@sema-agent/server 7.148.0 → 7.149.0

package/dist/http/routes/tasks.js

@@ -1,7 +1,8 @@
 import { redactErrorMessage, redactHead, redactTerminalResult } from "../../observability/run-terminal.js";
 import { runWithVerification, runCascade, taskNotificationDedupKey, uuidv7 } from "@sema-agent/core";
 import { heldFor } from "../../peer-seat.js";
-import { beatRunHeartbeat, graftParkToolCallId, markChildrenStoppedByUserOnAbort, syncRefusalHttpStatus, zeroWorkRefusalFacts, releaseKeyIfZeroWorkRefusal, createPromptCommitReader, settleResumeAnchor, TurnAnchorCapture, HEARTBEAT_MS } from "../../runs.js";
+import { beatRunHeartbeat, graftParkToolCallId, heldParkOf, markChildrenStoppedByUserOnAbort, syncRefusalHttpStatus, zeroWorkRefusalFacts, releaseKeyIfZeroWorkRefusal, createPromptCommitReader, settleResumeAnchor, TurnAnchorCapture, HEARTBEAT_MS } from "../../runs.js";
+import { commitParkRow } from "../../park-row-commit.js";
 import { atHostBoundary, failureCodeOf, sealResultForExit, outwardPlane } from "../../terminal.js";
 import { voidVerifierPauseCard } from "../../verifier-pause-card.js";
 import { withSubject } from "../../observability/principal-context.js";
@@ -24,9 +25,10 @@ import { isReplayedOutcome, replayedOutcome, replayOfExistingRun } from "../subm
 import { httpErrorCode, sendJson, sseHeaders } from "../send.js";
 import { collectSsePreamble } from "../sse-log.js";
 import { buildApprovalPreamble } from "../../approval-card.js";
+import { approvalLegOriginOf } from "../../approval-leg-origin.js";
 import { approvalPreambleReplays, declaredApprovalFrameFamilies, resolveApprovalLeg, resolveStreamApprovalGate } from "../../tool-approval.js";
 import { buildActiveRunConflict, isActiveRunConflictBody, toDoneFrameResult } from "../active-run-conflict.js";
-import { commitExecutionContext } from "../execution-context.js";
+import { SUBMISSION_CLAIM_FACE, commitExecutionContext, faultedAnswerOf } from "../execution-context.js";
 import { rootSessionAbsentAnswer } from "../execution-context.js";
 import { recheckClaimBeforeLaunch, startClaimHeartbeat } from "../claim-heartbeat.js";
 import { timeClaim } from "../claim-latency.js";
@@ -34,7 +36,7 @@ import { commitSessionInheritEnv } from "../session-inherit-env.js";
 import { headerStr, gatedPerson, gatedSubject, explicitOperatorOk, runIdentityOf } from "../principal-gate.js";
 import { recoveredSubject } from "../../owner-faces.js";
 import { recordFailOpen } from "../../observability/fail-open.js";
-import { buildSyncSubmitBody } from "../sync-submit-body.js";
+import { buildSyncSubmitBody, syncSubmitBodyOfRow } from "../sync-submit-body.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
 import { persistSubmissionCtx, SUBMIT_CTX_CLAIM_LOST } from "../submit-ctx.js";
@@ -42,6 +44,7 @@ import { withModelReachScope } from "../../model-reach-scope.js";
 import { createInstructionSelectionLeg } from "../../instruction-selection.js";
 import { refusalBody } from "../refusal-body.js";
 import { heldWorkflowParkDecisions } from "../../parked-decide.js";
+import { compositionLegRoot } from "../../task-cwd.js";
 import { createSessionWorkspaceRecorder, sessionWorkspaceStoreOf } from "../../session-workspace.js";
 const DISCONNECT_PARK_GRACE_MS = 10_000;
 async function mintSubmitExitResult(result, checkpoints) {
@@ -277,8 +280,14 @@ export async function handleTasks(req, res, match, ctx) {
                 const runStreamSubmitLeg = async () => {
                     ranLive = true;
                     let finalResult;
+                    let heldCard;
+                    const commitSyncPark = (runStore, runId, word, parkResult, cardToken) => commitParkRow({
+                        runStore, taskId: runId, word, result: parkResult, card: { token: cardToken, sessionId: prepared.spec.sessionId }, cards: deps.checkpointStore, leg: "sync",
+                        legId: heldLegOf(durableLegId, runId), staleWindowMs: deps.config.runStaleSec * 1000,
+                    });
                     let runRowSettled = false;
                     let durableTaskId;
+                    let durableLegId;
                     let durableHeartbeat;
                     const cancelledResult = (errorMessage, cause) => mintCancelledResult({ taskId: durableTaskId ?? "", sessionId: prepared.spec.sessionId, startedAtMs: streamLegStartedAt, message: errorMessage, cause });
                     let userMsgEntryId;
@@ -293,52 +302,60 @@ export async function handleTasks(req, res, match, ctx) {
                         anchorPut = true;
                         await settleResumeAnchor(() => store.put(prepared.spec.sessionId, key, entryId, principal ?? null), { leg: "stream", kind: "prompt" });
                     };
-                    if (deps.runStore) {
-                        const tid = earlyDurableTid ?? uuidv7();
-                        const created = await timeClaim(deps.metrics, "run_claim", deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", { ...runMeta(prepared, source), identity: runIdentityOf(req, deps.config, principal ?? null), idem: idem ?? null }));
-                        if (created.ok)
-                            clearTurnActivity(tid);
-                        if (created.ok)
-                            recordResourceWindow(tid, prepared.spec.resourceSuspend);
-                        if (created.existing) {
-                            const replay = await replayOfExistingRun(created.existing, { subject: submitter, idem }, "sync", deps, deps.runStore);
-                            writeTerminalFrame(doneFrameOfOutcome(replay));
-                            return replay;
+                    try {
+                        if (deps.runStore) {
+                            const tid = earlyDurableTid ?? uuidv7();
+                            const created = await timeClaim(deps.metrics, "run_claim", deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", { ...runMeta(prepared, source), identity: runIdentityOf(req, deps.config, principal ?? null), idem: idem ?? null }));
+                            if (created.ok)
