@sema-agent/server 7.149.0 → 7.150.0

package/dist/http/routes/approvals-assistant.js

@@ -8,7 +8,7 @@ import { approvalPayloadFingerprint } from "../../plugins/approval-payload-finge
 import { carriesDeploymentListQuestion, standingAnswerDurablyRecordable } from "../../tool-approval.js";
 import { APPROVAL_GATE_KINDS } from "../../approval-content-kind.js";
 import { isParkedRunStatus } from "../../plugins/store-contracts.js";
-import { principalFrom, ownerOfCheckpointScope, scopeCellOf, CHECKPOINT_PUBLIC_SCOPE, PRINCIPAL_TOKEN_HEADER, APPROVAL_MAC_HEADER, APPROVAL_MAC_KID_HEADER } from "../../security.js";
+import { principalFrom, scopeCellOf, CHECKPOINT_PUBLIC_SCOPE, PRINCIPAL_TOKEN_HEADER, APPROVAL_MAC_HEADER, APPROVAL_MAC_KID_HEADER } from "../../security.js";
 import { keyAdmits } from "../../owner-faces.js";
 import { personOf } from "../../owner-brands.js";
 import { editedPlanBinding, verifyDirectDoorProof } from "../../principal-jwt.js";
@@ -23,7 +23,7 @@ import { sleep } from "../sse-log.js";
 import { bindSseLifecycle } from "../sse-lifecycle.js";
 import { sendJson, sendError, sseHeaders, logRequestError, SSE_MAX_STREAM_MS, SSE_HEARTBEAT_IDLE_MS } from "../send.js";
 import { gatedSubject, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
-import { admitRunById, admitSessionById, callerEntry, callerOf, callerOfDecision, deciderSubjectOf, enter, judgeRun, protocolEntry, readVisibleRun, refuse, withCaller } from "../owner-access.js";
+import { admitRunById, admitSessionById, callerEntry, callerOf, callerOfDecision, deciderSubjectOf, enter, latestRunIdOf, listRunsOfScope, protocolEntry, readSessionAgent, readVisibleRun, refuse, runFactsOf, withCaller } from "../owner-access.js";
 import { governanceOriginOf } from "../../runtime-governance.js";
 import { deploymentListAsks } from "../../approval.js";
 import { grantBindingOf } from "../../standing-answer-grant.js";
@@ -40,7 +40,6 @@ import { seatText } from "../../trace/exit-seat.js";
 import { approvalQueueKindOfDoorId } from "../../approval-queue-kind.js";
 import { defaultPeerInboundFace, parsePeerInboundId, peerBoxScope } from "../../peer-inbound-face.js";
 import { RESUME_RESTATABLE_KEYS, readResumeRestatement } from "../resume-restatement.js";
-import { readSessionAgent } from "../../session-agent.js";
 const DECIDE_BODY_DECLARED_KEYS = [
     "answer", "boundCallId", "boundInputHash", "checkpointToken", "decidedBy", "decidedVia", "decision", "feedback", "reason", "remember", "updatedInput",
     ...RESUME_RESTATABLE_KEYS,
@@ -280,8 +279,8 @@ async function decideIdempotentReplay(cs, args) {
     };
 }
 async function gateObjectivePreview(reader, runStore, agentStore, gate, runSessionId) {
-    const previewOf = (taskId) => readVisibleRun(reader, runStore, taskId);
-    const own = typeof runSessionId === "string" ? ((await runStore.getActiveTaskId(runSessionId)) ?? (await runStore.latestRunForSession(runSessionId))?.taskId) : undefined;
+    const previewOf = async (taskId) => (await readVisibleRun(reader, runStore, taskId))?.row;
+    const own = typeof runSessionId === "string" ? ((await runStore.getActiveTaskId(runSessionId)) ?? (await latestRunIdOf(runStore, runSessionId))) : undefined;
     if (own !== undefined)
         return (await previewOf(own))?.objectivePreview ?? null;
     if (agentStore === undefined)
@@ -462,7 +461,7 @@ export async function handleApprovalsAssistant(req, res, match, ctx) {
                 if (typeof host === "string")
                     byGate.set(host, s);
             });
-            const runs = await runStore.listRuns({ owner: ownerOfCheckpointScope(scope), limit: 100 });
+            const runs = await listRunsOfScope(runStore, scope, 100);
             const tasks = runs
                 .filter((r) => r.status === "running" || isParkedRunStatus(r.status))
                 .map((r) => {
@@ -511,7 +510,7 @@ export async function handleApprovalsAssistant(req, res, match, ctx) {
                 let flagged = await runStore.requestPreempt(taskId, run.owner);
                 const PREEMPT_RECLASSIFY_ATTEMPTS = 3;
                 for (let attempt = 0; !flagged; attempt++) {
-                    const now = await runStore.getRun(taskId);
+                    const now = (await readVisibleRun(preemptEntry, runStore, taskId))?.row;
                     if (now !== undefined && isParkedRunStatus(now.status)) {
                         sendError(res, 409, "conflict.already_suspended", "task is already suspended", { taskId, status: now.status });
                         return;
@@ -661,7 +660,7 @@ export async function handleApprovalsAssistant(req, res, match, ctx) {
             }
             const sighting = typeof body.checkpointId === "string" ? { face: "checkpointId", value: body.checkpointId } : undefined;
             const decisionEntry = callerEntry(req, deps, match.decl.id);
-            const run = await runStore.getRun(taskId);
+            const run = await runFactsOf(runStore, taskId);
             if (!run) {
                 if (!deps.config.directDoorActive)
                     deps.logger?.info?.("decide_404", { reason: "no-row", taskId, principalPresent: principal !== undefined });
@@ -694,7 +693,7 @@ export async function handleApprovalsAssistant(req, res, match, ctx) {
                 singleUse = proof.singleUse === undefined ? undefined : { proof: proof.singleUse, store };
             }
             const deciderEntry = withCaller(decisionEntry, callerOfDecision(decisionEntry.caller, deciderPrincipal, deps.config));
-            const decisionAdmitted = judgeRun(deciderEntry, run);
+            const decisionAdmitted = await readVisibleRun(deciderEntry, runStore, taskId);
             if (decisionAdmitted === undefined) {
                 deps.logger?.info?.("decide_404", { reason: "owner-mismatch", taskId, principalPresent: principal !== undefined });
                 refuse(deciderEntry, res, "not_visible");

