@sema-agent/server 7.148.0 → 7.150.0

package/dist/http/routes/workflows.js

@@ -1,6 +1,6 @@
 import { persistedPlaneOf } from "../../terminal.js";
 import { z } from "zod";
-import { getWorkflowRun, subscribeWorkflow, deriveAgentDisplayStatus, callKeyOrdinal, runParkedOf, JOURNAL_INCOMPATIBLE_ERROR_CODE, WorkflowJournalIncompatibleError } from "@sema-agent/core";
+import { subscribeWorkflow, deriveAgentDisplayStatus, callKeyOrdinal, runParkedOf, JOURNAL_INCOMPATIBLE_ERROR_CODE, WorkflowJournalIncompatibleError } from "@sema-agent/core";
 import { redactSteerIn, STEER_IN_MAX_CHARS, STEER_IN_MAX_REQUEST_CHARS } from "../../orchestration/workflow-agent-steer.js";
 import { journalEntryOfCell, journalEntryPayload, journalRowPayloadOf } from "../../plugins/workflow-journal-payload.js";
 import { redactSecrets } from "../../trace/redact.js";
@@ -10,30 +10,18 @@ import { projectByTable } from "../../trace/projection-table.js";
 const JOURNAL_PROJECTION_MEMO_CAP = 1024;
 const journalProjectionMemo = new Map();
 import { sendJson, sendError, sseHeaders } from "../send.js";
-import { gatedSubject, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
+import { explicitOperatorOk } from "../principal-gate.js";
 import { partsOf } from "../../owner-brands.js";
-import { taskSpecIdentityOf } from "../../engine-identity.js";
 import { assertNever } from "../route-ctx.js";
-import { callerOf, sessionAsserted } from "../owner-access.js";
+import { admitWorkflowRun, enter, judgeWorkflowRun, listVisibleWorkflows, refuse } from "../owner-access.js";
 import * as facts from "../../capability-facts.js";
 import { steerBodyKeyIssue } from "../../request-key-closure.js";
-function sendWorkflowAbsent(res) {
-    sendError(res, 404, "not_found.workflow", "workflow not found");
-}
-const WORKFLOW_SESSION_ASSERTION = {
-    "workflow-detail": { phase: "accept", label: "workflow.detail" },
-    "workflow-journal": { phase: "accept", label: "workflow.journal" },
-    "workflow-stream": { phase: "accept", label: "workflow.stream" },
-    "workflow-agent-steer": { phase: "accept", label: "workflow.agent-steer" },
-};
 export async function handleWorkflows(req, res, match, ctx) {
     const { deps } = ctx;
     {
-        const subject = gatedSubject(req, deps.config);
-        if (deps.config.requirePrincipal && !subject) {
-            sendPrincipalRefusal(res, req, deps.config);
+        const wfEntry = enter(req, res, deps, match.decl.id);
+        if (wfEntry === undefined)
             return;
-        }
         let journalStore;
         if (match.decl.id === "workflow-journal") {
             const journalFace = facts.workflowsJournal(deps);
@@ -49,7 +37,6 @@ export async function handleWorkflows(req, res, match, ctx) {
             return;
         }
         const runStore = runs.store;
-        const scope = taskSpecIdentityOf(subject === undefined ? undefined : partsOf(subject)).principal ?? "default";
         const wfId = match.params.runId;
         const isStream = match.decl.id === "workflow-stream";
         if (match.decl.id === "workflows-list") {
@@ -57,7 +44,7 @@ export async function handleWorkflows(req, res, match, ctx) {
             const statusFilter = q.get("status");
             const limit = Math.min(100, Math.max(1, Number(q.get("limit") ?? 50) || 50));
             const sessionFilter = q.get("session");
-            const sessionRuns = await runStore.listByScope(scope, {
+            const sessionRuns = await listVisibleWorkflows(wfEntry, runStore, {
                 ...(statusFilter ? { status: statusFilter } : {}),
                 limit,
                 ...(sessionFilter !== null ? { session: sessionFilter } : {}),
@@ -71,15 +58,11 @@ export async function handleWorkflows(req, res, match, ctx) {
             sendJson(res, 200, { workflows: redacted });
             return;
         }
-        const run = await getWorkflowRun(runStore, wfId, scope);
-        if (!run || run.scope !== scope) {
-            sendWorkflowAbsent(res);
-            return;
-        }
-        if (!sessionAsserted(WORKFLOW_SESSION_ASSERTION[match.decl.id], req, run.originatingSessionId, callerOf(req, deps).operator)) {
-            sendWorkflowAbsent(res);
+        const wfAdmitted = await admitWorkflowRun(wfEntry, res, runStore, wfId);
+        if (wfAdmitted === undefined)
             return;
-        }
+        const run = wfAdmitted.row;
+        const scope = run.scope;
         if (match.decl.id === "workflow-journal") {
             if (journalStore === undefined)
                 throw new Error("workflow-journal reached without the workflowsJournal journal witness");
@@ -182,12 +165,11 @@ export async function handleWorkflowAgentSteer(req, res, match, ctx) {
             sendWorkflowsUnavailable(res, runs.why);
             return;
         }
-        const subject = gatedSubject(req, deps.config);
-        const principal = subject === undefined ? undefined : partsOf(subject).person;
-        if (deps.config.requirePrincipal && principal === undefined) {
-            sendPrincipalRefusal(res, req, deps.config);
+        const steerEntry = enter(req, res, deps, match.decl.id);
+        if (steerEntry === undefined)
             return;
-        }
+        const subject = steerEntry.caller.subject;
+        const principal = subject === undefined ? undefined : partsOf(subject).person;
         const wfRunId = safeDecode(match.params.runId);
         const label = safeDecode(match.params.label);
         if (wfRunId === null || label === null) {
@@ -211,14 +193,14 @@ export async function handleWorkflowAgentSteer(req, res, match, ctx) {
             return;
         }
         const trusted = explicitOperatorOk(principal, deps.config);
-        const ownerScope = taskSpecIdentityOf(subject === undefined ? undefined : partsOf(subject)).principal ?? "default";
-        const wfRun = await getWorkflowRun(runs.store, wfRunId, ownerScope);
-        if (!trusted && !wfRun) {
-            sendWorkflowAbsent(res);
+        const wfVerdict = await judgeWorkflowRun(steerEntry, runs.store, wfRunId);
+        if (wfVerdict === "session_mismatch") {
+            refuse(steerEntry, res, "session_mismatch");
             return;
         }
-        if (wfRun && !sessionAsserted(WORKFLOW_SESSION_ASSERTION["workflow-agent-steer"], req, wfRun.originatingSessionId, callerOf(req, deps).operator)) {
-            sendWorkflowAbsent(res);
+        const wfRun = typeof wfVerdict === "object" ? wfVerdict.row : undefined;
+        if (!trusted && wfRun === undefined) {
+            refuse(steerEntry, res, wfVerdict === "missing" ? "missing" : "not_visible");
             return;
         }
         const sendNotRunningWf = (error) => sendError(res, 409, "steering.not_running", error);

