@sema-agent/server 7.146.0 → 7.148.0

package/dist/http/run-read-face.js

@@ -1,23 +1,18 @@
-import { persistedPlaneOf } from "../terminal.js";
 import { memoRedactedRead, memoRedactTerminalResult, redactErrorMessage, sealStoredRunRowResult } from "../observability/run-terminal.js";
-import { RUN_HOLDER_DEATH_CODES, isTerminalRunStatus } from "../plugins/store-contracts.js";
+import { isTerminalRunStatus } from "../plugins/store-contracts.js";
 import { composeSupervisorCost, infraCost, infraUsageFromEvents, hasInfraPricing } from "../observability/cost-taxonomy.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { readTurnActivityMs } from "../turn-activity.js";
 import { buildCrossSliceUsage, readResourceWindow } from "../resource-window.js";
-export function runRowStale(deps, run) {
-    return run.status === "running" && Date.now() - new Date(run.updatedAt).getTime() > deps.config.runStaleSec * 1000;
-}
 export function runRowExitResult(run) {
     return isTerminalRunStatus(run.status) ? memoRedactTerminalResult("run.result", run.result ?? undefined) : (sealStoredRunRowResult(run.result ?? null, "run.result") ?? undefined);
 }
 export async function readRunFace(deps, runStore, run) {
     const taskId = run.taskId;
-    const stale = runRowStale(deps, run);
     const infraRates = deps.config.infraCostRates;
-    const needCost = Boolean(run.result?.stats && !stale && infraRates && hasInfraPricing(infraRates));
-    const needSuggestions = !stale && run.status === "completed";
-    const resourceWindow = run.status === "running" && !stale ? readResourceWindow(run.taskId) : undefined;
+    const needCost = Boolean(run.result?.stats && infraRates && hasInfraPricing(infraRates));
+    const needSuggestions = run.status === "completed";
+    const resourceWindow = run.status === "running" ? readResourceWindow(run.taskId) : undefined;
     let events;
     let eventsUnavailable = false;
     if (needCost || needSuggestions || resourceWindow !== undefined) {
@@ -45,7 +40,7 @@ export async function readRunFace(deps, runStore, run) {
         if (Array.isArray(arr))
             suggestions = arr.map((s) => String(s));
     }
-    const lastActivityAt = run.status === "running" && !stale ? readTurnActivityMs(run.taskId) : undefined;
+    const lastActivityAt = run.status === "running" ? readTurnActivityMs(run.taskId) : undefined;
     let crossSliceUsage;
     if (resourceWindow !== undefined) {
         if (eventsUnavailable || events === undefined)
@@ -56,14 +51,14 @@ export async function readRunFace(deps, runStore, run) {
     return {
         taskId: run.taskId,
         sessionId: run.sessionId,
-        status: stale ? "failed" : run.status,
+        status: run.status,
         ...(lastActivityAt !== undefined ? { msSinceLastActivity: Math.max(0, Date.now() - lastActivityAt) } : {}),
         ...(crossSliceUsage !== undefined ? { crossSliceUsage } : {}),
         result: runRowExitResult(run),
         supervisorCost,
         suggestions,
-        errorCode: stale ? RUN_HOLDER_DEATH_CODES.stalled : (persistedPlaneOf(run.result).errorCode ?? run.errorCode ?? undefined),
-        error: stale ? "run stalled (instance lost?)" : isTerminalRunStatus(run.status) ? memoRedactedRead("run.error", run.error ?? undefined, redactErrorMessage) : redactErrorMessage(run.error ?? undefined),
+        errorCode: run.errorCode ?? undefined,
+        error: isTerminalRunStatus(run.status) ? memoRedactedRead("run.error", run.error ?? undefined, redactErrorMessage) : redactErrorMessage(run.error ?? undefined),
         jobId: run.jobId ?? undefined,
         source: run.source ?? undefined,
         heldBy: isTerminalRunStatus(run.status) ? null : (run.instanceId ?? null),

package/dist/http/send.d.ts

@@ -64,10 +64,12 @@ export declare function endSseWithError(res: ServerResponse, frame: {
     readonly message: string;
 }): void;
 export declare function sendJson(res: ServerResponse, status: number, body: unknown): void;
+/** HTTP 入口给每条响应挂上本部署的日志器(缺席 = 本部署没有日志器,与全局兜底同读)。 */
+export declare function attachResponseLogger(res: ServerResponse, logger: Logger | undefined): void;
 /** A6([ref] lens1 §C3/lens3 §C3a): canonical error-response sender for sites that already carry a
  *  machine `errorCode` — `errorCode` is a required positional arg (not optional-bag) so a call site
  *  cannot regress to the "code but no errorCode" shape the error-code-key-gate forbids. Body shape is
- *  `{ error: message, errorCode, ...extra }`; a site that used to ALSO emit a legacy `code` key keeps it
+ *  `{ error: message, errorCode, ...extra }` (written by the one refusal writer {@link sendRefusal}); a site that used to ALSO emit a legacy `code` key keeps it
  *  by passing `{ code: ... }` inside `extra` — this is a pure call-site migration (zero wire-contract
  *  change), not a new response shape. Sites where the two machine-code channels genuinely disagree, or
  *  where `error`/`errorCode` aren't cleanly separable from the rest of the body, are left on raw
@@ -93,13 +95,13 @@ export declare function invalidJsonError(reason: InvalidJsonReason): HttpError;
 export declare function httpErrorCode(status: number, code?: string): string;
 /**
  * 一只 `HttpError` 读成 {@link Refusal}:码经 {@link httpErrorCode}(带码的 throw 原样优先,否则按状态给粗码),句 = `message`,机读事实 = `extra`
- * (如场景门的 `detail: { scenario, source }`、条数帽的 `field` / `reason` / `count` / `cap`)。**拆 `HttpError` 的唯一一处** —— 别的站点自己拆
