@sema-agent/server 7.145.0 → 7.146.0

package/dist/{plugins → stores-sql}/checkpoint-store-sql.js

@@ -1,23 +1,18 @@
 import { parkedApprovalCard } from "../approval-content-kind.js";
 import { createHash } from "node:crypto";
-import { CHECKPOINT_FACET_SQL, CHECKPOINT_SWEEP_ORDER_SQL, CheckpointIndexRefusedError, judgeCheckpointIndexCells } from "./checkpoint-index-columns.js";
-import { CheckpointError, isGateKind, MAX_RULE_TEXT_CHARS, validatePendingSteer, appendPendingSteer, winnerFromOutcome, summarizeCheckpoint, checkpointRevOf, judgeCheckpointRow, CONTRACT_KIT_ENGINE_VERSION, ExecutionOutcomeConflictError, executionRecordDisposition, executionVerdict, } from "@sema-agent/core";
-import { redactDeep, redactSecrets } from "../trace/redact.js";
-import { MAX_RULE_OFFERS, MAX_RULE_OFFER_BATCH_MEMBERS, countKindlessBatchOffers, parkRowFacts, readRuleOfferList, skillCardFacts } from "../approval-card.js";
-import { assertJsonColumnWritable, createObjectColumnReader, decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, isJsonColumnBodyProblem, jsonColumnText, jsonColumnTextExpr, jsonColumnTextSha256, readJsonArrayColumn, readJsonColumnTextSha256, readJsonObjectColumn, readNonNullJsonValueColumn, } from "./sql-json-column.js";
+import { CHECKPOINT_FACET_SQL, CHECKPOINT_SWEEP_ORDER_SQL, CheckpointIndexRefusedError, judgeCheckpointIndexCells } from "../plugins/checkpoint-index-columns.js";
+import { CheckpointError, validatePendingSteer, appendPendingSteer, winnerFromOutcome, summarizeCheckpoint, checkpointRevOf, judgeCheckpointRow, CONTRACT_KIT_ENGINE_VERSION, ExecutionOutcomeConflictError, executionRecordDisposition, executionVerdict, } from "@sema-agent/core";
+import { parkRowFacts, skillCardFacts } from "../approval-card.js";
+import { assertJsonColumnWritable, createObjectColumnReader, decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, isJsonColumnBodyProblem, jsonColumnText, jsonColumnTextSha256, readJsonArrayColumn, readJsonColumnTextSha256, readNonNullJsonValueColumn, StoreCorruptError, } from "../plugins/sql-json-column.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { durableRowIdentity, withoutCheckpointToken } from "../checkpoint-identity.js";
-import { mysqlDriver, pgDriver, dialectProtocolJsonEncoder } from "./sql-driver.js";
-import { isDupKeyError, isMissingColumnError, rowTooLargeOrSelf, StoreRowTooLargeError } from "./sql-errors.js";
-import { describeProbedTableDrift } from "./schema-drift-sentence.js";
-import { MANAGED_RETENTION, UNMANAGED_RETENTION } from "./retention-store-sql.js";
-import { approvalPayloadFingerprint } from "./approval-payload-fingerprint.js";
+import { mysqlDriver, pgDriver, dialectProtocolJsonEncoder } from "../plugins/sql-driver.js";
+import { isDupKeyError, isMissingColumnError, rowTooLargeOrSelf, StoreRowTooLargeError } from "../plugins/sql-errors.js";
+import { describeProbedTableDrift } from "../plugins/schema-drift-sentence.js";
+import { MANAGED_RETENTION, UNMANAGED_RETENTION } from "../plugins/retention-store-sql.js";
+import { approvalPayloadFingerprint } from "../plugins/approval-payload-fingerprint.js";
+import { approvalDecisionOfWinner, boundedRuleOffers, boundedToolInput, candidateIdentityOf, DECIDED_REPLAY_SCAN_CAP, queueRowGateKind, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS, UnreadableCheckpointRowError, } from "../plugins/checkpoint-store-face.js";
 const CTX_REWRITE_PAGE = 500;
-const KINDLESS_SCAN_PAGE = 200;
-export { approvalPayloadFingerprint } from "./approval-payload-fingerprint.js";
-const MAX_TOOL_INPUT_CHARS = 8192;
-export const TERMINAL_BACKSTOP_MS = Math.max(60_000, (Number.isFinite(Number(process.env.APPROVAL_TERMINAL_BACKSTOP_MS)) ? Number(process.env.APPROVAL_TERMINAL_BACKSTOP_MS) : 0) || 30 * 86_400_000);
-export const TERMINAL_GRACE_MS = 3_600_000;
 export function tokenFingerprint(token) {
     return "sha256:" + createHash("sha256").update(token).digest("hex").slice(0, 12);
 }
@@ -50,21 +45,6 @@ class StoredRowProjectionMemo {
 }
 const STORED_ROW_READ_BATCH = 100;
 const CHECKPOINT_SHA256_AS = "checkpoint_sha256";
-const GATE_KIND_IS_LIVE_RUN_PARK = {
-    human: true,
-    irreversible_ask: true,
-    resource_limit: true,
-    needs_review: true,
-    plan_review: true,
-    task_done: false,
-};
-export const LIVE_RUN_GATE_KINDS = Object.keys(GATE_KIND_IS_LIVE_RUN_PARK).filter((k) => GATE_KIND_IS_LIVE_RUN_PARK[k]);
-export const TERMINAL_PARK_GATE_KINDS = Object.keys(GATE_KIND_IS_LIVE_RUN_PARK).filter((k) => !GATE_KIND_IS_LIVE_RUN_PARK[k]);
-export function pendingRowPrecedes(a, b, pick) {
-    if (pick === "oldest")
-        return a.createdAt < b.createdAt || (a.createdAt === b.createdAt && a.token < b.token);
-    return a.createdAt > b.createdAt || (a.createdAt === b.createdAt && a.token > b.token);
-}
 export const CHECKPOINT_ADDED_COLUMNS = [
     {
         column: "has_bidi_controls",
@@ -99,53 +79,6 @@ export async function assertCheckpointColumnSchema(query, dialect) {
         }
     }
 }
-const MAX_RULE_OFFER_SCAN = 32;
-function preboundBatchMembers(item) {
-    if (typeof item !== "object" || item === null)
-        return item;
-    const candidate = item;
-    if (candidate.kind !== "batch" || !Array.isArray(candidate.rules) || candidate.rules.length <= MAX_RULE_OFFER_BATCH_MEMBERS)
-        return item;
-    return { ...candidate, rules: candidate.rules.slice(0, MAX_RULE_OFFER_BATCH_MEMBERS) };
-}
-export function boundedReaderInput(raw) {
