@sema-agent/server 7.147.0 → 7.148.0

package/dist/http/run-read-face.js

@@ -1,23 +1,18 @@
-import { persistedPlaneOf } from "../terminal.js";
 import { memoRedactedRead, memoRedactTerminalResult, redactErrorMessage, sealStoredRunRowResult } from "../observability/run-terminal.js";
-import { RUN_HOLDER_DEATH_CODES, isTerminalRunStatus } from "../plugins/store-contracts.js";
+import { isTerminalRunStatus } from "../plugins/store-contracts.js";
 import { composeSupervisorCost, infraCost, infraUsageFromEvents, hasInfraPricing } from "../observability/cost-taxonomy.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { readTurnActivityMs } from "../turn-activity.js";
 import { buildCrossSliceUsage, readResourceWindow } from "../resource-window.js";
-export function runRowStale(deps, run) {
-    return run.status === "running" && Date.now() - new Date(run.updatedAt).getTime() > deps.config.runStaleSec * 1000;
-}
 export function runRowExitResult(run) {
     return isTerminalRunStatus(run.status) ? memoRedactTerminalResult("run.result", run.result ?? undefined) : (sealStoredRunRowResult(run.result ?? null, "run.result") ?? undefined);
 }
 export async function readRunFace(deps, runStore, run) {
     const taskId = run.taskId;
-    const stale = runRowStale(deps, run);
     const infraRates = deps.config.infraCostRates;
-    const needCost = Boolean(run.result?.stats && !stale && infraRates && hasInfraPricing(infraRates));
-    const needSuggestions = !stale && run.status === "completed";
-    const resourceWindow = run.status === "running" && !stale ? readResourceWindow(run.taskId) : undefined;
+    const needCost = Boolean(run.result?.stats && infraRates && hasInfraPricing(infraRates));
+    const needSuggestions = run.status === "completed";
+    const resourceWindow = run.status === "running" ? readResourceWindow(run.taskId) : undefined;
     let events;
     let eventsUnavailable = false;
     if (needCost || needSuggestions || resourceWindow !== undefined) {
@@ -45,7 +40,7 @@ export async function readRunFace(deps, runStore, run) {
         if (Array.isArray(arr))
             suggestions = arr.map((s) => String(s));
     }
-    const lastActivityAt = run.status === "running" && !stale ? readTurnActivityMs(run.taskId) : undefined;
+    const lastActivityAt = run.status === "running" ? readTurnActivityMs(run.taskId) : undefined;
     let crossSliceUsage;
     if (resourceWindow !== undefined) {
         if (eventsUnavailable || events === undefined)
@@ -56,14 +51,14 @@ export async function readRunFace(deps, runStore, run) {
     return {
         taskId: run.taskId,
         sessionId: run.sessionId,
-        status: stale ? "failed" : run.status,
+        status: run.status,
         ...(lastActivityAt !== undefined ? { msSinceLastActivity: Math.max(0, Date.now() - lastActivityAt) } : {}),
         ...(crossSliceUsage !== undefined ? { crossSliceUsage } : {}),
         result: runRowExitResult(run),
         supervisorCost,
         suggestions,
-        errorCode: stale ? RUN_HOLDER_DEATH_CODES.stalled : (persistedPlaneOf(run.result).errorCode ?? run.errorCode ?? undefined),
-        error: stale ? "run stalled (instance lost?)" : isTerminalRunStatus(run.status) ? memoRedactedRead("run.error", run.error ?? undefined, redactErrorMessage) : redactErrorMessage(run.error ?? undefined),
+        errorCode: run.errorCode ?? undefined,
+        error: isTerminalRunStatus(run.status) ? memoRedactedRead("run.error", run.error ?? undefined, redactErrorMessage) : redactErrorMessage(run.error ?? undefined),
         jobId: run.jobId ?? undefined,
         source: run.source ?? undefined,
         heldBy: isTerminalRunStatus(run.status) ? null : (run.instanceId ?? null),

package/dist/http/send.d.ts

@@ -64,10 +64,12 @@ export declare function endSseWithError(res: ServerResponse, frame: {
     readonly message: string;
 }): void;
 export declare function sendJson(res: ServerResponse, status: number, body: unknown): void;
+/** HTTP 入口给每条响应挂上本部署的日志器(缺席 = 本部署没有日志器,与全局兜底同读)。 */
+export declare function attachResponseLogger(res: ServerResponse, logger: Logger | undefined): void;
 /** A6([ref] lens1 §C3/lens3 §C3a): canonical error-response sender for sites that already carry a
  *  machine `errorCode` — `errorCode` is a required positional arg (not optional-bag) so a call site
  *  cannot regress to the "code but no errorCode" shape the error-code-key-gate forbids. Body shape is
- *  `{ error: message, errorCode, ...extra }`; a site that used to ALSO emit a legacy `code` key keeps it
+ *  `{ error: message, errorCode, ...extra }` (written by the one refusal writer {@link sendRefusal}); a site that used to ALSO emit a legacy `code` key keeps it
  *  by passing `{ code: ... }` inside `extra` — this is a pure call-site migration (zero wire-contract
  *  change), not a new response shape. Sites where the two machine-code channels genuinely disagree, or
  *  where `error`/`errorCode` aren't cleanly separable from the rest of the body, are left on raw
@@ -93,13 +95,13 @@ export declare function invalidJsonError(reason: InvalidJsonReason): HttpError;
 export declare function httpErrorCode(status: number, code?: string): string;
 /**
  * 一只 `HttpError` 读成 {@link Refusal}:码经 {@link httpErrorCode}(带码的 throw 原样优先,否则按状态给粗码),句 = `message`,机读事实 = `extra`
- * (如场景门的 `detail: { scenario, source }`、条数帽的 `field` / `reason` / `count` / `cap`)。**拆 `HttpError` 的唯一一处** —— 别的站点自己拆
+ * (如场景门的 `scenario` / `source`、条数帽的 `field` / `reason` / `count` / `cap`)。**拆 `HttpError` 的唯一一处** —— 别的站点自己拆
  * `status` / `code` / `message` 拼体就丢了 `extra`(`test/refusal-one-composer.test.ts` 的静态门钉着)。
  */
 export declare function httpErrorRefusal(e: HttpError): Refusal;
 /** 一只 `HttpError` 的拒体成员 = {@link refusalBody}({@link httpErrorRefusal})。 */
 export declare function httpErrorBody(e: HttpError): RefusalBody;
-/** 整面拒:状态 = `e.status`,体 = {@link httpErrorBody}。手里拿着一只 `HttpError` 的路由站点一律调它。 */
+/** 整面拒:状态 = `e.status`,体 = {@link httpErrorRefusal} 经出线点 {@link sendRefusal}(与 {@link httpErrorBody} 同一只组句)。手里拿着一只 `HttpError` 的路由站点一律调它。 */
 export declare function sendHttpError(res: ServerResponse, e: HttpError): void;
 /**
  * 🔴 B1 / [ref] —— `SessionPolicyError` → 应答,经 {@link sessionPolicyErrorHttp} 那**一只**映射
@@ -135,4 +137,11 @@ export declare function msg(e: unknown): string;
  * codex r10 [high] 纵深:错误句可带凭据回显 ⇒ 先过 `redactHead`(有上限、不抛)。
  */
 export declare function logRequestError(logger: Logger | undefined, req: IncomingMessage, err: unknown): void;
+/**
+ * 一只抛出物的**栈顶帧**,写成 `<仓内路径>:<行>`(`request_error` 行的出处位:排障时「哪一行读到了 `undefined`」不必再复现)。
+ * 取栈的第一条读得出位置的帧(内建 / 匿名帧跳过);路径只留 `src/` · `dist/` · `node_modules/` 起的尾段 —— 宿主机的绝对前缀(用户目录 / 容器卷名)不出门;
+ * 不带列、不带函数名、不带消息体(消息已在 `err` 位,过它自己的脱敏)。读不出(非 `Error` / 无栈 / 无位置帧)⇒ `undefined`,调用点不写该键。
+ * 纯解析、无 catch:只读 `stack` 这一个成员(与 {@link msg} 读 `message` 同一姿势 —— 同一只抛出物读两个成员,守不守访问器是同一个问题,不在这里单独设一道兜底)。
+ */
+export declare function topFrameOf(err: unknown): string | undefined;
 //# sourceMappingURL=send.d.ts.map

