@sema-agent/server 7.123.0 → 7.124.1

package/dist/plugins/approval-ask-store-file.d.ts

@@ -1,5 +1,6 @@
 import type { AskState } from "../approval-ask-machine.js";
-import type { AskCallCoordinate, AskRow, AskTerminalClaimIntent, AskTerminalClaimOutcome, AskTransitionPatch, ApprovalAskStore, BatchRow, BindGateInput, BindResult, DecideAskInput, DecideResult, EnsureAskResult, ExpireResult, NewAskRow } from "./approval-ask-store-sql.js";
+import type { SettleCause } from "../approval-deny-reasons.js";
+import type { AskCallCoordinate, AskRow, AskTerminalClaimIntent, AskTerminalClaimOpts, AskTerminalClaimOutcome, AskTransitionPatch, ApprovalAskStore, BatchRow, BindGateInput, BindResult, DecideAskInput, DecideResult, EnsureAskResult, ExpireResult, NewAskRow } from "./approval-ask-store-sql.js";
 /** 数据根下的目录名。**按店命名**,与兄弟 File 店同规(`approval-nonces` / `approval-ask-audit` /
  *  `approval-exemptions` / `resume-anchors` / `checkpoint-ctx` / …)—— 首版写的是族名 `approvals`,而那
  *  正是读者会去找**持久 park 行**的地方(它们其实在 `checkpoint-ctx`),且持久数据面的名字按硬 breaking
@@ -61,6 +62,7 @@ type JournalCall = {
     askId: string;
     batchId: string;
     intent: JournalV1ClaimIntent;
+    cause?: SettleCause;
 }
 /** NP-2 的部署政策拒(`claimTerminal(…, "refuse")`)—— 新动词而不是老动词带新意图,理由见 {@link JOURNAL_V1_CLAIM_INTENTS}。 */
  | {
@@ -162,7 +164,7 @@ export declare class FileApprovalAskStore implements ApprovalAskStore {
      * 「先编码、编码成功才一次性提交」同一条原子性)。
      */
     decideAsk(askId: string, batchId: string, decision: DecideAskInput): Promise<DecideResult>;
-    claimTerminal(askId: string, batchId: string, intent: AskTerminalClaimIntent): Promise<AskTerminalClaimOutcome>;
+    claimTerminal(askId: string, batchId: string, intent: AskTerminalClaimIntent, opts?: AskTerminalClaimOpts): Promise<AskTerminalClaimOutcome>;
     expireAsk(askId: string, batchId: string): Promise<ExpireResult>;
     bindBatch(batchId: string, askId: string, gate: BindGateInput): Promise<BindResult>;
     abortBatch(batchId: string): Promise<string[]>;

package/dist/plugins/approval-ask-store-file.js

@@ -182,7 +182,7 @@ export class FileApprovalAskStore {
             case "decideAsk":
                 return this.core.decideAsk(rec.askId, rec.batchId, rec.decision);
             case "claimTerminal":
-                return this.core.claimTerminal(rec.askId, rec.batchId, rec.intent);
+                return this.core.claimTerminal(rec.askId, rec.batchId, rec.intent, rec.cause !== undefined ? { cause: rec.cause } : undefined);
             case "claimTerminalRefuse":
                 return this.core.claimTerminal(rec.askId, rec.batchId, "refuse");
             case "expireAsk":
@@ -213,11 +213,11 @@ export class FileApprovalAskStore {
         const journalled = decision.updatedInput === undefined ? decision : { ...decision, updatedInput: encodeDecideUpdatedInput(decision.updatedInput) };
         return this.write({ op: "decideAsk", askId, batchId, decision: journalled }, (c) => this.core.decideAsk(c.askId, c.batchId, c.decision));
     }
-    async claimTerminal(askId, batchId, intent) {
+    async claimTerminal(askId, batchId, intent, opts) {
         switch (intent) {
             case "expire":
             case "cancel":
-                return this.write({ op: "claimTerminal", askId, batchId, intent }, (c) => this.core.claimTerminal(c.askId, c.batchId, c.intent));
+                return this.write({ op: "claimTerminal", askId, batchId, intent, ...(opts?.cause !== undefined ? { cause: opts.cause } : {}) }, (c) => this.core.claimTerminal(c.askId, c.batchId, c.intent, c.cause !== undefined ? { cause: c.cause } : undefined));
             case "refuse":
                 return this.write({ op: "claimTerminalRefuse", askId, batchId }, (c) => this.core.claimTerminal(c.askId, c.batchId, "refuse"));
             default: {

package/dist/plugins/approval-ask-store-memory.d.ts

@@ -25,7 +25,7 @@
  *  - resolveProvisional 故意不经 canAskTransition(同 SQL twin 头注：这是版本化补偿的例外通道）。
  */
 import { type AskState, type BatchState } from "../approval-ask-machine.js";
-import type { AskCallCoordinate, AskDecision, AskRow, AskTerminalClaimIntent, AskTerminalClaimOutcome, AskTransitionPatch, ApprovalAskStore, BatchRow, BindGateInput, BindResult, DecideAskInput, EnsureAskResult, DecideResult, ExpireResult, NewAskRow } from "./approval-ask-store-sql.js";
+import type { AskCallCoordinate, AskDecision, AskRow, AskTerminalClaimIntent, AskTerminalClaimOpts, AskTerminalClaimOutcome, AskTransitionPatch, ApprovalAskStore, BatchRow, BindGateInput, BindResult, DecideAskInput, EnsureAskResult, DecideResult, ExpireResult, NewAskRow } from "./approval-ask-store-sql.js";
 /**
  * [ref] 的 `updatedInput` **入店编码**——两 twin 共用的那一只(本函数是唯一真源)。
  *
@@ -88,8 +88,9 @@ export declare class InMemoryApprovalAskStore implements ApprovalAskStore {
      * 论证);await 后读到的行 ≥ CAS 线性化点,而非 pending 态无回边 ⇒ 败方读数自足(与 SQL 侧同一条
      * 单调性论证)。
      */
-    claimTerminal(askId: string, batchId: string, intent: AskTerminalClaimIntent): Promise<AskTerminalClaimOutcome>;
-    expireAsk(askId: string, batchId: string): Promise<ExpireResult>;
+    claimTerminal(askId: string, batchId: string, intent: AskTerminalClaimIntent, opts?: AskTerminalClaimOpts): Promise<AskTerminalClaimOutcome>;
+    /** `cause`(可选)= 转 park 的触发成因,赢下 PARKING 的同一步落进 `deniedReason`(SQL twin 同一条 UPDATE 的镜像;接口上的 `expireAsk` 不带它,只有 `claimTerminal(expire, { cause })` 带)。 */
+    expireAsk(askId: string, batchId: string, cause?: AskTerminalClaimOpts["cause"]): Promise<ExpireResult>;
     bindBatch(batchId: string, askId: string, gate: BindGateInput): Promise<BindResult>;
     deferReconcile(askId: string, expectedState: AskState, expectedRev: number, nowMs: number): Promise<boolean>;
     abortBatch(batchId: string): Promise<string[]>;

