@sema-agent/server 7.124.0 → 7.125.0

package/dist/plugins/local-session-store.js

@@ -34,7 +34,8 @@ function userText(entry) {
     }
     return null;
 }
-const SIDECAR_DEGRADES = { lastActivity: "recency", title: "auto-title", "instruction-source": "instruction-source baseline", "session-meta": "session owner + incarnation (the write that needed it failed loudly)" };
+const SIDECAR_DEGRADES = { lastActivity: "recency", title: "title", pinned: "pin state", "instruction-source": "instruction-source baseline", "session-meta": "session owner + incarnation (the write that needed it failed loudly)" };
+const readPinnedSidecar = createZodColumnReader(z.record(z.string(), z.literal(true)));
 function readSessionMetaCell(cell) {
     return typeof cell === "string" ? { incarnation: cell, owner: undefined } : cell;
 }
@@ -156,6 +157,7 @@ export class LocalSessionStore {
     lastWarnAt = 0;
     sidecarPath;
     titles;
+    pinned;
     instructionSources;
     meta;
     log;
@@ -166,6 +168,7 @@ export class LocalSessionStore {
         this.log = opts?.log ?? createLogger();
         const sidecar = (file, which, read, strict = false) => new SidecarMap(dataDir ? resolve(join(dataDir, file)) : undefined, `${file} (the local ${which} sidecar)`, read, (path, e) => this.refuseSidecar(path, `LocalSessionStore ${which} sidecar`, e, which), (e) => this.warnSidecar("write", e, which), strict);
         this.titles = sidecar("session-titles.json", "title", readStringRecordColumn);
+        this.pinned = sidecar("session-pinned.json", "pinned", readPinnedSidecar);
         this.instructionSources = sidecar("session-instruction-sources.json", "instruction-source", readStringRecordColumn);
         this.meta = sidecar("session-incarnations.json", "session-meta", readSessionMetaSidecar, true);
     }
@@ -229,6 +232,62 @@ export class LocalSessionStore {
         await this.titles.persist();
         return true;
     }
+    async patchSessionMeta(sessionId, patch, face) {
+        await this.meta.ensureLoaded();
+        const occupied = () => this.occupiedBy(sessionId, face);
+        if (!occupied() || (await this.listedMeta(sessionId)) === undefined)
+            return undefined;
+        const { title, pinned } = patch;
+        if (title !== undefined) {
+            await this.titles.ensureLoaded();
+            const ok = await this.titles.commit((draft) => {
+                if (!occupied())
+                    return false;
+                if (title === null)
+                    return draft.delete(sessionId);
+                if (draft.get(sessionId) === title)
+                    return false;
+                draft.set(sessionId, title);
+                return true;
+            });
+            if (!ok)
+                throw new SessionError("storage", `LocalSessionStore: title sidecar write failed for session ${sessionId} — the title was not recorded`);
+        }
+        if (pinned !== undefined) {
+            await this.pinned.ensureLoaded();
+            const ok = await this.pinned.commit((draft) => {
+                if (!occupied())
+                    return false;
+                if (!pinned)
+                    return draft.delete(sessionId);
+                if (draft.get(sessionId) === true)
+                    return false;
+                draft.set(sessionId, true);
+                return true;
+            });
+            if (!ok)
+                throw new SessionError("storage", `LocalSessionStore: pin sidecar write failed for session ${sessionId} — the pin was not recorded`);
+        }
+        const rollups = await this.runRollups();
+        await this.loadRowSidecars();
+        const meta = await this.listedMeta(sessionId);
+        if (meta === undefined || !occupied())
+            return undefined;
+        const row = await this.summaryOf(meta, rollups);
+        return occupied() ? row : undefined;
+    }
+    occupiedBy(sessionId, face) {
+        const cell = this.meta.state.entries.get(sessionId);