package/dist/http/routes/capabilities.js

@@ -37,7 +37,7 @@ import { judgeAutoModeArming } from "../../auto-mode-face.js";
 import { coercePermissionModeStrict, PERMISSION_MODE_WORDS, taskHooksHonored } from "../../task-settings.js";
 import { gatedPerson, sendPrincipalRefusal } from "../principal-gate.js";
 import { readAdoptionImportCapability } from "../../adoption/import.js";
-import { headReadOf } from "../../session-incarnation.js";
+import { headReadPresent } from "../../session-incarnation.js";
 import { callerTrust } from "../caller-trust.js";
 import { sessionRulesNamespaceFormsHonored } from "../../session-policy-wire.js";
 function routePairingOf(deps, name, m) {
@@ -207,6 +207,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 sideQuery: true,
                 agentRoster: facts.agentRoster(deps).available,
                 projects: facts.projectRegistry(deps).available,
+                projectInheritance: facts.projectRegistry(deps).available,
                 retention: retentionAdvertisement(deps.config),
                 peerLane: Boolean(deps.peerDirectory),
                 scenarioSubject: true,
@@ -214,12 +215,12 @@ export async function handleCapabilities(req, res, match, ctx) {
                 sessionSearch: facts.sessionList(deps).available,
                 sessionFork: facts.sessionFork(deps).available,
                 sessionDelete: facts.sessionDelete(deps).available,
-                resumeAt: Boolean(deps.resumeAnchorStore && headReadOf(deps.sessionStorage)),
+                resumeAt: Boolean(deps.resumeAnchorStore && headReadPresent(deps.sessionStorage)),
                 promptSuggestions: true,
                 sessionPolicy: facts.sessionPolicy(deps).available,
                 sessionRulesNamespaceForms: sessionRulesNamespaceFormsHonored(),
                 restoreFiles: Boolean(deps.fileHistoryStore),
-                rewindFilesTo: Boolean(deps.fileHistoryStore && deps.resumeAnchorStore && headReadOf(deps.sessionStorage)),
+                rewindFilesTo: Boolean(deps.fileHistoryStore && deps.resumeAnchorStore && headReadPresent(deps.sessionStorage)),
                 sessionRewindFiles: facts.sessionRewindFiles(deps).available,
                 sessionRewindFilesPreview: facts.sessionRewindFilesPreview(deps).available,
                 fileHistoryCapture: fileHistoryCaptureOf(deps.fileHistoryStore, deps.config.fileHistoryCapture),

