@sema-agent/server 7.126.0 → 7.127.0

package/dist/session-error-wire.d.ts

@@ -29,8 +29,8 @@
  *    列表里的缺席),码位各不相同,不由本表统一。
  *  · `invalid_entry` / `invalid_fork_target` / `placement_refused` —— 留白:本仓今天没有一条 wire 口把它们作为自己的
  *    应答(它们在 core 的追加 / 分叉 / 放置面上抛,落进各站点既有的处置或通用 500)。给它们起名是另一件事、另一张票。
- *  · `storage` / `conflict` / `unknown` —— 留白:`conflict` 由提交腿的 CAS 冲突臂按结果处置(`runs.ts`
- *    `isSessionConflictResult`),`storage` / `unknown` 是故障类,通用 500 就是它们今天的应答。
+ *  · `storage` / `conflict` / `unknown` —— 留白:`conflict` 是 run 的写撞上真并发写,落成那条 run 的 `failed` 终局
+ *    (`terminal.code: "conflict"`),提交腿不另作处置;`storage` / `unknown` 是故障类,通用 500 就是它们今天的应答。
  *
  * core 给闭集加一个词 ⇒ 下面的 `switch` 编译红,由人裁定它在两面上的答复,而不是让它静默落进某个恰好存在的臂
  * ([ref] 词表纪律;同形先例 `session-policy-wire.ts` 的 `sessionPolicyErrorHttp`)。

package/dist/session-titler.d.ts

@@ -1,8 +1,10 @@
 /**
  * Auto-generated session titles.
  *
- * SHAPE: fire-and-forget at a task submit whose session has NO title (the objective is known then — no need to wait
- * for the run to finish, and the web Recents gets the title sooner). Fills a NULL title only (`setTitleIfNull`,
+ * SHAPE: fire-and-forget once the ENGINE ACCEPTS a submitted run whose session has NO title — the one caller is the
+ * submission's acceptance seat (`run-acceptance.ts`: the objective entered the conversation, or a result-only verify /
+ * cascade leg came back having done work). A run the engine refuses before acceptance never reaches the titler (no
+ * model call for a refused input). No need to wait for the run to finish, and the web Recents gets the title sooner. Fills a NULL title only (`setTitleIfNull`,
  * store-side `WHERE title IS NULL`) — the user writes the SAME column unconditionally (`PATCH /v1/sessions/:id` →
  * `patchSessionMeta`): a user-set title is never overwritten (the probe below reads "titled" and skips the model
  * call), and a title the user cleared (`title: null` ⇒ NULL) is filled again at the next submit (law: `session-row.ts`).
@@ -25,7 +27,7 @@ export interface SessionTitlerDeps {
     setTitleIfNull(sessionId: string, title: string): Promise<boolean>;
     /** Cheap pre-LLM probe: "titled" = skip (a restart/evicted-seen/another replica
      *  already paid — don't re-spend an LLM call); "untitled" = generate; "none" = the session_meta row hasn't
-     *  been REGISTERED yet (createRun fires before the Runner's session acquire) — retry after a grace window,
+     *  been REGISTERED (or was deleted meanwhile) — retry after a grace window,
      *  and if still absent, release the seen slot so the NEXT submit retries (never a permanently-untitled
      *  session via a swallowed early UPDATE-0). Local lane has no row-existence dimension → never "none". */
     probeTitle(sessionId: string): Promise<"none" | "untitled" | "titled">;

