@sema-agent/server 7.110.0 → 7.112.0

package/dist/http/admission.js

@@ -7,7 +7,7 @@ import { taskBodyKeyIssue } from "../request-key-closure.js";
 import { FILE_HISTORY_DISABLED_NO_RESTORE, fileHistoryRestoreConflict, inheritEnvFieldIssue, singleMemberOffFieldIssue } from "../request-value-closure.js";
 import { selfOrchestrationDenial } from "../task-workflow.js";
 import { centerEntitlementSourceWired } from "../runtime-caps-resolver.js";
-import { parseHooksConfig } from "../hooks/hook-runner.js";
+import { deadToolMatcherIssue, parseHooksConfig } from "../hooks/hook-runner.js";
 import { judgeRequestWebSearch } from "../plugins/web-search.js";
 import { normalizeApproachNotice, unknownTaskAgentModelRef, validateTaskAgents } from "../spec-fields.js";
 import { isValidCwd, MAX_ADDITIONAL_DIRS, MAX_CWD_CHARS } from "../task-cwd.js";
@@ -200,6 +200,11 @@ export function createAdmission(ctx) {
                     sendError(res, 400, "request.field_invalid", hooksParsed.error ?? "settings.hooks: invalid shape");
                     return null;
                 }
+                const deadMatcher = deadToolMatcherIssue(hooksParsed.config);
+                if (deadMatcher !== undefined) {
+                    sendError(res, 400, "request.field_invalid", deadMatcher);
+                    return null;
+                }
             }
             {
                 const webSearchVerdict = judgeRequestWebSearch(st.webSearch);

package/dist/http/resume-legs.d.ts

@@ -7,8 +7,8 @@
  * 字节不变)。同居是第三条,也是唯一一条既保住静态序又保住 move-only 的。序由 `const` 的 TDZ 亲自执法:
  * 腿是提升的函数声明、ctx 是文件尾的 `const`,谁也不会在工厂执行期读到对方。
  *
- * ctx 字段 28 只(registry 7 + helpers 14 + deps/runnerFor/prepareSpec/finalizeTaskResult + 三只配额/租约/用量窗
- * 判据)—— 这是**如实披露**的耦合读数(设计稿 §9:把它变小是波 3 的事,本刀不承诺)。型一律从既有型派生
+ * ctx 字段 27 只(registry 6 + helpers 14 + deps/runnerFor/prepareSpec/finalizeTaskResult + 三只配额/租约/用量窗
+ * 判据;S-947 删 `cancelledViaVerb` 旁表后 28 → 27,与 `test/split-ctx-parity.test.ts` 的读数同)—— 这是**如实披露**的耦合读数(设计稿 §9:把它变小是波 3 的事,本刀不承诺)。型一律从既有型派生
  * (`RunRegistry` / `RouteHelpers` / `RouteLegs` / `ReturnType<typeof createRequestGuards>`),不手抄签名 ⇒ 不会漂。
  */
 import type { IncomingMessage } from "node:http";
@@ -17,7 +17,7 @@ import type { DecideBinding } from "./wire-types.js";
 import type { CheckpointStoreFull } from "../plugins/store-backend.js";
 import { type HostDecision } from "../host-decision.js";
 import { type PlanApprovePermissionModeAfter } from "../task-settings.js";
-import type { RouteCtxBase, DriveResumeArgs, PreparedPlanReview } from "./route-ctx.js";
+import type { RouteCtxBase, DriveResumeArgs, PreparedPlanReview, ResumeLegOutcome } from "./route-ctx.js";
 import { type TrustedRunInternals } from "./durable-run-leg.js";
 import type { RunRegistry, RouteHelpers, RouteLegs } from "./route-ctx.js";
 import type { createRequestGuards } from "./request-guards.js";
@@ -33,21 +33,12 @@ export declare function createResumeLegs(ctx: {
     }) => Promise<void>, acceptEarly?: boolean, decider?: {
         principal?: string;
         explicitOperator: boolean;
-    }) => Promise<{
-        status: number;
-        body: object;
-    }>;
-    driveResumeIntoRunLog: (args: DriveResumeArgs) => Promise<{
-        status: number;
-        body: object;
-    }>;
+    }) => Promise<ResumeLegOutcome>;
+    driveResumeIntoRunLog: (args: DriveResumeArgs) => Promise<ResumeLegOutcome>;
     driveResumeLeg: (args: DriveResumeArgs, onAccepted?: (receipt: {
         status: number;
         body: object;
-    }) => void) => Promise<{
-        status: number;
-        body: object;
-    }>;
+    }) => void) => Promise<ResumeLegOutcome>;
     mayDiscloseRowError: (cs: CheckpointStoreFull, token: CheckpointToken, decider: {
         principal?: string;
         explicitOperator: boolean;