package/dist/plugins/approval-ask-store-memory.js

@@ -1,4 +1,5 @@
 import { canAskTransition } from "../approval-ask-machine.js";
+import { APPROVAL_ENDING_CAUSES } from "../approval-deny-reasons.js";
 import { askRowOnCall, assertDecideSettledBy, assertIdempotencyKeyShape, assertIntegralEpochMs, ApprovalAskReadAbortedError, claimTargetState, POLICY_REFUSAL_DECISION, projectAskTerminalClaimTruth } from "./approval-ask-store-sql.js";
 function applyPatch(row, patch) {
     if (patch.decision !== undefined)
@@ -152,10 +153,10 @@ export class InMemoryApprovalAskStore {
         ask.updatedAtMs = now;
         return { ok: true, row: { ...ask } };
     }
-    async claimTerminal(askId, batchId, intent) {
+    async claimTerminal(askId, batchId, intent, opts) {
         switch (intent) {
             case "expire": {
-                const res = await this.expireAsk(askId, batchId);
+                const res = await this.expireAsk(askId, batchId, opts?.cause);
                 if (res.won)
                     return { claimed: true, voidedSiblings: res.voidedSiblings };
                 break;
@@ -164,7 +165,7 @@ export class InMemoryApprovalAskStore {
                 const scoped = this.asks.get(askId);
                 if (scoped !== undefined && scoped.batchId !== batchId)
                     return { claimed: false, current: { state: "absent" } };
-                const won = await this.transitionAsk(askId, "STREAM_PENDING", "VOID", { updatedAtMs: this.now() });
+                const won = await this.transitionAsk(askId, "STREAM_PENDING", "VOID", { updatedAtMs: this.now(), ...(opts?.cause !== undefined ? { deniedReason: opts.cause } : {}) });
                 if (won)
                     return { claimed: true, voidedSiblings: [] };
                 break;
@@ -195,7 +196,7 @@ export class InMemoryApprovalAskStore {
         const cur = this.asks.get(askId);
         return { claimed: false, current: projectAskTerminalClaimTruth(cur !== undefined && cur.batchId === batchId ? { ...cur } : null) };
     }
-    async expireAsk(askId, batchId) {
+    async expireAsk(askId, batchId, cause) {
         const now = this.now();
         const batch = this.batches.get(batchId);
         if (!batch)
@@ -204,6 +205,8 @@ export class InMemoryApprovalAskStore {
         if (!ask || ask.state !== "STREAM_PENDING" || ask.batchId !== batchId)
             return { won: false, voidedSiblings: [] };
         ask.state = "PARKING";
+        if (cause !== undefined)
+            ask.deniedReason = cause;
         ask.rev += 1;
         ask.updatedAtMs = now;
         if (batch.state === "OPEN") {
@@ -215,6 +218,7 @@ export class InMemoryApprovalAskStore {
         for (const [id, r] of this.asks) {
             if (r.batchId === batchId && r.state === "STREAM_PENDING" && id !== askId) {
                 r.state = "VOID";
+                r.deniedReason = APPROVAL_ENDING_CAUSES.BATCH_SIBLING_WITHDRAWN;
                 r.rev += 1;
                 r.updatedAtMs = now;
                 voided.push(id);
@@ -247,6 +251,7 @@ export class InMemoryApprovalAskStore {
         for (const [id, r] of this.asks) {
             if (r.batchId === batchId && r.state === "PARKING" && id !== askId) {
                 r.state = "VOID";
+                r.deniedReason = APPROVAL_ENDING_CAUSES.BATCH_BOUND_ELSEWHERE;
                 r.rev += 1;
                 r.updatedAtMs = now;
                 voidedSiblings.push(id);
@@ -274,6 +279,7 @@ export class InMemoryApprovalAskStore {
         for (const [id, r] of this.asks) {
             if (r.batchId === batchId && r.state === "STREAM_PENDING") {
                 r.state = "VOID";
+                r.deniedReason = APPROVAL_ENDING_CAUSES.BATCH_ABORTED;
                 r.rev += 1;
                 r.updatedAtMs = now;
                 voided.push(id);