+        return cell !== undefined && readSessionMetaCell(cell).incarnation === face.incarnation;
+    }
+    async sessionSummaryOf(sessionId) {
+        await this.loadRowSidecars();
+        const meta = await this.listedMeta(sessionId);
+        return meta === undefined ? undefined : this.summaryOf(meta, await this.runRollups());
+    }
+    async listedMeta(sessionId) {
+        return (await this.repo.list()).find((m) => m.id === sessionId);
+    }
     async readInstructionSource(sessionId) {
         await this.instructionSources.ensureLoaded();
         return decodeInstructionSource(this.instructionSources.state.entries.get(sessionId));
@@ -400,28 +459,15 @@ export class LocalSessionStore {
         this.pending.delete(sessionId);
     }
     async listSessions(opts) {
-        await this.ensureLoaded();
-        await this.titles.ensureLoaded();
-        await this.meta.ensureLoaded();
+        await this.loadRowSidecars();
         const metas = await this.repo.list();
         const rollups = await this.runRollups();
         const all = [];
         for (const meta of metas) {
-            const cell = this.meta.state.entries.get(meta.id);
-            const owner = cell === undefined ? null : (readSessionMetaCell(cell).owner ?? null);
+            const owner = this.ownerCellOf(meta.id);
             if (opts.owner !== undefined && owner !== opts.owner && !(opts.includeUnowned === true && owner === null))
                 continue;
-            const firstActivityAt = meta.createdAt || new Date(0).toISOString();
-            const lastActivityAt = this.lastActivity.get(meta.id) ?? firstActivityAt;
-            all.push({
-                sessionId: meta.id,
-                owner,
-                lastActivityAt,
-                firstActivityAt,
-                objectivePreview: await this.previewOf(meta),
-                ...this.runProjectionOf(meta.id, rollups),
-                title: this.titles.state.entries.get(meta.id) ?? null,
-            });
+            all.push(await this.summaryOf(meta, rollups));
         }
         const qlc = opts.q?.toLowerCase();
         const filtered = qlc ? all.filter((r) => r.objectivePreview?.toLowerCase().includes(qlc)) : all;
@@ -434,6 +480,29 @@ export class LocalSessionStore {
             : filtered;
         return after.slice(0, opts.limit);
     }
+    async loadRowSidecars() {
+        await this.ensureLoaded();
+        await this.titles.ensureLoaded();
+        await this.pinned.ensureLoaded();
+        await this.meta.ensureLoaded();
+    }
+    ownerCellOf(sessionId) {
+        const cell = this.meta.state.entries.get(sessionId);
+        return cell === undefined ? null : (readSessionMetaCell(cell).owner ?? null);
+    }
+    async summaryOf(meta, rollups) {
+        const firstActivityAt = meta.createdAt || new Date(0).toISOString();
+        return {
+            sessionId: meta.id,
+            owner: this.ownerCellOf(meta.id),
+            lastActivityAt: this.lastActivity.get(meta.id) ?? firstActivityAt,
+            firstActivityAt,
+            objectivePreview: await this.previewOf(meta),
+            ...this.runProjectionOf(meta.id, rollups),
+            title: this.titles.state.entries.get(meta.id) ?? null,
+            pinned: this.pinned.state.entries.get(meta.id) === true,
+        };
+    }
     async runRollups() {
         const rows = await this.runs.listSessions({ limit: Number.MAX_SAFE_INTEGER });
         return new Map(rows.map((r) => [r.sessionId, { runCount: r.runCount, lastStatus: r.lastStatus, lastRunId: r.lastRunId, ...(r.lastTaskRunId !== undefined ? { lastTaskRunId: r.lastTaskRunId } : {}) }]));
@@ -544,7 +613,7 @@ export class LocalSessionStore {
         }
         await this.dropMeta(sessionId);
         this.lastActivity.delete(sessionId);
-        for (const map of [this.titles, this.instructionSources]) {
+        for (const map of [this.titles, this.pinned, this.instructionSources]) {
             await map.ensureLoaded();
             if (map.state.entries.delete(sessionId))
                 await map.persist();