package/dist/trace/core-keyset-guard.d.ts

@@ -50,7 +50,7 @@ type _GuardAskReverse = AssertAllKeysHandled<Exclude<AskProjected | AskExcluded,
 type AskFrameServerMinted = "type" | "approvalId" | "argsOmitted" | "outcome" | "governanceForced" | "expiresAtMs" | "expiresInMs" | "serverNowMs" | "parked" | "cause" | "inputHasBidi" | "rememberRefused";
 type _GuardAskFrame = AssertAllKeysHandled<Exclude<keyof ToolApprovalFrame, AskProjected | AskFrameServerMinted>>;
 type _GuardAskFrameReverse = AssertAllKeysHandled<Exclude<AskProjected | AskFrameServerMinted, keyof ToolApprovalFrame>>;
-type TaskEventHandled = "text_delta" | "reasoning_delta" | "tool_start" | "tool_end" | "turn_end" | "compacted" | "diagnostics" | "message_committed" | "status" | "task_notification" | "task_progress" | "steering_injected" | "workspace_changed" | "done" | "context_usage" | "compaction_outcome" | "human_input" | "wiring_manifest" | "text_end" | "tool_roster_delta" | "tool_progress" | "tool_disclosure";
+type TaskEventHandled = "text_delta" | "reasoning_delta" | "tool_start" | "tool_end" | "turn_end" | "compacted" | "diagnostics" | "message_committed" | "status" | "task_notification" | "task_progress" | "steering_injected" | "workspace_changed" | "done" | "context_usage" | "compaction_outcome" | "human_input" | "wiring_manifest" | "text_end" | "tool_roster_delta" | "tool_progress" | "tool_disclosure" | "task_started";
 type _GuardTaskEvent = AssertAllKeysHandled<Exclude<TaskEvent["type"], TaskEventHandled>>;
 type _GuardTaskEventReverse = AssertAllKeysHandled<Exclude<TaskEventHandled, TaskEvent["type"]>>;
 type MailboxProjected = "seq" | "from" | "content" | "sentAt" | "hopChain" | "peerMeta";
@@ -149,7 +149,8 @@ type _GuardParkArmQueue = AssertAllKeysHandled<Exclude<ParkArmKeys, ParkArmQueue
 type _GuardParkArmQueueReverse = AssertAllKeysHandled<Exclude<ParkArmQueueProjected | ParkArmQueueExcluded, ParkArmKeys>>;
 type _NoDoubleBookParkArmQueue = AssertAllKeysHandled<Extract<ParkArmQueueProjected, ParkArmQueueExcluded>>;
 type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requireExistingSession" | "oneShot" | "clientContext" | "resumeAt" | "resumeAtMode" | "model" | "compactionModel" | "thinking" | "systemPrompt" | "appendSystemPrompt" | "promptProvider" | "memory" | "suggestNextPrompts" | "restoreFiles" | "acceptPartialRestore" | "rewindFilesTo" | "tools" | "excludeTools" | "deferTools" | "toolMaterializeStrategy" | "promptProfile" | "toolPolicy" | "onAsk" | "onQuestion" | "hooks" | "durableApproval" | "resourceSuspend" | "resilience" | "finalVerification" | "checkpointStore" | "handsReadOnly" | "memoryPersistenceCapable" | "additionalDirectories" | "additionalReadDirectories" | "enablePlanMode" | "interactiveTools" | "enableFork" | "shellGate" | "approvalReach" | "writeFace" | "mcp" | "a2a" | "skills" | "backgroundScope" | "envFacts" | "limits" | "configOverrides" | "forwardSubagentEvents" | "retainSubagentSessions" | "retainBackgroundProcesses" | "outputSchema" | "outputRetries" | "compaction" | "attachments" | "selfOrchestration" | "getApiKeyAndHeaders" | "interactionPosture" | "agents" | "permissionMode" | "taskId" | "signal" | "preemptSignal" | "maxSuspends" | "skillListingBudgetFraction" | "skillListingMaxDescChars" | "excludeAllTools" | "fileHistory" | "userInvokedSkills" | "outputStyle" | "allowedTools" | "allowTools";
-type TaskSpecUnwired = "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars" | "peerPresence" | "writeProtectedAdditions" | "complianceAdditionalDenies" | "modelRole" | "enableBlockedReport";
+/** 导出:请求体键闭集门(`request-key-closure.ts`)据它锁「本仓记为未接线的引擎座,提交口不许受理」—— 两处分类只能同向。 */
+export type TaskSpecUnwired = "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars" | "peerPresence" | "writeProtectedAdditions" | "complianceAdditionalDenies" | "modelRole" | "enableBlockedReport" | "userAttachments";
 type _GuardTaskSpec = AssertAllKeysHandled<Exclude<keyof TaskSpec, TaskSpecWired | TaskSpecUnwired>>;
 type _GuardTaskSpecReverse = AssertAllKeysHandled<Exclude<TaskSpecWired | TaskSpecUnwired, keyof TaskSpec>>;
 type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "terminal" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "remoteEnvFailures" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveWriteFace" | "effectiveMemoryScopes" | "stats" | "editedFiles" | "responseModel" | "compaction";

package/dist/trace/ledger-events.d.ts

@@ -39,9 +39,15 @@ export type LedgerEventType = "reasoning" | "text" | "tool_start" | "tool_end" |
 /** [ref](core 7.18.0):本条腿的**延迟工具普查**快照(policy / thresholdPercent? / deferred[] / activated[])。
  *  与 `tool_roster_delta` 同判、同理由——**快照语义**(整只替换,回放零合并),而开腿那一份住在
  *  `wiring_manifest` 之后的首帧、**之后每一次激活**只活在本帧上。整帧缺席 = 这条腿什么都没延迟。
- *  🔴 `tool_progress`([ref])**刻意不在本表**:core 的 `tool_progress.ephemeral` 契约逐字「LIVE ONLY …
- *  core never persists this frame」,与 `task_progress` / `status` 同一处置(两条 durable 腿零 case)。 */
- | "tool_disclosure" | "human_input" | "task_progress" | "task_notification" | "turn_end"
+ *  🔴 `tool_progress`([ref])**刻意不在本表**,理由是它自己的、不是「core 标了 LIVE ONLY」:那一条只是**引擎**的义务
+ *  (不进会话树 / 检查点 / 续跑重放),本仓的账本是异步车道的活流与断线重连面,律是「EPHEMERAL 帧带着回放面没有第二来源的
+ *  事实 ⇒ 落账」(`status` / `task_progress` / `task_started` 都落)。`tool_progress` 的事实由同一只调用的 `tool_end` 推出
+ *  (真源在那里;帧的缺席也从不是证据 —— 一个周期内跑完的调用零帧),所以它不落。 */
+ | "tool_disclosure" | "human_input"
+/** core 7.50.0:委派子代**起跑**帧(每周期一只,先于子代的首个 `task_progress`)。按上面那一条律落账:
+ *  `agentType` / `rootSessionId` / `parentSessionId` / `startedAt` 只骑这一帧,`task_progress` 上没有 ⇒ 不落则异步车道
+ *  (`POST /v1/runs` 的活流就是 `GET /v1/runs/:id/events` 的账本 tail)永远读不到。两条 durable 腿主流 + forward 道各一处写口。 */
+ | "task_started" | "task_progress" | "task_notification" | "turn_end"
 /** park 行名**两个**(`appendParked(kind)` 逐字取自 `result.status`)—— 运行期闭集见
  *  {@link PARK_LEDGER_EVENT_TYPES}(本联合是它的类型面,两者由下方的双向断言锁步)。 */
  | "suspended" | "needs_review" | "done" | "failed" | "suggestions" | "model_usage" | "prompt_assembled" | "config_assembled" | "file_link"

