@sema-agent/server 7.110.0 → 7.111.0

package/MIGRATION.md

@@ -7,6 +7,14 @@
 > ⚠️ 完整清单在仓库根 `CHANGELOG.md`——它**不随 npm tarball 出包**(本文件随包)。看完整迁移窗的
 > 权威姿势是源码 tag diff:`git diff v<旧>..v<新>`(每版都推 `v<版本>` tag);npm 包页也镜像 CHANGELOG。
 
+## 7.111.0(车TA,S-961 / S-972)—— `wiring_manifest` 帧 +`instructions` 段(additive,零动作)
+
+- **wire(additive,零动作)**:`wiring_manifest` 帧(四条腿:流式 SSE / 账本行 / 非流式 `wiringManifest` 回执 / 续跑腿)多一段本服务自铸的 `instructions: { selected: string[] }` = 这条腿选中的项目指令文件(相对 cwd 的链成员);`[]` = 没有,缺席 = 无陈述(契约附录 G.21)。按封闭 schema 校验该帧的消费方加这一可选键;不要它的部署 `PROJECT_MEMORY_ENABLED=false`(连同项目记忆注入一起关)。`task.user_steer_undrained{cause:"crashed"}` 的 `message` 改句序(行动句在前、< 400 字符),`detail` 不变 —— 按文本匹配的脚本改读 `detail.cause`(S-972)。
+- **会话删除 / 托管留存级联接上用户输入受理账本(车TC,S-965;零 DDL、零动作)**:`DELETE /v1/sessions/:id` 与 SQL 后端的托管留存清扫自本版起连带删掉该会话的受理行(SQL `user_input_acceptance` 按 `session_id` 删;local `ledger.jsonl` 追加一行会话级墓碑 `{"kind":"erased","sessionId":…,"at":…}`);`DELETE` 回执形不变。**回滚**(local 车道):≤7.110.x 不认 `erased` 行 —— 启动 warn `user_input_ledger_corrupt_read`,被删会话的行在旧进程里复现;要干净回滚,停服后删 `<localDataRoot>/user-input-ledger/ledger.jsonl`(代价 = 丢掉还没告知的崩溃丢失提醒)。SQL 车道回滚无影响。**嵌入方(类型面硬破坏)**:`UserInputLedgerStore`(包根导出型)新增必选 `deleteBySession(sessionId): Promise<number>`;自建 `StoreBackend.userInputLedger()` 的嵌入方 tsc 红即通知。
+- **同步子代的 steer 入用户输入受理账本(车TF,S-966;零 DDL、零动作)**:`POST /v1/runs/:id/subagents/:target/steer` 自本版起与 run 自己的 steer 同一本账(先账后引擎;行记在回执上的那条 run 名下)——进程在子代收场前崩了 ⇒ 同会话下一条 run 首拍的 `task.user_steer_undrained{cause:"crashed"}` 把它并进那条 run 的条数;账本写不进 ⇒ 该路由回 **503 `steering.ledger_unavailable`**(此前 200);200 回执 additive 多一个 `messageId`(按封闭 schema 校验回执的消费方加这一可选键)。workflow agent 的 steer 不变(不入账,崩溃丢失仍零告知,另票)。**回滚**:无数据动作(行形不变;≤7.110.x 读得懂这些行,照常收敛 / 告知)。
+- **用户输入受理账本收敛判词合一 / SQL 坏行逐行跳过(车TD,S-969;零 DDL、零动作)**:local 车道 boot 收敛自本版起读 run 行 —— 前世进程没结清、而承载它的 run 已正常收场 / 已挂起的受理补结清、不再告知(7.110.x 一律按崩溃告知);SQL 表里读不出的行逐行跳过 + 计数 `server.user-input-ledger.corrupt-record-skipped`,其余照常(7.110.x 整页读失败)。**嵌入方(类型面硬破坏)**:`UserInputLedgerStore.listOpen` 返回 `Promise<OpenScanPage>`(`{ open, next? }`,`next` = 这一页原始末行的键、缺席 = 扫到底;包根新导出 `OpenScanPage`)—— 自建店改交页对象、读不出的行自己跳过并照原始行给游标;`WriterGoneEvidence` 改为 `{ kind, runs }`(两臂都带 run 店读口)。tsc 红即通知。**回滚**:回到 7.110.x 无数据动作(账本行形不变)。
+- **`@sema-agent/core` 7.38.0 → 7.38.2(车TG;两只 patch,core 硬破坏 0、wire 键 / 码 / 闭集零变化,零动作)**:① 内建读拒表的家锚定行(`~/.sema/settings.json` 等)另落**账户家**(core 7.38.1 #1244,S-941)—— 引擎进程的 `HOME` 被改指时,账户真实家下的同名文件由「读得到」变为 `read_path_denied`;真要读的部署用 `READ_DENY_BUILTIN_EXCLUDE` 删那一行。S-941 时期按 DEPLOY-PREREQS 加的 `READ_DENY_PATTERNS` 不锚家同名行可撤(不撤无害)。账户查询无答的主机上这些行在任何位置判(项目自己的 `.sema/settings.json` 也拒,一次 `console.warn`,下一条 run 重问)。② local 车道 File 店族的 JSONL 末段整条记录缺换行 ⇒ 认下并在下次打开补换行(core 7.38.2 #1278,S-975);末段非对象 ⇒ 截 + 多一条 `corrupt-record-skipped` 计数。**回滚**到 ≤7.110.x:回退版本的 core 会把「只缺换行」的末行截掉(只在崩溃留下的那一形上;盘上格式不变,零数据动作)。
+
 ## 7.110.0(车ST,S-955;小车 SV,S-956;车SX,S-958 / S-959;小车 SA,S-962 / S-963;主会话 S-964;车SW,S-928)—— `@sema-agent/core` 7.38.0(minor,core 硬破坏 0):通告码受众 / 铸者改读 core 表 · `terminal.failed.detail` 过境 · hook 载荷 `permission_mode` = 腿实时模式 · 类对判据走 core 屏 · run-local 无 TTY 拒记部署政策名下 · 复合体读不出词的 PreToolUse 结果交引擎屏 · 🔴 `MEMORY_SYNC_SCOPE` 缺省不再从非 v2 `MEMORY_SCOPE` 派生(拒启) · 崩溃丢掉的 200-applied steer 下一条 run 告知(用户输入受理账本)
 
