@sema-agent/server 7.144.0 → 7.146.0

package/dist/{plugins → stores-sql}/checkpoint-store-sql.js

@@ -1,23 +1,18 @@
 import { parkedApprovalCard } from "../approval-content-kind.js";
 import { createHash } from "node:crypto";
-import { CHECKPOINT_FACET_SQL, CHECKPOINT_SWEEP_ORDER_SQL, CheckpointIndexRefusedError, judgeCheckpointIndexCells } from "./checkpoint-index-columns.js";
-import { CheckpointError, isGateKind, MAX_RULE_TEXT_CHARS, validatePendingSteer, appendPendingSteer, winnerFromOutcome, summarizeCheckpoint, checkpointRevOf, judgeCheckpointRow, CONTRACT_KIT_ENGINE_VERSION, ExecutionOutcomeConflictError, executionRecordDisposition, executionVerdict, } from "@sema-agent/core";
-import { redactDeep, redactSecrets } from "../trace/redact.js";
-import { MAX_RULE_OFFERS, MAX_RULE_OFFER_BATCH_MEMBERS, countKindlessBatchOffers, parkRowFacts, readRuleOfferList, skillCardFacts } from "../approval-card.js";
-import { assertJsonColumnWritable, createObjectColumnReader, decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, isJsonColumnBodyProblem, jsonColumnText, jsonColumnTextExpr, jsonColumnTextSha256, readJsonArrayColumn, readJsonColumnTextSha256, readJsonObjectColumn, readNonNullJsonValueColumn, } from "./sql-json-column.js";
+import { CHECKPOINT_FACET_SQL, CHECKPOINT_SWEEP_ORDER_SQL, CheckpointIndexRefusedError, judgeCheckpointIndexCells } from "../plugins/checkpoint-index-columns.js";
+import { CheckpointError, validatePendingSteer, appendPendingSteer, winnerFromOutcome, summarizeCheckpoint, checkpointRevOf, judgeCheckpointRow, CONTRACT_KIT_ENGINE_VERSION, ExecutionOutcomeConflictError, executionRecordDisposition, executionVerdict, } from "@sema-agent/core";
+import { parkRowFacts, skillCardFacts } from "../approval-card.js";
+import { assertJsonColumnWritable, createObjectColumnReader, decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, isJsonColumnBodyProblem, jsonColumnText, jsonColumnTextSha256, readJsonArrayColumn, readJsonColumnTextSha256, readNonNullJsonValueColumn, StoreCorruptError, } from "../plugins/sql-json-column.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { durableRowIdentity, withoutCheckpointToken } from "../checkpoint-identity.js";
-import { mysqlDriver, pgDriver, dialectProtocolJsonEncoder } from "./sql-driver.js";
-import { isDupKeyError, isMissingColumnError, rowTooLargeOrSelf, StoreRowTooLargeError } from "./sql-errors.js";
-import { describeProbedTableDrift } from "./schema-drift-sentence.js";
-import { MANAGED_RETENTION, UNMANAGED_RETENTION } from "./retention-store-sql.js";
-import { approvalPayloadFingerprint } from "./approval-payload-fingerprint.js";
+import { mysqlDriver, pgDriver, dialectProtocolJsonEncoder } from "../plugins/sql-driver.js";
+import { isDupKeyError, isMissingColumnError, rowTooLargeOrSelf, StoreRowTooLargeError } from "../plugins/sql-errors.js";
+import { describeProbedTableDrift } from "../plugins/schema-drift-sentence.js";
+import { MANAGED_RETENTION, UNMANAGED_RETENTION } from "../plugins/retention-store-sql.js";
+import { approvalPayloadFingerprint } from "../plugins/approval-payload-fingerprint.js";
+import { approvalDecisionOfWinner, boundedRuleOffers, boundedToolInput, candidateIdentityOf, DECIDED_REPLAY_SCAN_CAP, queueRowGateKind, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS, UnreadableCheckpointRowError, } from "../plugins/checkpoint-store-face.js";
 const CTX_REWRITE_PAGE = 500;
-const KINDLESS_SCAN_PAGE = 200;
-export { approvalPayloadFingerprint } from "./approval-payload-fingerprint.js";
-const MAX_TOOL_INPUT_CHARS = 8192;
-export const TERMINAL_BACKSTOP_MS = Math.max(60_000, (Number.isFinite(Number(process.env.APPROVAL_TERMINAL_BACKSTOP_MS)) ? Number(process.env.APPROVAL_TERMINAL_BACKSTOP_MS) : 0) || 30 * 86_400_000);
-export const TERMINAL_GRACE_MS = 3_600_000;
 export function tokenFingerprint(token) {
     return "sha256:" + createHash("sha256").update(token).digest("hex").slice(0, 12);
 }
@@ -50,21 +45,6 @@ class StoredRowProjectionMemo {
 }
 const STORED_ROW_READ_BATCH = 100;
 const CHECKPOINT_SHA256_AS = "checkpoint_sha256";
-const GATE_KIND_IS_LIVE_RUN_PARK = {
-    human: true,
-    irreversible_ask: true,
-    resource_limit: true,
