@sema-agent/server 7.111.0 → 7.113.0

package/dist/http/routes/sessions.js

@@ -9,7 +9,7 @@ import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, MAX_SETTINGS_PERMISSION_RULES, MAX_SET
 import { readWritableSessionPermissionRules, describeSessionPermissionRulesProblem } from "../../session-policy-wire.js";
 import { sendJson, sendError, sendSessionError, sendSessionPolicyError, sseHeaders } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, runOwnerReadable, sendPrincipalRefusal, sendUnauthorized } from "../principal-gate.js";
-import { assertNever } from "../route-ctx.js";
+import { assertNever, SESSION_NOT_FOUND_MESSAGE } from "../route-ctx.js";
 import { rosterAgentId } from "./agents-roster.js";
 const MCP_STATUS_TTL_MS = 5_000;
 const MCP_MATERIALIZE_TIMEOUT_MS = 10_000;
@@ -68,15 +68,15 @@ async function readLastLegMcp(deps, sessionId, principal) {
 export async function handleSessions(req, res, match, ctx) {
     const { deps } = ctx;
     const { readJson, safeDecode, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite } = ctx.helpers;
-    const readOwnedSessionView = async (sessionAudit, sessionId, notFoundForm) => {
+    const readOwnedSessionView = async (sessionAudit, sessionId) => {
         const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
         if (ownerOf !== undefined) {
             const owner = await ownerOf(sessionId);
             if (owner === undefined) {
-                sendError(res, 404, "not_found.session", "session not found");
+                sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                 return undefined;
             }
-            if (!runOwnerOk(req, res, owner, notFoundForm))
+            if (!runOwnerOk(req, res, owner, "session"))
                 return undefined;
         }
         let audit;
@@ -89,10 +89,10 @@ export async function handleSessions(req, res, match, ctx) {
             throw new Error(`session view read failed before ownership could be established: ${e instanceof Error ? e.message : String(e)}`, { cause: e });
         }
         if (!audit) {
-            sendError(res, 404, "not_found.session", "session not found");
+            sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
             return undefined;
         }
-        if (!runOwnerOk(req, res, audit.owner, notFoundForm))
+        if (!runOwnerOk(req, res, audit.owner, "session"))
             return undefined;
         return audit;
     };
@@ -261,21 +261,21 @@ export async function handleSessions(req, res, match, ctx) {
             if (getHead) {
                 const head = await getHead(headSession);
                 if (head === undefined) {
-                    sendError(res, 404, "not_found.session", "session not found");
+                    sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                     return;
                 }
                 owner = head.owner;
-                if (!runOwnerOk(req, res, owner ?? null))
+                if (!runOwnerOk(req, res, owner ?? null, "session"))
                     return;
                 leafId = head.leafId;
             }
             else {
                 owner = await ownerOf(headSession);
                 if (owner === undefined) {
-                    sendError(res, 404, "not_found.session", "session not found");
+                    sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                     return;
                 }
-                if (!runOwnerOk(req, res, owner ?? null))
+                if (!runOwnerOk(req, res, owner ?? null, "session"))
                     return;
                 leafId = await getLeafId(headSession);
             }
@@ -355,10 +355,10 @@ export async function handleSessions(req, res, match, ctx) {
                 }
                 if (owner === undefined) {
                     cleanup();
-                    sendError(res, 404, "not_found.session", "session not found");
+                    sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                     return;
                 }
-                if (!runOwnerOk(req, res, owner ?? null)) {
+                if (!runOwnerOk(req, res, owner ?? null, "session")) {
                     cleanup();
                     return;
                 }
@@ -498,7 +498,7 @@ export async function handleSessions(req, res, match, ctx) {
                 sendError(res, 501, "capability.memory_engine_required", "memory provenance and erasure are not available on this deployment — they require a wired memory engine (MEMORY_ENGINE=on) whose backend owns the engine control plane (controlPlaneRoot); the file memory backend does, the pg/tidb memory backends do not (their control plane would land on a replica's local disk)");
                 return;
             }
-            if ((await readOwnedSessionView(deps.sessionAudit, sessionId, "session")) === undefined)
+            if ((await readOwnedSessionView(deps.sessionAudit, sessionId)) === undefined)
                 return;
             const faces = deps.memoryCompliance;
             if (faces === undefined) {
@@ -550,7 +550,7 @@ export async function handleSessions(req, res, match, ctx) {
                 sendError(res, 501, "capability.memory_engine_required", "session memory status is not available on this deployment — it requires a wired memory engine (MEMORY_ENGINE=on) whose backend owns the engine control plane (controlPlaneRoot); the file memory backend does, the pg/tidb memory backends do not (their control plane would land on a replica's local disk)");
                 return;
             }
-            if ((await readOwnedSessionView(deps.sessionAudit, sessionId, "session")) === undefined)
+            if ((await readOwnedSessionView(deps.sessionAudit, sessionId)) === undefined)
                 return;
             const face = deps.sessionMemoryStatus;
             if (face === undefined) {
@@ -594,7 +594,7 @@ export async function handleSessions(req, res, match, ctx) {
                 sendError(res, 404, "not_found.route", "not found");
                 return;
             }
-            const audit = await readOwnedSessionView(deps.sessionAudit, match.params.sessionId, "run");
+            const audit = await readOwnedSessionView(deps.sessionAudit, match.params.sessionId);
             if (audit === undefined)
                 return;
             const q = new URLSearchParams(match.search);
@@ -665,17 +665,17 @@ export async function handleSessions(req, res, match, ctx) {
             }
             const owner = await ownerOf(sourceId);
             if (owner === undefined) {
-                sendError(res, 404, "not_found.session", "session not found");
+                sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                 return;
             }
             if (!scope.fleetWide && owner !== scope.gateOwner && !legacyUnownedSessionOk(deps.config.requirePrincipal, scope.gateOwner, owner)) {
-                sendError(res, 404, "not_found.session", "session not found");
+                sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                 return;
             }
             const newOwner = scope.fleetWide ? (owner ?? null) : scope.gateOwner;
             const newId = await fork(sourceId, newOwner);
             if (newId === null) {
-                sendError(res, 404, "not_found.session", "session not found");
+                sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                 return;
             }
             sendJson(res, 200, { sessionId: newId });
@@ -747,7 +747,7 @@ export async function handleSessions(req, res, match, ctx) {
             }
             const owner = await ownerOf(sessionId);
             if (owner === undefined) {
-                sendError(res, 404, "not_found.session", "session not found");
+                sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                 return;
             }
             if (owner === null) {
@@ -756,7 +756,7 @@ export async function handleSessions(req, res, match, ctx) {
             }
             const operator = explicitOperatorOk(principal, deps.config.operatorPrincipals);
             if (!operator && owner !== (principal ?? null)) {
-                sendError(res, 404, "not_found.session", "session not found");
+                sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                 return;
             }
             const target = owner;

