@sema-agent/server 7.147.0 → 7.148.0

package/dist/run-local.js

@@ -1,14 +1,13 @@
 #!/usr/bin/env node
-import { DEFAULT_AT_MENTION, DEFAULT_MODEL_REF, resolveTaskModel } from "./model-select.js";
-import { defaultModelRefusal, modelUnavailableMessage } from "./model-entry-refusal.js";
+import { DEFAULT_MODEL_REF, pickUserModel } from "./model-select.js";
+import { defaultModelRefusal, modelNotAllowedMessage, modelUnavailableMessage } from "./model-entry-refusal.js";
 import { servedModelTableLeg } from "./model-select.js";
-import { createDurableAbsenceSeat } from "./observability/corrupt-read-seat.js";
 import { outwardPlane } from "./terminal.js";
 import { join } from "node:path";
 import { realpathSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { fileURLToPath } from "node:url";
-import { BIDI_CONTROL_CHARS, Runner, uuidv7, FileStorageBackend, NodeExecutionEnv, TtlSessionStore, CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore, defaultTaskRegistry } from "@sema-agent/core";
+import { BIDI_CONTROL_CHARS, Runner, uuidv7, NodeExecutionEnv, TtlSessionStore, CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore, defaultTaskRegistry } from "@sema-agent/core";
 import { readAskClassPair } from "./approval-card.js";
 import { singleUserAutoAcceptBaselineApplies } from "./approval.js";
 import { withUnattendedLeg } from "./unattended-permission-mode.js";
@@ -20,8 +19,8 @@ import { ForkRoutingSessionStore } from "./plugins/fork-routing-session-store.js
 import { taskWallClockSec } from "./task-workflow.js";
 import { applyCenterArtifact, centerSourceOnError } from "./capabilities/center-prompts.js";
 import { buildUnpricedCeilingNotice, isRosterGateArmed, loadConfig, logConfigDiagnostics, parseConfigProvider, parseNumOrFailNonNegative } from "./config.js";
-import { buildStoreOpenRefusalTail } from "./plugins/store-open-refusal.js";
-import { acquireLocalBackendWithWait } from "./plugins/store-lock-wait.js";
+import { openLocalBackend } from "./plugins/store-backend.js";
+import { runAndLogOneTimeMigrations } from "./plugins/one-time-migrations.js";
 import { configLocalRoot, createConfigProvider } from "./config-provider.js";
 import { CONFIG_DOMAIN_INVALID_NOTE, buildCandidateRejectedFields, buildCandidateRejectionNotes, judgeConfigCandidate } from "./web-admin-client/candidate-gate.js";
 import { buildUnreadConfigFileFields, buildUnreadConfigKeyFields } from "./web-admin-client/read-warnings.js";
@@ -30,6 +29,7 @@ import { judgeConsolidationValve } from "./boot/memory-consolidation.js";
 import { logConfigDirMigration, migrateLocalConfigDirectory } from "./config-d-migration.js";
 import { logEnvModelsMigration, runEnvModelsMigration } from "./config-root-migration.js";
 import { assertLocalConfigDirTrusted, ConfigDirUntrustedError } from "./config-dir-trust.js";
+import { ConfigPullError, asConfigPullError, configPullFailureNote } from "./config-pull-failure.js";
 import { applyEffective, applyCenterReadFace, applySkillsManifest, resolveMcpServers, mcpForScenario, resolveA2aPeers, a2aForScenario } from "./web-admin-client/facade.js";
 import { hostExecutionEnvFactory } from "./plugins/remote-env-host.js";
 import { buildLaneHomeClaim, executionLaneOf } from "./execution-lane-caps.js";
@@ -43,7 +43,7 @@ import { createTaskListLane } from "./boot/task-list-lane.js";
 import { pickHandsRunner, withoutHands } from "./capabilities/hands-lane.js";
 import { HttpError, sessionIdShapeIssue } from "./security.js";
 import { createMemoryEngineIncidentSink } from "./memory-incident-sink.js";
-import { fileMemoryEngineRoot, memoryEngineBackendFor, memorySpecForRequest } from "./memory-scope.js";
+import { announceMemoryLedgerForm, fileMemoryEngineRoot, memoryEngineBackendFor, memorySpecForRequest } from "./memory-scope.js";
 import { createMemoryScopeStores } from "./memory-scope-stores.js";
 import { createMemoryProjectLayers } from "./memory-project-layer.js";
 import { assertProjectLayerOwnable } from "./project-identity.js";
@@ -58,14 +58,15 @@ import { assertRetentionLaneWirable } from "./boot/retention-lane.js";
 import { createOrgMemoryAdmissionWiring } from "./boot/org-memory.js";
 import { assembleDeploymentMods } from "./boot/deployment-mods.js";
 import { createKeyResolver } from "./key-resolver.js";
-import { createLogger } from "./observability/logger.js";
+import { createLogger, writeCliResult, writeLogText, ttyPromptOutput } from "./observability/logger.js";
 import { fatalExit } from "./boot/fatal-exit.js";
 import { installProcessExitBoundary } from "./boot/exit-boundary.js";
 import { createMetrics } from "./observability/metrics.js";
 import { installSecretEnvScrubRecorder } from "./observability/secret-env-scrub.js";
-import { createHostLspManager } from "./host-lsp-manager.js";
