@sema-agent/server 7.125.1 → 7.127.0

package/dist/http/routes/sessions.js

@@ -9,7 +9,7 @@ import { sentMemoryComplianceFailure } from "../memory-compliance-failure-reply.
 import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, MAX_SETTINGS_ENV_VARS, MAX_SETTINGS_ENV_KEY_CHARS, MAX_SETTINGS_ENV_VALUE_CHARS } from "../../task-settings.js";
 import { readWritableSessionPermissionRules, describeSessionPermissionRulesProblem } from "../../session-policy-wire.js";
 import { sendJson, sendError, sendSessionError, sendSessionPolicyError, sseHeaders } from "../send.js";
-import { gatedPrincipal, explicitOperatorOk, runOwnerReadable, sendPrincipalRefusal, sendUnauthorized } from "../principal-gate.js";
+import { gatedPrincipal, explicitOperatorOk, sessionOwnerReadable, sendPrincipalRefusal, sendUnauthorized } from "../principal-gate.js";
 import { assertNever, SESSION_NOT_FOUND_MESSAGE } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
 import { rosterAgentId } from "./agents-roster.js";
@@ -54,7 +54,7 @@ async function readLastLegMcp(deps, sessionId, principal) {
     const latest = await runStore.latestRunForSession(sessionId);
     if (latest === undefined)
         return undefined;
-    if (!runOwnerReadable(principal, latest.owner, deps.config) && !explicitOperatorOk(principal, deps.config.operatorPrincipals))
+    if (!sessionOwnerReadable(principal, latest.owner, deps.config) && !explicitOperatorOk(principal, deps.config.operatorPrincipals))
         return undefined;
     const events = await runStore.getEvents(latest.taskId, 0);
     for (let i = events.length - 1; i >= 0; i--) {
@@ -70,7 +70,7 @@ async function readLastLegMcp(deps, sessionId, principal) {
 }
 export async function handleSessions(req, res, match, ctx) {
     const { deps } = ctx;
-    const { readJson, safeDecode, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite } = ctx.helpers;
+    const { readJson, safeDecode, sessionOwnerOk, sessionOwnerScopeForWrite } = ctx.helpers;
     const readOwnedSessionView = async (sessionAudit, sessionId, readOpts) => {
         const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
         if (ownerOf !== undefined) {
@@ -79,7 +79,7 @@ export async function handleSessions(req, res, match, ctx) {
                 sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                 return undefined;
             }
-            if (!runOwnerOk(req, res, owner, "session"))
+            if (!sessionOwnerOk(req, res, owner))
                 return undefined;
         }
         let audit;
@@ -95,7 +95,7 @@ export async function handleSessions(req, res, match, ctx) {
             sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
             return undefined;
         }
-        if (!runOwnerOk(req, res, audit.owner, "session"))
+        if (!sessionOwnerOk(req, res, audit.owner))
             return undefined;
         return audit;
     };
@@ -265,7 +265,7 @@ export async function handleSessions(req, res, match, ctx) {
                     return;
                 }
                 owner = head.owner;
-                if (!runOwnerOk(req, res, owner ?? null, "session"))
+                if (!sessionOwnerOk(req, res, owner ?? null))
                     return;
                 leafId = head.leafId;
             }
@@ -275,7 +275,7 @@ export async function handleSessions(req, res, match, ctx) {
                     sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                     return;
                 }
-                if (!runOwnerOk(req, res, owner ?? null, "session"))
+                if (!sessionOwnerOk(req, res, owner ?? null))
                     return;
                 leafId = await getLeafId(headSession);
             }
@@ -359,7 +359,7 @@ export async function handleSessions(req, res, match, ctx) {
                     sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
                     return;
                 }
-                if (!runOwnerOk(req, res, owner ?? null, "session")) {
+                if (!sessionOwnerOk(req, res, owner ?? null)) {
                     cleanup();
                     return;
                 }
@@ -666,7 +666,7 @@ export async function handleSessions(req, res, match, ctx) {
             sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
             return;
         }
-        if (!runOwnerOk(req, res, face.owner, "session"))
+        if (!sessionOwnerOk(req, res, face.owner))
             return;
         const read = readSessionRowPatch(await readJson(req));
         if ("problem" in read) {