+                                clearTurnActivity(tid);
+                            if (created.ok)
+                                recordResourceWindow(tid, prepared.spec.resourceSuspend);
+                            if (created.existing) {
+                                const replay = await replayOfExistingRun(created.existing, { subject: submitter, idem }, "sync", deps, deps.runStore);
+                                writeTerminalFrame(doneFrameOfOutcome(replay));
+                                return replay;
+                            }
+                            if (created.sessionAbsent) {
+                                const refused = rootSessionAbsentAnswer();
+                                writeTerminalFrame(doneFrameOfOutcome(refused));
+                                return refused;
+                            }
+                            if (!created.ok) {
+                                const conflict = await buildActiveRunConflict({ runStore: deps.runStore, checkpointStore: deps.checkpointStore, governance: deps.config, turnActivity: readTurnActivityMs }, prepared.spec.sessionId, created.activeTaskId);
+                                const refused = { status: 409, body: conflict };
+                                writeTerminalFrame(doneFrameOfOutcome(refused));
+                                return refused;
+                            }
+                            prepared.seat.noteOwnRun(tid);
+                            stopClaimHeartbeat = startClaimHeartbeat(deps.runStore, tid, principal ?? null, deps.metrics);
+                            const placementReject = await commitExecutionContext(deps, { kind: "run", runStore: deps.runStore, taskId: tid, legId: created.legId }, prepared.execution);
+                            if (placementReject) {
+                                writeTerminalFrame(doneFrameOfOutcome(placementReject));
+                                return placementReject;
+                            }
+                            durableTaskId = tid;
+                            durableLegId = created.legId;
+                            fillRunPreviewOnDelivery(prepared.acceptance, deps.runStore, tid);
                         }
-                        if (created.sessionAbsent) {
-                            const refused = rootSessionAbsentAnswer();
-                            writeTerminalFrame(doneFrameOfOutcome(refused));
-                            return refused;
+                        if (deps.checkpointStore) {
+                            const ctxRefusal = await persistSubmissionCtx(deps.checkpointStore, deps, durableTaskId !== undefined && deps.runStore ? { runStore: deps.runStore, taskId: durableTaskId, legId: heldLegOf(durableLegId, durableTaskId) } : undefined, prepared);
+                            if (ctxRefusal !== undefined && ctxRefusal !== SUBMIT_CTX_CLAIM_LOST) {
+                                writeTerminalFrame(doneFrameOfOutcome(ctxRefusal));
+                                return ctxRefusal;
+                            }
                         }
-                        if (!created.ok) {
-                            const conflict = await buildActiveRunConflict({ runStore: deps.runStore, checkpointStore: deps.checkpointStore, governance: deps.config, turnActivity: readTurnActivityMs }, prepared.spec.sessionId, created.activeTaskId);
-                            const refused = { status: 409, body: conflict };
-                            writeTerminalFrame(doneFrameOfOutcome(refused));
-                            return refused;
+                        const lostClaim = durableTaskId !== undefined && deps.runStore ? await recheckClaimBeforeLaunch(deps, deps.runStore, prepared.spec.sessionId, durableTaskId, heldLegOf(durableLegId, durableTaskId)) : undefined;
+                        if (lostClaim !== undefined) {
+                            writeTerminalFrame(doneFrameOfOutcome(lostClaim));
+                            return lostClaim;
                         }
-                        prepared.seat.noteOwnRun(tid);
-                        if (detachOnDisconnect)
+                        if (durableTaskId !== undefined && detachOnDisconnect)
                             prepared.seat.markRecord();
-                        stopClaimHeartbeat = startClaimHeartbeat(deps.runStore, tid, principal ?? null, deps.metrics);
-                        const placementReject = await commitExecutionContext(deps, { kind: "run", runStore: deps.runStore, taskId: tid }, prepared.execution);
-                        if (placementReject) {
-                            writeTerminalFrame(doneFrameOfOutcome(placementReject));
-                            return placementReject;
-                        }
-                        durableTaskId = tid;
-                        fillRunPreviewOnDelivery(prepared.acceptance, deps.runStore, tid);
-                    }
-                    if (deps.checkpointStore) {
-                        const ctxRefusal = await persistSubmissionCtx(deps.checkpointStore, deps, durableTaskId !== undefined && deps.runStore ? { runStore: deps.runStore, taskId: durableTaskId } : undefined, prepared);
-                        if (ctxRefusal !== undefined && ctxRefusal !== SUBMIT_CTX_CLAIM_LOST) {
-                            writeTerminalFrame(doneFrameOfOutcome(ctxRefusal));
-                            return ctxRefusal;
-                        }
                     }
-                    const lostClaim = durableTaskId !== undefined && deps.runStore ? await recheckClaimBeforeLaunch(deps, deps.runStore, prepared.spec.sessionId, durableTaskId) : undefined;
-                    if (lostClaim !== undefined) {
-                        writeTerminalFrame(doneFrameOfOutcome(lostClaim));
-                        return lostClaim;
+                    catch (e) {
+                        const claimFault = faultedAnswerOf(e, SUBMISSION_CLAIM_FACE.faulted);
+                        writeTerminalFrame(doneFrameOfOutcome(claimFault));