package/dist/http/routes/tasks.d.ts

@@ -11,8 +11,9 @@
  *   · {@link handleTasksBody} 内的 `runStreamSubmitLeg` —— plain-stream 腿(原 703 行匿名体);
  *   · `runSyncSubmitLeg` —— 同步腿(原 128 行匿名体);
  *   · 同步腿内 `verifyLeg` / `cascadeLeg` / `plainLeg` —— 三条模型驱动腿,判别顺序与短路语义逐字不变。
- * 提名**只改名字不改行为**:闭包捕获的自由变量、语句顺序、`cancelledViaVerb` 的 first-writer-wins 取值时点
- * ([1.207 codex H2]:在 `inflightRuns` 身份守卫内先取后删)、settle/registry 生命周期注释全部随代码原样迁移。
+ * 提名**只改名字不改行为**:闭包捕获的自由变量、语句顺序、settle/registry 生命周期注释全部随代码原样迁移。
+ * (S-947 起「这次是不是被 server 中止、为什么」读每腿自己的中止句柄 `RunAbort`,不再有按 taskId 键控的
+ * `cancelledViaVerb` 旁表与它「身份守卫内先取后删」的取值时点。)
  *
  * 与 runs 域共用 `ctx.legs.prepareSpec`(读体/校验/建 spec 的同一条前段)。
  */

