@sema-agent/server 7.120.0 → 7.122.0

package/dist/http/routes/approvals-assistant.js

@@ -7,7 +7,7 @@ import { isParkedRunStatus } from "../../plugins/store-contracts.js";
 import { principalFrom, decodeCheckpointScope, PRINCIPAL_TOKEN_HEADER, APPROVAL_MAC_HEADER, APPROVAL_MAC_KID_HEADER } from "../../security.js";
 import { editedPlanBinding, isWellFormedUnicode, verifyDirectDoorProof } from "../../principal-jwt.js";
 import { MAX_APPROVAL_REASON_CHARS, projectQuestionAnswer, questionAnswerFromProjection } from "../../approval-hmac.js";
-import { PLAN_APPROVE_PERMISSION_MODES_AFTER, isPlanApprovePermissionModeAfter, storedBodyPermissionMode } from "../../task-settings.js";
+import { PLAN_APPROVE_PERMISSION_MODES_AFTER, isPlanApprovePermissionModeAfter, planReviewDecisionExitsPlan, storedBodyPermissionMode } from "../../task-settings.js";
 import { MAX_APPROVAL_NONCE_CHARS } from "../../plugins/approval-nonce-store.js";
 import { redactedPreview, redactSecrets } from "../../trace/redact.js";
 import { redactRiskDescriptor } from "../../observability/run-terminal.js";
@@ -59,7 +59,7 @@ const DECISION_DOOR_FAMILY = {
     "assistant-task-plan-review": {
         accepted: PLAN_REVIEW_BODY_DECLARED_KEYS,
         requestNoun: "plan-review-request",
-        costliestTypo: "a misspelled `permissionModeAfter` silently leaves this task read-only after you approved its plan",
+        costliestTypo: "a misspelled `permissionModeAfter` silently leaves this task asking before every write after you approved its plan",
     },
 };
 const SUBMIT_BODY_NEAR_MISS_KEYS = ["permissionMode"];
@@ -534,8 +534,8 @@ export async function handleApprovalsAssistant(req, res, match, ctx) {
                 sendError(res, 400, "request.field_invalid", `permissionModeAfter must be one of ${PLAN_APPROVE_PERMISSION_MODES_AFTER.map((m) => JSON.stringify(m)).join(" | ")} when present (the permission mode this task continues in once the plan is approved; absent = "default", which keeps asking before each write)`);
                 return;
             }
-            if (decision !== "approve" && body.permissionModeAfter !== undefined) {
-                sendError(res, 400, "request.field_conflict", `permissionModeAfter is only valid with decision 'approve' (got '${decision}')`);
+            if (!planReviewDecisionExitsPlan(decision) && body.permissionModeAfter !== undefined) {
+                sendError(res, 400, "request.field_conflict", `permissionModeAfter is only valid with a decision that carries the plan out ('approve' or 'edit'; got '${decision}')`);
                 return;
             }
             if (body.reason !== undefined && typeof body.reason !== "string") {
@@ -610,7 +610,7 @@ export async function handleApprovalsAssistant(req, res, match, ctx) {
             if (body.permissionModeAfter !== undefined) {
                 const storedCtx = plan.prepared.ctx;
                 if (storedCtx.body !== undefined && storedBodyPermissionMode(storedCtx.body) !== "plan") {
-                    sendError(res, 400, "request.field_conflict", "permissionModeAfter does not apply to this task: it was not submitted with permissionMode \"plan\", so approving the plan lifts no read-only restriction");
+                    sendError(res, 400, "request.field_conflict", "permissionModeAfter does not apply to this task: it was not started in plan mode (its stored permission mode is not \"plan\"), so approving the plan returns it to the mode it was in before planning");
                     return;
                 }
             }
@@ -910,16 +910,16 @@ export async function streamApprovals(req, res, cs, live, scope, governance, pol
 }
 export const APPROVALS_ASSISTANT_ROUTES = [
     { id: "approvals-list", path: "/v1/approvals", methods: ["GET"] },
-    { id: "approvals-stream", path: "/v1/approvals/stream", methods: ["GET"] },
+    { id: "approvals-stream", path: "/v1/approvals/stream", methods: ["GET"], subscription: true },
     { id: "assistant-inbox", path: "/v1/assistant/inbox", methods: ["GET"] },
     { id: "assistant-tasks", path: "/v1/assistant/tasks", methods: ["GET"] },
     { id: "approval-decide", pattern: /^\/v1\/approvals\/(?<sessionId>[^/]+)\/decide$/, label: "/v1/approvals/:id/decide", methods: ["POST"] },
     { id: "approval-exemptions-list", pattern: /^\/v1\/approvals\/(?<sessionId>[^/]+)\/exemptions(?:\/(?<tool>[^/]+))?$/, label: "/v1/approvals/:id/exemptions", methods: ["GET"] },
     { id: "approval-exemption-delete", pattern: /^\/v1\/approvals\/(?<sessionId>[^/]+)\/exemptions(?:\/(?<tool>[^/]+))?$/, label: "/v1/approvals/:id/exemptions", methods: ["DELETE"] },
     { id: "assistant-task-preempt", pattern: /^\/v1\/assistant\/tasks\/(?<taskId>[^/]+)\/preempt$/, label: "/v1/assistant/tasks/:id/preempt", methods: ["POST"] },
-    { id: "assistant-task-resume", pattern: /^\/v1\/assistant\/tasks\/(?<taskId>[^/]+)\/resume$/, label: "/v1/assistant/tasks/:id/resume", billable: true, methods: ["POST"] },
-    { id: "assistant-task-plan-review", pattern: /^\/v1\/assistant\/tasks\/(?<taskId>[^/]+)\/plan_review$/, label: "/v1/assistant/tasks/:id/plan_review", billable: true, methods: ["POST"] },
-    { prefix: "/v1/approvals", billable: true },
+    { id: "assistant-task-resume", pattern: /^\/v1\/assistant\/tasks\/(?<taskId>[^/]+)\/resume$/, label: "/v1/assistant/tasks/:id/resume", billable: "resume", methods: ["POST"] },
+    { id: "assistant-task-plan-review", pattern: /^\/v1\/assistant\/tasks\/(?<taskId>[^/]+)\/plan_review$/, label: "/v1/assistant/tasks/:id/plan_review", billable: "hitl-answer", methods: ["POST"] },
+    { prefix: "/v1/approvals", billable: "hitl-answer" },
 ];
 const DECISION_DOOR_KEY_TABLE = deriveDecisionDoorKeyTable(DECISION_DOOR_FAMILY, APPROVALS_ASSISTANT_ROUTES);
 //# sourceMappingURL=approvals-assistant.js.map