package/dist/http/routes/side-query.js

@@ -1,4 +1,4 @@
-import { expandTiers, isThinkingLevel } from "@sema-agent/core";
+import { MODEL_ROLES, expandTiers, isThinkingLevel } from "@sema-agent/core";
 import { HttpError } from "../../security.js";
 import { isAtMentionable, matchCatalogModel, refusedCatalogEntry, selectableCatalog } from "../../model-select.js";
 import { modelUnavailableMessage } from "../../model-entry-refusal.js";
@@ -12,22 +12,8 @@ export function isCorePreflightValidationError(message) {
     return CORE_PREFLIGHT_VALIDATION_PREFIXES.some((prefix) => message.startsWith(prefix));
 }
 export const CORE_PREFLIGHT_VALIDATION_ANCHORS = CORE_PREFLIGHT_VALIDATION_PREFIXES;
-const MODEL_ROLE_TABLE = {
-    default: true,
-    summarize: true,
-    subagent: true,
-    team: true,
-    synthesize: true,
-    advisor: true,
-    verifier: true,
-    classifier: true,
-    consolidate: true,
-};
 function isModelRole(value) {
-    return typeof value === "string" && Object.hasOwn(MODEL_ROLE_TABLE, value);
-}
-function passthroughModelRole(value) {
-    return value;
+    return typeof value === "string" && MODEL_ROLES.includes(value);
 }
 function shapeSideQueryEcho(result) {
     if (result.responseModel === undefined || admitProviderEcho(result.responseModel, "side-query.responseModel"))
@@ -76,8 +62,9 @@ export async function handleSideQuery(req, res, match, ctx) {
                     sendError(res, 400, "request.field_invalid", "invalid thinking level");
                     return;
                 }
-                if (typeof body.model !== "string" && body.modelRole !== undefined && !isModelRole(body.modelRole)) {
-                    sendError(res, 400, "request.field_invalid", `invalid modelRole (expected one of: ${Object.keys(MODEL_ROLE_TABLE).join(", ")}) — a role only resolves a model when 'model' is absent`);
+                if (body.modelRole !== undefined && !isModelRole(body.modelRole)) {
+                    const shown = (typeof body.modelRole === "string" ? JSON.stringify(body.modelRole.slice(0, 80)) : `of type ${body.modelRole === null ? "null" : Array.isArray(body.modelRole) ? "array" : typeof body.modelRole}`);
+                    sendError(res, 400, "request.field_invalid", `invalid modelRole ${shown} — must be a string, one of ${MODEL_ROLES.join(" / ")} (the engine's role vocabulary); a value outside it is refused before any model call`);
                     return;
                 }
                 if (typeof body.model === "string" && body.model.length > 0) {
@@ -98,7 +85,7 @@ export async function handleSideQuery(req, res, match, ctx) {
                 const spec = {
                     messages: body.messages,
                     ...(typeof body.model === "string" ? { model: body.model } : {}),
-                    ...(typeof body.modelRole === "string" ? { modelRole: passthroughModelRole(body.modelRole) } : {}),
+                    ...(isModelRole(body.modelRole) ? { modelRole: body.modelRole } : {}),
                     ...(isThinkingLevel(body.thinking) ? { thinking: body.thinking } : {}),
                     ...(typeof body.systemPrompt === "string" ? { systemPrompt: body.systemPrompt } : {}),
                     ...(Array.isArray(body.tools) ? { tools: body.tools } : {}),