package/dist/http/routes/tasks.js

@@ -10,7 +10,7 @@ import { emitPendingWorkflowCompletions, taskNotificationInboxEntry, taskNotific
 import { createLedgerSink } from "../../trace/ledger-sink.js";
 import { registerEngineNoticeLeg } from "../../trace/engine-notice-wire.js";
 import { clearTurnActivity, readTurnActivityMs, recordTurnActivity } from "../../turn-activity.js";
-import { mintCancelledResult } from "../../run-cancel-context.js";
+import { buildCancelledLedgerRow, createRunAbort, mintCancelledResult } from "../../run-cancel-context.js";
 import { recordResourceWindow } from "../../resource-window.js";
 import { redactSecrets } from "../../trace/redact.js";
 import { contextUsageEventData, turnEndEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestFaceEventData, toolRosterDeltaEventData, toolProgressEventData, toolDisclosureEventData, humanInputEventData, appendModelUsageDelta, attachModelUsage, textEndEventData, liveIdentityFields } from "../../trace/project.js";
@@ -57,7 +57,7 @@ function sendSubmitResult(res, resp) {
 const MULTI_ATTEMPT_NO_EVENT_CHANNEL_NOTICE = "verify / cascade ran with their normal multi-attempt semantics, but the synchronous /v1/tasks endpoint has no event channel — no status/progress frames exist to replay on this shape. For status / progress / delegated-child frames and the terminal done, submit via POST /v1/runs and read GET /v1/runs/:id/events; note that verify / cascade legs carry no per-turn stream there either (no wiring_manifest / text / turn_end frames — the engine runs those legs as result-returning attempts).";
 export async function handleTasks(req, res, match, ctx) {
     const { deps } = ctx;
-    const { idemCache, inflightRuns, cancelledViaVerb, steerableRuns, counters } = ctx.registry;
+    const { idemCache, inflightRuns, steerableRuns, counters } = ctx.registry;
     const { rateLimited, quotaExceeded, leaseDenied, usageWindowDenied } = ctx.helpers;
     const { prepareSpec, finalizeTaskResult } = ctx.legs;
     const reqState = ctx.req;
@@ -136,7 +136,7 @@ export async function handleTasks(req, res, match, ctx) {
             if (earlyDurableTid) {
                 res.write(`event: meta\ndata: ${JSON.stringify({ type: "meta", taskId: earlyDurableTid, ...(prepared.spec.sessionId ? { sessionId: prepared.spec.sessionId } : {}) })}\n\n`);
             }
-            const ac = new AbortController();
+            const ac = createRunAbort();
             let closed = false;
             let detachLogged = false;
             let disconnectParkGrace;
@@ -158,14 +158,14 @@ export async function handleTasks(req, res, match, ctx) {
                         deps.logger?.info("stream_disconnect_ask_parked", { taskId: earlyDurableTid, sessionId: prepared.spec.sessionId, asks: parked, graceMs: DISCONNECT_PARK_GRACE_MS });
                         disconnectParkGrace = setTimeout(() => {
                             closed = true;
-                            ac.abort();
+                            ac.abort("ask_park_grace_exhausted");
                         }, DISCONNECT_PARK_GRACE_MS);
                         disconnectParkGrace.unref?.();
                         return;
                     }
                 }
                 closed = true;
-                ac.abort();
+                ac.abort("client_disconnected");
             };
             req.on("close", onDisconnect);
             res.on("close", () => {
@@ -213,13 +213,7 @@ export async function handleTasks(req, res, match, ctx) {
                 let runRowSettled = false;
                 let durableTaskId;
                 let durableHeartbeat;
-                const cancelledResult = (errorMessage, engineResult) => mintCancelledResult({
-                    taskId: durableTaskId ?? "",
-                    sessionId: prepared.spec.sessionId ?? "",
-                    startedAtMs: streamLegStartedAt,
-                    message: errorMessage,
-                    ...(engineResult !== undefined ? { engineResult } : {}),
-                });
+                const cancelledResult = (errorMessage, cause) => mintCancelledResult({ taskId: durableTaskId ?? "", sessionId: prepared.spec.sessionId ?? "", startedAtMs: streamLegStartedAt, message: errorMessage, cause });
                 let userMsgEntryId;
                 let anchorPut = false;
                 const putRewindAnchor = () => {
@@ -267,10 +261,7 @@ export async function handleTasks(req, res, match, ctx) {
                     usageKey = tid;
                     deps.modelUsage?.register(tid);
                     const owner = principal ?? null;
-                    const abortFromVerb = () => {
-                        cancelledViaVerb.add(tid);
-                        ac.abort();
-                    };
+                    const abortFromVerb = () => ac.abort("cancel_verb");
                     durableHeartbeat = setInterval(() => {
                         void rs.heartbeat(tid, owner).catch(() => undefined);
                         if (!ac.signal.aborted) {
@@ -292,10 +283,8 @@ export async function handleTasks(req, res, match, ctx) {
                 catch (e) {
                     if (durableHeartbeat)
                         clearInterval(durableHeartbeat);
-                    if (durableTaskId && inflightRuns.get(durableTaskId) === ac) {
+                    if (durableTaskId && inflightRuns.get(durableTaskId) === ac)
                         inflightRuns.delete(durableTaskId);
-                        cancelledViaVerb.delete(durableTaskId);