-    needs_review: true,
-    plan_review: true,
-    task_done: false,
-};
-export const LIVE_RUN_GATE_KINDS = Object.keys(GATE_KIND_IS_LIVE_RUN_PARK).filter((k) => GATE_KIND_IS_LIVE_RUN_PARK[k]);
-export const TERMINAL_PARK_GATE_KINDS = Object.keys(GATE_KIND_IS_LIVE_RUN_PARK).filter((k) => !GATE_KIND_IS_LIVE_RUN_PARK[k]);
-export function pendingRowPrecedes(a, b, pick) {
-    if (pick === "oldest")
-        return a.createdAt < b.createdAt || (a.createdAt === b.createdAt && a.token < b.token);
-    return a.createdAt > b.createdAt || (a.createdAt === b.createdAt && a.token > b.token);
-}
 export const CHECKPOINT_ADDED_COLUMNS = [
     {
         column: "has_bidi_controls",
@@ -99,53 +79,6 @@ export async function assertCheckpointColumnSchema(query, dialect) {
         }
     }
 }
-const MAX_RULE_OFFER_SCAN = 32;
-function preboundBatchMembers(item) {
-    if (typeof item !== "object" || item === null)
-        return item;
-    const candidate = item;
-    if (candidate.kind !== "batch" || !Array.isArray(candidate.rules) || candidate.rules.length <= MAX_RULE_OFFER_BATCH_MEMBERS)
-        return item;
-    return { ...candidate, rules: candidate.rules.slice(0, MAX_RULE_OFFER_BATCH_MEMBERS) };
-}
-export function boundedReaderInput(raw) {
-    return Array.isArray(raw) ? raw.slice(0, MAX_RULE_OFFER_SCAN).map(preboundBatchMembers) : raw;
-}
-export function boundedRuleOffers(raw, opts = {}) {
-    const observe = opts.countRedactions ?? true;
-    const scrub = (text) => redactSecrets(text, { observe }).slice(0, MAX_RULE_TEXT_CHARS);
-    const read = readRuleOfferList(boundedReaderInput(raw));
-    const out = [];
-    for (const { offer } of read) {
-        if (out.length >= MAX_RULE_OFFERS)
-            break;
-        switch (offer.kind) {
-            case "single":
-                out.push({ kind: "single", rule: scrub(offer.rule), match: offer.match, command: scrub(offer.command) });
-                break;
-            case "batch":
-                out.push({
-                    kind: "batch",
-                    rules: offer.rules.slice(0, MAX_RULE_OFFER_BATCH_MEMBERS).map((r) => {
-                        switch (r.kind) {
-                            case "command":
-                                return { kind: "command", rule: scrub(r.rule), match: r.match, command: scrub(r.command), segment: scrub(r.segment) };
-                            case "directoryRead":
-                                return { kind: "directoryRead", rule: scrub(r.rule), directory: scrub(r.directory), segment: scrub(r.segment) };
-                            default:
-                                throw new Error(`unknown rule-offer batch member kind: ${JSON.stringify(r)}`);
-                        }
-                    }),
-                    uncoveredSegments: offer.uncoveredSegments,
-                    ...(offer.uncoveredDetail !== undefined ? { uncoveredDetail: offer.uncoveredDetail.map((d) => ({ segment: scrub(d.segment), reason: d.reason })) } : {}),
-                });
-                break;
-            default:
-                throw new Error(`unknown rule-offer kind: ${JSON.stringify(offer)}`);
-        }
-    }
-    return out.length > 0 ? out : undefined;
-}
 const readCheckpointBlobBody = createObjectColumnReader();
 const readResumeOutcomeBody = createObjectColumnReader();
 const readGateOutcomeBody = createObjectColumnReader();
@@ -153,6 +86,22 @@ const readRiskDescriptorBody = createObjectColumnReader();
 function decodeCheckpointColumn(cell, where) {
     return decodeJsonColumn(cell, readCheckpointBlobBody, `checkpoint.checkpoint ${where}`);
 }
+function verdictOfUnreadableBody(cell) {
+    return judgeCheckpointRow(cell);
+}
+const UNREADABLE_SUMMARY_MEMBERS = new Set(["token", "rowVerdict", "sessionId", "scope", "gateKind", "createdAt", "deadline"]);
+function isUnreadableSummaryForm(summary) {
+    const names = UNREADABLE_SUMMARY_MEMBERS;
+    return summary.rowVerdict.kind !== "ok" && Object.keys(summary).every((member) => names.has(member));
+}
+function readCheckpointBodyOrRefuse(cell, where) {
+    try {
+        return refusing("a checkpoint nobody can resume", () => decodeCheckpointColumn(cell, where));
+    }