+import { createLspManager } from "./host-lsp-manager.js";
 import { installOutboundDispatcher } from "./outbound-dispatcher.js";
-import { provisionSemaConfigDir } from "./sema-config-dir.js";
+import { announceConfigRootEnclosingWorkspace, provisionSemaConfigDir } from "./sema-config-dir.js";
+import { launchWorkspaceOf } from "./task-cwd.js";
 import { bindOwnCredentialsConfig, declareServerWithheldEnv } from "./server-secret-env.js";
 export function parseArgs(argv) {
     let objective;
@@ -207,12 +208,12 @@ export function createLocalApprover(io) {
     };
     return async (req, signal) => {
         if (!io.isTty) {
-            io.printErr(`denied "${terminalSafeText(req.toolName)}" (${terminalSafeText(req.message)}) — this run-local invocation has no TTY, so there is nobody to ask. ${buildNoTtyRemedySentence(req)}`);
+            await io.printErr(`denied "${terminalSafeText(req.toolName)}" (${terminalSafeText(req.message)}) — this run-local invocation has no TTY, so there is nobody to ask. ${buildNoTtyRemedySentence(req)}`);
             return refuseWithoutPerson(NO_TTY_REFUSAL_REASON);
         }
         const argsShown = argsDisplayOf(req.args);
         if (!argsShown.ok) {
-            io.printErr(`denied "${terminalSafeText(req.toolName)}" (${terminalSafeText(req.message)}) — its arguments cannot be displayed ` +
+            await io.printErr(`denied "${terminalSafeText(req.toolName)}" (${terminalSafeText(req.message)}) — its arguments cannot be displayed ` +
                 `(${terminalSafeText(argsShown.reason)}), so there is nothing a person could review; refusing instead of asking.`);
             return refuseWithoutPerson(UNDISPLAYABLE_ARGS_REFUSAL_REASON);
         }
@@ -269,7 +270,7 @@ function inputAlreadyEnded(input) {
     const state = input;
     return state.readableEnded === true || state.destroyed === true;
 }
-export async function promptYesNoOnTty(prompt, signal, streams = { input: process.stdin, output: process.stderr }) {
+export async function promptYesNoOnTty(prompt, signal, streams = { input: process.stdin, output: ttyPromptOutput() }) {
     if (signal?.aborted || inputAlreadyEnded(streams.input))
         return false;
     const rl = createInterface({ input: streams.input, output: streams.output });
@@ -321,22 +322,22 @@ export const RUN_LOCAL_CONFIG_SOURCE_REFUSAL = "CONFIG_PROVIDER=remote: run-loca
     "(center credential renewal, sealed model keys and the roster gate are assembled by the HTTP service). Unset CONFIG_PROVIDER or set " +
     "CONFIG_PROVIDER=local for this command, or run the HTTP service to use the center.";
 export async function runLocal(argv, deps = {}) {
-    const print = deps.print ?? ((l) => console.log(l));
-    const printErr = deps.printErr ?? ((l) => console.error(l));
+    const print = deps.print ?? writeCliResult;
+    const printErr = deps.printErr ?? ((l) => writeLogText("stderr", l));
     let args;
     try {
         args = parseArgs(argv);
     }
     catch (err) {
         if (err instanceof UsageError) {
-            printErr(err.message);
+            await printErr(err.message);
             return 2;
         }
         throw err;
     }
     const configWord = parseConfigProvider();
     if (configWord === "remote") {
-        printErr(RUN_LOCAL_CONFIG_SOURCE_REFUSAL);
+        await printErr(RUN_LOCAL_CONFIG_SOURCE_REFUSAL);
         return 2;
     }
     if (configWord === undefined)
@@ -362,7 +363,7 @@ export async function runLocal(argv, deps = {}) {
         await assertLocalConfigDirTrusted({ root, declaredOwnerUid: loaded.configLocalOwnerUid });
     }
     catch (err) {
-        printErr(err instanceof Error ? err.message : String(err));
+        await printErr(err instanceof Error ? err.message : String(err));
         return 2;
     }
     const envModelsMigration = { root, env: process.env, envTableIsPlaceholder: isRosterGateArmed(loaded.webAdmin) };
@@ -373,7 +374,7 @@ export async function runLocal(argv, deps = {}) {
         config = await composeExecutionLane(loaded, { configSource: "local", localRoot: root, logger, entry: RUN_LOCAL_LANE_ENTRY });
     }
     catch (err) {
-        printErr(err instanceof Error ? err.message : String(err));
+        await printErr(err instanceof Error ? err.message : String(err));
         return 2;
     }
     const configProvider = createConfigProvider(providerInput);
@@ -382,9 +383,10 @@ export async function runLocal(argv, deps = {}) {
     let effective;
     let candidatePrompts;
     let candidateRejectionNotes;
-    let applying = false;
     try {
-        const r = await configProvider.fetchEffective(undefined);
+        const r = await configProvider.fetchEffective(undefined).catch((err) => {