-                    }
                     throw e;
                 }
                 let fleetSettled = false;
@@ -315,10 +304,8 @@ export async function handleTasks(req, res, match, ctx) {
                 catch (e) {
                     if (durableHeartbeat)
                         clearInterval(durableHeartbeat);
-                    if (durableTaskId && inflightRuns.get(durableTaskId) === ac) {
+                    if (durableTaskId && inflightRuns.get(durableTaskId) === ac)
                         inflightRuns.delete(durableTaskId);
-                        cancelledViaVerb.delete(durableTaskId);
-                    }
                     settleFleet("failed");
                     throw e;
                 }
@@ -430,13 +417,14 @@ export async function handleTasks(req, res, match, ctx) {
                                     sseData(res, end);
                                 if (ev.type === "message_committed" && ev.role === "user")
                                     userMsgEntryId = ev.entryId;
-                                const cancelVerbAtDone = ev.type === "done" && durableTaskId !== undefined && cancelledViaVerb.has(durableTaskId);
+                                const causeAtDone = ev.type === "done" ? ac.cause() : undefined;
+                                await deps.userInputLedger?.observeLegEvent(liveStream, ev);
                                 if (ev.type === "done") {
                                     finalResult = await mintSubmitExitResult(ev.result, deps.checkpointStore);
                                     if (durableTaskId && finalResult)
                                         finalResult = { ...finalResult, taskId: durableTaskId };
-                                    if (cancelVerbAtDone && finalResult !== undefined) {
-                                        finalResult = cancelledResult("cancelled by user", finalResult);
+                                    if (causeAtDone !== undefined && finalResult !== undefined) {
+                                        finalResult = mintCancelledResult({ taskId: durableTaskId ?? "", sessionId: prepared.spec.sessionId ?? "", startedAtMs: streamLegStartedAt, message: "cancelled by user", cause: causeAtDone, engineResult: finalResult });
                                     }
                                     finalizeTaskResult(ev.result, principal, prepared.spec.objective, prepared.spec.sessionId);
                                     noteRunOutcome(finalResult);
@@ -672,6 +660,7 @@ export async function handleTasks(req, res, match, ctx) {
                         else {
                             putRewindAnchor();
                             const pending = await deps.checkpointStore?.findPendingTokenBySession(prepared.spec.sessionId);
+                            const dcCause = ac.cause();
                             if (pending) {
                                 if (ledgerSink && !ledgerTerminal) {
                                     ledgerTerminal = true;
@@ -681,18 +670,28 @@ export async function handleTasks(req, res, match, ctx) {
                                 await deps.runStore.setSuspended(durableTaskId, null);
                                 settleFleet("suspended");
                             }
-                            else {
+                            else if (dcCause !== undefined) {
                                 const dcErr = "stream client disconnected before completion (run aborted)";
-                                const dc = cancelledResult(dcErr);
+                                const dc = cancelledResult(dcErr, dcCause);
                                 if (ledgerSink && !ledgerTerminal) {
                                     ledgerTerminal = true;
                                     await ledgerSink.flush().catch(() => undefined);
-                                    await ledgerSink.append("failed", { errorMessage: dcErr, errorCode: "cancelled" }).catch(() => undefined);
+                                    await ledgerSink.append("failed", buildCancelledLedgerRow(dc)).catch(() => undefined);
                                 }
                                 await deps.runStore.setTerminal(durableTaskId, "failed", dc, dcErr);
                                 noteRunOutcome(dc);
                                 settleFleet("failed");
                             }
+                            else {
+                                const err = "stream ended before a terminal event";
+                                if (ledgerSink && !ledgerTerminal) {
+                                    ledgerTerminal = true;
+                                    await ledgerSink.flush().catch(() => undefined);
+                                    await ledgerSink.append("failed", { errorMessage: err }).catch(() => undefined);
+                                }
+                                await deps.runStore.setTerminal(durableTaskId, "failed", null, err);
+                                settleFleet("failed");
+                            }
                         }
                         runRowSettled = true;
                     }
@@ -706,10 +705,8 @@ export async function handleTasks(req, res, match, ctx) {
                         steerableRuns.delete(durableTaskId);
                     if (liveStreamRef !== undefined)
                         await deps.userInputLedger?.settleLeg(liveStreamRef);
-                    if (durableTaskId && inflightRuns.get(durableTaskId) === ac) {