package/dist/http/resume-legs.js

@@ -8,7 +8,7 @@ const sessionFaceUnavailable = async (sessionId) => {
 import { HttpError, decodeCheckpointScope, CHECKPOINT_PUBLIC_SCOPE } from "../security.js";
 import { evictIfConflict, parkToolCallId, TurnAnchorCapture, HEARTBEAT_MS, markChildrenStoppedByUserOnAbort } from "../runs.js";
 import { failureCodeOf, nestedPauseOf, sealResultForExit, outwardPlane } from "../terminal.js";
-import { mintCancelledResult } from "../run-cancel-context.js";
+import { buildCancelledLedgerRow, createRunAbort, mintCancelledResult } from "../run-cancel-context.js";
 import {} from "../host-decision.js";
 import { readTurnActivityMs, recordTurnActivity } from "../turn-activity.js";
 import { recordResumeResourceWindow } from "../resource-window.js";
@@ -20,6 +20,7 @@ import { buildCheckpointAnchorHash } from "../approval-ask-audit-store.js";
 import { TERMINAL_PARK_GATE_KINDS } from "../plugins/checkpoint-store-sql.js";
 import { withPrincipal } from "../observability/principal-context.js";
 import { withModelReachScope } from "../model-reach-scope.js";
+import { createInstructionSelectionLeg } from "../instruction-selection.js";
 import { modelTextEventData, turnEndEventData, contextUsageEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, appendModelUsageDelta, appendPromptManifest, attachModelUsage } from "../trace/project.js";
 import { redactSecrets } from "../trace/redact.js";
 import { createLedgerSink, createSerialLedgerAppend } from "../trace/ledger-sink.js";
@@ -74,7 +75,7 @@ function notResumableAnswer() {
     return { status: 409, body: { error: "run is not in a resumable (suspended) state (already resumed, decided, or expired)", errorCode: "conflict.not_resumable" } };
 }
 export function createResumeLegs(ctx) {
-    const { deps, runnerFor, idemCache, inflightRuns, preemptableRuns, cancelledViaVerb, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, safeDecode, isFleetWide, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite, runSessionAcceptOk, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor } = ctx;
+    const { deps, runnerFor, idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, safeDecode, isFleetWide, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite, runSessionAcceptOk, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor } = ctx;
     const resumeFleetScope = (req, auth) => req ? (gatedPrincipal(req, deps.config) ?? "default") : (auth.principal ?? "default");
     async function resumeCheckpoint(sessionId, decision, reason, hostDecision, req, answer, binding, onResumeCommitted, acceptEarly, decider) {
         const cs = deps.checkpointStore;
@@ -224,7 +225,7 @@ export function createResumeLegs(ctx) {
         const noteLateSettleIfAccepted = (out) => {
             if (lateSettleSink === undefined || lateSettleAnchor === undefined || out.status !== 200)
                 return;
-            if (out.body?.errorCode === "cancelled")
+            if (out.body?.errorCode === "cancelled" && out.decisionCommitted !== true)
                 return;
             try {
                 lateSettleSink.recordLateSettle({ ...lateSettleAnchor, outcome: decision === "approve" ? "allowed" : "denied", decidedBy: hostDecision.decidedBy, ...(hostDecision.approver !== undefined ? { approver: hostDecision.approver } : {}), settledAtMs: Date.now() });
@@ -471,7 +472,8 @@ export function createResumeLegs(ctx) {
         let resumeLegLive = false;
         const subagentHandleEvictions = [];
         let claimedRow = false;
-        const cancelCtrl = new AbortController();
+        const cancelCtrl = createRunAbort();
+        let cancelLedgerAppend;
         const preemptCtrl = new AbortController();
         if (taskId && deps.runStore) {
             claimedRow = freshRunClaimed ? true : await deps.runStore.markResuming(taskId, deps.instanceId ?? "default");
@@ -487,7 +489,7 @@ export function createResumeLegs(ctx) {
                 void rs.heartbeat(taskId, owner).catch(() => undefined);
                 if (!cancelCtrl.signal.aborted) {
                     void rs.isCancelRequested(taskId, owner).then((c) => { if (c)
-                        cancelCtrl.abort(); }).catch(() => undefined);
+                        cancelCtrl.abort("cancel_verb"); }).catch(() => undefined);
                 }
                 if (!preemptCtrl.signal.aborted) {
                     void rs.isPreemptRequested(taskId, owner).then((p) => { if (p)