package/dist/http/routes/config-catalog.d.ts

@@ -1,5 +1,5 @@
 /**
- * DESIGN-278 §5 S2([ref])—— `GET /v1/config/catalog`:配置目录自描述端点(operator lane)。
+ * [ref] §5 S2([ref])—— `GET /v1/config/catalog`:配置目录自描述端点(operator lane)。
  *
  * TOB 运维在 web 上要一个**不撒谎**的配置目录:哪个键、什么腿(env/center)、改了何时生效
  * (hot/restart-片名/deploy/inert)、本机实际值 —— 今天这些事实散在 config.ts 数千行与三份文档里,

package/dist/http/routes/mcp-reconnect.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { isParkedRunStatus, isTerminalRunStatus, runProvenElsewhere } from "../../plugins/store-contracts.js";
 import { DeadlineExceeded, MCP_DIAL_DEADLINE_MS, raceDeadline } from "../mcp-dial-deadline.js";
 import { sendJson, sendError } from "../send.js";
-import { admitSessionById, enter } from "../owner-access.js";
+import { admitSessionById, enter, runFactsOf } from "../owner-access.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
 import { seatText } from "../../trace/exit-seat.js";
@@ -118,7 +118,7 @@ export async function handleMcpReconnect(req, res, match, ctx) {
                     }
                 }
             }
-            const run = activeTaskId === undefined ? undefined : await runStore.getRun(activeTaskId);
+            const run = activeTaskId === undefined ? undefined : await runFactsOf(runStore, activeTaskId);
             if (run && isParkedRunStatus(run.status)) {
                 sendError(res, 409, "steering.not_running", "run is waiting on a pending decision — the MCP re-dial verb needs a live turn; a resumed continuation dials every declared server afresh (the re-dial applies to the current turn only and is not persisted), so resume this run first — a re-dial cannot be queued behind the decision");
                 return;

package/dist/http/routes/memory-origin.d.ts

@@ -116,7 +116,7 @@ export declare function buildClearanceRowWire(r: OriginClearanceRow): {
     baseRev: string;
     origin: {
         at: number;
-        cause?: "static" | "unattributed" | "observed" | "derived" | undefined;
+        cause?: "static" | "observed" | "derived" | "unattributed" | undefined;
         taint: "external";
     };
 };

package/dist/http/routes/notify-wake.js

@@ -1,6 +1,6 @@
 import { sendJson, sendError } from "../send.js";
 import { gatedSubject, sendPrincipalRefusal } from "../principal-gate.js";
-import { admitSessionRow, enter, refuse } from "../owner-access.js";
+import { admitSessionById, enter, refuse } from "../owner-access.js";
 import { sendResumeOutcome } from "../route-ctx.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
@@ -54,8 +54,7 @@ export async function handleNotifyWake(req, res, match, ctx) {
                 sendError(res, 501, "capability.session_ownership_required", "external notify requires the session-ownership face (sessionStorage.headOf)");
                 return;
             }
-            const notifyHead = await owned.sessionStorage.headOf(notifySession);
-            const notifyAdmitted = await admitSessionRow(notifyEntry, res, owned.sessionStorage, notifySession, notifyHead);
+            const notifyAdmitted = await admitSessionById(notifyEntry, res, owned.sessionStorage, notifySession);
             if (notifyAdmitted === undefined)
                 return;
             const payload = {

package/dist/http/routes/projects.d.ts

@@ -48,6 +48,7 @@ export declare const PROJECT_ROW_DISPOSITIONS: {
     readonly registeredBy: "forward";
     readonly registeredAt: "forward";
     readonly archivedAt: "forward";
+    readonly contentAttestedAt: "forward";
 };
 /** 项目行的键全集(处置表的键 = wire 上可能出现的每一个键;自铸登记表 `trace/self-minted-wire.ts` 的 `projectRowKey` 按它 `satisfies`)。 */
 export type ProjectRowKey = keyof typeof PROJECT_ROW_DISPOSITIONS;

