@sema-agent/server 7.130.0 → 7.132.0

package/dist/http/routes/approvals-assistant.js

@@ -22,7 +22,7 @@ import { callGrantBindingOf, questionGrantBindingOf } from "../../standing-answe
 import { sendResumeOutcome } from "../route-ctx.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
-import { readResumeCtx, resumeCtxCorruptAnswer } from "../resume-ctx-read.js";
+import { readResumeCtx } from "../resume-ctx-read.js";
 import { recordFailOpen } from "../../observability/fail-open.js";
 import { MAX_KEY_ECHO, keyClosureClause, scanKeyClosure } from "../../request-key-closure.js";
 const DECIDE_BODY_DECLARED_KEYS = [

package/dist/http/routes/capabilities.js

@@ -1,5 +1,5 @@
-import { PERMISSION_MODES, expandTiers, reasoningEffortLevelsOf, routePairingStatus } from "@sema-agent/core";
-import { modelImageInput, isAtMentionable, selectableCatalog } from "../../model-select.js";
+import { PERMISSION_MODES, USER_ATTACHMENT_SEAT, expandTiers, reasoningEffortLevelsOf, routePairingStatus } from "@sema-agent/core";
+import { modelImageInput, modelReasoningDecl, isAtMentionable, selectableCatalog } from "../../model-select.js";
 import { buildDroppedEntriesWire } from "../../web-admin-client/read-warnings.js";
 import { buildCandidateRejectedWire } from "../../web-admin-client/candidate-gate.js";
 import { modelKeyPoisonOf, resolveModelApiKey } from "../../key-resolver.js";
@@ -12,6 +12,7 @@ import { DEVICE_PROTOCOL_VERSION, DEVICE_WS_PATH } from "../../device-ws-protoco
 import { a2aInjectionHonored } from "../../task-a2a.js";
 import { buildEmptyMcpProbeFace, buildMcpInjectionRefusal, buildMcpProbeCacheKey, buildMcpProbeInflightRefusal, buildMcpProbeRateKey, buildMcpProbeRateRefusal, createMcpProbeLocal, buildMcpProbeDeclarationRefusal, buildMcpProbeIncompleteRefusal, McpProbeIncomplete, MCP_PROBE_HTTP_STATUS, MCP_PROBE_MAX_INFLIGHT, MCP_PROBE_VERDICT_TIMEOUT_MS, createMcpProbeWalk, readMcpProbeBody, } from "../../capabilities/mcp-probe.js";
 import { mcpForScenario } from "../../web-admin-client/facade.js";
+import { sendScenarioNotFound } from "../scenario-read-face.js";
 import { sendJson, sendError } from "../send.js";
 import { assertNever } from "../route-ctx.js";
 import { fileHistoryCaptureOf } from "../../file-history-capture.js";
@@ -44,9 +45,6 @@ function retentionAdvertisement(config) {
 export function createCapabilitiesLocal() {
     return { mcpProbe: createMcpProbeLocal() };
 }
-function sendScenarioNotFound(res) {
-    sendError(res, 404, "scenario_not_found", "scenario not found");
-}
 export async function handleCapabilities(req, res, match, ctx) {
     const { deps } = ctx;
     switch (match.decl.id) {
@@ -94,7 +92,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 memory: false,
                 memoryWrite: false,
                 memoryEngine: projectMemoryEngineCapability(deps.memoryPosture),
-                store: projectStoreCapability(deps.storePosture ?? { declared: deps.config.dbBackend, backend: "memory" }, deps.sqlEngineFacts?.()),
+                store: projectStoreCapability(deps.storePosture ?? { declared: deps.config.dbBackend, backend: "memory" }, deps.sqlEngine?.facts),
                 centerWiring: deps.centerWiring?.(gatedPrincipal(req, deps.config)),
                 webSearch: projectWebSearchCapability(deps.webSearchProvider),
                 sessionBackgroundable: facts.durableRuns(deps).available,
@@ -149,6 +147,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 disableSkills: true,
                 userInvokedSkills: true,
                 skillToolLists: true,
+                userAttachments: USER_ATTACHMENT_SEAT,
                 projectContext: cwdHonored(deps.config),
                 callerCwd: cwdHonored(deps.config) || deviceCwdHonored(deps.config),
                 taskWriteFaceOpen: taskWriteFaceRefusal(deps.config) === undefined && autonomyKeepsOpenWriteFace(deps.config.autonomy),
@@ -225,16 +224,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 sendError(res, 400, "request.field_invalid", "scenario must be given at most once (omit it to read this deployment's default scenario)");
                 return;
             }
-            const requestedScenario = scenarioParams[0];
-            let scenarioName;
-            if (requestedScenario === undefined)
-                scenarioName = deps.config.defaultScenario;
-            else if (deps.scenarioGate === undefined) {
-                sendScenarioNotFound(res);
-                return;
-            }
-            else
-                scenarioName = await deps.scenarioGate(principal, requestedScenario);
+            const scenarioName = await deps.scenarioGate(principal, scenarioParams[0]);
             await serveMcpProbeFace(res, ctx, principal, mcpForScenario(deps.config.mcpServers, scenarioName) ?? [], "deployment");
             return;
         }
@@ -265,7 +255,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 name,
                 id: m.id,
                 provider: m.provider,
-                reasoning: m.reasoning,
+                ...(modelReasoningDecl(m) !== undefined ? { reasoning: modelReasoningDecl(m) } : {}),
                 ...(modelImageInput(m) !== "undeclared" ? { vision: modelImageInput(m) === "yes" } : {}),
                 ...(m.contextWindow ? { contextWindow: m.contextWindow } : {}),
                 ...(m.maxTokens ? { maxOutputTokens: m.maxTokens } : {}),