package/dist/http/send.js

@@ -2,8 +2,9 @@ import { SessionError, SessionPolicyError } from "@sema-agent/core";
 import { sessionPolicyErrorFacts, sessionPolicyErrorHttp, sessionPolicyErrorSentence } from "../session-policy-wire.js";
 import { openFaceFaultWire, sessionErrorWireOf } from "../session-error-wire.js";
 import { redactErrorMessage, redactHead } from "../observability/run-terminal.js";
+import { seatText } from "../trace/exit-seat.js";
 import { createCodedHttpError } from "../security.js";
-import { refusalBody } from "./refusal-body.js";
+import { refusalBody, refusalWireBytes } from "./refusal-body.js";
 export const SSE_RESPONSE_MARK = Symbol("sema.http.sse-response");
 export function isSseResponse(res) {
     return res[SSE_RESPONSE_MARK] === true;
@@ -32,8 +33,27 @@ export function sendJson(res, status, body) {
     res.writeHead(status, { "content-type": "application/json" });
     res.end(JSON.stringify(body));
 }
+const RESPONSE_LOGGER = Symbol("sema.http.response-logger");
+export function attachResponseLogger(res, logger) {
+    if (logger !== undefined)
+        res[RESPONSE_LOGGER] = logger;
+}
+function sendRefusal(res, status, refusal) {
+    let bytes;
+    try {
+        bytes = refusalWireBytes(refusal);
+    }
+    catch (fault) {
+        const reported = new TypeError(`refusal ${refusal.errorCode} was not written: its facts carry a reserved key, or reading / serializing them threw`, { cause: fault });
+        logRequestError(res[RESPONSE_LOGGER], res.req, reported);
+        sendOpenFaceFault(res, reported);
+        return;
+    }
+    res.writeHead(status, { "content-type": "application/json" });
+    res.end(bytes);
+}
 export function sendError(res, status, errorCode, message, extra) {
-    sendJson(res, status, refusalBody(extra === undefined ? { errorCode, message } : { errorCode, message, facts: extra }));
+    sendRefusal(res, status, extra === undefined ? { errorCode, message } : { errorCode, message, facts: extra });
 }
 export const INVALID_JSON_REASONS = ["not_json", "not_object"];
 export const INVALID_JSON_MESSAGES = {
@@ -66,14 +86,14 @@ export function httpErrorBody(e) {
     return refusalBody(httpErrorRefusal(e));
 }
 export function sendHttpError(res, e) {
-    sendJson(res, e.status, httpErrorBody(e));
+    sendRefusal(res, e.status, httpErrorRefusal(e));
 }
 export function sendSessionPolicyError(res, e, sentencePrefix = "") {
     if (!(e instanceof SessionPolicyError))
         return false;
     const h = sessionPolicyErrorHttp(e.code);
     const facts = sessionPolicyErrorFacts(e);
-    sendError(res, h.status, h.errorCode, redactErrorMessage(`${sentencePrefix}${sessionPolicyErrorSentence(e)}`) ?? "session policy error", facts === undefined ? undefined : { ...facts });
+    sendError(res, h.status, h.errorCode, redactErrorMessage(`${sentencePrefix}${sessionPolicyErrorSentence(e)}`) ?? "session policy error", facts);
     return true;
 }
 export function sendSessionError(res, e, face) {
@@ -90,12 +110,28 @@ export function sendOpenFaceFault(res, e) {
 }
 function sendSessionWire(res, e, wire) {
     const sentence = wire.sentence ?? (e instanceof SessionError ? redactErrorMessage(e.message) : undefined) ?? "session store error";
-    sendError(res, wire.status, wire.errorCode, sentence, wire.detail === undefined ? undefined : { detail: wire.detail });
+    sendError(res, wire.status, wire.errorCode, sentence, wire.facts);
 }
 export function msg(e) {
     return e instanceof Error ? e.message : String(e);
 }
 export function logRequestError(logger, req, err) {
-    logger?.error("request_error", { method: req.method, url: req.url, err: redactHead(msg(err), 2000) });
+    const at = topFrameOf(err);
+    logger?.error("request_error", { method: req.method, url: req.url, err: redactHead(msg(err), 2000), ...(at !== undefined ? { at } : {}) });
+}
+const STACK_FRAME_LOCATION = /^\s*at (?:.*? \()?(?:file:\/\/)?(\/.*?|[A-Za-z]:[\\/].*?):(\d+):\d+\)?$/;
+export function topFrameOf(err) {
+    const stack = err instanceof Error ? err.stack : undefined;
+    if (typeof stack !== "string")
+        return undefined;
+    for (const line of stack.split("\n")) {
+        const m = STACK_FRAME_LOCATION.exec(line);
+        if (m === null)
+            continue;
+        const path = m[1].replace(/\\/g, "/");
+        const tail = /(?:^|\/)((?:src|dist|node_modules)\/.*)$/.exec(path)?.[1] ?? path.slice(path.lastIndexOf("/") + 1);
+        return seatText("operator-log-text", `${tail}:${m[2]}`);
+    }
+    return undefined;
 }
 //# sourceMappingURL=send.js.map

