@sema-agent/server 7.147.0 → 7.149.0

package/dist/http/resume-ctx-read.js

@@ -1,5 +1,5 @@
 import { openCheckpointCtx } from "./checkpoint-ctx.js";
-import { SqlJsonColumnError, StoreCorruptError } from "../plugins/sql-json-column.js";
+import { storeFaultClassOf } from "../plugins/store-fault.js";
 import { refusalBody } from "./refusal-body.js";
 export async function readResumeCtx(load, opening) {
     const read = await readStoredCtx(load);
@@ -14,14 +14,39 @@ async function readStoredCtx(load) {
         stored = await load;
     }
     catch (e) {
-        if (e instanceof StoreCorruptError)
-            return { kind: e.kind, where: e.where };
-        if (e instanceof SqlJsonColumnError)
-            throw e;
-        return { kind: "absent" };
+        return resumeStoreFailureOf(e);
     }
     return stored == null ? { kind: "absent" } : { kind: "ok", ctx: stored };
 }
+export function resumeStoreFailureOf(e) {
+    const fault = storeFaultClassOf(e);
+    switch (fault) {
+        case "corrupt":
+            return { kind: "corrupt", where: e.where };
+        case "connection":
+        case "deployment":
+        case "unclassified":
+            return { kind: "unreadable" };
+        case "defect":
+            throw e;
+        default: {
+            const unhandled = fault;
+            throw new Error(`resume-ctx-read: the store-fault judge answered a class this reader does not place: ${String(unhandled)}`);
+        }
+    }
+}
+export function resumeCtxUnreadableAnswer() {
+    return {
+        status: 503,
+        body: refusalBody({ errorCode: "state.resume_context_unreadable", message: "this session's stored resume context could not be read just now (reading it failed), so this request was not carried out. Send it again later; if this keeps happening, ask whoever operates this deployment to check its database." }),
+    };
+}
+export function resumeClaimFaultAnswer() {
+    return {
+        status: 503,
+        body: refusalBody({ errorCode: "state.resume_context_unreadable", message: "the stored state of this task could not be read or written just now (the store failed), so this request was not carried out and the task is still waiting for it. Send it again later; if this keeps happening, ask whoever operates this deployment to check its database." }),
+    };
+}
 export function resumeCtxUnsealableAnswer(read) {
     return {
         status: 409,

package/dist/http/resume-legs.d.ts

@@ -12,11 +12,14 @@
  * (`RunRegistry` / `RouteHelpers` / `RouteLegs` / `ReturnType<typeof createRequestGuards>`),不手抄签名 ⇒ 不会漂。
  */
 import type { IncomingMessage } from "node:http";
-import { CheckpointError, type QuestionAnswer, type CheckpointToken, type PendingSteerInput } from "@sema-agent/core";
+import { CheckpointError, type QuestionAnswer, type CheckpointToken, type CheckpointRowVerdict, type PendingSteerInput } from "@sema-agent/core";
 import type { DecideBinding, DecidedAction } from "./wire-types.js";
+import { type KeyCaller } from "../owner-faces.js";
+import { type Subject } from "../owner-brands.js";
 import type { CheckpointStoreFull } from "../plugins/store-backend.js";
 import type { HostDecision } from "../host-decision.js";
 import { type GateSighting } from "../approval-gate-currency.js";
+import { type CancelRunReader } from "../run-cancel-card.js";
 import { type PlanApprovePermissionModeAfter } from "../task-settings.js";
 import type { RouteCtxBase, DriveResumeArgs, PreparedPlanReview, RememberSessionRequest, ResumeCheckpointOutcome, ResumeLegOutcome, WorkflowDecisionDelivery } from "./route-ctx.js";
 import type { RunRegistry, RouteHelpers, RouteLegs } from "./route-ctx.js";
@@ -52,11 +55,54 @@ export declare const CHECKPOINT_ERROR_DISPOSITION: Readonly<Record<CheckpointErr
