@sema-agent/server 7.140.0 → 7.142.0

package/dist/boot/stores.js

@@ -18,6 +18,8 @@ import { PgRosterStore, TiDBRosterStore, ensurePgRosterSchema, ensureTiDBRosterS
 import { LocalTaskAttachmentStore } from "../plugins/local-task-attachment-store.js";
 import { PgTaskAttachmentStore, TiDBTaskAttachmentStore, ensurePgTaskAttachmentSchema, ensureTiDBTaskAttachmentSchema } from "../plugins/task-attachment-store.js";
 import { createSessionStore } from "../plugins/session-store.js";
+import { buildSqlPoolMissingRefusal, missingSqlCoordinateKeys } from "../sql-engine-coordinates.js";
+import { runApprovalBatchKindlessCensus } from "../approval-batch-census.js";
 import { runAndLogOneTimeMigrations } from "../plugins/one-time-migrations.js";
 import { createTaskListLane } from "./task-list-lane.js";
 import { ensurePgTaskListSchema, ensureTiDBTaskListSchema } from "../plugins/task-list-store-sql.js";
@@ -33,16 +35,17 @@ import { assertToolResultProvenanceSchema } from "../plugins/tool-result-store-s
 import { assertPermissionRuleApprovalSchema, assertPermissionRuleTicketSchema } from "../plugins/permission-rule-store-sql.js";
 import { assertApprovalAskRuleMaterialSchema } from "../plugins/approval-ask-store-sql.js";
 import { assertSchemaMatchesCode } from "../plugins/schema-consistency.js";
-import { assertCheckpointColumnSchema } from "../plugins/checkpoint-store-sql.js";
+import { SqlCheckpointStore, assertCheckpointColumnSchema } from "../plugins/checkpoint-store-sql.js";
 import { assertFileHistorySchema } from "../plugins/file-history-store-sql.js";
 import { buildMemoryBoundaryLaneFacts, buildMemoryWriteBoundaryAudit } from "./memory-boundary.js";
 import { buildMemoryPosture } from "../memory-posture.js";
 import { headReadOf } from "../session-incarnation.js";
 import { establishSqlEnginePosture, sqlPoolsOf } from "../sql-engine-posture.js";
 import { buildStorePosture } from "../store-posture.js";
+import { seatText } from "../trace/exit-seat.js";
 const DARK_REASON_PROSE = {
     engine_off: () => "MEMORY_ENGINE=off",
-    multi_tenant_file_backend: () => "multi-tenant on the FILE backend (no tenant isolation; set MEMORY_ENGINE_BACKEND=pg|tidb to light up)",
+    multi_tenant_file_backend: () => "multi-tenant on the FILE backend (no tenant isolation; set MEMORY_ENGINE_BACKEND=pg|mysql to light up)",
     remote_lane_split: (lane) => `remote exec lane "${lane}" (worker/sandbox file planes split; MEMORY_ENGINE_REMOTE_LANE=allow overrides)`,
 };
 export async function assertApprovalAskRuleMaterialOnBackend(backend) {
@@ -97,6 +100,10 @@ export async function openStores(ctx) {
     }
     if (backend)
         await runAndLogOneTimeMigrations(logger, backend);
+    {
+        const censusStore = backend !== undefined && backend.kind !== "local" ? backend.checkpoint?.() : undefined;
+        void runApprovalBatchKindlessCensus(censusStore instanceof SqlCheckpointStore ? censusStore : undefined, logger);
+    }
     if ((process.env.REWIND_SNAPSHOT_MAX_MB ?? "") !== "") {
         logger.warn("rewind_snapshot_max_mb_retired", {
             note: "REWIND_SNAPSHOT_MAX_MB no longer has an effect: the whole-tree snapshot epoch is retired (S-15); per-edited-file history captures only files the agent touches, with no tree walk and no size gate. Remove the env var. Per-blob SQL sizing is governed by SNAPSHOT_BLOB_SQL_MAX_BYTES / object storage as before.",
@@ -136,7 +143,7 @@ export async function openStores(ctx) {
         if (dialect === "pg") {
             const pool = backend?.pgPool();
             if (!pool)
-                throw new Error("MEMORY_ENGINE_BACKEND=pg requires DB_BACKEND=pg (the memory engine binds the same PG pool) — refusing to start half-configured");
+                throw new Error(buildSqlPoolMissingRefusal({ engine: dialect, declared: config.dbBackend === dialect, missing: missingSqlCoordinateKeys(dialect, process.env) }));
             const q = async (text, params) => { const r = await pool.query(text, params); return { rows: r.rows }; };
             await ensurePgMemoryEngineSchema(q);
             await ensurePgMemoryHistorySchema(q);
@@ -147,7 +154,7 @@ export async function openStores(ctx) {
                     metrics.inc("memory_embed_failed_total", { backend: dialect });
                     logger.warn("memory_embedder_failed", {
                         model: config.memoryEmbedder?.model,
-                        err: String(err).slice(0, 300),
+                        err: seatText("operator-log-text", String(err)),
                         note: "memory writes for this batch report an io-error conflict and retrieval falls back to the lexical floor until the embedder recovers",
                     });
                 },
@@ -173,7 +180,7 @@ export async function openStores(ctx) {
         else {
             const pool = backend?.mysqlPool();
             if (!pool)
-                throw new Error("MEMORY_ENGINE_BACKEND=tidb requires DB_BACKEND=mysql — refusing to start half-configured");
+                throw new Error(buildSqlPoolMissingRefusal({ engine: dialect, declared: config.dbBackend === dialect, missing: missingSqlCoordinateKeys(dialect, process.env) }));
             await ensureTiDBMemoryEngineSchema(pool);
             await ensureTiDBMemoryHistorySchema(pool);
             await ensureTiDBMemorySyncSchema(pool);
@@ -271,7 +278,7 @@ export async function openStores(ctx) {
                 if (pgPool) {
                     const q = async (text, params) => { const r = await pgPool.query(text, params); return { rows: r.rows }; };
                     await ensurePgTaskAttachmentSchema(q);
-                    taskAttachmentStore = new PgTaskAttachmentStore(q, bytes);
+                    taskAttachmentStore = new PgTaskAttachmentStore(pgPool, bytes);
                 }
                 else {
                     await ensureTiDBTaskAttachmentSchema(mysqlPool);