-    return Array.isArray(raw) ? raw.slice(0, MAX_RULE_OFFER_SCAN).map(preboundBatchMembers) : raw;
-}
-export function boundedRuleOffers(raw, opts = {}) {
-    const observe = opts.countRedactions ?? true;
-    const scrub = (text) => redactSecrets(text, { observe }).slice(0, MAX_RULE_TEXT_CHARS);
-    const read = readRuleOfferList(boundedReaderInput(raw));
-    const out = [];
-    for (const { offer } of read) {
-        if (out.length >= MAX_RULE_OFFERS)
-            break;
-        switch (offer.kind) {
-            case "single":
-                out.push({ kind: "single", rule: scrub(offer.rule), match: offer.match, command: scrub(offer.command) });
-                break;
-            case "batch":
-                out.push({
-                    kind: "batch",
-                    rules: offer.rules.slice(0, MAX_RULE_OFFER_BATCH_MEMBERS).map((r) => {
-                        switch (r.kind) {
-                            case "command":
-                                return { kind: "command", rule: scrub(r.rule), match: r.match, command: scrub(r.command), segment: scrub(r.segment) };
-                            case "directoryRead":
-                                return { kind: "directoryRead", rule: scrub(r.rule), directory: scrub(r.directory), segment: scrub(r.segment) };
-                            default:
-                                throw new Error(`unknown rule-offer batch member kind: ${JSON.stringify(r)}`);
-                        }
-                    }),
-                    uncoveredSegments: offer.uncoveredSegments,
-                    ...(offer.uncoveredDetail !== undefined ? { uncoveredDetail: offer.uncoveredDetail.map((d) => ({ segment: scrub(d.segment), reason: d.reason })) } : {}),
-                });
-                break;
-            default:
-                throw new Error(`unknown rule-offer kind: ${JSON.stringify(offer)}`);
-        }
-    }
-    return out.length > 0 ? out : undefined;
-}
 const readCheckpointBlobBody = createObjectColumnReader();
 const readResumeOutcomeBody = createObjectColumnReader();
 const readGateOutcomeBody = createObjectColumnReader();
@@ -156,6 +89,19 @@ function decodeCheckpointColumn(cell, where) {
 function verdictOfUnreadableBody(cell) {
     return judgeCheckpointRow(cell);
 }
+const UNREADABLE_SUMMARY_MEMBERS = new Set(["token", "rowVerdict", "sessionId", "scope", "gateKind", "createdAt", "deadline"]);
+function isUnreadableSummaryForm(summary) {
+    const names = UNREADABLE_SUMMARY_MEMBERS;
+    return summary.rowVerdict.kind !== "ok" && Object.keys(summary).every((member) => names.has(member));
+}
+function readCheckpointBodyOrRefuse(cell, where) {
+    try {
+        return refusing("a checkpoint nobody can resume", () => decodeCheckpointColumn(cell, where));
+    }
+    catch (e) {
+        throw e instanceof StoreCorruptError ? new UnreadableCheckpointRowError(e, verdictOfUnreadableBody(cell)) : e;
+    }
+}
 function decodeOutcomeColumn(cell, where) {
     return decodeNullableJsonColumn(cell, readResumeOutcomeBody, `checkpoint.outcome ${where}`);
 }
@@ -228,80 +174,7 @@ function readCheckpointIdCell(cell) {
         return null;
     }
 }
-export function queueRowGateKind(kind) {
-    if (isGateKind(kind))
-        return kind;
-    recordFailOpen("server.approvals.queue-row-gate-kind-missing", `gate_kind=${kind === null || kind === undefined ? "NULL" : redactSecrets(String(kind)).slice(0, 40)}`);
-    return undefined;
-}
 const readPendingActionMemberBody = createObjectColumnReader();
-export function boundedToolInput(args) {
-    if (args === undefined)
-        return null;
-    const redacted = redactDeep(args);
-    const json = JSON.stringify(redacted);
-    if (json === undefined)
-        return null;
-    if (json.length > MAX_TOOL_INPUT_CHARS)
-        return { truncated: true, bytes: json.length };
-    return redacted;
-}
-export const DECIDED_REPLAY_SCAN_CAP = 8;
-export function approvalDecisionOfWinner(winner, boundCallId) {
-    if (winner === undefined)
-        return null;
-    if (winner.boundCallId !== boundCallId)
-        return null;
-    switch (winner.decision) {
-        case "allow":
-            return "approve";
-        case "deny":
-            return "deny";
-        case "approve":
-        case "reject":
-        case "edit":
-            return null;
-        default: {
-            const unhandled = winner.decision;
-            void unhandled;
-            return null;
-        }
-    }
-}
-function pendingActionToolCallId(body) {
-    if (typeof body !== "object" || body === null)
-        return { readable: false };
-    if ("sourceTaskId" in body)
-        return { readable: false };
-    const rawSource = "sourceSessionId" in body ? body.sourceSessionId : null;
-    if (rawSource !== null && rawSource !== undefined && typeof rawSource !== "string")
-        return { readable: false };
-    const sourceSessionId = typeof rawSource === "string" ? rawSource : null;
-    if (!("pendingAction" in body))
-        return { readable: true, toolCallId: null, boundInputHash: null, kind: null, sourceSessionId };
-    const pa = body.pendingAction;
-    if (typeof pa !== "object" || pa === null)
-        return { readable: false };
-    const kind = "kind" in pa ? pa.kind : null;
-    if (kind !== null && typeof kind !== "string")
-        return { readable: false };
-    if (!("toolCallId" in pa))
-        return { readable: true, toolCallId: null, boundInputHash: null, kind, sourceSessionId };