package/dist/plugins/approval-ask-store-sql.d.ts

@@ -42,6 +42,7 @@ import type { PgQueryFn } from "./pg-query.js";
 import { type SqlDriver, type SqlDialect } from "./sql-driver.js";
 import { type AskState, type BatchState } from "../approval-ask-machine.js";
 import type { HostSettledBy } from "../host-decision.js";
+import { type AskRowCause, type SettleCause } from "../approval-deny-reasons.js";
 import { type IndexSpec } from "./ensure-index.js";
 export type AskDecision = "approve" | "deny";
 export interface AskRow {
@@ -317,6 +318,15 @@ export interface ExpireResult {
  * WHERE 谓词 {@link pendingClaimWhere} 兑现,不是把不同 verb 塞进一个函数。
  */
 export type AskTerminalClaimIntent = "expire" | "cancel" | "refuse";
+/**
+ * 终局 claim 的可选实参:`cause` —— **赢下 `cancel`(VOID)/ `expire`(PARKING)时写进这一行 `denied_reason` 列的成因词**(决断口 410 / 晚答 404 / 跨副本的败方读数读同一列,
+ * 所以这一行自己记着「为什么」,读面不靠任何进程内的东西)。`cancel` 写终态成因({@link SettleCause} 里的 `run_cancelled` / `run_exited`),
+ * `expire` 写转 park 的触发成因({@link ParkTriggerCause}:`ttl_expired` / `broadcast_lost` / `stream_disconnected` / `undeliverable` / `shutdown_before_park`);缺席 ⇒ 列保持 NULL(读面缺席即缺席)。
+ * `refuse` 不读它(落的是一条决议,来源位 `policy`,不是结局成因);`expire` 撤兄弟时店自己写 `batch_sibling_withdrawn`(那是这条事务本身的事实)。
+ */
+export interface AskTerminalClaimOpts {
+    readonly cause?: SettleCause;
+}
 /**
  * `refuse` 意图落行的决议(NP-2)—— **部署政策拒**:deny + 结算来源 `policy`。来源词的型取 core 的 `HostSettledBy`
  * (core 改词 / 退词 ⇒ 这里 tsc 红);协调器交给 core 的那一只(`tool-approval.ts` 的 `UnattendedPolicyRefusal`)读的是
@@ -353,6 +363,10 @@ export type AskTerminalClaimCurrent = {
     /** S-558:赢家决议的**结算来源**(语义与两态读法见 {@link AskRow.settledBy})。**必填**(不是可选)——
      *  可选会让投影漏挑这一列时静默编译过,而漏挑的后果恰是本批要修的病:CAS 输家把赢家的策略拒读成人拒。 */
     settledBy: HostSettledBy | null;
+    /** 行上记着的成因,经问账行成因的唯一读口 `causeOfAskRow` 读出(`kind` 说它在这一行上的意思:VOID / DENIED = 终态成因,PARKING / PARKED = 转 park 的触发成因);
+     *  **只在读得出时在场**(没写 / 与 state 不配 ⇒ 缺席;DECIDED 的败方读数逐字不变)。CAS 输家据它按**行上那个成因**结算(而不是把别人撤的卡读成一次拒绝);
+     *  投影的唯一函数是 {@link projectAskTerminalClaimTruth},三 twin 不各自挑列,原始列值不出店层。 */
+    cause?: AskRowCause;
 };
 /**
  * 单次原子往返的答案(语义律的唯一规范陈述点 = core `checkpoint-store.ts` `claimTerminal` 契约 JSDoc,
@@ -424,7 +438,7 @@ export interface ApprovalAskStore {
      * `expireAsk`/`transitionAsk`(InMemory,单线程天然原子)——两向都成立的判据是**没有第二套谓词**。
      * 方法**必备**(本仓自有三形全实现,无 core 那侧的 presence 探测问题)。
      */
-    claimTerminal(askId: string, batchId: string, intent: AskTerminalClaimIntent): Promise<AskTerminalClaimOutcome>;
+    claimTerminal(askId: string, batchId: string, intent: AskTerminalClaimIntent, opts?: AskTerminalClaimOpts): Promise<AskTerminalClaimOutcome>;
     expireAsk(askId: string, batchId: string): Promise<ExpireResult>;
     bindBatch(batchId: string, askId: string, gate: BindGateInput): Promise<BindResult>;
     abortBatch(batchId: string): Promise<string[]>;
@@ -624,7 +638,7 @@ export declare class SqlApprovalAskStore implements ApprovalAskStore {
      *    在状态机上无回边 ⇒ 锁定读读到的恒 ≥ 线性化点,且 DECIDED 决议不可变 —— 答案自足。
      *  · 本事务在输臂上除批行 rev 自增外零写,rollback 无痕。
      */
-    claimTerminal(askId: string, batchId: string, intent: AskTerminalClaimIntent): Promise<AskTerminalClaimOutcome>;
+    claimTerminal(askId: string, batchId: string, intent: AskTerminalClaimIntent, opts?: AskTerminalClaimOpts): Promise<AskTerminalClaimOutcome>;
     /** [ref] 起 = {@link claimTerminal}(expire 意图)的薄投影 —— 律 2「在 claimTerminal 之上实现」的
      *  SQL 半场落笔处:谓词/事务/兄弟撤卡全在 claim 里,这里零第二套写路径。败方读数按既有返回形丢弃
      *  (`ExpireResult` 不携真相 —— 要真相的调用方直接用 claimTerminal;对账收敛器的 orphan 腿输了本就