+ * (如场景门的 `scenario` / `source`、条数帽的 `field` / `reason` / `count` / `cap`)。**拆 `HttpError` 的唯一一处** —— 别的站点自己拆
  * `status` / `code` / `message` 拼体就丢了 `extra`(`test/refusal-one-composer.test.ts` 的静态门钉着)。
  */
 export declare function httpErrorRefusal(e: HttpError): Refusal;
 /** 一只 `HttpError` 的拒体成员 = {@link refusalBody}({@link httpErrorRefusal})。 */
 export declare function httpErrorBody(e: HttpError): RefusalBody;
-/** 整面拒:状态 = `e.status`,体 = {@link httpErrorBody}。手里拿着一只 `HttpError` 的路由站点一律调它。 */
+/** 整面拒:状态 = `e.status`,体 = {@link httpErrorRefusal} 经出线点 {@link sendRefusal}(与 {@link httpErrorBody} 同一只组句)。手里拿着一只 `HttpError` 的路由站点一律调它。 */
 export declare function sendHttpError(res: ServerResponse, e: HttpError): void;
 /**
  * 🔴 B1 / [ref] —— `SessionPolicyError` → 应答,经 {@link sessionPolicyErrorHttp} 那**一只**映射
@@ -135,4 +137,11 @@ export declare function msg(e: unknown): string;
  * codex r10 [high] 纵深:错误句可带凭据回显 ⇒ 先过 `redactHead`(有上限、不抛)。
  */
 export declare function logRequestError(logger: Logger | undefined, req: IncomingMessage, err: unknown): void;
+/**
+ * 一只抛出物的**栈顶帧**,写成 `<仓内路径>:<行>`(`request_error` 行的出处位:排障时「哪一行读到了 `undefined`」不必再复现)。
+ * 取栈的第一条读得出位置的帧(内建 / 匿名帧跳过);路径只留 `src/` · `dist/` · `node_modules/` 起的尾段 —— 宿主机的绝对前缀(用户目录 / 容器卷名)不出门;
+ * 不带列、不带函数名、不带消息体(消息已在 `err` 位,过它自己的脱敏)。读不出(非 `Error` / 无栈 / 无位置帧)⇒ `undefined`,调用点不写该键。
+ * 纯解析、无 catch:只读 `stack` 这一个成员(与 {@link msg} 读 `message` 同一姿势 —— 同一只抛出物读两个成员,守不守访问器是同一个问题,不在这里单独设一道兜底)。
+ */
+export declare function topFrameOf(err: unknown): string | undefined;
 //# sourceMappingURL=send.d.ts.map

package/dist/http/send.js

@@ -2,8 +2,9 @@ import { SessionError, SessionPolicyError } from "@sema-agent/core";
 import { sessionPolicyErrorFacts, sessionPolicyErrorHttp, sessionPolicyErrorSentence } from "../session-policy-wire.js";
 import { openFaceFaultWire, sessionErrorWireOf } from "../session-error-wire.js";
 import { redactErrorMessage, redactHead } from "../observability/run-terminal.js";
+import { seatText } from "../trace/exit-seat.js";
 import { createCodedHttpError } from "../security.js";
-import { refusalBody } from "./refusal-body.js";
+import { refusalBody, refusalWireBytes } from "./refusal-body.js";
 export const SSE_RESPONSE_MARK = Symbol("sema.http.sse-response");
 export function isSseResponse(res) {
     return res[SSE_RESPONSE_MARK] === true;
@@ -32,8 +33,27 @@ export function sendJson(res, status, body) {
     res.writeHead(status, { "content-type": "application/json" });
     res.end(JSON.stringify(body));
 }
+const RESPONSE_LOGGER = Symbol("sema.http.response-logger");
+export function attachResponseLogger(res, logger) {
+    if (logger !== undefined)
+        res[RESPONSE_LOGGER] = logger;
+}
+function sendRefusal(res, status, refusal) {
+    let bytes;
+    try {
+        bytes = refusalWireBytes(refusal);
+    }
+    catch (fault) {
+        const reported = new TypeError(`refusal ${refusal.errorCode} was not written: its facts carry a reserved key, or reading / serializing them threw`, { cause: fault });
+        logRequestError(res[RESPONSE_LOGGER], res.req, reported);
+        sendOpenFaceFault(res, reported);
+        return;
+    }
+    res.writeHead(status, { "content-type": "application/json" });
+    res.end(bytes);
+}
 export function sendError(res, status, errorCode, message, extra) {
-    sendJson(res, status, refusalBody(extra === undefined ? { errorCode, message } : { errorCode, message, facts: extra }));
+    sendRefusal(res, status, extra === undefined ? { errorCode, message } : { errorCode, message, facts: extra });
 }
 export const INVALID_JSON_REASONS = ["not_json", "not_object"];
 export const INVALID_JSON_MESSAGES = {
@@ -66,14 +86,14 @@ export function httpErrorBody(e) {
     return refusalBody(httpErrorRefusal(e));
 }
 export function sendHttpError(res, e) {
-    sendJson(res, e.status, httpErrorBody(e));
+    sendRefusal(res, e.status, httpErrorRefusal(e));
 }
 export function sendSessionPolicyError(res, e, sentencePrefix = "") {
     if (!(e instanceof SessionPolicyError))
         return false;
     const h = sessionPolicyErrorHttp(e.code);
     const facts = sessionPolicyErrorFacts(e);
-    sendError(res, h.status, h.errorCode, redactErrorMessage(`${sentencePrefix}${sessionPolicyErrorSentence(e)}`) ?? "session policy error", facts === undefined ? undefined : { ...facts });
+    sendError(res, h.status, h.errorCode, redactErrorMessage(`${sentencePrefix}${sessionPolicyErrorSentence(e)}`) ?? "session policy error", facts);
     return true;
 }
 export function sendSessionError(res, e, face) {
@@ -90,12 +110,28 @@ export function sendOpenFaceFault(res, e) {
 }
 function sendSessionWire(res, e, wire) {
     const sentence = wire.sentence ?? (e instanceof SessionError ? redactErrorMessage(e.message) : undefined) ?? "session store error";
-    sendError(res, wire.status, wire.errorCode, sentence, wire.detail === undefined ? undefined : { detail: wire.detail });
+    sendError(res, wire.status, wire.errorCode, sentence, wire.facts);
 }
 export function msg(e) {
     return e instanceof Error ? e.message : String(e);
 }
 export function logRequestError(logger, req, err) {
-    logger?.error("request_error", { method: req.method, url: req.url, err: redactHead(msg(err), 2000) });
+    const at = topFrameOf(err);
+    logger?.error("request_error", { method: req.method, url: req.url, err: redactHead(msg(err), 2000), ...(at !== undefined ? { at } : {}) });