package/dist/http/server.d.ts

@@ -1,13 +1,14 @@
 import http from "node:http";
 import type { MemoryComplianceFaces, MemoryOriginFaces, SessionMemoryStatusFace } from "../memory-operator-faces.js";
 import type { SideQueryAccounting } from "../budget.js";
+import type { SessionPurgeOutcome } from "../session-deletion.js";
 import type { IncomingMessage } from "node:http";
 import { type Runner, type RunnerDeps, type TaskSpec, type TaskResult, type WorkflowRunStore, type MemoryEntry, type MemoryExportBundle, type MemoryImportReport, type SideQuerySpec, type SideQueryResult, type Brain, type EngineNotice } from "@sema-agent/core";
 import type { TaskRequestBody } from "./wire-types.js";
 import type { ServiceConfig } from "../config-types.js";
 import { type SessionMirrorRuling } from "../web-admin-client/facade.js";
 import type { RestartSignal } from "@sema-agent/settings-schema/fleet";
-import { type OwnerAwareSessionStore } from "../security.js";
+import { type AuthorizeInput, type OwnerAwareSessionStore } from "../security.js";
 import type { PeerDesk, PeerLease } from "../peer-seat.js";
 import type { ExecutionRoot, ResolvedTaskSpec } from "./execution-context.js";
 import type { RunStore, ImageIndex, ImageBake, CheckpointStoreFull, ResumeAnchorStore, ApprovalExemptionStore, ApprovalNonceStore, ServiceSessionPolicyStore, ServiceFileHistoryStore, ToolResultStoreFull, StoreBackend } from "../plugins/store-backend.js";
@@ -42,13 +43,17 @@ export { coarseStatusForState, errorCodeForExit };
 import type { SessionNotifyDoor } from "../session-notify-door.js";
 import { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills } from "./admission.js";
 import { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath } from "./route-table.js";
-export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath, hasServiceAuth };
+export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath };
 export { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills };
-import { explicitOperatorOk, hasServiceAuth } from "./principal-gate.js";
+import { explicitOperatorOk } from "./principal-gate.js";
 export { explicitOperatorOk };
 /** Per-request authorization context resolved before building the spec (identity, owned session). */
 export interface RequestAuth {
-    principal?: string;
+    /**
+     * 这次请求 / 这条腿的**主体**(分区键;`owner-brands.ts`):没带场景头 ⇒ 与验过的人逐字节同;带了 ⇒ `_scn:<场景>:<人>`。行属主 / 检查点 scope / 附件 / 锚读它,
+     * 人面(场景裁定 / 运维 / 治理 / 引擎 `spec.principal`)由装配器经 `partsOf` 解码出人。自建 authorizer 交它自己验过的那一只身份串(没有场景时就是人)。
+     */
+    subject?: string;
     sessionId: string;
     memoryScope?: string;
     /** 142-S4:the SHAPE-VALIDATED **且已归一(小写)** 的 `body.projectId`(authorizer 的 core
@@ -94,10 +99,7 @@ export interface ServiceCoreDeps {
      * 不带 ⇒ 现铸并登记)。省掉是编译错;绕过类型造的 deps 在 {@link createHttpServer} 入口拒启。单用户嵌入传
      * `createAuthorizer(config, runner.sessions)`(包根导出)—— 店没有属主读时它退化为只派 principal 与会话 id。
      */
-    authorize: (ctx: {
-        req: IncomingMessage;
-        body: TaskRequestBody;
-    }) => Promise<RequestAuth>;
+    authorize: (ctx: AuthorizeInput) => Promise<RequestAuth>;
     /**
      * Map an inbound request body + resolved auth to a TaskSpec. The SERVICE/deployment owns model
      * + tools + mcp here (callers only supply content). `auth` carries the principal-derived memory scope —
@@ -240,7 +242,8 @@ export interface ServiceStoreDeps {
     /** §0.5 session-ownership: the durable session abstraction (`SessionRepo`-style) the service OWNS — session
      *  IDENTITY/enumeration (E16 list) + lifecycle (E17 fork, E21 history delete) come from HERE, not the
      *  `task_run` runs ledger. When it carries `listSessions`, GET /v1/sessions sources sessions from the session
-     *  store (task_run only joins for run preview); `fork`/`deleteSession` enable the fork/delete routes. */
+     *  store (task_run only joins for the run-derived half of the row); without it the list answers 501 — the run store is
+     *  not a session lister. `fork` enables the fork route; the delete route rides `purgeSession` (the coordinator over the one session eraser). */
     sessionStorage?: OwnerAwareSessionStore;
     /**
      * [ref] —— 跨会话车道的**发现席**(core `RunnerDeps.peerDirectory`),与 `RunnerDeps` 侧**同一个对象**
@@ -287,7 +290,7 @@ export interface ServiceStoreDeps {
      *  已配 AND 有 store backend(main.ts 建;写点在两条 send lane 的 withLedgerRecording)。 */
     sendFileLedger?: import("../plugins/send-file-ledger.js").SendFileLedger;
     /** [ref] 用户输入受理账本(「200 applied」受理的影子;单写者 = `src/user-input-ledger.ts` 的活对象,boot 装配在 stage-07 并跑一次收敛)。
