@sema-agent/server 7.142.0 → 7.143.0

package/dist/tool-approval.d.ts

@@ -1,5 +1,5 @@
 import type { ExecutionLane } from "./execution-lane-caps.js";
-import { type ApprovalDecidedBy, type HostSettledBy, type RetiredDecisionKeyFacts } from "./host-decision.js";
+import { type ApprovalDecider, type HostSettledBy, type HostSource, type RetiredDecisionKeyFacts } from "./host-decision.js";
 import type { IncomingMessage } from "node:http";
 import { type AskClass, type AskRequest, type AskOutcome, type PermissionResult, type CheckpointGate, type PendingAction, type PersistedRuleMandate, type ReadRootGrantCandidate, type RuleOffer, type AutoModeFallbackCause, type BoundGrantAbsence, type BoundSkillGrants, type ToolApprovalCard, type ReopenReason } from "@sema-agent/core";
 import { type CardRulePersisted, type RuleConsentLane } from "./rules-consent.js";
@@ -78,7 +78,7 @@ export type ToolApprovalReadBody = ({
 } & AskRowReadProjection);
 /**
  * 结算一张卡的**判决** —— 判别联合,逼每个调用点说清「这次等待是怎么结束的」:
- *  · `by:"human"` —— 一次**决议**到了(人答,或从问账行读回来的决议,含部署政策拒落成的 `DECIDED` 行,`hostSettledBy` 记它的来源词):`allowed` 说方向;审计 settle 行
+ *  · `by:"human"` —— 一次**决议**到了(人答,或从问账行读回来的决议,含部署政策拒落成的 `DECIDED` 行,`hostSource` 记它的来源词与机器座位):`allowed` 说方向;审计 settle 行
  *    `outcome` = `allowed` / `denied`,**没有 `cause`**;
  *  · `by:"system"` —— 这次等待**没有等到决议就结束了**(非人结局):必须点名一个 {@link SettleCause};审计 settle 行 `outcome:"expired"` + 该 `cause`。
  * 成因**只从事实读**(窗钟到 / 中止信号 / emit 零接收 / 腿作用域退出 / 兄弟被原子撤卡 / 有序关停锁存位 / 问账行的列),不从拒句散文判;
@@ -88,14 +88,14 @@ export type SettleVerdict = {
     readonly by: "human";
     readonly allowed: boolean;
     readonly updatedInput?: unknown;
-    /** 宿主自报来源(见 {@link HostSettledBy};缺席 = 人)。 */
-    readonly hostSettledBy?: HostSettledBy;
+    /** 宿主自报来源(`AskOutcome` 的 `settledBy` / `decidedVia` 一只值,见 {@link HostSource};缺席 = 人)。 */
+    readonly hostSource?: HostSource;
     readonly denyReason?: string;
     readonly readRootGrant?: string;
 } | {
     readonly by: "system";
     readonly cause: SettleCause;
-    readonly hostSettledBy?: HostSettledBy;
+    readonly hostSource?: HostSource;
 };
 /**
  * 🔴 [ref](案A)追记 F6 —— durable 回决口(`POST /v1/tasks/:taskId/asks/:askId/decision`)的 **200 体
@@ -139,10 +139,10 @@ export interface ParkedAskRedeemRequest {
     decision: "approve" | "deny";
     /** [ref] 同源的人写理由(deny 时 core 把它交给模型;allow 只进审计面)。 */
     note?: string;
-    /** [ref]:决定体的**出处位**(已过 `readDecidedBy` 的 wire 词,缺席已落成 `"person"`),经 `hostDecisionFacts` 落到停驻座的
+    /** [ref]:决定体的**出处位**(已过 `readDecider` 的 wire 词,缺席已落成 `"person"`),经 `hostDecisionFacts` 落到停驻座的
      *  `hostDecision.decidedBy`。live 命中臂与本 PARKED 臂读**同一格** —— 同一份体落在哪条臂上只取决于副本与时序;两臂各走自己座的
-     *  那一只映射(live = `liveSettledBy`,停驻 = 恒等),词表只有一份。 */
-    decidedBy: ApprovalDecidedBy;
+     *  那一只映射(live = `liveHostSource`,停驻 = 恒等),词表只有一份。 */
+    decider: ApprovalDecider;
     /** [ref] ctrl+g 编辑放行的实参整体替换(approve 才有意义)。 */
     updatedInput?: unknown;
     /** 发起本次 respond 的**已验证**调用方(live 腿 `gatedPrincipal` 的那一把)。席在赎回之前拿它与
@@ -362,7 +362,12 @@ export interface ToolApprovalFrame {
      *  [ref] MED-1 后不再是判别式,core JSDoc 钉明「不是子代判别键」)。值 = 子代的 core session id
      *  (与 task_progress.taskId / bg_notification.sessionId 同值域,可关联子代行)。旧壳(< fromSubagent
      *  接线)兜底按在场性渲染归属标仍然正确。 */
-    sourceTaskId?: string;
+    sourceSessionId?: string;
+    /** core 7.61.0:发起这一问的委派腿的 agent id(后台子代 = 注册表行 id `a…`;前台子代 = 它的会话 id)—— **在场即委派事实**(直接起跑的
+     *  workflow 的 agent 带它而不带 `fromSubagent`),宿主的问缺席。消费方按它把审批归到后台行(一个键相等)。 */
+    agentId?: string;
+    /** core 7.61.0:谁问的、为什么问(`readAskReasons` 窄读;卡与运维队列行同一只读口)。结构化审批面按它渲理由行,`message` 照旧逐字给只读文本的消费方。 */
+    askReasons?: readonly import("./approval-card.js").AskReasonProjection[];
     /** [ref] [ref]②:core 1.378 显式判别键——委派子代 gate 发起的 ask 恒带 `true`,受信 internals 事实
      *  (worker 不可自造/不可抑制)。取代 [ref] MED-1 的「在场 ∧ ≠ 宿主 sessionId」权宜判别式。 */
     fromSubagent?: true;
@@ -418,9 +423,10 @@ export interface ToolApprovalFrame {
      * 🔴 **真才带,缺席绝不编 `false`**(`governanceForced` / `requiresRealApproval` 同形)。缺席覆盖「不是强制」「老引擎」
      * 两形。**本仓从不自铸本键**:活卡帧(与 `livePending` 行顶层,T4①)只读 `AskRequest.mandated`;耐久面(运维队列行 / inbox 行)
      * 自 core 7.31.0 [ref] 起读 core 在 park 行上铸的孪生座(`PendingAction.tool_approval.mandated` / `CheckpointSummary.mandated`,
-     * [ref] 二段),同样只投 core 给的那一位 —— 自铸一个就是本仓成了这个事实的第二个源。⚠️ **`card_json` 卡面不带本键**
-     * (`ApprovalCardSchema` 没有这一位,`.strict()`)⇒ 断连重放的 `approval_request` 帧(`buildReplayFrame` 只回放卡)上它恒缺席,
-     * 消费方读队列行 / 活卡帧 / `livePending` 行(8D-6:此前这里写的「`card_json` 只读 `AskRequest.mandated`」是错句,T4② 车OC 改真)。
+     * [ref] 二段),同样只投 core 给的那一位 —— 自铸一个就是本仓成了这个事实的第二个源。⚠️ **`card_json` 的卡面不带本键**
+     * (`ApprovalCardSchema` 没有这一位,`.strict()`);7.143.0 起卡信封旁的活面事实座(`liveFacts`)存着呈卡帧上同一位(同一只帧对象挑出,不是自铸)
+     * ⇒ 断连重放的 `approval_request` 帧与活铸帧同值;本版之前铸的行没有那一座 ⇒ 重放帧带 `liveFactsUnknown`(8D-6:此前这里写的
+     * 「`card_json` 只读 `AskRequest.mandated`」是错句,T4② 车OC 改真)。
      * 🔴 **server 不判「是不是强制」**(判定属主在 core 的闸站),只**读**闸站盖好的这一位 —— 读者恰一个:
      * [ref] 起的会话级放行判据 {@link standingAnswerHome}(会话授权是**上一次**应答记下的站着的答案,
      * 不是对这一次调用的应答 ⇒ 强制卡上既不被既有 grant 代答、也不铸 grant)。上一段「一揽子 `onAsk:"allow"`
@@ -481,7 +487,7 @@ export interface ToolApprovalFrame {
      * `{ kind: "extension", name }`,卡上「扩展 X 想跑 …」那一行的出处。模型消息带来的调用上缺席。display 事实,不是裁决输入。
      * 读法与 `tool_start` / `tool_end` 上的同名键是同一只(`trace/extension-call-face.ts`:注册名过注册方文本的出口纪律,与 `wiring_manifest.mods[]` 的 `name`
      * 逐字节同;形不对 ⇒ 丢 + 计一次)。呈卡腿上它是 `approval_request` 顶层的卡外座之一(`APPROVAL_REQUEST_LIVE_FACT_KEYS`,同一只帧对象的值);
-     * ⚠️ `card_json` 卡面不带本键(卡的键集属主在契约包),断连重放帧上它恒缺席(与其余卡外座同)。
+     * ⚠️ `card_json` 卡面不带本键(卡的键集属主在契约包);7.143.0 起卡信封的活面事实座同存一份 ⇒ 断连重放帧与活铸帧同值(与其余卡外座同)。
      */
     requestedBy?: ExtensionRequesterFace;
     /**
@@ -540,9 +546,11 @@ export interface ToolApprovalFrame {
      * 把提议的根放回读边界又走了一遍才递出来,下游再判一遍就是同一事实的第二个判官(与 `origin` /
      * `denialLimitFallback` 两条顶注的同一条禁令)。
      *
-     * 🔴 **只此一面**:core 的负控逐字写着「the durable park row has no twin of this seat in this version」——
-     * 一只 PARKED 的根外读 ask 渲的仍是单独那张确认卡。所以 `card_json` / 耐久面**没有**这一座,本仓也不
-     * 自铸一个(自铸 = 同一事实的第二个源,而且那个源会在 park 兑现时说谎)。
+     * 🔴 **停驻面没有孪生**:core 的负控逐字写着「the durable park row has no twin of this seat in this version」——
+     * 一只 PARKED 的根外读 ask 渲的仍是单独那张确认卡。所以停驻行 / 运维队列行 / inbox 行**没有**这一座,本仓也不
+     * 自铸一个(自铸 = 同一事实的第二个源,而且那个源会在 park 兑现时说谎)。问行卡信封的活面事实座(7.143.0)不是自铸:
+     * 它是呈卡帧上这一格的同一份值、同一条写落下,只供同一只还在流上的问的重放帧读(断流续读 / 开流 preamble),
+     * 射程与卡上 `ruleOffers` 同一句(回授经重放帧自己的 `approvalId` 走活应答口)。
      */
     readRootCandidate?: ReadRootGrantCandidate;
     /**
@@ -689,7 +697,8 @@ export interface ToolApprovalFrame {
      *
      * 🔴 **在场才带**(缺席绝不编空串;缺席 ≠「没有原因」);窄读单点 = `approval-card.ts` 的 `readProbeReason`
      * (非串 / 空白 ⇒ 缺席;超信封 ⇒ **整只丢不截**;内容族 ⇒ 脱敏,与耐久面同一规则 ⇒ 对同一句话两面同值)。
-     * 🔴 **只在本帧上**:呈卡帧 / `card_json` 不携它(`ApprovalCardSchema` 是 `.strict()` 的耐久信封,加键要另行裁定)。
+     * 🔴 **不在卡上**:`ApprovalCardSchema`(`.strict()`)没有它;呈卡帧 `approval_request` 顶层带它(活面事实座),7.143.0 起卡信封的
+     * `liveFacts` 座同存一份 ⇒ 断连重放帧与活铸帧同值。
      * 🔴 **展示 / 分诊元数据,永不是裁决输入**;永不进 `message`(那是分类器 / 模型的输入面)。
      * `\p{Cf}` 展示重排类字符(方向 / 零宽标记):core 在这个座上**不剥**(同值契约下 core 自己披露的残余,[ref]);本仓脱敏器
      * (`redactSecrets`)入口剥全部 `\p{Cf}`(7.70.0 起),活卡帧与耐久面**都过它** ⇒ 两面同值、且都是剥后字节(`test/approval-probe-reason-wire.test.ts` 钉)。
@@ -767,23 +776,30 @@ export interface LivePendingRow {
     requiresRealApproval?: true;
     governanceForced?: true;
     /** T4①(八病审计 8D-5,车OC / 7.101.0):强制位([ref],`AskRequest.mandated`)—— 与上两位**同层同形**(真才带,缺席不编 false),
-     *  值 = 条目上那一位(`askBroadcast` 铸条目时取自这一次过闸的 `req.mandated`,与 {@link frame} 上的同名键同源)。此前只在
-     *  `frame` 里:同一个 `GET /v1/approvals` 响应的 durable `pending[]` 行顶层带它([ref] 二段),live 行却要进帧里读。 */
+     *  值 = 内嵌帧 {@link frame} 上的同名键(同一个值,不另读;7.143.0 起):活登记 = 这只问的活铸帧;接管登记 = 从问行卡信封回读的重放帧
+     *  (行上记着才在,存量行缺席并带 {@link liveFactsUnknown})。此前只在 `frame` 里:同一个 `GET /v1/approvals` 响应的 durable `pending[]` 行顶层
+     *  带它([ref] 二段),live 行却要进帧里读。 */
     mandated?: true;
     /** 7.116.0(审计修复批 S4):这张卡上的「本会话放行」不会被记住 —— 与 {@link ToolApprovalFrame.rememberRefused} 同名同义同源
      *  (同一只判据,读条目上的四位事实);真才带。 */
     rememberRefused?: true;
-    /** [ref](core 7.32.0 [ref]):强制位站在哪一个词上 —— 与 `mandated` 同层同形(在场逐字,缺席不编词),值 = 条目上那一个词
-     *  (与 {@link frame} 上同名键同源;帧型该键顶注是全文)。 */
+    /** [ref](core 7.32.0 [ref]):强制位站在哪一个词上 —— 与 `mandated` 同层同形(在场逐字,缺席不编词),值 = 内嵌帧 {@link frame} 上的同名键
+     *  (读法同 `mandated`;帧型该键顶注是全文)。 */
     mandate?: PersistedRuleMandate;
     /** [ref](cli [ref] / [ref]):ask 的**出身词**(谁提的这一问,core `ASK_ORIGINS` 闭集一词)—— 与 `mandate` 同层同形(在场逐字,
-     *  缺席不编词),值 = 条目上那一个词(铸条目那一次与 {@link frame} 上同名键**同一次**读定;帧型该键顶注是全文)。同一个
+     *  缺席不编词),值 = 内嵌帧 {@link frame} 上的同名键(读法同 `mandated`;帧型该键顶注是全文)。同一个
      *  `GET /v1/approvals` 响应里 durable `pending[]` 行的 `origin` 也在顶层(park 行孪生座),两族行同一种读法。 */
     origin?: string;
+    /**
+     * 7.143.0:**这一行的活面事实不在问行上** —— 与内嵌帧 {@link frame} 上的同名标记位同值(`ApprovalRequestFrame.liveFactsUnknown`,只读那一格)。
+     * 只有接管登记会带(行是本版之前铸的,卡信封上没有活面事实座;或那一座读不出):这时顶层的 `mandated` / `mandate` / `origin` 缺席的意思是「不知道」,
+     * 不是「不强制 / 没有出身」—— 消费方按不知道读(强制与否不知道 ⇒ 按强制)。活登记恒不带(活铸帧上恒有事实);只记真。
+     */
+    liveFactsUnknown?: true;
     /** 发起者为委派子代(originTaskId 在场)。 */
     fromSubagent?: true;
     /** [ref] C2(additive):委派子代的 **canonical taskId**。值域精确成文(codex R1-F3 问询后按 core dist
-     *  亲证):值 = `AskRequest.sourceTaskId` = 发起 task 的 sessionId(core prepare-task `askSourceIdentity`);
+     *  亲证):值 = `AskRequest.sourceSessionId` = 发起 task 的 sessionId(core prepare-task `askSourceIdentity`);
      *  而 core 的 canonical taskId = `spec.taskId ?? sessionId`(runtask.js `runSourceTaskId`),Runner 铸的
      *  委派子代 spec **不带** taskId ⇒ 子代 canonical taskId ≡ 子代 sessionId ≡ 本键 ≡
      *  `task_progress.taskId`(同一 `runSourceTaskId` 铸)—— 关联 join 在本键存在的唯一面(`fromSubagent`
@@ -878,7 +894,7 @@ interface ToolApprovalRunContextBase {
     abortSignal?: AbortSignal;