+    catch (e) {
+        throw e instanceof StoreCorruptError ? new UnreadableCheckpointRowError(e, verdictOfUnreadableBody(cell)) : e;
+    }
+}
 function decodeOutcomeColumn(cell, where) {
     return decodeNullableJsonColumn(cell, readResumeOutcomeBody, `checkpoint.outcome ${where}`);
 }
@@ -225,80 +174,7 @@ function readCheckpointIdCell(cell) {
         return null;
     }
 }
-export function queueRowGateKind(kind) {
-    if (isGateKind(kind))
-        return kind;
-    recordFailOpen("server.approvals.queue-row-gate-kind-missing", `gate_kind=${kind === null || kind === undefined ? "NULL" : redactSecrets(String(kind)).slice(0, 40)}`);
-    return undefined;
-}
 const readPendingActionMemberBody = createObjectColumnReader();
-export function boundedToolInput(args) {
-    if (args === undefined)
-        return null;
-    const redacted = redactDeep(args);
-    const json = JSON.stringify(redacted);
-    if (json === undefined)
-        return null;
-    if (json.length > MAX_TOOL_INPUT_CHARS)
-        return { truncated: true, bytes: json.length };
-    return redacted;
-}
-export const DECIDED_REPLAY_SCAN_CAP = 8;
-export function approvalDecisionOfWinner(winner, boundCallId) {
-    if (winner === undefined)
-        return null;
-    if (winner.boundCallId !== boundCallId)
-        return null;
-    switch (winner.decision) {
-        case "allow":
-            return "approve";
-        case "deny":
-            return "deny";
-        case "approve":
-        case "reject":
-        case "edit":
-            return null;
-        default: {
-            const unhandled = winner.decision;
-            void unhandled;
-            return null;
-        }
-    }
-}
-function pendingActionToolCallId(body) {
-    if (typeof body !== "object" || body === null)
-        return { readable: false };
-    if ("sourceTaskId" in body)
-        return { readable: false };
-    const rawSource = "sourceSessionId" in body ? body.sourceSessionId : null;
-    if (rawSource !== null && rawSource !== undefined && typeof rawSource !== "string")
-        return { readable: false };
-    const sourceSessionId = typeof rawSource === "string" ? rawSource : null;
-    if (!("pendingAction" in body))
-        return { readable: true, toolCallId: null, boundInputHash: null, kind: null, sourceSessionId };
-    const pa = body.pendingAction;
-    if (typeof pa !== "object" || pa === null)
-        return { readable: false };
-    const kind = "kind" in pa ? pa.kind : null;
-    if (kind !== null && typeof kind !== "string")
-        return { readable: false };
-    if (!("toolCallId" in pa))
-        return { readable: true, toolCallId: null, boundInputHash: null, kind, sourceSessionId };
-    const id = pa.toolCallId;
-    if (typeof id !== "string")
-        return { readable: false };
-    if (kind !== "tool_approval")
-        return { readable: false };
-    const bih = "boundInputHash" in pa ? pa.boundInputHash : null;
-    if (bih !== null && typeof bih !== "string")
-        return { readable: false };
-    return { readable: true, toolCallId: id, boundInputHash: bih, kind, sourceSessionId };
-}
-export function candidateIdentityOf(cp) {
-    if (judgeCheckpointRow(cp).kind === "lacking")
-        return { readable: false };
-    return pendingActionToolCallId(cp);
-}
 function candidateIdentityOfColumn(cell, where) {
     let cp;
     try {
@@ -371,7 +247,6 @@ export function readPendingSteerQueueColumn(queueRaw) {
 }
 const STEER_CAS_ATTEMPTS = 8;
 const EXECUTION_RECORD_CAS_ATTEMPTS = 8;
-export const CTX_CLAIM_REWRITES = ["written", "claim_released", "context_absent"];
 export class SqlCheckpointStore {
     db;
     logger;
@@ -474,7 +349,7 @@ export class SqlCheckpointStore {
         const r = rows[0];
         if (!r)
             return null;
-        const cp = refusing("a checkpoint nobody can resume", () => decodeCheckpointColumn(r.checkpoint, `for token ${tokenFingerprint(token)}`));
+        const cp = readCheckpointBodyOrRefuse(r.checkpoint, `for token ${tokenFingerprint(token)}`);
         cp.status = r.status;
         const outcomeRaw = refusing("a decision record nobody can read", () => decodeOutcomeColumn(r.outcome, `for token ${tokenFingerprint(token)}`));