+                    if (durableTaskId && inflightRuns.get(durableTaskId) === ac)
                         inflightRuns.delete(durableTaskId);
-                        cancelledViaVerb.delete(durableTaskId);
-                    }
                     for (const evict of subagentHandleEvictions)
                         evict();
                     if (!runRowSettled && durableTaskId && deps.runStore) {
@@ -717,6 +714,7 @@ export async function handleTasks(req, res, match, ctx) {
                             const row = await deps.runStore.getRun(durableTaskId);
                             if (row?.status === "running") {
                                 const pending = prepared.spec.sessionId ? await deps.checkpointStore?.findPendingTokenBySession(prepared.spec.sessionId) : undefined;
+                                const backstopCause = ac.cause();
                                 if (pending) {
                                     if (ledgerSink && !ledgerTerminal) {
                                         ledgerTerminal = true;
@@ -735,13 +733,13 @@ export async function handleTasks(req, res, match, ctx) {
                                     await deps.runStore.setTerminal(durableTaskId, retryPlane.status, finalResult, retryPlane.errorMessage ?? null);
                                     settleFleet(retryPlane.status, fleetRunResiduals(finalResult));
                                 }
-                                else if (ac.signal.aborted) {
+                                else if (backstopCause !== undefined) {
                                     const err = "stream aborted before completion (run cancelled)";
-                                    const c = cancelledResult(err);
+                                    const c = cancelledResult(err, backstopCause);
                                     if (ledgerSink && !ledgerTerminal) {
                                         ledgerTerminal = true;
                                         await ledgerSink.flush().catch(() => undefined);
-                                        await ledgerSink.append("failed", { errorMessage: err, errorCode: "cancelled" }).catch(() => undefined);
+                                        await ledgerSink.append("failed", buildCancelledLedgerRow(c)).catch(() => undefined);
                                     }
                                     await deps.runStore.setTerminal(durableTaskId, "failed", c, err);
                                 }
@@ -808,17 +806,14 @@ export async function handleTasks(req, res, match, ctx) {
                 if (deps.checkpointStore && prepared.spec.sessionId) {
                     await deps.checkpointStore.putCtx(prepared.spec.sessionId, { body: prepared.body, memoryScope: prepared.auth?.memoryScope });
                 }
-                const syncCancelCtrl = new AbortController();
+                const syncCancelCtrl = createRunAbort();
                 if (prepared.spec.sessionId)
                     markChildrenStoppedByUserOnAbort(syncCancelCtrl.signal, durableTaskId ?? prepared.spec.sessionId, prepared.auth?.principal);
                 if (durableTaskId && deps.runStore) {
                     const rs = deps.runStore;
                     const tid = durableTaskId;
                     const owner = principal ?? null;
-                    const abortFromVerb = () => {
-                        cancelledViaVerb.add(tid);
-                        syncCancelCtrl.abort();
-                    };
+                    const abortFromVerb = () => syncCancelCtrl.abort("cancel_verb");
                     durableHeartbeat = setInterval(() => {
                         void rs.heartbeat(tid, owner).catch(() => undefined);
                         if (!syncCancelCtrl.signal.aborted) {
@@ -841,7 +836,6 @@ export async function handleTasks(req, res, match, ctx) {
                     wiringReceipt = wiringManifestFaceEventData(ev, wiringOperatorFace, instructionLeg.segment());
                 };
                 let result;
-                let cancelVerbLabel = false;
                 counters.uncountedBillableInflight++;
                 try {
                     const verifyLeg = (v) => runWithVerification(prepared.runner, specWithSignal, v);
@@ -858,18 +852,17 @@ export async function handleTasks(req, res, match, ctx) {
                     counters.uncountedBillableInflight--;
                     if (durableHeartbeat)
                         clearInterval(durableHeartbeat);
-                    if (durableTaskId && inflightRuns.get(durableTaskId) === syncCancelCtrl) {
+                    if (durableTaskId && inflightRuns.get(durableTaskId) === syncCancelCtrl)
                         inflightRuns.delete(durableTaskId);
-                        cancelVerbLabel = cancelledViaVerb.has(durableTaskId);
-                        cancelledViaVerb.delete(durableTaskId);
-                    }
                 }
-                if (cancelVerbLabel) {
+                const syncAbortCause = syncCancelCtrl.cause();
+                if (syncAbortCause !== undefined) {
                     result = mintCancelledResult({
                         taskId: durableTaskId ?? "",
                         sessionId: prepared.spec.sessionId ?? "",
                         startedAtMs: syncLegStartedAt,
                         message: "cancelled by user",
+                        cause: syncAbortCause,
                         engineResult: result,
                     });
                 }