 - **🔴 记忆同步 env(S-964,配置面硬破坏)**:单用户 file 引擎上设了 `MEMORY_SYNC_URL` / `MEMORY_SYNC_TOKEN`、**没设** `MEMORY_SYNC_SCOPE`、且 `MEMORY_SCOPE` 不是 typed 键(`user:` / `org:` / `proj:` / `userproj:`;含缺省 `local`)的部署**升级后拒启**。此前这一形派生同步层 `user:<MEMORY_SCOPE>` —— 一个本部署从不写的层(写家是裸 `MEMORY_SCOPE`,core 同步按同一个名字取条目)⇒ 同步腿自 142-S2.5-W1 起每轮推 0 条。出路二选一(错误句原文点名):`MEMORY_SYNC_SCOPE=<要复制的层>`,或把 `MEMORY_SCOPE` 设成中心期待的 typed 键(如 `user:<tenant>`,缺省同步层随之同名)。显式 `MEMORY_SYNC_SCOPE` 的部署零变化。

package/dist/approval-ask-audit-store.d.ts

@@ -3,8 +3,7 @@
  * `server/designs/2026-08-31-s38-local-stream-approval-v1.md`,v1 三臂 + v1.1 §6 两件增益)——
  * local 车道(`DB_BACKEND=local`)的 **File ask 审计店**。SINGLE-FILE 店([ref] A12 单文件店纪律,
  * 形照 `plugins/memory-optout-grant-store-sql.ts`:一个实现文件、数据形/偏离/坏值姿态全部成文在头注;
- * 崩溃安全机制照 `orchestration/workflow-notify-journal.ts` 的 File 形:append-only JSONL、fsync 逐行、
- * 重放容忍撕尾行)。
+ * 崩溃安全机制 = append-only JSONL、fsync 逐行、重放容忍撕尾行 —— 追加与重放都走本仓 JSONL 店族的**共用口**(S-967,见下「追加 / 重放口」段))。
  *
  * ## 它治的病([ref] / [ref]① 车定界钉;⚠️ **病因描述是 [ref] 当时的事实,S-384 起已变**)
  * 当时:local 车道 ask 账进程内易失(`InMemoryApprovalAskStore`),活卡窗内崩溃 = **零痕迹**:重启后
@@ -135,11 +134,24 @@
  * ## `crashed_before_park` 与 FAIL-OPEN census 的关系(稿未闭环②,施工时裁定,成文于此)
  * **不入词表**:census 词表登记的是「走了兜底而外面看不出」的**臂**;`crashed_before_park` 是一条
  * **终态成因注**(收敛器 fail-closed 地把孤儿收成 DENIED 同码并在读面显形),它的存在恰恰是响亮化
- * 本身,不是静默降级。本店唯一的静默降级臂 = 运行期 append 失败(审批可用性不押在审计盘上),已按
- * [ref] 律走 `recordFailOpen("server.approval-ask-audit.append-failed")`(census 登记行同批)。
- * boot 期(mkdir/重放)失败则**拒启**(与 File 店族同律:`FileStorageBackend` ctor 同 root 同姿态)——
+ * 本身,不是静默降级。本店的静默降级臂有两条:① 运行期 append 失败(审批可用性不押在审计盘上),已按
+ * [ref] 律走 `recordFailOpen("server.approval-ask-audit.append-failed")`(census 第 53 行);② boot 重放跳过中间坏行
+ * (S-967 起由重放属主逐条披露 + `server.approval-ask-audit.corrupt-record-skipped`,census 第 106 行;此前只计 `corruptLines`)。
+ * boot 期(mkdir/重放的读错)失败则**拒启**(与 File 店族同律:`FileStorageBackend` ctor 同 root 同姿态)——
  * 一台「审计写不进却继续批」的机器 = [ref] 换个皮回来。
  *
+ * ## 追加 / 重放口(S-967:一只追加日志实现,不留两份)
+ * 追加 = core `AppendLog`(惰性打开,首次 append 才铸文件;一行 = 单次 `writeSync` 的 `JSON.stringify(rec) + "\n"`、`fsync=true` 逐行;文件 0o600、目录 0o700;
+ * 末段无换行的字节在打开与每次追加前由它按 core 的同一只判词修 —— 解析成对象 = 丢了换行的整条记录,**补换行、字节保留**;不解析 = 崩溃半写(撕尾),
+ * **截断**回最后一个换行;解析成非对象 = 截断并披露(core 7.38.2 #1278))。重放 = `replayJsonlSkipping`(登记名 `approval-ask-audit`,fail-open + F 类 tag
+ * `server.approval-ask-audit.corrupt-record-skipped`:中间坏行逐条披露 + 计数;撕尾不计,无换行的完整末行照常进重放)。本店只剩两样自己的东西:**形判据**({@link LEDGER_SHAPE},逐 `kind` 的最小必填键
+ * + 词表外成因行「计坏行、结清照认」)与**失败方向**(运行期 append 失败 ⇒ `recordFailOpen("server.approval-ask-audit.append-failed")`,审批照常)。