         if (outcomeRaw)
@@ -653,47 +528,74 @@ export class SqlCheckpointStore {
                 const token = String(r.token);
                 const sha256 = readJsonColumnTextSha256(r[CHECKPOINT_SHA256_AS], "checkpoint.checkpoint_sha256 (whole-row read)");
                 const projection = this.projectStoredRow(r, sha256);
-                if (projection !== undefined && sha256 === expected.get(token))
+                if (sha256 === expected.get(token))
                     out.set(token, projection);
             }
         }
         return out;
     }
     projectStoredRow(r, sha256) {
+        const read = this.readStoredRow(r, "(operator queue row, whole-row read)", sha256);
+        return read.summary === undefined ? { rowVerdict: read.rowVerdict, skillCardFacts: {} } : { rowVerdict: read.rowVerdict, skillCardFacts: skillCardFacts(read.summary) };
+    }
+    readStoredRow(r, where, sha256, discloseFor) {
+        const memo = this.storedRowMemo.get(sha256);
         let cp;
         try {
-            cp = decodeCheckpointColumn(r.checkpoint, "(operator queue row, whole-row read)");
+            cp = decodeCheckpointColumn(r.checkpoint, where);
         }
         catch (e) {
             if (!isJsonColumnBodyProblem(e))
                 throw e;
             recordFailOpen("server.approvals.park-row-blob-unreadable");
-            return undefined;
+            return { rowVerdict: verdictOfUnreadableBody(r.checkpoint) };
         }
         let summary;
+        const disclosed = [];
         try {
-            summary = summarizeCheckpoint(cp);
+            summary = summarizeCheckpoint(cp, (sentence) => disclosed.push(sentence), memo?.rowVerdict);
         }
         catch {
             recordFailOpen("server.approvals.park-row-blob-unreadable");
-            return { rowVerdict: judgeCheckpointRow(cp), skillCardFacts: {} };
+            return { rowVerdict: judgeCheckpointRow(cp) };
         }
-        const projection = { rowVerdict: summary.rowVerdict, skillCardFacts: skillCardFacts(summary) };
-        this.storedRowMemo.set(sha256, projection);
-        return projection;
+        if (isUnreadableSummaryForm(summary)) {
+            recordFailOpen("server.approvals.park-row-blob-unreadable");
+            return { rowVerdict: summary.rowVerdict };
+        }
+        const seat = discloseFor?.(cp);
+        for (const sentence of disclosed)
+            seat?.(sentence);
+        if (memo === undefined)
+            this.storedRowMemo.set(sha256, { rowVerdict: summary.rowVerdict, skillCardFacts: skillCardFacts(summary) });
+        return { rowVerdict: summary.rowVerdict, summary };
     }
     async listByScope(scope) {
-        const { rows } = await this.db.query(this.q(`SELECT ${jsonColumnText("mysql", "checkpoint")}, ${jsonColumnTextSha256("mysql", "checkpoint", CHECKPOINT_SHA256_AS)}, status FROM checkpoint WHERE status = 'pending' AND scope = ? ORDER BY created_at_ms ASC LIMIT 500`, `SELECT ${jsonColumnText("pg", "checkpoint")}, ${jsonColumnTextSha256("pg", "checkpoint", CHECKPOINT_SHA256_AS)}, status FROM checkpoint WHERE status = 'pending' AND scope = $1 ORDER BY created_at_ms ASC LIMIT 500`), [scope]);
+        const d = this.db.dialect;
+        const { rows } = await this.db.query(`SELECT ${jsonColumnText(d, "checkpoint")}, ${jsonColumnTextSha256(d, "checkpoint", CHECKPOINT_SHA256_AS)}, ${jsonColumnText(d, "checkpoint", PARK_ROW_CHECKPOINT_ID)}, ` +
+            `token, session_id, scope, created_at_ms, deadline, gate_kind FROM checkpoint WHERE status = 'pending' AND scope = ${this.q("?", "$1")} ORDER BY created_at_ms ASC LIMIT 500`, [scope]);
         const out = [];
         for (const r of rows) {
             const sha256 = readJsonColumnTextSha256(r[CHECKPOINT_SHA256_AS], `checkpoint.checkpoint_sha256 in the ${scope} scheduler view`);
-            const cp = refusing("a checkpoint nobody can resume", () => decodeCheckpointColumn(r.checkpoint, `in the ${scope} scheduler view`));
-            cp.status = r.status;
-            const memo = this.storedRowMemo.get(sha256);