+                        return claimFault;
                     }
                     commitSessionInheritEnv(deps, prepared.spec.sessionId, prepared.body);
                     markChildrenStoppedByUserOnAbort(ac.signal, durableTaskId ?? prepared.spec.sessionId, prepared.auth?.subject);
@@ -407,6 +424,7 @@ export async function handleTasks(req, res, match, ctx) {
                     const noticeLedger = ledgerSink;
                     const unregisterEngineNotice = registerEngineNoticeLeg({
                         sessionId: prepared.spec.sessionId,
+                        ...(durableTaskId !== undefined ? { taskId: durableTaskId } : {}),
                         ...(prepared.engineNotices !== undefined ? { pending: prepared.engineNotices } : {}),
                         live: (row) => {
                             if (res.writableEnded || res.destroyed) {
@@ -517,6 +535,7 @@ export async function handleTasks(req, res, match, ctx) {
                                     if (ledgerSink)
                                         await manifestSeat?.drain(ledgerSink.append);
                                     if (ev.type === "done") {
+                                        heldCard = heldParkOf(ev.result);
                                         finalResult = await mintSubmitExitResult(ev.result, deps.checkpointStore);
                                         if (durableTaskId && finalResult)
                                             finalResult = { ...finalResult, taskId: durableTaskId };
@@ -526,7 +545,8 @@ export async function handleTasks(req, res, match, ctx) {
                                         finalizeTaskResult(ev.result, principal, prepared.spec.objective);
                                         noteRunOutcome(finalResult);
                                         await putRewindAnchor();
-                                        settleFleet(outwardPlane(finalResult.terminal).status, fleetRunResiduals(finalResult, failureCodeOf(finalResult.terminal)));
+                                        if (!(durableTaskId && deps.runStore && deps.checkpointStore && heldCard !== undefined))
+                                            settleFleet(outwardPlane(finalResult.terminal).status, fleetRunResiduals(finalResult, failureCodeOf(finalResult.terminal)));
                                         if (ledgerSink && finalResult) {
                                             if (usageKey && deps.modelUsage && deps.runStore && durableTaskId) {
                                                 const rs2 = deps.runStore;
@@ -679,7 +699,7 @@ export async function handleTasks(req, res, match, ctx) {
                                 owner: askOwner,
                                 abortSignal: ac.signal,
                                 sessionId: prepared.spec.sessionId,
-                                executionLane: prepared.execution.lane,
+                                ...approvalLegOriginOf(prepared.execution),
                                 ...(streamApprovalOn
                                     ? {
                                         family: "approval_request",
@@ -693,12 +713,12 @@ export async function handleTasks(req, res, match, ctx) {
                         if (deps.toolApproval) {
                             const toolApproval = deps.toolApproval;
                             prepared.spec.onAsk = unattended
-                                ? toolApproval.boundUnattendedAsk({ owner: askOwner, taskId: askTaskId, sessionId: prepared.spec.sessionId, executionLane: prepared.execution.lane }, unattended)
+                                ? toolApproval.boundUnattendedAsk({ owner: askOwner, taskId: askTaskId, sessionId: prepared.spec.sessionId, ...approvalLegOriginOf(prepared.execution) }, unattended)
                                 : toolApproval.boundAsk({
                                     owner: askOwner,
                                     taskId: askTaskId,
                                     sessionId: prepared.spec.sessionId,
-                                    executionLane: prepared.execution.lane,
+                                    ...approvalLegOriginOf(prepared.execution),
                                     ...(streamApprovalOn ? { legKey: "", ...(legDeadlineMonotonic !== undefined ? { legDeadlineMonotonic } : {}) } : {}),
                                 });
                         }
@@ -718,10 +738,10 @@ export async function handleTasks(req, res, match, ctx) {
                             : withApproval()));
                         if (durableTaskId && deps.runStore) {
                             const finalPlane = finalResult ? outwardPlane(finalResult.terminal) : undefined;
-                            if (finalResult && finalPlane?.status === "suspended" && deps.checkpointStore)
-                                await deps.runStore.setSuspended(durableTaskId, finalResult);
-                            else if (finalResult && finalPlane?.status === "needs_review" && deps.checkpointStore)
-                                await deps.runStore.setNeedsReview(durableTaskId, finalResult);
+                            if (finalResult && heldCard !== undefined && deps.checkpointStore) {
+                                const parked = await commitSyncPark(deps.runStore, durableTaskId, heldCard.word, finalResult, heldCard.token);
+                                settleFleet(parked.kind === "ended" ? "failed" : outwardPlane(finalResult.terminal).status, fleetRunResiduals(finalResult, failureCodeOf(finalResult.terminal)));
+                            }
                             else if (finalResult && finalPlane) {
                                 await deps.runStore.setTerminal(durableTaskId, finalPlane.status, finalResult, finalPlane.errorMessage ?? null);
                                 await releaseKeyIfZeroWorkRefusal(deps.runStore, durableTaskId, finalResult);
@@ -736,8 +756,8 @@ export async function handleTasks(req, res, match, ctx) {
                                         await ledgerSink.flush().catch(() => undefined);
