@sema-agent/server 7.149.0 → 7.151.0

package/dist/tool-approval.js

@@ -27,6 +27,7 @@ import { APPROVAL_EXEMPTED_EVENT } from "./plugins/approval-exemption-store.js";
 import { refusalBody } from "./http/refusal-body.js";
 import { withoutSettlementEvidence } from "./gate-settlement.js";
 import { extensionRequesterOf } from "./trace/extension-call-face.js";
+import { boundedRotation } from "./bounded-rotation.js";
 const defaultLogger = createLogger();
 const MAX_APPROVAL_ARGS_BYTES = 16384;
 const DEFAULT_APPROVAL_TTL_MS = 5 * 60_000;
@@ -69,7 +70,7 @@ function durableRuleMaterial(material) {
 }
 export const NOT_PENDING_UNKNOWN_CAUSE = "unknown_or_other_replica";
 export const TOOL_APPROVAL_READ_STATES = ["pending", "decided", "parked", "void"];
-function decidedRowFacts(row) {
+export function decidedRowFacts(row) {
     if (row.state !== "DECIDED" || (row.decision !== "approve" && row.decision !== "deny") || row.provisional || row.decidedAtMs === null)
         return undefined;
     return { decision: row.decision === "approve" ? "allow" : "deny", decidedAtMs: row.decidedAtMs, ...(row.decisionNote !== null ? { decisionNote: row.decisionNote } : {}) };
@@ -85,6 +86,22 @@ function buildAskRowReadProjection(row, nowMs) {
     };
 }
 export const ASK_DECISION_CONSUMER_ABSENT = "absent";
+function standingParkedDecision(gate, row, idempotencyKey) {
+    if (gate?.kind !== "decided")
+        return undefined;
+    const decision = gate.decision === "allow" ? "approve" : "deny";
+    if (row.decision === decision && row.decidedAtMs !== null && row.decidedAtMs >= gate.decidedAtMs) {
+        return {
+            kind: "standing",
+            decision,
+            decidedAtMs: row.decidedAtMs,
+            ...(row.decisionNote !== null ? { decisionNote: row.decisionNote } : {}),
+            ...(row.decisionActor !== null ? { actor: row.decisionActor } : {}),
+            byThisRequest: idempotencyKey !== undefined && row.idempotencyKey === idempotencyKey,
+        };
+    }
+    return { kind: "standing", decision, decidedAtMs: gate.decidedAtMs, ...(gate.decisionNote !== undefined ? { decisionNote: gate.decisionNote } : {}), byThisRequest: false };
+}
 const MAX_INFLIGHT_TERMINAL_CLAIMS = 2;
 const DURABLE_CONVERGE_BACKOFF_MS = [50, 100, 200, 400, 800, 1600];
 export const DURABLE_CONVERGE_READ_TIMEOUT_MS = 2_000;
@@ -115,10 +132,28 @@ const FS_WRITE_TOOLS = pathConfinableWriteToolNames();
 function sessionAllowCategory(toolName) {
     return FS_WRITE_TOOLS.has(toolName) ? "fs-write" : `tool:${toolName}`;
 }
-function sessionAllowKey(owner, sessionId, incarnation, category, binding) {
-    if (!sessionId || !incarnation)
-        return undefined;
-    return JSON.stringify([owner, sessionId, incarnation, category, binding.kind === "bound" ? binding.digest : null]);
+function sessionAllowKey(owner, seat, category, binding) {
+    return JSON.stringify([owner, seat.sessionId, seat.incarnation, category, binding.kind === "bound" ? binding.digest : null]);
+}
+function sessionAllowSeatOf(leg) {
+    return leg.sessionId && leg.incarnation ? { sessionId: leg.sessionId, incarnation: leg.incarnation } : undefined;
+}
+function liveSessionAnswer(facts, leg) {
+    const home = standingAnswerHome(facts);
+    switch (home) {
+        case "none":
+            return { home: "none", occupantUnreadable: false };
+        case "seat": {
+            const seat = sessionAllowSeatOf(leg);
+            return seat !== undefined ? { home: "seat", seat } : { home: "none", occupantUnreadable: Boolean(leg.sessionId) };
+        }
+        case "server_store":
+            return leg.sessionId ? { home: "server_store", sessionId: leg.sessionId } : { home: "none", occupantUnreadable: false };
+        default: {
+            const unhandled = home;