package/dist/plugins/memory-run-store.d.ts

@@ -1,6 +1,6 @@
 import { type UsageRow } from "../usage-analytics.js";
 import type { TaskStatus } from "@sema-agent/core";
-import { type RunRecord, type SessionSummary, type RunEvent, type PersistedTaskResult, type LatestRunRef } from "./store-contracts.js";
+import { type CreateRunOutcome, type NewRunMeta, type RunRecord, type SessionSummary, type RunEvent, type PersistedTaskResult, type LatestRunRef } from "./store-contracts.js";
 import type { LedgerEventType } from "../trace/ledger-events.js";
 /**
  * [ref] P0 — the local lane's stand-in for the SQL twins' checkpoint-table JOIN. The file/memory run stores
@@ -25,6 +25,8 @@ export declare class MemoryRunStore {
     private readonly runs;
     /** sessionId → taskId — the single-active-run claim (the `task_active` table). */
     private readonly active;
+    /** idemKey → taskId — the twin of `uq_task_run_idem`. */
+    private readonly byIdem;
     /** taskId → events (kept seq-sorted on read). */
     private readonly events;
     /** [ref] the checkpoint-table stand-in (see {@link RunStoreCheckpointProbe}); absent ⇒ reapers NO-OP. */
@@ -32,17 +34,16 @@ export declare class MemoryRunStore {
     /** [ref] wire the checkpoint probe (backend assembly, where checkpoint + run store are built together). */
     setCheckpointProbe(probe: RunStoreCheckpointProbe): void;
     private toRecord;
-    /** Create a run iff the session has no active run (the task_active unique-key claim). */
-    createRun(taskId: string, sessionId: string, owner: string | null, instanceId: string, meta?: {
-        jobId?: string | null;
-        source?: string | null;
-        objectivePreview?: string | null;
-    }): Promise<{
-        ok: true;
-    } | {
-        ok: false;
-        activeTaskId: string;
-    }>;
+    /** Create a run iff no submission key of this request names a row (idemKey first, then a caller-minted taskId —
+     *  OBSERVED, see {@link CreateRunOutcome}) and the session has no active run (the task_active unique-key claim). */
+    createRun(taskId: string, sessionId: string, owner: string | null, instanceId: string, meta?: NewRunMeta): Promise<CreateRunOutcome>;
+    /** Undo THIS submission's key binding (`idem_key` → NULL) — called only where the submit surface refuses the submission
+     *  before any work and terminalizes the row it just claimed (the sync leg's zero-work refusal, a device-placement reject):
+     *  the error answer invites a retry, and a retry with the same key must run, not replay the refusal. The row stays (it
+     *  is the refusal's record); only the key is freed. */
+    releaseIdemKey(taskId: string): Promise<void>;
+    /** The run a submission's scoped `Idempotency-Key` names, if any. */
+    getRunByIdem(idemKey: string): Promise<RunRecord | undefined>;
     requestCancel(taskId: string, owner: string | null): Promise<boolean>;
     isCancelRequested(taskId: string, owner: string | null): Promise<boolean>;
     requestPreempt(taskId: string, owner: string | null): Promise<boolean>;

package/dist/plugins/memory-run-store.js

@@ -7,6 +7,7 @@ const ownerEq = (a, b) => (a ?? null) === (b ?? null);
 export class MemoryRunStore {
     runs = new Map();
     active = new Map();
+    byIdem = new Map();
     events = new Map();
     checkpointProbe;
     setCheckpointProbe(probe) {
@@ -31,6 +32,11 @@ export class MemoryRunStore {
         };
     }
     async createRun(taskId, sessionId, owner, instanceId, meta = {}) {
+        const idemKey = meta.idemKey ?? null;
+        const byKey = idemKey !== null ? this.byIdem.get(idemKey) : undefined;
+        const existing = (byKey !== undefined ? this.runs.get(byKey) : undefined) ?? this.runs.get(taskId);
+        if (existing)
+            return { ok: false, existing: this.toRecord(existing) };
         const claimed = this.active.get(sessionId);
         if (claimed !== undefined)
             return { ok: false, activeTaskId: claimed };
@@ -48,13 +54,29 @@ export class MemoryRunStore {
             source: meta.source ?? null,
             instanceId,
             objectivePreview: meta.objectivePreview ?? null,
+            idemKey,
             createdAt: now,
             updatedAt: now,
             cancelRequested: false,
             preemptRequested: false,
         });
+        if (idemKey !== null)
+            this.byIdem.set(idemKey, taskId);
         return { ok: true };
     }
+    async releaseIdemKey(taskId) {
+        const r = this.runs.get(taskId);
+        if (!r || r.idemKey === null)
+            return;
+        if (this.byIdem.get(r.idemKey) === taskId)
+            this.byIdem.delete(r.idemKey);
+        r.idemKey = null;
+    }
+    async getRunByIdem(idemKey) {
+        const taskId = this.byIdem.get(idemKey);
+        const r = taskId !== undefined ? this.runs.get(taskId) : undefined;
+        return r ? this.toRecord(r) : undefined;
+    }
     async requestCancel(taskId, owner) {
         const r = this.runs.get(taskId);
         if (!r || !ownerEq(r.owner, owner) || r.status !== "running")
@@ -244,6 +266,7 @@ export class MemoryRunStore {
                 lastRunId: latest.taskId,
                 ...(typeof latestRunId === "string" && latestRunId !== "" ? { lastTaskRunId: latestRunId } : {}),
                 title: null,
+                pinned: false,
             });
         }
         return summaries
@@ -266,6 +289,8 @@ export class MemoryRunStore {
             if (r.sessionId !== sessionId)
                 continue;
             this.events.delete(taskId);
+            if (r.idemKey !== null && this.byIdem.get(r.idemKey) === taskId)
+                this.byIdem.delete(r.idemKey);
             this.runs.delete(taskId);
             removed += 1;
         }