package/dist/trace/ledger-sink.d.ts

@@ -97,6 +97,13 @@ export interface LedgerSink {
  * ⚠️ 用它的前提是**这条腿的全部写口都走它**(混用一个绕开链的写口 = 病灶原样保留)。
  */
 export declare function createSerialLedgerAppend(appendEvent: (seq: number, type: LedgerEventType, data: unknown) => Promise<void>, startSeq: number): (type: LedgerEventType, data: unknown) => Promise<void>;
+/**
+ * durable 腿 forward 道(fire-and-forget,同步回调里不能 await)的写失败出口 —— 一只,两处用:本汇的 `onForwardEvent`(bg 腿 +
+ * sync detach 车道 + 续跑腿的 verify 臂)与续跑腿自己的 forward 回调(`http/resume-legs.ts`,那里另有既有的逐次 warn 行)。
+ * F 类留痕 `server.ledger.forward-append-failed`:这一帧永远不在回放面(子代的起跑帧 / tick / 工具卡),run 照跑、不改任何裁决。
+ * 返回 `.catch` 用的处理器(产物是函数 ⇒ `create*`)。
+ */
+export declare function createForwardAppendFailedNote(type: string): (err: unknown) => void;
 export declare function createLedgerSink(opts: {
     /** The seq-stamped durable append — typically `(seq, type, data) => runStore.appendEvent(taskId, seq, type, data)`. */
     appendEvent: (seq: number, type: LedgerEventType, data: unknown) => Promise<void>;

package/dist/trace/ledger-sink.js

@@ -1,6 +1,7 @@
 import {} from "@sema-agent/core";
 import { outwardPlane } from "../terminal.js";
-import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
+import { recordFailOpen } from "../observability/fail-open.js";
+import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
 import { NotifiedKeys, taskNotificationStreamKeyOf } from "../orchestration/workflow-completion-inbox.js";
 import { isParkLedgerEventType } from "./ledger-events.js";
 import { isModelSegmentBoundary, reasoningDeltaBytes, reasoningSegmentEventId } from "./model-segment.js";
@@ -13,6 +14,9 @@ export function createSerialLedgerAppend(appendEvent, startSeq) {
         return step;
     };
 }
+export function createForwardAppendFailedNote(type) {
+    return (err) => recordFailOpen("server.ledger.forward-append-failed", `type=${type} err=${err instanceof Error ? err.message : String(err)}`);
+}
 export function createLedgerSink(opts) {
     const keys = opts.notifiedKeys ?? new NotifiedKeys();
     let seq = 0;
@@ -114,6 +118,9 @@ export function createLedgerSink(opts) {
             case "human_input":
                 await append("human_input", humanInputEventData(ev));
                 break;
+            case "task_started":
+                await append("task_started", taskStartedEventData(ev));
+                break;
             case "task_progress":
                 await append("task_progress", taskProgressEventData(ev));
                 break;
@@ -140,13 +147,16 @@ export function createLedgerSink(opts) {
     const onForwardEvent = (e) => {
         const t = e.type;
         if (t === "task_progress") {
-            void append("task_progress", taskProgressEventData(e)).catch(() => undefined);
+            void append("task_progress", taskProgressEventData(e)).catch(createForwardAppendFailedNote(t));
+        }
+        else if (t === "task_started") {
+            void append("task_started", taskStartedEventData(e)).catch(createForwardAppendFailedNote(t));
         }
         else if (t === "tool_start") {
-            void append("tool_start", toolStartEventData(e)).catch(() => undefined);
+            void append("tool_start", toolStartEventData(e)).catch(createForwardAppendFailedNote(t));
         }
         else if (t === "tool_end") {
-            void append("tool_end", toolEndEventData(e)).catch(() => undefined);
+            void append("tool_end", toolEndEventData(e)).catch(createForwardAppendFailedNote(t));
         }
     };
     const appendStatus = (ev) => {