package/dist/plugins/approval-ask-store-sql.js

@@ -1,5 +1,6 @@
 import { mysqlDriver, pgDriver, dialectJsonEncoder } from "./sql-driver.js";
 import { canAskTransition } from "../approval-ask-machine.js";
+import { APPROVAL_ENDING_CAUSES, causeOfAskRow } from "../approval-deny-reasons.js";
 import { isDupKeyError, isMissingColumnError } from "./sql-errors.js";
 import { decodeJsonColumn, foldJsonColumn, jsonColumnText, readJsonObjectColumn, readTriStateJsonValueColumn } from "./sql-json-column.js";
 import { ensureIndexes } from "./ensure-index.js";
@@ -70,12 +71,14 @@ export function claimTargetState(intent) {
 export function projectAskTerminalClaimTruth(row) {
     if (row === null || row.state === "STREAM_PENDING")
         return { state: "absent" };
+    const cause = causeOfAskRow(row);
     return {
         state: row.state,
         rev: row.rev,
         decision: row.decision,
         ...(row.updatedInput !== undefined ? { updatedInput: row.updatedInput } : {}),
         settledBy: row.settledBy,
+        ...(cause !== undefined ? { cause } : {}),
     };
 }
 export function askRowOnCall(row, call) {
@@ -501,7 +504,7 @@ export class SqlApprovalAskStore {
             throw new Error(`decideAsk: row vanished after commit (askId=${askId})`);
         return { ok: true, row };
     }
-    async claimTerminal(askId, batchId, intent) {
+    async claimTerminal(askId, batchId, intent, opts) {
         const to = claimTargetState(intent);
         if (!canAskTransition("STREAM_PENDING", to)) {
             throw new Error(`approval-ask-store.claimTerminal: illegal terminal claim STREAM_PENDING -> ${to} (askId=${askId})`);
@@ -522,12 +525,15 @@ export class SqlApprovalAskStore {
             }
             const askRes = intent === "refuse"
                 ? await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state = ${ph(dialect, 1)}, decision = ${ph(dialect, 2)}, settled_by = ${ph(dialect, 3)}, decided_at_ms = ${ph(dialect, 4)}, rev = rev + 1, updated_at_ms = ${ph(dialect, 5)} WHERE ${pendingClaimWhere(dialect, 6)}`, [to, POLICY_REFUSAL_DECISION.decision, POLICY_REFUSAL_DECISION.settledBy, now, now, askId, batchId])
-                : await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state = ${ph(dialect, 1)}, rev = rev + 1, updated_at_ms = ${ph(dialect, 2)} WHERE ${pendingClaimWhere(dialect, 3)}`, [
-                    to,
-                    now,
-                    askId,
-                    batchId,
-                ]);
+                : (intent === "cancel" || intent === "expire") && opts?.cause !== undefined
+                    ?
+                        await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state = ${ph(dialect, 1)}, denied_reason = ${ph(dialect, 2)}, rev = rev + 1, updated_at_ms = ${ph(dialect, 3)} WHERE ${pendingClaimWhere(dialect, 4)}`, [to, opts.cause, now, askId, batchId])
+                    : await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state = ${ph(dialect, 1)}, rev = rev + 1, updated_at_ms = ${ph(dialect, 2)} WHERE ${pendingClaimWhere(dialect, 3)}`, [
+                        to,
+                        now,
+                        askId,
+                        batchId,
+                    ]);
             if (askRes.affected !== 1) {
                 const sel = await conn.query(`SELECT ${askCols(dialect)} FROM ${APPROVAL_ASK_TABLE} WHERE ask_id = ${ph(dialect, 1)} AND batch_id = ${ph(dialect, 2)} FOR UPDATE`, [askId, batchId]);
                 await conn.rollback();
@@ -540,7 +546,7 @@ export class SqlApprovalAskStore {
             await conn.query(this.q(`UPDATE ${APPROVAL_BATCH_TABLE} SET state='ROUTING_UNBOUND', rev=rev+1, updated_at_ms=? WHERE batch_id=? AND state='OPEN'`, `UPDATE ${APPROVAL_BATCH_TABLE} SET state='ROUTING_UNBOUND', rev=rev+1, updated_at_ms=$1 WHERE batch_id=$2 AND state='OPEN'`), [now, batchId]);
             let voidedSiblings;
             if (this.db.dialect === "pg") {
-                const res = await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', rev=rev+1, updated_at_ms=$1 WHERE batch_id=$2 AND state='STREAM_PENDING' AND ask_id<>$3 RETURNING ask_id`, [now, batchId, askId]);
+                const res = await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', denied_reason=$4, rev=rev+1, updated_at_ms=$1 WHERE batch_id=$2 AND state='STREAM_PENDING' AND ask_id<>$3 RETURNING ask_id`, [now, batchId, askId, APPROVAL_ENDING_CAUSES.BATCH_SIBLING_WITHDRAWN]);
                 voidedSiblings = res.rows.map((r) => String(r.ask_id));
             }
             else {
@@ -548,7 +554,8 @@ export class SqlApprovalAskStore {
                 voidedSiblings = sel.rows.map((r) => String(r.ask_id));
                 if (voidedSiblings.length > 0) {
                     const inList = voidedSiblings.map(() => "?").join(", ");
-                    await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', rev=rev+1, updated_at_ms=? WHERE ask_id IN (${inList}) AND state='STREAM_PENDING'`, [
+                    await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', denied_reason=?, rev=rev+1, updated_at_ms=? WHERE ask_id IN (${inList}) AND state='STREAM_PENDING'`, [
+                        APPROVAL_ENDING_CAUSES.BATCH_SIBLING_WITHDRAWN,
                         now,
                         ...voidedSiblings,
                     ]);
@@ -593,7 +600,7 @@ export class SqlApprovalAskStore {
             }
             let voidedSiblings;
             if (this.db.dialect === "pg") {
-                const res = await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', rev=rev+1, updated_at_ms=$1 WHERE batch_id=$2 AND state='PARKING' AND ask_id<>$3 RETURNING ask_id`, [now, batchId, askId]);
+                const res = await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', denied_reason=$4, rev=rev+1, updated_at_ms=$1 WHERE batch_id=$2 AND state='PARKING' AND ask_id<>$3 RETURNING ask_id`, [now, batchId, askId, APPROVAL_ENDING_CAUSES.BATCH_BOUND_ELSEWHERE]);
                 voidedSiblings = res.rows.map((r) => String(r.ask_id));
             }
             else {
@@ -601,7 +608,7 @@ export class SqlApprovalAskStore {
                 voidedSiblings = sel.rows.map((r) => String(r.ask_id));
                 if (voidedSiblings.length > 0) {
                     const inList = voidedSiblings.map(() => "?").join(", ");
-                    await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', rev=rev+1, updated_at_ms=? WHERE ask_id IN (${inList}) AND state='PARKING'`, [now, ...voidedSiblings]);
+                    await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', denied_reason=?, rev=rev+1, updated_at_ms=? WHERE ask_id IN (${inList}) AND state='PARKING'`, [APPROVAL_ENDING_CAUSES.BATCH_BOUND_ELSEWHERE, now, ...voidedSiblings]);
                 }
             }
             await conn.commit();
@@ -631,7 +638,7 @@ export class SqlApprovalAskStore {
             }
             let voided;
             if (this.db.dialect === "pg") {
-                const res = await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', rev=rev+1, updated_at_ms=$1 WHERE batch_id=$2 AND state='STREAM_PENDING' RETURNING ask_id`, [now, batchId]);
+                const res = await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', denied_reason=$3, rev=rev+1, updated_at_ms=$1 WHERE batch_id=$2 AND state='STREAM_PENDING' RETURNING ask_id`, [now, batchId, APPROVAL_ENDING_CAUSES.BATCH_ABORTED]);
                 voided = res.rows.map((r) => String(r.ask_id));
             }
             else {
@@ -639,7 +646,7 @@ export class SqlApprovalAskStore {
                 voided = sel.rows.map((r) => String(r.ask_id));
                 if (voided.length > 0) {
                     const inList = voided.map(() => "?").join(", ");
-                    await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', rev=rev+1, updated_at_ms=? WHERE ask_id IN (${inList}) AND state='STREAM_PENDING'`, [now, ...voided]);
+                    await conn.query(`UPDATE ${APPROVAL_ASK_TABLE} SET state='VOID', denied_reason=?, rev=rev+1, updated_at_ms=? WHERE ask_id IN (${inList}) AND state='STREAM_PENDING'`, [APPROVAL_ENDING_CAUSES.BATCH_ABORTED, now, ...voided]);
                 }
             }
             await conn.commit();