-     *  在场 ⇔ 有 store backend(生产恒与 `runStore` 同源于 backend)。消费点:steer 的 live 腿 / interrupt{text} / 同步子代的 steer([ref])受理前写 `accepted`(写不进 ⇒ 503
+     *  在场 ⇔ 有 store backend(生产恒与 `runStore` 同源于 backend)。消费点:steer 的 live 腿 / 同步子代的 steer([ref])受理前写 `accepted`(写不进 ⇒ 503
      *  `steering.ledger_unavailable`)、三条 run 腿开通告口那一拍铸 `crashed` 通告并在收场时 settle、`GET /v1/sessions/:id` 的
      *  `userInputUndrained` 读面。缺席只出现在不接 backend 的 stub-harness 上(那时没有这一面,行为与修前逐字相同)。 */
     userInputLedger?: import("../user-input-ledger.js").UserInputLedger;
@@ -377,8 +380,8 @@ export interface ServiceCoordinatorDeps {
     sessionTitler?: import("../session-titler.js").SessionTitler;
 }
 /** **函数/构件缝**:main.ts 把跨多个子系统的动作编译成一个可调用面交给路由(路由不该自己
- *  重组零件——见 backend 的同款论证)。parked-revive 三件是同族的构件缝(boot 期从生产装配取的裸
- *  ToolSpec + 成员集 + 父约束重建器),与 backgroundAgentStore 齐备才构成赎回腿。 */
+ *  重组零件——见 backend 的同款论证)。parked-revive 两件是同族的构件缝(按行解析的赎回面工厂 +
+ *  父约束重建器),与 backgroundAgentStore 齐备才构成赎回腿。 */
 export interface ServiceSeamDeps {
     /**
      * device lane 的 WS 汇聚端(design/device-executor-lane-v2 §5,车A-3)—— 本仓**首个** WS 服务端。
@@ -389,7 +392,7 @@ export interface ServiceSeamDeps {
      * ——两者刻意不在这里自动耦合,因为 §8-R7 的顺序(新提交 503 → 新 upgrade 拒 → 停发新指令 →
      * 在途结果照收 → 才断连)是**部署编排**的语义,不是 HTTP 层能自作主张的。
      *
-     * 🔴 **当前生产装配恒缺席,这是有意的**(`parkedKnownAgentTypes` 同族形):车A-3 只交汇聚端与这条
+     * 🔴 **当前生产装配恒缺席,这是有意的**:车A-3 只交汇聚端与这条
      * 挂载缝;`main.ts` 侧的真装配(建店 → 建 hub → 传这个键 → 与 `drainState` 联动 → 与
      * `REMOTE_EXEC=device` 拒启门对齐)属**车A-4/端点车**。在那之前本键只有测试口消费,不是死枝。
      */
@@ -421,25 +424,21 @@ export interface ServiceSeamDeps {
      * 缺席 = 本部署不是 host 车道(没有工厂读这一格)⇒ 提交点 no-op。装配 = `boot/stage-10-http-server.ts`(host 车道才给)。
      */
     bindSessionInheritEnv?: import("./session-inherit-env.js").SessionInheritEnvCommitCtx["bindSessionInheritEnv"];
+    /**
+     * 会话登记簿四表(cwd / shellEnv / inheritEnv / 属主,`boot/execution-env.ts` `createSessionScopedRegistries` 的 `dropSessionOf`)按**住客**清掉一只 ——
+     * 记下的住客恰是交来的化身才清、答 `true`。读者只有提交出口(`submission-exit.ts`):被拒提交铸下的会话撤回之后清(同 id 的下一位已登记、写下的条目不动)。
+     * 缺席(夹具 / 嵌入方没接)⇒ 本部署没有那几张表。
+     */
+    dropSessionScopedOf?: (sessionId: string, incarnation: string) => boolean;
     /** Audit回溯: current context (+ summary) for a session, plus its owner. Enables GET /v1/sessions/:id. `opts.reader` (the
      *  verified identity reading the view) ⇒ user message rows carry the rewind handle `taskId` (`audit.ts` `buildRewindHandles`);
      *  an embedder's one-parameter implementation stays assignable (it simply never projects handles). */
     sessionAudit?: (sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<({
         owner: string | null;
     } & Record<string, unknown>) | undefined>;
-    /** E21 session delete coordinator: purge a session's history (sessionStorage) PLUS the service-owned
-     *  run-ledger/checkpoint/tool-result rows, owner-guarded, in one call. Returns `{ deleted }` (idempotent) — or
-     *  `{ active }` when the runs-ledger TX re-asserted a still-live run (a concurrent createRun raced the route's
-     *  pre-check), which the route maps to 409. Enables DELETE /v1/sessions/:id. Wired by main.ts (all the stores). */
-    /** E21 删除协调器。三种结局:删了 / 有活跑(`{active}`,409 `conflict.session_active_run`)/ [ref]:以本会话为根的后台子代没停干净
-     *  (`{childrenAlive}` = 仍活着的子代句柄,409 `conflict.session_children_alive` 的 `remaining[]`;会话记录不动)。 */
-    purgeSession?: (sessionId: string, owner: string | null) => Promise<{
-        deleted: boolean;
-    } | {
-        active: string;
-    } | {
-        childrenAlive: readonly string[];
-    }>;
+    /** E21 删除协调器(会话三态 活 → 在删 → 没了,`session-deletion.ts`):删会话的对话史与服务自己的 run 账 / 检查点 / 卸载结果等全部挂靠行,一次调用。
+     *  结局 = {@link SessionPurgeOutcome}(删了 / 不在 · 围栏判到认领 · 子代预检拒 · 被接管)。点亮 DELETE /v1/sessions/:id。 */
+    purgeSession?: (sessionId: string, owner: string | null) => Promise<SessionPurgeOutcome>;
     /** [ref]③(b): read a BACKGROUND agent-handle child's final report / current status out of the core
      *  TaskRegistry (the same face the TaskOutput tool reads — agent handles are NEVER in the run store).
      *  Wired in main.ts to `defaultTaskRegistry.pollTask` (non-blocking). Access is the REGISTRATION tuple:
@@ -573,8 +572,8 @@ export interface ServiceSeamDeps {
      *  (`controlPlaneRoot`)。②在**挂载期**判掉(工厂返 undefined)。这一族的理由比合规两口更硬:清标的
      *  写前托管行(`OriginClearanceRow.entryText`)在墓碑已落、重录未成的崩溃窗内是那条记忆**唯一的一份**
      *  ——落在副本本地盘上 = pod 重建即永久丢失。全文见 src/memory-operator-faces.ts 头注。