package/dist/http/routes/projects.js

@@ -4,6 +4,7 @@ import { sendUnauthorized } from "../principal-gate.js";
 import { routeListFilter } from "../owner-access.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
+import { projectVisible } from "../../project-context.js";
 import { projectByTable } from "../../trace/projection-table.js";
 export const PROJECT_NOT_FOUND_MESSAGE = "no such project";
 export const PROJECT_ROW_DISPOSITIONS = {
@@ -19,6 +20,7 @@ export const PROJECT_ROW_DISPOSITIONS = {
     registeredBy: "forward",
     registeredAt: "forward",
     archivedAt: "forward",
+    contentAttestedAt: "forward",
 };
 export function projectRowOf(id, registration) {
     return projectByTable("project", PROJECT_ROW_DISPOSITIONS, registration, { id });
@@ -37,8 +39,8 @@ function readArchivedQuery(raw) {
 export async function handleProjects(req, res, match, ctx) {
     const { deps } = ctx;
     const { safeDecode } = ctx.helpers;
-    const { fleetWide, gateOwner } = routeListFilter(req, deps, match.decl.id);
-    if (!fleetWide && gateOwner === null) {
+    const viewer = routeListFilter(req, deps, match.decl.id);
+    if (!viewer.fleetWide && viewer.gateOwner === null) {
         sendUnauthorized(res, "identity");
         return;
     }
@@ -47,7 +49,7 @@ export async function handleProjects(req, res, match, ctx) {
         sendError(res, 501, "capability.unavailable", "the project registry is not available on this deployment: projects are published only by the configuration center, and no center configuration is applied here");
         return;
     }
-    const visible = (registration) => fleetWide || registration.registeredBy === gateOwner;
+    const visible = (registration) => projectVisible(registration, viewer);
     switch (match.decl.id) {
         case "projects-list": {
             const archived = readArchivedQuery(new URLSearchParams(match.search).get("archived"));

package/dist/http/routes/retention-ops.d.ts

@@ -1,5 +1,5 @@
 /**
- * [ref] 车2 —— **托管留存的 operator 治理面**(设计稿 `docs/DESIGN-270-retention-lane.md` §5/§6)。
+ * [ref] 车2 —— **托管留存的 operator 治理面**(设计稿 `docs/[ref]-retention-lane.md` §5/§6)。
  *
  *   · `PUT    /v1/ops/retention/holds/:domain` —— 放置 legal hold;
  *   · `DELETE /v1/ops/retention/holds/:domain` —— 解除;

package/dist/http/routes/run-permission-mode.d.ts

@@ -43,7 +43,7 @@ export type PermissionModePersistMiss = (typeof PERMISSION_MODE_PERSIST_MISSES)[
  *  · run 行仍在本副本(`runProvenElsewhere` 的反面 —— 别的副本续跑了它,续跑的 CAS 赢点把行上的副本改成它自己);
  *  · 本副本这条 run 此刻登记的活流仍是接下切档的那一只(本副本上续跑的新腿登记的是另一只流对象;腿收场时按对象身份摘掉自己的)。
  */
-export declare function switchLegHolds<S extends object>(fenced: FencedRun, thisInstanceId: string | undefined, liveNow: S | undefined, switched: S): boolean;
+export declare function switchLegHolds<S extends object>(fenced: Pick<FencedRun, "instanceId">, thisInstanceId: string | undefined, liveNow: S | undefined, switched: S): boolean;
 /** 本判官改了词时回执旁的那一格(`admission`)。 */
 interface PermissionModeAdmissionNote {
     readonly requested: PermissionMode;

package/dist/http/routes/run-permission-mode.js

@@ -7,7 +7,7 @@ import * as facts from "../../capability-facts.js";
 import { PERMISSION_MODE_WORDS, coercePermissionModeStrict, parseTaskSettings } from "../../task-settings.js";
 import { admitPermissionModeWord } from "../../permission-mode-admission.js";
 import { readResumeCtx, resumeCtxCorruptAnswer, resumeCtxUnreadableAnswer, resumeCtxUnsealableAnswer } from "../resume-ctx-read.js";
-import { sealCheckpointCtx, withPermissionModeRewritten } from "../checkpoint-ctx.js";
+import { sealCheckpointCtx } from "../checkpoint-ctx.js";
 import { serviceVersion } from "../../service-version.js";
 import { recordFailOpen } from "../../observability/fail-open.js";
 export const PERMISSION_MODE_PERSIST_MISSES = ["claim_released", "context_absent", "store_failed"];
@@ -114,7 +114,7 @@ export async function handlePermissionMode(req, res, match, ctx) {
                 }
                 let persistMiss;
                 try {
-                    const next = sealCheckpointCtx({ ...withPermissionModeRewritten(stored, { ...stored.body, permissionMode: admitted }), writerVersion: serviceVersion() }, deps.checkpointCtxSealing, sessionId);
+                    const next = sealCheckpointCtx({ ...stored, body: { ...stored.body, permissionMode: admitted }, writerVersion: serviceVersion() }, deps.checkpointCtxSealing, sessionId);
                     const rewrite = await checkpointStore.rewriteCtxWhileClaimed(sessionId, next, { fence: runStore, taskId, legHolds: (fenced) => switchLegHolds(fenced, deps.instanceId, ctx.registry.steerableRuns.get(taskId), live) });
                     persistMiss = rewrite === "written" ? undefined : rewrite;
                 }