     /** [ref]([ref] §3.1 askId 派生的腿轴;车3 刀 3a 换轴:原 `leg?: number` → `legKey?: string`)。
      *  = `sha256(resume checkpoint token)` 的 hex,**首腿缺席折空串**(空串是首腿的真值,不是「未知」)。
-     *  与 `ToolApprovalRunContext.taskId`(= 派生里的 `runId` 轴)一起,使同一 `(sourceTaskId, toolCallId)`
+     *  与 `ToolApprovalRunContext.taskId`(= 派生里的 `runId` 轴)一起,使同一 `(sourceSessionId, toolCallId)`
      *  在不同 run / 不同 resume 腿下铸出不同持久行(不会被上一腿或上一 run 已终结的行绊住)。
      *  换轴动机与残留边界见 `approval-ask-machine.ts` 的 `deriveAskId` 头注。
      *  真值由装配点(刀 3b)供给,本刀只立形 + 折空串兜底。 */
@@ -981,7 +997,7 @@ type ParsedToolApproval = {
     updatedInput?: unknown;
     persistRule?: ParsedPersistRule;
     note?: string;
-    decidedBy: ApprovalDecidedBy;
+    decider: ApprovalDecider;
     readRootGrant?: string;
 };
 /**
@@ -1274,7 +1290,7 @@ export declare function approvalPreambleReplays(input: Omit<ApprovalLegInput, "n
  *  从定义上不是「投递面拿走了它」)。{@link ToolApprovalCoordinator.notifyExternalDecision} 收的就是它。 */
 export type DecidedAskOutcome = Exclude<AskOutcome, "unavailable">;
 /** 铸点的入参形 = 行上与**这条决议本身**有关的三格。整行(`AskRow`)与 claim 败方读数都满足。 */
-type DecidedRowFacts = Pick<AskRow, "decision" | "settledBy"> & {
+type DecidedRowFacts = Pick<AskRow, "decision" | "settledBy" | "decidedVia"> & {
     updatedInput?: unknown;
 };
 /**
@@ -1326,11 +1342,11 @@ export declare class ToolApprovalCoordinator {
     /** [ref] 车2(codex 交叉复审 round3 抓获真 finding,round5 精化成 Set):次级索引,键 = 持久层 askId
      *  (与 {@link pending} 的 wire-面 uuidv7 `id` 是两条独立的身份轴,顶注同精神)——只在 askStore 在场且
      *  这只 ask 真有 askId 时才登记。**同一 askId 下可能同时挂着不止一条本地条目**(round5 抓获:
-     *  `ensureAsk` 是幂等 upsert,若 core 对同一 (sourceTaskId,runId,toolCallId,legKey) 真发起过两次并发调用——如
+     *  `ensureAsk` 是幂等 upsert,若 core 对同一 (sourceSessionId,runId,toolCallId,legKey) 真发起过两次并发调用——如
      *  重试/failover 场景,round4 finding2 的顶注同源——两次 `askBroadcast` 各自的调用栈都会在行仍是
      *  STREAM_PENDING 时各自注册一条独立的本地 pending 条目,值形若是单值 Map 会被后到者覆盖前者的登记,
      *  前者从此再也没有任何本地事件会驱动它 settle),故值形是 `Set`,不是单个 `PendingApproval`。
-     *  存在理由(两类真实成因共用同一套修复):①同一批(相同 sourceTaskId+leg)下若有多只**不同** ask 并发
+     *  存在理由(两类真实成因共用同一套修复):①同一批(相同 sourceSessionId+leg)下若有多只**不同** ask 并发
      *  在飞(不同 toolCallId,同一 batchId),`expireAsk` 赢家的同一次持久事务会把批内其余 STREAM_PENDING
      *  兄弟原子撤成 VOID 并把它们的 askId 列在 `voidedSiblings` 里;②同一 askId 的**重复本地注册**(见上)。
      *  两类情形下,那些"没赢"的本地条目各自独立的 timer/settle 闭包都对"这只 askId 其实已经有了终局"一无
@@ -2241,8 +2257,8 @@ export declare class ToolApprovalCoordinator {
     adoptOpenAsks(): Promise<OpenAskAdoption>;
     /**
      * [ref]:由一条待决行铸一条接管登记并放进活集合(唯一铸点;读法见 {@link AdoptedRegistrationPart})。事实全部取自行与行上的卡:属主 / 会话(adhoc 替身
-     * = taskId 时不投,与按问读口的行投影同读)/ 子代出身(卡 `fromSubagent` ⇒ 行 `sourceTaskId`)/ 窗死线 / 铸造时刻取行;工具名、要人位、治理位、类集取卡;
-     * 授予绑定卡上没有 ⇒ `unreadable`(于是站着的答案判据答 `none`:`rememberRefused`,`allow_session` 只放行这一次 —— 既有律);规则素材不在 ⇒ `persistRule`
+     * = taskId 时不投,与按问读口的行投影同读)/ 子代出身(卡 `fromSubagent` ⇒ 行 `sourceSessionId`)/ 窗死线 / 铸造时刻取行;工具名、要人位、治理位、类集取卡;
+     * 强制位 / 强制词 / 出身词取重放帧顶层(= 信封事实座,7.143.0;存量行缺席);授予绑定按 `unreadable` 读(于是站着的答案判据答 `none`:`rememberRefused`,`allow_session` 只放行这一次 —— 既有律);规则素材不在 ⇒ `persistRule`
      * 答 `rule_lane_unavailable`(晚答腿同一个词)。卡面的 `rememberRefused` 与条目同一只判据(活登记那一处的同一条纪律)。
      */
     private registerAdopted;
@@ -2262,11 +2278,13 @@ export declare class ToolApprovalCoordinator {
      * [ref]:某只委派子代此刻有没有**待决**的活卡 —— fleet 对账腿「子代活性由属主说了算」的属主②读口(另一只是
      * bg registry 账)。子代卡在一张没人答的卡上时当然不出帧,只看「静默」就会把它当孤儿扫下面板(报案的真形)。
      * 只答是非、不交出 Map(与 `isRunLiveOnThisReplica` 同姿势);纯读,零锁零结算语义。
-     * 键 = ask 发起者域(`originTaskId` = core `AskRequest.sourceTaskId` = 子代自己的 core session id),**不是**
-     * fleet 行 id —— 换算在 `FleetEventBus.childOwnerKeys`。只看本副本的内存登记:子代跑在本副本,它的活卡就登记在
-     * 本副本;耐久 park 的卡由 bg registry 的 `parked` 态作保(见 fleet-reconciler.ts `bgAgentVouches`)。
+     * 入参 = 一条腿的名字(fleet 行 → 名字的换算在 `FleetEventBus.childOwnerKeys`);活卡帧上带着发起腿的名字:`agentId`(core 7.61.0:
+     * 委派腿的腿 task id —— 后台子代 = 它的注册表行 id;前台子代 = 它的会话 id;workflow agent = 脚本声明的 task id,否则会话 id;在场即委派事实,
+     * 直接起跑的 workflow 的 agent 带它而不带 `fromSubagent`;宿主的问缺席),委派子代的问另带发起会话 `sourceSessionId`(帧上只出委派子代的问)。
+     * 任一个落在入参里 ⇒ 这一问是那条腿的。只看本副本的内存登记:子代跑在本副本,它的活卡就登记在本副本;耐久 park 的卡由 bg registry 的
+     * `parked` 态作保(见 fleet-reconciler.ts `bgAgentVouches`)。
      */
-    hasLivePendingFrom(originTaskId: string): boolean;
+    hasLivePendingFromLeg(names: readonly string[]): boolean;
     /**
      * 🔴 [ref](案A)追记 F4 —— **跨副本决议的执行通知**(悬挂行的一次终态轮询)。
      *

package/dist/tool-approval.js

@@ -1,5 +1,5 @@
 import { readApprovalCard } from "./approval-content-kind.js";
-import { heldAskOf, liveSettledBy, readDecidedBy, retiredDecisionKeyFacts, DECIDED_BY_OUTSIDE_CLOSED_SET, POLICY_CANNOT_ALLOW_PERSON_ASK } from "./host-decision.js";
+import { heldAskOf, liveHostSource, readDecider, retiredDecisionKeyFacts, POLICY_CANNOT_ALLOW_PERSON_ASK } from "./host-decision.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { uuidv7, classifyAsk, foldArbitrationRow, policyCannotAnswer, screenAskClassMembers, MAX_RULE_TEXT_CHARS, READ_ROOT_CANDIDATE_DIR_MAX, parseRuleText, pathConfinableWriteToolNames } from "@sema-agent/core";