package/dist/trace/project.d.ts

@@ -290,14 +290,13 @@ export declare function toolEndEventData(ev: {
 /**
  * `tool_progress` 的白名单投影(core 7.18.0 [ref])—— 一只**仍在跑**的工具调用的存活 tick。
  *
- * ## 这一帧只上 live,不落账(判据是 core 的契约,不是本仓的偏好)
+ * ## 这一帧只上 live,不落账(判据是回放面有没有第二来源,不是「core 标了 LIVE ONLY」)
  * core `@contract tool_progress.ephemeral` 逐字:「LIVE ONLY, like `task_progress`/`status`: core never
- * persists this frame (no session-tree entry, no checkpoint state, no resume replay)」。本仓对
- * `task_progress` / `status` 正是同一处置(两条 durable 腿零 case),本帧照抄。
- * 另一条 core 契约把「不落账」从偏好抬成正确性:`@contract tool_progress.cadence` 逐字「A call that
- * finishes inside one interval emits NO frame at all」⇒ **帧的缺席从来不是证据**;落账会让回放面凭空
- * 多出一份「这只调用跑了多久」的账,而那件事的真源是 `tool_end`(core 明写 `elapsedTimeSeconds`
- * **不等于** `tool_end` 的 duration)。
+ * persists this frame (no session-tree entry, no checkpoint state, no resume replay)」—— 那是**引擎**的义务;
+ * 本仓的律是「EPHEMERAL 帧带着回放面没有第二来源的事实 ⇒ 落账」(`status` / `task_progress` / `task_started` 都落)。
+ * 本帧的事实**有**第二来源:`@contract tool_progress.cadence` 逐字「A call that finishes inside one interval emits
+ * NO frame at all」⇒ **帧的缺席从来不是证据**;落账会让回放面凭空多出一份「这只调用跑了多久」的账,而那件事的
+ * 真源是 `tool_end`(core 明写 `elapsedTimeSeconds` **不等于** `tool_end` 的 duration)。
  *
  * ## 信任划线
  *  · `toolCallId` / `toolName` —— 调用 id(🔴 S-283 订正:出身是**服务商**在 tool_use / tool_calls 里给的,引擎缺席时自铸兜底、越界时折叠 ——
@@ -309,7 +308,8 @@ export declare function toolEndEventData(ev: {
  *  · `elapsedTimeSeconds` —— 引擎铸的整秒,单调、一 call 一个原点 ⇒ 有限数才铸键。
  *  · `output` —— 🔴 **UNTRUSTED RAW**,core 逐字「exactly as `tool_end.output`: process output that may
  *    carry secrets, paths or PII; core bounds only its SIZE, and a consumer MUST redact before persisting
- *    or displaying it」⇒ 与 `tool_end.output` **同一只** `redactDeep`,一个字节的例外都不开。
+ *    or displaying it」⇒ 与 `tool_end.output` **同一只**投影 `projectToolOutput`(串形与文本块整只过 `redactDeep`;本帧只有串形,
+ *    媒体块那一臂在这里够不着),一个字节的例外都不开。
  *  · `totalLines` / `totalBytes` —— 引擎计数;core 的缺席律逐字:三者**同进同退**(在场=「观察到了输出」,
  *    缺席=「一个字节都没观察到」,**从不是**「与上一帧相比没变」)。所以本投影按 `output` 的在场判三者:
  *    `output` 读不出 ⇒ 三键一起缺席,不单独留下两个计数(那会把「没输出」谎报成「有输出但读不出」)。
@@ -373,6 +373,47 @@ export declare function taskProgressEventData(ev: {
     seq?: number;
     model?: string;
 }): Record<string, unknown>;
+/**
+ * The `task_started` payload(core 7.50.0):一只委派子代**起跑**的那一帧 —— 每周期一只(首派 / 复活;耐久续跑腿不铸),
+ * 序在子代的 `wiring_manifest` 之后、它的首个 `task_progress` 与首次模型请求之前。
+ *
+ * **活面投、账本落**(与 `task_progress` / `status` 同一条律)。core 契约逐字「Live and ephemeral like `task_progress`:
+ * never persisted, never replayed on resume, absent from checkpoints」—— 那是**引擎**的义务(不进会话树、检查点、续跑重放)。
+ * 本服务的账本是异步车道的活流(`POST /v1/runs` 的观看者读的就是 `GET /v1/runs/:id/events` 的账本 tail)与断线重连面,
+ * 律是「**EPHEMERAL 帧带着回放面没有第二来源的事实 ⇒ 落账**」:`agentType` / `rootSessionId` / `parentSessionId` / `startedAt`
+ * 只骑这一帧,`task_progress` 上没有。(`tool_progress` 不落是同一条律的反面:它的事实由同一只调用的 `tool_end` 推出。)
+ * 调用点:三条 live 腿(sync 主流、sync forward 道、子代 tail 总线)+ 两条 durable 腿(账本汇、resume 腿)各自的主流臂与
+ * forward 道 —— 即 `task_progress` 的全部投影点,同一只构造器。
+ *
+ * 键的信任判与 `task_progress` 孪生**逐键同**(core 原话「every member is a value the run already speaks
+ * elsewhere — this frame introduces no new reading of any of them」⇒ 本仓也不铸第二种读法):
+ *  · run / 会话 id、`seq`、`taskType`、`model`、`workflowRunId`、`agentType` —— 引擎值 verbatim(`agentType` 是解析过的子代类型名,
+ *    不是模型自由文本);`startedAt` 是有限数才上 wire;
+ *  · `name` / `workflowAgentLabel` —— UNTRUSTED 展示文本 ⇒ `redactSecrets`(同 `task_progress.name` / `.workflowAgentLabel`);
+ *  · `spawnName` —— 出生点校验过的队友**身份键** ⇒ verbatim(理由全文在 {@link taskProgressEventData} 的同名键注);
+ *  · 身份两键经 `identityFields`(信封上的 `sourceTaskId` / `bgAgentId` 不由本族构造器投,见 `FRAME_ENVELOPE_KEYS`)。
+ * 缺席即缺席:可选键缺席不铸键(`taskType` 缺席 = 前台子代,禁读作某个默认种类;`seq` 缺席 = 无 `a*` 行,禁读作 cycle 1)。
+ */
+export declare function taskStartedEventData(ev: {
+    /** 判别位(入参就是那一帧;本构造器不投它 —— 帧名由调用点的 `type` 键 / 账本行名给)。 */
+    type?: "task_started";
+    taskId: string;
+    sessionId: string;
+    taskType?: string;
+    seq?: number;
+    workflowRunId?: string;
+    workflowAgentLabel?: string;
+    parentTaskId?: string;
+    parentSessionId?: string;
+    rootSessionId?: string;
+    name?: string;
+    spawnName?: string;
+    agentType?: string;
+    model: string;
+    startedAt: number;
+    eventId?: string;
+    parentToolCallId?: string;
+}): Record<string, unknown>;
 /** The `task_notification` payload (core 1.202 [ref] P2: a background task finished — this event is the
  *  LEDGER/display projection of the OBSERVED terminal state, emitted the moment core observes it. It does NOT
  *  attest that the `<task-notification>` XML has entered the model context: core's steer targets the NEXT TURN