package/dist/http/send.d.ts

@@ -80,7 +80,7 @@ export declare function sendSessionPolicyError(res: ServerResponse, e: unknown):
  * 句子:属主给了固定句就发它(import 面 `invalid_session` 那一句),否则发 core 的原句过既有脱敏(`redactErrorMessage`:
  * 不抛、有上限)。core 的 `corrupt_session` 原句只点名会话 id 与跳过计数(「Session <id> is unreadable: its log has no
  * meta header (N of M records skipped as corrupt)」),SQL 两店的原句点名 `<表>.<列>` 与行号 —— 两者都不含盘上路径
- * (路径只进运维日志:`session_repo_corrupt_read` 行)。
+ * (路径只进运维面:`server.session-repo.corrupt-record-skipped` 的探针行,S-990;SQL 两店走各自的拒绝句)。
  */
 export declare function sendSessionError(res: ServerResponse, e: unknown, face: SessionErrorFace): boolean;
 export declare function msg(e: unknown): string;

package/dist/http/send.js

@@ -43,7 +43,7 @@ export function sendSessionPolicyError(res, e) {
     if (!(e instanceof SessionPolicyError))
         return false;
     const h = sessionPolicyErrorHttp(e.code);
-    sendError(res, h.status, h.errorCode, e.message);
+    sendError(res, h.status, h.errorCode, redactErrorMessage(e.message) ?? "session policy error");
     return true;
 }
 export function sendSessionError(res, e, face) {

