@sema-agent/server 7.135.0 → 7.137.0

package/dist/tool-approval.d.ts

@@ -213,11 +213,14 @@ export declare function carriesDeploymentListQuestion(deploymentListAsks: boolea
  * 本仓**策略层自己交出去的一问**的 {@link StandingAnswerFacts}。读者两个:部署名单门(`approval.ts`,`deploymentListQuestion: true`)与 workflow 问句门
  * (`task-settings.ts`,`false`)—— 它们在交出这一问之前先读按工具名记的耐久豁免店(「本会话不再询问」在本层兑现,继承链上的同一问才够得着;审批席依约不退役
  * 继承问),而**能不能读**与审批席 / 回决写侧是同一只判据({@link standingAnswerDurablyRecordable}):记得下的才代答,记不下的(带授予绑定的问 ……)不代答,
- * 存量行也不例外 —— 一事一读。事实取自**这一问本身**:类集经 core 包根唯一的类派生 `classifyAsk`({@link NO_GATE_FACTS});`requiresRealApproval` /
+ * 存量行也不例外 —— 一事一读。事实取自**这一问本身**:类集经 core 包根唯一的类派生 `classifyAsk`({@link noGateFacts},调用坐标取 `req`);`requiresRealApproval` /
  * `mandated` 读这一问自报的成员;治理位恒假(本层不是治理层);授予绑定读**调用**(`callGrantBindingOf` —— 本层手里还没有引擎铸的卡,core 7.51.0 不在
  * `ToolCallRequest` 上盖绑定词,[ref] 载体问题见 `standing-answer-grant.ts` 头注)。
  */
-export declare function policyAskStandingAnswerFacts(req: StandingAnswerCall, ask: Extract<PermissionResult, {
+export declare function policyAskStandingAnswerFacts(req: StandingAnswerCall & {
+    readonly toolCallId: string;
+    readonly toolName: string;
+}, ask: Extract<PermissionResult, {
     action: "ask";
 }>, deploymentListQuestion: boolean): StandingAnswerFacts;
 /**
@@ -507,7 +510,8 @@ export interface ToolApprovalFrame {
      * `approval-content-kind.ts` 的 `readApprovalCard` 闭集窄读(集外 ⇒ 缺席 + 计一次 closed-word-out-of-set)。`question` = 问用户的问题(引擎保留的
      * 问答工具),不是副作用工具。**本仓不从工具名回推卡**(工具名只作展示):此前按名字铸的 `livePending` 行 / 队列行 `contentKind` 随本键删。
      * 停驻孪生 = 门的 `gate.approvalCard`(运维队列行顶层同名键,两只店读同一只 `parkedApprovalCard`)。display:本仓不按它裁决。
-     * 🔴 缺席即缺席(宿主自建的 ask / 老引擎),不编 `generic`。⚠️ `card_json` 卡面不带本键(`ApprovalCardSchema` `.strict()`,与 `mandated` 同)。
+     * 🔴 缺席即缺席(宿主自建的 ask / 老引擎),不编 `generic`。7.136.0 起卡面同带(`ApprovalCardSchema.approvalCard`:发帧点把这一格交给铸卡 ⇒
+     * `card_json` 与断连重放帧的卡上是同一个词)。
      */
     approvalCard?: ToolApprovalCard;
     /**
@@ -1026,6 +1030,13 @@ export type UnattendedAskOutcome = Extract<AskOutcome, "unavailable"> | Unattend
 /** [ref] 候裁 16:耐久会话授权店(`src/plugins/approval-exemption-store.ts` 的同一只店):审批席读它(引擎的问),活卡上部署名单那一问的
  *  「本会话放行」写它(名单门在出问之前读同一行)。 */
 export type SessionGrantStore = Pick<ApprovalExemptionStore, "has" | "grant">;
+/** redactDeep + size-bound the UNTRUSTED tool args before they are streamed. Over the cap / unserializable ⇒
+ *  undefined (frame rides argsOmitted — see MAX_APPROVAL_ARGS_BYTES). */
+/**
+ * 给审批人看的一份入参 —— 卡上 `args` 的**同一种读法**({@link boundArgs}:脱敏 + 字节帽;超帽 / 序列化不出 ⇒ `undefined`)。
+ * 读者:卡帧 / 卡面(经 `boundArgs` 本体)与续跑拒体的 `acceptableForm`(core 7.56.0 [ref]:编辑复判只收改写后的那一形,人在决定口看到它、批准它)。
+ */
+export declare function approverFacingArgs(args: unknown): unknown;
 /**
  * [ref] 车3 刀 3b —— 「流内审批协议到底上不上场」的**单一谓词**(设计稿 §2.3 注入 / §2.4 能力面 /
  * §8.4 park 设施自检,三处同一份判据)。
@@ -1969,16 +1980,21 @@ export declare class ToolApprovalCoordinator {
         status: number;
         body: unknown;
     }>;
+    /** [ref]:这条登记**有没有问账行**(有 ⇒ 属主的唯一来源是行上当下的 owner 列;没有 ⇒ 登记记下的那一位是唯一可读的属主事实)。 */
+    private registrationHasRow;
     /**
-     * [ref]:**接管登记**的应答。接管登记是行的投影(没有引擎腿在等它),所以它的属主门读**行当下的** owner —— 接管时记下的那一格可能已被
-     * `/v1/adoption` 改写(契约:应答口的授权判据取当下的持久事实,收编之后旧属主手里的卡作废)。行仍 `STREAM_PENDING` ⇒ 与活登记同一条应答路
-     * ({@link answerRegistration}:同一把 `decideAsk` CAS);行已有终局(别处答了 / 对账器收了,本副本的轮询还没到)⇒ 按行的真相答(与晚答口同一张表)。
+     * [ref]([ref] 的接管登记一臂并进来):**读行判属主**的应答 —— 接管登记恒走这里;活登记在登记记下的属主不认调用方时走这里(行可能已被收编改给调用方)。
+     * 属主门读**行当下的** owner:登记上记下的那一格是铸卡(或接管)那一刻的进程内快照,`/v1/adoption` 改写行之后它就落后了(契约:应答口的授权判据取
+     * 当下的持久事实,收编之后旧属主手里的卡作废、新属主照常答得了 —— 与耐久决断口同答)。行仍 `STREAM_PENDING` ⇒ {@link answerRegistration}(同一把
+     * `decideAsk` CAS,绑门刚读到的那位属主,[ref];活登记上那条在等的腿照常收到决议);行已有终局(别处答了 / 对账器收了,本副本还没闻讯)⇒ 按行的真相答
+     * (与晚答口同一张表)。读不出行 ⇒ 不知道属主是谁 ⇒ 与未知 id 同形同码(属主门 fail-closed)。
      */
-    private respondAdopted;
+    private respondByRow;
     /** 一条已过属主门的登记(活登记或接管登记)的应答 —— 两者同一条路:规则文本前门 → 要人门 → CAS → 兑付。
      *  `judgedOwner` = 门判过的那位属主([ref]:决议作用域的属主维,CAS 与确认读都绑它;见 `askRowCarriesOwner`)。 */
     private answerRegistration;
-    /** 一次 live 回决**落定之后**的两件兑付(部署名单那一问的豁免、「不再询问」的规则)—— 两件都只在 200 那一支、都读同一只资格。 */
+    /** 一次 live 回决**落定之后**的两件兑付(部署名单那一问的豁免、「不再询问」的规则)—— 两件都只在 200 那一支、都读同一只资格。
+     *  `judgedOwner` = 这次决议的门判过的那位属主([ref]:一次决议只读一次属主 —— 决议 CAS、会话放行、规则落店、豁免记账都用这一份,不回头重读登记上的那一格)。 */
     private afterLiveDecision;
     /**
      * **部署名单(`APPROVAL_REQUIRE`)那一问的「本会话放行」只落 server 的会话豁免店**(谁问的,谁的站着的答案算数):名单的问是 server 铸的,
@@ -2026,8 +2042,13 @@ export declare class ToolApprovalCoordinator {
         status: number;
         body: unknown;
     }>;
-    /** [ref]:接管登记的按问读口 —— 行可见且仍 `STREAM_PENDING` ⇒ `pending`(列表面同一只行投影);否则按行的态答(与读行半场同一张表)。 */
-    private readAdopted;
+    /**
+     * [ref]:有行的登记的按问读口 —— 行可见且仍 `STREAM_PENDING` ⇒ `pending`(列表面同一只行投影);否则按行的态答(与读行半场同一张表)。
+     * 🔴 行**读不出**(店抛 / 超时)⇒ 只有**本协调器自己铸的活登记**回落:登记记下的属主认调用方 ⇒ `pending`,否则与未知 id 同答 —— 与同一刻的应答口同答
+     * (活登记的应答拿登记属主当候选、不多读一次店,店抖动不挡真实回决,D5),也与 7.135.x 的读口同答。**接管登记**([ref],起服从问账接管、没有引擎腿在等)的
+     * 属主跟着行走,登记上那一格不是权威 —— 应答口对它恒读行判、读不出 ⇒ 404,读口同样 404(两口同答;7.135.x 两口都 404)。读得出的「没有这一行」不回落(那是行的真相)。
+     */
+    private readByRow;
     /** {@link readApproval} 的读行半场。 */
     private readAskRowState;
     /**
@@ -2068,8 +2089,10 @@ export declare class ToolApprovalCoordinator {
     /** {@link respondLate} 的读行:按 id 读出行,交 {@link dispatchRowTruth}。 */
     private dispatchLateByRow;
     /**
-     * 按 wire 身份(= 行的键)读行。读不出 ⇒ 记账并按「查无」交回:读不出 = **不知道**这只 ask 落在哪一态,而晚答口的三条受理臂(200/200/202)
-     * 都在对客户端做承诺 —— 不知道 ⇒ 回那句 404,绝不把未知说成受理(D5 的 fail-open 只覆盖「不挡人的真实回决」那一面,这条腿方向相反)。
+     * 按 wire 身份(= 行的键)读行 —— 三态分开交回({@link AskRowRead}):读到了 / 读得出的「没有这一行」/ 读不出(店抛或超时,记账)。
+     * 「读不出」与「不在」不折成一个值:调用点各自表态 —— 应答口与晚答口按「查无」答(读不出 = **不知道**这只 ask 落在哪一态,而受理臂都在对客户端做承诺,
+     * 不知道 ⇒ 回那句 404,绝不把未知说成受理;D5 的 fail-open 只覆盖「不挡人的真实回决」那一面,这条腿方向相反),按问读口对本协调器自己铸的活登记回落那一份登记
+     * (接管登记不回落,{@link readByRow})。
      */
     private askRowFor;
     /**