package/dist/plugins/caching-session-store.d.ts

@@ -57,16 +57,6 @@ export declare class CachingSessionStore implements SessionStore {
     }) => Promise<SessionListItem[]>;
     readonly fork?: (sourceId: string, owner: string | null) => Promise<string | null>;
     readonly deleteSession?: (sessionId: string, owner: string | null) => Promise<boolean>;
-    /** K-5c (core 1.155 SessionStore.noteTaskRun seam) — core's Runner calls it at runTask START to record the latest
-     *  run per session (→ listSessions `lastRunId`). MUST be forwarded: the local backend's Runner store is THIS cache
-     *  wrapper, so without forwarding `noteTaskRun?.()` silently no-ops and lastRunId stays null (review BLOCKER). Pure
-     *  pass-through to the inner store's in-mem map — no cache interaction. (TiDB/PG don't implement it → not bound.)
-     *  Return type matches core's `SessionStore.noteTaskRun?(): void | Promise<void>` (review: don't narrow to void).
-     *  [ref](core 5.65 增量批):第三参 = engine runId。绑定用的是 `.bind(inner)`(整函数),运行期本就
-     *  三参全转 —— 这里把**声明**对齐到 core 的三参形,免得读这行类型的人以为缝上只有两参(fork-routing
-     *  的两参形正是在运行期真丢过第三参的那个病,同批修)。内店(LocalSessionStore)今日仍是两参消费,
-     *  runId 落地候 sessions 列表 wire 键的 spec 节拍(见本批提货报告件1b)。 */
-    readonly noteTaskRun?: (sessionId: string, taskId: string, runId?: string) => void | Promise<void>;
     /** Write-once auto-title (SQL twins + local sidecar carry it; pure pass-through). */
     readonly setTitleIfNull?: (sessionId: string, title: string) => Promise<boolean>;
     readonly probeTitle?: (sessionId: string) => Promise<"none" | "untitled" | "titled">;

package/dist/plugins/caching-session-store.js

@@ -11,7 +11,6 @@ export class CachingSessionStore {
     listSessions;
     fork;
     deleteSession;
-    noteTaskRun;
     setTitleIfNull;
     probeTitle;
     readInstructionSource;
@@ -62,8 +61,6 @@ export class CachingSessionStore {
             this.recordInstructionSource = ownerAware.recordInstructionSource.bind(inner);
         if (ownerAware.fork)
             this.fork = ownerAware.fork.bind(inner);
-        if (ownerAware.noteTaskRun)
-            this.noteTaskRun = ownerAware.noteTaskRun.bind(inner);
         if (ownerAware.getLeafId)
             this.getLeafId = ownerAware.getLeafId.bind(inner);
         if (ownerAware.getHead)

package/dist/plugins/file-run-store.js

@@ -499,9 +499,15 @@ export class FileRunStore {
             const sorted = [...arr].sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime() || (a.taskId < b.taskId ? 1 : a.taskId > b.taskId ? -1 : 0));
             const latest = sorted[0];
             const latestRunId = latest.result?.runId;
-            const times = arr.map((r) => r.createdAt.getTime());
-            const last = Math.max(...times);
-            const first = Math.min(...times);
+            let last = -Infinity;
+            let first = Infinity;
+            for (const r of arr) {
+                const t = r.createdAt.getTime();
+                if (t > last)
+                    last = t;
+                if (t < first)
+                    first = t;
+            }
             summaries.push({
                 sessionId,
                 owner: latest.owner,

package/dist/plugins/leader-run-store-sql.d.ts

@@ -12,8 +12,9 @@ export interface LeaderRunRecord {
     status: LeaderRunStatus;
     /** BL-4 属主(null = 匿名/单租)。GET 的 404 门读它。 */
     owner: string | null;
-    /** 运维列表面的可读预览(**不是**完整 objective —— 名字即语义,见 DDL 列注)。 */
-    objectivePreview: string;
+    /** 运维列表面的可读预览(**不是**完整 objective —— 名字即语义,见 DDL 列注)。一个事实位,与 run 行同形:`""` = 建过、剥完没有用户正文;
+     *  `null` = 没记录(列 NULL:更早版本 / 手改留下的行;本版写点只写 `""` 或正文)。 */
+    objectivePreview: string | null;
     result?: unknown;
     error?: string;
     startedAtMs: number;