package/dist/http/server.js

@@ -43,7 +43,6 @@ export function createHttpServer(rawDeps) {
     }
     const idemCache = new IdempotencyCache();
     const inflightRuns = new Map();
-    const cancelledViaVerb = new Set();
     const preemptableRuns = new Map();
     const steerableRuns = new Map();
     const wakeParkMints = new Map();
@@ -97,7 +96,7 @@ export function createHttpServer(rawDeps) {
     }
     const { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, isFleetWide, sessionOwnerScope, sessionOwnerScopeForWrite, runOwnerOk, runSessionAcceptOk, readJson, readRawBody } = createRequestGuards({ deps });
     const { prepareSpec } = createAdmission({ deps, readJson, runnerFor });
-    const { routeCtxBase, resumeCheckpoint, driveResumeIntoRunLog, driveResumeLeg, mayDiscloseRowError, resumePreempted, startFreshHostTurn, resumeWake } = createResumeLegs({ deps, runnerFor, idemCache, inflightRuns, preemptableRuns, cancelledViaVerb, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, safeDecode, isFleetWide, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite, runSessionAcceptOk, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor });
+    const { routeCtxBase, resumeCheckpoint, driveResumeIntoRunLog, driveResumeLeg, mayDiscloseRowError, resumePreempted, startFreshHostTurn, resumeWake } = createResumeLegs({ deps, runnerFor, idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, safeDecode, isFleetWide, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite, runSessionAcceptOk, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor });
     const { denyExpiredApprovals, redeemParkedAsk } = createApprovalSweeps({ deps, resumeCheckpoint, mayDiscloseRowError });
     const { handle } = createDispatch({ deps, noteActivity, routeCtxBase, counters });
     const server = http.createServer((req, res) => {

package/dist/http/wire-types.d.ts

@@ -233,13 +233,13 @@ export interface TaskRequestBody {
      *  core 默认开列表注入的通道)与三个 deadline opt-out 在类型面失踪。agentListing/skillsListing 是
      *  boolean 透传(core DEFAULT-ON,explicit false 才关);budgetUsd/mcpInstructions 只认 literal true;
      *  limits 三个 opt-out 只认 literal false(normalizer 同判)。 */
+    /** core 7.39.0 #1254:`planModeReminder` 退役(硬破坏,零别名)—— 提交即 400 点名退役;plan 姿态由引擎从 `permissionMode:"plan"` 自己陈述。 */
     attachments?: {
         todoReminder?: boolean;
         todoReminderMode?: "baseline" | "off";
         changedFiles?: boolean | {
             maxFiles?: number;
         };
-        planModeReminder?: boolean;
         budgetUsd?: true;
         backgroundTasks?: boolean;
         toolsDelta?: boolean;

package/dist/local-data-root.d.ts

@@ -0,0 +1,14 @@
+/**
+ * **本机数据根的唯一解析**(`DB_BACKEND=local` 的 file 店把全部落盘件放在这个目录下;`config.localDataRoot` 就是它的值)。
+ *
+ * 链(第一个非空者胜,空串视作缺席):`LOCAL_DATA_ROOT` → `CONFIG_LOCAL_DIR` → `AGENT_DATA_DIR` → `<home>/.ai-agent`。
+ *
+ * 为什么是一只**纯函数、env 与 home 都由调用方递入**:本函数有两个读者 —— 服务自己的 `loadConfig`(递 `process.env` / `os.homedir()`)与随包发的运维脚本
+ * `scripts/retired-mode-seed-drain-local.mjs`(经 `dist/local-data-root.js` 取同一只函数,缺省数据根不再自抄一份链:抄本只对了一半,
+ * 设了 `AGENT_DATA_DIR` 的部署不带参数跑脚本会读到另一个目录并报「干净」)。纯叶、零反向依赖 ⇒ 脚本引它不会把整个服务装载起来。
+ *
+ * ⚠️ 与**配置根**(`configLocalRoot`:`CONFIG_LOCAL_DIR` → `AGENT_DATA_DIR` → `~/.ai-agent`,不吃 `LOCAL_DATA_ROOT`)不是同一条链 —— 两根分家的那一形由
+ * boot 期的 `local_roots_split` 告警说出来,本函数不改那条解析。
+ */
+export declare function resolveLocalDataRoot(env: Readonly<Record<string, string | undefined>>, home: string): string;
+//# sourceMappingURL=local-data-root.d.ts.map

package/dist/local-data-root.js

@@ -0,0 +1,5 @@
+import { join } from "node:path";
+export function resolveLocalDataRoot(env, home) {
+    return env["LOCAL_DATA_ROOT"] || env["CONFIG_LOCAL_DIR"] || env["AGENT_DATA_DIR"] || join(home, ".ai-agent");
+}
+//# sourceMappingURL=local-data-root.js.map