package/dist/boot/web-admin.js

@@ -30,13 +30,14 @@ import { CONFIG_DOMAIN_INVALID_NOTE, buildCandidateRejectedFields, candidateReje
 import { SHA256_HEX_RE } from "../digest-form.js";
 import { BOOT_REJUDGE_OF_REFUSED_GROUP, createConfigApplyLedger, modelPlaneCommitted, refusedGroups } from "../web-admin-client/apply-ledger.js";
 import { announceReadDenyRows, buildDeploymentPostureSeats } from "./runner-deps.js";
-import { echoCallerText } from "../caller-text-echo.js";
+import { seatText } from "../trace/exit-seat.js";
 const MODELS_REJECTION_PHRASE = {
     domain_invalid: "models 域判形失败",
     empty: "读不出(空 / 纯空白:半写或截断)",
     invalid_json: "读不出(不是合法的 JSON)",
     not_object: "读不出(解析出来不是 JSON 对象:null / 数组 / 标量)",
     io: "读不出(文件读失败:权限、路径是目录或 I/O 错误)",
+    too_deep: "读不出(嵌套过深:深过整棵目录的内容版本能算的层数)",
     retired_domain: "是带事实的退役域文档",
 };
 function lkgReadNote(scope) {
@@ -160,14 +161,14 @@ export async function createWebAdminRuntime(ctx) {
                 `refusing to start rather than run with every sealed model unusable (no_key_store). Make that directory creatable, owned by ` +
                 `the service user and chmod-able to 0700 on a writable filesystem, or unset SEALED_KEY_DIR to use <data root>/sealed-key.`);
         }
-        logger.warn("sealed_key_store_unavailable", { err: String(err), note: "sealed api keys cannot be unsealed on this host — models carrying sealedApiKey will fail loud per-model" });
+        logger.warn("sealed_key_store_unavailable", { err: seatText("operator-log-text", String(err)), note: "sealed api keys cannot be unsealed on this host — models carrying sealedApiKey will fail loud per-model" });
     }
     let checkpointCtxSealing;
     try {
         checkpointCtxSealing = await ensureCheckpointCtxSealing(sealedKeyDir, logger);
     }
     catch (err) {
-        logger.warn("checkpoint_ctx_sealing_unavailable", { err: err instanceof Error ? err.message : String(err), dir: join(sealedKeyDir, "checkpoint-ctx-keys"), note: "suspended tasks' request credentials cannot be sealed on this host; with durable approvals on the boot refuses — make that directory (under the sealed-key custody directory: SEALED_KEY_DIR, default <data root>/sealed-key) creatable and chmod-able by the service, or repair / remove a key file there whose public and private halves do not belong together" });
+        logger.warn("checkpoint_ctx_sealing_unavailable", { err: seatText("operator-log-text", err instanceof Error ? err.message : String(err)), dir: join(sealedKeyDir, "checkpoint-ctx-keys"), note: "suspended tasks' request credentials cannot be sealed on this host; with durable approvals on the boot refuses — make that directory (under the sealed-key custody directory: SEALED_KEY_DIR, default <data root>/sealed-key) creatable and chmod-able by the service, or repair / remove a key file there whose public and private halves do not belong together" });
     }
     const configProvider = configSourceKind(config) !== undefined
         ? createConfigProvider({
@@ -233,7 +234,7 @@ export async function createWebAdminRuntime(ctx) {
                 listener(changed);
             }
             catch (err) {
-                logger.warn("self_report_listener_failed", { changed, error: err instanceof Error ? err.message : String(err), note: "a self-report subscriber threw; the state change stands regardless and the next fleet heartbeat carries it" });
+                logger.warn("self_report_listener_failed", { changed, error: seatText("operator-log-text", err instanceof Error ? err.message : String(err)), note: "a self-report subscriber threw; the state change stands regardless and the next fleet heartbeat carries it" });
             }
         }
     };
@@ -325,7 +326,7 @@ export async function createWebAdminRuntime(ctx) {
             });
         }
         catch (e) {
-            logger.warn("center_prompts_store_unwritable", { dir: promptEpochDir, err: String(e), note: "file-backed prompt-epoch store unavailable — memory fallback (the center candidate is not restart-durable); built-ins unaffected" });
+            logger.warn("center_prompts_store_unwritable", { dir: promptEpochDir, err: seatText("operator-log-text", String(e)), note: "file-backed prompt-epoch store unavailable — memory fallback (the center candidate is not restart-durable); built-ins unaffected" });
             return new CenterPromptSource({
                 store: withByDigestBackfill(new MemoryPromptArtifactStore()),
                 stateStore: recordingStateStore(binnedPromptStateStore(storePerBin(() => new MemoryPromptSourceStateStore()))),
@@ -348,7 +349,7 @@ export async function createWebAdminRuntime(ctx) {
             await promptSource.restore();
         }
         catch (e) {
-            logger.warn("center_prompts_catalog_restore_failed", { phase, err: String(e), note: "the persisted center-layer state for this credential identity could not be loaded — the center candidate is absent until the next adopt; built-ins unaffected" });
+            logger.warn("center_prompts_catalog_restore_failed", { phase, err: seatText("operator-log-text", String(e)), note: "the persisted center-layer state for this credential identity could not be loaded — the center candidate is absent until the next adopt; built-ins unaffected" });
         }
         if (cc !== undefined && identity !== undefined && currentIdentity() !== identity) {
             promptStateIdentity = undefined;
@@ -473,7 +474,7 @@ export async function createWebAdminRuntime(ctx) {
             return lkgSurvivesRestart;
         }
         catch (err) {
-            logger.warn("config_lkg_save_failed", { path: lkgPath, err: String(err), note: "durable persist failed — restart signal proceeds anyway (a dead disk + dead center double-fault can re-loop; fix the disk)" });
+            logger.warn("config_lkg_save_failed", { path: lkgPath, err: seatText("operator-log-text", String(err)), note: "durable persist failed — restart signal proceeds anyway (a dead disk + dead center double-fault can re-loop; fix the disk)" });
             return false;
         }
     };
@@ -510,7 +511,7 @@ export async function createWebAdminRuntime(ctx) {
                     await saveLkg(lkgPath, cc?.worker, identity, read.lkg.effective, read.lkg.etag);
                 }
                 catch (err) {