package/dist/http/routes/runs.d.ts

@@ -13,7 +13,7 @@ export declare function handleRuns(req: IncomingMessage, res: ServerResponse, ma
 /** 同上纪律(子代理 / 任务句柄 / HITL 应答段)。 */
 export declare function handleRunVerbs(req: IncomingMessage, res: ServerResponse, match: RouteMatch<RunVerbsRouteId>, ctx: RouteCtx): Promise<void>;
 /**
- * DESIGN-269 车2 件2 —— `POST /v1/runs` 的**建行 + 驱动**段,从路由体里原样搬出来的具名腿。
+ * [ref] 车2 件2 —— `POST /v1/runs` 的**建行 + 驱动**段,从路由体里原样搬出来的具名腿。
  *
  * 🔴 为什么提取:A2A 的 `message/send`(routes/a2a-serve.ts)必须走**同一条**提交链 —— 第二条提交
  * 路径就是第二个写者,而这条链上挂着 durable taskId 幂等重放、lease/治理窗 pre-admission、

package/dist/http/routes/runs.js

@@ -30,16 +30,15 @@ import { ActorAssertionWire } from "@sema-agent/settings-schema";
 import * as facts from "../../capability-facts.js";
 import { assertNever } from "../route-ctx.js";
 import { readRunFace } from "../run-read-face.js";
-import { replayOfExistingRun } from "../submit-replay.js";
+import { replayOfExistingRun, replayOfKey } from "../submit-replay.js";
 import { mintAndDriveDurableRun } from "../durable-run-leg.js";
 import { SUBMISSION_CLAIM_FACE } from "../execution-context.js";
-import { admitRunById, admitRunRow, enter, runRowAt } from "../owner-access.js";
+import { admitRunById, admitRunByIdem, enter, readVisibleRun, sessionFactsReadOf } from "../owner-access.js";
 import { keyAdmission, ownerCellOf, recoveredSubject } from "../../owner-faces.js";
 import { personOf } from "../../owner-brands.js";
 import { withSubject } from "../../observability/principal-context.js";
 import { readResumeCtx, resumeCtxUnreadableAnswer } from "../resume-ctx-read.js";
 import { storedBodyReplayAnswer, storedBodyReplayLogFields } from "../checkpoint-ctx.js";
-import { headReadOf } from "../../session-incarnation.js";
 import { serviceVersion } from "../../service-version.js";
 import { storedBodyReplayRefusal } from "../stored-body-replay.js";
 import { haltBodyIssue, steerBodyKeyIssue } from "../../request-key-closure.js";
@@ -106,7 +105,7 @@ function sendHandleMiss(res, run, thisInstanceId) {
     }
     return false;
 }
-async function streamRunEvents(req, res, deps, runStore, taskId) {
+async function streamRunEvents(req, res, deps, runStore, entry, taskId) {
     await streamSseLog(req, res, {
         preamble: async (signal) => {
             const gate = resolveStreamApprovalGate({
@@ -135,10 +134,7 @@ async function streamRunEvents(req, res, deps, runStore, taskId) {
             return buildApprovalPreambleSseFrames(frames);
         },
         onPreambleFailure: (reason, err) => deps.logger?.warn?.("approval_preamble_failed", { taskId, reason, face: "run.events", error: err instanceof Error ? err.message : String(err ?? "") }),
-        statusOf: async (id) => {
-            const run = await runStore.getRun(id);
-            return run ? runRowAt("run-events", runStore, run) : undefined;
-        },
+        statusOf: async (id) => (await readVisibleRun(entry, runStore, id))?.row,
         getEvents: (id, after) => runStore.getEvents(id, after),
         formatEvent: (ev) => {
             const type = normalizeRunEventType(ev.type);
@@ -208,9 +204,9 @@ export async function handleRuns(req, res, match, ctx) {
                 return;
             }
             const inflight = idemCache.peek(inflightKeyOf(idem, "durable", clientTaskId));
-            const keyedRow = inflight ? undefined : await runStore.getRunByIdem(idem.key);
-            if (inflight || keyedRow) {
-                const resp = inflight ? await inflight : await replayOfExistingRun(keyedRow, { subject: submitter, idem, ...(clientTaskId !== undefined ? { clientTaskId } : {}) }, "durable", deps, runStore);
+            const replayed = inflight ? undefined : await replayOfKey({ idemKey: idem.key }, { subject: submitter, idem, ...(clientTaskId !== undefined ? { clientTaskId } : {}) }, "durable", deps, runStore);
+            const resp = inflight ? await inflight : replayed;