 import { precheckCardRuleText } from "./rules-consent.js";
@@ -12,14 +12,14 @@ import { createLogger } from "./observability/logger.js";
 import { errorKindOf } from "./observability/err-text.js";
 import { recordFailOpen } from "./observability/fail-open.js";
 import { ownerOfCheckpointScope } from "./security.js";
-import { deriveAskId, deriveAskScopedBatchId, deriveBatchId, MAX_DECISION_NOTE_CHARS, noteLandedOnRow, noteRecordedReceipt } from "./approval-ask-machine.js";
-import { currentParkArm, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildReplayFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readProbeReason, readReadRootCandidate, readStoredCardEnvelope, readRuleEvidence, readAllowRuleShadowed, readRuleOffersAbsence, readRuleOffersAbsenceSeat, readParkRowTrueSeat, readAskClassPair, readClosedWordSeat, buildApprovalCompleteFrame, readRuleOfferList, } from "./approval-card.js";
+import { deriveAskId, deriveAskScopedBatchId, deriveBatchId, MAX_DECISION_NOTE_CHARS, noteLandedOnRow, noteRecordedReceipt, readBoundInputHash } from "./approval-ask-machine.js";
+import { currentParkArm, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, adoptStoredLiveFacts, buildApprovalRequestFrame, buildReplayFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readProbeReason, readReadRootCandidate, readStoredCardEnvelope, readRuleEvidence, readAllowRuleShadowed, readRuleOffersAbsence, readRuleOffersAbsenceSeat, readParkRowTrueSeat, readAskClassPair, readAskReasons, readClosedWordSeat, buildApprovalCompleteFrame, readRuleOfferList, } from "./approval-card.js";
 import { askOwnerAdmits, askRowCarriesOwner, POLICY_REFUSAL_DECISION, projectAskTerminalClaimTruth } from "./plugins/approval-ask-store-sql.js";
 import { APPROVAL_ENDING_CAUSES, SETTLE_OUTCOME, askRowEndingCause, askRowParkTrigger } from "./approval-deny-reasons.js";
 import { settleByPolicy } from "./approval-policy-settlement.js";
 import { governanceAskMarksFor, runWithGovernanceAskScope } from "./governance-ask-marks.js";
 import { governanceOriginOf } from "./runtime-governance.js";
-import { grantBindingOf } from "./standing-answer-grant.js";
+import { agreedGrantBinding, grantBindingOf } from "./standing-answer-grant.js";
 import { operatorAsk } from "./operator-ask.js";
 import { APPROVAL_EXEMPTED_EVENT } from "./plugins/approval-exemption-store.js";
 import { refusalBody } from "./http/refusal-body.js";
@@ -47,7 +47,7 @@ export function approvalDecidePath(sessionId) {
     return `/v1/approvals/${encodeURIComponent(sessionId)}/decide`;
 }
 function parkSessionOf(row) {
-    return row.sourceTaskId === row.sessionId && row.sessionId !== row.taskId ? row.sessionId : undefined;
+    return row.sourceSessionId === row.sessionId && row.sessionId !== row.taskId ? row.sessionId : undefined;
 }
 function ruleMaterialCarriesCredentialShape(command) {
     return redactSecretsWithArms(command, { observe: false }).arms.has("full");
@@ -223,10 +223,11 @@ function livePendingRowOf(e) {
         ...(e.sessionId !== undefined ? { sessionId: e.sessionId } : {}),
         ...(e.requiresRealApproval ? { requiresRealApproval: true } : {}),
         ...(e.governanceForced ? { governanceForced: true } : {}),
-        ...(e.mandated ? { mandated: true } : {}),
+        ...(listFrame.mandated === true ? { mandated: true } : {}),
         ...(standingAnswerHome(pendingEntryStandingAnswerFacts(e)) === "none" ? { rememberRefused: true } : {}),
-        ...(e.mandate !== undefined ? { mandate: e.mandate } : {}),
-        ...(e.origin !== undefined ? { origin: e.origin } : {}),
+        ...(listFrame.mandate !== undefined ? { mandate: listFrame.mandate } : {}),
+        ...(listFrame.origin !== undefined ? { origin: listFrame.origin } : {}),
+        ...(listFrame.type === "approval_request" && listFrame.liveFactsUnknown === true ? { liveFactsUnknown: true } : {}),
         ...(e.originTaskId !== undefined ? { fromSubagent: true, originTaskId: e.originTaskId } : {}),
         ...(approvalCard !== undefined ? { approvalCard } : {}),
         frame: listFrame,
@@ -294,17 +295,17 @@ function parseToolApprovalFields(body, retired) {
         }
         if (retired !== undefined)
             return { ok: false, error: retired.error };
-        const decidedByReading = readDecidedBy(body.decidedBy, false);
-        let decidedBy;
-        switch (decidedByReading.kind) {
+        const deciderReading = readDecider(body, false);
+        let decider;
+        switch (deciderReading.kind) {
             case "outside_closed_set":
-                return { ok: false, error: DECIDED_BY_OUTSIDE_CLOSED_SET };
+                return { ok: false, error: deciderReading.message };
             case "accepted":
-                decidedBy = decidedByReading.decidedBy;