package/dist/http/server.d.ts

@@ -4,6 +4,7 @@ import type { SideQueryAccounting } from "../budget.js";
 import type { SessionPurgeOutcome } from "../session-deletion.js";
 import type { IncomingMessage } from "node:http";
 import { type Runner, type RunnerDeps, type TaskSpec, type TaskResult, type WorkflowRunStore, type MemoryEntry, type MemoryExportBundle, type MemoryImportReport, type SideQuerySpec, type SideQueryResult, type Brain, type EngineNotice } from "@sema-agent/core";
+import type { ProjectContext } from "../project-context.js";
 import type { TaskRequestBody } from "./wire-types.js";
 import type { ServiceConfig } from "../config-types.js";
 import { type SessionMirrorRuling } from "../web-admin-client/facade.js";
@@ -130,7 +131,9 @@ export interface ServiceCoreDeps {
      *  已过期,按新行为改。
      *  `opts.unattendedLeg`([ref] 候裁 18,codex r3 F1;[ref] ① 改形):续跑家族在 ctx 带无人值守标(`CheckpointCtx.unattendedLeg`)时递 `true` ——
      *  装配器在**全部折叠之后**经首跑同一只合并口 `withUnattendedLeg` 重挂那条腿(`default` + 按类作答的 onAsk)。只由续跑腿
-     *  按服务端写的 ctx 位递,绝不从请求体读。 */
+     *  按服务端写的 ctx 位递,绝不从请求体读。
+     *  `opts.projectContext`(项目上下文继承):续跑家族把提交腿冻结的那一份(`CheckpointCtx.projectContext`,服务端写)原样递回 —— 装配器在续跑腿上只重放它、不读登记簿;
+     *  新提交腿不递(装配器自己在头部判)。同样只由续跑腿按服务端写的 ctx 位递,绝不从请求体读。 */
     /** `opts.execution`(必填):这条腿的执行上下文(`http/execution-context.ts`;只 `fresh` / `continuation` 两形,`root` 恒在)。装配器要用这条腿的根会话
      *  (场景设施的分区键、受理见证)读 `opts.execution.root` —— 它与 server 随后盖进 spec 的根是同一个值,装配器自己不写根。 */
     /** `opts.lease`(必填):这条腿的**宿主租约** —— 装配在它之下登记本腿交给引擎的对端声明(`peerDesk.declare(草稿, opts.lease)`)。
@@ -141,6 +144,7 @@ export interface ServiceCoreDeps {
         liveStream?: boolean;
         onNotice?: (notice: EngineNotice) => void;
         unattendedLeg?: true;
+        projectContext?: ProjectContext;
         lease: PeerLease;
         execution: ExecutionRoot;
     }) => ResolvedTaskSpec | Promise<ResolvedTaskSpec>;
@@ -606,7 +610,7 @@ export interface ServiceSeamDeps {
     /** [ref] §10.2 —— 跨主体投递门(`createOrgDeliveryGate` 的产物,`boot/stage-06-runners.ts` 装配的唯一实例)。
      *  `POST /v1/principal-inbox/messages` 只经它投递;缺席 = 本部署没声明收件箱消费方(`PRINCIPAL_INBOX_ASSISTANT` 未设)⇒
      *  那一口 501、能力位 `principalInboxDelivery` false(同读事实 `principalInboxDelivery`)。 */
-    orgDeliveryGate?: import("@sema-agent/core").OrgDeliveryGate;
+    orgDeliveryGate?: import("../org-delivery-gate.js").ServerOrgDeliveryGate;
     /** WEB-SETUP-RECON 附B — org sessionMirror 治理态的 SERVICE 半场 = **观测面(audit),非执法面**。
      *  裁定 (c):「该镜像而未镜像」发生在数据产生端(壳)——本 server 是镜像**目标**,只看得见到达的 push;
      *  没到达的会话对 server 不存在(无客户端会话清单、无心跳契约),required 锁的真执法只能在壳(CC
@@ -659,10 +663,9 @@ export interface ServiceObservabilityDeps {
  *  缺席 = 该道门不存在(不是「默认放行的门」——两者在事故复盘里语义完全不同)。 */
 export interface ServiceGovernanceDeps {
     /** 鉴权桥(registry-core api/auth-bridge):registry 用户 JWT → principal。缺席=分支不存在
-     *  (bearer 只认 SERVICE_AUTH_TOKEN(S),现状不变)。 */
-    webAdminJwtVerifier?: {
-        verify: (bearer: string) => Promise<import("../auth-bridge.js").VerifyOutcome>;
-    };
+     *  (bearer 只认 SERVICE_AUTH_TOKEN(S),现状不变)。席上的型就是工厂 `createWebAdminJwtVerifier` 铸的那一种(含只读成员 `issuer` = 它验的 issuer):
+     *  与配置里的桥成对(在不在、验的是谁),`createHttpServer` 构造期判。 */
+    webAdminJwtVerifier?: import("../auth-bridge.js").WebAdminJwtVerifier;
     /** Per-principal rate limiter for task/run endpoints. In-memory (single replica) or TiDB-backed
      *  (cross-replica soft limit) — both satisfy RateGate. */
     rateLimiter?: RateGate;
@@ -756,8 +759,8 @@ export interface ServiceDeploymentDeps {
      * 缺席(嵌入方 / 夹具)= 两项恒 0,两个读数逐字同 7.145.x。
      */
     sessionResidentBackground?: () => SessionResidentCounts;
-    /** 编排器片 2 件 3:服务租约此刻的读数(`fleet/serving-lease.ts` 的客户端交出;引擎信号铸点与计费准入判同读)。缺席 = 没装租约客户端
-     *  (非 fleet 成员 / 没接中心 / 测试夹具)⇒ `none`(与没有租约的引擎逐字同)。 */
+    /** 编排器片 2 件 3:服务租约此刻的读数(`fleet/serving-lease.ts` 的客户端交出;唯一读者 `fleet/engine-signal.ts` 的 `memberLeaseOf` —— 引擎信号铸点
+     *  与计费准入判经它同读,只在 `config.fleetGeneration` 在场〔成员〕时读)。缺席 = 没装租约客户端(非 fleet 成员 / 测试夹具)⇒ `none`。 */
     servingLease?: () => import("../fleet/engine-signal.js").ServingLeaseView;
     /** boot ready 门(b):false = 布防(`CONFIG_REQUIRE_ROSTER=true`)且首次 effective pull 尚未落 roster
      *  (worker 只有占位模型)。就绪原因 `model_roster_pending`(`http/readiness.ts`):计费提交 503 + `/readyz` 503 +
@@ -801,7 +804,7 @@ export interface ServiceDeploymentDeps {
     /** [ref] 追加件:`POST /v1/admin/config/refresh` 的实现面 —— 触发**一次既有**的 refresh 拍(在飞则 join)。
      *  缺席 / 回 `"not-wired"` = 本部署没有配置管道 ⇒ 该口诚实 4xx(绝不吞成 200)。 */
     configRefreshNow?: () => Promise<"triggered" | "not-wired" | "failed">;
-    /** DESIGN-278 §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog`
+    /** [ref] §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog`
      *  判 `effectiveLane`(env 占位/center 在管/默认)的 center 半场。缺席或返回 undefined = 本部署
      *  没有配置管道(纯 env worker / 测试夹具)⇒ 目录把每条 center 腿如实标「不在管」(additive)。 */
     webAdminManagedKeys?: () => ReadonlySet<string> | undefined;