-                    logger.warn("config_lkg_save_failed", { path: lkgPath, err: String(err), note: "the migrated LKG is used from memory this boot; the on-disk copy is migrated again on the next read-back and replaced by the next clean candidate" });
+                    logger.warn("config_lkg_save_failed", { path: lkgPath, err: seatText("operator-log-text", String(err)), note: "the migrated LKG is used from memory this boot; the on-disk copy is migrated again on the next read-back and replaced by the next clean candidate" });
                 }
             }
             logger.info("config_loaded_lkg", { path: lkgPath, savedAt: read.lkg.savedAt, why, scope, note: lkgReadNote(scope) });
@@ -561,7 +562,7 @@ export async function createWebAdminRuntime(ctx) {
             }
             catch (applyErr) {
                 lkgBooted = false;
-                logger.warn("config_lkg_apply_failed", { err: String(applyErr), note: "persisted LKG failed to apply — env fallback serves; the cache rewrites on the next clean candidate" });
+                logger.warn("config_lkg_apply_failed", { err: seatText("operator-log-text", String(applyErr)), note: "persisted LKG failed to apply — env fallback serves; the cache rewrites on the next clean candidate" });
             }
         };
         const warnLocalNoModels = (r, verdict) => {
@@ -680,10 +681,10 @@ export async function createWebAdminRuntime(ctx) {
             if (err instanceof ConfigDirUntrustedError)
                 throw err;
             if (bootApplyPhase)
-                logger.warn("config_apply_refused", { source: configProvider.kind, err: String(err), note: "the pulled candidate failed to apply at boot — falling back to the LKG / env; this is not a reachability failure" });
+                logger.warn("config_apply_refused", { source: configProvider.kind, err: seatText("operator-log-text", String(err)), note: "the pulled candidate failed to apply at boot — falling back to the LKG / env; this is not a reachability failure" });
             else
-                logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: String(err) });
-            await bootFallBackWhole(`${bootApplyPhase ? "boot apply refused" : "boot fetch failed"}: ${echoCallerText(String(err), { maxChars: 120 })}`);
+                logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: seatText("operator-log-text", String(err)) });
+            await bootFallBackWhole(`${bootApplyPhase ? "boot apply refused" : "boot fetch failed"}: ${seatText("operator-log-text", String(err))}`);
         }
         if (!dryRun && cc !== undefined && currentIdentity() !== promptStateIdentity)
             await rebasePromptState(currentIdentity(), "boot-end");
@@ -769,7 +770,7 @@ export async function createWebAdminRuntime(ctx) {
                     toolsShareThisFilesystem: DEPLOYMENT_SHAPE_PREDICATES.toolsOnThisHost.holds(config),
                     logger,
                 }).catch((err) => {
-                    logger.warn("center_plugins_apply_failed", { error: err instanceof Error ? err.message : String(err) });
+                    logger.warn("center_plugins_apply_failed", { error: seatText("operator-log-text", err instanceof Error ? err.message : String(err)) });
                     return undefined;
                 });
                 if (pluginOut) {
@@ -781,7 +782,7 @@ export async function createWebAdminRuntime(ctx) {
             }
             if (bootLkgCandidate && lkgEnabled) {
                 const bootPublished = await persistLkgDurable(bootLkgCandidate.effective, bootLkgCandidate.etag).catch((err) => {
-                    logger.warn("config_lkg_save_failed", { err: String(err), note: "boot LKG persist failed — retained for the per-tick retry" });
+                    logger.warn("config_lkg_save_failed", { err: seatText("operator-log-text", String(err)), note: "boot LKG persist failed — retained for the per-tick retry" });
                     return false;
                 });
                 {
@@ -1053,7 +1054,7 @@ export async function createWebAdminRuntime(ctx) {
                         }
                     }
                     catch (err) {
-                        logger.warn("web_admin_refresh_failed", { err: String(err), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
+                        logger.warn("web_admin_refresh_failed", { err: seatText("operator-log-text", String(err)), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
                         return "failed";
                     }
                     finally {
@@ -1112,7 +1113,7 @@ export async function createWebAdminRuntime(ctx) {
                             lastPull = "ok";
                     }
                     catch (err) {
-                        logger.warn("web_admin_refresh_failed", { err: String(err), leg: "boot-deferred", note: "etag NOT advanced — the refresh cadence re-fetches and re-applies the same candidate" });
+                        logger.warn("web_admin_refresh_failed", { err: seatText("operator-log-text", String(err)), leg: "boot-deferred", note: "etag NOT advanced — the refresh cadence re-fetches and re-applies the same candidate" });
                     }
                     finally {
                         refreshInFlight = false;
@@ -1163,7 +1164,7 @@ export async function createWebAdminRuntime(ctx) {
                     void bootConfigPending.then((r) => {
                         if (r !== null && configProvider.kind === "remote" && candidateIdentityOf(r.effective) !== currentIdentity()) {
                             logger.warn("config_boot_arrival_identity_changed", { note: "the late boot pull landed under a center credential that is no longer current — not adopted; re-pulling once under the current credential" });
-                            void pullEffective(configProvider, undefined).then(continueArrival, (err) => logger.warn("config_boot_arrival_repull_failed", { err: String(err), note: "the refresh cadence retries under the current credential" }));
+                            void pullEffective(configProvider, undefined).then(continueArrival, (err) => logger.warn("config_boot_arrival_repull_failed", { err: seatText("operator-log-text", String(err)), note: "the refresh cadence retries under the current credential" }));
                             return;
                         }
                         continueArrival(r);