package/dist/http/routes/capabilities.js

@@ -4,7 +4,8 @@ import { modelKeyPoisonOf, resolveModelApiKey } from "../../key-resolver.js";
 import { projectSealedKeyCapability } from "../../sealed-key.js";
 import { cwdHonored, deviceCwdHonored } from "../../task-cwd.js";
 import { taskWriteFaceRefusal } from "../../hosted-posture.js";
-import { autonomyOverrides } from "../../runtime-governance.js";
+import { leaderEntryRefusal, leaderRunEntry } from "../../leader/run-entry.js";
+import { autonomyKeepsOpenWriteFace, autonomyModeFloor } from "../../runtime-governance.js";
 import { DEVICE_PROTOCOL_VERSION, DEVICE_WS_PATH } from "../../device-ws-protocol.js";
 import { a2aInjectionHonored } from "../../task-a2a.js";
 import { buildEmptyMcpProbeFace, buildMcpInjectionRefusal, buildMcpProbeCacheKey, buildMcpProbeInflightRefusal, buildMcpProbeRateKey, buildMcpProbeRateRefusal, createMcpProbeLocal, buildMcpProbeDeclarationRefusal, buildMcpProbeIncompleteRefusal, McpProbeIncomplete, MCP_PROBE_HTTP_STATUS, MCP_PROBE_MAX_INFLIGHT, MCP_PROBE_VERDICT_TIMEOUT_MS, createMcpProbeWalk, readMcpProbeBody, } from "../../capabilities/mcp-probe.js";
@@ -64,7 +65,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 return;
             }
             const entitlementSource = centerEntitlementSourceWired(deps.config);
-            const { fault: autoModeFault, ...autoMode } = await judgeAutoModeArming(deps.autoModeFace, { requestedMode, principal: gatedPrincipal(req, deps.config), localDeny: deps.config.permissionsDisableAutoMode });
+            const { fault: autoModeFault, ...autoMode } = await judgeAutoModeArming(deps.autoModeFace, { requestedMode, floor: autonomyModeFloor(deps.config.autonomy), principal: gatedPrincipal(req, deps.config), localDeny: deps.config.permissionsDisableAutoMode });
             if (autoModeFault !== undefined)
                 deps.logger?.warn("auto_mode_face_resolver_fault", { fault: autoModeFault });
             const rulesLaneForCaller = facts.ruleLaneForCaller(deps, gatedPrincipal(req, deps.config)).available;
@@ -79,10 +80,10 @@ export async function handleCapabilities(req, res, match, ctx) {
                     : false,
                 sessionEvents: facts.sessionEventStream(deps).available,
                 fleet: facts.fleetStream(deps).available
-                    ? { stream: true, sessionScope: true, observe: true, resume: "snapshot", bgNotifyFailClosed: true, steerPriority: "engine", hookFailureNotice: true }
+                    ? { stream: true, sessionScope: true, observe: true, resume: "snapshot", bgNotifyFailClosed: true, steerPriority: "engine", hookFailureNotice: true, leaseClient: true, generationEcho: true }
                     : false,
                 workspace: facts.workspaceBrowse().available,
-                leader: facts.leaderLane(deps).available,
+                leader: facts.leaderLane(deps).available && leaderEntryRefusal(leaderRunEntry(deps.config.autonomy)) === undefined,
                 images: facts.imagePool(deps).available,
                 memory: false,
                 memoryWrite: false,
@@ -130,6 +131,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 readFace: deps.config.readFace ?? null,
                 writeProtection: projectWriteProtectionCapability(deps.writeProtection),
                 appendSystemPrompt: true,
+                outputStyle: true,
                 compactionModel: true,
                 subagentOutput: facts.subagentOutput(deps).available,
                 subagentStream: facts.subagentOutput(deps).available,
@@ -143,7 +145,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 skillToolLists: true,
                 projectContext: cwdHonored(deps.config),
                 callerCwd: cwdHonored(deps.config) || deviceCwdHonored(deps.config),
-                taskWriteFaceOpen: taskWriteFaceRefusal(deps.config) === undefined && autonomyOverrides(deps.config.autonomy).writeFace !== "roots",
+                taskWriteFaceOpen: taskWriteFaceRefusal(deps.config) === undefined && autonomyKeepsOpenWriteFace(deps.config.autonomy),
                 executionLane: projectExecutionLaneCapability(deps.config),
                 mcpInjection: facts.mcpInjection(deps).available,
                 a2a: true,