package/dist/http/server.js

@@ -5,6 +5,7 @@ import {} from "../web-admin-client/facade.js";
 import { describeValueShape } from "@sema-agent/settings-schema";
 import { HttpError } from "../security.js";
 import { SessionDeletingError, SessionForkInProgressError } from "../execution-placement.js";
+import { ORG_DELIVERY_QUOTA_UNREADABLE_SENTENCE, OrgDeliveryQuotaUnreadableError } from "../plugins/org-delivery-quota-store.js";
 import {} from "../memory-sync.js";
 import {} from "../orchestration/workflow-agent-steer.js";
 import {} from "../orchestration/workflow-completion-inbox.js";
@@ -25,8 +26,9 @@ import { createRunConcurrencyGate, liveRunIdsOf } from "./run-concurrency-cap.js
 import { sqlEngineSeatIssue } from "../sql-engine-posture.js";
 import { parkDecisionStoreRefusal } from "../orchestration/workflow-park-decision.js";
 import { CHECKPOINT_CTX_SEALING_REQUIRED } from "./checkpoint-ctx.js";
+import { SERVING_LEASE_MEMBERSHIP_REQUIRED } from "../fleet/engine-signal.js";
 import { PARKED_REVIVE_EXECUTION_SEAT_REQUIRED } from "../parked-decide.js";
-import { a2aAudienceIdentityBoundaryRefusal, operatorDeclarationRefusal } from "../config-invariants.js";
+import { a2aAudienceVerifiedSourceRefusal, operatorDeclarationRefusal } from "../config-invariants.js";
 import { retiredServiceDepsRefusal } from "./retired-service-deps.js";
 import { createAdmission, MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills } from "./admission.js";
 import { createResumeLegs } from "./resume-legs.js";
@@ -37,7 +39,9 @@ import { createApprovalSweeps } from "./approval-sweeps.js";
 export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath };
 export { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills };
 import { explicitOperatorOk } from "./principal-gate.js";
-import { configuredIdentitySources } from "../identity-source.js";
+import { authBridgeIssuerOf, configuredIdentitySources } from "../identity-source.js";
+import { normalizeBridgeIssuer } from "../auth-bridge.js";
+import { buildDisplaySafeUrl } from "../trace/redact.js";
 export { explicitOperatorOk };
 class DrainYieldingPreemptBook extends Map {
     drainingNow;
@@ -73,6 +77,12 @@ export function createHttpServer(rawDeps) {
     if (!Array.isArray(deps.deploymentMods)) {
         throw new Error("createHttpServer: the deploymentMods seat is required — it is how the server learns whether a prompt screen runs on its legs (the same registrations the Runners carry as `mods`); pass `[]` for an embedding without mods; refusing to start rather than store objective text before the screen decides");
     }
+    if (typeof deps.peerDesk?.lease !== "function" || typeof deps.peerDesk.declare !== "function" || typeof deps.peerDesk.seat?.answer !== "function") {
+        throw new Error("createHttpServer: the peerDesk seat is required — it is the one registry of the MCP / A2A credential pieces a send carries, and the submission and resume funnels open their host leases over it; pass `createPeerDesk()` (package root, zero IO — an embedding without MCP / A2A credentials passes one too), the very desk each Runner carries as `peerSeat: desk.seat`; refusing to start rather than answer every submission with a 500 at its first lease");
+    }
+    if (typeof deps.scenarioGate !== "function" || typeof deps.scenarioGate.known !== "function") {
+        throw new Error("createHttpServer: the scenarioGate seat is required — it is the one reading of which scenario names this deployment serves and lets a principal use, and the capability status face, the two session panels and the scenario request header all ask it; pass the gate that `createScenarioGate` (package root) mints from your config, scenario table and principal caps on its \"peek\" leg; refusing to start rather than answer those reads with a 500");
+    }
     {
         const retired = retiredServiceDepsRefusal(deps);
         if (retired !== undefined)
@@ -97,11 +107,23 @@ export function createHttpServer(rawDeps) {
                 "the service boot builds one from that same issuer; inject a verifier for it, or remove the bridge and the center from the config, " +