-            const summary = summarizeCheckpoint(cp, (sentence) => recordFailOpen("server.checkpoint.inbox-risk-axes-damaged", withoutCheckpointToken(sentence, cp.token)), memo?.rowVerdict);
-            if (memo === undefined)
-                this.storedRowMemo.set(sha256, { rowVerdict: summary.rowVerdict, skillCardFacts: skillCardFacts(summary) });
-            out.push(summary);
+            const read = this.readStoredRow(r, `in the ${scope} scheduler view`, sha256, (cp) => (sentence) => recordFailOpen("server.checkpoint.inbox-risk-axes-damaged", withoutCheckpointToken(sentence, cp.token)));
+            if (read.summary !== undefined) {
+                out.push(read.summary);
+                continue;
+            }
+            const gateKind = queueRowGateKind(r.gate_kind);
+            if (gateKind === undefined)
+                continue;
+            const checkpointId = readCheckpointIdCell(r[PARK_ROW_CHECKPOINT_ID.as]);
+            out.push({
+                token: String(r.token),
+                rowVerdict: read.rowVerdict,
+                ...(typeof checkpointId === "string" ? { checkpointId } : {}),
+                sessionId: String(r.session_id),
+                scope: String(r.scope),
+                gateKind,
+                createdAt: Number(r.created_at_ms),
+                ...(r.deadline == null ? {} : { deadline: Number(r.deadline) }),
+            });
         }
         return out;
     }
@@ -872,47 +774,6 @@ export class SqlCheckpointStore {
         }
         return out;
     }
-    async scanKindlessBatchRows() {
-        const out = [];
-        let unreadableCells = 0;
-        const tolerant = (read) => {
-            try {
-                return read();
-            }
-            catch (e) {
-                if (!isJsonColumnBodyProblem(e))
-                    throw e;
-                unreadableCells += 1;
-                return undefined;
-            }
-        };
-        const prefilter = (d) => `(rule_suggestions IS NOT NULL OR ${jsonColumnTextExpr(d, "checkpoint", PARK_ROW_PENDING_ACTION.key)} LIKE '%"batch"%')`;
-        let after = "";
-        for (;;) {
-            const { rows } = await this.db.query(this.q(`SELECT token, ${jsonColumnText("mysql", "rule_suggestions")}, ${jsonColumnText("mysql", "checkpoint", PARK_ROW_PENDING_ACTION)} FROM checkpoint WHERE token > ? AND ${prefilter("mysql")} ORDER BY token LIMIT ${KINDLESS_SCAN_PAGE}`, `SELECT token, ${jsonColumnText("pg", "rule_suggestions")}, ${jsonColumnText("pg", "checkpoint", PARK_ROW_PENDING_ACTION)} FROM checkpoint WHERE token > $1 AND ${prefilter("pg")} ORDER BY token LIMIT ${KINDLESS_SCAN_PAGE}`), [after]);
-            for (const row of rows) {
-                const token = String(row.token);
-                after = token;
-                const carriers = [];
-                const column = tolerant(() => decodeNullableJsonColumn(row.rule_suggestions, readJsonArrayColumn, "checkpoint.rule_suggestions (kind-less batch census)"));
-                if (countKindlessBatchOffers(boundedReaderInput(column)) > 0)
-                    carriers.push("rule_suggestions");
-                const pendingAction = tolerant(() => decodeNullableJsonColumn(row[PARK_ROW_PENDING_ACTION.as], readJsonObjectColumn, "checkpoint.checkpoint pendingAction member (kind-less batch census)"));
-                if (typeof pendingAction === "object" && pendingAction !== null) {
-                    const blobOffers = Reflect.get(pendingAction, "ruleOffers");
-                    if (blobOffers !== undefined && !Array.isArray(blobOffers))
-                        unreadableCells += 1;
-                    else if (countKindlessBatchOffers(blobOffers) > 0)
-                        carriers.push("pendingAction.ruleOffers");
-                }
-                if (carriers.length > 0)
-                    out.push({ ref: tokenFingerprint(token), carriers });
-            }
-            if (rows.length < KINDLESS_SCAN_PAGE)
-                break;
-        }
-        return { rows: out, unreadableCells };
-    }
     async reapCtx(cutoff) {
         const res = await this.db.query(this.q("DELETE FROM checkpoint_ctx WHERE updated_at_ms < ? " +
             "AND session_id NOT IN (SELECT session_id FROM checkpoint WHERE status='pending') " +