package/dist/tool-approval.js

@@ -13,7 +13,7 @@ import { recordFailOpen } from "./observability/fail-open.js";
 import { ownerOfCheckpointScope } from "./security.js";
 import { deriveAskId, deriveAskScopedBatchId, deriveBatchId, MAX_DECISION_NOTE_CHARS, noteLandedOnRow, noteRecordedReceipt } from "./approval-ask-machine.js";
 import { currentParkArm, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildReplayFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readProbeReason, readReadRootCandidate, readStoredCardEnvelope, readRuleEvidence, readAllowRuleShadowed, readRuleOffersAbsence, readRuleOffersAbsenceSeat, readParkRowTrueSeat, readAskClassPair, readClosedWordSeat, buildApprovalCompleteFrame, readRuleOfferList, } from "./approval-card.js";
-import { askRowCarriesOwner, POLICY_REFUSAL_DECISION, projectAskTerminalClaimTruth } from "./plugins/approval-ask-store-sql.js";
+import { askOwnerAdmits, askRowCarriesOwner, POLICY_REFUSAL_DECISION, projectAskTerminalClaimTruth } from "./plugins/approval-ask-store-sql.js";
 import { APPROVAL_ENDING_CAUSES, SETTLE_OUTCOME, causeOfAskRow } from "./approval-deny-reasons.js";
 import { settleByPolicy } from "./approval-policy-settlement.js";
 import { governanceAskMarksFor, runWithGovernanceAskScope } from "./governance-ask-marks.js";
@@ -123,8 +123,10 @@ function askStandingAnswerFacts(req, governanceForced, deploymentListAsks) {
         deploymentListQuestion,
     };
 }
-const NO_GATE_FACTS = { contentQuestion: false, markedUnresolvable: false, org: undefined, tightened: undefined, mandateMarks: {} };
-const DEPLOYMENT_LIST_ASK_CLASSES = new Set(classifyAsk(operatorAsk("APPROVAL_REQUIRE", ""), NO_GATE_FACTS).classes);
+function noGateFacts(call) {
+    return { call, contentQuestion: false, markedUnresolvable: false, org: undefined, tightened: undefined, mandateMarks: {} };
+}
+const DEPLOYMENT_LIST_ASK_CLASSES = new Set(classifyAsk(operatorAsk("APPROVAL_REQUIRE", ""), noGateFacts({ toolCallId: "", toolName: "" })).classes);
 export function carriesDeploymentListQuestion(deploymentListAsks, classes) {
     return deploymentListAsks && classes !== undefined && classes.some((c) => DEPLOYMENT_LIST_ASK_CLASSES.has(c));
 }
@@ -134,7 +136,7 @@ export function policyAskStandingAnswerFacts(req, ask, deploymentListQuestion) {
         requiresRealApproval: ask.requiresRealApproval === true,
         mandated: ask.mandated === true,
         grantBinding: callGrantBindingOf(req),
-        classes: [...classifyAsk(ask, NO_GATE_FACTS).classes],
+        classes: [...classifyAsk(ask, noGateFacts({ toolCallId: req.toolCallId, toolName: req.toolName })).classes],
         deploymentListQuestion,
     };
 }
@@ -195,8 +197,11 @@ function mandatedFromSeat(seat) {
             return false;
     }
 }
+function rowOrUnknown(read) {
+    return read.kind === "row" ? read.row : null;
+}
 function askRowVisibleTo(row, principal) {
-    return row !== null && (row.owner === null || row.owner === principal);
+    return row !== null && askOwnerAdmits(row.owner, principal);
 }
 function waitingLegsReached(entry, othersReached) {
     return (entry.adopted === true ? 0 : 1) + othersReached;
@@ -206,7 +211,7 @@ function withConsumerDisclosure(result, waitingLegs) {
 }
 function livePendingRowOf(e) {
     const listFrame = e.adopted === true ? e.cardFrame : (e.cardFrame ?? e.frame);
-    const approvalCard = e.adopted === true ? e.cardFrame.approvalCard : e.frame.approvalCard;
+    const approvalCard = e.adopted === true ? e.cardFrame.card.approvalCard : e.frame.approvalCard;
     return {
         approvalId: e.approvalId,
         toolName: e.toolName,
@@ -332,6 +337,9 @@ function unattendedRefusalReason(site) {
 function isChildAsk(req) {
     return req.fromSubagent === true;
 }
+export function approverFacingArgs(args) {
+    return boundArgs(args).args;
+}
 function boundArgs(args) {
     const redacted = redactDeep(args);
     let hasBidi = false;
@@ -2049,17 +2057,21 @@ export class ToolApprovalCoordinator {
         }
         const entry = this.liveEntryFor(id);
         if (entry?.adopted === true)
-            return this.respondAdopted(entry, id, principal, parsed, httpReq);
-        if (!entry || (entry.owner !== null && entry.owner !== principal)) {
-            return this.respondLate(id, principal, parsed, httpReq);
-        }
-        return this.answerRegistration(entry, entry.owner, id, principal, parsed, httpReq);
+            return this.respondByRow(entry, id, principal, parsed, httpReq);
+        if (entry !== undefined && askOwnerAdmits(entry.owner, principal))
+            return this.answerRegistration(entry, entry.owner, id, principal, parsed, httpReq);
+        if (entry !== undefined && this.registrationHasRow(entry))
+            return this.respondByRow(entry, id, principal, parsed, httpReq);
+        return this.respondLate(id, principal, parsed, httpReq);
+    }
+    registrationHasRow(entry) {
+        return this.askStore !== undefined && entry.askId !== undefined;
     }
-    async respondAdopted(entry, id, principal, parsed, httpReq) {
+    async respondByRow(entry, id, principal, parsed, httpReq) {
         const store = this.askStore;
         if (!store)
             return this.notPending();
-        const row = await this.askRowFor(store, id, "getAsk(respond-adopted)");
+        const row = rowOrUnknown(await this.askRowFor(store, id, "getAsk(respond-by-row)"));
         if (!askRowVisibleTo(row, principal))
             return this.notPending(NOT_PENDING_UNKNOWN_CAUSE);
         if (row.state !== "STREAM_PENDING")
@@ -2067,7 +2079,7 @@ export class ToolApprovalCoordinator {
         return this.answerRegistration(entry, row.owner, id, principal, parsed, httpReq);