                 "since /health.auth, the owner gates and the one-time migrations read the bridge from the config alone; refusing to start rather than report SSO sign-in that verifies nobody");
         }
+        const configured = authBridgeIssuerOf(deps.config);
+        const verifier = deps.webAdminJwtVerifier;
+        if (verifier !== undefined && configured !== undefined) {
+            const verifies = verifier.issuer;
+            if (typeof verifies !== "string" || normalizeBridgeIssuer(verifies) !== normalizeBridgeIssuer(configured.issuer)) {
+                throw new Error(`createHttpServer: the injected webAdminJwtVerifier verifies issuer ${typeof verifies === "string" ? buildDisplaySafeUrl(verifies) : `<${describeValueShape(verifies)}>`}, ` +
+                    `but the config's auth bridge issuer is ${buildDisplaySafeUrl(configured.issuer)} (authBridgeIssuer / AUTH_BRIDGE_ISSUER, or the center base webAdmin.baseUrl when that is unset) — ` +
+                    "the gate would accept one issuer's tokens while /health.center.issuer reports another; the config is the only place the deployment's issuer is read, " +
+                    "so inject a verifier whose `issuer` member (the issuer it verifies tokens for) is that one, or change the config to the issuer the verifier verifies " +
+                    "(the values are shown display-safe: credentials, query and fragment are folded); refusing to start rather than verify tokens for an issuer this deployment does not report");
+            }
+        }
     }
     {
-        const audienceBoundaryFailure = a2aAudienceIdentityBoundaryRefusal(deps.config.a2aServe, configuredIdentitySources(deps.config).length === 0);
-        if (audienceBoundaryFailure !== undefined)
-            throw new Error(audienceBoundaryFailure);
+        const audienceSourceFailure = a2aAudienceVerifiedSourceRefusal(deps.config.a2aServe, configuredIdentitySources(deps.config).length === 0);
+        if (audienceSourceFailure !== undefined)
+            throw new Error(audienceSourceFailure);
     }
     {
         const issue = sqlEngineSeatIssue(deps.backend, deps.sqlEngine);
@@ -127,6 +149,8 @@ export function createHttpServer(rawDeps) {
         throw new Error(`createHttpServer: ${CHECKPOINT_CTX_SEALING_REQUIRED}`);
     if (deps.parkedReviveSurface !== undefined && deps.sessionStorage?.executionPlacement === undefined)
         throw new Error(`createHttpServer: ${PARKED_REVIVE_EXECUTION_SEAT_REQUIRED}`);
+    if (deps.servingLease !== undefined && deps.config.fleetGeneration === undefined)
+        throw new Error(`createHttpServer: ${SERVING_LEASE_MEMBERSHIP_REQUIRED}`);
     const idemCache = new IdempotencyCache();
     const inflightRuns = new Map();
     const preemptableRuns = new DrainYieldingPreemptBook(() => deps.drainState?.draining === true);
@@ -162,7 +186,7 @@ export function createHttpServer(rawDeps) {
     if (deps.drainState)
         deps.drainState.yieldInflight = () => preemptableRuns.yieldAll();
     if (deps.hookWakeBus) {
-        deps.hookWakeBus.deliver = async (sessionId, text) => {
+        const deliverHookWake = async (sessionId, text) => {
             try {
                 validatePendingSteer({ text, trusted: false });
             }
@@ -197,6 +221,7 @@ export function createHttpServer(rawDeps) {
                 return false;
             }
         };
+        deps.hookWakeBus.deliver = deliverHookWake;
     }
     const { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, readJson, readRawBody } = createRequestGuards({ deps });
     const { prepareSpec } = createAdmission({ deps, readJson, runnerFor });
@@ -227,6 +252,10 @@ export function createHttpServer(rawDeps) {
                 sendError(res, 409, err.code, err.message);
                 return;
             }
+            if (err instanceof OrgDeliveryQuotaUnreadableError) {
+                sendError(res, 500, "internal.org_delivery_quota_unreadable", ORG_DELIVERY_QUOTA_UNREADABLE_SENTENCE);
+                return;
+            }
             sendOpenFaceFault(res, err);
         });
     });