package/dist/{plugins → stores-sql}/mailbox-store-sql.d.ts

@@ -1,8 +1,8 @@
 import type { Pool as MySqlPool } from "mysql2/promise";
 import type { Pool as PgPool } from "pg";
 import type { MailboxAckResult, MailboxAppendMessage, MailboxDecision, MailboxDecisionOutcome, MailboxLease, MailboxRecipientTombstone, MailboxStore } from "@sema-agent/core";
-import { type IndexSpec } from "./ensure-index.js";
-import type { SqlDialect } from "./sql-driver.js";
+import { type IndexSpec } from "../plugins/ensure-index.js";
+import type { SqlDialect } from "../plugins/sql-driver.js";
 export declare const MAILBOX_TABLE = "mailbox";
 export declare const MAILBOX_MSG_TABLE = "mailbox_message";
 /** [ref] 收件人墓碑表(预删除态的**唯一**真源;形与理由见 `mailbox-recipient-lifecycle.ts` 模块头)。

package/dist/{plugins → stores-sql}/mailbox-store-sql.js

@@ -1,10 +1,10 @@
 import { isUtf8 } from "node:buffer";
 import { MAILBOX_CONSUMED_ID_WINDOW, MAILBOX_INVALID_PEER_META_CODE, MAILBOX_RECORD_ID_MAX_CHARS, MAILBOX_REPLAY_FACETS, MAILBOX_TOMBSTONED_RECIPIENT_CODE, MailboxStoreError, assertMailboxDecisionMove, judgeMailboxAppendById, mailboxReplayDigests, readMailboxAppend, readMailboxPeerMeta, readStoredMailboxDecision } from "@sema-agent/core";
-import { pgHasUnstorable, pgSanitizeText, PgUnstorableError } from "./pg-safe-json.js";
+import { pgHasUnstorable, pgSanitizeText, PgUnstorableError } from "../plugins/pg-safe-json.js";
 import { isWellFormedUnicode } from "../principal-jwt.js";
-import { ensureIndexes } from "./ensure-index.js";
-import { escapeLike } from "./sql-escape.js";
-import { SqlJsonColumnError, decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, isJsonColumnBodyProblem, jsonColumnText, readStringArrayColumn } from "./sql-json-column.js";
+import { ensureIndexes } from "../plugins/ensure-index.js";
+import { escapeLike } from "../plugins/sql-escape.js";
+import { SqlJsonColumnError, decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, isJsonColumnBodyProblem, jsonColumnText, readStringArrayColumn } from "../plugins/sql-json-column.js";
 export const MAILBOX_TABLE = "mailbox";
 export const MAILBOX_MSG_TABLE = "mailbox_message";
 export const MAILBOX_TOMBSTONE_TABLE = "mailbox_tombstone";

package/dist/{plugins → stores-sql}/roster-store-sql.d.ts

@@ -22,8 +22,8 @@
  */
 import type { Pool } from "mysql2/promise";
 import { type RosterStore, type RosterEntry, type RosterAccess } from "@sema-agent/core";
-import type { PgQueryFn } from "./pg-query.js";
-import { type IndexSpec } from "./ensure-index.js";
+import type { PgQueryFn } from "../plugins/pg-query.js";
+import { type IndexSpec } from "../plugins/ensure-index.js";
 export declare const ROSTER_TABLE = "agent_roster";
 export declare function ensureTiDBRosterSchema(pool: Pool): Promise<void>;
 /** [ref]:本 store 的索引**声明**(两方言共用一份)。PG 侧由下面的 `ensurePgRosterSchema` 应用,MySQL 侧由 `tidb-pool.ts` 的中央 `ensureSchema` 应用(那里内联 `KEY` 已在 `CREATE TABLE` 里 ⇒ 新建库探到即零 DDL,存量库缺谁补谁)。加索引以外的 schema 变更仍归运维,见 `plugins/ensure-index.ts` 头注。 */

package/dist/{plugins → stores-sql}/roster-store-sql.js

@@ -1,5 +1,5 @@
 import { normalizeAgentName } from "@sema-agent/core";
-import { ensureIndexes } from "./ensure-index.js";
+import { ensureIndexes } from "../plugins/ensure-index.js";
 export const ROSTER_TABLE = "agent_roster";
 function rowToEntry(r) {
     return {

package/dist/{plugins → stores-sql}/tool-result-store-sql.d.ts

@@ -1,9 +1,9 @@
 import type { ToolResultProvenance, ToolResultStore, ToolResultSlice, ToolResultDeletionReport } from "@sema-agent/core";
 import type { Pool as MySqlPool } from "mysql2/promise";
 import type { Pool as PgPool, PoolClient as PgPoolClient } from "pg";
-import { type SqlDriver, type SqlDialect } from "./sql-driver.js";
+import { type SqlDriver, type SqlDialect } from "../plugins/sql-driver.js";
 import type { RetentionDeclaration } from "@sema-agent/core";
-import { type IndexSpec } from "./ensure-index.js";
+import { type IndexSpec } from "../plugins/ensure-index.js";
 /** PG schema for the tool_result table — the PG translation of tidb-pool.ts's tool_result DDL
  *  (LONGTEXT→TEXT, DATETIME(3)→TIMESTAMPTZ(3), inline KEY→separate CREATE INDEX). Disjoint from other stores'
  *  tables, so a self-contained ensureSchema is safe (central pg-pool aggregation is done separately). */