package/dist/boot/webfetch-summarize-lane.js

@@ -1,5 +1,6 @@
 import { createWebFetchSummarizer, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
 import { createPerModelAuthSeat } from "./side-query-lane.js";
+import { seatText } from "../trace/exit-seat.js";
 export function createWebFetchSummarizeLane(ctx) {
     return async (content, prompt, signal) => {
         const model = (() => {
@@ -7,7 +8,7 @@ export function createWebFetchSummarizeLane(ctx) {
                 return coreResolveTaskModel({ modelRole: "summarize" }, { models: ctx.config.models, roles: ctx.config.roles }).model;
             }
             catch (err) {
-                ctx.logger.warn("webfetch_summarizer_model_unresolved", { err: String(err), note: "this fetch falls back to raw page content" });
+                ctx.logger.warn("webfetch_summarizer_model_unresolved", { err: seatText("operator-log-text", String(err)), note: "this fetch falls back to raw page content" });
                 return undefined;
             }
         })();

package/dist/boot/workflow-orchestration.js

@@ -7,6 +7,7 @@ import { FileWorkflowCompletionInbox, InMemoryWorkflowCompletionInbox, buildWork
 import { FileWorkflowNotifyJournalStore, JournalingWorkflowRunStore, WorkflowNotifyGate } from "../orchestration/workflow-notify-journal.js";
 import { SubagentSteerRegistry } from "../orchestration/subagent-steer.js";
 import { WorkflowAgentRegistry } from "../orchestration/workflow-agent-steer.js";
+import { seatText } from "../trace/exit-seat.js";
 export function createWorkflowOrchestration(ctx) {
     const { config, logger, metrics, localRoot, backend, getRunStore } = ctx;
     const workflowBootAtMs = Date.now();
@@ -43,12 +44,12 @@ export function createWorkflowOrchestration(ctx) {
             await workflowCompletionInbox.enqueue(buildWorkflowCompleteInboxEntry(route, p, Date.now()));
         }
         catch (err) {
-            logger.warn("workflow_completion_enqueue_failed", { runId: p.runId, err: String(err) });
+            logger.warn("workflow_completion_enqueue_failed", { runId: p.runId, err: seatText("operator-log-text", String(err)) });
         }
     };
     const workflowNotifyGate = baseWorkflowRunStore && workflowNotifyJournal
         ? new WorkflowNotifyGate(workflowNotifyJournal, baseWorkflowRunStore, deliverWorkflowCompletion, {
-            onError: (stage, runId, err) => logger.warn("workflow_notify_failed", { stage, runId, err: String(err) }),
+            onError: (stage, runId, err) => logger.warn("workflow_notify_failed", { stage, runId, err: seatText("operator-log-text", String(err)) }),
         })
         : undefined;
     const fleetBus = new FleetEventBus();

package/dist/capabilities/builtin-tools.d.ts

@@ -37,7 +37,8 @@ export declare function createSubagentExtraTools(deployment?: SubagentExtraToolS
 /**
  * `onExtraToolsError` 收到的错误 → 运维行 `subagent_extra_tools_error` 的字段:句子,加上错误**自带**的码与 `detail.reason`(在场才铸)。
  * core 7.46.0 [ref] 被拒的 spawn(产物不在名册里)带 `config.extra_tool_names` + `undeclared_name` / `undeclared_origin`;部署工厂自己抛的错多半两位都不带。
- * 本仓不按码分支、不重铸 —— 只把错误说的话原样过境到运维面(修前只记句子,码与原因词丢在这一跳)。
+ * 本仓不按码分支、不重铸 —— 只把错误说的话过境到运维面(修前只记句子,码与原因词丢在这一跳)。码是别人写的串(引擎的 `config.extra_tool_names`,或部署工厂自己抛的错):
+ * 与运维日志里其余各处同一只判官 —— 是码才带 `code`,其余键缺席({@link codeFieldOf})。
  */
 export declare function extraToolsErrorFields(err: unknown): Record<string, unknown>;
 //# sourceMappingURL=builtin-tools.d.ts.map

package/dist/capabilities/builtin-tools.js

@@ -1,5 +1,6 @@
 import { Type } from "typebox";
 import { NOW_TOOL_NAME } from "./host-tool-names.js";
+import { codeFieldOf } from "../terminal.js";
 export function nowTool() {
     return {
         name: NOW_TOOL_NAME,
@@ -21,12 +22,9 @@ export function createSubagentExtraTools(deployment) {
     };
 }
 export function extraToolsErrorFields(err) {
-    const fields = { err: err instanceof Error ? err.message : String(err) };
+    const fields = { err: err instanceof Error ? err.message : String(err), ...codeFieldOf(err) };
     if (err === null || typeof err !== "object")
         return fields;
-    const code = Reflect.get(err, "code");
-    if (typeof code === "string")
-        fields.code = code;
     const detail = Reflect.get(err, "detail");
     const reason = detail !== null && typeof detail === "object" ? Reflect.get(detail, "reason") : undefined;
     if (typeof reason === "string")

package/dist/capabilities/composite-members.d.ts

@@ -45,7 +45,7 @@ export declare const COMPOSITE_CAPABILITY_MEMBERS: {
     readonly centerWiring: readonly ["effectivePull", "effectiveRevision", "lease", "leaseHealth", "failMode", "usageReport", "issuer", "worker", "caller"];
     readonly webSearch: readonly ["backend"];
     readonly background: readonly ["listFace", "exitFaces"];
-    readonly taskSettings: readonly ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks", "pluginHooks", "managedHookGroups", "tightenOnlySeats", "approvalFrameFamilies"];
+    readonly taskSettings: readonly ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks", "pluginHooks", "managedHookGroups", "httpHookAllowlists", "tightenOnlySeats", "approvalFrameFamilies"];
     readonly settings: readonly ["permissions"];
     readonly permissionModeAuto: readonly ["accepted", "classifierSeat", "entitlementSource", "armed", "reason", "model"];
     readonly writeProtection: readonly ["armed", "rows", "replaced"];
@@ -56,6 +56,7 @@ export declare const COMPOSITE_CAPABILITY_MEMBERS: {
     readonly workspaceSync: readonly ["persist", "keep", "timeoutMs", "cache"];
     readonly userAttachments: readonly ["entries", "kinds", "supplies", "limits"];
     readonly credentialPlane: readonly ["sandboxGit"];
+    readonly memorySyncServe: readonly ["identity"];
 };
 type CompositeTable = typeof COMPOSITE_CAPABILITY_MEMBERS;
 /** 值的**具名成员对象臂**(标量 / 字面词 / `false` / `null` / `undefined` / 数组 / 函数臂剥掉)。 */