package/dist/http/routes/devices.js

@@ -8,6 +8,7 @@ import { deviceOwnerDomainOf } from "../device-placement.js";
 import { echoKeyName } from "../../request-key-closure.js";
 const DEVICE_NOT_FOUND_MESSAGE = "device not found";
 const NO_DEVICE_DOMAIN_MESSAGE = "device management needs a caller domain: this credential carries no verified tenant scope claim (registry auth-bridge JWT `scope`) and is not an explicit operator — connect through the registry auth bridge, or configure OPERATOR_PRINCIPALS";
+const NO_ENROLL_DOMAIN_MESSAGE = "device enrollment needs a registry login that carries a tenant scope: this credential carries no verified tenant scope claim (registry auth-bridge JWT `scope`), and an operator principal carries no scope, so it cannot enroll a device or issue an enroll token — connect through the registry auth bridge with a tenant-scoped login";
 const DEVICE_LANE_REQUIRED_MESSAGE = "device management requires the device execution lane (REMOTE_EXEC=device with a SQL store backend) — this deployment has no device lane wired";
 const _deviceRouteCodesPinned = ["not_found.device", "device.rebind_rev_conflict", "device.rebind_active_run"];
 void _deviceRouteCodesPinned;
@@ -164,7 +165,7 @@ export async function handleDevices(req, res, match, ctx) {
     }
     if (match.decl.id === "device-enroll-tokens") {
         if (domain === undefined) {
-            sendError(res, 403, "auth.forbidden", NO_DEVICE_DOMAIN_MESSAGE);
+            sendError(res, 403, "auth.forbidden", NO_ENROLL_DOMAIN_MESSAGE);
             return;
         }
         if ((await readClosedBody(req, res, readJson, [])) === null)
@@ -180,7 +181,7 @@ export async function handleDevices(req, res, match, ctx) {
     }
     if (match.decl.id === "device-enroll") {
         if (domain === undefined) {
-            sendError(res, 403, "auth.forbidden", NO_DEVICE_DOMAIN_MESSAGE);
+            sendError(res, 403, "auth.forbidden", NO_ENROLL_DOMAIN_MESSAGE);
             return;
         }
         const raw = await readClosedBody(req, res, readJson, ENROLL_BODY_KEYS);

package/dist/http/routes/fleet.d.ts

@@ -14,6 +14,7 @@ export declare const FLEET_ROUTES: readonly [{
     readonly id: "fleet-stream";
     readonly path: "/v1/fleet/stream";
     readonly methods: readonly ["GET"];
+    readonly subscription: true;
 }];
 /** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
 export type FleetRouteId = RouteIdsOf<typeof FLEET_ROUTES>;

package/dist/http/routes/fleet.js

@@ -239,6 +239,6 @@ function streamFleet(req, res, bus, callerScope, callerSession = null, completio
     });
 }
 export const FLEET_ROUTES = [
-    { id: "fleet-stream", path: "/v1/fleet/stream", methods: ["GET"] },
+    { id: "fleet-stream", path: "/v1/fleet/stream", methods: ["GET"], subscription: true },
 ];
 //# sourceMappingURL=fleet.js.map

package/dist/http/routes/images.d.ts

@@ -55,6 +55,7 @@ export declare const IMAGES_ROUTES: readonly [{
     readonly pattern: RegExp;
     readonly label: "/v1/images/bakes/:id/events";
     readonly methods: readonly ["GET"];
+    readonly subscription: true;
 }, {
     readonly id: "image-bake-cancel";
     readonly pattern: RegExp;

package/dist/http/routes/images.js

@@ -643,7 +643,7 @@ export const IMAGES_ROUTES = [
     { id: "image-bake-claim-next", path: "/v1/images/bakes/claim", methods: ["POST"] },
     { id: "image-select", path: "/v1/images/select", methods: ["POST"] },
     { id: "image-register", path: "/v1/images/register", methods: ["POST"] },
-    { id: "image-bake-events", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/events$/, label: "/v1/images/bakes/:id/events", methods: ["GET"] },
+    { id: "image-bake-events", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/events$/, label: "/v1/images/bakes/:id/events", methods: ["GET"], subscription: true },
     { id: "image-bake-cancel", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/cancel$/, label: "/v1/images/bakes/:id/cancel", methods: ["POST"] },
     { id: "image-bake-claim", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/claim$/, label: "/v1/images/bakes/:id/claim", methods: ["POST"] },
     { id: "image-bake-ingest", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/ingest$/, label: "/v1/images/bakes/:id/ingest", methods: ["POST"] },

package/dist/http/routes/leader.d.ts

@@ -16,7 +16,7 @@ export declare function handleLeader(req: IncomingMessage, res: ServerResponse,
 export declare const LEADER_ROUTES: readonly [{
     readonly id: "leader-submit";
     readonly path: "/v1/leader";
-    readonly billable: true;
+    readonly billable: "submit";
     readonly methods: readonly ["POST"];
 }, {
     readonly id: "leader-detail";