+            throw asConfigPullError(err);
+        });
         if (r) {
             const verdict = judgeConfigCandidate(r);
             if (verdict.verdict === "rejected") {
@@ -400,7 +402,6 @@ export async function runLocal(argv, deps = {}) {
                     logger.warn("config_unread_key", buildUnreadConfigKeyFields(k, configProvider.kind === "local" ? root : undefined));
                 for (const d of r.droppedEntries ?? [])
                     logger.warn("config_entry_dropped", { domain: d.domain, entry: d.entry, reasonCode: d.reasonCode, error: d.error, version: r.effective.version, phase: "boot", note: "this one entry failed its domain schema and was dropped on its own — the rest of the candidate applies (per-entry tolerance); fix the named entry to bring it back" });
-                applying = true;
                 applyEffective(config, r.effective, logger, { leg: "boot", catalogSource: r.catalogSource });
                 effective = r.effective;
                 candidatePrompts = verdict.prompts;
@@ -415,13 +416,13 @@ export async function runLocal(argv, deps = {}) {
     }
     catch (err) {
         if (err instanceof ConfigDirUntrustedError) {
-            printErr(err.message);
+            await printErr(err.message);
             return 2;
         }
-        if (applying)
-            logger.warn("config_apply_refused", { source: configProvider.kind, err: String(err), note: "the candidate failed to apply at boot — running on env (run-local has no LKG); none of the candidate's domains is adopted; this is not a reachability failure" });
+        if (err instanceof ConfigPullError)
+            logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, cause: err.pullCause, err: String(err), note: configPullFailureNote(err.pullCause) });
         else
-            logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: String(err) });
+            logger.warn("config_apply_refused", { source: configProvider.kind, err: String(err), note: "the candidate failed to apply at boot — running on env (run-local has no LKG); none of the candidate's domains is adopted; this is not a reachability failure" });
     }
     const noDefaultModel = defaultModelRefusal({ models: config.models, modelRefusals: config.modelRefusals, candidateRejectionNotes }, servedModelTableLeg(config));
     if (noDefaultModel !== undefined)
@@ -436,8 +437,8 @@ export async function runLocal(argv, deps = {}) {
         assertGuardPatternsUsable(config);
     }
     catch (e) {
-        printErr(e instanceof Error ? e.message : String(e));
-        printErr(`(local config root: ${root} — fix it in ${join(root, ".env")} or your shell env; \`SENSITIVE_WRITE_PATTERNS=off\` disables the guard set)`);
+        await printErr(e instanceof Error ? e.message : String(e));
+        await printErr(`(local config root: ${root} — fix it in ${join(root, ".env")} or your shell env; \`SENSITIVE_WRITE_PATTERNS=off\` disables the guard set)`);
         return 2;
     }
     const ungatedCompensation = buildOnlySensitiveBaselineWarning(config, {
@@ -452,34 +453,39 @@ export async function runLocal(argv, deps = {}) {
     if (!deps.brain) {
         const missing = missingGatewayRequirements(config);
         if (missing.length > 0) {
-            printErr("cannot run: you still need to set:");
+            await printErr("cannot run: you still need to set:");
             for (const m of missing)
-                printErr(`  - ${m}`);
-            printErr(`(local config root: ${root} — put them in ${join(root, ".env")} or your shell env)`);
+                await printErr(`  - ${m}`);
+            await printErr(`(local config root: ${root} — put them in ${join(root, ".env")} or your shell env)`);
             return 2;
         }
     }
     const brain = deps.brain ?? createBrain(config, deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {});
     const pricing = buildPricing(config.models);
-    let fileBackend;
+    let backend;
+    try {
+        backend = openLocalBackend({ ...config, localDataRoot: root }, { lane: "run-local", onWarn: (msg, fields) => logger.warn(msg, fields), onError: (msg, fields) => logger.error(msg, fields) });
+    }
+    catch (e) {
+        await printErr(e instanceof Error ? e.message : String(e));
+        return 2;
+    }
     try {
-        fileBackend = acquireLocalBackendWithWait(() => new FileStorageBackend({
-            root,
-            ...(config.fileHistory !== undefined ? { fileHistory: config.fileHistory } : {}),
-            onCorruptRead: createDurableAbsenceSeat(logger.warn.bind(logger), root, "file-snapshot = a snapshot or scope read as missing"),
-        }), config.storeLockWaitMs, (fields) => logger.warn("store_dir_lock_wait", { ...fields }));