package/dist/http/routes/diagnostics.js

@@ -109,7 +109,7 @@ export async function handleDiagnostics(req, res, match, ctx) {
             sendJson(res, 200, {
                 static: deps.staticWiring,
                 memoryPosture: deps.memoryPosture ?? null,
-                sqlEngine: deps.sqlEngineFacts?.() ?? null,
+                sqlEngine: deps.sqlEngine?.facts ?? null,
                 writeProtection: deps.writeProtection ?? null,
                 readFace: buildReadFaceWiring(deps.config),
                 executionLane: projectExecutionLaneCapability(deps.config),

package/dist/http/routes/rules.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { sendJson, sendError, httpErrorCode } from "../send.js";
+import { sendJson, sendError, sendHttpError } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, sendOperatorPrincipalsRequired, sendUnauthorized } from "../principal-gate.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
@@ -113,7 +113,7 @@ export async function handleRules(req, res, match, ctx) {
     }
     catch (err) {
         if (err instanceof HttpError && err.status !== 400) {
-            sendError(res, err.status, httpErrorCode(err.status, err.code), err.message);
+            sendHttpError(res, err);
             return;
         }
         sendError(res, 400, "request.body_shape", "body must be valid JSON");

package/dist/http/routes/runs.js

@@ -17,7 +17,7 @@ import { ASK_DECISION_CONSUMER_ABSENT, outcomeOfDecidedRow, resolveStreamApprova
 import { MAX_DECISION_NOTE_CHARS } from "../../approval-ask-machine.js";
 import { causeOfAskRow } from "../../approval-deny-reasons.js";
 import { normalizeRunEventType, screenedStoredEventData } from "../../trace/project.js";
-import { sendJson, sendError, httpErrorCode, sseHeaders } from "../send.js";
+import { sendJson, sendError, sendHttpError, sseHeaders } from "../send.js";
 import { mintCancelledResult } from "../../run-cancel-context.js";
 import { acceptedInputKindOf } from "../../user-input-ledger.js";
 import { INJECTION_TIERS } from "../../trace/injection-tier.js";
@@ -405,7 +405,7 @@ export async function handleRuns(req, res, match, ctx) {
         }
         catch (e) {
             if (e instanceof HttpError) {
-                sendError(res, e.status, httpErrorCode(e.status, e.code), e.message);
+                sendHttpError(res, e);
                 return;
             }
             sendError(res, 400, "request.invalid_json", "invalid JSON body");
@@ -632,7 +632,7 @@ export async function handleRuns(req, res, match, ctx) {
                     mintResult.noResumeCtx = true;
                     return;
                 }
-                const unservable = storedBodyReplayRefusal(resumeRead.ctx, deps.config.autonomy);
+                const unservable = storedBodyReplayRefusal(resumeRead.ctx, deps.config);
                 if (unservable !== undefined) {
                     mintResult.unservable = unservable;
                     return;
@@ -693,7 +693,7 @@ export async function handleRuns(req, res, match, ctx) {
             }
             if (mintResult.unservable !== undefined) {
                 deps.logger?.warn?.("steer_wake_park_refused_stored_body", { taskId, sessionId: run.sessionId, ...storedBodyReplayLogFields(mintResult.unservable) });
-                const { status, body: { error, errorCode, ...rest } } = storedBodyReplayAnswer(mintResult.unservable, serviceVersion());
+                const { status, body: { error, errorCode, ...rest } } = storedBodyReplayAnswer(mintResult.unservable, serviceVersion(), false);
                 sendError(res, status, errorCode, error, rest);
                 return;
             }
@@ -730,7 +730,7 @@ export async function handleRuns(req, res, match, ctx) {
         }
         catch (e) {
             if (e instanceof HttpError) {
-                sendError(res, e.status, httpErrorCode(e.status, e.code), e.message);
+                sendHttpError(res, e);
                 return;
             }
             sendError(res, 400, "request.invalid_json", "invalid JSON body");
@@ -743,10 +743,6 @@ export async function handleRuns(req, res, match, ctx) {
         }
         const interruptBody = interruptNormalized;
         const interruptBare = !("text" in interruptBody);
-        if (interruptBare && Object.keys(interruptBody).length > 0) {
-            sendError(res, 400, "request.body_shape", "body must be {} (bare halt: cut the in-flight turn and stop the run at this boundary) or { text: string (non-empty) } (cut + steer: the text reaches the model after the cut)");
-            return;
-        }
         let text = "";
         if (!interruptBare) {
             if (typeof interruptBody.text !== "string" || interruptBody.text.length === 0) {
@@ -754,11 +750,11 @@ export async function handleRuns(req, res, match, ctx) {
                 return;
             }
             text = interruptBody.text;
-            const keyIssue = steerBodyKeyIssue(interruptBody, "interrupt");
-            if (keyIssue) {
-                sendError(res, 400, "request.body_shape", keyIssue.message, { unknownKeys: keyIssue.unknownKeys, unsupportedKeys: keyIssue.unsupportedKeys });
-                return;
-            }
+        }
+        const keyIssue = steerBodyKeyIssue(interruptBody, "interrupt");
+        if (keyIssue) {
+            sendError(res, 400, "request.body_shape", keyIssue.message, { unknownKeys: keyIssue.unknownKeys, unsupportedKeys: keyIssue.unsupportedKeys });
+            return;
         }
         const interruptIdemRaw = headerStr(req.headers["idempotency-key"]);
         const interruptInputId = interruptIdemRaw ? `idem-${idemKeyOf(interruptIdemRaw, idemCallerOf(req, ctx), "run").slice(0, 32)}` : uuidv7();
@@ -897,7 +893,7 @@ export async function handleRuns(req, res, match, ctx) {
         }
         catch (e) {
             if (e instanceof HttpError) {
-                sendError(res, e.status, httpErrorCode(e.status, e.code), e.message);
+                sendHttpError(res, e);
                 return;
             }
             sendError(res, 400, "request.invalid_json", "invalid JSON body");
@@ -948,7 +944,7 @@ export async function handleRuns(req, res, match, ctx) {
         }
         catch (e) {
             if (e instanceof HttpError) {
-                sendError(res, e.status, httpErrorCode(e.status, e.code), e.message);
+                sendHttpError(res, e);
                 return;
             }
             sendError(res, 400, "request.invalid_json", "invalid JSON body");
@@ -1174,7 +1170,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
         }
         catch (e) {
             if (e instanceof HttpError) {
-                sendError(res, e.status, httpErrorCode(e.status, e.code), e.message);
+                sendHttpError(res, e);
                 return;
             }
             sendError(res, 400, "request.invalid_json", "invalid JSON body");