-    const id = pa.toolCallId;
-    if (typeof id !== "string")
-        return { readable: false };
-    if (kind !== "tool_approval")
-        return { readable: false };
-    const bih = "boundInputHash" in pa ? pa.boundInputHash : null;
-    if (bih !== null && typeof bih !== "string")
-        return { readable: false };
-    return { readable: true, toolCallId: id, boundInputHash: bih, kind, sourceSessionId };
-}
-export function candidateIdentityOf(cp) {
-    if (judgeCheckpointRow(cp).kind === "lacking")
-        return { readable: false };
-    return pendingActionToolCallId(cp);
-}
 function candidateIdentityOfColumn(cell, where) {
     let cp;
     try {
@@ -374,7 +247,6 @@ export function readPendingSteerQueueColumn(queueRaw) {
 }
 const STEER_CAS_ATTEMPTS = 8;
 const EXECUTION_RECORD_CAS_ATTEMPTS = 8;
-export const CTX_CLAIM_REWRITES = ["written", "claim_released", "context_absent"];
 export class SqlCheckpointStore {
     db;
     logger;
@@ -477,7 +349,7 @@ export class SqlCheckpointStore {
         const r = rows[0];
         if (!r)
             return null;
-        const cp = refusing("a checkpoint nobody can resume", () => decodeCheckpointColumn(r.checkpoint, `for token ${tokenFingerprint(token)}`));
+        const cp = readCheckpointBodyOrRefuse(r.checkpoint, `for token ${tokenFingerprint(token)}`);
         cp.status = r.status;
         const outcomeRaw = refusing("a decision record nobody can read", () => decodeOutcomeColumn(r.outcome, `for token ${tokenFingerprint(token)}`));
         if (outcomeRaw)
@@ -679,13 +551,21 @@ export class SqlCheckpointStore {
             return { rowVerdict: verdictOfUnreadableBody(r.checkpoint) };
         }
         let summary;
+        const disclosed = [];
         try {
-            summary = summarizeCheckpoint(cp, discloseFor?.(cp), memo?.rowVerdict);
+            summary = summarizeCheckpoint(cp, (sentence) => disclosed.push(sentence), memo?.rowVerdict);
         }
         catch {
             recordFailOpen("server.approvals.park-row-blob-unreadable");
             return { rowVerdict: judgeCheckpointRow(cp) };
         }
+        if (isUnreadableSummaryForm(summary)) {
+            recordFailOpen("server.approvals.park-row-blob-unreadable");
+            return { rowVerdict: summary.rowVerdict };
+        }
+        const seat = discloseFor?.(cp);
+        for (const sentence of disclosed)
+            seat?.(sentence);
         if (memo === undefined)
             this.storedRowMemo.set(sha256, { rowVerdict: summary.rowVerdict, skillCardFacts: skillCardFacts(summary) });
         return { rowVerdict: summary.rowVerdict, summary };
@@ -894,47 +774,6 @@ export class SqlCheckpointStore {
         }
         return out;
     }
-    async scanKindlessBatchRows() {
-        const out = [];
-        let unreadableCells = 0;
-        const tolerant = (read) => {
-            try {
-                return read();
-            }
-            catch (e) {
-                if (!isJsonColumnBodyProblem(e))
-                    throw e;
-                unreadableCells += 1;
-                return undefined;
-            }
-        };
-        const prefilter = (d) => `(rule_suggestions IS NOT NULL OR ${jsonColumnTextExpr(d, "checkpoint", PARK_ROW_PENDING_ACTION.key)} LIKE '%"batch"%')`;
-        let after = "";
-        for (;;) {
-            const { rows } = await this.db.query(this.q(`SELECT token, ${jsonColumnText("mysql", "rule_suggestions")}, ${jsonColumnText("mysql", "checkpoint", PARK_ROW_PENDING_ACTION)} FROM checkpoint WHERE token > ? AND ${prefilter("mysql")} ORDER BY token LIMIT ${KINDLESS_SCAN_PAGE}`, `SELECT token, ${jsonColumnText("pg", "rule_suggestions")}, ${jsonColumnText("pg", "checkpoint", PARK_ROW_PENDING_ACTION)} FROM checkpoint WHERE token > $1 AND ${prefilter("pg")} ORDER BY token LIMIT ${KINDLESS_SCAN_PAGE}`), [after]);
-            for (const row of rows) {
-                const token = String(row.token);
-                after = token;
-                const carriers = [];
-                const column = tolerant(() => decodeNullableJsonColumn(row.rule_suggestions, readJsonArrayColumn, "checkpoint.rule_suggestions (kind-less batch census)"));
-                if (countKindlessBatchOffers(boundedReaderInput(column)) > 0)
-                    carriers.push("rule_suggestions");
-                const pendingAction = tolerant(() => decodeNullableJsonColumn(row[PARK_ROW_PENDING_ACTION.as], readJsonObjectColumn, "checkpoint.checkpoint pendingAction member (kind-less batch census)"));
-                if (typeof pendingAction === "object" && pendingAction !== null) {
-                    const blobOffers = Reflect.get(pendingAction, "ruleOffers");
-                    if (blobOffers !== undefined && !Array.isArray(blobOffers))
-                        unreadableCells += 1;
-                    else if (countKindlessBatchOffers(blobOffers) > 0)
-                        carriers.push("pendingAction.ruleOffers");
-                }
-                if (carriers.length > 0)
-                    out.push({ ref: tokenFingerprint(token), carriers });
-            }
-            if (rows.length < KINDLESS_SCAN_PAGE)
-                break;
-        }
-        return { rows: out, unreadableCells };
-    }
     async reapCtx(cutoff) {
         const res = await this.db.query(this.q("DELETE FROM checkpoint_ctx WHERE updated_at_ms < ? " +
             "AND session_id NOT IN (SELECT session_id FROM checkpoint WHERE status='pending') " +