+        await backend.ensureSchema();
+        await runAndLogOneTimeMigrations(logger, backend);
     }
     catch (e) {
-        printErr(`cannot open local data dir ${root}: ${e instanceof Error ? e.message : String(e)}`);
-        const tail = buildStoreOpenRefusalTail(e, "run-local");
-        if (tail !== undefined)
-            printErr(tail);
+        await printErr(e instanceof Error ? e.message : String(e));
+        await backend.close();
         return 2;
     }
-    const sessionStore = fileBackend.sessionStore;
+    const sessionStore = backend.session();
+    const engineStores = backend.engineFileStores();
     const keyResolver = createKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
     const hostRx = config.remoteExec.provider === "host" ? config.remoteExec : undefined;
-    const workspaceDir = args.workspace ?? hostRx?.workspaceBase ?? process.cwd();
+    const launchWorkspace = launchWorkspaceOf(config, args.workspace);
+    const workspaceDir = launchWorkspace.dir;
+    announceConfigRootEnclosingWorkspace(config, logger, launchWorkspace);
     await settleHostLaneShell(config, logger);
     warnReadDenyFloorUnkept(config, logger);
     const homeDirSeat = buildLaneHomeClaim(config);
@@ -491,8 +497,9 @@ export async function runLocal(argv, deps = {}) {
             ...(hostRx.commandTimeoutMs != null ? { commandTimeoutMs: hostRx.commandTimeoutMs } : {}),
         })
         : undefined;
-    const lspManager = hostRx && config.lspHostEnabled && config.requirePrincipal !== true ? createHostLspManager(config, (event, fields) => logger.info(event, fields)) : undefined;
+    const lspManager = createLspManager(config, (event, fields) => logger.info(event, fields));
     const engineDataRoot = fileMemoryEngineRoot(config, root);
+    await announceMemoryLedgerForm(config, root, logger);
     const fileEngine = memoryEngineBackendFor(config, root, memoryEngineIncident);
     const memoryEngine = fileEngine !== undefined
         ? createMemoryScopeStores({ backend: fileEngine.backend, root: engineDataRoot, onIncident: memoryEngineIncident })
@@ -501,9 +508,9 @@ export async function runLocal(argv, deps = {}) {
         judgeConsolidationValve({ config, memoryEngine });
     }
     catch (err) {
-        printErr(err instanceof Error ? err.message : String(err));
+        await printErr(err instanceof Error ? err.message : String(err));
         void lspManager?.dispose();
-        await fileBackend.dispose();
+        await backend.close();
         return 2;
     }
     let memorySync;
@@ -565,9 +572,9 @@ export async function runLocal(argv, deps = {}) {
         orgMemoryAdmission = createOrgMemoryAdmissionWiring({ config, logger, metrics });
     }
     catch (e) {
-        printErr(`MEMORY_ORG_DIRECTORY_JSON is invalid: ${e instanceof Error ? e.message : String(e)}`);
-        printErr(`(local config root: ${root} — fix it in ${join(root, ".env")} or your shell env, or unset it)`);
-        await fileBackend.dispose();
+        await printErr(`MEMORY_ORG_DIRECTORY_JSON is invalid: ${e instanceof Error ? e.message : String(e)}`);
+        await printErr(`(local config root: ${root} — fix it in ${join(root, ".env")} or your shell env, or unset it)`);
+        await backend.close();
         return 2;
     }
     assertRetentionLaneWirable({
@@ -575,8 +582,8 @@ export async function runLocal(argv, deps = {}) {
         executor: undefined,
         stores: [
             { name: "sessionStore", store: sessionStore },
-            { name: "checkpointStore", store: fileBackend.checkpointStore },
-            { name: "toolResultStore", store: fileBackend.toolResultStore },
+            { name: "checkpointStore", store: engineStores.checkpointStore },
+            { name: "toolResultStore", store: backend.toolResult() },
         ],
         locked: (config.lockedConfigKeys ?? []).includes("retentionPolicy"),
     });
@@ -585,8 +592,8 @@ export async function runLocal(argv, deps = {}) {
         logger,
         retentionStores: [
             { name: "sessionStore", store: sessionStore },
-            { name: "checkpointStore", store: fileBackend.checkpointStore },
-            { name: "toolResultStore", store: fileBackend.toolResultStore },
+            { name: "checkpointStore", store: engineStores.checkpointStore },
+            { name: "toolResultStore", store: backend.toolResult() },
         ],
         retentionExecutor: null,
     });
@@ -598,21 +605,22 @@ export async function runLocal(argv, deps = {}) {
         engineDataRoot,
         governanceSeams,
         logger,
-        hands: { commitCoAuthor: "Sema <noreply@vivi-ai.com>" },
+        commitCoAuthor: "Sema <noreply@vivi-ai.com>",
         brain,
         pricing,
         tracer: createTracer(metrics),