package/dist/{plugins → stores-sql}/tool-result-store-sql.js

@@ -1,10 +1,10 @@
 import { MAX_MINTED_TOOL_RESULT_REF_CHARS, assertSafeToolResultRef, assertToolResultProvenanceMatch, normalizeToolResultProvenance } from "@sema-agent/core";
-import { pgSanitizeText } from "./pg-safe-json.js";
-import { mysqlDriver, pgDriver } from "./sql-driver.js";
-import { MANAGED_RETENTION, UNMANAGED_RETENTION } from "./retention-store-sql.js";
-import { ensureIndexes } from "./ensure-index.js";
-import { describeProbedTableDrift, schemaWaysOut } from "./schema-drift-sentence.js";
-import { isMissingColumnError } from "./sql-errors.js";
+import { pgSanitizeText } from "../plugins/pg-safe-json.js";
+import { mysqlDriver, pgDriver } from "../plugins/sql-driver.js";
+import { MANAGED_RETENTION, UNMANAGED_RETENTION } from "../plugins/retention-store-sql.js";
+import { ensureIndexes } from "../plugins/ensure-index.js";
+import { describeProbedTableDrift, schemaWaysOut } from "../plugins/schema-drift-sentence.js";
+import { isMissingColumnError } from "../plugins/sql-errors.js";
 export const PG_TOOL_RESULT_SCHEMA = [
     `CREATE TABLE IF NOT EXISTS tool_result (
      ref              VARCHAR(518) COLLATE "C" NOT NULL,

package/dist/{plugins → stores-sql}/workflow-journal-store-sql.d.ts

@@ -8,7 +8,7 @@
  * {@link import("@sema-agent/core").InMemoryWorkflowJournalStore} (single-replica, lost on crash); this is the
  * byte-match durable twin so a workflow survives a replica crash and RESUMES (replay the longest unchanged
  * PREFIX of recorded `ctx.agent` results, run only the first changed/new call + everything after it live). The
- * journal is LOAD-BEARING (unlike the best-effort {@link import("./run-store-sql.js")} observation layer):
+ * journal is LOAD-BEARING (unlike the best-effort {@link import("../plugins/run-store-sql.js")} observation layer):
  * append/load failures MUST throw — a silently-dropped entry would silently re-run already-done work.
  *
  * Schema = two tables (DDL in tidb-pool.ts / pg-pool.ts ensureSchema), the SQL normal form of core's per-run
@@ -36,7 +36,7 @@
  *     `run_id = ? AND scope = ?`.
  * Why the owner record's incarnation is in the row's PRIMARY KEY (one rule: **a row belongs to the owner record that
  * wrote it — readable only through it, overwritable only by a write made through it**): a write can outlive the owner
- * record it was judged against — `deleteByRun` / the GC sweep racing an append, an append stalled between its two
+ * record it was judged against — the GC sweep racing an append, an append stalled between its two
  * statements. Keyed and joined on run_id alone, (a) a leftover row would be adopted by the next claim of that run_id by
  * ANY scope, and (b) on PostgreSQL READ COMMITTED a stale guarded write whose SELECT still saw the old record would, via
  * the ON CONFLICT arm (which updates a row its snapshot never saw, without re-checking the source), overwrite the NEW
@@ -77,7 +77,7 @@
 import type { Pool as MySqlPool } from "mysql2/promise";
 import type { Pool as PgPool } from "pg";
 import { type WorkflowJournalEntry, type WorkflowJournalStore } from "@sema-agent/core";
-import { type SqlDriver } from "./sql-driver.js";
+import { type SqlDriver } from "../plugins/sql-driver.js";
 /** Dual-dialect durable WorkflowJournalStore. See the file header for the dialect-delta ledger. */
 /** [ref] 租约旋钮。TTL 只是**崩溃兜底**(engine 终态 finally 显式释放;[ref]/[ref] 两层分工:
  *  engine 崩了没释放 ⇒ 陈旧 claim 可被接管)。
@@ -137,11 +137,6 @@ export declare class SqlWorkflowJournalStore implements WorkflowJournalStore {
     private oversizeCellOf;
     /** 读面的**唯一**行读法(`loadPage` 的块读与超门行的单条读共用):序数 ≥ `from` 的至多 `limit` 行,字节超 `inlineBytes` 的行 `resultJson` 为 null(只回 `resultBytes`)。 */
     private readRows;
-    /** GC — purge ALL journal entries for a run (every incarnation), then its owner row ([ref]). Scoped by run_id alone;
-     *  idempotent (returns the journal rows removed). Mirrors the resume-anchor store's deleteBySession. An append racing the
-     *  two DELETEs can leave a row behind without its owner record; it is keyed by the dead incarnation — readable and
-     *  overwritable by no one (file header) — and the GC sweep removes it by age. */
-    deleteByRun(runId: string): Promise<number>;
     /** [ref] / WF2([ref] core 拍板 a 形,签名逐字)—— cross-replica resume admission lease。
      *
      *  语义(bake-store `idem_key UNIQUE` 先例):PK (source_run_id, scope) 上的原子赢或观察。四步,每步
@@ -165,10 +160,10 @@ export declare class SqlWorkflowJournalStore implements WorkflowJournalStore {
         newRunId: string;
         scope: string;
     }): Promise<void>;
-    /** GC — time-based sweep: purge journal entries older than `maxAgeMs` (created_at_ms < now - maxAgeMs). The
-     *  per-run deleteByRun has no production caller (a run-store reap gives no per-run hook), so this bounded sweep
-     *  — wired into the service reaper — is what keeps the heaviest table (TaskResult-bearing) from growing without
-     *  bound. A resume of a journal older than the retention window simply re-runs live (resume is an optimization).
+    /** GC — time-based sweep: purge journal entries older than `maxAgeMs` (created_at_ms < now - maxAgeMs). This is the
+     *  journal's ONE delete path (the engine's contract has no per-run delete; its File store's was retired in core 7.61.0,
+     *  and this store's went with it) — wired into the service reaper, it is what keeps the heaviest table
+     *  (TaskResult-bearing) from growing without bound. A resume of a journal older than the retention window simply re-runs live (resume is an optimization).
      *  Idempotent; returns the journal rows purged.
      *
      *  [ref]: the same cutoff then purges owner rows whose OWN clock (`appended_at_ms`, pushed by every append of the