package/dist/{plugins → stores-sql}/mailbox-store-sql.d.ts

@@ -1,8 +1,8 @@
 import type { Pool as MySqlPool } from "mysql2/promise";
 import type { Pool as PgPool } from "pg";
 import type { MailboxAckResult, MailboxAppendMessage, MailboxDecision, MailboxDecisionOutcome, MailboxLease, MailboxRecipientTombstone, MailboxStore } from "@sema-agent/core";
-import { type IndexSpec } from "./ensure-index.js";
-import type { SqlDialect } from "./sql-driver.js";
+import { type IndexSpec } from "../plugins/ensure-index.js";
+import type { SqlDialect } from "../plugins/sql-driver.js";
 export declare const MAILBOX_TABLE = "mailbox";
 export declare const MAILBOX_MSG_TABLE = "mailbox_message";
 /** [ref] 收件人墓碑表(预删除态的**唯一**真源;形与理由见 `mailbox-recipient-lifecycle.ts` 模块头)。

package/dist/{plugins → stores-sql}/mailbox-store-sql.js

@@ -1,10 +1,10 @@
 import { isUtf8 } from "node:buffer";
 import { MAILBOX_CONSUMED_ID_WINDOW, MAILBOX_INVALID_PEER_META_CODE, MAILBOX_RECORD_ID_MAX_CHARS, MAILBOX_REPLAY_FACETS, MAILBOX_TOMBSTONED_RECIPIENT_CODE, MailboxStoreError, assertMailboxDecisionMove, judgeMailboxAppendById, mailboxReplayDigests, readMailboxAppend, readMailboxPeerMeta, readStoredMailboxDecision } from "@sema-agent/core";
-import { pgHasUnstorable, pgSanitizeText, PgUnstorableError } from "./pg-safe-json.js";
+import { pgHasUnstorable, pgSanitizeText, PgUnstorableError } from "../plugins/pg-safe-json.js";
 import { isWellFormedUnicode } from "../principal-jwt.js";
-import { ensureIndexes } from "./ensure-index.js";
-import { escapeLike } from "./sql-escape.js";
-import { SqlJsonColumnError, decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, isJsonColumnBodyProblem, jsonColumnText, readStringArrayColumn } from "./sql-json-column.js";
+import { ensureIndexes } from "../plugins/ensure-index.js";
+import { escapeLike } from "../plugins/sql-escape.js";
+import { SqlJsonColumnError, decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, isJsonColumnBodyProblem, jsonColumnText, readStringArrayColumn } from "../plugins/sql-json-column.js";
 export const MAILBOX_TABLE = "mailbox";
 export const MAILBOX_MSG_TABLE = "mailbox_message";
 export const MAILBOX_TOMBSTONE_TABLE = "mailbox_tombstone";

package/dist/{plugins → stores-sql}/roster-store-sql.d.ts

@@ -22,8 +22,8 @@
  */
 import type { Pool } from "mysql2/promise";
 import { type RosterStore, type RosterEntry, type RosterAccess } from "@sema-agent/core";
-import type { PgQueryFn } from "./pg-query.js";
-import { type IndexSpec } from "./ensure-index.js";
+import type { PgQueryFn } from "../plugins/pg-query.js";
+import { type IndexSpec } from "../plugins/ensure-index.js";
 export declare const ROSTER_TABLE = "agent_roster";
 export declare function ensureTiDBRosterSchema(pool: Pool): Promise<void>;
 /** [ref]:本 store 的索引**声明**(两方言共用一份)。PG 侧由下面的 `ensurePgRosterSchema` 应用,MySQL 侧由 `tidb-pool.ts` 的中央 `ensureSchema` 应用(那里内联 `KEY` 已在 `CREATE TABLE` 里 ⇒ 新建库探到即零 DDL,存量库缺谁补谁)。加索引以外的 schema 变更仍归运维,见 `plugins/ensure-index.ts` 头注。 */

package/dist/{plugins → stores-sql}/roster-store-sql.js

@@ -1,5 +1,5 @@
 import { normalizeAgentName } from "@sema-agent/core";
-import { ensureIndexes } from "./ensure-index.js";
+import { ensureIndexes } from "../plugins/ensure-index.js";
 export const ROSTER_TABLE = "agent_roster";
 function rowToEntry(r) {
     return {

package/dist/{plugins → stores-sql}/tool-result-store-sql.d.ts

@@ -1,9 +1,9 @@
 import type { ToolResultProvenance, ToolResultStore, ToolResultSlice, ToolResultDeletionReport } from "@sema-agent/core";
 import type { Pool as MySqlPool } from "mysql2/promise";
 import type { Pool as PgPool, PoolClient as PgPoolClient } from "pg";
-import { type SqlDriver, type SqlDialect } from "./sql-driver.js";
+import { type SqlDriver, type SqlDialect } from "../plugins/sql-driver.js";
 import type { RetentionDeclaration } from "@sema-agent/core";
-import { type IndexSpec } from "./ensure-index.js";
+import { type IndexSpec } from "../plugins/ensure-index.js";
 /** PG schema for the tool_result table — the PG translation of tidb-pool.ts's tool_result DDL
  *  (LONGTEXT→TEXT, DATETIME(3)→TIMESTAMPTZ(3), inline KEY→separate CREATE INDEX). Disjoint from other stores'
  *  tables, so a self-contained ensureSchema is safe (central pg-pool aggregation is done separately). */