package/dist/http/stored-body-replay.d.ts

@@ -1,29 +1,9 @@
-/**
- * 「这条停驻行的持久化体在本版上能否重放」—— **唯一**判据(四问一只,外加 `settings.env` 凭据一臂;五个问点同调:续跑驱动段 `resume-legs.ts` `resolveResumeSpecOrBlocked`、
- * plan_review 的 prepare 段、SLA 拒扫腿的跳过臂 `approval-sweeps.ts`、终态 run 的 steer 铸唤醒卡之前 `routes/runs.ts`;`resolveSpec` 本身留作提交腿的拒点)。
- * 四问的规则、记号、拒句与删除条件的属主 = `http/checkpoint-ctx.ts` 顶注;答复 = 那里的 `storedBodyReplayAnswer`。
- *
- * 为什么判据住在这里而不是 `checkpoint-ctx.ts`:模式词问要读体的**生效模式词**(`task-settings.ts` `storedBodyPermissionMode`,请求设置的解析层)与本部署此刻的
- * **入口地板**(`runtime-governance.ts` `autonomyModeFloor`)—— 这两只属主带着配置层的包外依赖;`checkpoint-ctx.ts` 被随包的本地排空脚本经编译产物 import,
- * 它的闭包只许 node 内建 / 引擎包根(`test/drain-check-local.test.ts` 的闭包门)。判据只有这一只,allow 读法问、工具名清单问与退役请求键问的谓词照旧住在各自属主里。
- */
-import type { PermissionMode } from "@sema-agent/core";
-import { type Autonomy } from "../runtime-governance.js";
 import { type InertToolListEntry } from "../rule-entry-list.js";
 import { type ExecutionConfigRootDeployment } from "../execution-config-root.js";
 import { type UnreadMembersDeployment } from "../unread-request-members.js";
 import { type ModelApiKeyEnvTable } from "../server-secret-env.js";
 import { type StoredBodyReplayRefusal } from "./checkpoint-ctx.js";
 import type { CheckpointCtx } from "./route-ctx.js";
-/**
- * 模式词问:本行体里的模式词能否按当前读法重放。不能 ⇔ 本部署此刻有入口地板 ∧ 行上没有当前的模式词读法记号 ∧ 体的生效词进这块地板会变
- * (`runtime-governance.ts` `entryPermissionMode`,与提交入口的盖章同一只函数;判的是「词变不变」而不是 `clamped` —— 体无词的旧行进地板取地板本身,
- * 那也是变)⇒ 返回拒因的两个事实(体的词、地板);能 ⇒ `undefined`。
- */
-export declare function permissionModeReadingUnstated(ctx: CheckpointCtx, floor: PermissionMode | undefined): {
-    stored: PermissionMode | undefined;
-    floor: PermissionMode;
-} | undefined;
 /**
  * 存体里 `settings.permissions.deny` / `ask`(规则编译器读的收紧表)有永远不生效的条目(名字层:退役名 / 短名 / 铸不出的段 / 近似名;core 的规则文法:括号 / 内容文法 / 主字段……;
  * `~/` 形而这个部署解不出 home),或三桶里 user 层的 `/` 形规则而这个部署读不出执行环境的配置根 —— 拒点是 `applyTaskSettings`(422,在 `resolveSpec` 里),那一拍 plan_review 的一次性 nonce 已烧、终态 steer 的唤醒卡已铸、SLA 拒扫跳不过;所以预判也问一遍。
@@ -36,17 +16,16 @@ export declare function permissionModeReadingUnstated(ctx: CheckpointCtx, floor:
  */
 export declare function ruleTablesRefusalWithoutTaskRoot(body: unknown, deployment: ExecutionConfigRootDeployment): InertToolListEntry | undefined;
 /**
- * 预判读的部署配置:`autonomy`(模式词问的模式词地板)、执行车道的 home 两位(`~/` 形规则那一问)、配置根的几位(user 设置层 `/` 规则那一问)与「请求成员读不出」那一问的
+ * 预判读的部署配置:执行车道的 home 两位(`~/` 形规则那一问)、配置根的几位(user 设置层 `/` 规则那一问)与「请求成员读不出」那一问的
  * 租户轴 / 两只注入闸的否决位。`ServiceConfig` 结构上满足,四个问点传 `deps.config` 整份。
  */
 export type StoredReplayDeployment = ExecutionConfigRootDeployment & UnreadMembersDeployment & {
-    readonly autonomy?: Autonomy | undefined;
     /** 生效配置模型条目 name → `apiKeyEnv`(`settings.env` 凭据判据的名单一臂;缺席 = 没有模型条目,与 `serverCredentialValueSources` 的缺省同读)。 */
     readonly modelApiKeyEnv?: ModelApiKeyEnvTable | undefined;
 };
 /**
- * 四问一只判据:不能重放 ⇒ 返回拒的那条规则;能 ⇒ `undefined`。顺序:allow 读法(体里带非空 `allow` 而写者版本证不出 ≥ 7.117.0;常设,按写者版本)→ 请求设置里的条目表(**与拒点同序**:桶门〔形 / 空串 / 超帽〕→ 工具名清单读成空〔**只问限制方向**:放行方向的存量条目读成空,续跑照旧、只留一行运维 warn〕→ 请求成员读不出〔hooks / env / MCP transport / A2A headers …,判据 `unread-request-members.ts`〕→ deny / ask 的名字层 + 规则文法)→ 模式词读法记号 → 体里的退役请求键(几问同中时答先中的那一问 ——
- * 任一问中都不重放,句子只需一句)。`deployment` = 本部署**此刻**的 `config`(活 config:热改即生效):`autonomy` 的地板由它的唯一属主算,`~/` 形规则的 home 由 `executionLaneHomeDir` 算,问点都不自己算。
+ * 三问一只判据:不能重放 ⇒ 返回拒的那条规则;能 ⇒ `undefined`。顺序:allow 读法(体里带非空 `allow` 而写者版本证不出 ≥ 7.117.0;常设,按写者版本)→ 请求设置里的条目表(**与拒点同序**:桶门〔形 / 空串 / 超帽〕→ 工具名清单读成空〔**只问限制方向**:放行方向的存量条目读成空,续跑照旧、只留一行运维 warn〕→ 请求成员读不出〔hooks / env / MCP transport / A2A headers …,判据 `unread-request-members.ts`〕→ deny / ask 的名字层 + 规则文法)→ 体里的退役请求键(几问同中时答先中的那一问 ——
+ * 任一问中都不重放,句子只需一句)。`deployment` = 本部署**此刻**的 `config`(活 config:热改即生效):`~/` 形规则的 home 由 `executionLaneHomeDir` 算,问点都不自己算。
  */
 export declare function storedBodyReplayRefusal(ctx: CheckpointCtx, deployment: StoredReplayDeployment): StoredBodyReplayRefusal | undefined;
 //# sourceMappingURL=stored-body-replay.d.ts.map