package/dist/capabilities/composite-members.js

@@ -6,7 +6,7 @@ export const COMPOSITE_CAPABILITY_MEMBERS = {
     centerWiring: ["effectivePull", "effectiveRevision", "lease", "leaseHealth", "failMode", "usageReport", "issuer", "worker", "caller"],
     webSearch: ["backend"],
     background: ["listFace", "exitFaces"],
-    taskSettings: ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks", "pluginHooks", "managedHookGroups", "tightenOnlySeats", "approvalFrameFamilies"],
+    taskSettings: ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks", "pluginHooks", "managedHookGroups", "httpHookAllowlists", "tightenOnlySeats", "approvalFrameFamilies"],
     settings: ["permissions"],
     permissionModeAuto: ["accepted", "classifierSeat", "entitlementSource", "armed", "reason", "model"],
     writeProtection: ["armed", "rows", "replaced"],
@@ -17,6 +17,7 @@ export const COMPOSITE_CAPABILITY_MEMBERS = {
     workspaceSync: ["persist", "keep", "timeoutMs", "cache"],
     userAttachments: ["entries", "kinds", "supplies", "limits"],
     credentialPlane: ["sandboxGit"],
+    memorySyncServe: ["identity"],
 };
 export function gateCompositeMembers(body) {
     return body;

package/dist/capabilities/scenarios.d.ts

@@ -87,7 +87,7 @@ export interface ScenarioContext {
      * 由**每一个**接了停驻挂点的取用方显式交出(一条读法,没有回落):请求腿 = 本请求经鉴权解析的会话与受理时那一读(`boot/resolve-spec.ts`);`/decide` 赎回面 = 行上的
      * `rootSessionId` 与赎回腿写口放行的那一位住客(`parked-revive-surface.ts`,交不交座都交)。它**只**喂停驻挂点,不挂任何会话级设施(那是 {@link sessionId} 的事,
      * 判据是「这只 bundle 是不是在那只会话上取用的」,与属主来源是两个独立判据)。缺席 = 没有根可交(boot 期探针、run-local、行上没有根)⇒ 律给哨兵。
-     * 挂点在停驻那一刻再读一次根行:住客不是见证的那一位(删了、同 id 被重新登记)⇒ 停驻否决 —— 不按新住客晋升或认领。
+     * 挂点在停驻那一刻再读一次根行:住客不是见证的那一位(删了、同 id 被重新登记)⇒ 停驻否决 —— 不按新住客认领。
      */
     delegationRoot?: DelegationRootWitness;
 }