package/dist/http/routes/session-sync.js

@@ -6,6 +6,7 @@ import { exportSessionManifest, fileHistoryImportFace, replayFileHistory, replay
 import * as facts from "../../capability-facts.js";
 import { classifySyncRelationshipByIds, SyncConflictError } from "../../session-sync-kernel.js";
 import { isUuidShape } from "../../security.js";
+import { sqlBlobCapRefusalText } from "../../plugins/blob-backend.js";
 import { sendJson, sendError, sendSessionError, sendSessionPolicyError, msg } from "../send.js";
 import { buildDisplaySafeUrl } from "../../trace/redact.js";
 import { gatedPrincipal, explicitOperatorOk, sendUnauthorized } from "../principal-gate.js";
@@ -186,8 +187,9 @@ export async function handleSessionSync(req, res, match, ctx) {
                 }
                 const fs = blobs.historyStore;
                 const body = await readRawBody(req, SYNC_BLOB_MAX_BYTES);
-                if (deps.snapshotBlobSqlCapBytes !== undefined && body.byteLength > deps.snapshotBlobSqlCapBytes) {
-                    sendError(res, 413, "blob_too_large_for_sql", `blob of ${body.byteLength} bytes exceeds this deployment's SQL snapshot-blob cap (${deps.snapshotBlobSqlCapBytes} bytes — TiDB's txn-entry-size-limit is the low wall at 6MiB by default; the mysql-protocol packet limit sits above it) — configure MinIO object storage (MINIO_ENDPOINT/MINIO_ACCESS_KEY/MINIO_SECRET_KEY) for large snapshot blobs, or raise SNAPSHOT_BLOB_SQL_MAX_BYTES if your deployment lifted those limits`);
+                const sqlCap = deps.snapshotBlobSqlCap?.();
+                if (sqlCap !== undefined && body.byteLength > sqlCap.capBytes) {
+                    sendError(res, 413, "blob_too_large_for_sql", sqlBlobCapRefusalText(body.byteLength, sqlCap), { wallSource: sqlCap.source });
                     return;
                 }
                 if (createHash("sha256").update(body).digest("hex") !== hash) {