     }
     answerRegistration(entry, judgedOwner, id, principal, parsed, httpReq) {
-        const preRule = this.precheckEditedRuleBeforeDecision(entry, parsed);
+        const preRule = this.precheckEditedRuleBeforeDecision(entry, judgedOwner, parsed);
         if (preRule !== undefined)
             return preRule;
         if (parsed.value !== "deny" && policyCannotAnswer(heldAskOf(entry.requiresRealApproval === true), parsed.decidedBy)) {
@@ -2076,17 +2088,17 @@ export class ToolApprovalCoordinator {
         const ruleEligibility = { eligible: true };
         const store = this.askStore;
         if (store && entry.askId !== undefined && entry.batchId !== undefined) {
-            return this.respondWithCas(store, entry.askId, entry.batchId, judgedOwner, entry, parsed, ruleEligibility).then((cas) => cas.lost ? this.dispatchRowTruth(cas.row, id, parsed, httpReq, principal) : this.afterLiveDecision(cas.result, entry, parsed, principal, ruleEligibility));
+            return this.respondWithCas(store, entry.askId, entry.batchId, judgedOwner, entry, parsed, ruleEligibility).then((cas) => cas.lost ? this.dispatchRowTruth(cas.row, id, parsed, httpReq, principal) : this.afterLiveDecision(cas.result, entry, judgedOwner, parsed, principal, ruleEligibility));
         }
-        return this.afterLiveDecision(this.finishRespond(entry, parsed), entry, parsed, principal, ruleEligibility);
+        return this.afterLiveDecision(this.finishRespond(entry, judgedOwner, parsed), entry, judgedOwner, parsed, principal, ruleEligibility);
     }
-    afterLiveDecision(decided, entry, parsed, principal, ruleEligibility) {
-        const settled = this.recordDeploymentListAnswer(decided, entry, parsed, principal, ruleEligibility);
+    afterLiveDecision(decided, entry, judgedOwner, parsed, principal, ruleEligibility) {
+        const settled = this.recordDeploymentListAnswer(decided, entry, judgedOwner, parsed, principal, ruleEligibility);
         if (parsed.persistRule === undefined)
             return settled;
-        return this.persistRuleAfterDecision(settled, entry, parsed.persistRule, parsed.updatedInput !== undefined, ruleEligibility);
+        return this.persistRuleAfterDecision(settled, entry, judgedOwner, parsed.persistRule, parsed.updatedInput !== undefined, ruleEligibility);
     }
-    recordDeploymentListAnswer(decided, entry, parsed, principal, eligibility) {
+    recordDeploymentListAnswer(decided, entry, judgedOwner, parsed, principal, eligibility) {
         const store = this.sessionGrants;
         const sessionId = entry.sessionId;
         if (parsed.value !== "allow_session" || !sessionId || store === undefined)
@@ -2101,9 +2113,9 @@ export class ToolApprovalCoordinator {
                 return { ...result, body: { ...result.body, rememberApplied: false } };
             let rememberApplied = false;
             try {
-                await this.withStoreDeadline(store.grant(sessionId, entry.toolName, principal ?? entry.owner), "sessionGrants.grant(deployment-list)", DURABLE_CALL_TIMEOUT_MS);
+                await this.withStoreDeadline(store.grant(sessionId, entry.toolName, principal ?? judgedOwner), "sessionGrants.grant(deployment-list)", DURABLE_CALL_TIMEOUT_MS);
                 rememberApplied = true;
-                defaultLogger.info("approval_exemption_granted", { sessionId, toolName: entry.toolName, grantedBy: principal ?? entry.owner });
+                defaultLogger.info("approval_exemption_granted", { sessionId, toolName: entry.toolName, grantedBy: principal ?? judgedOwner });
             }
             catch (err) {
                 defaultLogger.warn("approval_exemption_grant_failed", { sessionId, toolName: entry.toolName, error: String(err).slice(0, 200) });
@@ -2111,7 +2123,7 @@ export class ToolApprovalCoordinator {
             return { ...result, body: { ...result.body, rememberApplied } };
         })();
     }
-    precheckEditedRuleBeforeDecision(entry, parsed) {
+    precheckEditedRuleBeforeDecision(entry, judgedOwner, parsed) {
         const persistRule = parsed.persistRule;
         if (persistRule === undefined || persistRule.kind !== "text" || !persistRule.edited)
             return undefined;
@@ -2120,7 +2132,7 @@ export class ToolApprovalCoordinator {
         if (entry.governanceForced === true)
             return undefined;
         const command = entry.ruleLane?.command;
-        if (this.ruleConsent === undefined || command === undefined || entry.owner === null)
+        if (this.ruleConsent === undefined || command === undefined || judgedOwner === null)
             return undefined;
         const verdict = precheckCardRuleText(persistRule.rule, command);
         if (verdict === undefined || verdict.ok)
@@ -2155,9 +2167,9 @@ export class ToolApprovalCoordinator {
     }
     readApproval(id, principal) {
         const entry = this.liveEntryFor(id);
-        if (entry?.adopted === true)
-            return this.readAdopted(entry, id, principal);
-        if (entry !== undefined && (entry.owner === null || entry.owner === principal)) {
+        if (entry !== undefined && this.registrationHasRow(entry))
+            return this.readByRow(entry, id, principal);
+        if (entry !== undefined && askOwnerAdmits(entry.owner, principal)) {
             const body = { state: "pending", ...livePendingRowOf(entry) };
             return { status: 200, body };
         }
@@ -2166,11 +2178,18 @@ export class ToolApprovalCoordinator {
             return this.notPending();
         return this.readAskRowState(store, id, principal);
     }
-    async readAdopted(entry, id, principal) {
+    async readByRow(entry, id, principal) {