package/dist/plugins/leader-run-store-sql.js

@@ -4,6 +4,7 @@ import { isDupKeyError } from "./sql-errors.js";
 import { mysqlDriver, pgDriver, dialectJsonEncoder } from "./sql-driver.js";
 import { decodeNullableJsonColumn, foldJsonColumn, jsonColumnText, readNonNullJsonValueColumn } from "./sql-json-column.js";
 import { ensureIndexes } from "./ensure-index.js";
+import { buildObjectivePreview } from "../user-authored-text.js";
 export const LEADER_RUN_TABLE = "leader_run";
 const LEADER_RUN_STATUSES = new Set(["running", "completed", "failed", "needs_human"]);
 export const LEADER_OBJECTIVE_PREVIEW_CHARS = 160;
@@ -86,7 +87,7 @@ function mapRow(r) {
         id,
         status: statusOf(r.status, id),
         owner: r.owner == null ? null : String(r.owner),
-        objectivePreview: r.objective_preview == null ? "" : String(r.objective_preview),
+        objectivePreview: r.objective_preview == null ? null : String(r.objective_preview),
         ...(result === undefined ? {} : { result }),
         ...(error === undefined ? {} : { error }),
         startedAtMs: Number(r.started_at_ms),
@@ -104,7 +105,7 @@ export class SqlLeaderRunStore {
     async createRun(input) {
         const id = uuidv7();
         const now = Date.now();
-        const preview = input.objective.slice(0, LEADER_OBJECTIVE_PREVIEW_CHARS);
+        const preview = buildObjectivePreview(input.objective, LEADER_OBJECTIVE_PREVIEW_CHARS);
         const params = [id, input.idemKey, input.owner, preview, "running", now];
         try {
             await this.db.query(this.q(`INSERT INTO ${LEADER_RUN_TABLE} (leader_run_id, idem_key, owner, objective_preview, status, started_at_ms) VALUES (?,?,?,?,?,?)`, `INSERT INTO ${LEADER_RUN_TABLE} (leader_run_id, idem_key, owner, objective_preview, status, started_at_ms) VALUES ($1,$2,$3,$4,$5,$6)`), params);