package/dist/http/routes/leader.js

@@ -2,6 +2,7 @@ import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, headerStr, sendPrincipalRefusal } from "../principal-gate.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
+import { leaderEntryRefusal, leaderRunEntry } from "../../leader/run-entry.js";
 export const LEADER_SUBMIT_PATH = "/v1/leader";
 export async function handleLeader(req, res, match, ctx) {
     switch (match.decl.id) {
@@ -35,6 +36,11 @@ export async function handleLeader(req, res, match, ctx) {
             sendError(res, 400, "request.invalid_json", "invalid JSON body");
             return;
         }
+        const laneRefusal = leaderEntryRefusal(leaderRunEntry(deps.config.autonomy));
+        if (laneRefusal !== undefined) {
+            sendError(res, 422, "request.autonomy_lane_refused", laneRefusal);
+            return;
+        }
         const r = await endpoint.handle("POST", LEADER_SUBMIT_PATH, body, requester, headerStr(req.headers["idempotency-key"]) ?? null);
         if (r) {
             sendJson(res, r.status, r.body);
@@ -51,7 +57,7 @@ export async function handleLeader(req, res, match, ctx) {
     throw new Error(`leader endpoint did not claim its own declared route: ${match.decl.id}`);
 }
 export const LEADER_ROUTES = [
-    { id: "leader-submit", path: LEADER_SUBMIT_PATH, billable: true, methods: ["POST"] },
+    { id: "leader-submit", path: LEADER_SUBMIT_PATH, billable: "submit", methods: ["POST"] },
     { id: "leader-detail", pattern: /^\/v1\/leader\/(?<id>[^/]+)$/, label: "/v1/leader/:id", methods: ["GET"] },
 ];
 //# sourceMappingURL=leader.js.map

package/dist/http/routes/memory-consolidation.d.ts

@@ -58,7 +58,7 @@ export declare function handleMemoryConsolidation(req: IncomingMessage, res: Ser
 export declare const MEMORY_CONSOLIDATION_ROUTES: readonly [{
     readonly id: "memory-consolidation-run";
     readonly path: "/v1/admin/memory/consolidation/run";
-    readonly billable: true;
+    readonly billable: "submit";
     readonly methods: readonly ["POST"];
 }, {
     readonly id: "memory-consolidation-status";

package/dist/http/routes/memory-consolidation.js

@@ -163,7 +163,7 @@ export async function handleMemoryConsolidation(req, res, match, ctx) {
     }
 }
 export const MEMORY_CONSOLIDATION_ROUTES = [
-    { id: "memory-consolidation-run", path: MEMORY_CONSOLIDATION_RUN_PATH, billable: true, methods: ["POST"] },
+    { id: "memory-consolidation-run", path: MEMORY_CONSOLIDATION_RUN_PATH, billable: "submit", methods: ["POST"] },
     { id: "memory-consolidation-status", path: MEMORY_CONSOLIDATION_STATUS_PATH, methods: ["GET"] },
 ];
 //# sourceMappingURL=memory-consolidation.js.map

package/dist/http/routes/notify-wake.d.ts

@@ -22,7 +22,7 @@ export declare const NOTIFY_WAKE_ROUTES: readonly [{
     readonly id: "session-wake";
     readonly pattern: RegExp;
     readonly label: "/v1/sessions/:id/$verb";
-    readonly billable: true;
+    readonly billable: "submit";
     readonly methods: readonly ["POST"];
 }, {
     readonly id: "session-notify";

package/dist/http/routes/notify-wake.js

@@ -143,7 +143,7 @@ export async function handleNotifyWake(req, res, match, ctx) {
     }
 }
 export const NOTIFY_WAKE_ROUTES = [
-    { id: "session-wake", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/wake$/, label: "/v1/sessions/:id/$verb", billable: true, methods: ["POST"] },
+    { id: "session-wake", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/wake$/, label: "/v1/sessions/:id/$verb", billable: "submit", methods: ["POST"] },
     { id: "session-notify", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/notify$/, label: "/v1/sessions/:id/$verb", methods: ["POST"] },
 ];
 //# sourceMappingURL=notify-wake.js.map

package/dist/http/routes/rules.js

@@ -4,7 +4,7 @@ import { gatedPrincipal, explicitOperatorOk, sendOperatorPrincipalsRequired, sen
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
 import { createLogger } from "../../observability/logger.js";
-import { RULE_IMPORT_RETRY_AFTER_SEC, RULE_SCOPE_REFUSAL_SENTENCE, MAX_RULE_SCOPE_CHARS, parseRuleScope, serializeRuleScope } from "../../rules-consent.js";
+import { RULE_IMPORT_RETRY_AFTER_SEC, RULE_SCOPE_REFUSAL_SENTENCE, MAX_RULE_SCOPE_CHARS, buildCcImportLayerRootRefusal, parseRuleScope, serializeRuleScope } from "../../rules-consent.js";
 import { CONTROL_AND_BIDI_CHARS } from "../../text-bidi.js";
 import { HttpError } from "../../security.js";
 import { MAX_RULE_TEXT_CHARS, RULE_BEHAVIORS, isValidDurableScope } from "@sema-agent/core";
@@ -173,8 +173,9 @@ export async function handleRules(req, res, match, ctx) {
             sendError(res, 400, "request.body_shape", "body must be {layers:[{layer,path,root,content}]}");
             return;
         }
-        if (parsed.data.layers.some(ccImportRootRefused)) {
-            sendError(res, 400, "request.body_shape", RULE_SCOPE_REFUSAL_SENTENCE);
+        const refusedLayer = parsed.data.layers.findIndex(ccImportRootRefused);
+        if (refusedLayer >= 0) {
+            sendError(res, 400, "request.body_shape", buildCcImportLayerRootRefusal(refusedLayer));
             return;
         }
         const prepared = await lane.prepareImport(principal, parsed.data.layers);