@@ -503,7 +505,8 @@ export function createResumeLegs(ctx) {
             await args.onResumeCommitted();
         let unregisterEngineNotice;
         try {
-            result = await withModelReachScope(sessionId, () => withPrincipal(principal, async () => {
+            const instructionLeg = createInstructionSelectionLeg();
+            result = await instructionLeg.run(sessionId, () => withModelReachScope(sessionId, () => withPrincipal(principal, async () => {
                 const resumeNotifiedKeys = new NotifiedKeys();
                 if (deps.runStore && taskId) {
                     const rs0 = deps.runStore;
@@ -526,8 +529,10 @@ export function createResumeLegs(ctx) {
                         persistThinking: deps.config.traceThinking,
                         notifiedKeys: resumeNotifiedKeys,
                         ...(taskId ? { onActivity: () => recordTurnActivity(taskId) } : {}),
+                        instructionsSegment: instructionLeg.segment,
                     });
                     const vAppend = (type, data) => verifySink.append(type, data);
+                    cancelLedgerAppend = vAppend;
                     const verifyTailContentMode = resumeTaskConfig.forwardSubagentEvents === true ? "on" : "progress_only";
                     const verifyInternals = {
                         ...(taskId ? { onActivity: () => recordTurnActivity(taskId) } : {}),
@@ -576,7 +581,9 @@ export function createResumeLegs(ctx) {
                             : {}),
                     };
                     resumeLegLive = true;
-                    const vr = await resumeWithVerification(legRunner, token, outcome, { ...resumeTaskConfig, signal: cancelCtrl.signal, preemptSignal: preemptCtrl.signal }, resumeObjective, verifyRounds, verifyInternals);
+                    const vrEngine = await resumeWithVerification(legRunner, token, outcome, { ...resumeTaskConfig, signal: cancelCtrl.signal, preemptSignal: preemptCtrl.signal }, resumeObjective, verifyRounds, verifyInternals);
+                    const vrCause = cancelCtrl.cause();
+                    const vr = vrCause !== undefined && taskId !== undefined ? mintCancelledResult({ taskId, sessionId, startedAtMs: resumeLegStartedAt, message: "cancelled by user", engineResult: vrEngine, cause: vrCause }) : vrEngine;
                     await commitResumeCtx();
                     let safe = sealResultForExit(vr);
                     const vrNested = nestedPauseOf(vr.terminal);
@@ -619,6 +626,7 @@ export function createResumeLegs(ctx) {
                 const persistThinking = deps.config.traceThinking;
                 const serialAppend = createSerialLedgerAppend((s, type, data) => rs.appendEvent(taskId, s, type, data), startSeq);
                 const append = (type, data) => (rs && taskId ? serialAppend(type, data) : Promise.resolve());
+                cancelLedgerAppend = append;
                 unregisterEngineNotice = registerEngineNoticeLeg({
                     sessionId,
                     ...(args.engineNotices !== undefined && args.engineNotices.length > 0 ? { pending: [...args.engineNotices] } : {}),
@@ -712,7 +720,10 @@ export function createResumeLegs(ctx) {
                     if (!taskId || !rs)
                         return sealResultForExit(await stream.result());
                     onAccepted?.(acceptedResumingReceipt(taskId, sessionId));
+                    let causeAtDone;
                     for await (const ev of stream) {
+                        if (ev.type === "done")
+                            causeAtDone = cancelCtrl.cause();
                         recordTurnActivity(taskId);
                         fleetPub?.onEvent(ev);
                         await appendPromptManifest(append, deps.promptManifests, taskId);
@@ -771,7 +782,7 @@ export function createResumeLegs(ctx) {
                                 break;
                             case "wiring_manifest":
                                 await flush();
-                                await append("wiring_manifest", wiringManifestEventData(ev));
+                                await append("wiring_manifest", wiringManifestEventData(ev, instructionLeg.segment()));
                                 break;
                             case "tool_roster_delta": {
                                 await flush();
@@ -820,7 +831,8 @@ export function createResumeLegs(ctx) {