+                decider = deciderReading.decider;
                 break;
             default: {
-                const unreachable = decidedByReading;
-                throw new Error(`unhandled decidedBy reading: ${JSON.stringify(unreachable)}`);
+                const unreachable = deciderReading;
+                throw new Error(`unhandled decider reading: ${JSON.stringify(unreachable)}`);
             }
         }
         const rawGrant = body.readRootGrant;
@@ -319,7 +320,7 @@ function parseToolApprovalFields(body, retired) {
             ...(d !== "deny" && u !== undefined ? { updatedInput: u } : {}),
             ...(persistRule !== undefined ? { persistRule } : {}),
             ...(note !== undefined ? { note } : {}),
-            decidedBy,
+            decider,
             ...(readRootGrant !== undefined ? { readRootGrant } : {}),
         };
     }
@@ -357,12 +358,6 @@ function boundArgs(args) {
     }
     return { args: redacted, omitted: false, hasBidi };
 }
-function readBoundInputHash(req) {
-    if (req === null || typeof req !== "object")
-        return null;
-    const v = Reflect.get(req, "boundInputHash");
-    return typeof v === "string" && v.length > 0 ? v : null;
-}
 export function resolveStreamApprovalGate(input) {
     if (!input.toolApprovalEnabled)
         return { active: false, reason: "no_tool_approval" };
@@ -492,7 +487,7 @@ function replayTerminalAskRow(row) {
 }
 export function outcomeOfDecidedRow(row) {
     const allow = row.decision === "approve";
-    const source = row.settledBy !== null ? { settledBy: row.settledBy } : {};
+    const source = row.settledBy !== null ? { settledBy: row.settledBy, ...(row.decidedVia !== null ? { decidedVia: row.decidedVia } : {}) } : {};
     const edit = allow && row.updatedInput !== undefined ? { updatedInput: row.updatedInput } : {};
     return row.settledBy === null && !("updatedInput" in edit) ? allow : { allow, ...edit, ...source };
 }
@@ -502,7 +497,7 @@ function settleArgsOfDecided(outcome) {
     return {
         allowed: outcome.allow,
         ...(outcome.updatedInput !== undefined ? { updatedInput: outcome.updatedInput } : {}),
-        ...(outcome.settledBy !== undefined ? { settledBy: outcome.settledBy } : {}),
+        ...(outcome.settledBy !== undefined ? { source: { settledBy: outcome.settledBy, ...(outcome.decidedVia !== undefined ? { decidedVia: outcome.decidedVia } : {}) } } : {}),
     };
 }
 function verdictOfDecided(args) {
@@ -510,7 +505,7 @@ function verdictOfDecided(args) {
         by: "human",
         allowed: args.allowed,
         ...(args.updatedInput !== undefined ? { updatedInput: args.updatedInput } : {}),
-        ...(args.settledBy !== undefined ? { hostSettledBy: args.settledBy } : {}),
+        ...(args.source !== undefined ? { hostSource: args.source } : {}),
     };
 }
 function settleArgsOf(outcome) {
@@ -633,8 +628,8 @@ export class ToolApprovalCoordinator {
     get unattendedRoutesToPark() {
         return this.unattendedPolicy !== "deny";
     }
-    batchIdFor(askId, sourceTaskId, runId, legKey) {
-        return this.unattendedRoutesToPark ? deriveBatchId(sourceTaskId, runId, legKey) : deriveAskScopedBatchId(askId);
+    batchIdFor(askId, sourceSessionId, runId, legKey) {
+        return this.unattendedRoutesToPark ? deriveBatchId(sourceSessionId, runId, legKey) : deriveAskScopedBatchId(askId);
     }
     unattendedAskOutcome(site) {
         const facts = {
@@ -1024,7 +1019,7 @@ export class ToolApprovalCoordinator {
     async sessionGrantUncontestedByRow(origin, req) {
         if (!this.askStore)
             return true;
-        const call = { taskId: origin.taskId, legKey: origin.legKey, toolCallId: req.toolCallId, sourceTaskId: req.sourceTaskId ?? origin.taskId };
+        const call = { taskId: origin.taskId, legKey: origin.legKey, toolCallId: req.toolCallId, sourceSessionId: req.sourceSessionId ?? origin.taskId };
         try {
             const rows = await this.withStoreDeadline(this.askStore.listByCall(call), "listByCall(session-grant-provenance)", DURABLE_CONVERGE_READ_TIMEOUT_MS);
             return rows.length === 0;
@@ -1330,6 +1325,7 @@ export class ToolApprovalCoordinator {
         const cardWord = readApprovalCard(req.approvalCard);
         const originWord = typeof req.origin === "string" && req.origin.length > 0 ? req.origin : undefined;
         const askClassPair = readAskClassPair(req);
+        const askReasonsOfReq = readAskReasons(req);
         const requester = extensionRequesterOf(req.requestedBy, "tool_approval");
         const frame = {
             type: "tool_approval",
@@ -1338,7 +1334,7 @@ export class ToolApprovalCoordinator {
             ...(typeof req.toolCallId === "string" && req.toolCallId !== "" ? { toolCallId: req.toolCallId } : {}),
             ...(child
                 ? {
-                    sourceTaskId: req.sourceTaskId,
+                    sourceSessionId: req.sourceSessionId,