package/dist/http/routes/sessions.js

@@ -1,6 +1,6 @@
 import { SessionError, materializeA2aTools, materializeMcpTools, sanitizePathComponent } from "@sema-agent/core";
 import { a2aForScenario, mcpForScenario } from "../../web-admin-client/facade.js";
-import { isUuidShape, legacyUnownedSessionOk } from "../../security.js";
+import { HttpError, isUuidShape, legacyUnownedSessionOk } from "../../security.js";
 import { windowMessages, truncateMessageBlobs, redactSessionViewForRead } from "../../audit.js";
 import { redactSecrets } from "../../trace/redact.js";
 import { recordFailOpen } from "../../observability/fail-open.js";
@@ -8,7 +8,7 @@ import { MCP_DIAL_DEADLINE_MS, raceDeadline } from "../mcp-dial-deadline.js";
 import { sentMemoryComplianceFailure } from "../memory-compliance-failure-reply.js";
 import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, MAX_SETTINGS_ENV_VARS, MAX_SETTINGS_ENV_KEY_CHARS, MAX_SETTINGS_ENV_VALUE_CHARS } from "../../task-settings.js";
 import { readWritableSessionPermissionRules } from "../../session-policy-wire.js";
-import { sendJson, sendError, sendSessionError, sendSessionPolicyError, sseHeaders } from "../send.js";
+import { sendJson, sendError, sendSessionError, sendSessionPolicyError, sseHeaders, httpErrorBody } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, sessionOwnerReadable, sendPrincipalRefusal, sendUnauthorized } from "../principal-gate.js";
 import { assertNever, SESSION_NOT_FOUND_MESSAGE } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
@@ -54,7 +54,7 @@ async function readLastLegMcp(deps, sessionId, principal) {
     const latest = await runStore.latestRunForSession(sessionId);
     if (latest === undefined)
         return undefined;
-    if (!sessionOwnerReadable(principal, latest.owner, deps.config) && !explicitOperatorOk(principal, deps.config.operatorPrincipals))
+    if (!sessionOwnerReadable(principal, latest.owner, deps) && !explicitOperatorOk(principal, deps.config.operatorPrincipals))
         return undefined;
     const events = await runStore.getEvents(latest.taskId, 0);
     for (let i = events.length - 1; i >= 0; i--) {
@@ -144,10 +144,21 @@ export async function handleSessions(req, res, match, ctx) {
                 return;
             }
             const lastLegMcp = await lastLegMcpFor(deps, safeDecode(match.params.sessionId), principal);
-            const specs = mcpForScenario(deps.config.mcpServers, deps.config.defaultScenario);
-            const cacheKey = `${deps.config.defaultScenario}::${principal ?? ""}`;
+            const ledgerHalf = lastLegMcp === undefined ? {} : { lastLegMcp };
+            let scenarioName;
+            try {
+                scenarioName = await deps.scenarioGate(principal, undefined);
+            }
+            catch (e) {
+                if (!(e instanceof HttpError))
+                    throw e;
+                sendJson(res, 200, { asOf: new Date().toISOString(), ...ledgerHalf, scenarioRefusal: httpErrorBody(e) });
+                return;
+            }
+            const specs = mcpForScenario(deps.config.mcpServers, scenarioName);
+            const cacheKey = `${scenarioName}::${principal ?? ""}`;
             if (!specs || specs.length === 0) {
-                sendJson(res, 200, { servers: [], asOf: new Date().toISOString(), ...(lastLegMcp === undefined ? {} : { lastLegMcp }) });
+                sendJson(res, 200, { servers: [], asOf: new Date().toISOString(), ...ledgerHalf });
                 return;
             }
             const cached = mcpStatusCache.get(cacheKey);
@@ -179,23 +190,24 @@ export async function handleSessions(req, res, match, ctx) {
                 })();
                 mcpStatusCache.set(cacheKey, { at: Date.now(), panel });
             }
-            sendJson(res, 200, { ...(await mcpStatusCache.get(cacheKey).panel), ...(lastLegMcp === undefined ? {} : { lastLegMcp }) });
+            sendJson(res, 200, { ...(await mcpStatusCache.get(cacheKey).panel), ...ledgerHalf });
             return;
         }
     }
     {
         if (match.decl.id === "session-a2a") {
-            if (deps.config.requirePrincipal && !gatedPrincipal(req, deps.config)) {
+            const principal = gatedPrincipal(req, deps.config);
+            if (deps.config.requirePrincipal && !principal) {
                 sendPrincipalRefusal(res, req, deps.config);
                 return;
             }
-            const specs = a2aForScenario(deps.config.a2aPeers, deps.config.defaultScenario);
+            const scenarioName = await deps.scenarioGate(principal, undefined);
+            const specs = a2aForScenario(deps.config.a2aPeers, scenarioName);
             if (!specs || specs.length === 0) {
                 sendJson(res, 200, { peers: [], asOf: new Date().toISOString() });
                 return;
             }
-            const principal = gatedPrincipal(req, deps.config);
-            const cacheKey = `${deps.config.defaultScenario}::${principal ?? ""}`;
+            const cacheKey = `${scenarioName}::${principal ?? ""}`;
             const cached = a2aStatusCache.get(cacheKey);
             if (!cached || Date.now() - cached.at > A2A_STATUS_TTL_MS) {
                 if (a2aStatusCache.size > 1024)