package/dist/{plugins → stores-sql}/tool-result-store-sql.js

@@ -1,10 +1,10 @@
 import { MAX_MINTED_TOOL_RESULT_REF_CHARS, assertSafeToolResultRef, assertToolResultProvenanceMatch, normalizeToolResultProvenance } from "@sema-agent/core";
-import { pgSanitizeText } from "./pg-safe-json.js";
-import { mysqlDriver, pgDriver } from "./sql-driver.js";
-import { MANAGED_RETENTION, UNMANAGED_RETENTION } from "./retention-store-sql.js";
-import { ensureIndexes } from "./ensure-index.js";
-import { describeProbedTableDrift, schemaWaysOut } from "./schema-drift-sentence.js";
-import { isMissingColumnError } from "./sql-errors.js";
+import { pgSanitizeText } from "../plugins/pg-safe-json.js";
+import { mysqlDriver, pgDriver } from "../plugins/sql-driver.js";
+import { MANAGED_RETENTION, UNMANAGED_RETENTION } from "../plugins/retention-store-sql.js";
+import { ensureIndexes } from "../plugins/ensure-index.js";
+import { describeProbedTableDrift, schemaWaysOut } from "../plugins/schema-drift-sentence.js";
+import { isMissingColumnError } from "../plugins/sql-errors.js";
 export const PG_TOOL_RESULT_SCHEMA = [
     `CREATE TABLE IF NOT EXISTS tool_result (
      ref              VARCHAR(518) COLLATE "C" NOT NULL,

package/dist/{plugins → stores-sql}/workflow-journal-store-sql.d.ts

@@ -8,7 +8,7 @@
  * {@link import("@sema-agent/core").InMemoryWorkflowJournalStore} (single-replica, lost on crash); this is the
  * byte-match durable twin so a workflow survives a replica crash and RESUMES (replay the longest unchanged
  * PREFIX of recorded `ctx.agent` results, run only the first changed/new call + everything after it live). The
- * journal is LOAD-BEARING (unlike the best-effort {@link import("./run-store-sql.js")} observation layer):
+ * journal is LOAD-BEARING (unlike the best-effort {@link import("../plugins/run-store-sql.js")} observation layer):
  * append/load failures MUST throw — a silently-dropped entry would silently re-run already-done work.
  *
  * Schema = two tables (DDL in tidb-pool.ts / pg-pool.ts ensureSchema), the SQL normal form of core's per-run
@@ -36,7 +36,7 @@
  *     `run_id = ? AND scope = ?`.
  * Why the owner record's incarnation is in the row's PRIMARY KEY (one rule: **a row belongs to the owner record that
  * wrote it — readable only through it, overwritable only by a write made through it**): a write can outlive the owner
- * record it was judged against — `deleteByRun` / the GC sweep racing an append, an append stalled between its two
+ * record it was judged against — the GC sweep racing an append, an append stalled between its two
  * statements. Keyed and joined on run_id alone, (a) a leftover row would be adopted by the next claim of that run_id by
  * ANY scope, and (b) on PostgreSQL READ COMMITTED a stale guarded write whose SELECT still saw the old record would, via
  * the ON CONFLICT arm (which updates a row its snapshot never saw, without re-checking the source), overwrite the NEW
@@ -77,7 +77,7 @@
 import type { Pool as MySqlPool } from "mysql2/promise";
 import type { Pool as PgPool } from "pg";
 import { type WorkflowJournalEntry, type WorkflowJournalStore } from "@sema-agent/core";
-import { type SqlDriver } from "./sql-driver.js";
+import { type SqlDriver } from "../plugins/sql-driver.js";
 /** Dual-dialect durable WorkflowJournalStore. See the file header for the dialect-delta ledger. */
 /** [ref] 租约旋钮。TTL 只是**崩溃兜底**(engine 终态 finally 显式释放;[ref]/[ref] 两层分工:
  *  engine 崩了没释放 ⇒ 陈旧 claim 可被接管)。
@@ -137,11 +137,6 @@ export declare class SqlWorkflowJournalStore implements WorkflowJournalStore {
     private oversizeCellOf;
     /** 读面的**唯一**行读法(`loadPage` 的块读与超门行的单条读共用):序数 ≥ `from` 的至多 `limit` 行,字节超 `inlineBytes` 的行 `resultJson` 为 null(只回 `resultBytes`)。 */
     private readRows;
-    /** GC — purge ALL journal entries for a run (every incarnation), then its owner row ([ref]). Scoped by run_id alone;
-     *  idempotent (returns the journal rows removed). Mirrors the resume-anchor store's deleteBySession. An append racing the
-     *  two DELETEs can leave a row behind without its owner record; it is keyed by the dead incarnation — readable and
-     *  overwritable by no one (file header) — and the GC sweep removes it by age. */
-    deleteByRun(runId: string): Promise<number>;
     /** [ref] / WF2([ref] core 拍板 a 形,签名逐字)—— cross-replica resume admission lease。
      *
      *  语义(bake-store `idem_key UNIQUE` 先例):PK (source_run_id, scope) 上的原子赢或观察。四步,每步
@@ -165,10 +160,10 @@ export declare class SqlWorkflowJournalStore implements WorkflowJournalStore {
         newRunId: string;
         scope: string;
     }): Promise<void>;
-    /** GC — time-based sweep: purge journal entries older than `maxAgeMs` (created_at_ms < now - maxAgeMs). The
-     *  per-run deleteByRun has no production caller (a run-store reap gives no per-run hook), so this bounded sweep
-     *  — wired into the service reaper — is what keeps the heaviest table (TaskResult-bearing) from growing without
-     *  bound. A resume of a journal older than the retention window simply re-runs live (resume is an optimization).
+    /** GC — time-based sweep: purge journal entries older than `maxAgeMs` (created_at_ms < now - maxAgeMs). This is the
+     *  journal's ONE delete path (the engine's contract has no per-run delete; its File store's was retired in core 7.61.0,
+     *  and this store's went with it) — wired into the service reaper, it is what keeps the heaviest table
+     *  (TaskResult-bearing) from growing without bound. A resume of a journal older than the retention window simply re-runs live (resume is an optimization).
      *  Idempotent; returns the journal rows purged.
      *
      *  [ref]: the same cutoff then purges owner rows whose OWN clock (`appended_at_ms`, pushed by every append of the