+}
+const STACK_FRAME_LOCATION = /^\s*at (?:.*? \()?(?:file:\/\/)?(\/.*?|[A-Za-z]:[\\/].*?):(\d+):\d+\)?$/;
+export function topFrameOf(err) {
+    const stack = err instanceof Error ? err.stack : undefined;
+    if (typeof stack !== "string")
+        return undefined;
+    for (const line of stack.split("\n")) {
+        const m = STACK_FRAME_LOCATION.exec(line);
+        if (m === null)
+            continue;
+        const path = m[1].replace(/\\/g, "/");
+        const tail = /(?:^|\/)((?:src|dist|node_modules)\/.*)$/.exec(path)?.[1] ?? path.slice(path.lastIndexOf("/") + 1);
+        return seatText("operator-log-text", `${tail}:${m[2]}`);
+    }
+    return undefined;
 }
 //# sourceMappingURL=send.js.map

package/dist/http/server.d.ts

@@ -1,13 +1,14 @@
 import http from "node:http";
 import type { MemoryComplianceFaces, MemoryOriginFaces, SessionMemoryStatusFace } from "../memory-operator-faces.js";
 import type { SideQueryAccounting } from "../budget.js";
+import type { SessionPurgeOutcome } from "../session-deletion.js";
 import type { IncomingMessage } from "node:http";
 import { type Runner, type RunnerDeps, type TaskSpec, type TaskResult, type WorkflowRunStore, type MemoryEntry, type MemoryExportBundle, type MemoryImportReport, type SideQuerySpec, type SideQueryResult, type Brain, type EngineNotice } from "@sema-agent/core";
 import type { TaskRequestBody } from "./wire-types.js";
 import type { ServiceConfig } from "../config-types.js";
 import { type SessionMirrorRuling } from "../web-admin-client/facade.js";
 import type { RestartSignal } from "@sema-agent/settings-schema/fleet";
-import { type OwnerAwareSessionStore } from "../security.js";
+import { type AuthorizeInput, type OwnerAwareSessionStore } from "../security.js";
 import type { PeerDesk, PeerLease } from "../peer-seat.js";
 import type { ExecutionRoot, ResolvedTaskSpec } from "./execution-context.js";
 import type { RunStore, ImageIndex, ImageBake, CheckpointStoreFull, ResumeAnchorStore, ApprovalExemptionStore, ApprovalNonceStore, ServiceSessionPolicyStore, ServiceFileHistoryStore, ToolResultStoreFull, StoreBackend } from "../plugins/store-backend.js";
@@ -21,6 +22,7 @@ import type { SubagentSteerRegistry } from "../orchestration/subagent-steer.js";
 import { type WorkflowCompletionInbox } from "../orchestration/workflow-completion-inbox.js";
 import type { FleetLeaseManager } from "../fleet-lease.js";
 import { type FleetEventBus } from "../fleet/fleet-bus.js";
+import type { SessionResidentCounts } from "../session-resident-background.js";
 import type { ElicitationCoordinator } from "../elicitation.js";
 import type { QuestionCoordinator } from "../question.js";
 import { type ParkedAskRedeem, type ToolApprovalCoordinator } from "../tool-approval.js";
@@ -41,13 +43,17 @@ export { coarseStatusForState, errorCodeForExit };
 import type { SessionNotifyDoor } from "../session-notify-door.js";
 import { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills } from "./admission.js";
 import { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath } from "./route-table.js";
-export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath, hasServiceAuth };
+export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath };
 export { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills };
-import { explicitOperatorOk, hasServiceAuth } from "./principal-gate.js";
+import { explicitOperatorOk } from "./principal-gate.js";
 export { explicitOperatorOk };
 /** Per-request authorization context resolved before building the spec (identity, owned session). */
 export interface RequestAuth {
-    principal?: string;
+    /**
+     * 这次请求 / 这条腿的**主体**(分区键;`owner-brands.ts`):没带场景头 ⇒ 与验过的人逐字节同;带了 ⇒ `_scn:<场景>:<人>`。行属主 / 检查点 scope / 附件 / 锚读它,
+     * 人面(场景裁定 / 运维 / 治理 / 引擎 `spec.principal`)由装配器经 `partsOf` 解码出人。自建 authorizer 交它自己验过的那一只身份串(没有场景时就是人)。
+     */
+    subject?: string;
     sessionId: string;
     memoryScope?: string;
     /** 142-S4:the SHAPE-VALIDATED **且已归一(小写)** 的 `body.projectId`(authorizer 的 core
@@ -93,14 +99,13 @@ export interface ServiceCoreDeps {
      * 不带 ⇒ 现铸并登记)。省掉是编译错;绕过类型造的 deps 在 {@link createHttpServer} 入口拒启。单用户嵌入传
      * `createAuthorizer(config, runner.sessions)`(包根导出)—— 店没有属主读时它退化为只派 principal 与会话 id。
      */
-    authorize: (ctx: {
-        req: IncomingMessage;
-        body: TaskRequestBody;
-    }) => Promise<RequestAuth>;
+    authorize: (ctx: AuthorizeInput) => Promise<RequestAuth>;
     /**
      * Map an inbound request body + resolved auth to a TaskSpec. The SERVICE/deployment owns model
      * + tools + mcp here (callers only supply content). `auth` carries the principal-derived memory scope —
-     * prefer it over anything in the body.
+     * prefer it over anything in the body. The root session is not read from `auth` either: the resolver's one reading of
+     * "which session is this leg on" is `opts.execution.root` (`auth.sessionId` is the authorizer's hand-off to the server's
+     * execution-context resolver, not a second reading for the resolver).
      * The root session is NOT the resolver's to write: the return type carries no `sessionId`
      * (`ResolvedTaskSpec`); the server stamps the root the authorizer resolved onto every spec it executes
      * (`http/execution-context.ts` `stampSpecRoot`). A resolver that needs the root reads `opts.execution.root`.