+            if (resp !== undefined) {
                 sendJson(res, resp.status, resp.body);
                 return;
             }
@@ -246,26 +242,23 @@ export async function handleRuns(req, res, match, ctx) {
         const entry = enter(req, res, deps, match.decl.id);
         if (entry === undefined)
             return;
-        let run;
-        let pathId;
+        let admitted;
         if (match.decl.id === "runs-by-idem") {
             const rawKey = new URLSearchParams(match.search).get("idempotencyKey");
             if (!rawKey) {
                 sendError(res, 400, "request.query_invalid", "idempotencyKey is required: pass the raw Idempotency-Key the submission was sent with");
                 return;
             }
-            run = await runStore.getRunByIdem(idemKeyOf(rawKey, idemCallerOf(req, ctx), "run"));
+            admitted = await admitRunByIdem(entry, res, runStore, idemKeyOf(rawKey, idemCallerOf(req, ctx), "run"));
         }
         else {
-            pathId = match.params.taskId;
-            run = await runStore.getRun(pathId);
+            admitted = await admitRunById(entry, res, runStore, match.params.taskId);
         }
-        const admitted = await admitRunRow(entry, res, runStore, run, pathId);
         if (admitted === undefined)
             return;
         const taskId = admitted.row.taskId;
         if (match.decl.id === "run-events") {
-            await streamRunEvents(req, res, deps, runStore, taskId);
+            await streamRunEvents(req, res, deps, runStore, entry, taskId);
         }
         else {
             sendJson(res, 200, await readRunFace(deps, runStore, admitted.row));
@@ -296,7 +289,7 @@ export async function handleRuns(req, res, match, ctx) {
                 if (token) {
                     const won = (await expireCardUnderStoredScope(cs, token)) === CARD_EXPIRE_OUTCOME.expired;
                     if (!won) {
-                        const now = await rs.getRun(taskId);
+                        const now = (await readVisibleRun(entry, rs, taskId))?.row;
                         const st = now?.status;
                         if (st !== undefined && (isParkedRunStatus(st) || st === "running")) {
                             sendError(res, 409, "conflict.approval_settled", "pending approval was settled concurrently (decided or expired) — re-check the run and retry cancel if it is still active", { taskId, status: st });
@@ -310,7 +303,7 @@ export async function handleRuns(req, res, match, ctx) {
                 else {
                     const claimed = await rs.markResuming(taskId, deps.instanceId ?? "default");
                     if (!claimed) {
-                        const now = await rs.getRun(taskId);
+                        const now = (await readVisibleRun(entry, rs, taskId))?.row;
                         const st = now?.status;
                         if (st !== undefined && (st === "running" || isParkedRunStatus(st))) {
                             sendError(res, 409, "conflict.approval_settled", "pending approval was settled concurrently (decided or expired) — re-check the run and retry cancel if it is still active", { taskId, status: st });
@@ -350,7 +343,7 @@ export async function handleRuns(req, res, match, ctx) {
                 sendError(res, 500, "internal.cancel_not_terminalized", `cancel progressed (${note}) but could not terminalize the run row (retried) — retry cancel; a stuck row is reaped after the stale window (${e instanceof Error ? e.message : String(e)})`, { taskId });
                 return;
             }
-            const finalRow = await rs.getRun(taskId).catch(() => undefined);
+            const finalRow = (await readVisibleRun(entry, rs, taskId).catch(() => undefined))?.row;
             if (finalRow && finalRow.errorCode !== "cancelled" && isTerminalRunStatus(finalRow.status)) {