                         }
                     }
                     await flush();
-                    const r = await stream.result();
+                    const rEngine = await stream.result();
+                    const r = causeAtDone !== undefined ? mintCancelledResult({ taskId, sessionId, startedAtMs: resumeLegStartedAt, message: "cancelled by user", engineResult: rEngine, cause: causeAtDone }) : rEngine;
                     const rPark = r.terminal.kind === "paused" ? outwardPlane(r.terminal).status : undefined;
                     if (rPark === "suspended") {
                         const parkCallId = await parkToolCallId(r, deps.checkpointStore);
@@ -875,7 +887,7 @@ export function createResumeLegs(ctx) {
                 return await (deps.sendUserFile && taskId
                     ? deps.sendUserFile.runWithContext({ taskId, emit: async (frame) => { const { type, ...rest } = frame; await append(type, rest); } }, withElicitation)
                     : withElicitation());
-            }));
+            })));
         }
         catch (e) {
             if (e instanceof CheckpointError) {
@@ -895,7 +907,11 @@ export function createResumeLegs(ctx) {
                         }
                     }
                     if (claimedRow && taskId && deps.runStore) {
-                        const c = mintCancelledResult({ taskId, sessionId, startedAtMs: resumeLegStartedAt, message: e.message });
+                        const handleCause = cancelCtrl.cause();
+                        if (handleCause === undefined)
+                            recordFailOpen("server.runs.abort-cause-missing", `task=${taskId} arm=resume-aborted`);
+                        const c = mintCancelledResult({ taskId, sessionId, startedAtMs: resumeLegStartedAt, message: e.message, cause: handleCause ?? "cancel_verb" });
+                        await cancelLedgerAppend?.("failed", buildCancelledLedgerRow(c)).catch((err) => recordFailOpen("server.runs.terminal-ledger-write-failed", `arm=resume-append-resume-aborted ${errorText(err)}`));
                         await deps.runStore.setTerminal(taskId, "failed", c, e.message).catch(() => undefined);
                     }
                     settleFleet("failed");
@@ -950,9 +966,11 @@ export function createResumeLegs(ctx) {
                     },
                 };
             }
-            if (cancelCtrl.signal.aborted) {
+            const thrownCause = cancelCtrl.cause();
+            if (thrownCause !== undefined) {
                 if (taskId && deps.runStore) {
-                    const c = mintCancelledResult({ taskId, sessionId, startedAtMs: resumeLegStartedAt, message: "cancelled by user" });
+                    const c = mintCancelledResult({ taskId, sessionId, startedAtMs: resumeLegStartedAt, message: "cancelled by user", cause: thrownCause });
+                    await cancelLedgerAppend?.("failed", buildCancelledLedgerRow(c)).catch((err) => recordFailOpen("server.runs.terminal-ledger-write-failed", `arm=resume-append-thrown-cancel ${errorText(err)}`));
                     await deps.runStore.setTerminal(taskId, "failed", c, "cancelled by user").catch(() => undefined);
                 }
                 settleFleet("failed");
@@ -999,6 +1017,7 @@ export function createResumeLegs(ctx) {
         settleFleet(checkpointReopened ? "suspended" : resumePlane.status, fleetRunResiduals(sealed));
         return {
             status: 200,
+            decisionCommitted: true,
             body: {
                 taskId, sessionId, status: resumePlane.status,
                 bindingEnforced: true,
@@ -1298,7 +1317,7 @@ export function createResumeLegs(ctx) {
     }
     const routeCtxBase = {
         deps,
-        registry: { idemCache, inflightRuns, preemptableRuns, cancelledViaVerb, steerableRuns, wakeParkMints, counters },
+        registry: { idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters },
         helpers: { readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, safeDecode, isFleetWide, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite, runSessionAcceptOk },
         local: { images: createImagesLocal(deps), sessions: createSessionsLocal(), sessionSync: createSessionSyncLocal(), capabilities: createCapabilitiesLocal() },
         legs: { prepareSpec, finalizeTaskResult, resumeCheckpoint, driveResumeIntoRunLog, resumePreempted, resumeWake, preparePlanReview, drivePlanReview },