-     *  🔴 `listClearances` 是**同步**的(core 的读面就是一次严格 sidecar 读),且账本损坏时**抛**
-     *  `ControlPlaneCorruptError` —— 那是 fail-closed 信号,不是空数组。 */
+     *  🔴 `listClearances` 答 `Promise`(core 7.66.0 [ref] 起引擎经治理店读那份账),账本损坏时**拒**
+     *  `ControlPlaneCorruptError` —— 那是 fail-closed 信号,不是空数组(路由在 try 内 await)。 */
     memoryOriginFace?: MemoryOriginFaces;
     /** [ref](core 5.58.0 `runMemoryConsolidationDriver`):记忆 **consolidation 阀门**的操作面。
      *  启用 `POST /v1/admin/memory/consolidation/run` 与 `GET /v1/admin/memory/consolidation`(两口 operator-only)。
@@ -631,11 +630,6 @@ export interface ServiceSeamDeps {
      *  🔴 **在场 ⇒ `sessionStorage` 必须带执行席 `executionPlacement`**:认领之后对根会话住客的唯一判官是执行席上的写口;缺 ⇒ `createHttpServer` 拒启
      *  (句子 = `PARKED_REVIVE_EXECUTION_SEAT_REQUIRED`)。 */
     parkedReviveSurface?: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory;
-    /** 可选第三件:revive args 的 `subagent_type` roster 成员集([ref] Q1 成员性规则)。当前生产装配
-     *  **恒缺席**(boot 内建 default 无自定义 agents roster,per-request 的 spec.agents 不进 boot 工具)
-     *  = 恒省略 subagent_type,typed 子代按 general-purpose 形复活(保真度 caveat 已报 core,[ref]
-     *  批复审 G-F1;center roster 接线是候件,字段先留给它与测试口)。 */
-    parkedKnownAgentTypes?: ReadonlySet<string>;
     /** [ref]/[ref] 跨进程父约束重供:decide 腿按部署配置重建 host 任务的同语义父策略链(exempt 锚=
      *  row.rootSessionId),经 core 1.396 的 `parkedResume.inheritedGate` 席位透传——缺席时重启后带
      *  requiresParentConstraint 的 parked checkpoint 恒被 core pre-CAS 门诚实拒(不可赎回)。
@@ -698,14 +692,14 @@ export interface ServiceDeploymentDeps {
      *  (内建 details+center 条目同判定源盖同名)。absent = 404(与 capabilities 缺席同姿势)。 */
     scenarioDetails?: Record<string, import("../capabilities/scenarios.js").ScenarioDetail>;
     /** Honest /health `sessionBackend` label — the wiring coerces the config enum to "tidb"
-     *  (meaning "durable, generically"), which on a pg deployment reads as SQL-TiDB and misleads triage.
-     *  main.ts passes the effective store label (`durable(pg)` / `durable(mysql)` / `durable(local)` / "memory",
-     *  same derivation as the boot `listening` log). Absent → fall back to the raw config enum. */
+     *  (meaning "the backend's store, generically"), which on a pg deployment reads as SQL-TiDB and misleads triage.
+     *  main.ts passes the backend KIND the session store landed on (`pg` / `mysql` / `local` / "memory", `sessionStoreLabelOf`,
+     *  same derivation as the boot `listening` log) — the kind only; durability is `/health.store.durability`. Absent → fall back to the raw config enum. */
     sessionStoreLabel?: string;
-    /** S5 → [ref] ①:持久化姿态的**唯一**装配值(`store-posture.ts`,`boot/stores.ts` 铸):`/health` 的 `storeDegraded` / `durable:false`
-     *  (present-iff `degradedReason` 在场)与 caps `store` 同读它,gauge `store_backend_degraded` 在装配点读同一只。
-     *  缺席 = 这个进程不是由 composition root 装起来的(测试夹具形)⇒ `/health` 不带降级位、caps `store` 取诚实下限
-     *  (`declared` = 配置词,`backend:"memory"` —— 本面不知道任何装出来的后端)。 */
+    /** S5 → [ref] ①:持久化姿态的**唯一**装配值(`store-posture.ts`,`boot/stores.ts` 铸):`/health` 的 `storeDegraded`(present-iff `degradedReason` 在场)
+     *  与 `store.durability`、caps `store`、诊断 `storeDurability` 同读它,gauge `store_backend_degraded` 与起服布线审计在装配点读同一只。
+     *  缺席 = 这个进程不是由 composition root 装起来的(测试夹具形)⇒ `/health` 不带降级位、caps / `/health` / 诊断取诚实下限
+     *  `unwiredStorePosture`(`declared` = 配置词,`backend:"memory"` ⇒ `ephemeral` —— 本面不知道任何装出来的后端)。 */
     storePosture?: import("../store-posture.js").StorePosture;
     /** [ref] ②:caps `centerWiring` 的读面(`capabilities/center-wiring.ts` `createCenterWiringReader`;入参 = 请求的已验 principal)。
      *  缺席 = 没接中心(或测试夹具)⇒ 键整个缺席。 */
@@ -715,6 +709,11 @@ export interface ServiceDeploymentDeps {
      *  Caps `credentialPlane.sandboxGit` calls it on every read and projects the answer as is. Absent = not built by the composition root (a fixture) ⇒
      *  the same judge on config alone, the seat counted as not asked. */
     sandboxGitPlane?: () => import("../sandbox-git-plane.js").SandboxGitPlane;
+    /**
+     * local-docker 车道容器帽的闸的只读面(`plugins/local-docker-capacity.ts`;`DOCKER_MAX_CONTAINERS` 开着才在)。
+     * 两个读者:提交门(`run-concurrency-cap.ts`:闸里有起动在等空位 ⇒ 新提交 429 `sandbox_capacity`)与 `/health.sandboxCapacity`。缺席 ⇒ 两处都不读、形状不变。
+     */
+    sandboxCapacity?: import("../plugins/local-docker-capacity.js").SandboxCapacityView | undefined;
     /**
      * 本进程起服装上的**运维声明** mod 包数(部署座装配口 `assembleDeploymentMods` 的 `loaded.length`;本服务自铸的注册不算)。一个事实两个出口,同读这一格:
      * `/health` 的 `mods: { deploymentPackages }` 与 `/v1/capabilities` 的 `modsDeploymentPackages: true` —— 都只在 > 0 时在场;0 / 缺席(没声明,或不是由