                                         await ledgerSink.appendParked("suspended", {}).catch(() => undefined);
                                     }
-                                    await deps.runStore.setSuspended(durableTaskId, null);
-                                    settleFleet("suspended");
+                                    const parked = await commitSyncPark(deps.runStore, durableTaskId, "suspended", null, pending);
+                                    settleFleet(parked.kind === "ended" ? "failed" : "suspended");
                                 }
                                 else if (dcCause !== undefined) {
                                     const dcErr = "stream client disconnected before completion (run aborted)";
@@ -790,8 +810,8 @@ export async function handleTasks(req, res, match, ctx) {
                                             await ledgerSink.flush().catch(() => undefined);
                                             await ledgerSink.appendParked("suspended", {}).catch(() => undefined);
                                         }
-                                        await deps.runStore.setSuspended(durableTaskId, null);
-                                        settleFleet("suspended");
+                                        const parked = await commitSyncPark(deps.runStore, durableTaskId, "suspended", null, pending);
+                                        settleFleet(parked.kind === "ended" ? "failed" : "suspended");
                                     }
                                     else if (finalResult) {
                                         if (ledgerSink && !ledgerTerminal) {
@@ -881,36 +901,43 @@ export async function handleTasks(req, res, match, ctx) {
                 const runSyncSubmitLeg = async () => {
                     const syncLegStartedAt = Date.now();
                     let durableTaskId;
+                    let durableLegId;
                     let durableHeartbeat;
-                    if (deps.runStore) {
-                        const tid = uuidv7();
-                        const created = await timeClaim(deps.metrics, "run_claim", deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", { ...runMeta(prepared, source), identity: runIdentityOf(req, deps.config, principal ?? null), idem: idem ?? null }));
-                        if (created.ok)
-                            clearTurnActivity(tid);
-                        if (created.ok)
-                            recordResourceWindow(tid, prepared.spec.resourceSuspend);
-                        if (created.existing)
-                            return await replayOfExistingRun(created.existing, { subject: submitter, idem }, "sync", deps, deps.runStore);
-                        if (created.sessionAbsent)
-                            return rootSessionAbsentAnswer();
-                        if (!created.ok)
-                            return { status: 409, body: await buildActiveRunConflict({ runStore: deps.runStore, checkpointStore: deps.checkpointStore, governance: deps.config, turnActivity: readTurnActivityMs }, prepared.spec.sessionId, created.activeTaskId) };
-                        prepared.seat.noteOwnRun(tid);
-                        stopSyncClaimHeartbeat = startClaimHeartbeat(deps.runStore, tid, principal ?? null, deps.metrics);
-                        const placementReject = await commitExecutionContext(deps, { kind: "run", runStore: deps.runStore, taskId: tid }, prepared.execution);
-                        if (placementReject)
-                            return placementReject;
-                        durableTaskId = tid;
-                        fillRunPreviewOnDelivery(prepared.acceptance, deps.runStore, tid);
+                    try {
+                        if (deps.runStore) {
+                            const tid = uuidv7();
+                            const created = await timeClaim(deps.metrics, "run_claim", deps.runStore.createRun(tid, prepared.spec.sessionId, principal ?? null, deps.instanceId ?? "default", { ...runMeta(prepared, source), identity: runIdentityOf(req, deps.config, principal ?? null), idem: idem ?? null }));
+                            if (created.ok)
+                                clearTurnActivity(tid);
+                            if (created.ok)
+                                recordResourceWindow(tid, prepared.spec.resourceSuspend);
+                            if (created.existing)
+                                return await replayOfExistingRun(created.existing, { subject: submitter, idem }, "sync", deps, deps.runStore);
+                            if (created.sessionAbsent)
+                                return rootSessionAbsentAnswer();
+                            if (!created.ok)
+                                return { status: 409, body: await buildActiveRunConflict({ runStore: deps.runStore, checkpointStore: deps.checkpointStore, governance: deps.config, turnActivity: readTurnActivityMs }, prepared.spec.sessionId, created.activeTaskId) };
+                            prepared.seat.noteOwnRun(tid);
+                            stopSyncClaimHeartbeat = startClaimHeartbeat(deps.runStore, tid, principal ?? null, deps.metrics);
+                            const placementReject = await commitExecutionContext(deps, { kind: "run", runStore: deps.runStore, taskId: tid, legId: created.legId }, prepared.execution);
+                            if (placementReject)
+                                return placementReject;
+                            durableTaskId = tid;
+                            durableLegId = created.legId;
+                            fillRunPreviewOnDelivery(prepared.acceptance, deps.runStore, tid);
+                        }
+                        if (deps.checkpointStore) {
+                            const ctxRefusal = await persistSubmissionCtx(deps.checkpointStore, deps, durableTaskId !== undefined && deps.runStore ? { runStore: deps.runStore, taskId: durableTaskId, legId: heldLegOf(durableLegId, durableTaskId) } : undefined, prepared);