@@ -155,7 +160,8 @@ export interface ServiceCoreDeps {
      * `principalCaps`、同一份部署缺省):凡回答「此主体在此场景能看见哪些 MCP 服务器 / A2A 对端」的口 —— `GET /v1/capabilities/mcp` 的状态面、
      * `GET /v1/sessions/:id/mcp` 与 `…/a2a` 两张会话面板 —— 的场景名都由它给,**点名与缺席都问**:点名 ⇒ 判在册 / allowlist,
      * 拒体(400 `scenario_unknown` 附在册词表 / 400 `scenario_not_allowed` 附 allowlist)与任务提交腿逐字同;缺席 ⇒ 指派链(中心 ruling 胜者,
-     * 否则部署缺省),与这位主体 run 时同一读法(指派悬空 ⇒ 503 `state.scenario_assignment_unknown`,同提交腿)。
+     * 否则部署缺省),与这位主体 run 时同一读法(指派悬空 ⇒ 503 `state.scenario_assignment_unknown`,同提交腿)。中心配了却答不出这位主体的裁定 ⇒
+     * 点名与缺席同答 503 `state.scenario_assignment_unavailable`(同提交腿)。
      * 读面上这只门走**只读腿**(`createScenarioGate(…, "peek")`):问中心裁定时 center 抖动的那一拍,不替这个主体的真提交留下 fail-closed 降级项
      * (提交腿自己是 `"enforce"`)。
      * 🔴 **必填**:读口的场景名只有这一个来源,没有「缺接缝 ⇒ 读部署缺省 / 点名 404」这类第二种读法 —— 漏接是**编译错**(嵌入方自己装配时,工厂与它的型从包根导出:
@@ -236,7 +242,8 @@ export interface ServiceStoreDeps {
     /** §0.5 session-ownership: the durable session abstraction (`SessionRepo`-style) the service OWNS — session
      *  IDENTITY/enumeration (E16 list) + lifecycle (E17 fork, E21 history delete) come from HERE, not the
      *  `task_run` runs ledger. When it carries `listSessions`, GET /v1/sessions sources sessions from the session
-     *  store (task_run only joins for run preview); `fork`/`deleteSession` enable the fork/delete routes. */
+     *  store (task_run only joins for the run-derived half of the row); without it the list answers 501 — the run store is
+     *  not a session lister. `fork` enables the fork route; the delete route rides `purgeSession` (the coordinator over the one session eraser). */
     sessionStorage?: OwnerAwareSessionStore;
     /**
      * [ref] —— 跨会话车道的**发现席**(core `RunnerDeps.peerDirectory`),与 `RunnerDeps` 侧**同一个对象**
@@ -283,7 +290,7 @@ export interface ServiceStoreDeps {
      *  已配 AND 有 store backend(main.ts 建;写点在两条 send lane 的 withLedgerRecording)。 */
     sendFileLedger?: import("../plugins/send-file-ledger.js").SendFileLedger;
     /** [ref] 用户输入受理账本(「200 applied」受理的影子;单写者 = `src/user-input-ledger.ts` 的活对象,boot 装配在 stage-07 并跑一次收敛)。
-     *  在场 ⇔ 有 store backend(生产恒与 `runStore` 同源于 backend)。消费点:steer 的 live 腿 / interrupt{text} / 同步子代的 steer([ref])受理前写 `accepted`(写不进 ⇒ 503
+     *  在场 ⇔ 有 store backend(生产恒与 `runStore` 同源于 backend)。消费点:steer 的 live 腿 / 同步子代的 steer([ref])受理前写 `accepted`(写不进 ⇒ 503
      *  `steering.ledger_unavailable`)、三条 run 腿开通告口那一拍铸 `crashed` 通告并在收场时 settle、`GET /v1/sessions/:id` 的
      *  `userInputUndrained` 读面。缺席只出现在不接 backend 的 stub-harness 上(那时没有这一面,行为与修前逐字相同)。 */
     userInputLedger?: import("../user-input-ledger.js").UserInputLedger;
@@ -373,8 +380,8 @@ export interface ServiceCoordinatorDeps {
     sessionTitler?: import("../session-titler.js").SessionTitler;
 }
 /** **函数/构件缝**:main.ts 把跨多个子系统的动作编译成一个可调用面交给路由(路由不该自己
- *  重组零件——见 backend 的同款论证)。parked-revive 三件是同族的构件缝(boot 期从生产装配取的裸
- *  ToolSpec + 成员集 + 父约束重建器),与 backgroundAgentStore 齐备才构成赎回腿。 */
+ *  重组零件——见 backend 的同款论证)。parked-revive 两件是同族的构件缝(按行解析的赎回面工厂 +
+ *  父约束重建器),与 backgroundAgentStore 齐备才构成赎回腿。 */
 export interface ServiceSeamDeps {
     /**
      * device lane 的 WS 汇聚端(design/device-executor-lane-v2 §5,车A-3)—— 本仓**首个** WS 服务端。
@@ -385,7 +392,7 @@ export interface ServiceSeamDeps {
      * ——两者刻意不在这里自动耦合,因为 §8-R7 的顺序(新提交 503 → 新 upgrade 拒 → 停发新指令 →
      * 在途结果照收 → 才断连)是**部署编排**的语义,不是 HTTP 层能自作主张的。
      *
-     * 🔴 **当前生产装配恒缺席,这是有意的**(`parkedKnownAgentTypes` 同族形):车A-3 只交汇聚端与这条
+     * 🔴 **当前生产装配恒缺席,这是有意的**:车A-3 只交汇聚端与这条
      * 挂载缝;`main.ts` 侧的真装配(建店 → 建 hub → 传这个键 → 与 `drainState` 联动 → 与
      * `REMOTE_EXEC=device` 拒启门对齐)属**车A-4/端点车**。在那之前本键只有测试口消费,不是死枝。
      */
@@ -417,25 +424,21 @@ export interface ServiceSeamDeps {
      * 缺席 = 本部署不是 host 车道(没有工厂读这一格)⇒ 提交点 no-op。装配 = `boot/stage-10-http-server.ts`(host 车道才给)。
      */
     bindSessionInheritEnv?: import("./session-inherit-env.js").SessionInheritEnvCommitCtx["bindSessionInheritEnv"];
+    /**
+     * 会话登记簿四表(cwd / shellEnv / inheritEnv / 属主,`boot/execution-env.ts` `createSessionScopedRegistries` 的 `dropSessionOf`)按**住客**清掉一只 ——
+     * 记下的住客恰是交来的化身才清、答 `true`。读者只有提交出口(`submission-exit.ts`):被拒提交铸下的会话撤回之后清(同 id 的下一位已登记、写下的条目不动)。
+     * 缺席(夹具 / 嵌入方没接)⇒ 本部署没有那几张表。
+     */