package/dist/http/stored-body-replay.js

@@ -1,7 +1,6 @@
-import { REQUEST_SETTINGS_REFUSAL_PREFIX, SETTINGS_PERMISSION_BUCKETS, SETTINGS_RULE_REFUSAL_CODE, neverAutoNamesRefusal, readSettingsEnv, rulePolicyBucketsRefusal, settingsEnvCredentialIssue, settingsPermissionBucketIssue, storedBodyPermissionMode } from "../task-settings.js";
+import { REQUEST_SETTINGS_REFUSAL_PREFIX, SETTINGS_PERMISSION_BUCKETS, SETTINGS_RULE_REFUSAL_CODE, neverAutoNamesRefusal, readSettingsEnv, rulePolicyBucketsRefusal, settingsEnvCredentialIssue, settingsPermissionBucketIssue } from "../task-settings.js";
 import { readTightenOnlySeats, tightenOnlySeatField, tightenOnlySeatIssue } from "../tighten-only-seats.js";
 import { entryProblemsFacts } from "../entry-problems.js";
-import { autonomyModeFloor, entryPermissionMode } from "../runtime-governance.js";
 import { inertToolListEntryOf, replayInertEntry } from "../rule-entry-list.js";
 import { executionLaneHomeDir } from "../execution-lane-caps.js";
 import { executionConfigRootOf } from "../execution-config-root.js";
@@ -10,13 +9,7 @@ import { storedEnvCredentialsDropM38 } from "../stored-request-env-credentials-m
 import { storedToolAxesRereadM19 } from "../stored-request-tool-axes-m19.js";
 import { MAX_NAMED_MEMBERS, unreadRequestMembers, unreadRequestMembersRefusal } from "../unread-request-members.js";
 import { serverCredentialValueSources } from "../server-secret-env.js";
-import { allowListWriterUnproven, permissionModeReadingStated, retiredRequestKeyOf } from "./checkpoint-ctx.js";
-export function permissionModeReadingUnstated(ctx, floor) {
-    if (floor === undefined || permissionModeReadingStated(ctx))
-        return undefined;
-    const stored = storedBodyPermissionMode(ctx.body);
-    return entryPermissionMode(stored, floor).effective === stored ? undefined : { stored, floor };
-}
+import { allowListWriterUnproven, retiredRequestKeyOf } from "./checkpoint-ctx.js";
 const RETIRED_KEY_REWRITE_MIGRATION = { promptProfile: "M30" };
 const BUCKET_GATE_CODE = "request.field_invalid";
 const BUCKET_SIDE = {
@@ -87,9 +80,6 @@ export function storedBodyReplayRefusal(ctx, deployment) {
     const entry = ruleTablesRefusalWithoutTaskRoot(ctx.body, deployment);
     if (entry !== undefined)
         return { kind: "inert_tool_list", entry };
-    const mode = permissionModeReadingUnstated(ctx, autonomyModeFloor(deployment.autonomy));
-    if (mode !== undefined)
-        return { kind: "permission_mode_reading", ...mode, ...writer };
     const retiredKey = retiredRequestKeyOf(ctx.body);
     if (retiredKey !== undefined)
         return { kind: "retired_request_key", key: retiredKey, rewriteWindowEnd: migrationWindowEnd(RETIRED_KEY_REWRITE_MIGRATION[retiredKey]), ...writer };

package/dist/http/submit-ctx.d.ts

@@ -31,16 +31,16 @@ export declare function persistSubmitCtx(store: SubmitCtxStore, deps: {
     readonly logger?: Logger | undefined;
     readonly metrics?: Metrics | undefined;
     readonly checkpointCtxSealing?: CheckpointCtxSealer | undefined;
-    readonly instanceId?: string | undefined;
 }, claim: {
     readonly runStore: RunStore;
     readonly taskId: string;
+    readonly legId: string;
 } | undefined, sessionId: string, fields: Parameters<typeof buildCheckpointCtx>[0]): Promise<SubmitCtxRefusal | typeof SUBMIT_CTX_CLAIM_LOST | undefined>;
 /**
  * 提交腿写续跑输入的入口(三个调用点同调这一只):体与标记按受理座提交时交出的那一份定(见文件头「体里的目标按哪一份写」),只写这一笔。
  * 写不进的处置与答复 = {@link persistSubmitCtx}(本函数只定体、不另判)。
  */
-export declare function persistSubmissionCtx(store: SubmitCtxStore, deps: Parameters<typeof persistSubmitCtx>[1], claim: Parameters<typeof persistSubmitCtx>[2], prepared: Pick<PreparedTaskSubmission, "body" | "auth" | "verify" | "acceptance" | "bodyFromScreenedCtx"> & {
+export declare function persistSubmissionCtx(store: SubmitCtxStore, deps: Parameters<typeof persistSubmitCtx>[1], claim: Parameters<typeof persistSubmitCtx>[2], prepared: Pick<PreparedTaskSubmission, "body" | "auth" | "verify" | "acceptance" | "bodyFromScreenedCtx"> & Partial<Pick<PreparedTaskSubmission, "legFacts">> & {
     readonly spec: Pick<PreparedTaskSubmission["spec"], "sessionId" | "model">;
 }): Promise<SubmitCtxRefusal | typeof SUBMIT_CTX_CLAIM_LOST | undefined>;
 //# sourceMappingURL=submit-ctx.d.ts.map

package/dist/http/submit-ctx.js

@@ -1,6 +1,6 @@
 import { StoreRowTooLargeError } from "../plugins/sql-errors.js";
-import { releaseClaimedRun } from "./claimed-run.js";
-import { runProvenElsewhere } from "../plugins/store-contracts.js";
+import { withdrawClaimedRun } from "./claimed-run.js";
+import { createLegCtxClaim } from "../plugins/store-contracts.js";
 import { buildCheckpointCtx, CheckpointCtxUnsealableError } from "./checkpoint-ctx.js";
 import { refusalBody } from "./refusal-body.js";
 import { limitFactsUnmeasured } from "../limit-refusal.js";
@@ -44,15 +44,14 @@ export async function persistSubmitCtx(store, deps, claim, sessionId, fields) {
     let landed;
     try {
         const ctx = buildCheckpointCtx(fields, deps.checkpointCtxSealing, sessionId);
-        landed = await store.putCtx(sessionId, ctx, claim === undefined ? undefined : { fence: claim.runStore, taskId: claim.taskId, legHolds: (run) => !runProvenElsewhere(run, deps.instanceId) });
+        landed = await store.putCtx(sessionId, ctx, claim === undefined ? undefined : createLegCtxClaim(claim.runStore, claim.taskId, claim.legId));
     }
     catch (err) {
         const tooLarge = err instanceof StoreRowTooLargeError ? err : undefined;
         const unsealable = err instanceof CheckpointCtxUnsealableError ? err : undefined;
         const known = tooLarge ?? unsealable;
         if (claim !== undefined) {
-            const why = known !== undefined ? known.message : `the run's resume inputs could not be stored: ${err instanceof Error ? err.message : String(err)}`;
-            await releaseClaimedRun(claim.runStore, claim.taskId, why, (releaseErr, step) => {
+            await withdrawClaimedRun(claim.runStore, claim.taskId, claim.legId, (releaseErr, step) => {
                 deps.logger?.warn("submit_ctx_run_release_failed", { taskId: claim.taskId, sessionId, step, err: releaseErr instanceof Error ? releaseErr.message : String(releaseErr) });
                 deps.metrics?.inc("submit_ctx_run_release_failed_total", { step });
             });
@@ -77,6 +76,7 @@ export async function persistSubmissionCtx(store, deps, claim, prepared) {
         body: screened && prepared.verify === undefined ? withheldBody(prepared.body, prepared.spec.model) : prepared.body,
         memoryScope: prepared.auth?.memoryScope,
         ...(screened || prepared.bodyFromScreenedCtx === true ? { promptScreened: true } : {}),
+        ...(prepared.legFacts?.projectContext !== undefined ? { projectContext: prepared.legFacts.projectContext } : {}),
         writerVersion: serviceVersion(),
     });
 }