                     fromSubagent: true,
                     ...(typeof req.sourceAgentName === "string" ? { sourceAgentName: redactSecrets(req.sourceAgentName) } : {}),
                     ...(req.delegation
@@ -1352,7 +1348,9 @@ export class ToolApprovalCoordinator {
                         : {}),
                 }
                 : {}),
+            ...(typeof req.agentId === "string" && req.agentId !== "" ? { agentId: req.agentId } : {}),
             message: typeof req.message === "string" ? redactDeep(req.message) : "",
+            ...(askReasonsOfReq !== undefined ? { askReasons: askReasonsOfReq } : {}),
             ...(governanceForced ? { governanceForced: true } : {}),
             ...(req.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
             ...(req.mandated === true ? { mandated: true } : {}),
@@ -1384,6 +1382,7 @@ export class ToolApprovalCoordinator {
         const card = this.askStore ? buildApprovalCard(frame, req, req.requiresRealApproval === true) : undefined;
         let cardForFrame = card;
         let persistedExpiresAtMs = expiresAtMs;
+        let factsOfRecord;
         let entryExecutionLane = origin.executionLane;
         let lateEnsuredRow;
         let lateTerminalRow;
@@ -1412,16 +1411,16 @@ export class ToolApprovalCoordinator {
                 : replayed;
         };
         if (this.askStore && card) {
-            const sourceTaskId = req.sourceTaskId ?? origin.taskId;
+            const sourceSessionId = req.sourceSessionId ?? origin.taskId;
             const runId = origin.taskId;
             const legKey = origin.legKey;
-            askId = deriveAskId(sourceTaskId, runId, legKey, req);
-            batchId = this.batchIdFor(askId, sourceTaskId, runId, legKey);
+            askId = deriveAskId(sourceSessionId, runId, legKey, req);
+            batchId = this.batchIdFor(askId, sourceSessionId, runId, legKey);
             try {
                 const existingOrCreated = await this.withStoreDeadline(this.askStore.ensureAsk({
                     askId,
                     taskId: origin.taskId,
-                    sourceTaskId,
+                    sourceSessionId,
                     sessionId: origin.sessionId ?? origin.taskId,
                     owner: origin.owner,
                     executionLane: origin.executionLane,
@@ -1429,7 +1428,7 @@ export class ToolApprovalCoordinator {
                     toolCallId: req.toolCallId,
                     legKey,
                     parentToolCallId: req.delegation?.parentToolCallId ?? null,
-                    cardJson: buildApprovalCardEnvelope(askId, card),
+                    cardJson: buildApprovalCardEnvelope(askId, card, frame),
                     boundInputHash: readBoundInputHash(req),
                     ...durableRuleMaterial(ruleLaneMaterial),
                     schemaVersion: 1,
@@ -1463,6 +1462,9 @@ export class ToolApprovalCoordinator {
                 persistedExpiresAtMs = existingOrCreated.row.expiresAtMs;
                 entryExecutionLane = existingOrCreated.row.executionLane;
                 cardForFrame = persistedEnvelope.card;
+                factsOfRecord = existingOrCreated.inserted ? undefined : persistedEnvelope.liveFacts;
+                if (factsOfRecord !== undefined)
+                    adoptStoredLiveFacts(frame, factsOfRecord);
                 if (cardForFrame.governanceForced === true)
                     frame.governanceForced = true;
                 else
@@ -1560,7 +1562,7 @@ export class ToolApprovalCoordinator {
             if (hostSettled !== undefined || (denyReasonSettled !== undefined && denyReasonSettled !== "")) {
                 return {
                     allow: false,
-                    ...(hostSettled !== undefined ? { settledBy: hostSettled } : {}),
+                    ...hostSettled,
                     ...(denyReasonSettled !== undefined && denyReasonSettled !== "" ? { reason: denyReasonSettled } : {}),
                 };
             }
@@ -1577,7 +1579,7 @@ export class ToolApprovalCoordinator {
                 return {
                     allow: true,
                     ...(settled.updatedInput !== undefined ? { updatedInput: settled.updatedInput } : {}),
-                    ...(hostSettled !== undefined ? { settledBy: hostSettled } : {}),
+                    ...hostSettled,
                     ...(settled.readRootGrant !== undefined ? { readRootGrant: settled.readRootGrant } : {}),
                 };
             }
@@ -1589,10 +1591,10 @@ export class ToolApprovalCoordinator {
             done = true;
             const allowed = verdict.by === "human" && verdict.allowed;
             const outcome = verdict.by === "system" ? SETTLE_OUTCOME.EXPIRED : verdict.allowed ? SETTLE_OUTCOME.ALLOWED : SETTLE_OUTCOME.DENIED;
-            const hostSettledBy = verdict.hostSettledBy;
+            const hostSource = verdict.hostSource;
             const updatedInput = verdict.by === "human" ? verdict.updatedInput : undefined;