package/dist/plugins/one-time-migrations.js

@@ -194,7 +194,7 @@ export const ONE_TIME_MIGRATIONS = [
         introducedIn: "7.124.0",
         releasedOn: "2026-10-11",
         removableAfter: "2026-11-10",
-        removal: "删 `config-lkg.ts` 的载荷迁移:`migrateLkgPayload` 与其上的窗注、`loadLkg` 里调它的那一段(载荷照旧过 `lkgPayloadProblem`)、`LkgReadMigration.receipts`" +
+        removal: "删 `config-lkg.ts` 的载荷迁移:`migrateLkgPayload` 与其上的窗注、`loadLkg` 里调它的那一段(载荷照旧过 `lkgPayloadJudged`)、`LkgReadMigration.receipts`" +
             "(信封 2 → 3 的 M13 若已先删,`LkgReadMigration` 与 `migrated` 位一并删)、对 `@sema-agent/settings-schema/one-time-migrations` 的 import;`loadLkg` 的版本判据收成" +
             "只认 4(3 回到「unknown formatVersion」拒);`boot/web-admin.ts` 读回后按 4 写回的那一段;文件头注 formatVersion 4 一段里「每次读回都过迁移」那一句;" +
             "`test/ss11-stored-migrations.test.ts` 的 M15 组(4 原样读回那一格留)",

package/dist/plugins/pg-cost-quota.d.ts

@@ -12,7 +12,7 @@
  * and branched THERE. Only the table binding lives here.
  */
 import type { Pool, PoolClient } from "pg";
-import type { QuotaDecision, QuotaLimits, QuotaTracker } from "../observability/cost-quota.js";
+import { type QuotaDecision, type QuotaLimits, type QuotaTracker } from "../observability/cost-quota.js";
 import { type CounterDegradeHook } from "./write-behind-counter.js";
 import { type IndexSpec } from "./ensure-index.js";
 export declare class PgCostQuota implements QuotaTracker {

package/dist/plugins/pg-cost-quota.js

@@ -1,3 +1,4 @@
+import { decideQuota } from "../observability/cost-quota.js";
 import { PgWriteBehindCounter } from "./write-behind-counter.js";
 import { ensureIndexes } from "./ensure-index.js";
 const COST_QUOTA_TABLE = { table: "cost_quota", keyCol: "scope_key", valCol: "micro_usd" };
@@ -24,11 +25,7 @@ export class PgCostQuota {
             this.counter.stop();
     }
     check(scopeKey) {
-        if (this.limitMicroUsd <= 0)
-            return { allowed: true, usedMicroUsd: 0, limitMicroUsd: 0, retryAfterSec: 0 };
-        const used = this.counter.used(scopeKey);
-        const allowed = used < this.limitMicroUsd;
-        return { allowed, usedMicroUsd: used, limitMicroUsd: this.limitMicroUsd, retryAfterSec: allowed ? 0 : this.counter.retryAfterSec() };
+        return decideQuota(this.limitMicroUsd, this.counter.window(), (bucket) => this.counter.usedIn(scopeKey, bucket));
     }
     add(scopeKey, micro) {
         if (this.limitMicroUsd <= 0)

package/dist/plugins/pg-pool.js

@@ -42,6 +42,9 @@ export const PG_SCHEMA_STATEMENTS = [
      objective_preview VARCHAR(160),
      cancel_requested  SMALLINT NOT NULL DEFAULT 0,
      preempt_requested SMALLINT NOT NULL DEFAULT 0,
+     -- idem_key: the submission's scoped Idempotency-Key (idemKeyOf, 64 hex); its UNIQUE index uq_task_run_idem is
+     -- declared in schema-indexes.ts (PG has no inline KEY). NULL = no key (UNIQUE does not constrain NULL).
+     idem_key    VARCHAR(64) COLLATE "C",
      created_at  TIMESTAMPTZ(3) NOT NULL,
      updated_at  TIMESTAMPTZ(3) NOT NULL,
      PRIMARY KEY (task_id)