package/dist/http/routes/tasks.js

@@ -13,9 +13,10 @@ import { clearTurnActivity, readTurnActivityMs, recordTurnActivity } from "../..
 import { buildCancelledLedgerRow, createRunAbort, mintCancelledResult } from "../../run-cancel-context.js";
 import { recordResourceWindow } from "../../resource-window.js";
 import { redactSecrets } from "../../trace/redact.js";
-import { contextUsageEventData, turnEndEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestFaceEventData, toolRosterDeltaEventData, toolProgressEventData, toolDisclosureEventData, humanInputEventData, appendModelUsageDelta, attachModelUsage, textEndEventData, liveIdentityFields } from "../../trace/project.js";
+import { liveToolEndForBacklog } from "../../trace/tool-output-media.js";
+import { contextUsageEventData, turnEndEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestFaceEventData, toolRosterDeltaEventData, toolProgressEventData, toolDisclosureEventData, humanInputEventData, appendModelUsageDelta, attachModelUsage, textEndEventData, liveIdentityFields } from "../../trace/project.js";
 import { cascadeConfig, runMeta } from "../run-meta.js";
-import { idemCallerOf, idemKeyOf, inflightKeyOf } from "../idempotency.js";
+import { idemCallerOf, inflightKeyOf, submissionIdemOf } from "../idempotency.js";
 import { replayOfExistingRun } from "../submit-replay.js";
 import { sendJson, sendError, sseHeaders } from "../send.js";
 import { collectSsePreamble } from "../sse-log.js";
@@ -37,7 +38,8 @@ const DISCONNECT_PARK_GRACE_MS = 10_000;
 function sseData(res, payload) {
     const anchor = payload.eventId;
     const idLine = typeof anchor === "string" && anchor.length > 0 ? `id: ${anchor}\n` : "";
-    res.write(`${idLine}data: ${JSON.stringify(payload)}\n\n`);
+    const frame = payload.type === "tool_end" ? liveToolEndForBacklog(payload, res.writableLength) : payload;
+    res.write(`${idLine}data: ${JSON.stringify(frame)}\n\n`);
 }
 async function mintSubmitExitResult(result, checkpoints) {
     return redactTerminalResult(sealResultForExit(await graftParkToolCallId(result, checkpoints)));
@@ -74,7 +76,7 @@ const MULTI_ATTEMPT_NO_EVENT_CHANNEL_NOTICE = "verify / cascade ran with their n
 export async function handleTasks(req, res, match, ctx) {
     const { deps } = ctx;
     const { idemCache, inflightRuns, steerableRuns, counters } = ctx.registry;
-    const { rateLimited, quotaExceeded, leaseDenied, usageWindowDenied } = ctx.helpers;
+    const { readJson, rateLimited, quotaExceeded, leaseDenied, usageWindowDenied } = ctx.helpers;
     const { prepareSpec, finalizeTaskResult } = ctx.legs;
     const reqState = ctx.req;
     const source = ctx.req.source;
@@ -97,12 +99,13 @@ export async function handleTasks(req, res, match, ctx) {
     {
         const rawIdem = headerStr(req.headers["idempotency-key"]);
         const submitter = gatedPrincipal(req, deps.config);
-        const idemKey = rawIdem ? idemKeyOf(rawIdem, idemCallerOf(req, ctx), "run") : undefined;
-        const inflightKey = idemKey ? inflightKeyOf(idemKey, "sync") : undefined;
+        const keyedBody = rawIdem ? await readJson(req) : undefined;
+        const idem = rawIdem ? submissionIdemOf(rawIdem, idemCallerOf(req, ctx), keyedBody) : undefined;
+        const inflightKey = idem ? inflightKeyOf(idem, "sync") : undefined;
         const cached = inflightKey ? idemCache.peek(inflightKey) : undefined;
-        const keyedRow = idemKey && !cached && deps.runStore ? await deps.runStore.getRunByIdem(idemKey) : undefined;
+        const keyedRow = idem && !cached && deps.runStore ? await deps.runStore.getRunByIdem(idem.key) : undefined;
         if (keyedRow && deps.runStore) {
-            const replay = await replayOfExistingRun(keyedRow, { principal: submitter }, "sync", deps, deps.runStore);
+            const replay = await replayOfExistingRun(keyedRow, { principal: submitter, idem }, "sync", deps, deps.runStore);
             if (liveStream && replay.status === 200) {
                 sseHeaders(res, { "x-task-id": keyedRow.taskId });
                 writeMetaFrame(res, keyedRow.taskId, keyedRow.sessionId);
@@ -141,7 +144,7 @@ export async function handleTasks(req, res, match, ctx) {
         }
         if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)) || (await usageWindowDenied(req, res)))
             return;
-        const prepared = await prepareSpec(req, res, undefined, undefined, { liveStream });
+        const prepared = await prepareSpec(req, res, keyedBody, undefined, { liveStream });
         if (!prepared)
             return;
         const principal = prepared.auth?.principal;
@@ -257,15 +260,13 @@ export async function handleTasks(req, res, match, ctx) {
                 };
                 if (deps.runStore && prepared.spec.sessionId) {
                     const tid = earlyDurableTid ?? uuidv7();
-                    const created = await deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", { ...runMeta(prepared, source), idemKey: idemKey ?? null });
+                    const created = await deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", { ...runMeta(prepared, source), idem: idem ?? null });
                     if (created.ok)
                         clearTurnActivity(tid);
                     if (created.ok)
                         recordResourceWindow(tid, prepared.spec.resourceSuspend);
-                    if (created.ok)
-                        deps.sessionTitler?.maybeTitle(prepared.spec.sessionId, prepared.spec.objective, typeof prepared.spec.model === "string" ? prepared.spec.model : prepared.spec.model?.id);
                     if (created.existing) {
-                        const replay = await replayOfExistingRun(created.existing, { principal: submitter }, "sync", deps, deps.runStore);
+                        const replay = await replayOfExistingRun(created.existing, { principal: submitter, idem }, "sync", deps, deps.runStore);
                         sseData(res, { type: "done", result: doneResultOfOutcome(replay), replay: true });
                         return replay;
                     }
@@ -389,6 +390,9 @@ export async function handleTasks(req, res, match, ctx) {
                                     if (t === "task_progress") {
                                         sseData(res, { type: "task_progress", ...taskProgressEventData(e) });
                                     }
+                                    else if (t === "task_started") {
+                                        sseData(res, { type: "task_started", ...taskStartedEventData(e) });
+                                    }
                                     else if (t === "tool_start") {
                                         const tsv = e;
                                         sseData(res, { type: "tool_start", ...toolStartEventData(tsv) });
@@ -457,6 +461,7 @@ export async function handleTasks(req, res, match, ctx) {
                                     userMsgEntryId = ev.entryId;
                                 const causeAtDone = ev.type === "done" ? ac.cause() : undefined;
                                 await deps.userInputLedger?.observeLegEvent(liveStream, ev);
+                                prepared.acceptance.observe(ev);
                                 if (ev.type === "done") {
                                     finalResult = await mintSubmitExitResult(ev.result, deps.checkpointStore);
                                     if (durableTaskId && finalResult)
@@ -464,7 +469,7 @@ export async function handleTasks(req, res, match, ctx) {
                                     if (causeAtDone !== undefined && finalResult !== undefined) {
                                         finalResult = mintCancelledResult({ taskId: durableTaskId ?? "", sessionId: prepared.spec.sessionId ?? "", startedAtMs: streamLegStartedAt, message: "cancelled by user", cause: causeAtDone, engineResult: finalResult });
                                     }
-                                    finalizeTaskResult(ev.result, principal, prepared.spec.objective, prepared.spec.sessionId);
+                                    finalizeTaskResult(ev.result, principal, prepared.spec.objective);
                                     noteRunOutcome(finalResult);
                                     putRewindAnchor();
                                     settleFleet(outwardPlane(finalResult.terminal).status, fleetRunResiduals(finalResult));
@@ -516,6 +521,9 @@ export async function handleTasks(req, res, match, ctx) {
                                 else if (ev.type === "task_progress") {
                                     sseData(res, { type: "task_progress", ...taskProgressEventData(ev) });
                                 }
+                                else if (ev.type === "task_started") {
+                                    sseData(res, { type: "task_started", ...taskStartedEventData(ev) });
+                                }
                                 else if (ev.type === "compacted") {
                                     sseData(res, { type: "compacted", ...compactedEventData(ev) });
                                 }
@@ -830,19 +838,18 @@ export async function handleTasks(req, res, match, ctx) {
                 let durableHeartbeat;
                 if (deps.runStore && prepared.spec.sessionId) {
                     const tid = uuidv7();
-                    const created = await deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", { ...runMeta(prepared, source), idemKey: idemKey ?? null });
+                    const created = await deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", { ...runMeta(prepared, source), idem: idem ?? null });
                     if (created.ok)
                         clearTurnActivity(tid);
                     if (created.ok)
                         recordResourceWindow(tid, prepared.spec.resourceSuspend);
                     if (created.existing)
-                        return await replayOfExistingRun(created.existing, { principal: submitter }, "sync", deps, deps.runStore);
+                        return await replayOfExistingRun(created.existing, { principal: submitter, idem }, "sync", deps, deps.runStore);
                     if (!created.ok)
                         return { status: 409, body: await buildActiveRunConflict({ runStore: deps.runStore, checkpointStore: deps.checkpointStore, governance: deps.config, runStaleSec: deps.config.runStaleSec, turnActivity: readTurnActivityMs }, prepared.spec.sessionId, created.activeTaskId) };
                     const placementReject = await commitPlacement(deps, deps.runStore, tid, prepared.bindingIntent);
                     if (placementReject)
                         return { status: placementReject.status, body: devicePlacementErrorBody(placementReject) };
-                    deps.sessionTitler?.maybeTitle(prepared.spec.sessionId, prepared.spec.objective, typeof prepared.spec.model === "string" ? prepared.spec.model : prepared.spec.model?.id);
                     durableTaskId = tid;
                 }
                 commitSessionInheritEnv(deps, prepared.spec.sessionId, prepared.body);
@@ -885,8 +892,10 @@ export async function handleTasks(req, res, match, ctx) {
                     const cascadeLeg = () => runCascade(prepared.runner, specWithSignal, cascadeConfig(deps.config.cascadeLadder, prepared.spec.limits?.maxCostUsd));
                     const plainLeg = async () => {
                         const stream = prepared.runner.runTaskStream(specWithSignal);
-                        for await (const ev of stream)
+                        for await (const ev of stream) {
                             observeSyncLegEvent(ev);
+                            prepared.acceptance.observe(ev);
+                        }
                         return stream.result();
                     };
                     result = await instructionLeg.run(prepared.spec.sessionId, () => withPrincipal(principal, () => prepared.verify ? verifyLeg(prepared.verify) : prepared.cascade ? cascadeLeg() : plainLeg()));
@@ -933,7 +942,8 @@ export async function handleTasks(req, res, match, ctx) {
                 }
                 if (durableTaskId && deps.runStore)
                     await deps.runStore.setTerminal(durableTaskId, syncPlane.status, exitResult, syncPlane.errorMessage ?? null);
-                finalizeTaskResult(result, principal, prepared.spec.objective, prepared.spec.sessionId);
+                prepared.acceptance.settle(result);
+                finalizeTaskResult(result, principal, prepared.spec.objective);
                 noteRunOutcome(result);
                 return { status: 200, body: withSyncSubmitKeys(buildSyncSubmitBody(exitResult)) };
             };