             const readRootGrant = verdict.by === "human" ? verdict.readRootGrant : undefined;
-            hostSettled = hostSettledBy;
+            hostSettled = hostSource;
             denyReasonSettled = verdict.by === "human" && !verdict.allowed ? verdict.denyReason : undefined;
             if (timer)
                 clearTimeout(timer);
@@ -1626,7 +1628,7 @@ export class ToolApprovalCoordinator {
                 const common = {
                     approvalId: wireApprovalId,
                     ...(windowRouteUnavailable ? { parkRouted: true } : {}),
-                    ...(hostSettledBy !== undefined ? { settledBy: hostSettledBy } : {}),
+                    ...(hostSource !== undefined ? { settledBy: hostSource.settledBy } : {}),
                     settledAtMs: Date.now(),
                 };
                 return verdict.by === "system"
@@ -1638,7 +1640,7 @@ export class ToolApprovalCoordinator {
                     approvalId: wireApprovalId,
                     taskId: origin.taskId,
                     carrierLeg,
-                    executingSessionId: req.sourceTaskId,
+                    executingSessionId: req.sourceSessionId,
                     toolCallId: req.toolCallId,
                     settleRecord,
                 });
@@ -1792,7 +1794,7 @@ export class ToolApprovalCoordinator {
             if (done)
                 return;
             windowRouteUnavailable = true;
-            settle({ by: "system", cause, ...(hostSettledBy !== undefined ? { hostSettledBy } : {}) });
+            settle({ by: "system", cause, ...(hostSettledBy !== undefined ? { hostSource: { settledBy: hostSettledBy } } : {}) });
         };
         const windowExpired = (hostSelfReport, cause) => {
             void (async () => {
@@ -1901,11 +1903,13 @@ export class ToolApprovalCoordinator {
         }
         const entryClasses = askClassPair?.classes;
         const entryDeploymentListQuestion = carriesDeploymentListQuestion(deploymentListAsks, entryClasses);
-        const entryGrantBinding = grantBindingOf(req);
+        const legGrantBinding = grantBindingOf(req);
+        const entryGrantBinding = factsOfRecord === undefined ? legGrantBinding : agreedGrantBinding(legGrantBinding, grantBindingOf(factsOfRecord));
+        const entryMandated = req.mandated === true || factsOfRecord?.mandated === true;
         const rememberRefused = standingAnswerHome(pendingEntryStandingAnswerFacts({
             ...(effectiveGovernanceForced ? { governanceForced: true } : {}),
             ...(req.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
-            ...(req.mandated === true ? { mandated: true } : {}),
+            ...(entryMandated ? { mandated: true } : {}),
             grantBinding: entryGrantBinding,
             classes: entryClasses,
             ...(entryDeploymentListQuestion ? { deploymentListQuestion: true } : {}),
@@ -1928,7 +1932,7 @@ export class ToolApprovalCoordinator {
             owner: origin.owner,
             ...(primary ? { ctxTaskId: primary.taskId, originCtx: primary } : {}),
             ...(reachability === "unreached" ? { suspended: true } : {}),
-            ...(child ? { originTaskId: req.sourceTaskId } : primary ? { targetCtxs: new Set(aliveCtxs), onTargetGone } : {}),
+            ...(child ? { originTaskId: req.sourceSessionId } : primary ? { targetCtxs: new Set(aliveCtxs), onTargetGone } : {}),
             ...(origin.sessionId ? { sessionId: origin.sessionId } : {}),
             frame,
             ...(cardFrame !== undefined ? { cardFrame } : {}),
@@ -1944,9 +1948,7 @@ export class ToolApprovalCoordinator {
             ...(ruleLaneMaterial !== undefined ? { ruleLane: ruleLaneMaterial } : {}),
             ...(effectiveGovernanceForced ? { governanceForced: true } : {}),
             ...(req.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
-            ...(req.mandated === true ? { mandated: true } : {}),
-            ...(mandateWord !== undefined ? { mandate: mandateWord } : {}),
-            ...(originWord !== undefined ? { origin: originWord } : {}),
+            ...(entryMandated ? { mandated: true } : {}),
             ...(askId !== undefined && batchId !== undefined ? { askId, batchId } : {}),
         };
         selfEntry = pendingEntry;
@@ -1963,7 +1965,7 @@ export class ToolApprovalCoordinator {
         this.askAudit?.recordAsk({
             approvalId: wireApprovalId,
             taskId: origin.taskId,
-            ...(req.sourceTaskId !== undefined ? { sourceTaskId: req.sourceTaskId } : {}),
+            ...(req.sourceSessionId !== undefined ? { sourceSessionId: req.sourceSessionId } : {}),
             ...(origin.sessionId !== undefined ? { sessionId: origin.sessionId } : {}),
             owner: origin.owner,
             toolName: req.toolName,
@@ -2123,7 +2125,7 @@ export class ToolApprovalCoordinator {