package/dist/http/routes/shared-memory.js

@@ -1,21 +1,10 @@
-import { SHARED_MEMORY_READ_CAP_BYTES, SharedMemoryStoreError } from "@sema-agent/core";
+import { isSharedMemoryDocumentPath, SHARED_MEMORY_READ_CAP_BYTES, SharedMemoryStoreError } from "@sema-agent/core";
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, sendUnauthorized } from "../principal-gate.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
 const RETRY_AFTER_SEC = 10;
 const HTTP_LIST_LIMIT = 100;
-const FORBIDDEN_PATH_CHARS = /[\p{Cc}\p{Cf}\p{Co}\p{Cn}\p{Default_Ignorable_Code_Point}\u2028\u2029\\]/u;
-const DOCUMENT_SUFFIXES = [".md", ".txt", ".json", ".jsonl"];
-function isDocumentPath(path) {
-    if (!path.startsWith("/") || FORBIDDEN_PATH_CHARS.test(path))
-        return false;
-    const segments = path.slice(1).split("/");
-    const last = segments.at(-1);
-    if (last === undefined || !segments.every((s) => s !== "" && !s.startsWith(".")))
-        return false;
-    return DOCUMENT_SUFFIXES.some((s) => last.endsWith(s));
-}
 function refuseStore(res) {
     sendError(res, 404, "not_found.shared_memory_store", "not found");
 }
@@ -120,7 +109,7 @@ export async function handleSharedMemory(req, res, match, ctx) {
                 return;
             }
             const path = query.get("path");
-            if (path === null || path === "" || !isDocumentPath(path)) {
+            if (path === null || path === "" || !isSharedMemoryDocumentPath(path)) {
                 sendError(res, 400, "request.query_invalid", "missing or malformed ?path= (absolute, .md/.txt/.json/.jsonl)");
                 return;
             }

package/dist/http/routes/side-query.js

@@ -4,7 +4,7 @@ import { isAtMentionable, matchCatalogModel, refusedCatalogEntry, selectableCata
 import { modelUnavailableMessage } from "../../model-entry-refusal.js";
 import { redactSecrets } from "../../trace/redact.js";
 import { admitProviderEcho, redactErrorMessage } from "../../observability/run-terminal.js";
-import { sendJson, sendError, httpErrorCode, msg } from "../send.js";
+import { sendJson, sendError, sendHttpError, msg } from "../send.js";
 import { gatedPrincipal, sendPrincipalRefusal } from "../principal-gate.js";
 import { assertNever } from "../route-ctx.js";
 const CORE_PREFLIGHT_VALIDATION_PREFIXES = ["Unknown model ref ", "No model for role "];
@@ -50,8 +50,7 @@ export async function handleSideQuery(req, res, match, ctx) {
                     body = raw;
                 }
                 catch (e) {
-                    const he = e instanceof HttpError ? e : new HttpError(400, msg(e));
-                    sendError(res, he.status, httpErrorCode(he.status, he.code), he.message);
+                    sendHttpError(res, e instanceof HttpError ? e : new HttpError(400, msg(e)));
                     return;
                 }
                 if (!Array.isArray(body.messages) || body.messages.length === 0) {