         const store = this.askStore;
         if (!store)
             return this.notPending();
-        const row = await this.askRowFor(store, id, "getAsk(read-adopted)");
+        const read = await this.askRowFor(store, id, "getAsk(read-by-row)");
+        if (read.kind === "unreadable") {
+            if (entry.adopted === true || !askOwnerAdmits(entry.owner, principal))
+                return this.notPending(NOT_PENDING_UNKNOWN_CAUSE);
+            const body = { state: "pending", ...livePendingRowOf(entry) };
+            return { status: 200, body };
+        }
+        const row = rowOrUnknown(read);
         if (askRowVisibleTo(row, principal) && row.state === "STREAM_PENDING") {
             const body = { state: "pending", ...livePendingRowOf(entry) };
             return { status: 200, body };
@@ -2178,7 +2197,7 @@ export class ToolApprovalCoordinator {
         return this.readStateOfRow(row, principal);
     }
     async readAskRowState(store, id, principal) {
-        return this.readStateOfRow(await this.askRowFor(store, id, "getAsk(read)"), principal);
+        return this.readStateOfRow(rowOrUnknown(await this.askRowFor(store, id, "getAsk(read)")), principal);
     }
     async readParkedGate(row) {
         const gate = this.parkedGate;
@@ -2310,15 +2329,16 @@ export class ToolApprovalCoordinator {
         return undefined;
     }
     async dispatchLateByRow(store, id, parsed, httpReq, principal) {
-        return this.dispatchRowTruth(await this.askRowFor(store, id, "getAsk(respond-late)"), id, parsed, httpReq, principal);
+        return this.dispatchRowTruth(rowOrUnknown(await this.askRowFor(store, id, "getAsk(respond-late)")), id, parsed, httpReq, principal);
     }
     async askRowFor(store, id, label) {
         try {
-            return await this.withStoreDeadline(store.getAsk(id), label, DURABLE_CONVERGE_READ_TIMEOUT_MS);
+            const row = await this.withStoreDeadline(store.getAsk(id), label, DURABLE_CONVERGE_READ_TIMEOUT_MS);
+            return row === null ? { kind: "absent" } : { kind: "row", row };
         }
         catch (err) {
             this.noteStoreError(err, label);
-            return null;
+            return { kind: "unreadable" };
         }
     }
     async dispatchRowTruth(row, id, parsed, httpReq, principal) {
@@ -2580,13 +2600,13 @@ export class ToolApprovalCoordinator {
             },
         };
     }
-    async persistRuleAfterDecision(settled, entry, persistRule, inputWasEdited, ruleEligibility) {
+    async persistRuleAfterDecision(settled, entry, judgedOwner, persistRule, inputWasEdited, ruleEligibility) {
         const result = await settled;
         if (result.status !== 200)
             return result;
         const lane = this.ruleConsent;
         const material = entry.ruleLane;
-        const owner = entry.owner;
+        const owner = judgedOwner;
         const withFlag = (rulePersisted, ruleRefusal, echo) => ({
             status: result.status,
             body: { ...result.body, rulePersisted, ...(ruleRefusal !== undefined ? { ruleRefusal } : {}), ...(echo ?? {}) },
@@ -2708,11 +2728,11 @@ export class ToolApprovalCoordinator {
             if (!converged) {
                 return { lost: false, result: this.notPending() };
             }
-            return { lost: false, result: withConsumerDisclosure(this.finishRespond(entry, parsed, { updatedInputDelivered: false, noteRecorded: noteLanded }), waitingLegsReached(entry, othersReached)) };
+            return { lost: false, result: withConsumerDisclosure(this.finishRespond(entry, owner, parsed, { updatedInputDelivered: false, noteRecorded: noteLanded }), waitingLegsReached(entry, othersReached)) };
         }
         const payloadIsMine = ambiguousConfirmedRow === undefined ||
             approvalPayloadFingerprint({ updatedInput: ambiguousConfirmedRow.updatedInput }) === approvalPayloadFingerprint({ updatedInput: parsed.updatedInput });
-        const result = this.finishRespond(entry, parsed, {
+        const result = this.finishRespond(entry, owner, parsed, {
             noteRecorded: noteLanded,
             ...(winnerRow !== undefined ? { settleOutcome: outcomeOfDecidedRow(winnerRow), settleOutcomeIsThisRequest: ambiguousConfirmedRow === undefined } : {}),
             ...(entry.adopted === true ? { updatedInputDelivered: false } : ambiguousConfirmedRow !== undefined ? { updatedInputDelivered: payloadIsMine } : {}),
@@ -2720,7 +2740,7 @@ export class ToolApprovalCoordinator {
         const othersReached = winnerRow !== undefined ? this.notifyExternalDecision(askId, outcomeOfDecidedRow(winnerRow)).settled : 0;
         return { lost: false, result: withConsumerDisclosure(result, waitingLegsReached(entry, othersReached)) };
     }
-    finishRespond(entry, parsed, opts) {
+    finishRespond(entry, judgedOwner, parsed, opts) {
         let rememberApplied;
         const home = standingAnswerHome(pendingEntryStandingAnswerFacts(entry));
         let grantable;
@@ -2745,7 +2765,7 @@ export class ToolApprovalCoordinator {
                 if (oldest !== undefined)
                     this.allowAllSessions.delete(oldest);
             }
-            this.allowAllSessions.add(sessionAllowKey(entry.owner, entry.sessionId, sessionAllowCategory(entry.toolName), entry.grantBinding));
+            this.allowAllSessions.add(sessionAllowKey(judgedOwner, entry.sessionId, sessionAllowCategory(entry.toolName), entry.grantBinding));
         }
         const allowed = parsed.value !== "deny";
         const settleArgs = opts?.settleOutcome !== undefined ? settleArgsOfDecided(opts.settleOutcome) : { allowed, updatedInput: parsed.updatedInput, settledBy: liveSettledBy(parsed.decidedBy) };