                 sendJson(res, 202, { taskId, status: finalRow.status, errorCode: finalRow.errorCode ?? null, cancelRequested: finalRow.cancelRequested, note: `session unlocked; the run was terminalized concurrently (${finalRow.errorCode ?? finalRow.status}) before this cancel's write — reporting the actual ledger state` });
                 return;
@@ -361,7 +354,7 @@ export async function handleRuns(req, res, match, ctx) {
             let flagged = await runStore.requestCancel(taskId, run.owner);
             const CANCEL_RECLASSIFY_ATTEMPTS = 3;
             for (let attempt = 0; !flagged; attempt++) {
-                const now = await runStore.getRun(taskId);
+                const now = (await readVisibleRun(entry, runStore, taskId))?.row;
                 if (now !== undefined && isParkedRunStatus(now.status)) {
                     await cancelSuspended(now.result);
                     return;
@@ -505,7 +498,7 @@ export async function handleRuns(req, res, match, ctx) {
                 }
                 if (code !== "steering.not_running")
                     throw e;
-                const freshBeforePark = await runStore.getRun(taskId).catch(() => undefined);
+                const freshBeforePark = (await readVisibleRun(entry, runStore, taskId).catch(() => undefined))?.row;
                 const raced = await tryPark();
                 if (raced === "parked") {
                     sendParked(freshBeforePark?.status ?? run.status);
@@ -554,8 +547,8 @@ export async function handleRuns(req, res, match, ctx) {
             }
             return;
         }
-        const sessionHeadOf = headReadOf(deps.sessionStorage);
-        if (deps.checkpointStore && sessionHeadOf) {
+        const sessionFactsOf = sessionFactsReadOf(deps.sessionStorage);
+        if (deps.checkpointStore && sessionFactsOf) {
             const activeTaskId = await runStore.getActiveTaskId?.(run.sessionId).catch(() => undefined);
             if (activeTaskId !== undefined && activeTaskId !== null && activeTaskId !== taskId) {
                 sendNotRunning(`run is ${run.status} and its session has an ACTIVE run (${activeTaskId}) — steer that run instead`);
@@ -605,7 +598,7 @@ export async function handleRuns(req, res, match, ctx) {
                     mintResult.duplicateKey = true;
                     return;
                 }
-                const leafId = await sessionHeadOf(run.sessionId).then((h) => h?.leafId).catch(() => undefined);
+                const leafId = await sessionFactsOf(run.sessionId).then((h) => h?.leafId).catch(() => undefined);
                 if (leafId === undefined || leafId === null)
                     return;
                 const resumeRead = await readResumeCtx(cs.getCtx(run.sessionId), { sessionId: run.sessionId, opener: deps.checkpointCtxSealing });
@@ -779,7 +772,7 @@ export async function handleRuns(req, res, match, ctx) {
         catch (e) {
             if (e.code !== "steering.not_running")
                 throw e;
-            const freshRun = await runStore.getRun(taskId).catch(() => undefined);
+            const freshRun = (await readVisibleRun(entry, runStore, taskId).catch(() => undefined))?.row;
             sendNoLiveTurn(freshRun?.status ?? run.status, true);
             return;
         }
@@ -1509,9 +1502,9 @@ async function createDurableRunHeld(req, res, ctx, prepared, idem) {
     const submitter = gatedSubject(req, deps.config);
     const caller = { subject: submitter, idem, ...(clientTaskId !== undefined ? { clientTaskId } : {}) };
     if (clientTaskId) {
-        const existing = await runStore.getRun(clientTaskId);
-        if (existing)
-            return await replayOfExistingRun(existing, caller, "durable", deps, runStore);
+        const replayed = await replayOfKey({ taskId: clientTaskId }, caller, "durable", deps, runStore);
+        if (replayed !== undefined)
+            return replayed;
     }
     if ((await leaseDenied(req, res, seat)) || (await usageWindowDenied(req, res, seat)))
         return null;