package/dist/http/route-ctx.d.ts

@@ -26,12 +26,15 @@ import type { SessionsLocal } from "./routes/sessions.js";
 import type { SessionSyncLocal } from "./routes/session-sync.js";
 import type { PlanApprovePermissionModeAfter } from "../task-settings.js";
 import type { VerifyRoundsSpec } from "./verify-rounds.js";
-/** 跨域可变状态 = lens1 §C2 实测的那 8 条「运行期登记簿」,一个对象。 */
+import type { RunAbort } from "../run-cancel-context.js";
+/** 跨域可变状态 = lens1 §C2 实测的那 8 条「运行期登记簿」,一个对象。
+ *  S-947:`cancelledViaVerb`(按 taskId 键控的「这次是取消动词」旁表)删除 —— 中止成因改挂在每条腿自己的
+ *  {@link RunAbort} 句柄上(`inflightRuns` 的值),同寿同删,不再有一张与腿不同寿的旁表。 */
 export interface RunRegistry {
     idemCache: IdempotencyCache<SubmitOutcome>;
-    inflightRuns: Map<string, AbortController>;
+    /** 本副本在飞的 durable 腿 → 它的中止句柄(取消动词的同副本快路在这里按 `cancel_verb` 中止它)。 */
+    inflightRuns: Map<string, RunAbort>;
     preemptableRuns: Map<string, AbortController>;
-    cancelledViaVerb: Set<string>;
     steerableRuns: Map<string, TaskStream>;
     wakeParkMints: Map<string, Promise<void>>;
     /** 裸 number 的登记簿(`let` 拆不出闭包)—— 装进盒子才能跨模块自增/自减。 */
@@ -380,15 +383,9 @@ export interface RouteLegs {
     decider?: {
         principal?: string;
         explicitOperator: boolean;
-    }): Promise<{
-        status: number;
-        body: object;
-    }>;
+    }): Promise<ResumeLegOutcome>;
     /** 全 resume 家族的共同下半场(lease admission + 写 run log + fleet 发布)。 */
-    driveResumeIntoRunLog(args: DriveResumeArgs): Promise<{
-        status: number;
-        body: object;
-    }>;
+    driveResumeIntoRunLog(args: DriveResumeArgs): Promise<ResumeLegOutcome>;
     /** assistant 抢占腿的复位(gate-kind 守卫 + 行级属主复核 + 驱动)。 */
     resumePreempted(sessionId: string, req: IncomingMessage | undefined, 
     /** [ref] 件 S-1:透传给 {@link DriveResumeArgs.acceptEarly}(200 受理语义)。HTTP `/resume` 腿传 `true`。 */
@@ -628,6 +625,26 @@ export type RouteDecl = RouteDispatchDecl | RouteGateDecl;
  * 两臂逐字节同形,指路价值不丢。钉=audit-fixes-http「[ref]」格(两臂全文比对);文案变更走
  * api-error-text-freeze 基线流程。
  */
+/**
+ * resume 家族一条腿的结局:HTTP 应答(`status` / `body`)+ 一位**进程内**事实(不上 wire)。
+ *
+ * `decisionCommitted` —— **这条腿的终局是在引擎受理了这次决定之后才结出来的**([ref] X5,7.112.0):本腿走到了「引擎交回结果」那一步
+ * (`resumeStream` / `resumeWithVerification` 解析 = core 的全部 pre-CAS 门 + checkpoint resolve CAS 都过了 —— 受理点的判据属主
+ * = {@link DriveResumeArgs.acceptEarly} 顶注),之后才收场。只由 `driveResumeLeg` 走完引擎那一步的终局出口铸;`CheckpointError` 臂、
+ * 「中止抛穿」臂、一切 4xx / 拒绝出口一律**不铸**(缺席 ⇒ 证不出提交,读者按「没提交」读 —— fail-closed)。
+ *
+ * 读者:`/decide` 的两道「这次决定提交了没有」门 —— [ref] 迟到结算留痕(`noteLateSettleIfAccepted`)与 remember 豁免落店
+ * (`routes/approvals-assistant.ts`)。它们原先只读 wire 体的 `errorCode !== "cancelled"`(「取消 = 决定没提交」),S-947 给续跑腿补了
+ * 「引擎受理之后才被取消」的取消终局之后,`cancelled` 不再等价「没提交」⇒ 两门改读本位:`200 ∧ (errorCode≠cancelled ∨ decisionCommitted)`。
+ * 🔴 为什么不放进 `result.cancelContext`(主会话初稿的落点):那只快照的契约是「分诊材料,不是状态机输入:任何门 / CAS / resume 判定都不许
+ * 读它」(`plugins/store-contracts.ts` `RunCancelContext` 顶注)—— 这两道门正是判定;而且门读的是 `/decide` 的平面体、看不到结果对象。
+ * 受理与否是腿自己的控制流事实,在腿上说,零 wire 变更。
+ */
+export interface ResumeLegOutcome {
+    status: number;
+    body: object;
+    decisionCommitted?: true;
+}
 /**
  * **「决定/续跑已受理」那一枚 200 收据的单一铸点**(S-218)。
  *