package/dist/capability-facts.d.ts

@@ -65,6 +65,9 @@ export declare const CAPABILITY_FACT_WHY: {
     readonly memory_origin_faces_absent: "the memory engine's origin marking faces are not wired";
     readonly consolidation_valve_closed: "the memory consolidation valve is closed (MEMORY_CONSOLIDATION_DRIVER)";
     readonly memory_optout_grant_absent: "no memory-capture opt-out grant store is wired (SQL backends only)";
+    readonly memory_db_plane_absent: "this is not a DB memory plane (MEMORY_ENGINE_BACKEND=pg|mysql): the central memory faces are not wired";
+    readonly memory_sync_identity_undeclared: "the DB memory plane declares no sync identity (MEMORY_SYNC_SERVE_IDENTITY), so it serves no sync round";
+    readonly memory_sync_leg_absent: "no memory sync leg runs here (a file memory engine with MEMORY_SYNC_URL)";
     readonly outcome_ledger_unqueryable: "the outcome sink has no query face (File sink)";
     readonly config_catalog_disabled: "the config catalog is switched off (CONFIG_CATALOG_ENABLED=false)";
     readonly rule_store_absent: "no permission-rule store is wired";
@@ -140,6 +143,15 @@ export declare function mcpReconnect(d: Pick<Deps, "runStore" | "sessionStorage"
     runStore: Store<"runStore">;
     sessionStorage: HeadReadingSessionStore;
 }>;
+/**
+ * 在飞 run 的切档口(`POST /v1/runs/:id/permission-mode`)= 持久 run 账面 ∧ checkpoint 店(ctx 面)。后一格是承重的:切档要读这条 run 的
+ * **存储体**(本任务 settings 的 kill-switch 由受理判官折,与提交口同一份事实),也要把准入的词写回存储体(run 模式词的唯一来源,续跑腿读它);
+ * 没有 ctx 面的部署两件都做不了 ⇒ 不提供这一口(能力位 `permissionModeWrite` 同读本事实)。
+ */
+export declare function permissionModeWrite(d: Pick<Deps, "runStore" | "checkpointStore">): Fact<"run_store_absent" | "checkpoint_store_absent", {
+    runStore: Store<"runStore">;
+    checkpointStore: Store<"checkpointStore">;
+}>;
 export declare function sessionAuditView(d: Pick<Deps, "sessionAudit">): Fact<"session_audit_absent", {
     sessionAudit: Store<"sessionAudit">;
 }>;
@@ -263,6 +275,27 @@ export declare function sharedMemoryRead(d: Pick<Deps, "sharedMemoryStore" | "or
     provider: Store<"sharedMemoryStore">;
     directory: Store<"orgMemoryDirectory">;
 }>;
+/** 中心侧记忆导出读(`GET /v1/memory/export`):DB 记忆平面的导出读面在场(只在 DB 记忆平面装配)。门读本事实,不读 `MEMORY_ENGINE_BACKEND`。 */
+export declare function memoryExport(d: Pick<Deps, "memoryExport">): Fact<"memory_db_plane_absent", {
+    read: Store<"memoryExport">;
+}>;
+/**
+ * 中心侧同步口(`POST /v1/memory/sync/:scope`):DB 记忆平面的同步执行位在场 ∧ 本中心声明了同步身份(`MEMORY_SYNC_SERVE_IDENTITY`)。
+ * 见证 = 执行位 + 那份声明 —— 能力位 `memorySyncServe` 的 `{ identity }` 逐字投影它,入站 `peer` 与它按串比:一处声明,两个读者读同一个值。
+ */
+export declare function memorySyncServe(d: Pick<Deps, "memorySync" | "config">): Fact<"memory_db_plane_absent" | "memory_sync_identity_undeclared", {
+    perform: Store<"memorySync">;
+    identity: string;
+}>;
+/**
+ * 会话记忆同步触发口(`POST /v1/sessions/:id/memory/sync`):本机同步腿在场 ∧ 持久 run 账面(读集 = 会话最近一条已结腿的记忆观测;收割栅栏读会话的 run 认领)
+ * ∧ 会话头读(属主门与 `sourceRevision` = 同一次头读的叶子)。
+ */
+export declare function sessionMemorySync(d: Pick<Deps, "memorySyncLeg" | "runStore" | "sessionStorage">): Fact<"memory_sync_leg_absent" | "run_store_absent" | "session_head_face_absent", {