package/dist/plugins/local-session-store.d.ts

@@ -1,5 +1,5 @@
 import { FileSessionRepo, type AcquiredSession, type SessionStore, type SessionRepo, type SessionTreeEntry } from "@sema-agent/core";
-import type { SessionSummary } from "./store-contracts.js";
+import type { SessionRunRollupSource, SessionSummary } from "./store-contracts.js";
 import { type Logger } from "../observability/logger.js";
 import { type SessionFace } from "../session-incarnation.js";
 import { type InstructionSourceBaseline } from "../instruction-source-notice.js";
@@ -14,6 +14,7 @@ import { type StagingHandle } from "../session-sync-kernel.js";
 export declare function createLocalSessionRepo(root: string): FileSessionRepo;
 export declare class LocalSessionStore implements SessionStore {
     private readonly repo;
+    private readonly runs;
     /** [ref] 车1:托管留存声明 —— **诚实的 none**。本店的行没有任何按期删除的腿(留存 lane 的三方法只实现在
      *  SQL 聚合店上),所以 locked policy + 本店 ⇒ core 的 `assertRetentionCapability` 拒启,这是契约的
      *  **正确行为**不是缺口(要留存治理先上 DB 后端;设计稿 §1「不做清单」逐字)。缺席也会被读成 none,
@@ -27,17 +28,6 @@ export declare class LocalSessionStore implements SessionStore {
      *  shows the wrong "most recent" — TOC-review #10). In-memory only (no sidecar) when `dataDir` is absent (the
      *  process-local `InMemorySessionRepo` case, where the sessions themselves are lost on restart anyway). */
     private readonly lastActivity;
-    /** K-5c (core 1.155 SessionStore.noteTaskRun seam): the latest task run per session, recorded by core's Runner at
-     *  runTask START (so a running/suspended run surfaces too) → projected as `lastRunId` on listSessions. The cloud
-     *  TiDB/PG twins derive it from `task_run`; the local backend has no runs ledger, so this is an in-memory map.
-     *  ⚠️ IN-MEMORY BEST-EFFORT (honest degrade, NOT sidecar-persisted — review Q6): it covers the PRIMARY /resume use
-     *  case (re-attach to a RUNNING run — recorded at the run's start, the process can't have restarted while that run
-     *  is still live), and is LOST on a process restart. That's acceptable: a session whose last run predates a restart
-     *  has only TERMINAL runs (no live tail to re-attach), so `lastRunId` falls back to null and the shell uses its
-     *  no-anchor path — same posture as the other local degrades here (runCount:0, lastStatus:""). Persisting it would
-     *  need a sidecar-format change (the #10 clobber area); deferred until a real local-file-backed need. */
-    /** K-5c/[ref]/[ref]:per-session 最近一次 run 的 {taskId, runId?}(noteTaskRun 席;runId omit ⇒ 清座)。 */
-    private readonly lastTaskRun;
     /** 2c P1d-β — live staged-import handles keyed by stagingId, so a local staging's in-memory buffer is readable via
      *  readStagedEntries (the durable twins re-read the staged session_event rows; local has no such rows). */
     private readonly stagings;
@@ -81,12 +71,14 @@ export declare class LocalSessionStore implements SessionStore {
     /** 认领行(`session_owner_claimed`)的出口 —— 一次性迁移 M10 的认领臂专用(窗口见 `plugins/one-time-migrations.ts` 登记表)。 */
     private readonly log;
     /** @param repo     the core SessionRepo this store projects into the §0.5 SessionStore shape.
+     *  @param runs     the run store whose per-session projection is the ONLY source of a row's `runCount` / `lastStatus` / `lastRunId` /
+     *                  `lastTaskRunId` (LocalBackend passes its `FileRunStore`). Required — a run-less local session store does not exist.
      *  @param dataDir  the SAME data dir the file-backed repo persists under (LocalBackend passes `fileBackend.root`).
      *                  When given, lastActivity is persisted to `<dataDir>/session-last-activity.json` so it survives a
      *                  restart (the file-backed deployment); omit it for the in-memory deployment (nothing survives).
      *  @param opts.log the `session_owner_claimed` line's sink (LocalBackend passes a logger at the deployment's LOG_LEVEL;
      *                  absent ⇒ an info-level JSON-line logger — a claim is never silent). */
-    constructor(repo: SessionRepo, dataDir?: string, opts?: {
+    constructor(repo: SessionRepo, runs: SessionRunRollupSource, dataDir?: string, opts?: {
         log?: Pick<Logger, "info">;
     });
     /**
@@ -211,9 +203,11 @@ export declare class LocalSessionStore implements SessionStore {
      *   - `firstActivityAt` — the session's `createdAt` (repo metadata).
      *   - `lastActivityAt`  — the touch marker (falls back to `createdAt`); the keyset sort key.
      *   - `objectivePreview`— the last USER-text entry, synthesized from the session tree (no run ledger).
-     *   - `runCount`/`lastStatus` — DEGRADED (0 / ""): the session abstraction has no runs ledger; the TiDB twin
-     *                          LEFT-JOINs `task_run` for these, which the local backend (MemoryRunStore, separate
-     *                          ledger) intentionally does NOT correlate here (variant-2 is session-abstraction-only).
+     *   - `runCount`/`lastStatus`/`lastRunId`/`lastTaskRunId` — S-1371:read from the run store handed in (`runs`; the TiDB
+     *                          twin LEFT-JOINs `task_run` for the same values, the run store's own `listSessions` is that
+     *                          join's same-semantics projection — latest run by `created_at DESC, task_id DESC`, count of all,
+     *                          `lastTaskRunId` = that run's `result.runId`). One call per list (not per row); a session with no
+     *                          run row ⇒ `0 / "" / null` (TiDB's null→"" mapping); a run-store read failure throws (never `0 / ""`).
      *
      * Keyset matches the contract: STRICTLY older than the cursor, ties broken by id DESC; `limit` is honored after
      * the in-memory sort. Cheap (a local single-user store holds few sessions). Errors reading one session's entries
@@ -230,17 +224,16 @@ export declare class LocalSessionStore implements SessionStore {
         limit: number;
         q?: string;
     }): Promise<SessionSummary[]>;
-    /** K-5c (core 1.155 SessionStore seam): core's Runner calls this at runTask START with the run's taskId, so the
-     *  latest run surfaces as `lastRunId` on listSessions even while it is still running/suspended (the local backend
-     *  has no runs ledger to derive it from, unlike the TiDB/PG twins). In-memory, last-write-wins per session.
-     *  [ref] → [ref]([ref] 兑现;上一版「有意缓议」注即本批债锚,兑现随批撤):第三参 engine runId
-     *  自本批起**消费** —— map 值 {taskId, runId?} + 行投影 `lastTaskRunId` + **两座同动清座**(omit ⇒
-     *  清 runId 座,对齐 core TtlSessionStore.noteTaskRun 的 omit⇒clear 契约,core session.d.ts
-     *  亲读:旧 run 的 runId 挂在新 task 旁 = 把上一条 run 的身份错标给新 run)。存储与行投影同批落
-     *  (codex 5.65 R1-[medium]「存储先行、投影另批」之驳仍成立:本店 runId 唯一读点即行投影)。
-     *  wire 半场:HTTP 面零投影透传(sessions-list.ts,additive 键随行上 wire);sema-sdk spec
-     *  `SessionSummary` 闭集候 SDK 开键([ref]/.82 班车)——SDK 落键即端到端闭合。 */
-    noteTaskRun(sessionId: string, taskId: string, runId?: string): void;
+    /** S-1371:run 店里每个会话的 run 投影(按 sessionId 索引)。
+     *  **一次读**:run 店的 `listSessions` 本来就按会话聚合全账(无会话过滤口),这里取全量再按会话仓的 id 查表 —— 比逐会话 N 次读便宜,
+     *  也不在会话店里另存一份 run 账。读失败 ⇒ 抛(不吞成 `0 / ""`:那会把「读不到」说成「没跑过」)。 */
+    private runRollups;
+    /**
+     * 一行里 run 身份与计数的**唯一出处**(S-1371,会话行四位一源):四位全读 {@link runRollups} 的投影(与 SQL 双生的 `task_run` rn=1 JOIN 同口径);
+     * 该会话没有 run 行 ⇒ `0` / `""` / `null`、`lastTaskRunId` 缺席(TiDB 的 `COALESCE(…,0)` / null→"" 映射)。在途的最新一条:`lastRunId` 在场(run 行建出来就有)、
+     * `lastTaskRunId` 缺席(`result` 在终局与 park 时才写)。
+     */
+    private runProjectionOf;
     /** Synthesize a session's objective preview = the most-recent USER text message (the objective the run last saw).
      *  Reads the session's entries through the repo; any read error degrades to null (never fails the list). */
     private previewOf;