package/dist/http/routes/workflows.js

@@ -13,6 +13,7 @@ import { sendJson, sendError, sseHeaders } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
+import { steerBodyKeyIssue } from "../../request-key-closure.js";
 export async function handleWorkflows(req, res, match, ctx) {
     const { deps } = ctx;
     const { runSessionAcceptOk } = ctx.helpers;
@@ -188,6 +189,13 @@ export async function handleWorkflowAgentSteer(req, res, match, ctx) {
             sendError(res, 400, "request.body_shape", "body must be { content: string (non-empty) }");
             return;
         }
+        {
+            const keyIssue = steerBodyKeyIssue(body, "content");
+            if (keyIssue) {
+                sendError(res, 400, "request.body_shape", keyIssue.message, { unknownKeys: keyIssue.unknownKeys, unsupportedKeys: keyIssue.unsupportedKeys });
+                return;
+            }
+        }
         if (body.content.length > STEER_IN_MAX_REQUEST_CHARS) {
             sendError(res, 413, "steer.content_too_large", `content exceeds ${STEER_IN_MAX_REQUEST_CHARS} characters (got ${body.content.length}); note only the first ${STEER_IN_MAX_CHARS} are delivered anyway`);
             return;

package/dist/http/server.d.ts

@@ -718,6 +718,10 @@ export interface ServiceDeploymentDeps {
      *  (`boot/stage-10-http-server.ts` → `modelRefusals: () => deployment.modelRefusalsState?.()`)—— 一处铸、两出口。缺席 / 返回 undefined =
      *  没有可报的拒或没有配置管道 ⇒ `/health` 形状逐字不变(additive)。 */
     modelRefusalsState?: () => import("@sema-agent/settings-schema").ModelRefusalsSignal | undefined;
+    /** S-1457:`GET /v1/models.candidateRejected` 的取值口 —— 最近一次配置候选被判官整拒的结论(`boot/stage-10-http-server.ts` →
+     *  `candidateRejectionState: () => webAdmin.candidateRejectionState()`;座 = web-admin 的 `candidateRejection`,`config_candidate_rejected` 日志行的去重键读同一份)。
+     *  present-iff 当前生效配置是因候选被拒而回落的那一份;缺席 / 返回 undefined = 没有被拒的候选或没有配置管道 ⇒ `GET /v1/models` 不出该键(additive)。 */
+    candidateRejectionState?: () => import("../web-admin-client/candidate-gate.js").CandidateRejection | undefined;
     /** `/health.configHandoff`(只上 `/health`):在场 ⇔ 部署声明了耐久接力 ∧ 应用着的那一代没被确认(web-admin 接力账的 `configHandoffState()`;合成律
      *  `fleet/engine-signal.ts` 的 `buildConfigHandoff`)。缺席 / 返回 undefined = 有接力、没有中心或本地腿 ⇒ 键缺席。 */
     configHandoffState?: () => import("../fleet/engine-signal.js").ConfigHandoff | undefined;