package/dist/plugins/pg-session-storage.d.ts

@@ -1,6 +1,7 @@
 import { BaseSessionStorage, type PromptEpochDescriptor, type AcquiredSession, type PlacedSessionRow, type SessionMetadata, type SessionPlacement, type SessionPlacementRecord, type SessionStore, type SessionTreeEntry, type SessionWriteOptions } from "@sema-agent/core";
 import type { Pool, PoolClient } from "pg";
 import type { SessionSummary } from "./store-contracts.js";
+import { type SessionRowPatch } from "../session-row.js";
 import { type PlacementAcquireOpts } from "./session-placement.js";
 import { type StagingHandle } from "../session-sync-kernel.js";
 import { type InstructionSourceBaseline } from "../instruction-source-notice.js";
@@ -113,9 +114,18 @@ export declare class PgSessionStore implements SessionStore {
         limit: number;
         q?: string;
     }): Promise<SessionSummary[]>;
+    /** @see TiDBSessionStore.sessionSummaryOf — the PG twin (same projection, run-preview subqueries scoped to the id). */
+    sessionSummaryOf(sessionId: string): Promise<SessionSummary | undefined>;
+    /** @see TiDBSessionStore.patchSessionMeta — the PG twin (the only writer of a user-set title / pin; the UPDATE and the read-back
+     *  both conditioned on the verified occupant's incarnation; `updated_at` untouched). The read-back is a second statement, not a
+     *  `RETURNING` CTE: the outer SELECT of a data-modifying CTE reads the pre-UPDATE snapshot of `session_meta`. */
+    patchSessionMeta(sessionId: string, patch: SessionRowPatch, face: SessionFace): Promise<SessionSummary | undefined>;
+    /** @see TiDBSessionStore.selectSummaries — the PG twin. `where` already carries `$n` placeholders numbered over `params`;
+     *  the run scope and the LIMIT take the next numbers (PG binds by number, so text order does not matter). */
+    private selectSummaries;
     /** @see TiDBSessionStore.probeTitle — the PG twin. */
     probeTitle(sessionId: string): Promise<"none" | "untitled" | "titled">;
-    /** @see TiDBSessionStore.setTitleIfNull — the PG twin (write-once auto-title). */
+    /** @see TiDBSessionStore.setTitleIfNull — the PG twin (the auto-titler's NULL-only write). */
     setTitleIfNull(sessionId: string, title: string): Promise<boolean>;
     /** @see TiDBSessionStore.readInstructionSource — the PG twin. */
     readInstructionSource(sessionId: string): Promise<InstructionSourceBaseline>;