+                            if (ctxRefusal !== undefined && ctxRefusal !== SUBMIT_CTX_CLAIM_LOST)
+                                return ctxRefusal;
+                        }
+                        const lostClaim = durableTaskId !== undefined && deps.runStore ? await recheckClaimBeforeLaunch(deps, deps.runStore, prepared.spec.sessionId, durableTaskId, heldLegOf(durableLegId, durableTaskId)) : undefined;
+                        if (lostClaim !== undefined)
+                            return lostClaim;
                     }
-                    if (deps.checkpointStore) {
-                        const ctxRefusal = await persistSubmissionCtx(deps.checkpointStore, deps, durableTaskId !== undefined && deps.runStore ? { runStore: deps.runStore, taskId: durableTaskId } : undefined, prepared);
-                        if (ctxRefusal !== undefined && ctxRefusal !== SUBMIT_CTX_CLAIM_LOST)
-                            return ctxRefusal;
+                    catch (e) {
+                        return faultedAnswerOf(e, SUBMISSION_CLAIM_FACE.faulted);
                     }
-                    const lostClaim = durableTaskId !== undefined && deps.runStore ? await recheckClaimBeforeLaunch(deps, deps.runStore, prepared.spec.sessionId, durableTaskId) : undefined;
-                    if (lostClaim !== undefined)
-                        return lostClaim;
                     commitSessionInheritEnv(deps, prepared.spec.sessionId, prepared.body);
                     const syncCancelCtrl = createRunAbort(principal ?? null);
                     markChildrenStoppedByUserOnAbort(syncCancelCtrl.signal, durableTaskId ?? prepared.spec.sessionId, prepared.auth?.subject);
@@ -947,8 +974,9 @@ export async function handleTasks(req, res, match, ctx) {
                     counters.uncountedBillableInflight++;
                     try {
                         const heldDecisions = await heldWorkflowParkDecisions(deps, prepared.spec.sessionId);
-                        const verifyLeg = (v) => runWithVerification(prepared.runner, specWithSignal, v, heldDecisions);
-                        const cascadeLeg = () => runCascade(prepared.runner, specWithSignal, cascadeConfig(deps.config.cascadeLadder, prepared.spec.limits?.maxCostUsd), heldDecisions);
+                        const compositionInternals = { ...heldDecisions, ...compositionLegRoot(prepared.legFacts?.registeredCwd) };
+                        const verifyLeg = (v) => runWithVerification(prepared.runner, specWithSignal, v, compositionInternals);
+                        const cascadeLeg = () => runCascade(prepared.runner, specWithSignal, cascadeConfig(deps.config.cascadeLadder, prepared.spec.limits?.maxCostUsd), compositionInternals);
                         const plainLeg = async () => {
                             const stream = prepared.runner.runTaskStream(specWithSignal, undefined, heldDecisions);
                             const syncWorkspace = createSessionWorkspaceRecorder(sessionWorkspaceStoreOf(deps.sessionStorage), prepared.legFacts?.sessionWitness);
@@ -1009,15 +1037,16 @@ export async function handleTasks(req, res, match, ctx) {
                     }
                     const exitResult = await mintSubmitExitResult(result, deps.checkpointStore);
                     const syncPlane = outwardPlane(result.terminal);
-                    if (syncPlane.status === "suspended" && deps.checkpointStore && deps.runStore && durableTaskId) {
-                        await deps.runStore.setSuspended(durableTaskId, exitResult);
-                        prepared.acceptance.settle(result);
-                        return { status: 200, body: withSyncSubmitKeys(buildSyncSubmitBody(exitResult, { taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: "suspended" })) };
-                    }
-                    if (syncPlane.status === "needs_review" && deps.checkpointStore && deps.runStore && durableTaskId) {
-                        await deps.runStore.setNeedsReview(durableTaskId, exitResult);
+                    const syncHeld = heldParkOf(result);
+                    if (syncHeld !== undefined && deps.checkpointStore && deps.runStore && durableTaskId) {
+                        const parked = await commitParkRow({
+                            runStore: deps.runStore, taskId: durableTaskId, word: syncHeld.word, result: exitResult, card: { token: syncHeld.token, sessionId: prepared.spec.sessionId }, cards: deps.checkpointStore, leg: "sync",
+                            legId: heldLegOf(durableLegId, durableTaskId), staleWindowMs: deps.config.runStaleSec * 1000,
+                        });
                         prepared.acceptance.settle(result);
-                        return { status: 200, body: withSyncSubmitKeys(buildSyncSubmitBody(exitResult, { taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: "needs_review" })) };
+                        if (parked.kind === "ended")
+                            return { status: 200, body: withSyncSubmitKeys(parked.row !== undefined ? syncSubmitBodyOfRow(parked.row) : { taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: "failed" }) };
+                        return { status: 200, body: withSyncSubmitKeys(buildSyncSubmitBody(exitResult, { taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: syncHeld.word })) };
                     }
                     if (durableTaskId && deps.runStore)
                         await deps.runStore.setTerminal(durableTaskId, syncPlane.status, exitResult, syncPlane.errorMessage ?? null);
@@ -1055,4 +1084,9 @@ export const TASKS_ROUTES = [
     { id: "tasks-submit", path: "/v1/tasks", billable: "submit", methods: ["POST"] },
     { id: "tasks-submit-stream", path: "/v1/tasks/stream", billable: "submit", methods: ["POST"] },
 ];
+function heldLegOf(legId, taskId) {
+    if (legId === undefined)
+        throw new Error(`tasks route: run ${taskId} has no record of the holding leg its createRun handed back — wiring error, nothing keyed on the leg can be written`);
+    return legId;
+}
 //# sourceMappingURL=tasks.js.map