package/dist/http/routes/runs.d.ts

@@ -40,7 +40,7 @@ idemKey: string | undefined): Promise<{
 export declare const RUNS_ROUTES: readonly [{
     readonly id: "runs-submit";
     readonly path: "/v1/runs";
-    readonly billable: true;
+    readonly billable: "submit";
     readonly methods: readonly ["POST"];
 }, {
     readonly id: "run-steer";
@@ -72,6 +72,7 @@ export declare const RUNS_ROUTES: readonly [{
     readonly pattern: RegExp;
     readonly label: "/v1/runs/:id/events";
     readonly methods: readonly ["GET"];
+    readonly subscription: true;
 }, {
     readonly id: "run-detail";
     readonly pattern: RegExp;
@@ -90,6 +91,7 @@ export declare const RUN_VERBS_ROUTES: readonly [{
     readonly pattern: RegExp;
     readonly label: "/v1/runs/:id/subagents/:sub/*";
     readonly methods: readonly ["GET"];
+    readonly subscription: true;
 }, {
     readonly id: "run-subagent-steer";
     readonly pattern: RegExp;
@@ -99,7 +101,7 @@ export declare const RUN_VERBS_ROUTES: readonly [{
     readonly id: "run-subagent-resume";
     readonly pattern: RegExp;
     readonly label: "/v1/runs/:id/subagents/:sub/*";
-    readonly billable: true;
+    readonly billable: "resume";
     readonly methods: readonly ["POST"];
 }, {
     readonly id: "run-task-output";

package/dist/http/routes/runs.js

@@ -33,7 +33,8 @@ import { mintAndDriveDurableRun } from "../durable-run-leg.js";
 import { RUN_NOT_FOUND_MESSAGE, runNotFoundMessage } from "../route-ctx.js";
 import { withPrincipal } from "../../observability/principal-context.js";
 import { readResumeCtx } from "../resume-ctx-read.js";
-import { storedBodyReplayAnswer, storedBodyReplayLogFields, storedBodyReplayRefusal } from "../checkpoint-ctx.js";
+import { storedBodyReplayAnswer, storedBodyReplayLogFields } from "../checkpoint-ctx.js";
+import { storedBodyReplayRefusal } from "../stored-body-replay.js";
 const STEER_PRIORITY_WORDS = INJECTION_TIERS.map((tier) => `'${tier}'`);
 const STEER_PRIORITY_UNION = STEER_PRIORITY_WORDS.join(" | ");
 const STEER_PRIORITY_CHOICES = STEER_PRIORITY_WORDS.length <= 2 ? STEER_PRIORITY_WORDS.join(" or ") : `${STEER_PRIORITY_WORDS.slice(0, -1).join(", ")}, or ${STEER_PRIORITY_WORDS[STEER_PRIORITY_WORDS.length - 1]}`;
@@ -647,7 +648,7 @@ export async function handleRuns(req, res, match, ctx) {
                     mintResult.noResumeCtx = true;
                     return;
                 }
-                const unservable = storedBodyReplayRefusal(resumeRead.ctx);
+                const unservable = storedBodyReplayRefusal(resumeRead.ctx, deps.config.autonomy);
                 if (unservable !== undefined) {
                     mintResult.unservable = unservable;
                     return;
@@ -1656,20 +1657,20 @@ export async function createDurableRun(req, res, ctx, prepared, idemKey) {
     return resp;
 }
 export const RUNS_ROUTES = [
-    { id: "runs-submit", path: "/v1/runs", billable: true, methods: ["POST"] },
+    { id: "runs-submit", path: "/v1/runs", billable: "submit", methods: ["POST"] },
     { id: "run-steer", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/steer$/, label: "/v1/runs/:id/steer", methods: ["POST"] },
     { id: "run-interrupt", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/interrupt$/, label: "/v1/runs/:id/interrupt", methods: ["POST"] },
     { id: "run-detach", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/detach$/, label: "/v1/runs/:id/detach", methods: ["POST"] },
     { id: "run-cancel", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/cancel$/, label: "/v1/runs/:id/cancel", methods: ["POST"] },
     { id: "run-compact", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/compact$/, label: "/v1/runs/:id/compact", methods: ["POST"] },
-    { id: "run-events", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/events$/, label: "/v1/runs/:id/events", methods: ["GET"] },
+    { id: "run-events", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/events$/, label: "/v1/runs/:id/events", methods: ["GET"], subscription: true },
     { id: "run-detail", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)$/, label: "/v1/runs/:id", methods: ["GET"] },
 ];
 export const RUN_VERBS_ROUTES = [
     { id: "run-subagent-output", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/output$/, label: "/v1/runs/:id/subagents/:sub/*", methods: ["GET"] },
-    { id: "run-subagent-stream", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/stream$/, label: "/v1/runs/:id/subagents/:sub/*", methods: ["GET"] },
+    { id: "run-subagent-stream", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/stream$/, label: "/v1/runs/:id/subagents/:sub/*", methods: ["GET"], subscription: true },
     { id: "run-subagent-steer", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/steer$/, label: "/v1/runs/:id/subagents/:sub/*", methods: ["POST"] },
-    { id: "run-subagent-resume", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/resume$/, label: "/v1/runs/:id/subagents/:sub/*", billable: true, methods: ["POST"] },
+    { id: "run-subagent-resume", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/resume$/, label: "/v1/runs/:id/subagents/:sub/*", billable: "resume", methods: ["POST"] },
     { id: "run-task-output", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/tasks\/(?<tid>[^/]+)\/output$/, label: "/v1/runs/:id/tasks/:tid/*", methods: ["GET"] },
     { id: "run-task-stop", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/tasks\/(?<tid>[^/]+)\/stop$/, label: "/v1/runs/:id/tasks/:tid/*", methods: ["POST"] },
     { id: "elicitation-respond", pattern: /^\/v1\/elicitations\/(?<id>[^/]+)\/respond$/, label: "/v1/elicitations/:id/respond", methods: ["POST"] },