+ * **一行「在账」的判据 = 它的字节解析成一只对象**(与共用口同一条,core 7.38.2 #1278:读面、打开修尾、追加门修尾三站问同一只判词;换行只是边界的拼法,
+ * 不是记录存在的条件 —— 没有一只 JSON 对象的真前缀能被解析,所以解析得出的末行就是整条记录;失败的 append 由 core 截回它开写处,不留自己的字节)。
+ * 修前本店手写了第二份追加 / 修尾(私有的脏尾标 + 写字节注入席),撕尾用**孤立换行隔离**保留残字节而不是截断;与共用口的形差(撕尾隔离 ⇄ 截断、撕尾计数、
+ * 字节全落却报错后多落的孤立换行、空白行计数、坏行披露)逐条记在 CHANGELOG 7.111.0 S-967 段,读数钉 = `test/approval-ask-audit.test.ts` 的「S-967」两组;
+ * 「完整 JSON 却缺换行的末行」一条(R2)在 core 7.38.2 下与修前同形(认下 + 补换行,C2 正向钉),不再是形差。
+ *
  * ## 装配(为什么不在 `plugins/store-backend.ts`)
  * 本店是协调器侧的审计 sink,不是跨后端 store 契约的一员(SQL 车道有真 ask 店,永不装本店)——
  * 装配点在 `boot/coordinators.ts`(判据:`toolApprovalEnabled` ∧ `backend.kind === "local"` ∧
@@ -152,10 +164,14 @@
  * journal 同款成文)。读面列表按收敛时刻新前旧后、上限 {@link CRASH_CONVERGED_LIST_MAX}(有界 wire)。
  */
 import type { HostDecision } from "./host-decision.js";
+import { AppendLog } from "@sema-agent/core";
+import type { Logger } from "./observability/logger.js";
 /** 数据子目录名(挂在 local 数据根下,与 `workflow-notify/` 同层同形)。 */
 export declare const APPROVAL_ASK_AUDIT_DIR = "approval-ask-audit";
 /** 崩溃收敛行的读面上限(新前旧后截断;有界 wire —— 读面不许随月份线性长)。 */
 export declare const CRASH_CONVERGED_LIST_MAX = 200;
+/** 追加口的窄形(core `AppendLog` 的 `append` / `close`)—— 店的测试注入席({@link FileApprovalAskAuditStore} 构造器 `internals.appendLog`)按它造替身。 */
+export type AuditAppendPort = Pick<AppendLog, "append" | "close">;
 /** 铸造点入参(协调器 askBroadcast 的 register-before-emit 之后挂线)。 */
 export interface AuditAskInput {
     /** wire 身份 = 呈卡帧上那把 `approvalId`(respond/queue 同源可达;不是本地 pending 键)。 */
@@ -302,14 +318,10 @@ export type LateSettleUnresolved = "ambiguous_anchor";
 export declare class FileApprovalAskAuditStore implements ApprovalAskAuditSink, ApprovalAskAuditReadFace {
     /** 账本绝对路径(测试/取证按文件字节对账 —— 崩溃语义的真源是文件,不是内存投影)。 */
     readonly ledgerPath: string;
-    private fd;
-    /** codex R2-F1(采):上一次 append 抛出时可能已落**部分**字节(半写)—— 置位后,下一次成功写必须
-     *  先落一个孤立换行把残尾隔离并 fsync(与 boot 修尾同一形,只是发生在同进程内),否则新记录会与残尾
-     *  并成一条坏行、重放双双丢失(丢 settle+leg_closed 会让 ask-only 组冒充 pending 孤儿)。定界自己
-     *  失败 ⇒ 脏标保持,本条记录走留痕臂 —— 绝不往可能的残尾上直接续字节。 */
-    private tailDirty;
-    /** 写字节口(测试注入席:半写故障的确定性构造;生产恒缺省 = `fs.writeSync`)。 */
-    private readonly writeBytes;
+    /** 追加口(core `AppendLog`,惰性打开 —— 首次 append 才铸文件;`close()` 后下一次 append 重开)。撕尾修复 / 短写补齐 / 逐行 fsync 都在它里面,本店不再自写一份。 */
+    private log;
+    /** 追加口的铸造座(测试注入席:单条写失败 / 半写的确定性构造;生产恒缺省 = `new AppendLog(path)`)。 */
+    private readonly openLog;
     /** boot 重放快照(冻结于构造时刻 = 前世账本;本进程新写的行不进它 —— 收敛只对前世行)。 */
     private readonly replayed;
     /** 前世账本里的腿闭事件(taskId + 行序;decided 臂按「决议行之后」判)。 */
@@ -339,24 +351,25 @@ export declare class FileApprovalAskAuditStore implements ApprovalAskAuditSink,