+    leg: Store<"memorySyncLeg">;
+    runStore: Store<"runStore">;
+    sessionStorage: HeadReadingSessionStore;
+}>;
 /** 跨主体投递门在座(`POST /v1/principal-inbox/messages` 的可用性门与能力位 `principalInboxDelivery` 同读这一只)。门的装配本身是
  *  一道合取(收件箱消费方声明 ∧ 耐久 mailbox ∧ org 成员目录 ∧ 配额店,缺一拒启 —— `boot/stage-06-runners.ts`),
  *  所以这里只判「门在不在」:在 ⟺ 那四件都在。 */

package/dist/capability-facts.js

@@ -45,6 +45,9 @@ export const CAPABILITY_FACT_WHY = {
     memory_origin_faces_absent: "the memory engine's origin marking faces are not wired",
     consolidation_valve_closed: "the memory consolidation valve is closed (MEMORY_CONSOLIDATION_DRIVER)",
     memory_optout_grant_absent: "no memory-capture opt-out grant store is wired (SQL backends only)",
+    memory_db_plane_absent: "this is not a DB memory plane (MEMORY_ENGINE_BACKEND=pg|mysql): the central memory faces are not wired",
+    memory_sync_identity_undeclared: "the DB memory plane declares no sync identity (MEMORY_SYNC_SERVE_IDENTITY), so it serves no sync round",
+    memory_sync_leg_absent: "no memory sync leg runs here (a file memory engine with MEMORY_SYNC_URL)",
     outcome_ledger_unqueryable: "the outcome sink has no query face (File sink)",
     config_catalog_disabled: "the config catalog is switched off (CONFIG_CATALOG_ENABLED=false)",
     rule_store_absent: "no permission-rule store is wired",
@@ -113,6 +116,15 @@ export function mcpReconnect(d) {
         return owned;
     return yes({ runStore: runs.runStore, sessionStorage: owned.sessionStorage });
 }
+export function permissionModeWrite(d) {
+    const runs = durableRuns(d);
+    if (!runs.available)
+        return runs;
+    const park = checkpointPark(d);
+    if (!park.available)
+        return park;
+    return yes({ runStore: runs.runStore, checkpointStore: park.checkpointStore });
+}
 export function sessionAuditView(d) {
     return d.sessionAudit !== undefined ? yes({ sessionAudit: d.sessionAudit }) : no("session_audit_absent");
 }
@@ -277,6 +289,26 @@ export function sharedMemoryRead(d) {
         return no("org_memory_directory_absent");
     return yes({ provider: d.sharedMemoryStore, directory: d.orgMemoryDirectory });
 }
+export function memoryExport(d) {
+    return d.memoryExport !== undefined ? yes({ read: d.memoryExport }) : no("memory_db_plane_absent");
+}
+export function memorySyncServe(d) {
+    if (d.memorySync === undefined)
+        return no("memory_db_plane_absent");
+    const identity = d.config.memorySyncServeIdentity;
+    return identity !== undefined ? yes({ perform: d.memorySync, identity }) : no("memory_sync_identity_undeclared");
+}
+export function sessionMemorySync(d) {
+    if (d.memorySyncLeg === undefined)
+        return no("memory_sync_leg_absent");
+    const runs = durableRuns(d);
+    if (!runs.available)
+        return runs;
+    const owned = sessionOwnership(d);
+    if (!owned.available)
+        return owned;
+    return yes({ leg: d.memorySyncLeg, runStore: runs.runStore, sessionStorage: owned.sessionStorage });
+}
 export function principalInboxDelivery(d) {
     return d.orgDeliveryGate !== undefined ? yes({ gate: d.orgDeliveryGate }) : no("org_delivery_gate_absent");
 }