package/dist/http/server.js

@@ -5,7 +5,6 @@ import { validatePendingSteer } from "@sema-agent/core";
 import {} from "../web-admin-client/facade.js";
 import { HttpError } from "../security.js";
 import {} from "../memory-sync.js";
-import { evictIfConflict } from "../runs.js";
 import {} from "../orchestration/workflow-agent-steer.js";
 import {} from "../orchestration/workflow-completion-inbox.js";
 import {} from "../fleet/fleet-bus.js";
@@ -113,9 +112,9 @@ export function createHttpServer(rawDeps) {
             }
         };
     }
-    const { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, isFleetWide, sessionOwnerScope, sessionOwnerScopeForWrite, runOwnerOk, runSessionAcceptOk, readJson, readRawBody } = createRequestGuards({ deps });
+    const { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, isFleetWide, sessionOwnerScope, sessionOwnerScopeForWrite, runOwnerOk, sessionOwnerOk, runSessionAcceptOk, readJson, readRawBody } = createRequestGuards({ deps });
     const { prepareSpec } = createAdmission({ deps, readJson, runnerFor });
-    const { routeCtxBase, resumeCheckpoint, driveResumeIntoRunLog, driveResumeLeg, mayDiscloseRowError, resumePreempted, startFreshHostTurn, resumeWake } = createResumeLegs({ deps, runnerFor, idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, safeDecode, isFleetWide, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite, runSessionAcceptOk, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor });
+    const { routeCtxBase, resumeCheckpoint, driveResumeIntoRunLog, driveResumeLeg, mayDiscloseRowError, resumePreempted, startFreshHostTurn, resumeWake } = createResumeLegs({ deps, runnerFor, idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, safeDecode, isFleetWide, runOwnerOk, sessionOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite, runSessionAcceptOk, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor });
     const { denyExpiredApprovals, redeemParkedAsk } = createApprovalSweeps({ deps, resumeCheckpoint, mayDiscloseRowError });
     const { handle } = createDispatch({ deps, noteActivity, routeCtxBase, counters });
     const server = http.createServer((req, res) => {
@@ -162,10 +161,9 @@ export function createHttpServer(rawDeps) {
             deps.metrics?.inc("cascade_total", { outcome: cascadeOutcome });
         deps.instrumentDegenerate?.(result);
     }
-    function finalizeTaskResult(result, principal, objective, sessionId) {
+    function finalizeTaskResult(result, principal, objective) {
         recordTaskResult(result);
         deps.planCacheProbe?.record(principal, objective, result.terminal.kind === "completed");
-        evictIfConflict(deps.runner, sessionId, result);
     }
     const isRunLiveOnThisReplica = (taskId) => inflightRuns.has(taskId) || steerableRuns.has(taskId);
     return Object.assign(server, { denyExpiredApprovals, isRunLiveOnThisReplica, redeemParkedAsk });

package/dist/http/submit-replay.d.ts

@@ -2,15 +2,19 @@
  * 提交幂等的**唯一回执函数** —— 一把提交钥匙命中了一条既有 run 行之后,这次提交拿到什么。
  *
  * ## 律(一条)
- * 幂等 = 资源行上的唯一键。`task_run` 上有两把:`idem_key`(`Idempotency-Key`,唯一铸法 `idemKeyOf(raw, caller, "run")`)
- * 与 `task_id`(调用方自铸的 `body.taskId`;A2A 由 messageId 派生)。哪一把命中、在哪条提交腿上命中、是请求进门时
- * 读行命中还是建行撞唯一键时观察到,一律经**本函数**作答 —— 提交面不再有第二个判官(进程内缓存只做在飞合流,
- * 见 `http/idempotency.ts`)。
+ * 幂等 = 同一调用方、同一键、**同一请求**,执法点 = 资源行上的唯一键。`task_run` 上有两把:`idem_key`(`Idempotency-Key`,唯一铸法
+ * `idemKeyOf(raw, caller, "run")`)与 `task_id`(调用方自铸的 `body.taskId`;A2A 由 messageId 派生);`idem_key` 旁边记着绑定它的那次
+ * 请求的体指纹(`idem_body_fingerprint`,`RunIdemBinding`)。哪一把命中、在哪条提交腿上命中、是请求进门时读行命中还是建行撞唯一键时
+ * 观察到,一律经**本函数**作答 —— 提交面不再有第二个判官(进程内缓存只做在飞合流,且只合同一请求,见 `http/idempotency.ts`)。
  *
- * ## 判定(两条,别的一律不放)
+ * ## 判定(三条,按序;别的一律不放)
  *  · 这次提交自带 taskId 而命中的行**不是**那一条(`Idempotency-Key` 指向别的行)⇒ 冲突;
- *  · 调用方读不到这一行(属主门 = `runOwnerReadable`,「这个调用方读得到这一行 run 吗」的唯一谓词)⇒ 冲突。
- * 冲突 ⇒ `409 conflict.run_exists`,体里**不回显**那条行的任何标识(不给跨租户预言机)。
+ *  · 调用方读不到这一行(属主门 = `runOwnerReadable`,「这个调用方读得到这一行 run 吗」的唯一谓词)⇒ 冲突;
+ *    冲突 ⇒ `409 conflict.run_exists`,体里**不回显**那条行的任何标识(不给跨租户预言机)。先于下一条判:读不到的行不比体。
+ *  · 这次提交带 `Idempotency-Key`(`caller.idem` 在场)、那一行绑的**就是这把键**,而它记着的请求体指纹与这次不同 ⇒
+ *    `409 conflict.idempotency_payload_mismatch`(同形 `{ error, errorCode }`,不回显键与那一行);**不**回放首发、不新建、那一行不动。
+ *    行上没有指纹(列之前绑的键)⇒ 这一只绑上(同键先到者绑,`RunStore.bindIdemBodyFingerprint`)并放行。指纹属于绑定它的那把键:
+ *    按 taskId 命中而键是另一把(或行是无键提交建的)⇒ 不比、不写;只凭 `body.taskId` 的提交不带绑定,不比体。
  *
  * ## 回执两形(按提交腿)
  *  · `durable`(`POST /v1/runs`、A2A `message/send`)—— `202 { taskId, sessionId, status }`(这条腿首答的既有形);
@@ -18,7 +22,7 @@
  *    (读面 = `GET /v1/runs/:id` 的 200 体,同一只投影口 `readRunFace`)。同步腿的首答是引擎结果,而重放时手里只有行;
  *    `replay: true` 是这一形的判别位。
  */
-import type { RunRecord } from "../plugins/store-contracts.js";
+import type { RunIdemBinding, RunRecord } from "../plugins/store-contracts.js";
 import type { RunStore } from "../plugins/store-backend.js";
 import type { ServiceConfig } from "../config-types.js";
 import type { SubmitOutcome } from "./idempotency.js";
@@ -30,6 +34,9 @@ export interface ReplayCaller {
     principal: string | undefined;
     /** 这次提交自带的 taskId(`body.taskId`;A2A 派生值)。缺席 = 只凭 `Idempotency-Key` 命中。 */
     clientTaskId?: string;
+    /** 这次提交的账本绑定(键 + 请求体指纹;`RunIdemBinding`)。`undefined` = 这次提交没带 `Idempotency-Key`(只凭 `body.taskId`)⇒ 不比体。
+     *  必填位(值可为 `undefined`):每个调用点都得当面说出它有没有绑定,漏传是编译错误,不是静默不比。 */
+    idem: RunIdemBinding | undefined;
 }
 /** 一份提交回执是不是 {@link replayOfExistingRun} 铸的**冲突**体(判别位 = 机器码;铸点就在下面,码与它同文件)—— 把回执渲成别的协议形的
  *  调用方(A2A)按它分句,不另抄码。 */