package/dist/trace/project.js

@@ -3,6 +3,7 @@ import { isAskClass, isAskOrigin, isModeReleaseReason, isPermissionMode, isPersi
 import { Value } from "typebox/value";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { redactSecrets, redactDeep } from "./redact.js";
+import { projectToolOutput } from "./tool-output-media.js";
 import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceOrAbsent } from "./sema-provenance.js";
 import { resupplyFields, terminalFrameFacetFields } from "./task-notification-facets.js";
@@ -133,22 +134,34 @@ function modeLedgerDefect(d) {
         return "disposition.released.origin is outside the closed set";
     if (o.mandate !== undefined && !isPersistedRuleMandate(o.mandate))
         return "disposition.released.mandate is outside the closed set";
-    if (o.reason !== undefined && !isModeReleaseReason(o.reason))
-        return "disposition.released.reason is outside the closed set";
     return false;
 }
+function withReleaseReasonTheEngineReads(g) {
+    const d = g.disposition;
+    if (d.kind !== "allowed" || d.released === undefined)
+        return g;
+    const r = d.released;
+    if (r === null || typeof r !== "object")
+        return g;
+    const reason = d.released.reason;
+    if (typeof reason !== "string" || isModeReleaseReason(reason))
+        return g;
+    const { reason: _unread, ...kept } = d.released;
+    return { ...g, disposition: { ...d, released: kept } };
+}
 function screenedGateOrThrow(v) {
     if (v === null || typeof v !== "object") {
         if (v !== undefined)
             recordFailOpen("server.trace.gate-outcome-defective", "gate is not an object");
         return undefined;
     }
-    const g = v;
-    const d = g.disposition;
-    if (d === null || typeof d !== "object" || (d.kind !== "allowed" && d.kind !== "denied")) {
+    const stored = v;
+    if (stored.disposition === null || typeof stored.disposition !== "object" || (stored.disposition.kind !== "allowed" && stored.disposition.kind !== "denied")) {
         recordFailOpen("server.trace.gate-outcome-defective", "disposition is not one of the two arms");
         return undefined;
     }
+    const g = withReleaseReasonTheEngineReads(stored);
+    const d = g.disposition;
     const classifierFallbackRaw = d.classifier !== null && typeof d.classifier === "object" ? d.classifier.fallback : undefined;
     const shapeDefect = (d.kind === "denied" && typeof d.deniedBy !== "string" && "disposition.deniedBy is not a string") ||
         (d.kind === "denied" && d.cause !== undefined && typeof d.cause !== "string" && "disposition.cause is not a string") ||
@@ -273,7 +286,7 @@ export function toolEndEventData(ev) {
         toolName: ev.toolName,
         ...(ev.label !== undefined ? { label: ev.label } : {}),
         isError: ev.isError,
-        ...(ev.output !== undefined ? { output: redactDeep(ev.output) } : {}),
+        ...(ev.output !== undefined ? { output: projectToolOutput(ev.output) } : {}),
         ...(ev.truncated ? { truncated: true } : {}),
         ...(Number.isFinite(ev.totalChars) ? { totalChars: ev.totalChars } : {}),
         ...(ev.structured !== undefined ? { structured: redactDeep(ev.structured) } : {}),
@@ -297,7 +310,7 @@ export function toolProgressEventData(ev) {
         toolCallId: id,
         toolName: name,
         ...(n(ev.elapsedTimeSeconds) !== undefined ? { elapsedTimeSeconds: n(ev.elapsedTimeSeconds) } : {}),
-        ...(hasOutput ? { output: redactDeep(ev.output) } : {}),
+        ...(hasOutput ? { output: projectToolOutput(ev.output) } : {}),
         ...(hasOutput && n(ev.totalLines) !== undefined ? { totalLines: n(ev.totalLines) } : {}),
         ...(hasOutput && n(ev.totalBytes) !== undefined ? { totalBytes: n(ev.totalBytes) } : {}),
         ...identityFields(ev),
@@ -336,6 +349,25 @@ export function taskProgressEventData(ev) {
         ...identityFields(ev),
     };
 }
+export function taskStartedEventData(ev) {
+    return {
+        taskId: ev.taskId,
+        sessionId: ev.sessionId,
+        ...(typeof ev.taskType === "string" && ev.taskType.length > 0 ? { taskType: ev.taskType } : {}),
+        ...(typeof ev.seq === "number" ? { seq: ev.seq } : {}),
+        ...(ev.workflowRunId ? { workflowRunId: ev.workflowRunId } : {}),
+        ...(ev.workflowAgentLabel ? { workflowAgentLabel: redactSecrets(ev.workflowAgentLabel) } : {}),
+        ...(ev.parentTaskId ? { parentTaskId: ev.parentTaskId } : {}),
+        ...(ev.parentSessionId ? { parentSessionId: ev.parentSessionId } : {}),
+        ...(ev.rootSessionId ? { rootSessionId: ev.rootSessionId } : {}),
+        ...(ev.name ? { name: redactSecrets(ev.name) } : {}),
+        ...(ev.spawnName ? { spawnName: ev.spawnName } : {}),
+        ...(ev.agentType ? { agentType: ev.agentType } : {}),
+        model: ev.model,
+        ...(typeof ev.startedAt === "number" && Number.isFinite(ev.startedAt) ? { startedAt: ev.startedAt } : {}),
+        ...identityFields(ev),
+    };
+}
 export function taskNotificationEventData(ev) {
     const n = ev.notification;
     return {