     /** [ref] 反查索引 ③:approvalId → 铸造坐标(命中后回填 late 行的 `taskId`)。 */
     private readonly askTaskId;
     /**
-     * boot 期 fail-stop:mkdir/重放失败**拒启**(File 店族同律)。root = local 数据根
+     * boot 期 fail-stop:建目录 / 重放的**读错**(非 ENOENT)⇒ 抛 ⇒ **拒启**(File 店族同律)。root = local 数据根
      * (`config.localDataRoot`;与 `LocalBackend` 同源,见头注装配段)。
-     * 0o700 目录 + 0o600 账本:行携租户身份(owner/sessionId),不得组/他人可读
-     * (`workflow-notify-journal.ts` 同姿态)。
+     * 0o700 目录 + 0o600 账本:行携租户身份(owner/sessionId),不得组/他人可读(目录由 core `ensureDir`、账本由 `AppendLog` 铸)。
+     * 追加口惰性打开(S-967,与 `FileUserInputLedgerStore` 同形):末段的修(撕尾截断 / 完整末行补换行)随首次 append 的打开发生 —— 重放读数不依赖它
+     * (撕尾不进重放、完整末行进重放,修前修后读数同);
+     * 目录已在而盘后来满 / 变只读 ⇒ boot 照常,append 走 `recordFailOpen`。
+     * @param internals.appendLog 测试注入席(见 {@link AuditAppendPort})。
+     * @param internals.warn 腐读披露座(缺席 ⇒ 重放属主退回 `console.warn`,不退回沉默)。
      */
     constructor(root: string, internals?: {
-        writeBytes?: (fd: number, buf: Buffer, off: number, len: number) => number;
+        appendLog?: (path: string) => AuditAppendPort;
+        warn?: Logger["warn"];
     });
-    /** 重放前世账本。撕尾/坏行 = 未提交态,跳过(计数,一条 warn 级 stderr 契约由调用方日志承担 ——
-     *  这里不持 logger 席,与 journal 同姿态;坏行数暴露给收敛日志)。 */
+    /** 重放的坏值计数(`convergeCrashedAsks().corruptLines`):重放属主跳过的坏行(撕尾不计)+ 成因词表外的行(行在、结清照认,坏值照样计数)。 */
     private corruptLines;
-    /** 尾部无终止换行(崩在 append 半途)—— ctor 在首次 append 前补孤立换行隔离之(codex R1-F3)。
-     *  ⚠️ 判据是**换行缺席**不是「解析失败」:崩在「JSON 全落、换行未落」的字节窗时撕尾能 parse 成功,
-     *  但不修尾照样会与下一条记录并行。 */
-    private tornTail;
+    /** 重放前世账本(共用口 `replayJsonlSkipping`):撕尾 = 未落完的写,静默跳过;坏行跳过 + 逐条披露;坏行数另暴露给收敛日志。 */
     private replay;
     private group;
-    /** append + fsync(逐行落盘:进程猝死不丢已记的行 —— 本店的全部价值就在崩溃时刻)。
+    /** append + fsync(逐行落盘:进程猝死不丢已记的行 —— 本店的全部价值就在崩溃时刻;写口 = 共用的 `AppendLog`:单次 `writeSync` 一行、末段在打开与每次追加前修(撕尾截、完整末行补换行)、失败的写截回开写处)。
      *  运行期失败**响亮不阻断**:审批可用性不押在审计盘上(盘满/只读时人还得能批),但丢行必须在遥测
      *  显形([ref] 三件套,census 登记行同批)。
      *  🔴 返回**这条记录是否真的落盘并 fsync 成功**([ref] codex R1-F2 采):迟到结算的 late 判据只认
@@ -432,7 +445,7 @@ export declare class FileApprovalAskAuditStore implements ApprovalAskAuditSink,
      *  `owner === scope` 的行(null-owner 行对 principal 不可见,fail-closed 宁少列不超范围;`"__none__"`
      *  未鉴权哨兵自然恒空)。 */
     listCrashConverged(scope: string | undefined): CrashConvergedRow[];
-    /** 收 append fd(优雅关闭腿 best-effort;SIGKILL 下不跑也不丢 —— 每行已 fsync)。 */
+    /** 收追加口(优雅关闭腿;SIGKILL 下不跑也不丢 —— 每行已 fsync)。core `AppendLog.close()` 自己吞 `closeSync` 的错、不抛(全函数),本店不再包 catch。 */
     close(): void;
 }
 //# sourceMappingURL=approval-ask-audit-store.d.ts.map