package/dist/http/submit-replay.d.ts

@@ -9,7 +9,8 @@
  *
  * ## 判定(三条,按序;别的一律不放)
  *  · 这次提交自带 taskId 而命中的行**不是**那一条(`Idempotency-Key` 指向别的行)⇒ 冲突;
- *  · 调用方读不到这一行(属主门 = `qualsOf`,「这个调用方读得到这一行 run 吗」的唯一谓词,经属主存取器 `owner-access.ts` 读)⇒ 冲突;
+ *  · 调用方读不到这一行(属主门 = `qualsOf`,「这个调用方读得到这一行 run 吗」的唯一谓词,经属主存取器 `owner-access.ts` 读与判 —— 按钥匙读行也只在那里:
+ *    `readReplayHit`;建行撞唯一键时观察到的行经同一只判 `replayHitOf`)⇒ 冲突;
  *    冲突 ⇒ `409 conflict.run_exists`,体里**不回显**那条行的任何标识(不给跨租户预言机)。先于下一条判:读不到的行不比体。
  *  · 这次提交带 `Idempotency-Key`(`caller.idem` 在场)、那一行绑的**就是这把键**,而它记着的请求体指纹与这次不同 ⇒
  *    `409 conflict.idempotency_payload_mismatch`(同形 `{ error, errorCode }`,不回显键与那一行);**不**回放首发、不新建、那一行不动。
@@ -33,6 +34,7 @@ import type { RunIdemBinding, RunRecord } from "../plugins/store-contracts.js";
 import type { RunStore } from "../plugins/store-backend.js";
 import type { ServiceConfig } from "../config-types.js";
 import type { SubmitOutcome } from "./idempotency.js";
+import { type ReplayHit } from "./owner-access.js";
 import type { Subject } from "../owner-brands.js";
 /** 提交腿的回执形(闭集;穷举 `switch`,加一形不写这里 = 编译红)。 */
 export type SubmitReplayFace = "durable" | "sync";
@@ -56,7 +58,18 @@ export declare function isReplayedOutcome(outcome: SubmitOutcome): boolean;
 /** 一份提交回执是不是 {@link replayOfExistingRun} 铸的**冲突**体(判别位 = 机器码;铸点就在下面,码与它同文件)—— 把回执渲成别的协议形的
  *  调用方(A2A)按它分句,不另抄码。 */
 export declare function isRunExistsConflictBody(body: unknown): boolean;
+/** 进门按一把提交钥匙(`Idempotency-Key` 铸的键 / 调用方自铸的 `body.taskId`)读行作答:没命中 ⇒ `undefined`(这是一次新提交);命中 ⇒ 本文件的唯一回执。 */
+export declare function replayOfKey(key: {
+    readonly idemKey: string;
+} | {
+    readonly taskId: string;
+}, caller: ReplayCaller, face: SubmitReplayFace, deps: {
+    config: ServiceConfig;
+}, runStore: Pick<RunStore, "getRun" | "getRunByIdem" | "bindIdemBodyFingerprint" | "observeRun">): Promise<SubmitOutcome | undefined>;
+/** 建行撞唯一键时观察到的那一行(店的观察臂交回的既有行)作答:与按钥匙读到的同一只判、同一张回执。 */
 export declare function replayOfExistingRun(seen: RunRecord, caller: ReplayCaller, face: SubmitReplayFace, deps: {
     config: ServiceConfig;
-}, runStore: RunStore): Promise<SubmitOutcome>;
+}, runStore: Pick<RunStore, "bindIdemBodyFingerprint" | "observeRun">): Promise<SubmitOutcome>;
+/** 一次命中的回执(判已在属主存取器里落成 {@link ReplayHit}):占用 ⇒ 冲突;读得到 ⇒ 体指纹 → 观察口 → 按提交腿的形答。 */
+export declare function answerReplay(hit: ReplayHit, caller: ReplayCaller, face: SubmitReplayFace, runStore: Pick<RunStore, "bindIdemBodyFingerprint" | "observeRun">): Promise<SubmitOutcome>;
 //# sourceMappingURL=submit-replay.d.ts.map

package/dist/http/submit-replay.js

@@ -1,5 +1,4 @@
-import { runRowAt, seesRunAs } from "./owner-access.js";
-import { claimCallerOf } from "../security.js";
+import { readReplayHit, replayHitOf, runRowAt } from "./owner-access.js";
 import { syncSubmitBodyOfRow } from "./sync-submit-body.js";
 import { refusalBody } from "./refusal-body.js";
 export function replayedOutcome(outcome) {
@@ -15,11 +14,18 @@ export function isReplayedOutcome(outcome) {
 export function isRunExistsConflictBody(body) {
     return typeof body === "object" && body !== null && body.errorCode === "conflict.run_exists";
 }
+export async function replayOfKey(key, caller, face, deps, runStore) {
+    const hit = await readReplayHit(caller.subject, deps.config, runStore, key, caller.clientTaskId);
+    return hit === undefined ? undefined : answerReplay(hit, caller, face, runStore);
+}
 export async function replayOfExistingRun(seen, caller, face, deps, runStore) {
-    const sameRun = caller.clientTaskId === undefined || caller.clientTaskId === seen.taskId;
-    if (!sameRun || !seesRunAs("run.replay", claimCallerOf(caller.subject, deps.config), seen.owner)) {
+    return answerReplay(replayHitOf(caller.subject, deps.config, seen, caller.clientTaskId), caller, face, runStore);
+}
+export async function answerReplay(hit, caller, face, runStore) {
+    if (hit.kind === "occupied") {
         return { status: 409, body: refusalBody({ errorCode: "conflict.run_exists", message: "a run already exists for this submission's taskId or Idempotency-Key" }) };
     }
+    const seen = hit.row;
     if (caller.idem !== undefined) {
         const held = await runStore.bindIdemBodyFingerprint(seen.taskId, caller.idem);
         if (held !== null && held !== caller.idem.bodyFingerprint) {