package/dist/http/submit-replay.js

@@ -8,6 +8,12 @@ export async function replayOfExistingRun(row, caller, face, deps, runStore) {
     if (!sameRun || !runOwnerReadable(caller.principal, row.owner, deps.config)) {
         return { status: 409, body: { error: "a run already exists for this submission's taskId or Idempotency-Key", errorCode: "conflict.run_exists" } };
     }
+    if (caller.idem !== undefined) {
+        const held = await runStore.bindIdemBodyFingerprint(row.taskId, caller.idem);
+        if (held !== null && held !== caller.idem.bodyFingerprint) {
+            return { status: 409, body: { error: "this Idempotency-Key was already used for a different request body — a retry must resend the same body; send a different request with a new Idempotency-Key", errorCode: "conflict.idempotency_payload_mismatch" } };
+        }
+    }
     switch (face) {
         case "durable":
             return { status: 202, body: { taskId: row.taskId, sessionId: row.sessionId, status: row.status } };

package/dist/http/wire-types.d.ts

@@ -13,7 +13,7 @@ export interface TaskRequestBody {
     objective: string;
     sessionId?: string;
     /** Which deployment SCENARIO assembles this task's tools/prompt/skills (the keys of the worker's scenario
-     *  table — e.g. "default"/"code-review"/"scan"/"discuss"). An INTENT bounded by the deployment's own table AND,
+     *  table — e.g. "default"/"code"/"code-review"/"scan"). An INTENT bounded by the deployment's own table AND,
      *  on a governed worker, by the principal's center-resolved allowlist: an unknown name is a typed 400
      *  `scenario_unknown`, a known-but-not-allowed one a typed 400 `scenario_not_allowed`; absent ⇒ the ruling's
      *  assigned scenario, else `DEFAULT_SCENARIO` (consumed at `boot/resolve-spec.ts` via `gateScenarioRequest`). A name
@@ -94,14 +94,6 @@ export interface TaskRequestBody {
      *  a rung fails the gate (default = it didn't complete). Default off; mutually exclusive with `verify`;
      *  not on /v1/tasks/stream. ⚠️ each rung is a cold re-run — use for read-only / idempotent tasks. */
     cascade?: boolean;
-    /** Multi-lens review council (the `code-review` scenario's expensive tier) — `council:true` fans the review out
-     *  to N parallel lenses + an arbiter instead of the lead reviewing in-line; `debate:true` additionally runs the
-     *  L2 peer-debate rounds. Read on TWO seams and both matter: the scenario builder mounts `run_council`
-     *  (`capabilities/scenarios.ts` `codeReview`), and `boot/resolve-spec.ts` treats either flag as an EXPLICIT team
-     *  declaration — it widens the task's wall-clock tenancy budget (`resolveTaskLimits`) and suppresses the value
-     *  router's auto-escalation (`explicitTeam`). Only literal `true` counts on both seams. */
-    council?: boolean;
-    debate?: boolean;
     /** Work-view correlation id (optional): groups the runs of one logical task across both client doors
      *  (MCP façade / portal) so a fragmented set of runs reads as one task. Opaque to the engine — only
      *  persisted on the run row + filterable via `GET /v1/tasks?jobId=`. ≤64 chars (matches the column). */
@@ -317,6 +309,12 @@ export interface TaskRequestBody {
     /** [ref]② (core 1.314 工具面控制批): roster 真卸载清单(schema 不上 wire,manifest 收窄)。wire 工具名;
      *  tighten-only(core 继承不变量 union 进子 spawn)。数组-of-string fail-loud at submit。 */
     excludeTools?: string[];
+    /** S-1448(core 7.49.0 #1623,[ref]):引擎的**可用性选择器** —— 这一 run 只用列出的工具(wire 名、别名、`Tool(content)` 整只、
+     *  `mcp__srv` / `mcp__srv__*` / 工具段通配;`"*"` = 本层不设名单;`[]` = 什么都不给)。宿主**原样透传**进 `TaskSpec.allowTools`:
+     *  不算补集、不过滤、不与 `settings.permissions.allow`(免问)混词;没有任何工具答应的名字由引擎开跑前拒(`config.tool_face_control`,同步腿 400)。
+     *  `excludeTools` 是同一只运算的减项(deny 赢)。值形:字符串数组(受理门 400 `request.field_invalid`,与 `excludeTools` 同一只门);
+     *  装着的引擎不认该座 ⇒ 400 `request.field_invalid` 点名所需引擎版本(不静默丢)。无租户门(收窄)。 */
+    allowTools?: string[];
     /** [ref]② (core 1.314): [ref] 延迟披露清单(占位上 wire,ToolSearch 激活)——cli「Workflow 默认开
      *  不暴露」的承载位。同 excludeTools 的校验/继承姿势。 */
     deferTools?: string[];