package/dist/tool-rule-names.d.ts

@@ -22,6 +22,11 @@
  * 7.53.x 及以前,`MyShell` 的 `egress: true` / `irreversibility: "always"` 会让引擎 `Bash` 的调用多问一次(收紧),它的恒可逆探针会让引擎 `Bash` 的
  * `touch` 不问就跑(放宽);7.54.0 起两者都不再作用于引擎 shell。要收紧引擎 shell:给**正名**叫 `Bash` 的工具声明标记(同名标记仍作用),或请求
  * `TaskSpec.shellGate: "always"`(本仓的入口 `MANUAL_MODE_SHELL_GATE` / 请求 `shellGate`)。
+ * ⚠️ **反方向(core 7.56.0 [ref])**:一次调用的安全轴只按它答得上的名字读,别名不带副本;两个名字的层级**平局时归 wire 名**(真正跑的那只工具)。
+ * 于是 `MyShell{irreversibility:"maybe", aliases:["Bash"]}` 在引擎 shell 被选择器卸下的腿上按 `Bash` 被调时,判它的是 **`MyShell` 自己的探针**
+ * (7.55.x 及以前是引擎 shell 席的形状探针:`ls` 不问就跑、`MyShell` 的探针从未被问)。⇒ 嵌入方给这类工具**照实声明**判它自己命令的探针,
+ * 或不声明层级、或 `irreversibility: "always"`;不声明层级时引擎 shell 席的层级仍够得着它(引擎侧候设计车,问的模式下按 shell 探针问,
+ * `bypassPermissions` 下照放)。本仓自身不声明带别名的工具,零码;这一形只有经 `resolveSpec` 席挂别名工具的嵌入方走得到。
  *
  * 返回**命中的那个名字**(调用答得上的名字里第一个被规则够到的,拼写在先)—— 规则归因(`matchedAskRule`)写运维名单里的那个名,
  * 不写一个名单里查不到的 wire 名;够不到 ⇒ `undefined`。判定式(精确集 / covering 规则)由调用方给,本函数只管「读哪些名字」。