package/dist/plugins/pg-session-storage.js

@@ -1,5 +1,6 @@
 import { emitLeafAdvance } from "../session-leaf-bus.js";
 import { BaseSessionStorage, StoredSession, SessionError, uuidv7, validateEntriesForImport, leafIdAfterEntry, normalizePromptEpoch, } from "@sema-agent/core";
+import { SESSION_TITLE_MAX_CHARS } from "../session-row.js";
 import { escapeLike } from "./sql-escape.js";
 import { decodeSessionEventPayload } from "./session-event-payload.js";
 import { jsonColumnText } from "./sql-json-column.js";
@@ -25,9 +26,12 @@ export const PG_SESSION_SCHEMA = [
      updated_at  TIMESTAMPTZ(3) NOT NULL,
      leaf_id     VARCHAR(64) COLLATE "C",
      leaf_seq    BIGINT       NOT NULL DEFAULT 0,
-     -- Write-once auto-title (setTitleIfNull / probeTitle): NULL = "untitled", i.e. still claimable; the
-     -- three-state probe distinguishes it from "no such session". PG twin of the TiDB COLUMN_MIGRATIONS leg.
-     title       VARCHAR(120) COLLATE "C",
+     -- title: one column, two writers (TiDB twin, same name / width; law in src/session-row.ts): the user's write
+     -- (patchSessionMeta, unconditional; null = cleared back to automatic) and the auto-titler (setTitleIfNull / probeTitle
+     -- — fills NULL only; NULL = "untitled", the three-state probe distinguishes it from "no such session").
+     title       VARCHAR(${SESSION_TITLE_MAX_CHARS}) COLLATE "C",
+     -- pinned: the user's pin (TiDB twin); every list row carries it, false by default.
+     pinned      BOOLEAN      NOT NULL DEFAULT FALSE,
      -- instruction_source(S-690):换源通告的基线 —— TiDB 孪生同名同宽,三态读法(NULL / '' / 链成员相对路径)见那里的列注。
      instruction_source VARCHAR(64) COLLATE "C",
      -- #292 C18(core 5.48.0 design/323)subagent 转录持久化 —— placement 元组(TiDB 孪生同名同宽,
@@ -327,14 +331,45 @@ export class PgSessionStore {
             const sid = ph(opts.cursor.sessionId);
             where.push(`(sm.updated_at < ${a} OR (sm.updated_at = ${b} AND sm.session_id < ${sid}))`);
         }
-        const sql = "SELECT sm.session_id, sm.owner, sm.updated_at AS last_activity, sm.created_at AS first_activity, sm.title, " +
+        return this.selectSummaries({ where, params, limit: opts.limit });
+    }
+    async sessionSummaryOf(sessionId) {
+        const rows = await this.selectSummaries({ where: ["sm.placement_kind IS NULL", "sm.session_id = $1"], params: [sessionId], limit: 1, runSessionId: sessionId });
+        return rows[0];
+    }
+    async patchSessionMeta(sessionId, patch, face) {
+        const sets = [];
+        const params = [];
+        if (patch.title !== undefined) {
+            params.push(patch.title);
+            sets.push(`title = $${params.length}`);
+        }
+        if (patch.pinned !== undefined) {
+            params.push(patch.pinned);
+            sets.push(`pinned = $${params.length}`);
+        }
+        if (sets.length > 0) {
+            params.push(sessionId, face.incarnation);
+            await this.pool.query(`UPDATE session_meta SET ${sets.join(", ")} WHERE session_id = $${params.length - 1} AND incarnation = $${params.length} AND placement_kind IS NULL`, params);
+        }
+        const rows = await this.selectSummaries({ where: ["sm.placement_kind IS NULL", "sm.session_id = $1", "sm.incarnation = $2"], params: [sessionId, face.incarnation], limit: 1, runSessionId: sessionId });
+        return rows[0];
+    }
+    async selectSummaries(q) {
+        const params = [...q.params];
+        const ph = (v) => {
+            params.push(v);
+            return `$${params.length}`;
+        };
+        const runWhere = q.runSessionId !== undefined ? ` WHERE session_id = ${ph(q.runSessionId)}` : "";
+        const sql = "SELECT sm.session_id, sm.owner, sm.updated_at AS last_activity, sm.created_at AS first_activity, sm.title, sm.pinned, " +
             "  COALESCE(r.run_count, 0) AS run_count, latest.objective_preview, latest.status, latest.task_id AS last_run_id, latest.last_task_run_id " +
             "FROM session_meta sm " +
-            "LEFT JOIN (SELECT session_id, COUNT(*) AS run_count FROM task_run GROUP BY session_id) r ON r.session_id = sm.session_id " +
-            "LEFT JOIN (SELECT DISTINCT ON (session_id) session_id, objective_preview, status, task_id, result ->> 'runId' AS last_task_run_id FROM task_run " +
+            "LEFT JOIN (SELECT session_id, COUNT(*) AS run_count FROM task_run" + runWhere + " GROUP BY session_id) r ON r.session_id = sm.session_id " +
+            "LEFT JOIN (SELECT DISTINCT ON (session_id) session_id, objective_preview, status, task_id, result ->> 'runId' AS last_task_run_id FROM task_run" + runWhere +
             "  ORDER BY session_id, created_at DESC, task_id DESC) latest ON latest.session_id = sm.session_id " +
-            (where.length ? "WHERE " + where.join(" AND ") + " " : "") +
-            `ORDER BY sm.updated_at DESC, sm.session_id DESC LIMIT ${ph(opts.limit)}`;
+            (q.where.length ? "WHERE " + q.where.join(" AND ") + " " : "") +
+            `ORDER BY sm.updated_at DESC, sm.session_id DESC LIMIT ${ph(q.limit)}`;
         const res = await this.pool.query(sql, params);
         return res.rows.map((r) => {
             const runId = r.last_task_run_id;
@@ -349,6 +384,7 @@ export class PgSessionStore {
                 lastRunId: r.last_run_id ?? null,
                 ...(typeof runId === "string" && runId !== "" ? { lastTaskRunId: runId } : {}),
                 title: r.title ?? null,
+                pinned: r.pinned === true,
             };
         });
     }