package/dist/approval-ask-audit-store.js

@@ -1,7 +1,8 @@
 import { createHash } from "node:crypto";
-import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, writeSync } from "node:fs";
 import { join } from "node:path";
+import { AppendLog, ensureDir } from "@sema-agent/core";
 import { recordFailOpen } from "./observability/fail-open.js";
+import { replayJsonlSkipping } from "./observability/corrupt-read-seat.js";
 export const APPROVAL_ASK_AUDIT_DIR = "approval-ask-audit";
 export const CRASH_CONVERGED_LIST_MAX = 200;
 export const AUDIT_SHUTDOWN_CAUSE_WORDS = { shutdown_before_park: true };
@@ -160,11 +161,20 @@ function readLedgerRecord(u, noteOutOfSetSeat) {
             return undefined;
     }
 }
+const LEDGER_SHAPE = {
+    what: "approval-ask audit record of an unknown kind or with a missing / out-of-vocabulary member",
+    read(record) {
+        let outOfSetCause = false;
+        const rec = readLedgerRecord(record, () => {
+            outOfSetCause = true;
+        });
+        return rec === undefined ? undefined : { rec, outOfSetCause };
+    },
+};
 export class FileApprovalAskAuditStore {
     ledgerPath;
-    fd;
-    tailDirty = false;
-    writeBytes;
+    log;
+    openLog;
     replayed = new Map();
     replayedLegClosed = [];
     replayedShutdownMarks = [];
@@ -177,44 +187,21 @@ export class FileApprovalAskAuditStore {
     parkExpired = new Set();
     askTaskId = new Map();
     constructor(root, internals) {
-        this.writeBytes = internals?.writeBytes ?? ((fd, buf, off, len) => writeSync(fd, buf, off, len));
+        this.openLog = internals?.appendLog ?? ((p) => new AppendLog(p));
         const dir = join(root, APPROVAL_ASK_AUDIT_DIR);
-        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        ensureDir(dir);
         this.ledgerPath = join(dir, "ledger.jsonl");
-        this.replay();
-        if (this.tornTail) {
-            this.fd = openSync(this.ledgerPath, "a", 0o600);
-            writeSync(this.fd, "\n");
-            fsyncSync(this.fd);
-        }
+        this.replay(internals?.warn);
     }
     corruptLines = 0;
-    tornTail = false;
-    replay() {
-        if (!existsSync(this.ledgerPath))
-            return;
-        const text = readFileSync(this.ledgerPath, "utf8");
-        this.tornTail = text.length > 0 && !text.endsWith("\n");
+    replay(warn) {
+        const { records, skipped } = replayJsonlSkipping(this.ledgerPath, "approval-ask-audit", LEDGER_SHAPE, warn);
+        this.corruptLines = skipped;
         let line = 0;
-        for (const raw of text.split("\n")) {
-            if (raw.trim() === "")
-                continue;
+        for (const { rec, outOfSetCause } of records) {
             line += 1;
-            let parsed;
-            try {
-                parsed = JSON.parse(raw);
-            }
-            catch {
-                this.corruptLines += 1;
-                continue;
-            }
-            const rec = readLedgerRecord(parsed, () => {
+            if (outOfSetCause)
                 this.corruptLines += 1;
-            });
-            if (rec === undefined) {
-                this.corruptLines += 1;
-                continue;
-            }
             switch (rec.kind) {
                 case "ask": {
                     const g = this.group(rec.approvalId, line);
@@ -265,25 +252,11 @@ export class FileApprovalAskAuditStore {
     }
     append(rec) {
         try {
-            if (this.fd === undefined)
-                this.fd = openSync(this.ledgerPath, "a", 0o600);
-            if (this.tailDirty) {
-                const nl = Buffer.from("\n", "utf8");
-                let noff = 0;
-                while (noff < nl.length)
-                    noff += this.writeBytes(this.fd, nl, noff, nl.length - noff);
-                fsyncSync(this.fd);
-                this.tailDirty = false;
-            }
-            const buf = Buffer.from(`${JSON.stringify(rec)}\n`, "utf8");
-            let off = 0;
-            while (off < buf.length)
-                off += this.writeBytes(this.fd, buf, off, buf.length - off);
-            fsyncSync(this.fd);
+            this.log ??= this.openLog(this.ledgerPath);
+            this.log.append(rec, true);
             return true;
         }
         catch (err) {
-            this.tailDirty = true;
             recordFailOpen("server.approval-ask-audit.append-failed", `kind=${rec.kind} err=${err instanceof Error ? err.message : String(err)}`);
             return false;
         }
@@ -440,14 +413,8 @@ export class FileApprovalAskAuditStore {
         return rows;
     }
     close() {
-        if (this.fd !== undefined) {
-            try {
-                closeSync(this.fd);
-            }
-            catch {
-            }
-            this.fd = undefined;
-        }
+        this.log?.close();
+        this.log = undefined;
     }
 }
 //# sourceMappingURL=approval-ask-audit-store.js.map

package/dist/bench/s1/run-firm.d.ts

@@ -15,6 +15,17 @@
  *
  * 🔴 ENV GATING: the live path requires E2B_API_KEY + DEEPSEEK_API_KEY; absent → the driver refuses the live path
  *    with a clear message (never a silent fake run). The deterministic --dry-run never needs keys.
+ *
+ * 🔴 LEDGER I/O (S-977): the WRITE side is the repo's shared append port — core `AppendLog` (lazy open, one `writeSync` loop per
+ *    row, a failed write rolled back, a torn tail repaired on open AND before every append) — so a crash that tore the last
+ *    row no longer glues the resume's first row onto the broken suffix (which lost that cell's row ⇒ one cell re-run at real
+ *    E2B / DeepSeek cost). No fsync (a crash loses at most the tail row ⇒ that cell stays re-runnable — the same posture as before).
+ *    The READ side ({@link readLedger}) stays PRIVATE — **registered exception, "bench CLI"**: this is a single-process offline
+ *    experiment driver, not a serving store; its ledger path comes from `--ledger`, its readers are this driver and its tests, and a
+ *    skipped (unparseable) ledger row costs one re-run of that cell — never a gate, never a tenant fact. The serving-layer replay owner
+ *    (`replayJsonlSkipping`, `observability/corrupt-read-seat.ts`) is a closed registry of census-registered seats (each one a row in
+ *    `docs/FAIL-OPEN-CENSUS.md` with an F tag in the serving telemetry); a bench seat there would register a non-serving face in the
+ *    serving census. Direction note: a parseable row with an unknown arm tag still THROWS ({@link armUpper}) — loud, not skipped.
  */
 import { Runner } from "@sema-agent/core";
 import { type Arm } from "./arms.js";