package/dist/http/server.d.ts

@@ -606,7 +606,7 @@ export interface ServiceSeamDeps {
     /** [ref] §10.2 —— 跨主体投递门(`createOrgDeliveryGate` 的产物,`boot/stage-06-runners.ts` 装配的唯一实例)。
      *  `POST /v1/principal-inbox/messages` 只经它投递;缺席 = 本部署没声明收件箱消费方(`PRINCIPAL_INBOX_ASSISTANT` 未设)⇒
      *  那一口 501、能力位 `principalInboxDelivery` false(同读事实 `principalInboxDelivery`)。 */
-    orgDeliveryGate?: import("@sema-agent/core").OrgDeliveryGate;
+    orgDeliveryGate?: import("../org-delivery-gate.js").ServerOrgDeliveryGate;
     /** WEB-SETUP-RECON 附B — org sessionMirror 治理态的 SERVICE 半场 = **观测面(audit),非执法面**。
      *  裁定 (c):「该镜像而未镜像」发生在数据产生端(壳)——本 server 是镜像**目标**,只看得见到达的 push;
      *  没到达的会话对 server 不存在(无客户端会话清单、无心跳契约),required 锁的真执法只能在壳(CC
@@ -659,10 +659,9 @@ export interface ServiceObservabilityDeps {
  *  缺席 = 该道门不存在(不是「默认放行的门」——两者在事故复盘里语义完全不同)。 */
 export interface ServiceGovernanceDeps {
     /** 鉴权桥(registry-core api/auth-bridge):registry 用户 JWT → principal。缺席=分支不存在
-     *  (bearer 只认 SERVICE_AUTH_TOKEN(S),现状不变)。 */
-    webAdminJwtVerifier?: {
-        verify: (bearer: string) => Promise<import("../auth-bridge.js").VerifyOutcome>;
-    };
+     *  (bearer 只认 SERVICE_AUTH_TOKEN(S),现状不变)。席上的型就是工厂 `createWebAdminJwtVerifier` 铸的那一种(含只读成员 `issuer` = 它验的 issuer):
+     *  与配置里的桥成对(在不在、验的是谁),`createHttpServer` 构造期判。 */
+    webAdminJwtVerifier?: import("../auth-bridge.js").WebAdminJwtVerifier;
     /** Per-principal rate limiter for task/run endpoints. In-memory (single replica) or TiDB-backed
      *  (cross-replica soft limit) — both satisfy RateGate. */
     rateLimiter?: RateGate;