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export { composeExecutionLane, assertExecutionLaneInvariants, type ExecutionLane
 export { createBrain } from "./brain.js";
 export { createSessionStore } from "./plugins/session-store.js";
 export { createStoreBackend, type StoreBackend, type SessionCaptureRecordSource } from "./plugins/store-backend.js";
+export { RetiredSchemaPresentError } from "./plugins/one-time-migrations.js";
 export { CachingSessionStore, type CachingOptions } from "./plugins/caching-session-store.js";
 export type { RunRecord, RunEvent } from "./plugins/store-contracts.js";
 export { runInBackground } from "./runs.js";
@@ -15,7 +16,6 @@ export { Metrics, createMetrics, type Labels } from "./observability/metrics.js"
 export { RateLimiter, type RateDecision } from "./observability/rate-limit.js";
 export { GiteaClient, GitHubClient, createRepoClient, GIT_API_KINDS, isGitApiKind, repoToolsFor, parseRepo, type GitApiKind, type RepoCoords, type RepoReadClient } from "./capabilities/repo-tools.js";
 export { nowTool } from "./capabilities/builtin-tools.js";
-export { createCouncilTool } from "./capabilities/code-review-council.js";
 export { loadSkills, skillsForScenario, type LoadedSkill } from "./capabilities/skills.js";
 export { buildScenarios, selectScenario, type Scenario, type ScenarioBundle, type ScenarioContext, type ScenarioDeps, type ScenarioRequest, } from "./capabilities/scenarios.js";
 export { createTaskListLane, taskListKeyFor, MAX_TASK_LIST_SESSIONS, type TaskListLane, type TaskListLaneBackend, type TaskListLaneOpts } from "./boot/task-list-lane.js";

package/dist/index.js

@@ -3,6 +3,7 @@ export { composeExecutionLane, assertExecutionLaneInvariants } from "./boot/exec
 export { createBrain } from "./brain.js";
 export { createSessionStore } from "./plugins/session-store.js";
 export { createStoreBackend } from "./plugins/store-backend.js";
+export { RetiredSchemaPresentError } from "./plugins/one-time-migrations.js";
 export { CachingSessionStore } from "./plugins/caching-session-store.js";
 export { runInBackground } from "./runs.js";
 export { createHardenedVmRunner, runInHardenedVm } from "./orchestration/hardened-vm-runner.js";
@@ -13,7 +14,6 @@ export { Metrics, createMetrics } from "./observability/metrics.js";
 export { RateLimiter } from "./observability/rate-limit.js";
 export { GiteaClient, GitHubClient, createRepoClient, GIT_API_KINDS, isGitApiKind, repoToolsFor, parseRepo } from "./capabilities/repo-tools.js";
 export { nowTool } from "./capabilities/builtin-tools.js";
-export { createCouncilTool } from "./capabilities/code-review-council.js";
 export { loadSkills, skillsForScenario } from "./capabilities/skills.js";
 export { buildScenarios, selectScenario, } from "./capabilities/scenarios.js";
 export { createTaskListLane, taskListKeyFor, MAX_TASK_LIST_SESSIONS } from "./boot/task-list-lane.js";