package/dist/bench/s1/run-firm.js

@@ -1,6 +1,6 @@
 import { promises as fs } from "node:fs";
 import path from "node:path";
-import { Runner, InMemoryCheckpointStore } from "@sema-agent/core";
+import { AppendLog, Runner, InMemoryCheckpointStore } from "@sema-agent/core";
 import { runArm } from "./arms.js";
 import { FIRM_TRAPS, ALL_TRAPS } from "./tasks.js";
 import { makeBenchClock } from "./runner-ctx.js";
@@ -71,9 +71,18 @@ function armUpper(tag) {
             throw new Error(`s1 run-firm: unknown arm tag ${JSON.stringify(tag)} in ledger row (expected solo|sup|team)`);
     }
 }
-async function appendLedger(ledgerPath, rec) {
-    await fs.mkdir(path.dirname(ledgerPath), { recursive: true });
-    await fs.appendFile(ledgerPath, JSON.stringify(rec) + "\n", "utf8");
+function createLedgerWriter(ledgerPath) {
+    let log;
+    return {
+        append(rec) {
+            log ??= new AppendLog(ledgerPath);
+            log.append(rec, false);
+        },
+        close() {
+            log?.close();
+            log = undefined;
+        },
+    };
 }
 function withTimeout(p, ms, label) {
     return new Promise((resolve, reject) => {
@@ -121,35 +130,41 @@ export async function runFirm(opts) {
     const { done } = await readLedger(opts.ledgerPath);
     const ctx = { budget: opts.budget, clock: makeBenchClock(1_000_000), runId: opts.runId, gitSha: opts.gitSha };
     let ranThisPass = 0;
-    for (const cell of cells) {
-        const key = cellKeyStr(cell);
-        if (done.has(key)) {
-            log("cell_skip_done", { key });
-            continue;
-        }
-        log("cell_start", { key });
-        const cellId = `${opts.runId}-${cell.taskId}-${armTag(cell.arm)}-${String(cell.seed)}`;
-        let built;
-        let row;
-        try {
-            built = opts.mockDepsFactory
-                ? opts.mockDepsFactory(cell.trap, cell.seed, cellId)
-                : buildLiveCellOrThrow(opts, cell.trap, cell.seed, cellId);
-            const supStore = cell.arm === "SUP" ? new InMemoryCheckpointStore() : undefined;
-            row = await withTimeout(runArm(cell.arm, cell.trap, cell.seed, ctx, built.deps, supStore), cellTimeoutMs, key);
-        }
-        catch (e) {
-            log("cell_infra_failed", { key, error: e instanceof Error ? e.message : String(e) });
-            row = infraFailedRow(cell, ctx);
-        }
-        finally {
-            await built?.dispose().catch(() => { });
+    const ledger = createLedgerWriter(opts.ledgerPath);
+    try {
+        for (const cell of cells) {
+            const key = cellKeyStr(cell);
+            if (done.has(key)) {
+                log("cell_skip_done", { key });
+                continue;
+            }
+            log("cell_start", { key });
+            const cellId = `${opts.runId}-${cell.taskId}-${armTag(cell.arm)}-${String(cell.seed)}`;
+            let built;
+            let row;
+            try {
+                built = opts.mockDepsFactory
+                    ? opts.mockDepsFactory(cell.trap, cell.seed, cellId)
+                    : buildLiveCellOrThrow(opts, cell.trap, cell.seed, cellId);
+                const supStore = cell.arm === "SUP" ? new InMemoryCheckpointStore() : undefined;
+                row = await withTimeout(runArm(cell.arm, cell.trap, cell.seed, ctx, built.deps, supStore), cellTimeoutMs, key);
+            }
+            catch (e) {
+                log("cell_infra_failed", { key, error: e instanceof Error ? e.message : String(e) });
+                row = infraFailedRow(cell, ctx);
+            }
+            finally {
+                await built?.dispose().catch(() => { });
+            }
+            ledger.append(row);
+            ranThisPass++;
+            if (row.runStatus !== "infra-failed")
+                done.add(key);
+            log("cell_done", { key, runStatus: row.runStatus });
         }
-        await appendLedger(opts.ledgerPath, row);
-        ranThisPass++;
-        if (row.runStatus !== "infra-failed")
-            done.add(key);
-        log("cell_done", { key, runStatus: row.runStatus });
+    }
+    finally {
+        ledger.close();
     }
     const { records } = await readLedger(opts.ledgerPath);
     const lastByKey = new Map();

package/dist/boot/coordinators.js

@@ -41,7 +41,7 @@ export function createLiveCoordinators(ctx) {
         });
     }
     const approvalAskAudit = config.toolApprovalEnabled && backend?.kind === "local" && config.localDataRoot !== undefined
-        ? new FileApprovalAskAuditStore(config.localDataRoot)
+        ? new FileApprovalAskAuditStore(config.localDataRoot, { warn: (event, fields) => logger.warn(event, fields) })
         : undefined;
     if (approvalAskAudit) {
         const converged = approvalAskAudit.convergeCrashedAsks();