package/dist/http/routes/sessions.d.ts

@@ -79,6 +79,7 @@ export declare const SESSIONS_ROUTES: readonly [{
     readonly pattern: RegExp;
     readonly label: "/v1/sessions/:id/$verb";
     readonly methods: readonly ["GET"];
+    readonly subscription: true;
 }, {
     readonly id: "session-fork";
     readonly pattern: RegExp;

package/dist/http/routes/sessions.js

@@ -844,7 +844,7 @@ export const SESSIONS_ROUTES = [
     { id: "session-mcp", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/mcp$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
     { id: "session-a2a", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/a2a$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
     { id: "session-head", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/head$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
-    { id: "session-events", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/events$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
+    { id: "session-events", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/events$/, label: "/v1/sessions/:id/$verb", methods: ["GET"], subscription: true },
     { id: "session-fork", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/fork$/, label: "/v1/sessions/:id/$verb", methods: ["POST"] },
     { id: "session-policy-get", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/policy$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
     { id: "session-policy-put", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/policy$/, label: "/v1/sessions/:id/$verb", methods: ["PUT"] },

package/dist/http/routes/side-query.d.ts

@@ -17,7 +17,7 @@ export declare function handleSideQuery(req: IncomingMessage, res: ServerRespons
 export declare const SIDE_QUERY_ROUTES: readonly [{
     readonly id: "side-query";
     readonly path: "/v1/side-query";
-    readonly billable: true;
+    readonly billable: "submit";
     readonly methods: readonly ["POST"];
 }];
 /** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */

package/dist/http/routes/side-query.js

@@ -133,6 +133,6 @@ export async function handleSideQuery(req, res, match, ctx) {
     }
 }
 export const SIDE_QUERY_ROUTES = [
-    { id: "side-query", path: "/v1/side-query", billable: true, methods: ["POST"] },
+    { id: "side-query", path: "/v1/side-query", billable: "submit", methods: ["POST"] },
 ];
 //# sourceMappingURL=side-query.js.map

package/dist/http/routes/tasks.d.ts

@@ -25,12 +25,12 @@ export declare function handleTasks(req: IncomingMessage, res: ServerResponse, m
 export declare const TASKS_ROUTES: readonly [{
     readonly id: "tasks-submit";
     readonly path: "/v1/tasks";
-    readonly billable: true;
+    readonly billable: "submit";
     readonly methods: readonly ["POST"];
 }, {
     readonly id: "tasks-submit-stream";
     readonly path: "/v1/tasks/stream";
-    readonly billable: true;
+    readonly billable: "submit";
     readonly methods: readonly ["POST"];
 }];
 /** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */

package/dist/http/routes/tasks.js

@@ -639,7 +639,7 @@ export async function handleTasks(req, res, match, ctx) {
                             });
                     }
                     const withApproval = () => approvalCtx && deps.toolApproval ? deps.toolApproval.runWithContext(approvalCtx, withQuestion) : withQuestion();
-                    await instructionLeg.run(prepared.spec.sessionId, () => withModelReachScope(prepared.spec.sessionId, () => deps.sendUserFile
+                    await instructionLeg.run(prepared.spec.sessionId, () => withModelReachScope({ sessionId: prepared.spec.sessionId, taskId: durableTaskId }, () => deps.sendUserFile
                         ? deps.sendUserFile.runWithContext({
                             taskId: askTaskId,
                             emit: async (f) => {
@@ -901,7 +901,7 @@ export async function handleTasks(req, res, match, ctx) {
     }
 }
 export const TASKS_ROUTES = [
-    { id: "tasks-submit", path: "/v1/tasks", billable: true, methods: ["POST"] },
-    { id: "tasks-submit-stream", path: "/v1/tasks/stream", billable: true, methods: ["POST"] },
+    { id: "tasks-submit", path: "/v1/tasks", billable: "submit", methods: ["POST"] },
+    { id: "tasks-submit-stream", path: "/v1/tasks/stream", billable: "submit", methods: ["POST"] },
 ];
 //# sourceMappingURL=tasks.js.map

package/dist/http/routes/trace-usage.d.ts

@@ -38,6 +38,7 @@ export declare const TRACE_USAGE_ROUTES: readonly [{
     readonly pattern: RegExp;
     readonly label: "/v1/tasks/:id/$sub";
     readonly methods: readonly ["GET"];
+    readonly subscription: true;
 }, {
     readonly id: "task-trace-artifacts";
     readonly pattern: RegExp;