package/dist/http/routes/tasks.js

@@ -1,20 +1,20 @@
 import { redactErrorMessage, redactHead, redactTerminalResult } from "../../observability/run-terminal.js";
 import { runWithVerification, runCascade, taskNotificationDedupKey, uuidv7 } from "@sema-agent/core";
-import { graftParkToolCallId, markChildrenStoppedByUserOnAbort, syncRefusalHttpStatus, releaseKeyIfZeroWorkRefusal, HEARTBEAT_MS } from "../../runs.js";
+import { graftParkToolCallId, markChildrenStoppedByUserOnAbort, syncRefusalHttpStatus, zeroWorkRefusalFacts, releaseKeyIfZeroWorkRefusal, createPromptCommitReader, HEARTBEAT_MS } from "../../runs.js";
 import { sealResultForExit, outwardPlane } from "../../terminal.js";
 import { withPrincipal } from "../../observability/principal-context.js";
 import { fleetRunPublisher, fleetRunLabels, fleetRunResiduals, isFleetAgentTerminalNotification } from "../../fleet/fleet-bus.js";
 import { defaultSubagentTailBus } from "../../fleet/subagent-tail-bus.js";
 import { createReasoningSegments, reasoningStreamOfTask } from "../../trace/model-segment.js";
 import { emitPendingWorkflowCompletions, taskNotificationInboxEntry, taskNotificationStreamKeyOf, NotifiedKeys } from "../../orchestration/workflow-completion-inbox.js";
-import { createLedgerSink } from "../../trace/ledger-sink.js";
+import { createLedgerSink, createLedgerTwinEmit } from "../../trace/ledger-sink.js";
 import { registerEngineNoticeLeg } from "../../trace/engine-notice-wire.js";
 import { clearTurnActivity, readTurnActivityMs, recordTurnActivity } from "../../turn-activity.js";
 import { buildCancelledLedgerRow, createRunAbort, mintCancelledResult } from "../../run-cancel-context.js";
 import { recordResourceWindow } from "../../resource-window.js";
 import { redactSecrets } from "../../trace/redact.js";
 import { liveToolEndForBacklog } from "../../trace/tool-output-media.js";
-import { contextUsageEventData, turnEndEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestFaceEventData, toolRosterDeltaEventData, toolProgressEventData, toolDisclosureEventData, humanInputEventData, appendModelUsageDelta, attachModelUsage, textEndEventData, liveIdentityFields } from "../../trace/project.js";
+import { contextUsageEventData, turnEndEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, compactionStartedEventData, workspaceChangedEventData, wiringManifestFaceEventData, toolRosterDeltaEventData, toolProgressEventData, toolDisclosureEventData, humanInputEventData, appendModelUsageDelta, attachModelUsage, textEndEventData, liveIdentityFields } from "../../trace/project.js";
 import { cascadeConfig, runMeta } from "../run-meta.js";
 import { idemCallerOf, inflightKeyOf, submissionIdemOf } from "../idempotency.js";
 import { replayOfExistingRun } from "../submit-replay.js";
@@ -30,7 +30,7 @@ import { failOpenTagForDroppedFrame, recordFailOpen } from "../../observability/
 import { buildSyncSubmitBody } from "../sync-submit-body.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
-import { buildCheckpointCtx } from "../checkpoint-ctx.js";
+import { persistSubmitCtx } from "../submit-ctx.js";
 import { serviceVersion } from "../../service-version.js";
 import { withModelReachScope } from "../../model-reach-scope.js";
 import { createInstructionSelectionLeg } from "../../instruction-selection.js";
@@ -249,6 +249,7 @@ export async function handleTasks(req, res, match, ctx) {
                 let durableHeartbeat;
                 const cancelledResult = (errorMessage, cause) => mintCancelledResult({ taskId: durableTaskId ?? "", sessionId: prepared.spec.sessionId ?? "", startedAtMs: streamLegStartedAt, message: errorMessage, cause });
                 let userMsgEntryId;
+                const promptCommit = createPromptCommitReader();
                 let anchorPut = false;
                 const putRewindAnchor = () => {
                     if (anchorPut || !userMsgEntryId || !durableTaskId || !prepared.spec.sessionId || !deps.resumeAnchorStore)
@@ -285,14 +286,18 @@ export async function handleTasks(req, res, match, ctx) {
                     }
                     durableTaskId = tid;
                 }
+                if (deps.checkpointStore && prepared.spec.sessionId) {
+                    const ctxRefusal = await persistSubmitCtx(deps.checkpointStore, deps, durableTaskId !== undefined && deps.runStore ? { runStore: deps.runStore, taskId: durableTaskId } : undefined, prepared.spec.sessionId, { body: prepared.body, memoryScope: prepared.auth?.memoryScope, writerVersion: serviceVersion() });
+                    if (ctxRefusal) {
+                        sseData(res, { type: "done", result: doneResultOfOutcome(ctxRefusal) });
+                        return ctxRefusal;
+                    }
+                }
                 commitSessionInheritEnv(deps, prepared.spec.sessionId, prepared.body);
                 if (prepared.spec.sessionId)
                     markChildrenStoppedByUserOnAbort(ac.signal, durableTaskId ?? prepared.spec.sessionId, prepared.auth?.principal);
                 let ledgerSink;
                 let ledgerTerminal = false;
-                if (deps.checkpointStore && prepared.spec.sessionId) {
-                    await deps.checkpointStore.putCtx(prepared.spec.sessionId, buildCheckpointCtx({ body: prepared.body, memoryScope: prepared.auth?.memoryScope, writerVersion: serviceVersion() }));
-                }
                 if (durableTaskId && deps.runStore) {
                     const rs = deps.runStore;
                     const tid = durableTaskId;
@@ -457,8 +462,9 @@ export async function handleTasks(req, res, match, ctx) {
                                     break;
                                 for (const end of ev.type === "done" ? [...childReasoning.cut(), ...topReasoning.cut()] : topReasoning.onEvent(ev))
                                     sseData(res, end);
-                                if (ev.type === "message_committed" && ev.role === "user")
-                                    userMsgEntryId = ev.entryId;
+                                const promptEntryId = promptCommit(ev);
+                                if (promptEntryId !== undefined)
+                                    userMsgEntryId = promptEntryId;
                                 const causeAtDone = ev.type === "done" ? ac.cause() : undefined;
                                 await deps.userInputLedger?.observeLegEvent(liveStream, ev);
                                 prepared.acceptance.observe(ev);
@@ -539,6 +545,9 @@ export async function handleTasks(req, res, match, ctx) {
                                 else if (ev.type === "compaction_outcome") {
                                     sseData(res, { type: "compaction_outcome", ...compactionOutcomeEventData(ev) });
                                 }
+                                else if (ev.type === "compaction_started") {
+                                    sseData(res, { type: "compaction_started", ...compactionStartedEventData(ev) });
+                                }
                                 else if (ev.type === "wiring_manifest") {
                                     const wiringFace = wiringManifestFaceEventData(ev, wiringOperatorFace, instructionLeg.segment());
                                     wiringReceipt ??= wiringFace;
@@ -594,6 +603,14 @@ export async function handleTasks(req, res, match, ctx) {
                         }
                         res.write(`event: ${frame.type}\ndata: ${JSON.stringify(frame)}\n\n`);
                     };
+                    const faceAlive = () => !res.writableEnded && !res.destroyed;
+                    const emitElicitation = createLedgerTwinEmit({ sink: ledgerSink, writeLive: emitAsk, liveReachable: faceAlive });
+                    const writeQuestionLive = (frame) => {
+                        if (!faceAlive())
+                            throw new Error("live stream ended — question frame undeliverable");
+                        emitAsk(frame);
+                    };
+                    const emitQuestion = createLedgerTwinEmit({ sink: ledgerSink, writeLive: writeQuestionLive, liveReachable: faceAlive });
                     await emitPendingWorkflowCompletions(deps.workflowCompletionInbox, prepared.spec.sessionId, askOwner, (frame) => {
                         if (closed || res.writableEnded || res.destroyed)
                             throw new Error("stream ended before the completion frame was written");
@@ -604,15 +621,10 @@ export async function handleTasks(req, res, match, ctx) {
                         sseData(res, frame);
                     }, { route: "sync-stream-open", connection: "live-sse", log: (m, x) => deps.logger?.info?.(m, x) });
                     const withElicit = deps.elicitation
-                        ? () => deps.elicitation.runWithContext({ taskId: askTaskId, owner: askOwner, emit: emitAsk, abortSignal: ac.signal }, streamBody)
+                        ? () => deps.elicitation.runWithContext({ taskId: askTaskId, owner: askOwner, emit: emitElicitation, abortSignal: ac.signal }, streamBody)
                         : streamBody;
-                    const emitQuestion = (frame) => {
-                        if (res.writableEnded || res.destroyed)
-                            throw new Error("live stream ended — question frame undeliverable");
-                        emitAsk(frame);
-                    };
                     const withQuestion = () => deps.question
-                        ? deps.question.runWithContext({ taskId: askTaskId, owner: askOwner, emit: emitQuestion, abortSignal: ac.signal, deliverable: () => !res.writableEnded && !res.destroyed }, withElicit)
+                        ? deps.question.runWithContext({ taskId: askTaskId, owner: askOwner, emit: emitQuestion, abortSignal: ac.signal, deliverable: faceAlive }, withElicit)
                         : withElicit();
                     const emitApproval = (frame) => {
                         if (res.writableEnded || res.destroyed)
@@ -852,10 +864,12 @@ export async function handleTasks(req, res, match, ctx) {
                         return { status: placementReject.status, body: devicePlacementErrorBody(placementReject) };
                     durableTaskId = tid;
                 }
-                commitSessionInheritEnv(deps, prepared.spec.sessionId, prepared.body);
                 if (deps.checkpointStore && prepared.spec.sessionId) {
-                    await deps.checkpointStore.putCtx(prepared.spec.sessionId, buildCheckpointCtx({ body: prepared.body, memoryScope: prepared.auth?.memoryScope, writerVersion: serviceVersion() }));
+                    const ctxRefusal = await persistSubmitCtx(deps.checkpointStore, deps, durableTaskId !== undefined && deps.runStore ? { runStore: deps.runStore, taskId: durableTaskId } : undefined, prepared.spec.sessionId, { body: prepared.body, memoryScope: prepared.auth?.memoryScope, writerVersion: serviceVersion() });
+                    if (ctxRefusal)
+                        return ctxRefusal;
                 }
+                commitSessionInheritEnv(deps, prepared.spec.sessionId, prepared.body);
                 const syncCancelCtrl = createRunAbort();
                 if (prepared.spec.sessionId)
                     markChildrenStoppedByUserOnAbort(syncCancelCtrl.signal, durableTaskId ?? prepared.spec.sessionId, prepared.auth?.principal);
@@ -928,7 +942,8 @@ export async function handleTasks(req, res, match, ctx) {
                     const retryAfterSec = resumeAtPlane.errorCode === "memory.admission_required" && result.retryAfterMs !== undefined
                         ? Math.max(1, Math.ceil(result.retryAfterMs / 1000))
                         : undefined;
-                    return { status: resumeAtStatus, body: { errorCode: resumeAtPlane.errorCode, error: redactErrorMessage(resumeAtPlane.errorMessage) ?? "resume-at failed", ...(retryAfterSec !== undefined ? { retryAfterSec } : {}) } };
+                    const refusalFacts = zeroWorkRefusalFacts(redactTerminalResult(sealResultForExit(result)).terminal);
+                    return { status: resumeAtStatus, body: { errorCode: resumeAtPlane.errorCode, error: redactErrorMessage(resumeAtPlane.errorMessage) ?? "resume-at failed", ...(retryAfterSec !== undefined ? { retryAfterSec } : {}), ...refusalFacts } };
                 }
                 const exitResult = await mintSubmitExitResult(result, deps.checkpointStore);
                 const syncPlane = outwardPlane(result.terminal);