  * ⇒ `"terminal"`:与 `by_reason` 认不得的词同一条 fail-closed 方向(不宽容默认成可重试),也与修前手列串的缺省逐字相同。
  */
 export declare function resumeRefusalDisposition(e: CheckpointError): "cancelled" | "retriable" | "terminal";
+type NotOkRowVerdict = Exclude<CheckpointRowVerdict, {
+    readonly kind: "ok";
+}>;
+/**
+ * 🔴 **判官判「本引擎续不了」的一张卡,人从哪儿出去 —— 闭集**(这一行在本引擎上不收任何决定,批 / 拒 / 驳 / 改同拒;出路只看判决与这张卡本身,不看门的哪一扇、也不看决定词)。
+ * 唯一铸法 {@link rowWayOutOf};读面 = 决断类续跑拒体上的 `wayOut`(`/decide` 的这一行自己的拒 · `/plan_review` 与 `/resume` 上引擎对这张卡的拒 · 读行臂)。
+ *  · `cancel_run` —— 判决 `damaged`,且取消动词会结算这一张卡:`POST /v1/runs/:id/cancel` 按店 CAS 把卡 expire、再驱 run 终局(不经判官),之后另起任务;
+ *  · `newer_worker` —— 判决 `lacking`:更新引擎停驻的行,不低于停驻它那一版的 worker 续得了它,同一决定在那里落得下;卡留 pending(cancel 在这里是放弃它)。
+ * 缺席 = 本服务说不出一个客户端落得下的出路(判 `damaged` 而取消动词不会结算这张卡 —— 它停在已终局的 run 的纯 park 上、归属说不出的老行,或店此刻答不出这一问)。
+ */
+export type RowWayOut = "cancel_run" | "newer_worker";
+/**
+ * 出路铸法要问店的那一问的座:`cs` + run 店 + 这张卡的令牌 + 铸不成时留痕的日志口(铸法不抛 —— 出路是给客户端的指路,店答不出这一问时拒本身一字不变、只是不指路,并响亮留一行)。
+ * 读行抛的五个读者(读行臂)与载入行的三扇门各自在自己的位置上拿着 `cs` 与令牌,同交一座。
+ */
+export interface WayOutSeat {
+    readonly cs: Pick<CheckpointStoreFull, "hostSessionOfCard" | "findPendingTokenBySession">;
+    /** 取消动词那一问也要看 run 行(只对停着的 run 结算卡);没有耐久 run 店 ⇒ 缺席(取消口恒 501)。 */
+    readonly runs: CancelRunReader | undefined;
+    readonly token: CheckpointToken;
+    readonly logger: FlatServiceDeps["logger"];
+}
+/**
+ * {@link RowWayOut} 的唯一铸法:穷尽 core 的非 ok 判决 kind(core 加一种 ⇒ tsc 红,先来这里定它的出路)。
+ * `damaged` ⇒ `cancel_run` 当且仅当**取消动词会结算这一张卡**({@link cancelSettlesCard}:问的就是取消动词自己那一问,只读店的列,与行体坏成什么样无关 ——
+ * 判坏的卡的行体可以读不成检查点、属主格可以丢,取消照样落得下;投影若另按载入的行体判,就是同一件事的第二个读者)。
+ */
+export declare function rowWayOutOf(seat: WayOutSeat, kind: NotOkRowVerdict["kind"]): Promise<RowWayOut | undefined>;
+/**
+ * 🔴 **停驻行读者上「读行抛」的答复 —— 五个读者(决断口含停驻赎回与 SLA 拒扫的 `resumeCheckpoint` · 续跑 `resumePreempted` · 唤醒 `resumeWake` · 计划审阅
+ * `preparePlanReview` · 活卡迟到回决 `redeemParkedAsk`)在各自的披露闸(`mayDiscloseRowError` / `decisionRowAdmits`)与各自的 404 句之后,catch 尾同调这一只**([ref])。
+ *
+ * 一件事一个答案:店读这一行抛了 ⇒ ① 抛的是 {@link UnreadableCheckpointRowError} 且判决非 `ok`(体读不成检查点;判决由店在抛的那一拍对这一格原样字节现算,
+ * 列表面对同一格答的就是它)⇒ 这一行自己的拒({@link rowRefusalAnswer},句后接店的诊断);② 别的失败(连接 / 读腿漂)⇒ `409 conflict.checkpoint_unreadable` + 店的原话,
+ * 不冒充「这一行坏了」(这是该码今天**唯一**的产生处)。修前五个读者各写一份「抛了答什么」,只有决断口记得问判官 —— 一行两码,「忘」是结构上可能的。
+ *
+ * 写者位交空:版本键只长在 `checkpoint.unsupported_version` 上,而一份读不成检查点的字节,判官(core 全函数,读不动的值落 `damaged`)恒判 `damaged`,到不了那一码。
+ * 店日后若交出一只 `lacking` 判决,键缺席(不编值);不为这条到不了的臂再开一条读续跑上下文的口(`getCtx` 的结果只交 `readResumeCtx`,读口律;多一个读者就是多一处要记得)。
+ * 载入行那一问(行已读出、判官判 `lacking` 可达)自带写者位,见 {@link loadedRowRefusal}。
+ * `seat` 缺席 ⇒ 这个读者不带出路词(`/wake`:成文律,它的拒从不带 `wayOut`)。
+ */
+export declare function rowReadRefusalAnswer(e: unknown, seat: WayOutSeat | undefined): Promise<ResumeRefusalAnswer>;
 export declare function checkpointRefusalAnswer(e: CheckpointError, at: {
     readonly gate: string;
     readonly retriable: boolean;
     readonly taskId?: string;
     readonly versionKeys: Readonly<Record<string, string>>;
+    readonly wayOut?: RowWayOut;
 }): ResumeRefusalAnswer;
 /**
  * 一个答案只属于它被展示的那一个动作 —— 决断绑定的**唯一判官**:决断方点名它看到的那一对(`boundCallId` + `boundInputHash`,
@@ -75,32 +121,20 @@ export declare function createResumeLegs(ctx: {
     runnerFor: FlatServiceDeps["runnerFor"];
 } & RunRegistry & RouteHelpers & Pick<RouteLegs, "prepareSpec" | "finalizeTaskResult"> & Pick<ReturnType<typeof createRequestGuards>, "ownerCostQuotaDenied" | "ownerFleetLeaseDenied" | "usageWindowDenialFor">): {
     routeCtxBase: RouteCtxBase;
-    resumeCheckpoint: (sessionId: string, decision: "approve" | "deny", reason: string | undefined, hostDecision: HostDecision, req: IncomingMessage | undefined, answer: QuestionAnswer | undefined, binding: DecideBinding, remember?: RememberSessionRequest, acceptEarly?: boolean, decider?: {