package/dist/{plugins → stores-sql}/workflow-journal-store-sql.js

@@ -1,9 +1,9 @@
 import { callKeyOrdinal } from "@sema-agent/core";
 import { assertJournalEntryFits } from "@sema-agent/core";
-import { journalEntryOfCell, journalRowPayloadOf } from "./workflow-journal-payload.js";
+import { journalEntryOfCell, journalRowPayloadOf } from "../plugins/workflow-journal-payload.js";
 import { randomUUID } from "node:crypto";
-import { mysqlDriver, pgDriver } from "./sql-driver.js";
-import { jsonColumnText, jsonColumnTextExpr } from "./sql-json-column.js";
+import { mysqlDriver, pgDriver } from "../plugins/sql-driver.js";
+import { jsonColumnText, jsonColumnTextExpr } from "../plugins/sql-json-column.js";
 const DEFAULT_RESUME_CLAIM_TTL_MS = 60 * 60 * 1000;
 const INT_MIN = -2147483648;
 const INT_MAX = 2147483647;
@@ -75,11 +75,6 @@ export class SqlWorkflowJournalStore {
         const { rows } = await this.db.query(this.q(`SELECT ordinal, call_key, CASE WHEN LENGTH(result) > ? THEN NULL ELSE ${jsonColumnTextExpr("mysql", "result")} END AS result_json, LENGTH(result) AS result_bytes FROM workflow_journal JOIN workflow_journal_owner USING (run_id, incarnation) WHERE run_id = ? AND scope = ? AND ordinal >= ? ORDER BY ordinal ASC LIMIT ?`, `SELECT ordinal, call_key, CASE WHEN OCTET_LENGTH(result) > $3 THEN NULL ELSE ${jsonColumnTextExpr("pg", "result")} END AS result_json, OCTET_LENGTH(result) AS result_bytes FROM workflow_journal JOIN workflow_journal_owner USING (run_id, incarnation) WHERE run_id = $1 AND scope = $2 AND ordinal >= $4 ORDER BY ordinal ASC LIMIT $5`), params);
         return rows.map((r) => ({ ordinal: Number(r.ordinal), callKey: String(r.call_key), resultJson: r.result_json === null ? null : String(r.result_json), resultBytes: Number(r.result_bytes) }));
     }
-    async deleteByRun(runId) {
-        const res = await this.db.query(this.q("DELETE FROM workflow_journal WHERE run_id = ?", "DELETE FROM workflow_journal WHERE run_id = $1"), [runId]);
-        await this.db.query(this.q("DELETE FROM workflow_journal_owner WHERE run_id = ?", "DELETE FROM workflow_journal_owner WHERE run_id = $1"), [runId]);
-        return res.affected;
-    }
     async resumeClaim(input) {
         const now = Date.now();
         const ins = await this.db.query(this.q("INSERT IGNORE INTO workflow_resume_claim (source_run_id, scope, new_run_id, claimed_at_ms) VALUES (?, ?, ?, ?)", "INSERT INTO workflow_resume_claim (source_run_id, scope, new_run_id, claimed_at_ms) VALUES ($1, $2, $3, $4) ON CONFLICT (source_run_id, scope) DO NOTHING"), [input.sourceRunId, input.scope, input.newRunId, now]);