package/dist/trace/core-keyset-guard.d.ts

@@ -45,7 +45,7 @@ type RosterProjected = "name" | "agentId" | "sessionId" | "toolUseId" | "owner"
 type _GuardRoster = AssertAllKeysHandled<Exclude<keyof RosterEntry, RosterProjected>>;
 type _GuardRosterReverse = AssertAllKeysHandled<Exclude<RosterProjected, keyof RosterEntry>>;
 type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "allowRuleShadowed" | "probeCause" | "probeReason" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "readRootCandidate" | "mandated" | "mandate" | "askClass" | "classes" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling" | "approvalCard" | "boundGrantAbsence";
-type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "hasBidiControls" | "previewWithheld" | "execCwd" | "authoredBy";
+type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "hasBidiControls" | "previewWithheld" | "execCwd" | "authoredBy" | "requestedBy" | "editRewritten";
 type _GuardAsk = AssertAllKeysHandled<Exclude<keyof AskRequest, AskProjected | AskExcluded>>;
 type _GuardAskReverse = AssertAllKeysHandled<Exclude<AskProjected | AskExcluded, keyof AskRequest>>;
 type AskFrameServerMinted = "type" | "approvalId" | "argsOmitted" | "outcome" | "governanceForced" | "expiresAtMs" | "expiresInMs" | "serverNowMs" | "parked" | "cause" | "inputHasBidi" | "rememberRefused";
@@ -218,17 +218,17 @@ type _GuardInboxSummaryReverse = AssertAllKeysHandled<Exclude<SummaryProjected |
 type ParkArmKeys = keyof Extract<PendingAction, {
     kind: "tool_approval";
 }>;
-type ParkArmQueueProjected = "toolName" | "toolCallId" | "boundInputHash" | "ruleOffers" | "hasBidiControls" | keyof import("../approval-card.js").ParkRowFacts;
-type ParkArmQueueExcluded = "kind" | "args" | "batchToolCallIds" | "completedCallIds" | "capabilityId" | "contractId" | "shapeDigest" | "implementationRevision" | "family" | "pathTarget" | "hostTarget" | "targets" | "names" | "preview" | "previewWithheld" | "execCwd" | "denialLimitFallback" | "authoredBy" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling";
+type ParkArmQueueProjected = "toolName" | "toolCallId" | "boundInputHash" | "ruleOffers" | "hasBidiControls" | keyof import("../approval-card.js").ParkRowFacts | keyof import("../approval-card.js").SkillCardFacts;
+type ParkArmQueueExcluded = "kind" | "args" | "batchToolCallIds" | "completedCallIds" | "capabilityId" | "contractId" | "shapeDigest" | "implementationRevision" | "family" | "pathTarget" | "hostTarget" | "targets" | "names" | "preview" | "previewWithheld" | "execCwd" | "denialLimitFallback" | "authoredBy" | "engineMounted";
 type _GuardParkArmQueue = AssertAllKeysHandled<Exclude<ParkArmKeys, ParkArmQueueProjected | ParkArmQueueExcluded>>;
 type _GuardParkArmQueueReverse = AssertAllKeysHandled<Exclude<ParkArmQueueProjected | ParkArmQueueExcluded, ParkArmKeys>>;
 type _NoDoubleBookParkArmQueue = AssertAllKeysHandled<Extract<ParkArmQueueProjected, ParkArmQueueExcluded>>;
-type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requireExistingSession" | "oneShot" | "clientContext" | "resumeAt" | "resumeAtMode" | "model" | "compactionModel" | "thinking" | "systemPrompt" | "appendSystemPrompt" | "promptRole" | "promptBinding" | "memory" | "suggestNextPrompts" | "restoreFiles" | "acceptPartialRestore" | "rewindFilesTo" | "tools" | "excludeTools" | "deferTools" | "toolMaterializeStrategy" | "promptProfile" | "toolPolicy" | "onAsk" | "onQuestion" | "mods" | "durableApproval" | "resourceSuspend" | "resilience" | "finalVerification" | "checkpointStore" | "handsReadOnly" | "memoryPersistenceCapable" | "additionalDirectories" | "additionalReadDirectories" | "enablePlanMode" | "interactiveTools" | "enableFork" | "shellGate" | "approvalReach" | "writeFace" | "mcp" | "a2a" | "skills" | "backgroundScope" | "envFacts" | "limits" | "configOverrides" | "forwardSubagentEvents" | "retainSubagentSessions" | "retainBackgroundProcesses" | "outputSchema" | "outputRetries" | "compaction" | "attachments" | "selfOrchestration" | "getApiKeyAndHeaders" | "interactionPosture" | "agents" | "permissionMode" | "taskId" | "signal" | "preemptSignal" | "maxSuspends" | "skillListingBudgetFraction" | "skillListingMaxDescChars" | "excludeAllTools" | "fileHistory" | "userInvokedSkills" | "outputStyle" | "projectMemory" | "allowedTools" | "allowTools" | "userAttachments" | "readDenyPatterns" | "writeProtectedAdditions" | "complianceAdditionalDenies";
+type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requireExistingSession" | "oneShot" | "clientContext" | "resumeAt" | "resumeAtMode" | "model" | "compactionModel" | "thinking" | "systemPrompt" | "appendSystemPrompt" | "promptRole" | "promptBinding" | "memory" | "suggestNextPrompts" | "restoreFiles" | "acceptPartialRestore" | "rewindFilesTo" | "tools" | "excludeTools" | "deferTools" | "toolMaterializeStrategy" | "promptLean" | "toolPolicy" | "onAsk" | "onQuestion" | "mods" | "durableApproval" | "resourceSuspend" | "resilience" | "finalVerification" | "checkpointStore" | "handsReadOnly" | "memoryPersistenceCapable" | "additionalDirectories" | "additionalReadDirectories" | "enablePlanMode" | "interactiveTools" | "enableFork" | "shellGate" | "approvalReach" | "writeFace" | "mcp" | "a2a" | "skills" | "backgroundScope" | "envFacts" | "limits" | "configOverrides" | "forwardSubagentEvents" | "retainSubagentSessions" | "retainBackgroundProcesses" | "outputSchema" | "outputRetries" | "compaction" | "attachments" | "selfOrchestration" | "getApiKeyAndHeaders" | "interactionPosture" | "agents" | "permissionMode" | "taskId" | "signal" | "preemptSignal" | "maxSuspends" | "skillListingBudgetFraction" | "skillListingMaxDescChars" | "excludeAllTools" | "fileHistory" | "userInvokedSkills" | "outputStyle" | "projectMemory" | "allowedTools" | "allowTools" | "userAttachments" | "readDenyPatterns" | "writeProtectedAdditions" | "complianceAdditionalDenies";
 /** 导出:请求体键闭集门(`request-key-closure.ts`)据它锁「本仓记为未接线的引擎座,提交口不许受理」—— 两处分类只能同向。 */
 export type TaskSpecUnwired = "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars" | "peerPresence" | "modelRole" | "enableBlockedReport" | "promptForm" | "advisorModel";
 type _GuardTaskSpec = AssertAllKeysHandled<Exclude<keyof TaskSpec, TaskSpecWired | TaskSpecUnwired>>;
 type _GuardTaskSpecReverse = AssertAllKeysHandled<Exclude<TaskSpecWired | TaskSpecUnwired, keyof TaskSpec>>;
-type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "terminal" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "remoteEnvFailures" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveWriteFace" | "effectiveMemoryScopes" | "stats" | "editedFiles" | "responseModel" | "compaction";
+type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "terminal" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "remoteEnvFailures" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveWriteFace" | "effectiveMemoryScopes" | "stats" | "editedFiles" | "responseModel" | "compaction" | "resultEntryIds";
 type TaskResultStripped = never;
 type _GuardTaskResult = AssertAllKeysHandled<Exclude<keyof TaskResult, TaskResultForwarded | TaskResultStripped>>;
 type _GuardTaskResultReverse = AssertAllKeysHandled<Exclude<TaskResultForwarded | TaskResultStripped, keyof TaskResult>>;

