自铸 wire 值成员的登记。 */
+export interface SelfMintedWireMember {
+    readonly attr: string | number;
+    readonly since: string;
+}
+export declare const SELF_MINTED_WIRE: {
+    /** [ref](7.55.0)起的终态成因注;S-929(7.108.0)+`shutdown_before_park`。 */
+    readonly crashConvergedCause: {
+        readonly at: "GET /v1/approvals crashConverged[].cause";
+        readonly members: {
+            crashed_before_park: {
+                attr: string;
+                since: string;
+            };
+            shutdown_before_park: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /**
+     * 会话所有者自助抹除面的**已分类拒** → HTTP 状态(S-930 起与 operator 面 `POST /v1/memory/erase` 同一只映射;`since` 记的是**本面**
+     * 自哪一版起这样答 —— 7.107.0 及以前本面只认前两只,其余落 500 `internal.error`)。
+     */
+    readonly sessionMemoryEraseStatus: {
+        readonly at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)";
+        readonly members: {
+            readonly "config.memory_erasure_request": {
+                readonly attr: 400;
+                readonly since: "7.52.0";
+            };
+            readonly "memory.target_outside_store": {
+                readonly attr: 409;
+                readonly since: "7.101.0";
+            };
+            readonly "memory.erasure_evidence_unavailable": {
+                readonly attr: 409;
+                readonly since: "7.108.0";
+            };
+            readonly "memory.erasure_selector_mismatch": {
+                readonly attr: 409;
+                readonly since: "7.108.0";
+            };
+            readonly "memory.erasure_census_incomplete": {
+                readonly attr: 409;
+                readonly since: "7.108.0";
+            };
+            readonly "internal.memory_control_plane_corrupt": {
+                readonly attr: 500;
+                readonly since: "7.108.0";
+            };
+        };
+    };
+    /** 本仓在出口对 core 值做的变换(值变、键不变)。 */
+    readonly wireValueRule: {
+        readonly at: "出口值变换(<端点>#<键> → 变换)";
+        readonly members: {
+            /** S-105(7.57.0):run 读面的终态错误文案脱敏(钉 test/run-failure-visibility.test.ts)。 */
+            readonly "GET /v1/runs/:id#result.errorMessage": {
+                readonly attr: "redactErrorMessage";
+                readonly since: "7.57.0";
+            };
+            /** S-922(7.108.0):side-query 200 体 `errorMessage` 与任务面同一只脱敏口(钉 test/side-query-provider-echo.test.ts)。 */
+            readonly "POST /v1/side-query#errorMessage": {
+                readonly attr: "redactErrorMessage";
+                readonly since: "7.108.0";
+            };
+        };
+    };
+};
+//# sourceMappingURL=self-minted-wire.d.ts.map

package/dist/trace/self-minted-wire.js

@@ -0,0 +1,28 @@
+export const SELF_MINTED_WIRE = {
+    crashConvergedCause: {
+        at: "GET /v1/approvals crashConverged[].cause",
+        members: {
+            crashed_before_park: { attr: "-", since: "7.55.0" },
+            shutdown_before_park: { attr: "-", since: "7.108.0" },
+        },
+    },
+    sessionMemoryEraseStatus: {
+        at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
+        members: {
+            "config.memory_erasure_request": { attr: 400, since: "7.52.0" },
+            "memory.target_outside_store": { attr: 409, since: "7.101.0" },
+            "memory.erasure_evidence_unavailable": { attr: 409, since: "7.108.0" },
+            "memory.erasure_selector_mismatch": { attr: 409, since: "7.108.0" },
+            "memory.erasure_census_incomplete": { attr: 409, since: "7.108.0" },
+            "internal.memory_control_plane_corrupt": { attr: 500, since: "7.108.0" },
+        },
+    },
+    wireValueRule: {
+        at: "出口值变换(<端点>#<键> → 变换)",
+        members: {
+            "GET /v1/runs/:id#result.errorMessage": { attr: "redactErrorMessage", since: "7.57.0" },
+            "POST /v1/side-query#errorMessage": { attr: "redactErrorMessage", since: "7.108.0" },
+        },
+    },
+};
+//# sourceMappingURL=self-minted-wire.js.map