package/dist/task-settings.d.ts

@@ -195,6 +195,13 @@ export declare function skillListingBudgetFractionOk(v: unknown): v is number;
 /** {@link skillListingBudgetFractionOk} 的孪生(`int().positive()`;`isSafeInteger` 而不是 `isInteger` 的
  *  理由见那里)。 */
 export declare function skillListingMaxDescOk(v: unknown): v is number;
+/**
+ * `settings.autoCompactEnabled`(CC 2.1.309 settings 同名键,`cli309.js:252692` 的 settings 声明:布尔,「上下文装满时自动压缩对话」)的值域判据 —— **只收布尔**。
+ * 与上面两只谓词同姿势:FRESH 提交面的 400 门(`http/admission.ts`)问「合不合法」,RESUME 宽容层({@link parseTaskSettings})问「收不收下」,
+ * 这两句话是同一个问题的正反面,只写在这一处(`"false"` / `0` / `null` 这类假值形都不是布尔:不读成「开」也不读成「关」)。
+ * server 侧零加工:`true` / `false` 逐字交给引擎的自动压缩座 `TaskSpec.compaction.autoCompact`(`spec-fields.ts` 的 `compactionSpecFragment`),缺席 ⇒ 整键不写,默认值的属主是引擎。
+ */
+export declare function autoCompactEnabledOk(v: unknown): v is boolean;
 /** The validated, service-trusted subset of `SemaSettings` we project onto the spec. `env` is parsed only to REPORT
  *  it as received-but-deferred when off the host lane (never silently dropped); a MALFORMED `hooks` likewise reports
  *  deferred (submit 路径另有 400 fail-loud),valid `hooks` 进 applied shape(hook-runner 阶段一)。 */
@@ -233,7 +240,7 @@ export interface ParsedTaskSettings {
     ultracode?: boolean;
     /** hooks hook-runner(阶段一):经 `parseHooksConfig`(契约包分类器 + 服务侧上限 + 本仓会跑的条目类型)判过的 hooks 配置。像 shellEnv 一样
      *  这里只 PARSE;应用点(main.ts resolveSpec)按单用户闸(`requirePrincipal !== true`)决定翻不翻成
-     *  任务座 `TaskSpec.mods` 上的一张注册 `settings.hooks`——多租户 lane 收到只警告忽略(hook 命令跑在 worker host = class ② 能力授予)。 */
+     *  任务座 `TaskSpec.mods` 上的车道注册(非托管 `settings.hooks`,有托管组时另一张 `settings.hooks.managed`)——多租户 lane 收到只警告忽略(hook 命令跑在 worker host = class ② 能力授予)。 */
     hooks?: RunnableHooksConfig;
     /** [ref](7.77.0)—— CC settings 同名键:上下文窗口里**留给技能清单**的比例((0,1];CC 默认 0.01 = 1%)。
      *  超预算时引擎把描述裁短、再不够退成 name-only(`cli259.js` 的清单渲染算法),**从不**拒掉一条技能 ——
@@ -242,6 +249,10 @@ export interface ParsedTaskSettings {
     skillListingBudgetFraction?: number;
     /** 同族第二键:每条技能描述在清单里的字符帽(正整数;CC 默认 1536)。超出由引擎**截断**,不是拒。 */
     skillListingMaxDescChars?: number;
+    /** `settings.autoCompactEnabled`(CC 2.1.309 settings 同名键,布尔):这条 run 的自动压缩开关。逐字交给引擎的自动压缩座 `TaskSpec.compaction.autoCompact`
+     *  (写点 = `boot/resolve-spec.ts` 经 `spec-fields.ts` 的 `compactionSpecFragment`,与顶层 `compaction.clampTolerance` 同一只映射)。
+     *  `false` 是有意义的值(不是「没设」),所以 {@link parseTaskSettings} 把它收下、`settings` 因它在场。缺席 ⇒ 整键不写。 */
+    autoCompactEnabled?: boolean;
     /** [ref] —— 「只收紧」座位族(`tighten-only-seats.ts` 的四座:读拒模式 / 写保护名的加法 / 合规额外禁项 / 永不自动放行名单)的归一值,**一个键**而不是四个散字段:
      *  wire 位置由座位表说(三座在 `settings` 顶层,`neverAuto` 在 `settings.permissions`),解析后与位置无关。空数组 ≡ 缺席(不铸键)。
      *  去处:三座经 {@link applyTaskSettings} 落 core 任务层席;`neverAuto` 经 {@link deriveSettingsPolicy} 落请求叶策略。 */
@@ -263,9 +274,11 @@ export interface ParseTaskSettingsResult {
         readonly stripped: readonly string[];
     };
 }
-/** `parseTaskSettings` 的可选座:续跑重放腿才有的重读座(一次性迁移 M20;新提交腿与不问 hooks 的读者不递)。 */
+/** `parseTaskSettings` 的可选座:续跑重放腿才有的重读座(一次性迁移 M20;新提交腿与不问 hooks 的读者不递)与调用方已读(并已判)的 `settings.env` 那一份。 */
 export interface ParseTaskSettingsSeats {
     readonly storedHooksReread?: StoredHooksRereadM20;
+    /** {@link readSettingsEnv} 的一次读数(`resolveSpec` 两腿恒递:凭据判据判的就是这一份,解析层不再读第二次;续跑腿 M38 剥过键的是剥后那一份)。缺席 ⇒ 解析层自己读一次(不交子进程的读者)。 */
+    readonly settingsEnv?: SettingsEnvLayer;
 }
 /** Cap on `outputStyle` length — it lands in the system prompt, so it shares the `MAX_SYSTEM_PROMPT_CHARS` (16384)
  *  posture (an uncapped prompt body is a per-turn token-cost hole; cross review). Exported so the HTTP layer
@@ -275,6 +288,40 @@ export declare const MAX_SETTINGS_OUTPUT_STYLE_CHARS = 16384;
 export declare const MAX_SETTINGS_ENV_VARS = 256;
 export declare const MAX_SETTINGS_ENV_VALUE_CHARS = 32768;
 export declare const MAX_SETTINGS_ENV_KEY_CHARS = 256;
+/** 一条 `settings.env` 条目被判成凭据的根据(闭集;wire 字段 `entries[].match` 的全部词):`name` = 名字是本进程的凭据变量名;`value_shape` = 值是秘密形。两者都中按 `name` 报。 */
+export declare const SETTINGS_ENV_CREDENTIAL_MATCHES: readonly ["name", "value_shape"];
+export type SettingsEnvCredentialMatch = (typeof SETTINGS_ENV_CREDENTIAL_MATCHES)[number];
+/** 拒体的机读位(原样进 wire 错误体 / `HttpError.extra`):`field` 恒为 `settings.env`;`entries` 按体内序列出每一条命中,键名过调用方串的唯一回显口径,值从不进来。 */
+export interface SettingsEnvCredentialFields {
+    readonly field: "settings.env";
+    readonly entries: readonly {
+        readonly key: string;
+        readonly match: SettingsEnvCredentialMatch;
+    }[];
+}
+/** 一次裁决的产物:wire 文案 + 机读位 + 命中条目的**原键**(`keys`:不出门,只给续跑腿的一次性迁移按键剥)。 */
+export interface SettingsEnvCredentialIssue {