package/dist/http/routes/session-memory-sync.js

@@ -1,6 +1,6 @@
 import { memorySyncReportOf } from "@sema-agent/core";
 import { sendJson, sendError } from "../send.js";
-import { admitSessionById, enter } from "../owner-access.js";
+import { admitSessionById, enter, latestRunIdOf, readVisibleSession } from "../owner-access.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
 import { leafOfAdmittedHead } from "../../session-incarnation.js";
@@ -94,7 +94,6 @@ export async function handleSessionMemorySync(req, res, match, ctx) {
                 sendError(res, 400, "request.path_malformed", "session id segment is not valid percent-encoding");
                 return;
             }
-            const readHead = () => sessionStorage.headOf(sessionId);
             const admitted = await admitSessionById(entry, res, sessionStorage, sessionId);
             if (admitted === undefined)
                 return;
@@ -122,10 +121,10 @@ export async function handleSessionMemorySync(req, res, match, ctx) {
             const quiet = async () => {
                 if ((await runStore.getActiveTaskId(sessionId)) !== undefined)
                     return false;
-                if ((await runStore.latestRunForSession(sessionId))?.taskId !== observedTaskId)
+                if ((await latestRunIdOf(runStore, sessionId)) !== observedTaskId)
                     return false;
-                const now = await readHead();
-                return now !== undefined && leafOfAdmittedHead(now) === sourceRevision;
+                const now = await readVisibleSession(entry, sessionStorage, sessionId);
+                return now !== undefined && leafOfAdmittedHead(now.row) === sourceRevision;
             };
             const fenced = () => reportOf({ target, sourceRevision, scopes, refused: { code: "session_active", message: SESSION_ACTIVE_SYNC_MESSAGE } });
             let report;

package/dist/http/routes/session-sync.js

@@ -7,10 +7,9 @@ import { classifySyncRelationshipByIds, createStagedLogFeed, MalformedImportEntr
 import { isUuidShape } from "../../security.js";
 import { sendJson, sendError, sendSessionError, sendSessionPolicyError, logRequestError, msg } from "../send.js";
 import { StampedSessionArchiveError } from "../../session-error-wire.js";
-import { readSessionAgent } from "../../session-agent.js";
 import { buildDisplaySafeUrl } from "../../trace/redact.js";
 import { storeFaultClassOf } from "../../plugins/store-fault.js";
-import { enter, judgeSession, refuse } from "../owner-access.js";
+import { enter, readSessionAgent, readSyncGate, refuse } from "../owner-access.js";
 import { listFilterOf, ownerKeyOf, sameKey } from "../../owner-faces.js";
 const SYNC_BLOB_MAX_BYTES = 64 * 1024 * 1024;
 const SYNC_NDJSON_LINE_MAX_BYTES = 8 * 1024 * 1024;
@@ -18,7 +17,6 @@ import { SHA256_HEX_RE } from "../../digest-form.js";
 import { assertNever } from "../route-ctx.js";
 import { readSessionRulesRecords, describeSessionRulesRecordProblem } from "../../session-policy-wire.js";
 import { readSessionPinned, readSessionTitle } from "../../session-row.js";
-import { deletionHeadReadOf, sessionFaceOfHead } from "../../session-incarnation.js";
 import { defaultTaskRegistry } from "@sema-agent/core";
 import { SessionActiveRunError, SessionForkInProgressError, SessionWriterPresentError } from "../../execution-placement.js";
 import { probeSessionChildren, sessionTenantScope } from "../../session-children-retire.js";
@@ -94,10 +92,8 @@ export async function handleSessionSync(req, res, match, ctx) {
                 return;
             }
             const judgeSessionGate = async () => {
-                const face = sessionFaceOfHead(sessionId, await sessionStorage.headOf(sessionId));
-                const held = face ?? sessionFaceOfHead(sessionId, await deletionHeadReadOf(sessionStorage)?.(sessionId));
-                const mayTouch = held !== undefined && (await judgeSession(syncEntry, sessionStorage, sessionId, held)) !== undefined;
-                return { face, occupant: held, mayPull: face !== undefined && mayTouch, mayPush: held === undefined || mayTouch };
+                const { face, occupant, mayTouch } = await readSyncGate(syncEntry, sessionStorage, sessionId);
+                return { face, occupant, mayPull: face !== undefined && mayTouch, mayPush: occupant === undefined || mayTouch };
             };
             let gate;
             try {

package/dist/http/routes/sessions.d.ts

@@ -26,7 +26,7 @@ export interface SessionsLocal {
             degraded?: boolean;
         }>;
     }>;
-    /** DESIGN-269 件4:`/a2a` 面板的短 TTL single-flight 缓存。与 `mcpStatusCache` **分开一张表**而不是
+    /** [ref] 件4:`/a2a` 面板的短 TTL single-flight 缓存。与 `mcpStatusCache` **分开一张表**而不是
      *  共用带前缀的键:两张面板的体不同形(`peers` vs `servers`),塞进一张表就得靠 unknown 兜住两形,
      *  于是「取到的是哪一形」变成运行期约定 —— 两张表让它回到类型上。 */
     a2aStatusCache: Map<string, {