         promptSource,
         executionEnvFactory,
         lspManager,
-        backgroundAgentStore: fileBackend.backgroundAgentStore,
-        mailboxStore: fileBackend.mailboxStore,
-        rosterStore: fileBackend.rosterStore,
+        backgroundAgentStore: engineStores.backgroundAgentStore,
+        mailboxStore: engineStores.mailboxStore,
+        rosterStore: engineStores.rosterStore,
         deploymentMods,
-        toolResultStore: fileBackend.toolResultStore,
+        toolResultStore: backend.toolResult(),
+        fileHistoryStore: undefined,
         checkpointStore: undefined,
-        sessionPolicyStore: fileBackend.sessionPolicyStore,
-        usageWindowStore: config.usageWindows ? fileBackend.usageWindowStore : undefined,
+        sessionPolicyStore: backend.sessionPolicy(),
+        usageWindowStore: config.usageWindows ? backend.fileUsageWindowStore() : undefined,
         orgMemoryAdmission,
         sharedMemoryStores: undefined,
         mcpRevocations: undefined,
@@ -644,7 +652,7 @@ export async function runLocal(argv, deps = {}) {
     const scenarioDeps = {
         runner, subRunner, model: DEFAULT_MODEL_REF, skills, repoClient, logger,
         ...(webSearch ? { webSearch } : {}),
-        backgroundAgentStore: fileBackend.backgroundAgentStore,
+        backgroundAgentStore: engineStores.backgroundAgentStore,
         taskListStoreFor: taskListLane.storeFor,
     };
     const scenarios = buildScenarios(scenarioDeps);
@@ -661,21 +669,25 @@ export async function runLocal(argv, deps = {}) {
     }
     catch (err) {
         if (err instanceof HttpError) {
-            printErr(`cannot run scenario "${scenarioName}": ${err.message}`);
+            await printErr(`cannot run scenario "${scenarioName}": ${err.message}`);
             if (scenarioName === "scan")
-                printErr("(the `scan` scenario needs a git API base URL and a repo — run-local cannot supply a repo; use the default scenario)");
+                await printErr("(the `scan` scenario needs a git API base URL and a repo — run-local cannot supply a repo; use the default scenario)");
             void lspManager?.dispose();
-            await fileBackend.dispose();
+            await backend.close();
             return 2;
         }
         throw err;
     }
-    const mention = resolveTaskModel(undefined, args.objective, config.models, DEFAULT_AT_MENTION, config.modelRefusals);
-    if (mention.unavailable !== undefined) {
-        const { requested, name, refusal } = mention.unavailable;
-        printErr(`cannot run: ${modelUnavailableMessage("@-mention", requested, name, refusal)}`);
+    const { picked: mention } = pickUserModel(config, undefined, args.objective);
+    const mentionRefusal = mention.unavailable !== undefined
+        ? modelUnavailableMessage("@-mention", mention.unavailable.requested, mention.unavailable.name, mention.unavailable.refusal)
+        : mention.notAllowed !== undefined
+            ? modelNotAllowedMessage("@-mention", mention.notAllowed.requested, mention.notAllowed.resolved)
+            : undefined;
+    if (mentionRefusal !== undefined) {
+        await printErr(`cannot run: ${mentionRefusal}`);
         void lspManager?.dispose();
-        await fileBackend.dispose();
+        await backend.close();
         return 2;
     }
     const scope = args.user ?? "local";
@@ -684,9 +696,9 @@ export async function runLocal(argv, deps = {}) {
             assertProjectLayerOwnable(scope, "--user");
         }
         catch (err) {
-            printErr(err instanceof Error ? err.message : String(err));
+            await printErr(err instanceof Error ? err.message : String(err));
             void lspManager?.dispose();
-            await fileBackend.dispose();
+            await backend.close();
             return 2;
         }
     }
@@ -732,7 +744,7 @@ export async function runLocal(argv, deps = {}) {
         const deadline = Date.now() + 5_000;
         try {
             for (;;) {
-                const running = (await fileBackend.backgroundAgentStore.listByScope(scope, { status: "running" })).length;
+                const running = (await engineStores.backgroundAgentStore.listByScope(scope, { status: "running" })).length;
                 if (running === 0)
                     return;
                 if (Date.now() >= deadline) {
@@ -753,29 +765,29 @@ export async function runLocal(argv, deps = {}) {
         result = await taskRunner.runTask(spec);
     }
     catch (err) {
-        printErr(`task crashed: ${err instanceof Error ? err.message : String(err)}`);
+        await printErr(`task crashed: ${err instanceof Error ? err.message : String(err)}`);
         await settleSessionBackground();
         runner.sessions.dispose();