+    readonly message: string;
+    readonly fields: SettingsEnvCredentialFields;
+    readonly keys: readonly string[];
+}
+/** `settings.env` 的一次读数:`sent` = 调用方送了这个键(不是缺席 / `null`);`reaching` = 会交到子进程的那几条({@link cleanEnvMap};形不对 / 没有一条够格 ⇒ `undefined`;一次性迁移 M38 剥空的是 `{}`,见 {@link withoutKeys})。 */
+export interface SettingsEnvLayer {
+    readonly sent: boolean;
+    readonly reaching: Readonly<Record<string, string>> | undefined;
+}
+/** `settings.env` 的**唯一**读法:`settings` 不是对象 ⇒ 没送;否则 `env` 只取一次,形判与收取都对这一次的值做。判据、解析层与续跑腿的剥键都吃这一份。 */
+export declare function readSettingsEnv(settings: unknown): SettingsEnvLayer;
+/**
+ * `settings.env` 里凭据条目的**唯一**判据(纯函数;律见上方段头)。`reaching` = {@link readSettingsEnv} 读出的那一份(会交到子进程的条目;非串值、超帽的键 / 值本来就到不了子进程;
+ * 缺席 / 形不对 ⇒ `undefined` ⇒ 不判,形归受理门的形判)。`credentialNames` = 本进程的凭据变量名(调用方递 `serverCredentialValueSources(config.modelApiKeyEnv)`)。没有命中 ⇒ `null`。
+ */
+export declare function settingsEnvCredentialIssue(reaching: Readonly<Record<string, string>> | undefined, credentialNames: readonly string[]): SettingsEnvCredentialIssue | null;
+/**
+ * 一次性迁移 M38(窗口见 `plugins/one-time-migrations.ts` 登记表):从读到的那一份里去掉判据点名的原键,交回剥后的一份。**剥空 = 空表**(调用方送了这一块,剥完什么都不剩):
+ * 解析层把它当作这次请求的环境层原样交出,`resolveSpec` 登记它 —— 覆盖这条会话上一条登记;若读成「缺席」,会话注册表按「缺席 = 留着上一条」把上一条(可能正是被剥的那个名字)留给 shell。
+ */
+export declare function withoutKeys(layer: SettingsEnvLayer, keys: readonly string[]): SettingsEnvLayer;
 /** 三桶(闭集;判据按此序逐桶判)。 */
 export declare const SETTINGS_PERMISSION_BUCKETS: readonly ["allow", "deny", "ask"];
 export type SettingsPermissionBucket = (typeof SETTINGS_PERMISSION_BUCKETS)[number];
@@ -305,7 +352,7 @@ export interface SettingsPermissionBucketIssue {
  */
 export declare function settingsPermissionBucketIssue(perms: unknown): SettingsPermissionBucketIssue | null;
 /** 本 service 真正**消费**的 `settings` 顶层键 —— 闭集。每一个都有消费点:
- *  `env`/`hooks`/`model`/`outputStyle`/`permissions`/`ultracode` 与两个 `skillListing*` 在
+ *  `autoCompactEnabled`/`env`/`hooks`/`model`/`outputStyle`/`permissions`/`ultracode` 与两个 `skillListing*` 在
  *  {@link parseTaskSettings};`webSearch` 在 `capabilities/scenarios.ts`(判决 `judgeRequestWebSearch`,单用户闸;形错在受理面 400,[ref])。
  *  加键必须同时加消费点,否则就是往闭集里塞一个新的静默丢。
  *
@@ -322,10 +369,18 @@ export declare function settingsPermissionBucketIssue(perms: unknown): SettingsP
  *  消费点 = 本文件的 parse + `boot/resolve-spec.ts` 的 `TaskSpec` 透传。语义(预算怎么花、描述怎么裁、
  *  溢出怎么退成 name-only)整个归引擎,本仓一个字节都不渲染,也**不复刻默认值**——缺席即整键不写。
  *
+ *  🔴 `autoCompactEnabled` = **CC settings 同名键**(2.1.309 的 settings 声明,布尔):这条 run 的自动压缩开关,值域只收布尔({@link autoCompactEnabledOk},两层同问这一只);
+ *  消费点 = 本文件的 parse + `boot/resolve-spec.ts` 经 `spec-fields.ts` 的 `compactionSpecFragment` 逐字交给引擎的自动压缩座 `TaskSpec.compaction.autoCompact`(与顶层 `compaction.clampTolerance` 同一只映射、同一个对象)。
+ *  关掉的是引擎**自起**的三条道(窗阈值那一遍、prompt-too-long 恢复那一遍、任务尾摘要):守卫链先清旧工具结果、再按尾部裁剪 → 仍装不下则服务商的「prompt too long」拒原样成为
+ *  这条 run 的失败终局(不摘要、不重试);怎么终局整个归引擎,本仓不复刻、不夹紧。调用方要的那一遍(`POST /v1/runs/:id/compact`)归引擎的另一只座 `manualCompact`,
+ *  本服务不写它 ⇒ 关了自动压缩,手动 `/compact` 照样能跑(与参照实现的 `autoCompactEnabled` 同读)。壳的环境变量 `DISABLE_AUTO_COMPACT` / `DISABLE_COMPACT`
+ *  不在本服务的读法里:环境变量是壳进程的事 —— 壳把两者都折成 `autoCompactEnabled: false` 再发;`DISABLE_COMPACT` 多出的「手动也关」由壳自己不发 `/compact` 动词实现
+ *  (本服务不另读 `settings.env` 里的同名变量 —— 那是 shell 子进程的环境,不是引擎的开关)。
+ *
  *  🔴 `allowedHttpHookUrls` / `httpHookAllowedEnvVars` = **CC settings 同名键**(契约包的 http hook 两张名单,键表属主 = 契约包 `HTTP_HOOK_ALLOWLIST_KEYS`):
  *  消费点 = {@link parseTaskSettings} 把它们原样收成一层({@link requestHttpHookAllowlistLayer})→ `boot/resolve-spec.ts` 交给 hooks 注册 → `hooks/hook-runner.ts` 的 http 腿
  *  在拨出之前问契约包判官。受理面只判键名(本门),不判值:名单的读法只有判官那一只(坏形由判官答 `malformed`、拦)。 */
-export declare const TASK_SETTINGS_KEYS: readonly ["allowedHttpHookUrls", "approvalFrameFamilies", "complianceAdditionalDenies", "env", "hooks", "httpHookAllowedEnvVars", "model", "outputStyle", "permissions", "readDenyPatterns", "skillListingBudgetFraction", "skillListingMaxDescChars", "ultracode", "webSearch", "writeProtectedExtra"];
+export declare const TASK_SETTINGS_KEYS: readonly ["allowedHttpHookUrls", "approvalFrameFamilies", "autoCompactEnabled", "complianceAdditionalDenies", "env", "hooks", "httpHookAllowedEnvVars", "model", "outputStyle", "permissions", "readDenyPatterns", "skillListingBudgetFraction", "skillListingMaxDescChars", "ultracode", "webSearch", "writeProtectedExtra"];
 /** 本 service 消费的 `settings.permissions` 子键 —— 闭集(值形校验另有既有门,本门只判键名)。 */
 export declare const TASK_SETTINGS_PERMISSION_KEYS: readonly ["allow", "ask", "defaultMode", "deny", "disableAutoMode", "neverAuto"];
 /** CC/SDK 合约里合法、本 service **不接线**的顶层键。词表外的 CC 键落 `unknown` —— 两列都是 400,标签只影响