package/dist/http/server.js

@@ -4,7 +4,7 @@ import { validatePendingSteer } from "@sema-agent/core";
 import {} from "../web-admin-client/facade.js";
 import { describeValueShape } from "@sema-agent/settings-schema";
 import { HttpError } from "../security.js";
-import { SessionForkInProgressError } from "../execution-placement.js";
+import { SessionDeletingError, SessionForkInProgressError } from "../execution-placement.js";
 import {} from "../memory-sync.js";
 import {} from "../orchestration/workflow-agent-steer.js";
 import {} from "../orchestration/workflow-completion-inbox.js";
@@ -19,14 +19,14 @@ import { cascadeConfig } from "./run-meta.js";
 export { cascadeConfig };
 import { coarseStatusForState, errorCodeForExit } from "./routes/images.js";
 export { coarseStatusForState, errorCodeForExit };
-import { sendError, sendHttpError, sendOpenFaceFault, logRequestError } from "./send.js";
+import { attachResponseLogger, sendError, sendHttpError, sendOpenFaceFault, logRequestError } from "./send.js";
 import { createRequestGuards } from "./request-guards.js";
 import { createRunConcurrencyGate, liveRunIdsOf } from "./run-concurrency-cap.js";
 import { sqlEngineSeatIssue } from "../sql-engine-posture.js";
 import { parkDecisionStoreRefusal } from "../orchestration/workflow-park-decision.js";
 import { CHECKPOINT_CTX_SEALING_REQUIRED } from "./checkpoint-ctx.js";
 import { PARKED_REVIVE_EXECUTION_SEAT_REQUIRED } from "../parked-decide.js";
-import { operatorDeclarationRefusal } from "../config-invariants.js";
+import { a2aAudienceIdentityBoundaryRefusal, operatorDeclarationRefusal } from "../config-invariants.js";
 import { retiredServiceDepsRefusal } from "./retired-service-deps.js";
 import { createAdmission, MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills } from "./admission.js";
 import { createResumeLegs } from "./resume-legs.js";
@@ -34,9 +34,10 @@ import * as facts from "../capability-facts.js";
 import { createDispatch } from "./dispatch.js";
 import { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath, isProbePath } from "./route-table.js";
 import { createApprovalSweeps } from "./approval-sweeps.js";
-export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath, hasServiceAuth };
+export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath };
 export { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills };
-import { explicitOperatorOk, hasServiceAuth } from "./principal-gate.js";
+import { explicitOperatorOk } from "./principal-gate.js";
+import { configuredIdentitySources } from "../identity-source.js";
 export { explicitOperatorOk };
 class DrainYieldingPreemptBook extends Map {
     drainingNow;
@@ -83,6 +84,25 @@ export function createHttpServer(rawDeps) {
             throw new Error(operatorDeclarationFailure);
         }
     }
+    {
+        const bridgeDeclared = configuredIdentitySources(deps.config).includes("sso");
+        const verifierWired = deps.webAdminJwtVerifier !== undefined;
+        if (verifierWired && !bridgeDeclared) {
+            throw new Error("createHttpServer: a webAdminJwtVerifier was injected but the config declares no auth bridge — set authBridgeIssuer (AUTH_BRIDGE_ISSUER) or configure the center (webAdmin), " +
+                "since which identity sources this deployment has is read from the config alone (the owner gates, /health.auth and the one-time migrations read it); " +
+                "refusing to start rather than verify SSO tokens on a deployment the owner gates read as having no identity boundary");
+        }
+        if (bridgeDeclared && !verifierWired) {
+            throw new Error("createHttpServer: the config declares an auth bridge (authBridgeIssuer, or the center base webAdmin.baseUrl when that is unset) but no webAdminJwtVerifier was injected — " +
+                "the service boot builds one from that same issuer; inject a verifier for it, or remove the bridge and the center from the config, " +
+                "since /health.auth, the owner gates and the one-time migrations read the bridge from the config alone; refusing to start rather than report SSO sign-in that verifies nobody");
+        }
+    }
+    {
+        const audienceBoundaryFailure = a2aAudienceIdentityBoundaryRefusal(deps.config.a2aServe, configuredIdentitySources(deps.config).length === 0);
+        if (audienceBoundaryFailure !== undefined)
+            throw new Error(audienceBoundaryFailure);
+    }
     {
         const issue = sqlEngineSeatIssue(deps.backend, deps.sqlEngine);
         if (issue !== undefined) {
@@ -165,10 +185,10 @@ export function createHttpServer(rawDeps) {
                 const cs = deps.checkpointStore;
                 if (!cs)
                     return false;
-                const scope = await cs.peekPendingScope(sessionId);
+                const scope = await cs.peekPendingScope(sessionId, { axis: "run" });
                 if (scope === null || scope === undefined)
                     return false;
-                const token = await cs.findPendingTokenBySession(sessionId, scope);
+                const token = await cs.findPendingTokenBySession(sessionId, scope, { axis: "run" });
                 if (!token)
                     return false;
                 return await cs.setPendingSteer(token, scope, { text, trusted: false });
@@ -178,13 +198,14 @@ export function createHttpServer(rawDeps) {
             }
         };
     }
-    const { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, runOwnerOk, sessionOwnerOk, runSessionAcceptOk, readJson, readRawBody } = createRequestGuards({ deps });
+    const { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, readJson, readRawBody } = createRequestGuards({ deps });
     const { prepareSpec } = createAdmission({ deps, readJson, runnerFor });
     const { admitRun } = createRunConcurrencyGate({ deps, inflightRuns, steerableRuns });
-    const { routeCtxBase, resumeCheckpoint, driveResumeIntoRunLog, driveResumeLeg, mayDiscloseRowError, resumePreempted, startFreshHostTurn, resumeWake, sessionNotifyDoor } = createResumeLegs({ deps, runnerFor, idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, admitRun, safeDecode, runOwnerOk, sessionOwnerOk, runSessionAcceptOk, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor });
-    const { denyExpiredApprovals, redeemParkedAsk } = createApprovalSweeps({ deps, resumeCheckpoint, mayDiscloseRowError });
+    const { routeCtxBase, resumeCheckpoint, driveResumeIntoRunLog, driveResumeLeg, decisionRowAdmits, resumePreempted, startFreshHostTurn, resumeWake, sessionNotifyDoor } = createResumeLegs({ deps, runnerFor, idemCache, inflightRuns, preemptableRuns, steerableRuns, wakeParkMints, counters, readJson, readRawBody, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, usageWindowDenied, admitRun, safeDecode, prepareSpec, finalizeTaskResult, ownerCostQuotaDenied, ownerFleetLeaseDenied, usageWindowDenialFor });
+    const { denyExpiredApprovals, redeemParkedAsk } = createApprovalSweeps({ deps, resumeCheckpoint, decisionRowAdmits });
     const { handle } = createDispatch({ deps, noteActivity, routeCtxBase, counters });
     const server = http.createServer((req, res) => {
+        attachResponseLogger(res, deps.logger);
         void handle(req, res).catch((err) => {
             if (err instanceof HttpError) {
                 if (!res.headersSent)
@@ -202,6 +223,10 @@ export function createHttpServer(rawDeps) {
                 sendError(res, 409, err.code, err.message);
                 return;
             }
+            if (err instanceof SessionDeletingError) {
+                sendError(res, 409, err.code, err.message);
+                return;
+            }
             sendOpenFaceFault(res, err);
         });
     });
@@ -234,7 +259,7 @@ export function createHttpServer(rawDeps) {
         recordTaskResult(result);
         deps.planCacheProbe?.record(principal, objective, result.terminal.kind === "completed");
     }
-    const isRunLiveOnThisReplica = (taskId) => inflightRuns.has(taskId) || steerableRuns.has(taskId);
+    const isRunLiveOnThisReplica = (taskId) => liveRunIdsOf(inflightRuns, steerableRuns).has(taskId);
     return Object.assign(server, { denyExpiredApprovals, isRunLiveOnThisReplica, redeemParkedAsk, sessionNotifyDoor });
 }
 //# sourceMappingURL=server.js.map