+    dropSessionScopedOf?: (sessionId: string, incarnation: string) => boolean;
     /** Audit回溯: current context (+ summary) for a session, plus its owner. Enables GET /v1/sessions/:id. `opts.reader` (the
      *  verified identity reading the view) ⇒ user message rows carry the rewind handle `taskId` (`audit.ts` `buildRewindHandles`);
      *  an embedder's one-parameter implementation stays assignable (it simply never projects handles). */
     sessionAudit?: (sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<({
         owner: string | null;
     } & Record<string, unknown>) | undefined>;
-    /** E21 session delete coordinator: purge a session's history (sessionStorage) PLUS the service-owned
-     *  run-ledger/checkpoint/tool-result rows, owner-guarded, in one call. Returns `{ deleted }` (idempotent) — or
-     *  `{ active }` when the runs-ledger TX re-asserted a still-live run (a concurrent createRun raced the route's
-     *  pre-check), which the route maps to 409. Enables DELETE /v1/sessions/:id. Wired by main.ts (all the stores). */
-    /** E21 删除协调器。三种结局:删了 / 有活跑(`{active}`,409 `conflict.session_active_run`)/ [ref]:以本会话为根的后台子代没停干净
-     *  (`{childrenAlive}` = 仍活着的子代句柄,409 `conflict.session_children_alive` 的 `remaining[]`;会话记录不动)。 */
-    purgeSession?: (sessionId: string, owner: string | null) => Promise<{
-        deleted: boolean;
-    } | {
-        active: string;
-    } | {
-        childrenAlive: readonly string[];
-    }>;
+    /** E21 删除协调器(会话三态 活 → 在删 → 没了,`session-deletion.ts`):删会话的对话史与服务自己的 run 账 / 检查点 / 卸载结果等全部挂靠行,一次调用。
+     *  结局 = {@link SessionPurgeOutcome}(删了 / 不在 · 围栏判到认领 · 子代预检拒 · 被接管)。点亮 DELETE /v1/sessions/:id。 */
+    purgeSession?: (sessionId: string, owner: string | null) => Promise<SessionPurgeOutcome>;
     /** [ref]③(b): read a BACKGROUND agent-handle child's final report / current status out of the core
      *  TaskRegistry (the same face the TaskOutput tool reads — agent handles are NEVER in the run store).
      *  Wired in main.ts to `defaultTaskRegistry.pollTask` (non-blocking). Access is the REGISTRATION tuple:
@@ -569,8 +572,8 @@ export interface ServiceSeamDeps {
      *  (`controlPlaneRoot`)。②在**挂载期**判掉(工厂返 undefined)。这一族的理由比合规两口更硬:清标的
      *  写前托管行(`OriginClearanceRow.entryText`)在墓碑已落、重录未成的崩溃窗内是那条记忆**唯一的一份**
      *  ——落在副本本地盘上 = pod 重建即永久丢失。全文见 src/memory-operator-faces.ts 头注。
-     *  🔴 `listClearances` 是**同步**的(core 的读面就是一次严格 sidecar 读),且账本损坏时**抛**
-     *  `ControlPlaneCorruptError` —— 那是 fail-closed 信号,不是空数组。 */
+     *  🔴 `listClearances` 答 `Promise`(core 7.66.0 [ref] 起引擎经治理店读那份账),账本损坏时**拒**
+     *  `ControlPlaneCorruptError` —— 那是 fail-closed 信号,不是空数组(路由在 try 内 await)。 */
     memoryOriginFace?: MemoryOriginFaces;
     /** [ref](core 5.58.0 `runMemoryConsolidationDriver`):记忆 **consolidation 阀门**的操作面。
      *  启用 `POST /v1/admin/memory/consolidation/run` 与 `GET /v1/admin/memory/consolidation`(两口 operator-only)。
@@ -627,11 +630,6 @@ export interface ServiceSeamDeps {
      *  🔴 **在场 ⇒ `sessionStorage` 必须带执行席 `executionPlacement`**:认领之后对根会话住客的唯一判官是执行席上的写口;缺 ⇒ `createHttpServer` 拒启
      *  (句子 = `PARKED_REVIVE_EXECUTION_SEAT_REQUIRED`)。 */
     parkedReviveSurface?: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory;
-    /** 可选第三件:revive args 的 `subagent_type` roster 成员集([ref] Q1 成员性规则)。当前生产装配
-     *  **恒缺席**(boot 内建 default 无自定义 agents roster,per-request 的 spec.agents 不进 boot 工具)
-     *  = 恒省略 subagent_type,typed 子代按 general-purpose 形复活(保真度 caveat 已报 core,[ref]
-     *  批复审 G-F1;center roster 接线是候件,字段先留给它与测试口)。 */
-    parkedKnownAgentTypes?: ReadonlySet<string>;
     /** [ref]/[ref] 跨进程父约束重供:decide 腿按部署配置重建 host 任务的同语义父策略链(exempt 锚=
      *  row.rootSessionId),经 core 1.396 的 `parkedResume.inheritedGate` 席位透传——缺席时重启后带
      *  requiresParentConstraint 的 parked checkpoint 恒被 core pre-CAS 门诚实拒(不可赎回)。
@@ -694,14 +692,14 @@ export interface ServiceDeploymentDeps {
      *  (内建 details+center 条目同判定源盖同名)。absent = 404(与 capabilities 缺席同姿势)。 */
     scenarioDetails?: Record<string, import("../capabilities/scenarios.js").ScenarioDetail>;
     /** Honest /health `sessionBackend` label — the wiring coerces the config enum to "tidb"
-     *  (meaning "durable, generically"), which on a pg deployment reads as SQL-TiDB and misleads triage.