         subRunner.sessions.dispose();
         void lspManager?.dispose();
-        await fileBackend.dispose();
+        await backend.close();
         return 1;
     }
     const unfinishedStop = unfinishedStopOf(result, refusedWithoutPerson);
     if (args.json) {
-        print(JSON.stringify(result, null, 2));
+        await print(JSON.stringify(result, null, 2));
     }
     else if (result.terminal.kind === "completed") {
-        print(result.result);
+        await print(result.result);
         if (unfinishedStop !== undefined)
-            printErr(buildUnfinishedStopFooter(unfinishedStop, sessionId));
+            await printErr(buildUnfinishedStopFooter(unfinishedStop, sessionId));
     }
     else {
         const plane = outwardPlane(result.terminal);
         const salvage = result.result || result.salvagedOutput || plane.blockedReason || "";
         if (salvage)
-            print(salvage);
-        printErr(`task ${plane.status}${plane.errorCode ? ` (${plane.errorCode})` : ""}${plane.errorMessage ? `: ${plane.errorMessage}` : ""}`);
+            await print(salvage);
+        await printErr(`task ${plane.status}${plane.errorCode ? ` (${plane.errorCode})` : ""}${plane.errorMessage ? `: ${plane.errorMessage}` : ""}`);
     }
     if (result.terminal.kind !== "completed" || unfinishedStop !== undefined)
         exitCode = 1;
@@ -785,7 +797,7 @@ export async function runLocal(argv, deps = {}) {
     runner.sessions.dispose();
     subRunner.sessions.dispose();
     void lspManager?.dispose();
-    await fileBackend.dispose();
+    await backend.close();
     return exitCode;
 }
 const RUN_LOCAL_SIGNAL_EXIT_CODE = { SIGINT: 130, SIGTERM: 143 };

package/dist/run-stale-default.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `REAP_RUN_STALE_SEC` 的缺省值(秒)—— 唯一字面量。读者两处:配置装配(`config.ts`,env 缺席时)与 run 店的缺省判活窗
+ * (`plugins/store-contracts.ts` 的 {@link RUN_STALL_DEFAULT_WIRING}:不经后端装配、直接构造的店用它;生产装配一律递活配置的 getter)。
+ * 纯叶:零 import(配置层不得值引 plugins 层,所以它不住在店的契约文件里)。
+ */
+export declare const RUN_STALE_SEC_DEFAULT = 120;
+//# sourceMappingURL=run-stale-default.d.ts.map

package/dist/run-stale-default.js

@@ -0,0 +1,2 @@
+export const RUN_STALE_SEC_DEFAULT = 120;
+//# sourceMappingURL=run-stale-default.js.map

package/dist/runs.d.ts

@@ -94,7 +94,7 @@ export declare function taskHandleStop(registry: typeof defaultTaskRegistry, han
  * 已 fire 的信号永不回调,那样一次真实的人为断连会被吞成「无归因」(子代 settle 时记成 system)。
  * 语义上这两种时序是同一件事:本请求赢下了这条 session,而这条 session 的连接是被人断掉的。
  */
-export declare function markChildrenStoppedByUserOnAbort(signal: AbortSignal, taskId: string, principal: string | null | undefined): void;
+export declare function markChildrenStoppedByUserOnAbort(signal: AbortSignal, taskId: string, subject: string | null | undefined): void;
 export declare function resumeAtHttpStatus(result: {
     terminal: TerminalCause;
 }): number | undefined;
@@ -114,7 +114,7 @@ export declare function resumeAtHttpStatus(result: {
 export declare function syncRefusalHttpStatus(result: Pick<TaskResult, "terminal" | "stats">): number | undefined;
 /**
  * 同步腿零工作拒体的机读事实(交 `refusalBody` 的 `facts`)—— 唯一一处。入参是**出口封口 + 脱敏后**的终局(调用方递 `redactTerminalResult(sealResultForExit(result)).terminal`,
- * 与 run 记录读面 / 流式 `done.result` 上的 `terminal` 同一只来源),本函数只按码取它的 `detail.detail`,不另读、不另脱。码不在登记表里、终局不是 `failed`、
+ * 与 run 记录读面 / 流式 `done.result` 上的 `terminal` 同一只来源),本函数只按码取它的 `detail.detail` 经闭集映射({@link attachmentCauseFacts}),不另读、不另脱。码不在登记表里、终局不是 `failed`、
  * 引擎没给 `coded` 因由 ⇒ `{}`(缺席不造键)。
  * 两张工具名清单的码({@link ENGINE_TOOL_LIST_REFUSAL_CODES})是另一臂:体事实不取引擎的因由,取 `admissionReadings`(受理口对放行侧选择器清单的读数,`PreparedTaskSubmission.warnings`)
  * 去掉 `not_in_roster`、且 `code` 与终局的码相同(同一族清单)的那些 —— 与受理口 400 同一只机读位形;没有读数 ⇒ `{}`。
@@ -132,8 +132,8 @@ export declare function releaseKeyIfZeroWorkRefusal(runStore: {
     releaseIdemKey(taskId: string): Promise<void>;
 }, taskId: string, result: Pick<TaskResult, "terminal" | "stats">): Promise<void>;
 /**
- * E18 resume-at — per-turn anchor capture, shared by runInBackground AND the resume-leg driveResume so the (single,
- * tricky) capture rule can't drift between the two stream-drain loops.
+ * E18 resume-at — per-turn anchor capture, shared by runInBackground, the resume-leg driveResume AND the sync `POST /v1/tasks`
+ * leg's plain form so the (single, tricky) capture rule can't drift between the stream-drain loops.
  *
  * A "turn" in core = ONE assistant message + its tool batch. resume-at is valid ONLY at a SETTLED rewindable boundary
  * — core's prepare-task accepts "user messages or finished assistant-text turns" and REJECTS an assistant message that
@@ -151,7 +151,7 @@ export declare function releaseKeyIfZeroWorkRefusal(runStore: {
  * observable instead of a silent feature outage.