package/dist/http/sse-log.d.ts

@@ -8,13 +8,16 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 export interface SseLogProvider<E extends {
     seq: number;
+}, R extends {
+    status: string;
+} = {
+    status: string;
 }> {
-    /** The coarse terminality status + the freshness clock (`updatedAt`). Undefined/null ⇒ unknown id (the
-     *  caller already 404'd existence before opening the stream, so this is the in-flight terminal poll). */
-    statusOf(id: string): Promise<{
-        status: string;
-        updatedAt: string;
-    } | null | undefined>;
+    /** The log's row as the provider answers it (the coarse terminality status rides on it). Undefined/null ⇒ unknown id (the
+     *  caller already 404'd existence before opening the stream, so this is the in-flight terminal poll).
+     *  🔴 **本泵不看钟**:「这条日志的写者死了没」不是泵的问题 —— 行答 `running` 就接着 tail,行答别的就收尾。run 日志的 provider 交回的是
+     *  过了观察口的行(心跳过期 ⇒ 当场落死亡判决,行随之不再 `running`);bake 日志的 provider 在自己这一侧折叠(它的判据是 bake 的,另票收)。 */
+    statusOf(id: string): Promise<R | null | undefined>;
     /** Events with seq strictly greater than `after`, ascending. */
     getEvents(id: string, after: number): Promise<E[]>;
     /** Map ONE event to its SSE frame (the `id:`/`event:`/`data:` lines differ per log). */
@@ -23,11 +26,13 @@ export interface SseLogProvider<E extends {
         event: string;
         data: unknown;
     };
-    /** The synthetic frame written when the log is stale (no events + `updatedAt` older than `staleMs`). */
-    staleFrame(): {
+    /** 这一行账本是不是一帧**终帧**(本连接投过它 ⇒ 收尾时不再合成)。 */
+    isTerminalEvent(ev: E): boolean;
+    /** 行不再 `running`、剩余事件写完之后的**收尾帧**(从行合成;`deliveredTerminal` = 本连接已投过一帧账本终帧);交回 `undefined` ⇒ 不写。 */
+    closingFrameOf(row: R, deliveredTerminal: boolean): {
         event: string;
         data: unknown;
-    };
+    } | undefined;
     /**
      * [ref] 车3 §5:**开流 preamble** —— 在 `sseHeaders` **之后**、日志 tail **之前**写的
      * 一批**非账本**帧(今天唯一的用户 = 审批未决卡的全量对账基准)。
@@ -84,6 +89,8 @@ export declare function collectSsePreamble<F>(preamble: (signal: AbortSignal) =>
  *  是一句谎。续读语义因此只有一句:投 `seq > from` 的每一行(缺的行就是缺的,不补、不猜)。 */
 export declare function streamSseLog<E extends {
     seq: number;
-}>(req: IncomingMessage, res: ServerResponse, provider: SseLogProvider<E>, id: string, staleMs: number): Promise<void>;
+}, R extends {
+    status: string;
+}>(req: IncomingMessage, res: ServerResponse, provider: SseLogProvider<E, R>, id: string): Promise<void>;
 export declare function sleep(ms: number): Promise<void>;
 //# sourceMappingURL=sse-log.d.ts.map