package/dist/internal-run-env.d.ts

@@ -0,0 +1,30 @@
+/**
+ * **服务自己为自己起的 run**(agent 钩子子代理 / leader 的集成沙盒与 grader 沙盒)的执行环境上下文 —— 它们不属于任何用户会话:
+ * 会话 id 是服务现铸的(`uuidv7()` / `leader-integ-<ts>`),会话店里没有这一行,也不该有。
+ *
+ * ── 为什么要在这里表态 ───────────────────────────────────────────────────────────────────────────
+ * k8s 车道的工作区空间按**会话住客**分区(`boot/execution-env.ts` `createK8sRunEnvFactory`):建环境时按 id 读会话店的住客,读不到(= 没有这只会话)
+ * 就报一行 `workspace_space_unavailable`、开着缓存卷时再计一次 fail-open。对用户的 run 这是真信号(会话被删了);对服务自己的 run 它是**恒真的噪声**
+ * —— 每只碰了手的内部 env 一行、计数被内部 runner 抬高。
+ *
+ * ── 怎么表态:不是新开关,是同一条法 ───────────────────────────────────────────────────────────────
+ * 工厂里已有的判别 `placementRootSessionId ≠ sessionId` 读作「这条 run 不拥有自己的空间」(委派子代 / 后台代理与父并发,共用一个空间 = 两个写者,
+ * 按法 off:不读住客、不出该行、不挂缓存卷,停驻车道照旧)。内部 run 同样没有自己的空间 —— 它的放置根不是某个用户会话,而是**服务自己**
+ * ({@link INTERNAL_RUN_PLACEMENT_ROOT})。所以内部 run 只需如实报它的放置根,工厂那一行判别原样把它读成「无空间」;本模块不加任何第二个判据。
+ * 放置根的另一个读者是 device 车道(按根会话找绑定):服务自己的根上没有任何绑定,与修前(根 = 它自己的现铸会话 id,同样没有绑定)同答 —— 拒。
+ */
+import type { ExecutionEnvFactory, ExecutionEnvFactoryContext } from "@sema-agent/core";
+/** 内部 run 的放置根:不是用户会话 id —— 提交口的会话 id 形律只收规范 uuid(`security.ts` `sessionIdShapeIssue`),这个词不是 uuid 形,调用方登记不出它。 */
+export declare const INTERNAL_RUN_PLACEMENT_ROOT = "service:internal-run";
+/** 服务为内部 run 直接调工厂时递的上下文(leader 的集成沙盒 / grader 沙盒):自己的现铸会话 id,放置根 = 服务自己。 */
+export declare function buildInternalRunCtx(sessionId: string): ExecutionEnvFactoryContext;
+/**
+ * 内部 Runner(agent 钩子子代理)的工厂:把 core 递来的上下文的放置根改报为服务自己 —— core 对这类 run 只知道「根 run,根 = 自己」,不知道它是服务
+ * 为自己起的。其余字段(`sessionId` / `taskId` …)原样过境。
+ */
+export declare function createInternalRunEnvFactory(factory: ExecutionEnvFactory): ExecutionEnvFactory;
+/** 内部 Runner 的 deps:`executionEnvFactory` 在场就按 {@link createInternalRunEnvFactory} 换装,其余键原样(缺席仍缺席)。 */
+export declare function withInternalRunEnvs<D extends {
+    readonly executionEnvFactory?: ExecutionEnvFactory;
+}>(deps: D): D;
+//# sourceMappingURL=internal-run-env.d.ts.map

package/dist/internal-run-env.js

@@ -0,0 +1,11 @@
+export const INTERNAL_RUN_PLACEMENT_ROOT = "service:internal-run";
+export function buildInternalRunCtx(sessionId) {
+    return { sessionId, placementRootSessionId: INTERNAL_RUN_PLACEMENT_ROOT };
+}
+export function createInternalRunEnvFactory(factory) {
+    return (ctx) => factory({ ...ctx, placementRootSessionId: INTERNAL_RUN_PLACEMENT_ROOT });
+}
+export function withInternalRunEnvs(deps) {
+    return deps.executionEnvFactory === undefined ? deps : { ...deps, executionEnvFactory: createInternalRunEnvFactory(deps.executionEnvFactory) };
+}
+//# sourceMappingURL=internal-run-env.js.map

package/dist/leader/wire.js

@@ -19,6 +19,7 @@ import { runLeaderTask, withLeaderLeg } from "./leader.js";
 import { attachRepairLoopDeps } from "./repair-wire.js";
 import { routePlanWithFallback, validateSubtasks } from "./planner.js";
 import { createEngineNoticeSeat } from "../boot/runner-deps.js";
+import { buildInternalRunCtx } from "../internal-run-env.js";
 import { currentPrincipal } from "../observability/principal-context.js";
 import { redactHead } from "../observability/run-terminal.js";
 const REPAIR_LOOP_WIRED = true;
@@ -379,7 +380,7 @@ export function createLeaderRunner(cfg) {
         const provisionIntegrationSandbox = async () => {
             if (cfg.envFactory) {
                 const integSessionId = `leader-integ-${Date.now()}`;
-                const env = await cfg.envFactory({ sessionId: integSessionId, placementRootSessionId: integSessionId });
+                const env = await cfg.envFactory(buildInternalRunCtx(integSessionId));
                 const reap = createEnvReaper(env, "leader integration sandbox");
                 try {
                     await sh(env)(body.seedCmd);
@@ -431,7 +432,7 @@ export function createLeaderRunner(cfg) {
             let env;
             if (cfg.envFactory) {
                 const graderSessionId = `leader-grader-${Date.now()}`;
-                env = await cfg.envFactory({ sessionId: graderSessionId, placementRootSessionId: graderSessionId });
+                env = await cfg.envFactory(buildInternalRunCtx(graderSessionId));
             }
             else {
                 if (!cfg.e2bApiKey)

package/dist/lsp/manager.js

@@ -79,7 +79,7 @@ export class E2bLspManager {
                 return undefined;
             }
             if (heal)
-                await session.warmOpen(heal.carry).catch(() => ({ opened: 0, failed: heal.carry.length }));
+                await session.warmOpen(heal.carry).catch(() => ({ opened: 0, failed: heal.carry.length, deferred: 0 }));
             if (sessions.get(language) !== job) {
                 await session.close().catch(() => undefined);
                 return undefined;