  */
 /**
- * 「这一次用户消息提交是不是这个 run 的**开场提示**」的唯一读法 —— 三处用户回退锚(后台腿与续跑腿的 {@link TurnAnchorCapture}、`/v1/tasks/stream`
+ * 「这一次用户消息提交是不是这个 run 的**开场提示**」的唯一读法 —— 四处用户回退锚(后台腿 / 续跑腿 / 同步腿 `POST /v1/tasks` 的 {@link TurnAnchorCapture}、`/v1/tasks/stream`
  * 腿的 `userMsgEntryId`)同调这一只;调用点零各自判、零按正文判,且都是「最后一次交出的赢」。
  *
  * **回退锚 = 该轮开场提示,一个 run 一个(开场窗 + 闩)**:run 一开始就开着一个**开场窗**,收集第一次模型输出之前的 user 提交;窗关上之后(闩上),同 run 的 user-role 提交 ——
@@ -189,13 +189,13 @@ export declare function releaseKeyIfZeroWorkRefusal(runStore: {
 export declare function createPromptCommitReader(): (ev: {
     readonly type: string;
 }) => string | undefined;
-/** 回退锚写在哪条腿上(探针行的 `leg=`):流式腿 `POST /v1/tasks/stream`、后台腿 `POST /v1/runs`、续跑腿。 */
-export type ResumeAnchorLeg = "stream" | "bg" | "resume";
+/** 回退锚写在哪条腿上(探针行的 `leg=`):流式腿 `POST /v1/tasks/stream`、同步腿 `POST /v1/tasks`(非流式)、后台腿 `POST /v1/runs`、续跑腿。 */
+export type ResumeAnchorLeg = "stream" | "sync" | "bg" | "resume";
 /**
- * 回退锚的**唯一**写法(三条腿同一只):**有界** await 写入(单行店操作期限 {@link BASELINE_IO_DEADLINE_MS},与项目指令基线的
+ * 回退锚的**唯一**写法(四条腿同一只):**有界** await 写入(单行店操作期限 {@link BASELINE_IO_DEADLINE_MS},与项目指令基线的
  * 读写同一只数、同一只 {@link withinIoDeadline} —— 同为单行 PK 写、同在腿的关键路径上);写失败或到期 ⇒ 不抛(锚是这次提示词能不能
  * 回退的手柄,不是 run 的成败),记一次登记过的 fail-open `server.resume-anchor.capture-failed`(`reason=error|timeout`;计数 + 探针行 + 一次性 warn)。
- * 调用方在本腿的终帧(流式腿的 `done`)**之前** await 它 ⇒ 客户端拿到终帧时锚已落定或已知没落定,没有「锚晚到」的窗;锚店挂住至多让终帧晚一个期限。
+ * 调用方在本腿的终帧(流式腿的 `done`、同步腿的 200 应答)**之前** await 它 ⇒ 客户端拿到终帧时锚已落定或已知没落定,没有「锚晚到」的窗;锚店挂住至多让终帧晚一个期限。
  * 到期只放手不取消:那次写照常在飞,迟到落定的锚照样可用(迟到的失败被吞,不重复计数)。
  * 用户面的读数仍只有一处:会话视图用户消息行的 `taskId?`(present-iff 锚在)与 `resumeAt` 的 404 `resume_at.unknown_event`。
  */
@@ -211,7 +211,7 @@ export declare class TurnAnchorCapture {
      *  `message_committed{role:"user"}` event — its `entryId` is the persisted user-message `SessionTreeEntry.id`,
      *  ALWAYS a valid `resumeAt` target (core accepts a user message; it rejects a tool-result / mid-tool-call
      *  assistant). This is the CC rewind target ("rewind to the prompt" = the code-restore parity path — a code
-     *  change happens in a tool turn WITHIN a prompt's run, so rewinding to the prompt + rewindFiles undoes it).
+     *  change happens in a tool turn WITHIN a prompt's run, so rewinding to the prompt + restoreFiles undoes it).
      *  Keyed by the run's taskId (the handle the shell already holds from the POST response — no eventId→entryId
      *  side map / no leaf-read inference needed). The assistant-turn capture above stays as an additive bonus.
      *  The anchor is the run's OPENING prompt (the reader's opening window: provisional on the first user commit, corrected
@@ -232,7 +232,7 @@ export declare class TurnAnchorCapture {
      *  `message_committed{role:"user"}` event — its `entryId` is the persisted user-message `SessionTreeEntry.id`,
      *  ALWAYS a valid `resumeAt` target (core accepts a user message; it rejects a tool-result / mid-tool-call
      *  assistant). This is the CC rewind target ("rewind to the prompt" = the code-restore parity path — a code
-     *  change happens in a tool turn WITHIN a prompt's run, so rewinding to the prompt + rewindFiles undoes it).
+     *  change happens in a tool turn WITHIN a prompt's run, so rewinding to the prompt + restoreFiles undoes it).