-     *  main.ts passes the effective store label (`durable(pg)` / `durable(mysql)` / `durable(local)` / "memory",
-     *  same derivation as the boot `listening` log). Absent → fall back to the raw config enum. */
+     *  (meaning "the backend's store, generically"), which on a pg deployment reads as SQL-TiDB and misleads triage.
+     *  main.ts passes the backend KIND the session store landed on (`pg` / `mysql` / `local` / "memory", `sessionStoreLabelOf`,
+     *  same derivation as the boot `listening` log) — the kind only; durability is `/health.store.durability`. Absent → fall back to the raw config enum. */
     sessionStoreLabel?: string;
-    /** S5 → [ref] ①:持久化姿态的**唯一**装配值(`store-posture.ts`,`boot/stores.ts` 铸):`/health` 的 `storeDegraded` / `durable:false`
-     *  (present-iff `degradedReason` 在场)与 caps `store` 同读它,gauge `store_backend_degraded` 在装配点读同一只。
-     *  缺席 = 这个进程不是由 composition root 装起来的(测试夹具形)⇒ `/health` 不带降级位、caps `store` 取诚实下限
-     *  (`declared` = 配置词,`backend:"memory"` —— 本面不知道任何装出来的后端)。 */
+    /** S5 → [ref] ①:持久化姿态的**唯一**装配值(`store-posture.ts`,`boot/stores.ts` 铸):`/health` 的 `storeDegraded`(present-iff `degradedReason` 在场)
+     *  与 `store.durability`、caps `store`、诊断 `storeDurability` 同读它,gauge `store_backend_degraded` 与起服布线审计在装配点读同一只。
+     *  缺席 = 这个进程不是由 composition root 装起来的(测试夹具形)⇒ `/health` 不带降级位、caps / `/health` / 诊断取诚实下限
+     *  `unwiredStorePosture`(`declared` = 配置词,`backend:"memory"` ⇒ `ephemeral` —— 本面不知道任何装出来的后端)。 */
     storePosture?: import("../store-posture.js").StorePosture;
     /** [ref] ②:caps `centerWiring` 的读面(`capabilities/center-wiring.ts` `createCenterWiringReader`;入参 = 请求的已验 principal)。
      *  缺席 = 没接中心(或测试夹具)⇒ 键整个缺席。 */
@@ -711,22 +709,35 @@ export interface ServiceDeploymentDeps {
      *  Caps `credentialPlane.sandboxGit` calls it on every read and projects the answer as is. Absent = not built by the composition root (a fixture) ⇒
      *  the same judge on config alone, the seat counted as not asked. */
     sandboxGitPlane?: () => import("../sandbox-git-plane.js").SandboxGitPlane;
+    /**
+     * local-docker 车道容器帽的闸的只读面(`plugins/local-docker-capacity.ts`;`DOCKER_MAX_CONTAINERS` 开着才在)。
+     * 两个读者:提交门(`run-concurrency-cap.ts`:闸里有起动在等空位 ⇒ 新提交 429 `sandbox_capacity`)与 `/health.sandboxCapacity`。缺席 ⇒ 两处都不读、形状不变。
+     */
+    sandboxCapacity?: import("../plugins/local-docker-capacity.js").SandboxCapacityView | undefined;
     /**
      * 本进程起服装上的**运维声明** mod 包数(部署座装配口 `assembleDeploymentMods` 的 `loaded.length`;本服务自铸的注册不算)。一个事实两个出口,同读这一格:
      * `/health` 的 `mods: { deploymentPackages }` 与 `/v1/capabilities` 的 `modsDeploymentPackages: true` —— 都只在 > 0 时在场;0 / 缺席(没声明,或不是由
      * composition root 装起来的夹具)⇒ 两键都缺席,两面与没有声明的部署逐字节同。
      */
     deploymentModPackages?: number;
+    /**
+     * 会话 → 调用方登记的工作目录(提交体 `cwd` 的唯一写口 `setSessionCwd` 写的那一张进程内表,`boot/execution-env.ts` `createSessionScopedRegistries`)。
+     * **只读**,读者只有 run 外回退口(`POST /v1/sessions/:id/rewind-files`):host 工厂按 `effectiveHostWorkspace(本表.get(会话), ctx)` 定根(`execution-env.ts`
+     * host 臂),口在交引擎之前用**同一只函数、同一份入参**问「工厂这一次会不会落到一只用完即删的临时目录」—— 会 ⇒ 拒,不让台账说恢复了而项目没动。
+     * 缺席(夹具 / 嵌入方没接)⇒ 读作「没有登记」⇒ host 车道上口拒(fail-closed)。
+     */
+    perSessionCwd?: ReadonlyMap<string, string>;
     /**
      * Graceful drain — shared mutable state between main.ts (flips `draining` on SIGTERM) and this server:
      *  • while `draining`, NEW model-running submissions (the billable submit paths) get 503 + Retry-After, so an
      *    orchestrator/shell retries against the replacement instance; read paths + in-flight verbs (steer/cancel/
      *    respond/subagent) stay open so the runs we are waiting on can still finish/interact.
      *  • `inflight` is ASSIGNED BY createServer (a live union of this replica's in-flight legs: durable bg/resume
-     *    `inflightRuns` + live sync/resume streams `steerableRuns`, the leader leg, and the session-resident background
-     *    shells/monitors — `inflightBreakdown` is the same read split into its three terms) — an observable fact (`/health.inflight`).
-     *    `blockingInflight` (also ASSIGNED BY createServer) is the same breakdown minus the session-resident term: "is there still work that
-     *    must be waited out" — the drain wait main.ts polls after SIGTERM, the orphan/lease windows and the SIGHUP idle window read THAT.
+     *    `inflightRuns` + live sync/resume streams `steerableRuns`, the leader leg, the background sub-agents that outlived the leg
+     *    that spawned them, and the session-resident background shells/monitors — `inflightBreakdown` is the same read split into its
+     *    four terms) — an observable fact (`/health.inflight`).