-        principal?: string;
-        explicitOperator: boolean;
-    }, restatement?: ResumeRestatement) => Promise<ResumeCheckpointOutcome>;
+    resumeCheckpoint: (sessionId: string, decision: "approve" | "deny", reason: string | undefined, hostDecision: HostDecision, req: IncomingMessage | undefined, answer: QuestionAnswer | undefined, binding: DecideBinding, remember?: RememberSessionRequest, acceptEarly?: boolean, decider?: KeyCaller, restatement?: ResumeRestatement) => Promise<ResumeCheckpointOutcome>;
     driveResumeIntoRunLog: (args: DriveResumeArgs) => Promise<ResumeLegOutcome>;
     driveResumeLeg: (args: DriveResumeArgs, onAccepted?: (receipt: {
         status: number;
         body: object;
     }) => void) => Promise<ResumeLegOutcome>;
-    mayDiscloseRowError: (cs: CheckpointStoreFull, token: CheckpointToken, decider: {
-        principal?: string;
-        explicitOperator: boolean;
-    } | undefined) => Promise<boolean>;
-    resumePreempted: (sessionId: string, req: IncomingMessage | undefined, acceptEarly?: boolean, decider?: {
-        principal?: string;
-        explicitOperator: boolean;
-    }, restatement?: ResumeRestatement) => Promise<ResumeLegOutcome>;
-    startFreshHostTurn: (sessionId: string, objective: string, principal: string | undefined, req: IncomingMessage, workflowDecision: WorkflowDecisionDelivery, runId: string, restatement?: ResumeRestatement) => Promise<ResumeLegOutcome>;
-    resumeWake: (sessionId: string, message: PendingSteerInput | undefined, caller: string | undefined, req: IncomingMessage | undefined, acceptEarly?: boolean, workflowDecision?: WorkflowDecisionDelivery, ownerLeaseAdmittedFor?: string, restatement?: ResumeRestatement) => Promise<ResumeLegOutcome>;
+    decisionRowAdmits: (cs: CheckpointStoreFull, token: CheckpointToken, who: KeyCaller | undefined, bodyScope: string | undefined) => Promise<boolean>;
+    resumePreempted: (sessionId: string, req: IncomingMessage | undefined, acceptEarly?: boolean, decider?: KeyCaller, restatement?: ResumeRestatement) => Promise<ResumeLegOutcome>;
+    startFreshHostTurn: (sessionId: string, objective: string, subject: string | undefined, req: IncomingMessage, workflowDecision: WorkflowDecisionDelivery, runId: string, restatement?: ResumeRestatement) => Promise<ResumeLegOutcome>;
+    resumeWake: (sessionId: string, message: PendingSteerInput | undefined, caller: Subject | undefined, req: IncomingMessage | undefined, acceptEarly?: boolean, workflowDecision?: WorkflowDecisionDelivery, ownerLeaseAdmittedFor?: string, restatement?: ResumeRestatement) => Promise<ResumeLegOutcome>;
     preparePlanReview: (sessionId: string, log?: {
         taskId?: string;
         principalPresent?: boolean;
-    }, decider?: {
-        principal?: string;
-        explicitOperator: boolean;
-    }, sighting?: GateSighting, restatement?: ResumeRestatement) => Promise<{
+    }, decider?: KeyCaller, sighting?: GateSighting, restatement?: ResumeRestatement) => Promise<{
         readonly ok: false;
         readonly answer: {
             status: number;
@@ -113,4 +147,5 @@ export declare function createResumeLegs(ctx: {
     drivePlanReview: (prepared: PreparedPlanReview, decision: "approve" | "edit" | "reject", editedPlan: string | undefined, reason: string | undefined, hostDecision: HostDecision, req: IncomingMessage | undefined, acceptEarly?: boolean, permissionModeAfter?: PlanApprovePermissionModeAfter) => Promise<ResumeLegOutcome>;
     sessionNotifyDoor: import("../session-notify-door.js").SessionNotifyDoor;
 };
+export {};
 //# sourceMappingURL=resume-legs.d.ts.map