package/dist/http/routes/approvals-assistant.js

@@ -764,7 +764,7 @@ export async function handleApprovalsAssistant(req, res, match, ctx) {
                 : undefined;
             const out = await resumeCheckpoint(sessionId, decision, body.reason ?? undefined, hostDecisionFacts(settledBy, deciderPrincipal), req, answer, binding, grantOnCommit, true, { principal: deciderPrincipal, explicitOperator });
             const outErrorCode = out.body.errorCode;
-            if (pendingGrant !== undefined && out.status === 200 && outErrorCode !== "cancelled" && deps.approvalExemptionStore) {
+            if (pendingGrant !== undefined && out.status === 200 && (outErrorCode !== "cancelled" || out.decisionCommitted === true) && deps.approvalExemptionStore) {
                 try {
                     await deps.approvalExemptionStore.grant(pendingGrant.sessionId, pendingGrant.toolName, deciderPrincipal ?? null);
                     rememberApplied = true;

package/dist/http/routes/runs.js

@@ -148,7 +148,7 @@ async function acceptLiveUserInput(deps, res, at) {
 }
 export async function handleRuns(req, res, match, ctx) {
     const { deps } = ctx;
-    const { idemCache, inflightRuns, preemptableRuns, cancelledViaVerb, steerableRuns, wakeParkMints } = ctx.registry;
+    const { idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints } = ctx.registry;
     const { readJson, rateLimited, quotaExceeded, leaseDenied, usageWindowDenied, runOwnerOk, runSessionAcceptOk } = ctx.helpers;
     const { prepareSpec } = ctx.legs;
     const source = ctx.req.source;
@@ -319,7 +319,7 @@ export async function handleRuns(req, res, match, ctx) {
             }
             const err = note;
             try {
-                const result = mintCancelledResult({ taskId, sessionId: run.sessionId, startedAtMs: Date.parse(run.createdAt), message: err });
+                const result = mintCancelledResult({ taskId, sessionId: run.sessionId, startedAtMs: Date.parse(run.createdAt), message: err, cause: "cancel_verb" });
                 let lastErr;
                 for (let attempt = 0;; attempt++) {
                     try {
@@ -368,10 +368,7 @@ export async function handleRuns(req, res, match, ctx) {
                 sendJson(res, 202, { taskId, status: now?.status ?? "failed", cancelRequested: now?.cancelRequested ?? false, note: "run already terminal — cancel is a no-op" });
                 return;
             }
-            if (inflightRuns.has(taskId)) {
-                cancelledViaVerb.add(taskId);
-                inflightRuns.get(taskId).abort();
-            }
+            inflightRuns.get(taskId)?.abort("cancel_verb");
             sendJson(res, 202, { taskId, status: "cancelling", cancelRequested: true });
         }