package/dist/trace/self-minted-wire.d.ts

@@ -418,13 +418,6 @@ export declare const SELF_MINTED_WIRE: {
                 since: string;
             };
         };
-        readonly retired: {
-            readonly discuss: {
-                readonly attr: "-";
-                readonly since: "7.28.0";
-                readonly until: "7.126.0";
-            };
-        };
     };
     /**
      * 提交体的场景透传键(受理门放行;`ScenarioRequest` 索引签名读)。7.126.0 只喂 discuss 场景与 code-review council 腿的四键退出 wire
@@ -438,28 +431,6 @@ export declare const SELF_MINTED_WIRE: {
                 since: string;
             };
         };
-        readonly retired: {
-            readonly businessContext: {
-                readonly attr: "-";
-                readonly since: "1.214.2";
-                readonly until: "7.126.0";
-            };
-            readonly lenses: {
-                readonly attr: "-";
-                readonly since: "1.214.2";
-                readonly until: "7.126.0";
-            };
-            readonly rounds: {
-                readonly attr: "-";
-                readonly since: "1.214.2";
-                readonly until: "7.126.0";
-            };
-            readonly team: {
-                readonly attr: "-";
-                readonly since: "1.214.2";
-                readonly until: "7.126.0";
-            };
-        };
     };
     /**
      * `GET /v1/models` 应答体的顶层键(闭集;`src/http/routes/capabilities.ts` 的 `sendJson(res, 200, {…})` 字面量)。属性 = 在场律:`always` 恒在场(零条也出键),`present-iff` 条件成立才出键
@@ -519,6 +490,25 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "redactListEntry";
                 readonly since: "7.120.0";
             };
+            /**
+             * 7.127.0(引擎 7.50.0:`tool_end.output` 按块带已准入的图像 / 文档):媒体块(image / document 且 `data` 是串)的 `data` 是字节编码 ——
+             * 活面 SSE 逐字过境,不跑文本脱敏(`trace/tool-output-media.ts` `projectToolOutput`;钉 test/tool-end-media-durable.test.ts);
+             * 唯一例外 = 连接积压:本帧媒体 + 这条连接 / 订阅者未送出的字节 > 64 MiB ⇒ 本帧媒体降描述符(`liveToolEndForBacklog`;钉 test/live-media-backlog.test.ts)。
+             */
+            readonly "SSE tool_end#output[].data(\u5A92\u4F53\u5757)": {
+                readonly attr: "verbatim-bytes;backlog>64MiB⇒descriptor+totalChars";
+                readonly since: "7.127.0";
+            };
+            /**
+             * 7.127.0:同一媒体块在**持久面**(账本行与 `GET /v1/runs/:id/events` 回放)只存描述符 `{ type, mimeType?, bytes, truncated: true }`,
+             * 帧级 `truncated` 随之为真、帧级 `totalChars` 随之在场(core 不变量「Present iff truncated」:帧上已有 core 的值 ⇒ 原样保留,
+             * 没有 ⇒ 逐块真实大小求和;活面积压降级同一只函数)(账本汇点一处剥:`observability/run-terminal.ts` `redactLedgerEventData` →
+             * `toolEndMediaAsDescriptors`;钉同上)。
+             */
+            readonly "GET /v1/runs/:id/events#tool_end.output[](\u5A92\u4F53\u5757)": {
+                readonly attr: "durableMediaDescriptor+totalChars";
+                readonly since: "7.127.0";
+            };
         };
     };
 };