         const preRule = this.precheckEditedRuleBeforeDecision(entry, judgedOwner, parsed);
         if (preRule !== undefined)
             return preRule;
-        if (parsed.value !== "deny" && policyCannotAnswer(heldAskOf(entry.requiresRealApproval === true), parsed.decidedBy)) {
+        if (parsed.value !== "deny" && policyCannotAnswer(heldAskOf(entry.requiresRealApproval === true), parsed.decider.decidedBy)) {
             return { status: 400, body: refusalBody({ errorCode: "request.body_shape", message: POLICY_CANNOT_ALLOW_PERSON_ASK }) };
         }
         const ruleEligibility = { eligible: true };
@@ -2486,7 +2488,7 @@ export class ToolApprovalCoordinator {
                     gateBoundInputHash: row.gateBoundInputHash,
                     decision,
                     ...(parsed.note !== undefined ? { note: parsed.note } : {}),
-                    decidedBy: parsed.decidedBy,
+                    decider: parsed.decider,
                     ...(parsed.updatedInput !== undefined && parsed.value !== "deny" ? { updatedInput: parsed.updatedInput } : {}),
                     ...(principal !== undefined ? { principal } : {}),
                     ...(httpReq !== undefined ? { httpReq } : {}),
@@ -2729,7 +2731,7 @@ export class ToolApprovalCoordinator {
                 decision: parsed.value === "deny" ? "deny" : "approve",
                 ...(parsed.note !== undefined ? { decisionNote: parsed.note } : {}),
                 ...(parsed.value !== "deny" && parsed.updatedInput !== undefined ? { updatedInput: parsed.updatedInput } : {}),
-                ...((sb) => (sb !== undefined ? { settledBy: sb } : {}))(liveSettledBy(parsed.decidedBy)),
+                ...liveHostSource(parsed.decider),
             }), "decideAsk", DURABLE_CALL_TIMEOUT_MS, (late) => {
                 if (late.ok)
                     this.notifyExternalDecision(askId, outcomeOfDecidedRow(late.row));
@@ -2809,13 +2811,13 @@ export class ToolApprovalCoordinator {
             this.allowAllSessions.add(sessionAllowKey(judgedOwner, entry.sessionId, sessionAllowCategory(entry.toolName), entry.grantBinding));
         }
         const allowed = parsed.value !== "deny";
-        const settleArgs = opts?.settleOutcome !== undefined ? settleArgsOfDecided(opts.settleOutcome) : { allowed, updatedInput: parsed.updatedInput, settledBy: liveSettledBy(parsed.decidedBy) };
+        const settleArgs = opts?.settleOutcome !== undefined ? settleArgsOfDecided(opts.settleOutcome) : { allowed, updatedInput: parsed.updatedInput, source: liveHostSource(parsed.decider) };
         const readRootGrant = opts?.settleOutcome === undefined || opts.settleOutcomeIsThisRequest === true ? parsed.readRootGrant : undefined;
         entry.settle({
             by: "human",
             allowed: settleArgs.allowed,
             updatedInput: settleArgs.updatedInput,
-            ...(settleArgs.settledBy !== undefined ? { hostSettledBy: settleArgs.settledBy } : {}),
+            ...(settleArgs.source !== undefined ? { hostSource: settleArgs.source } : {}),
             ...(!settleArgs.allowed && parsed.note !== undefined ? { denyReason: parsed.note } : {}),
             ...(readRootGrant !== undefined ? { readRootGrant } : {}),
         });
@@ -2871,6 +2873,7 @@ export class ToolApprovalCoordinator {
         const facts = {
             ...(card.governanceForced === true ? { governanceForced: true } : {}),
             ...(card.risk.requiresRealApproval ? { requiresRealApproval: true } : {}),
+            ...(replayFrame.mandated === true ? { mandated: true } : {}),
             grantBinding: { kind: "unreadable" },
             ...(card.classes !== undefined ? { classes: card.classes } : {}),
         };
@@ -2905,7 +2908,7 @@ export class ToolApprovalCoordinator {
             owner: row.owner,
             executionLane: row.executionLane,
             ...(row.sessionId !== row.taskId ? { sessionId: row.sessionId } : {}),
-            ...(card.fromSubagent === true ? { originTaskId: row.sourceTaskId } : {}),
+            ...(card.fromSubagent === true ? { originTaskId: row.sourceSessionId } : {}),
             toolName: card.toolName,
             ...facts,
             approvalId: row.askId,
@@ -2962,10 +2965,16 @@ export class ToolApprovalCoordinator {
         }
         return rows;
     }
-    hasLivePendingFrom(originTaskId) {
-        for (const e of this.pending.values())
-            if (e.originTaskId === originTaskId && e.adopted !== true)
+    hasLivePendingFromLeg(names) {
+        if (names.length === 0)
+            return false;
+        for (const e of this.pending.values()) {
+            if (e.adopted === true)
+                continue;
+            const { agentId, sourceSessionId } = e.frame;
+            if ((agentId !== undefined && names.includes(agentId)) || (sourceSessionId !== undefined && names.includes(sourceSessionId)))
                 return true;
+        }
         return false;
     }
     async pollSuspendedDecisions() {