package/dist/trace/engine-notice-wire.d.ts

@@ -16,7 +16,7 @@
  * 同文件 G1 e2e 的全码扇出夹具、以及契约文档附录 D.3 那张表(含**小节标题里的码数** —— 那道门本批
  * 刚立,立完就在下一次加码时自己咬住了)。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "permission.entry_mode_clamped", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "task.tool_turn_incomplete", "route.finish_reason_unknown", "route.stream_end_ignored", "route.credential_origin_mismatch", "mods.registration_refused", "config.session_rules_earlier_grammar", "advisor.not_attached"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "permission.entry_mode_clamped", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "task.tool_turn_incomplete", "route.finish_reason_unknown", "route.stream_end_ignored", "route.credential_origin_mismatch", "mods.registration_refused", "config.session_rules_earlier_grammar", "advisor.not_attached", "inherit_env.names_withheld", "model.capability_downgraded"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
 /** 白名单谓词(单点):路由与门都读这一个,不许第二处手抄码串。 */
 export declare function isEngineNoticeWireCode(code: string): code is EngineNoticeWireCode;

package/dist/trace/engine-notice-wire.js

@@ -44,6 +44,8 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     "mods.registration_refused",
     "config.session_rules_earlier_grammar",
     "advisor.not_attached",
+    "inherit_env.names_withheld",
+    "model.capability_downgraded",
 ];
 const WIRE_CODES = new Set(ENGINE_NOTICE_WIRE_CODES);
 export function isEngineNoticeWireCode(code) {

package/dist/trace/exit-seat.js

@@ -3,7 +3,7 @@ import { CALLER_TEXT_CUT_MARK } from "../caller-text-echo.js";
 import { errorKindOf } from "../observability/err-text.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { OVERSIZED_REDACTION_PLACEHOLDER } from "../observability/run-terminal.js";
-import { proposeRedactionSpans, REDACTION_TOKEN_RE_SRC } from "./redact.js";
+import { proposeRedactionSpans, readingHeadEnd, REDACTION_TOKEN_RE_SRC, WHOLE_EXTENT } from "./redact.js";
 const EXIT_SEATS = {
     "trace-frame-text": { scope: "free-text" },
     "trace-frame-line": { scope: "free-text", maxChars: 300 },
@@ -38,8 +38,7 @@ function mergeSpans(spans) {
     return out;
 }
 const TOKEN_AT = new RegExp(REDACTION_TOKEN_RE_SRC, "y");
-function cutPlain(gap, room) {
-    let cut = room;
+function safeCutPoint(gap, cut) {
     const hi = gap.charCodeAt(cut - 1);
     if (cut > 0 && hi >= 0xd800 && hi <= 0xdbff && (gap.charCodeAt(cut) & 0xfc00) === 0xdc00)
         cut -= 1;
@@ -50,16 +49,19 @@ function cutPlain(gap, room) {
         if (m !== null && open + m[0].length > cut)
             cut = open;
     }
-    return gap.slice(0, cut);
+    return cut;
 }
-function renderOnce(text, groups) {
+const cutPlain = (gap, room) => gap.slice(0, safeCutPoint(gap, room));
+function renderOnce(text, groups, until = Number.POSITIVE_INFINITY) {
     const parts = [];
     let at = 0;
     for (const g of groups) {
+        if (g.start >= until)
+            break;
         parts.push(text.slice(at, g.start), g.repl);
         at = g.end;
     }
-    parts.push(text.slice(at));
+    parts.push(text.slice(at, until));
     return parts.join("");
 }
 function emitAs(form, text) {
@@ -79,12 +81,18 @@ function emitAs(form, text) {
     }
 }
 const layoutOf = (row) => (row.emit === undefined ? "multi-line" : "single-line");
-function boundRow(out, row) {
-    if (row.maxChars === undefined || out.length <= row.maxChars)
+const SCAN_WINDOW_FLOOR = 4096;
+const SCAN_WINDOW_PER_BOUND = 8;
+const scanWindowOf = (maxChars) => Math.max(SCAN_WINDOW_FLOOR, maxChars * SCAN_WINDOW_PER_BOUND);
+function boundRow(out, row, cutUpstream) {
+    if (row.maxChars === undefined)
         return out;
     if (row.emit === undefined)
-        return cutPlain(out, row.maxChars);
-    return cutPlain(out, row.maxChars - CALLER_TEXT_CUT_MARK.length) + CALLER_TEXT_CUT_MARK;
+        return out.length <= row.maxChars ? out : cutPlain(out, row.maxChars);
+    if (out.length <= row.maxChars && !cutUpstream)
+        return out;
+    const room = row.maxChars - CALLER_TEXT_CUT_MARK.length;
+    return (out.length <= room ? out : cutPlain(out, room)) + CALLER_TEXT_CUT_MARK;
 }
 export function seatText(seat, text) {
     const row = SEAT_ROWS.get(seat);
@@ -92,11 +100,27 @@ export function seatText(seat, text) {
         throw new Error(`exit seat: ${JSON.stringify(seat)} is not a row of the seat table`);
     let out;
     try {
-        if (row.emit !== undefined && emitAs(row.emit, text) === "")
+        const layout = layoutOf(row);
+        const scanWindow = row.maxChars === undefined ? undefined : scanWindowOf(row.maxChars);
+        let windowEnd;
+        let regionEnd;
+        if (scanWindow !== undefined && text.length > scanWindow) {
+            const half = scanWindow >>> 1;
+            const region = safeCutPoint(text, readingHeadEnd(text, layout, half));
+            const end = safeCutPoint(text, readingHeadEnd(text, layout, scanWindow - half, region));
+            if (end < text.length) {
+                windowEnd = end;
+                regionEnd = region;
+            }
+        }
+        const head = windowEnd === undefined ? text : text.slice(0, windowEnd);
+        if (row.emit !== undefined && emitAs(row.emit, head) === "")
             out = "";
         else {
-            const rendered = renderOnce(text, mergeSpans(proposeRedactionSpans(text, row.scope, layoutOf(row))));
-            out = boundRow(row.emit === undefined ? rendered : emitAs(row.emit, rendered), row);
+            const emitUntil = regionEnd;
+            const extent = windowEnd === undefined || regionEnd === undefined ? WHOLE_EXTENT : { kind: "head", emitEnd: regionEnd };
+            const rendered = renderOnce(head, mergeSpans(proposeRedactionSpans(head, row.scope, layout, extent)), emitUntil);
+            out = boundRow(row.emit === undefined ? rendered : emitAs(row.emit, rendered), row, windowEnd !== undefined);
         }
     }
     catch (err) {