package/dist/trace/self-minted-wire.js

@@ -145,21 +145,12 @@ export const SELF_MINTED_WIRE = {
             "code-review": { attr: "-", since: "1.214.2" },
             scan: { attr: "-", since: "1.214.2" },
         },
-        retired: {
-            discuss: { attr: "-", since: "7.28.0", until: "7.126.0" },
-        },
     },
     scenarioBodyKey: {
         at: "POST /v1/tasks|/v1/tasks/stream|/v1/runs 体的场景透传键",
         members: {
             repo: { attr: "-", since: "1.214.2" },
         },
-        retired: {
-            businessContext: { attr: "-", since: "1.214.2", until: "7.126.0" },
-            lenses: { attr: "-", since: "1.214.2", until: "7.126.0" },
-            rounds: { attr: "-", since: "1.214.2", until: "7.126.0" },
-            team: { attr: "-", since: "1.214.2", until: "7.126.0" },
-        },
     },
     modelsResponseKey: {
         at: "GET /v1/models 应答体顶层键(<键> → 在场律)",
@@ -178,6 +169,8 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/side-query#errorMessage": { attr: "redactErrorMessage", since: "7.108.0" },
             "engine_notice permission.allowed_tool_not_granted#detail.entries[].entry": { attr: "redactListEntry", since: "7.120.0" },
             "engine_notice permission.rule_row_dropped#detail.rows[].rule": { attr: "redactListEntry", since: "7.120.0" },
+            "SSE tool_end#output[].data(媒体块)": { attr: "verbatim-bytes;backlog>64MiB⇒descriptor+totalChars", since: "7.127.0" },
+            "GET /v1/runs/:id/events#tool_end.output[](媒体块)": { attr: "durableMediaDescriptor+totalChars", since: "7.127.0" },
         },
     },
 };

package/dist/trace/tool-output-media.d.ts

@@ -0,0 +1,26 @@
+/**
+ * 两面共用的 `output` 投影:串 / 文本块 / 其它块整只过 `redactDeep`;媒体块逐成员过,`data` 逐字。
+ * 保键序(逐键映射),不改入参。
+ */
+export declare function projectToolOutput(output: unknown): unknown;
+/**
+ * `tool_end` 载荷的媒体降级(持久面恒用;活面只在连接积压时用):带 `data` 的媒体块换成描述符,有任何一块被换 ⇒ 帧级 `truncated: true`
+ * 且帧级 `totalChars` 在场 —— core 不变量「Present iff truncated」:被界之前那个值的真实大小。帧上已有 `totalChars`(core 已截断:
+ * 文本被切而媒体留着)⇒ **原样保留**(它说的是更早的原值,本仓手里的已是切过的值,重算只会低报);没有 ⇒ 按 {@link trueSizeOf}
+ * 逐块求和(core 没截,`output` 就是原值 —— 文本块是本服务脱敏后的字节,即本服务交付的内容)。
+ * 没有媒体块 ⇒ 原样返回同一引用(纯文本 / 串形 output 一个字节不变);已是描述符的块(无 `data`)原样 ⇒ 幂等。
+ */
+export declare function toolEndMediaAsDescriptors(data: Record<string, unknown>): Record<string, unknown>;
+/** 活面一条连接允许压住的待发字节上界(含本帧媒体)。一帧媒体最大约为部署媒体预算的 4/3(缺省约 40 MiB),
+ *  上界取它之上一点:空闲连接上一整帧最大的图照样整块过,第二帧起只在读者跟上之后才整块。 */
+export declare const LIVE_MEDIA_BACKLOG_BYTES: number;
+/** 一帧 `tool_end` 载荷里媒体块 `data` 的字节数(base64 串长;没有媒体 = 0)。 */
+export declare function liveMediaBytesOf(frame: Record<string, unknown>): number;
+/**
+ * 活面的积压判据(一只):`backlogBytes` = 这条连接 / 这个订阅者此刻还没送出去的字节。本帧媒体 + 积压 > 上界 ⇒ 媒体降描述符,
+ * 否则原样(同一引用)。非 `tool_end` 载荷由调用方不送进来;没有媒体的 `tool_end` 恒原样。
+ * 降级是 F 类兜底(观众少见一张图),每降一帧在**这里**记一次 `server.tool-end-media.live-backlog-degraded` —— 三处写口都经这一只函数,
+ * 留痕因此只有一处;帧上它与引擎的媒体预算降级同形,计数是运维看出「多少观众丢了图」的唯一位。
+ */
+export declare function liveToolEndForBacklog(frame: Record<string, unknown>, backlogBytes: number): Record<string, unknown>;
+//# sourceMappingURL=tool-output-media.d.ts.map