package/dist/http/scenario-read-face.d.ts

@@ -0,0 +1,14 @@
+/**
+ * 「本部署没有这个场景」的唯一答复(A9 叶:只依赖 `send.ts`)—— 场景详情读面(`GET /v1/capabilities/scenarios/:name`,名字不在 `scenarioDetails` 里)答它。
+ *
+ * 回答「此主体在此场景能看见哪些 MCP 服务器 / A2A 对端」的读口不经过这里:它们的场景名只由 `deps.scenarioGate` 给
+ * (`ServiceCoreDeps` 的必填件,`capabilities/scenarios.ts` `createScenarioGate` 铸的那一只),点名与缺席都问,拒就是门的 typed 错 —— 读口没有第二个场景名来源。
+ */
+import type { ServerResponse } from "node:http";
+/**
+ * 「本部署没有这个场景」的唯一答复。一句话、一个码,不各写一份。
+ * [ref] 信封统一:本答复曾是全站唯一对象形 error(`{error:{code}}`)——SDK toApiError 对它特判过一轮 TypeError 加固;统一为「字符串 error + 顶层 errorCode」邻位形
+ * (cancel/decide 同款),机器判据保留。
+ */
+export declare function sendScenarioNotFound(res: ServerResponse): void;
+//# sourceMappingURL=scenario-read-face.d.ts.map