      *  Keyed by the run's taskId (the handle the shell already holds from the POST response — no eventId→entryId
      *  side map / no leaf-read inference needed). The assistant-turn capture above stays as an additive bonus.
      *  The anchor is the run's OPENING prompt (the reader's opening window: provisional on the first user commit, corrected
@@ -291,8 +291,8 @@ export declare function graftParkToolCallId<T>(result: T, cs: ParkCheckpointRead
  * 续跑在没有认领的会话上驱动(`resume-legs.ts` 认领缺席的成因清单)。顺序承重:先放认领、后作废 ⇒ 两步之间(作废没做成时一直)就是那一形。
  * 停驻没落定的成因不在判据里(停驻行 / 用量行 / 结果到手之后的任何一笔账本写抛):判据只读手里那份结果。
  *
- * `held` = 手里那份结果过了宿主判官之后的形(判官提上来的嵌套停驻同样算;不在本 run 会话上的嵌套停驻 —— cascade 级上的卡 —— 判官不提,
- * 不归本腿作废)。不是停驻 ⇒ 零 I/O。不抛:作废没做成 ⇒ 卡回到「留在待决面上、由兜底收割收走」的形,响亮留痕。
+ * `held` = 手里那份结果过了宿主判官之后的形(判官提上来的嵌套停驻同样算 —— verify 的实现腿 / 修复轮、cascade 的级上卡,都归本 run 的会话)。
+ * 不是停驻 ⇒ 零 I/O。不抛:作废没做成 ⇒ 卡回到「留在待决面上、由兜底收割收走」的形,响亮留痕。
  */
 export declare function voidHeldParkCard(held: {
     readonly terminal: TerminalCause;
@@ -328,11 +328,13 @@ export declare function voidHeldParkCard(held: {
  * only — a suspended run is steered durably via the checkpoint's `setPendingSteer` instead, and only the
  * plain-stream path holds a steerable stream (the verify/cascade branches return a result, not a stream).
  */
-export declare function runInBackground(runner: Runner, spec: TaskSpec, runStore: RunStore, taskId: string, metrics?: Metrics, principal?: string, verify?: VerifyRoundsSpec, // 快审 F1:number 参升整对象——cost 顶随传
+export declare function runInBackground(runner: Runner, spec: TaskSpec, runStore: RunStore, taskId: string, metrics?: Metrics, 
+/** 本跑的属主主体(分区键;行属主 / ALS 读它)。 */
+principal?: string, verify?: VerifyRoundsSpec, // 快审 F1:number 参升整对象——cost 顶随传
 cascade?: CascadeConfig, instrumentDegenerate?: (result: TaskResult) => void, planCacheProbe?: {
     record: (scope: string | undefined, objective: string, completed: boolean) => void;
 }, persistThinking?: boolean, inflight?: Map<string, RunAbort>, preemptable?: Map<string, AbortController>, steerable?: Map<string, TaskStream>, modelUsage?: ModelUsageTracker, elicitation?: ElicitationCoordinator, 
-/** E23: the VERIFIED principal (gatedPrincipal) that may answer this run's elicitations — matches the respond
+/** E23: the VERIFIED principal (gatedSubject) that may answer this run's elicitations — matches the respond
  *  owner-gate's identity source (NOT the cost-attribution `principal`, which on a direct door is the self-asserted
  *  header → can be null while a JWT principal exists). Falls back to the run owner when not supplied. */
 elicitOwner?: string | null, 
@@ -435,6 +437,15 @@ workspaceRecorder?: SessionWorkspaceRecorder,
  * 缺席 = 嵌入方自带的装配器没铸 ⇒ 账本行不带技能段。
  */
 runSkills?: readonly RunSkillEntry[]): Promise<void>;
+/** 一次心跳要的那一面(run 店的带属主刷新;交回「行还在 running 吗」)。 */
+export interface RunHeartbeatStore {
+    heartbeat(taskId: string, owner: string | null): Promise<boolean>;
+}
+/**
+ * 🔴 **一次心跳**(四条腿的心跳拍与认领心跳 `http/claim-heartbeat.ts` 同一只 —— 判法只在这里):刷新,店交回「这条 run 的行还在 running 吗」;不在 ⇒ `onLost()`,持有者停下自己的腿。
+ * 判死一条行(观察口 / 认领冲突 / 收割器)拦不住它的执行者 —— 心跳打空今天不报,两个执行者会同写一只会话;这一答补上那一半。刷新失败不抛(`onError` 计数),下一拍再刷。
+ */
+export declare function beatRunHeartbeat(runStore: RunHeartbeatStore, taskId: string, owner: string | null, onLost: () => void, onError: () => void): void;
 /** How often a running instance refreshes its run's updated_at (liveness, independent of events).
  *  Must stay strictly below `runStaleSec` (asserted at startup AND on every hot config candidate) or the
  *  reaper would race live runs. [ref]:数值的单源是 `config-invariants.ts`(那条不变量的属主),两个消费面