package/dist/boot/session-faces.d.ts

@@ -12,6 +12,7 @@ import { SessionWatchRegistry } from "../session-watch.js";
 import type { TaskListLane } from "./task-list-lane.js";
 import { type RunnerDeps } from "@sema-agent/core";
 import type { MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
+import type { UserInputLedgerStore } from "../user-input-ledger.js";
 export interface SessionFacesCtx {
     config: ServiceConfig;
     logger: Logger;
@@ -43,6 +44,9 @@ export interface SessionFacesCtx {
     /** S-790 件B:后台子代的耐久店(与 `RunnerDeps.backgroundAgentStore` 同实例)—— 删除协调器据它枚举以本会话为根的子代并结束
      *  它们(E21 级联的一条腿,做完才删元数据)。缺席 = 本部署没有耐久后台子代(纯内存 dev);那一形只剩本进程登记表里的活行,照样停。 */
     backgroundAgentStore: RunnerDeps["backgroundAgentStore"];
+    /** S-965:用户输入受理账本的**店**(E21 级联的一条腿:该会话的受理行随会话删)。与受理 / 收敛 / 告知读的是同一只(stage-07 取一次)。
+     *  缺席 = 本部署没装账本(env-only:没有 backend / run 店)⇒ 无行可删。 */
+    userInputLedgerStore: UserInputLedgerStore | undefined;
 }
 export declare function createSessionFaces(ctx: SessionFacesCtx): {
     ownerAware: OwnerAwareSessionStore;

package/dist/boot/session-faces.js

@@ -8,7 +8,7 @@ import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 import { reapSessionBackgroundHard } from "../background-session-reap.js";
 import { probeSessionChildren, retireSessionChildren, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -78,6 +78,8 @@ export function createSessionFaces(ctx) {
                 await sessionPolicyStore.deleteBySession(sessionId);
             if (taskAttachmentStore)
                 await taskAttachmentStore.deleteBySession(sessionId);
+            if (userInputLedgerStore)
+                await userInputLedgerStore.deleteBySession(sessionId);
             if (taskListLane)
                 await taskListLane.deleteBySession(sessionId);
             if (deviceStore)

package/dist/boot/stage-07-capability-layer.d.ts

@@ -24,6 +24,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     };
     taskTimeoutSec: number;
     userInputLedger: import("../user-input-ledger.js").UserInputLedger | undefined;
+    userInputLedgerStore: import("../user-input-ledger.js").UserInputLedgerStore | undefined;
     webSearchProvider: "brave" | "tavily" | "searxng" | undefined;
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -51,10 +51,11 @@ export async function runStage07(ctx) {
     if (gateRefusal !== undefined)
         throw new Error(gateRefusal);
     await reclaimOrphansAtBoot(runStore, checkpointStore, logger);
-    const userInputLedger = backend && runStore
+    const userInputLedgerStore = backend && runStore ? backend.userInputLedger() : undefined;
+    const userInputLedger = backend && runStore && userInputLedgerStore
         ? await (async () => {
             const { ledger, converged } = await createUserInputLedgerAtBoot({
-                store: backend.userInputLedger(),
+                store: userInputLedgerStore,
                 writer: instanceId,
                 evidence: writerGoneEvidenceFor(backend.kind, runStore),
                 newId: uuidv7,
@@ -170,6 +171,6 @@ export async function runStage07(ctx) {
     const builtinScenarioNames = Object.keys(scenarioDetails);
     configCenter.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
     logger.info("capabilities", { skills: skills.length, scenarios: Object.keys(scenarios), repoTools: Boolean(repoClient) });
-    return { ...ctx, approvalExemptionStore, approvalNonceStore, authorize, imageBakes, imageIndex, parkedReviveInheritedGate, parkedReviveSurface, rateLimiter, resumeAnchorStore, runStore, scenarioDetails, scenarios, selectEnvTool, taskLimitCaps, taskTimeoutSec, userInputLedger, webSearchProvider: webSearchCfg?.provider };
+    return { ...ctx, approvalExemptionStore, approvalNonceStore, authorize, imageBakes, imageIndex, parkedReviveInheritedGate, parkedReviveSurface, rateLimiter, resumeAnchorStore, runStore, scenarioDetails, scenarios, selectEnvTool, taskLimitCaps, taskTimeoutSec, userInputLedger, userInputLedgerStore, webSearchProvider: webSearchCfg?.provider };
 }
 //# sourceMappingURL=stage-07-capability-layer.js.map

package/dist/boot/stage-08-reapers.d.ts

@@ -37,6 +37,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     };
     taskTimeoutSec: number;
     userInputLedger: import("../user-input-ledger.js").UserInputLedger | undefined;
+    userInputLedgerStore: import("../user-input-ledger.js").UserInputLedgerStore | undefined;
     webSearchProvider: "brave" | "tavily" | "searxng" | undefined;
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;

package/dist/boot/stage-09-leader.d.ts

@@ -73,6 +73,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     };
     taskTimeoutSec: number;
     userInputLedger: import("../user-input-ledger.js").UserInputLedger | undefined;
+    userInputLedgerStore: import("../user-input-ledger.js").UserInputLedgerStore | undefined;
     webSearchProvider: "brave" | "tavily" | "searxng" | undefined;
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;

package/dist/boot/stage-09-leader.js

@@ -6,7 +6,7 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
@@ -14,6 +14,7 @@ export function runStage09(ctx) {
         resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure,
         workflowCompletionInbox, taskListLane, mailboxStore, mailboxRecipientLifecycle,
         backgroundAgentStore,
+        userInputLedgerStore,
     });
     const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });
     const drainState = { draining: false };