package/dist/trace/ledger-sink.d.ts

@@ -1,8 +1,7 @@
 import { type TerminalCause } from "@sema-agent/core";
-import { brainStatusEventData } from "./project.js";
+import { brainStatusEventData, type LegWiringSections } from "./project.js";
 import { NotifiedKeys } from "../orchestration/workflow-completion-inbox.js";
 import { type LedgerEventType, type ParkLedgerEventType } from "./ledger-events.js";
-import type { InstructionsSegment } from "../instruction-selection.js";
 /**
  * LedgerSink — the SINGLE "stream event → durable runs-ledger" projection, shared by the background leg
  * (runs.ts `runInBackground`) and the sync `/v1/tasks/stream` detach lane (server.ts, `x-detach-on-disconnect`).
@@ -152,8 +151,8 @@ export declare function createLedgerSink(opts: {
      *  各传自己看得见的那个词(位①=流事件 `ev.type`,位②=账本行 `type`);拿不到类型的打点方
      *  (core 的 onActivity 第五席、resume 腿手动打点)省参,`kind` 诚实缺席(见 turn-activity.ts)。 */
     onActivity?: (kind?: string, statusData?: Record<string, unknown>) => void;
-    /** [ref]:这条腿的 `wiring_manifest.instructions` 段(腿的 `InstructionSelectionLeg.segment`)。**必填**:账本行与 live 帧是
-     *  同一条腿的两个载体,段必须来自同一只腿;在投帧那一刻读(core 推帧之前已 await 过 loader)。返回 `undefined` ⇒ 段缺席。 */
-    instructionsSegment: () => InstructionsSegment | undefined;
+    /** 这条腿的 `wiring_manifest` **本仓自铸段**(`LegWiringSections`:[ref] `instructions` 读腿的 `InstructionSelectionLeg.segment`、run 级 `skills` 读 spec 字段
+     *  `runSkillsOf`)。**必填**:账本行与 live 帧是同一条腿的两个载体,段必须来自同一只腿;在投帧那一刻读(core 推帧之前已 await 过 loader)。 */
+    legSections: () => LegWiringSections;
 }): LedgerSink;
 //# sourceMappingURL=ledger-sink.d.ts.map

package/dist/trace/ledger-sink.js

@@ -1,7 +1,7 @@
 import {} from "@sema-agent/core";
 import { outwardPlane } from "../terminal.js";
 import { recordFailOpen } from "../observability/fail-open.js";
-import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, compactionStartedEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
+import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, compactionStartedEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData, parkEventData } from "./project.js";
 import { NotifiedKeys, taskNotificationStreamKeyOf } from "../orchestration/workflow-completion-inbox.js";
 import { isParkLedgerEventType } from "./ledger-events.js";
 import { isModelSegmentBoundary, reasoningDeltaBytes, reasoningSegmentEventId } from "./model-segment.js";
@@ -115,7 +115,7 @@ export function createLedgerSink(opts) {
                 await append("workspace_changed", workspaceChangedEventData(ev));
                 break;
             case "wiring_manifest":
-                await append("wiring_manifest", wiringManifestEventData(ev, opts.instructionsSegment()));
+                await append("wiring_manifest", wiringManifestEventData(ev, opts.legSections()));
                 break;
             case "tool_roster_delta": {
                 const rosterDelta = toolRosterDeltaEventData(ev);
@@ -179,11 +179,7 @@ export function createLedgerSink(opts) {
         return append("status", statusData);
     };
     const appendParked = (kind, result) => {
-        const t = result?.terminal;
-        return append(kind, {
-            gate: t?.kind === "paused" ? t.gate : null,
-            ...(typeof result?.toolCallId === "string" ? { toolCallId: result.toolCallId } : {}),
-        });
+        return append(kind, parkEventData(result));
     };
     const appendDone = (result) => append("done", { result });
     const onDone = async (result) => {