package/dist/trace/tool-output-media.js

@@ -0,0 +1,57 @@
+import { redactDeep } from "./redact.js";
+import { recordFailOpen } from "../observability/fail-open.js";
+function isMediaBlock(b) {
+    if (b === null || typeof b !== "object" || Array.isArray(b))
+        return false;
+    const block = b;
+    return (block.type === "image" || block.type === "document") && typeof block.data === "string";
+}
+const MIME_ECHO_MAX = 255;
+export function projectToolOutput(output) {
+    if (!Array.isArray(output))
+        return redactDeep(output);
+    return output.map((b) => (isMediaBlock(b) ? Object.fromEntries(Object.entries(b).map(([k, v]) => [k, k === "data" ? v : redactDeep(v)])) : redactDeep(b)));
+}
+function trueSizeOf(b) {
+    if (isMediaBlock(b))
+        return b.data.length;
+    if (b !== null && typeof b === "object" && !Array.isArray(b) && b.type === "text" && typeof b.text === "string") {
+        const { type: _type, text, ...rest } = b;
+        return text.length + Math.max(0, (JSON.stringify(rest)?.length ?? 2) - 2);
+    }
+    return JSON.stringify(b)?.length ?? 0;
+}
+export function toolEndMediaAsDescriptors(data) {
+    const output = data.output;
+    if (!Array.isArray(output) || !output.some(isMediaBlock))
+        return data;
+    const totalChars = typeof data.totalChars === "number" && Number.isFinite(data.totalChars) ? data.totalChars : output.reduce((n, b) => n + trueSizeOf(b), 0);
+    const stripped = output.map((b) => isMediaBlock(b)
+        ? {
+            type: b.type,
+            ...(typeof b.mimeType === "string" && b.mimeType.length <= MIME_ECHO_MAX ? { mimeType: b.mimeType } : {}),
+            bytes: Math.floor((b.data.length * 3) / 4),
+            truncated: true,
+        }
+        : b);
+    return { ...data, output: stripped, truncated: true, totalChars };
+}
+export const LIVE_MEDIA_BACKLOG_BYTES = 64 * 1024 * 1024;
+export function liveMediaBytesOf(frame) {
+    const output = frame.output;
+    if (!Array.isArray(output))
+        return 0;
+    let n = 0;
+    for (const b of output)
+        if (isMediaBlock(b))
+            n += b.data.length;
+    return n;
+}
+export function liveToolEndForBacklog(frame, backlogBytes) {
+    const media = liveMediaBytesOf(frame);
+    if (media === 0 || backlogBytes + media <= LIVE_MEDIA_BACKLOG_BYTES)
+        return frame;
+    recordFailOpen("server.tool-end-media.live-backlog-degraded", `backlog=${backlogBytes} media=${media}`);
+    return toolEndMediaAsDescriptors(frame);
+}
+//# sourceMappingURL=tool-output-media.js.map

package/dist/trace/wire-projection-faces.d.ts

@@ -74,6 +74,12 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly excluded: readonly [];
         readonly minted: readonly [];
     };
+    readonly task_started: {
+        readonly projector: "taskStartedEventData";
+        readonly coreType: string;
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
     readonly tool_start: {
         readonly projector: "toolStartEventData";
         readonly coreType: string;
@@ -155,7 +161,7 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly human_input: {
         readonly projector: "humanInputEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["principal"];
+        readonly excluded: readonly ["principal", "attachments"];
         readonly minted: readonly [];
     };
     readonly task_notification: {

package/dist/trace/wire-projection-faces.js

@@ -16,6 +16,7 @@ function withoutSections(all, drop) {
 }
 export const WIRE_PROJECTION_FACES = {
     task_progress: { projector: "taskProgressEventData", coreType: arm("task_progress"), excluded: [], minted: [] },
+    task_started: { projector: "taskStartedEventData", coreType: arm("task_started"), excluded: [], minted: [] },
     tool_start: { projector: "toolStartEventData", coreType: arm("tool_start"), excluded: [], minted: [] },
     tool_end: { projector: "toolEndEventData", coreType: arm("tool_end"), excluded: [], minted: [] },
     tool_progress: { projector: "toolProgressEventData", coreType: arm("tool_progress"), excluded: [], minted: [] },
@@ -29,7 +30,7 @@ export const WIRE_PROJECTION_FACES = {
     context_usage: { projector: "contextUsageEventData", coreType: arm("context_usage"), excluded: [], minted: [] },
     turn_end: { projector: "turnEndEventData", coreType: arm("turn_end"), excluded: [], minted: [] },
     compaction_outcome: { projector: "compactionOutcomeEventData", coreType: arm("compaction_outcome"), excluded: [], minted: [] },
-    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal"], minted: [] },
+    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal", "attachments"], minted: [] },
     task_notification: {
         projector: "taskNotificationEventData",
         coreType: `TaskNotificationPayload & ${arm("task_notification")}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.126.0",
+  "version": "7.127.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -64,7 +64,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.49.5",
+    "@sema-agent/core": "7.50.2",
     "@sema-agent/settings-schema": "12.2.1",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -80,7 +80,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "21.0.0",
+    "@sema-agent/sdk": "21.1.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",