package/dist/boot/stage-10-http-server.d.ts

@@ -73,6 +73,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     };
     taskTimeoutSec: number;
     userInputLedger: import("../user-input-ledger.js").UserInputLedger | undefined;
+    userInputLedgerStore: import("../user-input-ledger.js").UserInputLedgerStore | undefined;
     webSearchProvider: "brave" | "tavily" | "searxng" | undefined;
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;

package/dist/boot/workflow-orchestration.js

@@ -20,7 +20,7 @@ export function createWorkflowOrchestration(ctx) {
                 }))
         : undefined;
     const workflowNotifyJournal = config.selfOrchestrationEnabled && config.workflowRunStoreBackend !== "memory"
-        ? (sqlWorkflowRunStore ? backend.notifyJournal() : new FileWorkflowNotifyJournalStore(join(config.localDataRoot ?? localRoot, "workflows")))
+        ? (sqlWorkflowRunStore ? backend.notifyJournal() : new FileWorkflowNotifyJournalStore(join(config.localDataRoot ?? localRoot, "workflows"), undefined, (msg, meta) => logger.warn(msg, meta)))
         : undefined;
     const workflowCompletionInbox = config.selfOrchestrationEnabled
         ? config.workflowRunStoreBackend === "memory"

package/dist/http/resume-legs.js

@@ -20,6 +20,7 @@ import { buildCheckpointAnchorHash } from "../approval-ask-audit-store.js";
 import { TERMINAL_PARK_GATE_KINDS } from "../plugins/checkpoint-store-sql.js";
 import { withPrincipal } from "../observability/principal-context.js";
 import { withModelReachScope } from "../model-reach-scope.js";
+import { createInstructionSelectionLeg } from "../instruction-selection.js";
 import { modelTextEventData, turnEndEventData, contextUsageEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, appendModelUsageDelta, appendPromptManifest, attachModelUsage } from "../trace/project.js";
 import { redactSecrets } from "../trace/redact.js";
 import { createLedgerSink, createSerialLedgerAppend } from "../trace/ledger-sink.js";
@@ -503,7 +504,8 @@ export function createResumeLegs(ctx) {
             await args.onResumeCommitted();
         let unregisterEngineNotice;
         try {
-            result = await withModelReachScope(sessionId, () => withPrincipal(principal, async () => {
+            const instructionLeg = createInstructionSelectionLeg();
+            result = await instructionLeg.run(sessionId, () => withModelReachScope(sessionId, () => withPrincipal(principal, async () => {
                 const resumeNotifiedKeys = new NotifiedKeys();
                 if (deps.runStore && taskId) {
                     const rs0 = deps.runStore;
@@ -526,6 +528,7 @@ export function createResumeLegs(ctx) {
                         persistThinking: deps.config.traceThinking,
                         notifiedKeys: resumeNotifiedKeys,
                         ...(taskId ? { onActivity: () => recordTurnActivity(taskId) } : {}),
+                        instructionsSegment: instructionLeg.segment,
                     });
                     const vAppend = (type, data) => verifySink.append(type, data);
                     const verifyTailContentMode = resumeTaskConfig.forwardSubagentEvents === true ? "on" : "progress_only";
@@ -771,7 +774,7 @@ export function createResumeLegs(ctx) {
                                 break;
                             case "wiring_manifest":
                                 await flush();
-                                await append("wiring_manifest", wiringManifestEventData(ev));
+                                await append("wiring_manifest", wiringManifestEventData(ev, instructionLeg.segment()));
                                 break;
                             case "tool_roster_delta": {
                                 await flush();
@@ -875,7 +878,7 @@ export function createResumeLegs(ctx) {
                 return await (deps.sendUserFile && taskId
                     ? deps.sendUserFile.runWithContext({ taskId, emit: async (frame) => { const { type, ...rest } = frame; await append(type, rest); } }, withElicitation)
                     : withElicitation());
-            }));
+            })));
         }
         catch (e) {
             if (e instanceof CheckpointError) {

package/dist/http/routes/runs.js

@@ -1155,6 +1155,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
         }
         const handle = resolution?.handle;
         if (handle) {
+            let acceptance;
             try {
                 if (verb === "resume") {
                     if (!handle.resume) {
@@ -1170,11 +1171,23 @@ export async function handleRunVerbs(req, res, match, ctx) {
                     sendJson(res, 200, { taskId: runId, target, status: "running", delivery: "applied", marker, note: `Message queued for delivery to ${handle.agentName ?? target}; it will continue in the background.` });
                     return;
                 }
+                const messageId = uuidv7();
+                const accepted = await acceptLiveUserInput(deps, res, { messageId, sessionId: run.sessionId, taskId: runId, leg: handle });
+                if (accepted === "refused")
+                    return;
+                acceptance = accepted;
                 const marker = await handle.steer(redacted);
-                sendJson(res, 200, { taskId: runId, target, status: "running", delivery: "applied", marker, note: `Message queued for delivery to ${handle.agentName ?? target} at its next tool round.` });
+                if (acceptance !== undefined) {
+                    const ledger = deps.userInputLedger;
+                    const settle = () => ledger.settleLeg(handle);
+                    void handle.settled.then(settle, settle);
+                }
+                sendJson(res, 200, { taskId: runId, target, status: "running", delivery: "applied", messageId, marker, note: `Message queued for delivery to ${handle.agentName ?? target} at its next tool round.` });
                 return;
             }
             catch (e) {
+                if (acceptance !== undefined)
+                    await deps.userInputLedger.withdraw(acceptance);
                 const code = e.code;
                 if (code === "steering.not_running") {
                     send409(code, "sub-agent just finished — no longer accepting steers");