package/dist/card-void.d.ts

@@ -0,0 +1,38 @@
+/**
+ * **结算时作废一张本服务兑现不了的卡** —— 全仓「结算作废」的唯一动词:读卡 → 卡仍 pending ∧ 卡在调用方说的那只会话上 ⇒
+ * 按卡**自己的** scope 走 checkpoint 店的 `expire`(与引擎的本进程仲裁器、续跑的 resolve 同一只 CAS,恰一个赢家)。不新增任何持久态。
+ *
+ * 规则只有一条:**本服务兑现不了的卡不留在待决面上**。两个产地读这一只动词,各自只答「手里是哪一张卡、它该在哪只会话上」:
+ *  · 验证器自己的停驻(`verifier-pause-card.ts`):卡在验证器现铸的会话上,本服务的续跑链连不回它;
+ *  · 停驻没落定就以失败收场的腿(`runs.ts` 的 `voidHeldParkCard`:后台腿与续跑腿):卡在本 run 的会话上,但兑现它的那条 run 已经
+ *    `failed`、认领已放 —— 卡的命运先于认领释放(调用方先调本动词、再放认领)。
+ *
+ * 不抛:作废没做成(店读 / 作废抛错、卡的会话对不上、没接店)⇒ 卡回到「留在待决面上、由审批兜底收割收走」的形,按产地登记的 tag
+ * 响亮留痕(计数 + 探针行 + 一次 warn),结算照常往下走。卡已不 pending / 已不在 ⇒ 什么都不做(CAS 输给了别的结算者,结局相同)。
+ *
+ * ## 🚧 过渡(引擎动词到货即改调)
+ * 店级 `expire` 只作废卡,**不释放**引擎为这张卡钉住的会话(引擎在停驻时 pin 会话,只在续跑终局 / 续跑失败臂 unpin):
+ * 被作废的卡的会话在本副本内存里一直常驻到进程重启。引擎给出「作废停驻卡并释放其会话」的动词之后,本动词改调它(两个产地一字不改)。
+ */
+import type { CheckpointToken } from "@sema-agent/core";
+import { type FailOpenTag } from "./observability/fail-open.js";
+/** 结算点手里那只 checkpoint 店的两个动词:读卡(取它自己的 scope / 会话 / 状态)→ 按卡自己的 scope CAS 作废。 */
+export interface CardVoidPort {
+    get(token: CheckpointToken): Promise<{
+        readonly scope?: string;
+        readonly sessionId?: string;
+        readonly status?: string;
+    } | null>;
+    expire(token: CheckpointToken, scope: string): Promise<boolean>;
+}
+/** 要作废的那一张:停驻带回的凭据 + 它应在的会话(对不上就不动它 —— 只作废**这一张**)。 */
+export interface CardRef {
+    readonly token: CheckpointToken;
+    readonly sessionId: string | undefined;
+}
+/**
+ * 作废 `card`(见模块头注)。`tag` = 产地登记的 F 类 tag;`at` = 探针行上的产地现场(例 `leg=bg`),接在 `reason=` 之后;
+ * detail 形 `reason=<词>[ <at>][ err=<原句>]`,不含凭据。
+ */
+export declare function voidPendingCard(card: CardRef, cards: CardVoidPort | undefined, tag: FailOpenTag, at?: string): Promise<void>;
+//# sourceMappingURL=card-void.d.ts.map

package/dist/card-void.js

@@ -0,0 +1,23 @@
+import { errorText } from "./observability/err-text.js";
+import { recordFailOpen } from "./observability/fail-open.js";
+export async function voidPendingCard(card, cards, tag, at) {
+    const miss = (reason, err) => recordFailOpen(tag, `reason=${reason}${at === undefined ? "" : ` ${at}`}${err === undefined ? "" : ` err=${err}`}`);
+    if (cards === undefined) {
+        miss("no_checkpoint_store");
+        return;
+    }
+    try {
+        const live = await cards.get(card.token);
+        if (live === null || live.status !== "pending")
+            return;
+        if (card.sessionId === undefined || live.sessionId !== card.sessionId || typeof live.scope !== "string") {
+            miss("card_mismatch");
+            return;
+        }
+        await cards.expire(card.token, live.scope);
+    }
+    catch (e) {
+        miss("store_error", errorText(e));
+    }
+}
+//# sourceMappingURL=card-void.js.map