         else if (isParkedRunStatus(run.status)) {
@@ -1155,6 +1152,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
         }
         const handle = resolution?.handle;
         if (handle) {
+            let acceptance;
             try {
                 if (verb === "resume") {
                     if (!handle.resume) {
@@ -1170,11 +1168,23 @@ export async function handleRunVerbs(req, res, match, ctx) {
                     sendJson(res, 200, { taskId: runId, target, status: "running", delivery: "applied", marker, note: `Message queued for delivery to ${handle.agentName ?? target}; it will continue in the background.` });
                     return;
                 }
+                const messageId = uuidv7();
+                const accepted = await acceptLiveUserInput(deps, res, { messageId, sessionId: run.sessionId, taskId: runId, leg: handle });
+                if (accepted === "refused")
+                    return;
+                acceptance = accepted;
                 const marker = await handle.steer(redacted);
-                sendJson(res, 200, { taskId: runId, target, status: "running", delivery: "applied", marker, note: `Message queued for delivery to ${handle.agentName ?? target} at its next tool round.` });
+                if (acceptance !== undefined) {
+                    const ledger = deps.userInputLedger;
+                    const settle = () => ledger.settleLeg(handle);
+                    void handle.settled.then(settle, settle);
+                }
+                sendJson(res, 200, { taskId: runId, target, status: "running", delivery: "applied", messageId, marker, note: `Message queued for delivery to ${handle.agentName ?? target} at its next tool round.` });
                 return;
             }
             catch (e) {
+                if (acceptance !== undefined)
+                    await deps.userInputLedger.withdraw(acceptance);
                 const code = e.code;
                 if (code === "steering.not_running") {
                     send409(code, "sub-agent just finished — no longer accepting steers");

package/dist/http/routes/tasks.d.ts

@@ -11,8 +11,9 @@
  *   · {@link handleTasksBody} 内的 `runStreamSubmitLeg` —— plain-stream 腿(原 703 行匿名体);
  *   · `runSyncSubmitLeg` —— 同步腿(原 128 行匿名体);
  *   · 同步腿内 `verifyLeg` / `cascadeLeg` / `plainLeg` —— 三条模型驱动腿,判别顺序与短路语义逐字不变。
- * 提名**只改名字不改行为**:闭包捕获的自由变量、语句顺序、`cancelledViaVerb` 的 first-writer-wins 取值时点
- * ([1.207 codex H2]:在 `inflightRuns` 身份守卫内先取后删)、settle/registry 生命周期注释全部随代码原样迁移。
+ * 提名**只改名字不改行为**:闭包捕获的自由变量、语句顺序、settle/registry 生命周期注释全部随代码原样迁移。
+ * (S-947 起「这次是不是被 server 中止、为什么」读每腿自己的中止句柄 `RunAbort`,不再有按 taskId 键控的
+ * `cancelledViaVerb` 旁表与它「身份守卫内先取后删」的取值时点。)
  *
  * 与 runs 域共用 `ctx.legs.prepareSpec`(读体/校验/建 spec 的同一条前段)。
  */