package/dist/http/routes/trace-usage.js

@@ -302,7 +302,7 @@ export const TRACE_USAGE_ROUTES = [
     { id: "task-trace-list", path: "/v1/tasks", methods: ["GET"] },
     { id: "task-tool-result", pattern: /^\/v1\/tasks\/(?<taskId>[^/]+)\/tool-results\/(?<ref>[^/]+)$/, label: "/v1/tasks/:id/tool-results/:ref", methods: ["GET"] },
     { id: "task-trace-turns", pattern: /^\/v1\/tasks\/(?<taskId>[^/]+)\/turns$/, label: "/v1/tasks/:id/$sub", methods: ["GET"] },
-    { id: "task-trace-stream", pattern: /^\/v1\/tasks\/(?<taskId>[^/]+)\/stream$/, label: "/v1/tasks/:id/$sub", methods: ["GET"] },
+    { id: "task-trace-stream", pattern: /^\/v1\/tasks\/(?<taskId>[^/]+)\/stream$/, label: "/v1/tasks/:id/$sub", methods: ["GET"], subscription: true },
     { id: "task-trace-artifacts", pattern: /^\/v1\/tasks\/(?<taskId>[^/]+)\/artifacts$/, label: "/v1/tasks/:id/$sub", methods: ["GET"] },
     { id: "usage-analytics", pattern: /^\/v1\/usage\/(?<sub>summary|series|breakdown)$/, label: "/v1/usage/$sub", methods: ["GET"] },
 ];

package/dist/http/routes/workflows.d.ts

@@ -15,6 +15,7 @@ export declare const WORKFLOWS_ROUTES: readonly [{
     readonly pattern: RegExp;
     readonly label: "/v1/workflows/:id/$sub";
     readonly methods: readonly ["GET"];
+    readonly subscription: true;
 }, {
     readonly id: "workflow-journal";
     readonly pattern: RegExp;

package/dist/http/routes/workflows.js

@@ -416,7 +416,7 @@ function sendWorkflowsUnavailable(res, why) {
 }
 export const WORKFLOWS_ROUTES = [
     { id: "workflows-list", path: "/v1/workflows", methods: ["GET"] },
-    { id: "workflow-stream", pattern: /^\/v1\/workflows\/(?<runId>[^/]+)\/stream$/, label: "/v1/workflows/:id/$sub", methods: ["GET"] },
+    { id: "workflow-stream", pattern: /^\/v1\/workflows\/(?<runId>[^/]+)\/stream$/, label: "/v1/workflows/:id/$sub", methods: ["GET"], subscription: true },
     { id: "workflow-journal", pattern: /^\/v1\/workflows\/(?<runId>[^/]+)\/journal$/, label: "/v1/workflows/:id/$sub", methods: ["GET"] },
     { id: "workflow-detail", pattern: /^\/v1\/workflows\/(?<runId>[^/]+)$/, label: "/v1/workflows/:id", methods: ["GET"] },
 ];

package/dist/http/send.d.ts

@@ -47,6 +47,19 @@ export declare const SSE_MAX_STREAM_MS: number;
  * 要么给 approvals 减 type=消费端破坏),属候裁,不在本批的零行为码范围内。
  */
 export declare const SSE_HEARTBEAT_IDLE_MS = 15000;
+/**
+ * S-1281 —— 服务端**主动**收一条已开的 SSE 流:一帧 `event: error`(帧形与流帽那一帧同一套 `{type:"error", errorCode, message}`,
+ * 消费端按既有「服务端收流 ⇒ 重连」协议处置,SDK 的流读口把它当一帧事件交出再重连)后 `end()`。
+ *
+ * 收流的是分派器,不是流自己的泵:泵此刻可能正停在一次 await 上,醒来还会写一帧。Node 上 `end()` 之后、`close` 之前的那一写会发一个
+ * `error` 事件(实测 v24.2.0:无监听 ⇒ 进程级未捕获;`close` 之后的写只回 `false`,不再发)。⇒ 先挂一只**只吸收这一种**
+ * (`ERR_STREAM_WRITE_AFTER_END`)的监听再 `end()`:那一帧本来就无处可去(连接是我们关的),别的错照旧抛(不改既有失败形)。
+ * 已收尾的流不碰(幂等;排空入口与硬停起点各调一次)。
+ */
+export declare function endSseWithError(res: ServerResponse, frame: {
+    readonly errorCode: string;
+    readonly message: string;
+}): void;
 export declare function sendJson(res: ServerResponse, status: number, body: unknown): void;
 /** A6([ref] lens1 §C3/lens3 §C3a): canonical error-response sender for sites that already carry a
  *  machine `errorCode` — `errorCode` is a required positional arg (not optional-bag) so a call site

package/dist/http/send.js

@@ -17,6 +17,15 @@ export function sseHeaders(res, extra) {
 }
 export const SSE_MAX_STREAM_MS = 15 * 60 * 1000;
 export const SSE_HEARTBEAT_IDLE_MS = 15_000;
+export function endSseWithError(res, frame) {
+    if (res.writableEnded || res.destroyed)
+        return;
+    res.on("error", (err) => {
+        if (err.code !== "ERR_STREAM_WRITE_AFTER_END")
+            throw err;
+    });
+    res.end(`event: error\ndata: ${JSON.stringify({ type: "error", errorCode: frame.errorCode, message: frame.message })}\n\n`);
+}
 export function sendJson(res, status, body) {
     res.writeHead(status, { "content-type": "application/json" });
     res.end(JSON.stringify(body));