package/dist/http/server.js

@@ -5,6 +5,7 @@ import {} from "../web-admin-client/facade.js";
 import { describeValueShape } from "@sema-agent/settings-schema";
 import { HttpError } from "../security.js";
 import { SessionDeletingError, SessionForkInProgressError } from "../execution-placement.js";
+import { ORG_DELIVERY_QUOTA_UNREADABLE_SENTENCE, OrgDeliveryQuotaUnreadableError } from "../plugins/org-delivery-quota-store.js";
 import {} from "../memory-sync.js";
 import {} from "../orchestration/workflow-agent-steer.js";
 import {} from "../orchestration/workflow-completion-inbox.js";
@@ -26,7 +27,7 @@ import { sqlEngineSeatIssue } from "../sql-engine-posture.js";
 import { parkDecisionStoreRefusal } from "../orchestration/workflow-park-decision.js";
 import { CHECKPOINT_CTX_SEALING_REQUIRED } from "./checkpoint-ctx.js";
 import { PARKED_REVIVE_EXECUTION_SEAT_REQUIRED } from "../parked-decide.js";
-import { a2aAudienceIdentityBoundaryRefusal, operatorDeclarationRefusal } from "../config-invariants.js";
+import { a2aAudienceVerifiedSourceRefusal, operatorDeclarationRefusal } from "../config-invariants.js";
 import { retiredServiceDepsRefusal } from "./retired-service-deps.js";
 import { createAdmission, MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills } from "./admission.js";
 import { createResumeLegs } from "./resume-legs.js";
@@ -37,7 +38,9 @@ import { createApprovalSweeps } from "./approval-sweeps.js";
 export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath };
 export { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills };
 import { explicitOperatorOk } from "./principal-gate.js";
-import { configuredIdentitySources } from "../identity-source.js";
+import { authBridgeIssuerOf, configuredIdentitySources } from "../identity-source.js";
+import { normalizeBridgeIssuer } from "../auth-bridge.js";
+import { buildDisplaySafeUrl } from "../trace/redact.js";
 export { explicitOperatorOk };
 class DrainYieldingPreemptBook extends Map {
     drainingNow;
@@ -73,6 +76,12 @@ export function createHttpServer(rawDeps) {
     if (!Array.isArray(deps.deploymentMods)) {
         throw new Error("createHttpServer: the deploymentMods seat is required — it is how the server learns whether a prompt screen runs on its legs (the same registrations the Runners carry as `mods`); pass `[]` for an embedding without mods; refusing to start rather than store objective text before the screen decides");
     }
+    if (typeof deps.peerDesk?.lease !== "function" || typeof deps.peerDesk.declare !== "function" || typeof deps.peerDesk.seat?.answer !== "function") {
+        throw new Error("createHttpServer: the peerDesk seat is required — it is the one registry of the MCP / A2A credential pieces a send carries, and the submission and resume funnels open their host leases over it; pass `createPeerDesk()` (package root, zero IO — an embedding without MCP / A2A credentials passes one too), the very desk each Runner carries as `peerSeat: desk.seat`; refusing to start rather than answer every submission with a 500 at its first lease");
+    }
+    if (typeof deps.scenarioGate !== "function" || typeof deps.scenarioGate.known !== "function") {
+        throw new Error("createHttpServer: the scenarioGate seat is required — it is the one reading of which scenario names this deployment serves and lets a principal use, and the capability status face, the two session panels and the scenario request header all ask it; pass the gate that `createScenarioGate` (package root) mints from your config, scenario table and principal caps on its \"peek\" leg; refusing to start rather than answer those reads with a 500");
+    }
     {
         const retired = retiredServiceDepsRefusal(deps);
         if (retired !== undefined)
@@ -97,11 +106,23 @@ export function createHttpServer(rawDeps) {
                 "the service boot builds one from that same issuer; inject a verifier for it, or remove the bridge and the center from the config, " +
                 "since /health.auth, the owner gates and the one-time migrations read the bridge from the config alone; refusing to start rather than report SSO sign-in that verifies nobody");
         }
+        const configured = authBridgeIssuerOf(deps.config);
+        const verifier = deps.webAdminJwtVerifier;
+        if (verifier !== undefined && configured !== undefined) {
+            const verifies = verifier.issuer;
+            if (typeof verifies !== "string" || normalizeBridgeIssuer(verifies) !== normalizeBridgeIssuer(configured.issuer)) {
+                throw new Error(`createHttpServer: the injected webAdminJwtVerifier verifies issuer ${typeof verifies === "string" ? buildDisplaySafeUrl(verifies) : `<${describeValueShape(verifies)}>`}, ` +
+                    `but the config's auth bridge issuer is ${buildDisplaySafeUrl(configured.issuer)} (authBridgeIssuer / AUTH_BRIDGE_ISSUER, or the center base webAdmin.baseUrl when that is unset) — ` +
+                    "the gate would accept one issuer's tokens while /health.center.issuer reports another; the config is the only place the deployment's issuer is read, " +
+                    "so inject a verifier whose `issuer` member (the issuer it verifies tokens for) is that one, or change the config to the issuer the verifier verifies " +
+                    "(the values are shown display-safe: credentials, query and fragment are folded); refusing to start rather than verify tokens for an issuer this deployment does not report");
+            }
+        }
     }
     {
-        const audienceBoundaryFailure = a2aAudienceIdentityBoundaryRefusal(deps.config.a2aServe, configuredIdentitySources(deps.config).length === 0);
-        if (audienceBoundaryFailure !== undefined)
-            throw new Error(audienceBoundaryFailure);
+        const audienceSourceFailure = a2aAudienceVerifiedSourceRefusal(deps.config.a2aServe, configuredIdentitySources(deps.config).length === 0);
+        if (audienceSourceFailure !== undefined)
+            throw new Error(audienceSourceFailure);
     }
     {
         const issue = sqlEngineSeatIssue(deps.backend, deps.sqlEngine);
@@ -227,6 +248,10 @@ export function createHttpServer(rawDeps) {
                 sendError(res, 409, err.code, err.message);
                 return;
             }
+            if (err instanceof OrgDeliveryQuotaUnreadableError) {
+                sendError(res, 500, "internal.org_delivery_quota_unreadable", ORG_DELIVERY_QUOTA_UNREADABLE_SENTENCE);
+                return;
+            }
             sendOpenFaceFault(res, err);
         });
     });

package/dist/http/submit-ctx.d.ts

@@ -35,6 +35,7 @@ export declare function persistSubmitCtx(store: SubmitCtxStore, deps: {
 }, claim: {
     readonly runStore: RunStore;
     readonly taskId: string;
+    readonly legId: string;
 } | undefined, sessionId: string, fields: Parameters<typeof buildCheckpointCtx>[0]): Promise<SubmitCtxRefusal | typeof SUBMIT_CTX_CLAIM_LOST | undefined>;
 /**
  * 提交腿写续跑输入的入口(三个调用点同调这一只):体与标记按受理座提交时交出的那一份定(见文件头「体里的目标按哪一份写」),只写这一笔。

package/dist/http/submit-ctx.js

@@ -1,5 +1,5 @@
 import { StoreRowTooLargeError } from "../plugins/sql-errors.js";
-import { releaseClaimedRun } from "./claimed-run.js";
+import { withdrawClaimedRun } from "./claimed-run.js";
 import { runProvenElsewhere } from "../plugins/store-contracts.js";
 import { buildCheckpointCtx, CheckpointCtxUnsealableError } from "./checkpoint-ctx.js";
 import { refusalBody } from "./refusal-body.js";
@@ -51,8 +51,7 @@ export async function persistSubmitCtx(store, deps, claim, sessionId, fields) {
         const unsealable = err instanceof CheckpointCtxUnsealableError ? err : undefined;
         const known = tooLarge ?? unsealable;
         if (claim !== undefined) {
-            const why = known !== undefined ? known.message : `the run's resume inputs could not be stored: ${err instanceof Error ? err.message : String(err)}`;
-            await releaseClaimedRun(claim.runStore, claim.taskId, why, (releaseErr, step) => {
+            await withdrawClaimedRun(claim.runStore, claim.taskId, claim.legId, (releaseErr, step) => {
                 deps.logger?.warn("submit_ctx_run_release_failed", { taskId: claim.taskId, sessionId, step, err: releaseErr instanceof Error ? releaseErr.message : String(releaseErr) });
                 deps.metrics?.inc("submit_ctx_run_release_failed_total", { step });
             });