package/dist/plugins/local-session-store.js

@@ -12,9 +12,11 @@ import { carriedIncarnation, mintSessionIncarnation, sessionFaceFromRow } from "
 import { decodeInstructionSource, encodeInstructionSource, sameInstructionSourceBaseline } from "../instruction-source-notice.js";
 import { noteReplayInSessionOpenScope, openSessionForItself } from "../session-records-skipped-notice.js";
 import { createCorruptReadFailOpenSeat } from "../observability/corrupt-read-seat.js";
+import { buildObjectivePreview } from "../user-authored-text.js";
 import { classifySyncRelationshipByIds, SyncConflictError, stagingIdFor, } from "../session-sync-kernel.js";
 const ownerEq = (a, b) => (a ?? null) === (b ?? null);
 const isNotFound = (e) => e instanceof SessionError && e.code === "not_found";
+const SESSION_OBJECTIVE_PREVIEW_CHARS = 200;
 function userText(entry) {
     if (entry.type !== "message")
         return null;
@@ -23,14 +25,12 @@ function userText(entry) {
         return null;
     const c = msg.content;
     if (typeof c === "string")
-        return c.trim() || null;
+        return c;
     if (Array.isArray(c)) {
-        const text = c
+        return c
             .filter((p) => !!p && typeof p === "object" && p.type === "text")
             .map((p) => p.text)
-            .join(" ")
-            .trim();
-        return text || null;
+            .join(" ");
     }
     return null;
 }
@@ -143,10 +143,10 @@ export function createLocalSessionRepo(root) {
 }
 export class LocalSessionStore {
     repo;
+    runs;
     retention = UNMANAGED_RETENTION;
     pending = new Map();
     lastActivity = new Map();
-    lastTaskRun = new Map();
     stagings = new Map();
     loaded;
     flushTimer;
@@ -159,8 +159,9 @@ export class LocalSessionStore {
     instructionSources;
     meta;
     log;
-    constructor(repo, dataDir, opts) {
+    constructor(repo, runs, dataDir, opts) {
         this.repo = repo;
+        this.runs = runs;
         this.sidecarPath = dataDir ? join(dataDir, "session-last-activity.json") : undefined;
         this.log = opts?.log ?? createLogger();
         const sidecar = (file, which, read, strict = false) => new SidecarMap(dataDir ? resolve(join(dataDir, file)) : undefined, `${file} (the local ${which} sidecar)`, read, (path, e) => this.refuseSidecar(path, `LocalSessionStore ${which} sidecar`, e, which), (e) => this.warnSidecar("write", e, which), strict);
@@ -403,6 +404,7 @@ export class LocalSessionStore {
         await this.titles.ensureLoaded();
         await this.meta.ensureLoaded();
         const metas = await this.repo.list();
+        const rollups = await this.runRollups();
         const all = [];
         for (const meta of metas) {
             const cell = this.meta.state.entries.get(meta.id);
@@ -411,17 +413,13 @@ export class LocalSessionStore {
                 continue;
             const firstActivityAt = meta.createdAt || new Date(0).toISOString();
             const lastActivityAt = this.lastActivity.get(meta.id) ?? firstActivityAt;
-            const lastRun = this.lastTaskRun.get(meta.id);
             all.push({
                 sessionId: meta.id,
                 owner,
                 lastActivityAt,
                 firstActivityAt,
-                runCount: 0,
                 objectivePreview: await this.previewOf(meta),
-                lastStatus: "",
-                lastRunId: lastRun?.taskId ?? null,
-                ...(lastRun?.runId !== undefined ? { lastTaskRunId: lastRun.runId } : {}),
+                ...this.runProjectionOf(meta.id, rollups),
                 title: this.titles.state.entries.get(meta.id) ?? null,
             });
         }
@@ -436,8 +434,12 @@ export class LocalSessionStore {
             : filtered;
         return after.slice(0, opts.limit);
     }
-    noteTaskRun(sessionId, taskId, runId) {
-        this.lastTaskRun.set(sessionId, { taskId, ...(runId !== undefined ? { runId } : {}) });
+    async runRollups() {
+        const rows = await this.runs.listSessions({ limit: Number.MAX_SAFE_INTEGER });
+        return new Map(rows.map((r) => [r.sessionId, { runCount: r.runCount, lastStatus: r.lastStatus, lastRunId: r.lastRunId, ...(r.lastTaskRunId !== undefined ? { lastTaskRunId: r.lastTaskRunId } : {}) }]));
+    }
+    runProjectionOf(sessionId, rollups) {
+        return rollups.get(sessionId) ?? { runCount: 0, lastStatus: "", lastRunId: null };
     }
     async previewOf(meta) {
         try {
@@ -445,8 +447,9 @@ export class LocalSessionStore {
             const entries = await session.getEntries();
             for (let i = entries.length - 1; i >= 0; i--) {
                 const text = userText(entries[i]);
-                if (text)
-                    return text.slice(0, 200);
+                const preview = text === null ? "" : buildObjectivePreview(text, SESSION_OBJECTIVE_PREVIEW_CHARS);
+                if (preview !== "")
+                    return preview;
             }
             return null;
         }
@@ -541,7 +544,6 @@ export class LocalSessionStore {
         }
         await this.dropMeta(sessionId);
         this.lastActivity.delete(sessionId);
-        this.lastTaskRun.delete(sessionId);
         for (const map of [this.titles, this.instructionSources]) {
             await map.ensureLoaded();
             if (map.state.entries.delete(sessionId))

package/dist/plugins/memory-run-store.js

@@ -224,9 +224,15 @@ export class MemoryRunStore {
             const sorted = [...arr].sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime() || (a.taskId < b.taskId ? 1 : a.taskId > b.taskId ? -1 : 0));
             const latest = sorted[0];
             const latestRunId = latest.result?.runId;
-            const times = arr.map((r) => r.createdAt.getTime());
-            const last = Math.max(...times);
-            const first = Math.min(...times);
+            let last = -Infinity;
+            let first = Infinity;
+            for (const r of arr) {
+                const t = r.createdAt.getTime();
+                if (t > last)
+                    last = t;
+                if (t < first)
+                    first = t;
+            }
             summaries.push({
                 sessionId,
                 owner: latest.owner,