package/dist/http/server.d.ts

@@ -649,8 +649,6 @@ export interface ServiceGovernanceDeps {
      *  「诊断说亮、位说暗」。缺席(桩/一次性 CLI)⇒ 读面如实答 `deployment_incapable`。 */
     autoModeFace?: import("../auto-mode-face.js").AutoModeFaceDeps;
 }
-/** **部署自述面**:只被 /health、/v1/capabilities 与提交前置门读的部署事实(多为 live getter,
- *  不是快照——/health 必须回答「此刻」)。 */
 export interface ServiceDeploymentDeps {
     /** Stable per-process id recorded on runs (audit / stale recovery). */
     instanceId?: string;
@@ -686,16 +684,14 @@ export interface ServiceDeploymentDeps {
      *  • [ref]:`attachedStreams` 同样 ASSIGNED BY createServer —— 本副本当前打开着的 SSE 流条数
      *    (= 引擎附着租约集的大小)。消费方是 `boot/engine-lease.ts` 的自退判据;与 `inflight` 同族,
      *    同一个共享盒子,不另开第二条 main↔server 的通道。
+     *  • S-1281:`inflight` 只数**工作** —— 只读订阅流(路由表 `subscription` 列的八条 GET SSE 读面)不进 admission 计数,只进
+     *    `attachedStreams`;`endSubscriptions`(同样 ASSIGNED BY createServer)发 `draining` 终帧后关掉它们,收尾链在排空进入那一拍与
+     *    硬停起点各调一次。
      */
-    drainState?: {
-        draining: boolean;
-        since?: number;
-        reason?: string;
-        inflight?: () => number;
-        lastActivityAt?: () => number;
-        attachedStreams?: () => number;
-        lastAttachEndedAt?: () => number;
-    };
+    drainState?: import("../fleet/drain-entry.js").DrainState;
+    /** 编排器片 2 件 3:服务租约此刻的读数(`fleet/serving-lease.ts` 的客户端交出;引擎信号铸点与计费准入判同读)。缺席 = 没装租约客户端
+     *  (非 fleet 成员 / 没接中心 / 测试夹具)⇒ `none`(与没有租约的引擎逐字同)。 */
+    servingLease?: () => import("../fleet/engine-signal.js").ServingLeaseView;
     /** boot ready 门(b):false = 布防(`CONFIG_REQUIRE_ROSTER=true`)且首次 effective pull 尚未落 roster
      *  (worker 只有占位模型)。就绪原因 `model_roster_pending`(`http/readiness.ts`):计费提交 503 + `/readyz` 503 +
      *  /health 加性 `ready:false`。absent = 恒 ready(未布防 / 非 registry 部署),现有部署零影响。config-center 的
@@ -722,6 +718,9 @@ export interface ServiceDeploymentDeps {
      *  (`boot/stage-10-http-server.ts` → `modelRefusals: () => deployment.modelRefusalsState?.()`)—— 一处铸、两出口。缺席 / 返回 undefined =
      *  没有可报的拒或没有配置管道 ⇒ `/health` 形状逐字不变(additive)。 */
     modelRefusalsState?: () => import("@sema-agent/settings-schema").ModelRefusalsSignal | undefined;
+    /** `/health.configHandoff`(只上 `/health`):在场 ⇔ 部署声明了耐久接力 ∧ 应用着的那一代没被确认(config-center 接力账的 `configHandoffState()`;合成律
+     *  `fleet/engine-signal.ts` 的 `buildConfigHandoff`)。缺席 / 返回 undefined = 有接力、没有中心或本地腿 ⇒ 键缺席。 */
+    configHandoffState?: () => import("../fleet/engine-signal.js").ConfigHandoff | undefined;
     /** [ref] 追加件:`POST /v1/admin/config/refresh` 的实现面 —— 触发**一次既有**的 refresh 拍(在飞则 join)。
      *  缺席 / 回 `"not-wired"` = 本部署没有配置管道 ⇒ 该口诚实 4xx(绝不吞成 200)。 */
     configRefreshNow?: () => Promise<"triggered" | "not-wired" | "failed">;
@@ -739,16 +738,6 @@ export interface ServiceDeploymentDeps {
     mcpRevocationState?: () => {
         revoked: string[];
     } | undefined;
-    /** codex R18: the persistent "retained WITHOUT a next-boot handoff" state — a candidate whose restart signal is
-     *  withheld because no restart-surviving handoff exists yet (durable-declared LKG publication incomplete, or a
-     *  boot skills debt not yet proven repairable). Surfaced on /health (`modelPlaneDeferred` — the key keeps its birth
-     *  name: it was born for the model-plane deferral, which retired with the `models-tiers` slice in S-668 波 0) so
-     *  the stuck state outlives the one-shot warn (the etag advances → later ticks 304). */
-    planeDeferredState?: () => {
-        version: number;
-        since: number;
-        blocked?: string[];
-    } | undefined;
     /** B1(鲁棒性批3 设计件):后台**缓存**探针的读座——/health 绝不逐请求打 DB(center/k8s 高频面),
      *  main.ts 只在 SQL 后端(backend.kind !== "local")挂环(createStoreLiveProbe,STORE_PROBE_INTERVAL_MS)。
      *  缺席(local/memory/探针关)= /health 形状不变;接线 = `storeProbe{live,ageMs,error?}` 恒在