+     *    `blockingInflight` (also ASSIGNED BY createServer) is the SAME breakdown function minus the session-resident shell term: "is there still
+     *    work that must be waited out" — the drain wait main.ts polls after SIGTERM, the orphan/lease windows and the SIGHUP idle window read THAT.
      *  • /health carries `draining:true` + `version` (build self-description); draining is a readiness reason
      *    (`http/readiness.ts`) ⇒ `/readyz` 503 + `/health` `ready:false` (the k8s readiness 摘流信号).
      *  • [ref]:`attachedStreams` 同样 ASSIGNED BY createServer —— 本副本当前打开着的 SSE 流条数
@@ -738,11 +749,13 @@ export interface ServiceDeploymentDeps {
      */
     drainState?: import("../fleet/drain-entry.js").DrainState;
     /**
-     * 在飞数第四类的读口:本进程**会话驻留的后台 shell / monitor** 行数(`session-resident-background.ts` 的 `countSessionResidentBackground` 在 composition root 绑上围栏表;
-     * 法与边界见该文件头)。`createHttpServer` 把它作为 `inflightBreakdown.sessionResident` 并进总数 `drainState.inflight` 的**同一次读**;它**不**进阻断集
-     * `drainState.blockingInflight`(排空 / 孤儿窗与附着租约自退 / SIGHUP 空闲窗判停读阻断集)。缺席(嵌入方 / 夹具)= 这一项恒 0,`inflight` 逐字同改前。
+     * 会话驻留后台行的读口:本进程活过起它的腿、仍在跑的**后台子代理**与**后台 shell / monitor**,一次走查交出两项(`session-resident-background.ts` 的
+     * `countSessionResidentBackground` 在 composition root 绑上围栏表;法与边界见该文件头)。`createHttpServer` 把两项并进**唯一的分项函数** `inflightBreakdown`:
+     * `backgroundAgents` 进阻断集 `drainState.blockingInflight`(排空 / 孤儿窗与附着租约自退 / SIGHUP 空闲窗判停读它)与总数,`sessionResident` 只进总数 `drainState.inflight`。
+     * 读口**不许抛**:判停路径每拍读它,排空首读在期限计时器装上之前 —— 一抛就永不硬停(组合根那只按会话收住读失败、计 1 并报出)。
+     * 缺席(嵌入方 / 夹具)= 两项恒 0,两个读数逐字同 7.145.x。
      */
-    sessionResidentBackground?: () => number;
+    sessionResidentBackground?: () => SessionResidentCounts;
     /** 编排器片 2 件 3:服务租约此刻的读数(`fleet/serving-lease.ts` 的客户端交出;引擎信号铸点与计费准入判同读)。缺席 = 没装租约客户端
      *  (非 fleet 成员 / 没接中心 / 测试夹具)⇒ `none`(与没有租约的引擎逐字同)。 */
     servingLease?: () => import("../fleet/engine-signal.js").ServingLeaseView;

package/dist/http/server.js

@@ -4,7 +4,7 @@ import { validatePendingSteer } from "@sema-agent/core";
 import {} from "../web-admin-client/facade.js";
 import { describeValueShape } from "@sema-agent/settings-schema";
 import { HttpError } from "../security.js";
-import { SessionForkInProgressError } from "../execution-placement.js";
+import { SessionDeletingError, SessionForkInProgressError } from "../execution-placement.js";
 import {} from "../memory-sync.js";
 import {} from "../orchestration/workflow-agent-steer.js";
 import {} from "../orchestration/workflow-completion-inbox.js";
@@ -19,13 +19,14 @@ import { cascadeConfig } from "./run-meta.js";
 export { cascadeConfig };
 import { coarseStatusForState, errorCodeForExit } from "./routes/images.js";
 export { coarseStatusForState, errorCodeForExit };
-import { sendError, sendHttpError, sendOpenFaceFault, logRequestError } from "./send.js";
+import { attachResponseLogger, sendError, sendHttpError, sendOpenFaceFault, logRequestError } from "./send.js";
 import { createRequestGuards } from "./request-guards.js";
 import { createRunConcurrencyGate, liveRunIdsOf } from "./run-concurrency-cap.js";
 import { sqlEngineSeatIssue } from "../sql-engine-posture.js";
 import { parkDecisionStoreRefusal } from "../orchestration/workflow-park-decision.js";
 import { CHECKPOINT_CTX_SEALING_REQUIRED } from "./checkpoint-ctx.js";
 import { PARKED_REVIVE_EXECUTION_SEAT_REQUIRED } from "../parked-decide.js";
+import { a2aAudienceIdentityBoundaryRefusal, operatorDeclarationRefusal } from "../config-invariants.js";
 import { retiredServiceDepsRefusal } from "./retired-service-deps.js";
 import { createAdmission, MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills } from "./admission.js";
 import { createResumeLegs } from "./resume-legs.js";
@@ -33,9 +34,10 @@ import * as facts from "../capability-facts.js";
 import { createDispatch } from "./dispatch.js";
 import { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath, isProbePath } from "./route-table.js";
 import { createApprovalSweeps } from "./approval-sweeps.js";
-export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath, hasServiceAuth };
+export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath };
 export { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills };
-import { explicitOperatorOk, hasServiceAuth } from "./principal-gate.js";
+import { explicitOperatorOk } from "./principal-gate.js";
+import { configuredIdentitySources } from "../identity-source.js";
 export { explicitOperatorOk };
 class DrainYieldingPreemptBook extends Map {
     drainingNow;
@@ -76,6 +78,31 @@ export function createHttpServer(rawDeps) {
         if (retired !== undefined)
             throw new Error(retired);
     }
+    {
+        const operatorDeclarationFailure = operatorDeclarationRefusal(deps.config);
+        if (operatorDeclarationFailure !== undefined) {
+            throw new Error(operatorDeclarationFailure);
+        }
+    }
+    {
+        const bridgeDeclared = configuredIdentitySources(deps.config).includes("sso");
+        const verifierWired = deps.webAdminJwtVerifier !== undefined;
+        if (verifierWired && !bridgeDeclared) {
+            throw new Error("createHttpServer: a webAdminJwtVerifier was injected but the config declares no auth bridge — set authBridgeIssuer (AUTH_BRIDGE_ISSUER) or configure the center (webAdmin), " +
+                "since which identity sources this deployment has is read from the config alone (the owner gates, /health.auth and the one-time migrations read it); " +
+                "refusing to start rather than verify SSO tokens on a deployment the owner gates read as having no identity boundary");
+        }
+        if (bridgeDeclared && !verifierWired) {
+            throw new Error("createHttpServer: the config declares an auth bridge (authBridgeIssuer, or the center base webAdmin.baseUrl when that is unset) but no webAdminJwtVerifier was injected — " +