package/dist/{plugins → stores-sql}/workflow-journal-store-sql.js

@@ -1,9 +1,9 @@
 import { callKeyOrdinal } from "@sema-agent/core";
 import { assertJournalEntryFits } from "@sema-agent/core";
-import { journalEntryOfCell, journalRowPayloadOf } from "./workflow-journal-payload.js";
+import { journalEntryOfCell, journalRowPayloadOf } from "../plugins/workflow-journal-payload.js";
 import { randomUUID } from "node:crypto";
-import { mysqlDriver, pgDriver } from "./sql-driver.js";
-import { jsonColumnText, jsonColumnTextExpr } from "./sql-json-column.js";
+import { mysqlDriver, pgDriver } from "../plugins/sql-driver.js";
+import { jsonColumnText, jsonColumnTextExpr } from "../plugins/sql-json-column.js";
 const DEFAULT_RESUME_CLAIM_TTL_MS = 60 * 60 * 1000;
 const INT_MIN = -2147483648;
 const INT_MAX = 2147483647;
@@ -75,11 +75,6 @@ export class SqlWorkflowJournalStore {
         const { rows } = await this.db.query(this.q(`SELECT ordinal, call_key, CASE WHEN LENGTH(result) > ? THEN NULL ELSE ${jsonColumnTextExpr("mysql", "result")} END AS result_json, LENGTH(result) AS result_bytes FROM workflow_journal JOIN workflow_journal_owner USING (run_id, incarnation) WHERE run_id = ? AND scope = ? AND ordinal >= ? ORDER BY ordinal ASC LIMIT ?`, `SELECT ordinal, call_key, CASE WHEN OCTET_LENGTH(result) > $3 THEN NULL ELSE ${jsonColumnTextExpr("pg", "result")} END AS result_json, OCTET_LENGTH(result) AS result_bytes FROM workflow_journal JOIN workflow_journal_owner USING (run_id, incarnation) WHERE run_id = $1 AND scope = $2 AND ordinal >= $4 ORDER BY ordinal ASC LIMIT $5`), params);
         return rows.map((r) => ({ ordinal: Number(r.ordinal), callKey: String(r.call_key), resultJson: r.result_json === null ? null : String(r.result_json), resultBytes: Number(r.result_bytes) }));
     }
-    async deleteByRun(runId) {
-        const res = await this.db.query(this.q("DELETE FROM workflow_journal WHERE run_id = ?", "DELETE FROM workflow_journal WHERE run_id = $1"), [runId]);
-        await this.db.query(this.q("DELETE FROM workflow_journal_owner WHERE run_id = ?", "DELETE FROM workflow_journal_owner WHERE run_id = $1"), [runId]);
-        return res.affected;
-    }
     async resumeClaim(input) {
         const now = Date.now();
         const ins = await this.db.query(this.q("INSERT IGNORE INTO workflow_resume_claim (source_run_id, scope, new_run_id, claimed_at_ms) VALUES (?, ?, ?, ?)", "INSERT INTO workflow_resume_claim (source_run_id, scope, new_run_id, claimed_at_ms) VALUES ($1, $2, $3, $4) ON CONFLICT (source_run_id, scope) DO NOTHING"), [input.sourceRunId, input.scope, input.newRunId, now]);