package/dist/http/sse-log.js

@@ -31,7 +31,7 @@ export async function collectSsePreamble(preamble, onFailure, timeoutMs = SSE_PR
             clearTimeout(timer);
     }
 }
-export async function streamSseLog(req, res, provider, id, staleMs) {
+export async function streamSseLog(req, res, provider, id) {
     const lastId = Number(req.headers["last-event-id"] ?? new URL(req.url ?? "", "http://x").searchParams.get("from") ?? 0);
     let from = Number.isFinite(lastId) ? lastId : 0;
     sseHeaders(res);
@@ -49,11 +49,14 @@ export async function streamSseLog(req, res, provider, id, staleMs) {
     }
     const start = Date.now();
     let lastBeat = Date.now();
+    let deliveredTerminal = false;
     const write = (events) => {
         for (const ev of events) {
             const f = provider.formatEvent(ev);
             res.write(`id: ${f.id}\nevent: ${f.event}\ndata: ${JSON.stringify(f.data)}\n\n`);
             from = ev.seq;
+            if (provider.isTerminalEvent(ev))
+                deliveredTerminal = true;
         }
     };
     while (!closed) {
@@ -63,12 +66,9 @@ export async function streamSseLog(req, res, provider, id, staleMs) {
             break;
         if (row.status !== "running") {
             write(await provider.getEvents(id, from));
-            break;
-        }
-        const stale = Date.now() - new Date(row.updatedAt).getTime() > staleMs;
-        if (stale && events.length === 0) {
-            const sf = provider.staleFrame();
-            res.write(`event: ${sf.event}\ndata: ${JSON.stringify(sf.data)}\n\n`);
+            const closing = provider.closingFrameOf(row, deliveredTerminal);
+            if (closing)
+                res.write(`event: ${closing.event}\ndata: ${JSON.stringify(closing.data)}\n\n`);
             break;
         }
         if (Date.now() - start > SSE_MAX_STREAM_MS) {

package/dist/http/stored-body-replay.d.ts

@@ -9,6 +9,7 @@
  */
 import type { PermissionMode } from "@sema-agent/core";
 import { type Autonomy } from "../runtime-governance.js";
+import { type InertToolListEntry } from "../rule-entry-list.js";
 import { type ExecutionConfigRootDeployment } from "../execution-config-root.js";
 import { type UnreadMembersDeployment } from "../unread-request-members.js";
 import { type ModelApiKeyEnvTable } from "../server-secret-env.js";
@@ -23,6 +24,17 @@ export declare function permissionModeReadingUnstated(ctx: CheckpointCtx, floor:
     stored: PermissionMode | undefined;
     floor: PermissionMode;
 } | undefined;
+/**
+ * 存体里 `settings.permissions.deny` / `ask`(规则编译器读的收紧表)有永远不生效的条目(名字层:退役名 / 短名 / 铸不出的段 / 近似名;core 的规则文法:括号 / 内容文法 / 主字段……;
+ * `~/` 形而这个部署解不出 home),或三桶里 user 层的 `/` 形规则而这个部署读不出执行环境的配置根 —— 拒点是 `applyTaskSettings`(422,在 `resolveSpec` 里),那一拍 plan_review 的一次性 nonce 已烧、终态 steer 的唤醒卡已铸、SLA 拒扫跳不过;所以预判也问一遍。
+ * **同一只函数**:拒点调的 `task-settings.ts` `rulePolicyBucketsRefusal`(同一张桶序表 `RULE_POLICY_BUCKETS`、同一张名册、同一句、同一条完整序:名字层 + 文法 → `~/` 要 home)。
+ * 两腿的输入差只有**任务根那一集声明给文法的路径基**(拒点有任务根 + home,预判一个也不声明;core 的规则文法对没声明的基不下判词 ⇒ 逐字同句);**home 同源**:`executionLaneHomeDir(config)` 是
+ * `resolve-spec.ts` 铸 `pathBases.home` 的那一个函数,预判拿同一份部署配置算(缺席就不铸键);**配置根同源**:`executionConfigRootOf(config)`,两腿都把它声明成配置根那一集的根(同判同句)。命中 ⇒ 码取 `SETTINGS_RULE_REFUSAL_CODE`(拒点 422 体的码,与续跑腿折出来的 `blockedBy` 同一个),句子 = 前缀 + 拒点那一句(逐字),体另带与提交口 422 同一只铸点的 `field` + `detail.problems`。
+ * 调用前桶门({@link storedPermissionBucketRefusal})已过:这里读到的桶都是合条目律的数组(纯串或带层条目)、不超帽。
+ * **两个调用方**:本文件的存量体重放预判(续跑腿折 409),与新提交的铸前块(`request-form.ts`,422)—— 判据只读请求与部署配置(任务根那一集不声明),
+ * 所以新提交在授权器铸会话之前就答得出;要任务根才判得出的那一类留在拒点(装配期,铸点之后)。
+ */
+export declare function ruleTablesRefusalWithoutTaskRoot(body: unknown, deployment: ExecutionConfigRootDeployment): InertToolListEntry | undefined;
 /**
  * 预判读的部署配置:`autonomy`(模式词问的模式词地板)、执行车道的 home 两位(`~/` 形规则那一问)、配置根的几位(user 设置层 `/` 规则那一问)与「请求成员读不出」那一问的
  * 租户轴 / 两只注入闸的否决位。`ServiceConfig` 结构上满足,四个问点传 `deps.config` 整份。

package/dist/http/stored-body-replay.js

@@ -40,7 +40,7 @@ function storedTightenOnlySeatRefusal(body) {
         return undefined;
     return replayInertEntry(tightenOnlySeatField(issue.seat), "deny", BUCKET_GATE_CODE, issue.message, { ...issue.fields });
 }
-function storedRulePolicyRefusal(body, deployment) {
+export function ruleTablesRefusalWithoutTaskRoot(body, deployment) {
     const permissions = storedPermissions(body);
     if (permissions === undefined)
         return undefined;
@@ -84,7 +84,7 @@ export function storedBodyReplayRefusal(ctx, deployment) {
     const unread = unreadRequestMembers({ settings: ctx.body.settings, mcpServers: ctx.body.mcpServers, a2aPeers: ctx.body.a2aPeers }, deployment, { replay: true, today, storedToolAxes: storedToolAxesRereadM19(today) });
     if (unread.length > 0)
         return { kind: "unread_members", refusal: unreadRequestMembersRefusal(unread), members: unread.slice(0, MAX_NAMED_MEMBERS), memberCount: unread.length };
-    const entry = storedRulePolicyRefusal(ctx.body, deployment);
+    const entry = ruleTablesRefusalWithoutTaskRoot(ctx.body, deployment);
     if (entry !== undefined)
         return { kind: "inert_tool_list", entry };
     const mode = permissionModeReadingUnstated(ctx, autonomyModeFloor(deployment.autonomy));