package/dist/http/scenario-read-face.js

@@ -0,0 +1,5 @@
+import { sendError } from "./send.js";
+export function sendScenarioNotFound(res) {
+    sendError(res, 404, "scenario_not_found", "scenario not found");
+}
+//# sourceMappingURL=scenario-read-face.js.map

package/dist/http/send.d.ts

@@ -9,6 +9,8 @@
  */
 import type { ServerResponse } from "node:http";
 import { type SessionErrorFace } from "../session-error-wire.js";
+import type { HttpError } from "../security.js";
+import { type Refusal, type RefusalBody } from "./refusal-body.js";
 /**
  * [ref](黑板 [ref]②)—— 一条响应「是 SSE 流」的**在场标记**。
  *
@@ -69,11 +71,21 @@ export declare function sendJson(res: ServerResponse, status: number, body: unkn
  *  change), not a new response shape. Sites where the two machine-code channels genuinely disagree, or
  *  where `error`/`errorCode` aren't cleanly separable from the rest of the body, are left on raw
  *  `sendJson` (see the A6 migration notes for the callers still doing that on purpose). */
-export declare function sendError(res: ServerResponse, status: number, errorCode: string, message: string, extra?: Record<string, unknown>): void;
+export declare function sendError(res: ServerResponse, status: number, errorCode: string, message: string, extra?: Readonly<Record<string, unknown>>): void;
 /** B7([ref] lens1 §C3):`HttpError` 的兜底 catch-all 站点没有自己的语义分支——`err.code` 在 42 个
  *  throw 点里只有 3 个带。为了让「errorCode 恒在」在这些站点也成立(而不是靠豁免表放行),按**状态码**
  *  给一个诚实的粗码:它只声明「这类拒绝」,不冒充比 throw 点更细的语义。带 `code` 的 throw 点原样优先。 */
 export declare function httpErrorCode(status: number, code?: string): string;
+/**
+ * 一只 `HttpError` 读成 {@link Refusal}:码经 {@link httpErrorCode}(带码的 throw 原样优先,否则按状态给粗码),句 = `message`,机读事实 = `extra`
+ * (如场景门的 `detail: { scenario, source }`、条数帽的 `field` / `reason` / `count` / `cap`)。**拆 `HttpError` 的唯一一处** —— 别的站点自己拆
+ * `status` / `code` / `message` 拼体就丢了 `extra`(`test/refusal-one-composer.test.ts` 的静态门钉着)。
+ */
+export declare function httpErrorRefusal(e: HttpError): Refusal;
+/** 一只 `HttpError` 的拒体成员 = {@link refusalBody}({@link httpErrorRefusal})。 */
+export declare function httpErrorBody(e: HttpError): RefusalBody;
+/** 整面拒:状态 = `e.status`,体 = {@link httpErrorBody}。手里拿着一只 `HttpError` 的路由站点一律调它。 */
+export declare function sendHttpError(res: ServerResponse, e: HttpError): void;
 /**
  * 🔴 B1 / S-535 —— `SessionPolicyError` → 应答,经 {@link sessionPolicyErrorHttp} 那**一只**映射
  * (`src/session-policy-wire.ts`)。回 `true` = 已应答,调用点 `return`。

package/dist/http/send.js

@@ -2,6 +2,7 @@ import { SessionError, SessionPolicyError } from "@sema-agent/core";
 import { sessionPolicyErrorFacts, sessionPolicyErrorHttp, sessionPolicyErrorSentence } from "../session-policy-wire.js";
 import { sessionErrorHttp } from "../session-error-wire.js";
 import { redactErrorMessage } from "../observability/run-terminal.js";
+import { refusalBody } from "./refusal-body.js";
 export const SSE_RESPONSE_MARK = Symbol("sema.http.sse-response");
 export function isSseResponse(res) {
     return res[SSE_RESPONSE_MARK] === true;
@@ -31,7 +32,7 @@ export function sendJson(res, status, body) {
     res.end(JSON.stringify(body));
 }
 export function sendError(res, status, errorCode, message, extra) {
-    sendJson(res, status, { error: message, errorCode, ...extra });
+    sendJson(res, status, refusalBody(extra === undefined ? { errorCode, message } : { errorCode, message, facts: extra }));
 }
 export function httpErrorCode(status, code) {
     if (code)
@@ -48,6 +49,16 @@ export function httpErrorCode(status, code) {
         default: return status >= 500 ? "internal.error" : "request.rejected";
     }
 }
+export function httpErrorRefusal(e) {
+    const errorCode = httpErrorCode(e.status, e.code);
+    return e.extra === undefined ? { errorCode, message: e.message } : { errorCode, message: e.message, facts: e.extra };
+}
+export function httpErrorBody(e) {
+    return refusalBody(httpErrorRefusal(e));
+}
+export function sendHttpError(res, e) {
+    sendJson(res, e.status, httpErrorBody(e));
+}
 export function sendSessionPolicyError(res, e, sentencePrefix = "") {
     if (!(e instanceof SessionPolicyError))
         return false;