package/dist/http/wire-types.d.ts

@@ -109,7 +109,8 @@ export interface TaskRequestBody {
      *  `RunnerDeps.loadProjectMemory` —— 项目层、声明的指令文件、它们喂的那几处一并缺席(引擎自己的 git 状态车道、记忆引擎、技能 / hooks / MCP 不受影响)。
      *  原样投给引擎;拼写门与 `fileHistory` 同一张单成员关断词表(`request-value-closure.ts`:别的值 fresh 400 `request.field_invalid`、续跑重放同判),
      *  引擎读到的恒是这一个词;子代随父继承(引擎的夹紧表)。
-     *  本服务自铸的 `wiring_manifest.instructions` 段在这样的腿上缺席(loader 没被调就没有陈述)。能力位 `projectMemory`。 */
+     *  本服务自铸的 `wiring_manifest.instructions` 段在这样的腿上缺席(loader 没被调就没有陈述)。能力位 `projectMemory`。
+     *  7.150.0 起同一个词也关掉这条 run 从项目登记簿继承的项目简报(`project-context.ts`;继承来的 `cwd` 不受它管 —— 位置不是上下文内容)。 */
     projectMemory?: TaskSpec["projectMemory"];
     /** Explicit model selection (CLI `/model` picker + `run --model <ref>`). An INTENT by catalog
      *  name (e.g. "deepseek-pro") — resolveSpec gates it against the SAME allow-list as an inline `@name` mention
@@ -450,7 +451,9 @@ export interface TaskRequestBody {
      *  同一个 id 的两种大小写写法落同一只记忆盘)。多租户 DB 记忆面下它把派生
      *  scope 从 user 盘切到项目盘(`proj:<tenant>/<projectId>`)并以 config.projects[projectId].defaultScopes
      *  作 memory.scopes 种子;单用户部署忽略派生(memoryScopeFor 不变),仅 defaultScopes 种子生效。
-     *  Rides the persisted body onto resume legs(与 memoryWrite 同姿势)。 */
+     *  Rides the persisted body onto resume legs(与 memoryWrite 同姿势)。
+     *  7.150.0 起它(或会话行上声明过的项目)也选这条 run **继承的项目上下文**(`project-context.ts`;能力位 `projectInheritance`):登记对提交者可见且带内容证明 ⇒
+     *  项目简报进系统提示追加折叠的中段、射程内第一条 folder 填缺席的 `cwd`;判一次、随 run 冻结。项目继承来的成员参与的拒,`fields` 以本键为坐标。 */
     projectId?: string;
     /** [#40 / TOC cwd seam, SDK 0.0.36] The TOC client's launch directory — the agent's HOST execution-env workspace
      *  runs HERE (CC-parity: `sema` in a project dir operates on THAT project). An ABSOLUTE host path. 🔒 honored ONLY
@@ -572,7 +575,7 @@ export interface TaskRequestBody {
      *  `transport.env`(stdio)/ `transport.headers`(http)是这台 server 的**件**:server 交给引擎的声明里不带它们,件由部署的对端座在起子进程 / 发请求时按原字节作答
      *  (只对胜出部署同名判的条目登记;件的名与值由引擎在每次发送时判,不合 ⇒ 那一台不连、兄弟照挂)。 */
     mcpServers?: RequestMcpServerSpec[];
-    /** [DESIGN-269 车1] Caller-supplied per-request A2A peers (remote agents this task may call), aligned to
+    /** [[ref] 车1] Caller-supplied per-request A2A peers (remote agents this task may call), aligned to
      *  core `A2aServerSpec`. 🔒 honored on a SINGLE-USER deployment (task-a2a.ts `a2aInjectionHonored`, the same
      *  predicate `capabilities.a2aInjection` advertises) — the requester is the super-admin of their OWN worker,
      *  on ANY execution lane (an A2A call is a plain outbound HTTPS request from the worker, so the lane where

package/dist/index.d.ts

@@ -5,6 +5,7 @@ export { createBrain } from "./brain.js";
 export { createSessionStore } from "./plugins/session-store.js";
 export { createStoreBackend, type StoreBackend, type SessionCaptureRecordSource } from "./plugins/store-backend.js";
 export { RetiredSchemaPresentError } from "./plugins/schema-consistency.js";
+export { LegacySkillExemptionsPresentError } from "./plugins/approval-exemption-skill-cutoff.js";
 export { LocalDataRootSchemaMismatchError, type LocalDataRootMismatch } from "./plugins/local-session-store.js";
 export { CachingSessionStore, type CachingOptions } from "./plugins/caching-session-store.js";
 export type { RunRecord, RunEvent } from "./plugins/store-contracts.js";
@@ -38,6 +39,7 @@ export { CATALOG_ENTRY_HEADER_LANES, CATALOG_ENTRY_HEADER_NAMES, type CatalogEnt
 export type { ModelRouteGap } from "./model-route-endpoint.js";
 export { judgeServedModelRoute, type ServedModelRouteView, type ServedModelRouteOptions, type ModelRouteEndpointVerdict } from "./model-route-endpoint.js";
 export type { UserInputLedgerStore, UserInputAcceptance, NewUserInputAcceptance, OpenScanCursor, OpenScanPage, SettleHow, WriterGoneEvidence } from "./user-input-ledger.js";
-export type { OrgDeliveryQuotaStore, OrgDeliveryQuotaPolicy } from "./plugins/org-delivery-quota-store.js";
+export type { OrgDeliveryQuotaStore, OrgDeliveryQuotaPolicy, OrgDeliveryQuotaVerdict } from "./plugins/org-delivery-quota-store.js";
+export type { ServerOrgDeliveryGate, ServerOrgDeliveryOutcome } from "./org-delivery-gate.js";
 export { APPROVAL_GATE_KINDS, type ApprovalGateKind } from "./approval-content-kind.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -5,6 +5,7 @@ export { createBrain } from "./brain.js";
 export { createSessionStore } from "./plugins/session-store.js";
 export { createStoreBackend } from "./plugins/store-backend.js";
 export { RetiredSchemaPresentError } from "./plugins/schema-consistency.js";
+export { LegacySkillExemptionsPresentError } from "./plugins/approval-exemption-skill-cutoff.js";
 export { LocalDataRootSchemaMismatchError } from "./plugins/local-session-store.js";
 export { CachingSessionStore } from "./plugins/caching-session-store.js";
 export { runInBackground } from "./runs.js";