+                "the service boot builds one from that same issuer; inject a verifier for it, or remove the bridge and the center from the config, " +
+                "since /health.auth, the owner gates and the one-time migrations read the bridge from the config alone; refusing to start rather than report SSO sign-in that verifies nobody");
+        }
+    }
+    {
+        const audienceBoundaryFailure = a2aAudienceIdentityBoundaryRefusal(deps.config.a2aServe, configuredIdentitySources(deps.config).length === 0);
+        if (audienceBoundaryFailure !== undefined)
+            throw new Error(audienceBoundaryFailure);
+    }
     {
         const issue = sqlEngineSeatIssue(deps.backend, deps.sqlEngine);
         if (issue !== undefined) {
@@ -106,15 +133,19 @@ export function createHttpServer(rawDeps) {
     const steerableRuns = new Map();
     const wakeParkMints = new Map();
     const counters = { uncountedBillableInflight: 0, admittedInflight: 0 };
-    const blockingParts = () => ({
-        http: liveRunIdsOf(inflightRuns, steerableRuns).size + counters.uncountedBillableInflight + counters.admittedInflight,
-        leader: deps.leaderEndpoint?.inflight?.() ?? 0,
-    });
-    const inflightBreakdown = () => ({ ...blockingParts(), sessionResident: deps.sessionResidentBackground?.() ?? 0 });
+    const inflightBreakdown = () => {
+        const resident = deps.sessionResidentBackground?.() ?? { backgroundAgents: 0, sessionResident: 0 };
+        return {
+            http: liveRunIdsOf(inflightRuns, steerableRuns).size + counters.uncountedBillableInflight + counters.admittedInflight,
+            leader: deps.leaderEndpoint?.inflight?.() ?? 0,
+            backgroundAgents: resident.backgroundAgents,
+            sessionResident: resident.sessionResident,
+        };
+    };
     if (deps.drainState) {
         deps.drainState.inflightBreakdown = inflightBreakdown;
         deps.drainState.inflight = () => inflightTotal(inflightBreakdown());
-        deps.drainState.blockingInflight = () => blockingInflightOf(blockingParts());
+        deps.drainState.blockingInflight = () => blockingInflightOf(inflightBreakdown());
     }
     let lastBillableActivityAt = performance.now();
     let firstBillableActivityAt = null;
@@ -154,10 +185,10 @@ export function createHttpServer(rawDeps) {
                 const cs = deps.checkpointStore;
                 if (!cs)
                     return false;
-                const scope = await cs.peekPendingScope(sessionId);
+                const scope = await cs.peekPendingScope(sessionId, { axis: "run" });
                 if (scope === null || scope === undefined)
                     return false;
-                const token = await cs.findPendingTokenBySession(sessionId, scope);
+                const token = await cs.findPendingTokenBySession(sessionId, scope, { axis: "run" });
                 if (!token)
                     return false;
                 return await cs.setPendingSteer(token, scope, { text, trusted: false });
@@ -167,13 +198,14 @@ export function createHttpServer(rawDeps) {
             }
         };
     }
-    const { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, runOwnerOk, sessionOwnerOk, runSessionAcceptOk, readJson, readRawBody } = createRequestGuards({ deps });
+    const { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, readJson, readRawBody } = createRequestGuards({ deps });
     const { prepareSpec } = createAdmission({ deps, readJson, runnerFor });
     const { admitRun } = createRunConcurrencyGate({ deps, inflightRuns, steerableRuns });
-    const { routeCtxBase, resumeCheckpoint, driveResumeIntoRunLog, driveResumeLeg, mayDiscloseRowError, resumePreempted, startFreshHostTurn, resumeWake, sessionNotifyDoor } = createResumeLegs({ deps, runnerFor, idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, admitRun, safeDecode, runOwnerOk, sessionOwnerOk, runSessionAcceptOk, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor });
-    const { denyExpiredApprovals, redeemParkedAsk } = createApprovalSweeps({ deps, resumeCheckpoint, mayDiscloseRowError });
+    const { routeCtxBase, resumeCheckpoint, driveResumeIntoRunLog, driveResumeLeg, decisionRowAdmits, resumePreempted, startFreshHostTurn, resumeWake, sessionNotifyDoor } = createResumeLegs({ deps, runnerFor, idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, admitRun, safeDecode, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor });
+    const { denyExpiredApprovals, redeemParkedAsk } = createApprovalSweeps({ deps, resumeCheckpoint, decisionRowAdmits });
     const { handle } = createDispatch({ deps, noteActivity, routeCtxBase, counters });
     const server = http.createServer((req, res) => {
+        attachResponseLogger(res, deps.logger);
         void handle(req, res).catch((err) => {
             if (err instanceof HttpError) {
                 if (!res.headersSent)
@@ -191,6 +223,10 @@ export function createHttpServer(rawDeps) {
                 sendError(res, 409, err.code, err.message);
                 return;
             }
+            if (err instanceof SessionDeletingError) {
+                sendError(res, 409, err.code, err.message);
+                return;
+            }
             sendOpenFaceFault(res, err);
         });
     });
@@ -223,7 +259,7 @@ export function createHttpServer(rawDeps) {
         recordTaskResult(result);
         deps.planCacheProbe?.record(principal, objective, result.terminal.kind === "completed");
     }
-    const isRunLiveOnThisReplica = (taskId) => inflightRuns.has(taskId) || steerableRuns.has(taskId);
+    const isRunLiveOnThisReplica = (taskId) => liveRunIdsOf(inflightRuns, steerableRuns).has(taskId);
     return Object.assign(server, { denyExpiredApprovals, isRunLiveOnThisReplica, redeemParkedAsk, sessionNotifyDoor });
 }
 //# sourceMappingURL=server.js.map