package/dist/index.d.ts

@@ -5,6 +5,7 @@ export { createBrain } from "./brain.js";
 export { createSessionStore } from "./plugins/session-store.js";
 export { createStoreBackend, type StoreBackend, type SessionCaptureRecordSource } from "./plugins/store-backend.js";
 export { RetiredSchemaPresentError } from "./plugins/schema-consistency.js";
+export { LegacySkillExemptionsPresentError } from "./plugins/approval-exemption-skill-cutoff.js";
 export { LocalDataRootSchemaMismatchError, type LocalDataRootMismatch } from "./plugins/local-session-store.js";
 export { CachingSessionStore, type CachingOptions } from "./plugins/caching-session-store.js";
 export type { RunRecord, RunEvent } from "./plugins/store-contracts.js";
@@ -38,6 +39,7 @@ export { CATALOG_ENTRY_HEADER_LANES, CATALOG_ENTRY_HEADER_NAMES, type CatalogEnt
 export type { ModelRouteGap } from "./model-route-endpoint.js";
 export { judgeServedModelRoute, type ServedModelRouteView, type ServedModelRouteOptions, type ModelRouteEndpointVerdict } from "./model-route-endpoint.js";
 export type { UserInputLedgerStore, UserInputAcceptance, NewUserInputAcceptance, OpenScanCursor, OpenScanPage, SettleHow, WriterGoneEvidence } from "./user-input-ledger.js";
-export type { OrgDeliveryQuotaStore, OrgDeliveryQuotaPolicy } from "./plugins/org-delivery-quota-store.js";
+export type { OrgDeliveryQuotaStore, OrgDeliveryQuotaPolicy, OrgDeliveryQuotaVerdict } from "./plugins/org-delivery-quota-store.js";
+export type { ServerOrgDeliveryGate, ServerOrgDeliveryOutcome } from "./org-delivery-gate.js";
 export { APPROVAL_GATE_KINDS, type ApprovalGateKind } from "./approval-content-kind.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -5,6 +5,7 @@ export { createBrain } from "./brain.js";
 export { createSessionStore } from "./plugins/session-store.js";
 export { createStoreBackend } from "./plugins/store-backend.js";
 export { RetiredSchemaPresentError } from "./plugins/schema-consistency.js";
+export { LegacySkillExemptionsPresentError } from "./plugins/approval-exemption-skill-cutoff.js";
 export { LocalDataRootSchemaMismatchError } from "./plugins/local-session-store.js";
 export { CachingSessionStore } from "./plugins/caching-session-store.js";
 export { runInBackground } from "./runs.js";

package/dist/leg-facts.d.ts

@@ -1,7 +1,7 @@
 /**
- * 一条腿的**部署事实**(执行车道 · run 技能名册 · 受理见证)—— server 自有的载体,**不搭引擎 spec 的车**。
+ * 一条腿的**部署事实**(执行车道 · run 技能名册 · 受理见证 · 登记的工作目录)—— server 自有的载体,**不搭引擎 spec 的车**。
  *
- * 规则:`TaskSpec` 是引擎的类型面,上面只放引擎读的成员。本仓装配器(`boot/resolve-spec.ts` 的 `createResolveSpec`)同时还判出三件
+ * 规则:`TaskSpec` 是引擎的类型面,上面只放引擎读的成员。本仓装配器(`boot/resolve-spec.ts` 的 `createResolveSpec`)同时还判出四件
  * 只有 server 自己读的事实 —— 它们以装配器**自己的输出对象**为键登记在这一张表里(单一铸点 {@link mintLegFacts}),由两只漏斗
  * (受理 `http/admission.ts` 的 `prepareSpec` · 续跑 `http/resume-legs.ts` 的 `resolveResumeSpec`)在拿到装配输出的**同一只对象**时
  * 读一次(唯一读口 {@link legFactsOf},读在 `stampSpecRoot` 复制之前),此后作普通值随 `PreparedTaskSubmission.legFacts` /
@@ -26,6 +26,11 @@ export interface LegFacts {
     readonly skills: readonly RunSkillEntry[];
     /** 受理时读根会话行的那一读(会话 id + 住客)。读者 = 腿的会话行记录座(`session-workspace.ts`)。 */
     readonly sessionWitness: DelegationRootWitness;
+    /**
+     * 这次提交的根会话登记的工作目录(提交体 `cwd` 经唯一写口 `setSessionCwd` 登记的那一枚;装配器在登记之后读一次)。缺席 = 没登记。
+     * 读者 = 三只组合入口(同步 / 后台 / 续跑腿的梯子与验证门):经 `compositionLegRoot`(`task-cwd.ts`)交给它们驱动的每一条腿当交活方的工作目录。
+     */
+    readonly registeredCwd?: string;
 }
 /**
  * 铸事实(**单一属主**:只允许 `createResolveSpec` 的出口调用)。同一只对象被第二次铸 ⇒ 当场抛 —— 两个写者是漂移的成因,

package/dist/leg-facts.js

@@ -6,6 +6,7 @@ export function mintLegFacts(resolved, facts) {
         hands: facts.hands,
         skills: Object.freeze(facts.skills.map((e) => Object.freeze({ ...e }))),
         sessionWitness: Object.freeze({ ...facts.sessionWitness }),
+        ...(facts.registeredCwd !== undefined ? { registeredCwd: facts.registeredCwd } : {}),
     }));
     return resolved;
 }