+            throw new Error(`unhandled standing-answer home: ${String(unhandled)}`);
+        }
+    }
 }
 function askStandingAnswerFacts(req, governanceForced, deploymentListAsks) {
     const classes = screenAskClassMembers(req.askClass, req.classes)?.classes;
@@ -196,8 +231,8 @@ function pendingEntryStandingAnswerFacts(entry) {
         deploymentListQuestion: entry.deploymentListQuestion === true,
     };
 }
-function projectDecisionFacts(facts, frame, card) {
-    const rememberRefused = standingAnswerHome(facts) === "none";
+function projectDecisionFacts(facts, leg, frame, card) {
+    const rememberRefused = liveSessionAnswer(facts, leg).home === "none";
     if (frame !== undefined) {
         if (facts.requiresRealApproval)
             frame.requiresRealApproval = true;
@@ -256,7 +291,7 @@ function livePendingRowOf(e) {
         ...(e.requiresRealApproval ? { requiresRealApproval: true } : {}),
         ...(e.governanceForced ? { governanceForced: true } : {}),
         ...(listFrame.mandated === true ? { mandated: true } : {}),
-        ...(standingAnswerHome(pendingEntryStandingAnswerFacts(e)) === "none" ? { rememberRefused: true } : {}),
+        ...(liveSessionAnswer(pendingEntryStandingAnswerFacts(e), e).home === "none" ? { rememberRefused: true } : {}),
         ...(listFrame.mandate !== undefined ? { mandate: listFrame.mandate } : {}),
         ...(listFrame.origin !== undefined ? { origin: listFrame.origin } : {}),
         ...(listFrame.type === "approval_request" && listFrame.liveFactsUnknown === true ? { liveFactsUnknown: true } : {}),
@@ -360,6 +395,18 @@ function parseToolApprovalFields(body, retired) {
     }
     return { ok: false, error: 'decision must be one of "allow" | "allow_session" | "deny"' };
 }
+export function askDecisionRecordOf(write) {
+    return {
+        decision: write.decision,
+        ...(write.actor !== undefined ? { decisionActor: write.actor } : {}),
+        decisionNote: write.note ?? null,
+        idempotencyKey: write.idempotencyKey ?? null,
+        ...liveHostSource(write.decider),
+    };
+}
+function liveDecideInputOf(write) {
+    return { ...askDecisionRecordOf(write), ...(write.decision === "approve" && write.updatedInput !== undefined ? { updatedInput: write.updatedInput } : {}) };
+}
 export function buildUnattendedPolicyRefusal(reason) {
     return { allow: false, settledBy: POLICY_REFUSAL_DECISION.settledBy, reason };
 }
@@ -544,8 +591,8 @@ export class ToolApprovalCoordinator {
     admitMaxPerOwner;
     admitByTask = new Map();
     admitByOwner = new Map();
-    suspendedPollOffset = 0;
-    adoptedPollOffset = 0;
+    suspendedPollCursor = { offset: 0 };
+    adoptedPollCursor = { offset: 0 };
     editedDecisionsInFlight = new Map();
     storeErrorWarned = false;
     storeErrorTally = 0;
@@ -959,8 +1006,8 @@ export class ToolApprovalCoordinator {
         const sessionId = origin.sessionId;
         if (!sessionId)
             return false;
-        const liveKey = sessionAllowKey(origin.owner, sessionId, origin.incarnation, sessionAllowCategory(req.toolName), facts.grantBinding);
-        const live = liveKey !== undefined && this.allowAllSessions.has(liveKey);
+        const seat = sessionAllowSeatOf(origin);
+        const live = seat !== undefined && this.allowAllSessions.has(sessionAllowKey(origin.owner, seat, sessionAllowCategory(req.toolName), facts.grantBinding));
         const durable = !live && facts.grantBinding.kind === "none" && (await this.durableGrantHas(sessionId, req.toolName));
         if (!live && !durable)
             return false;
@@ -1330,7 +1377,7 @@ export class ToolApprovalCoordinator {
             ...(askReasonsOfReq !== undefined ? { askReasons: askReasonsOfReq } : {}),
             ...(governanceForced ? { governanceForced: true } : {}),
             ...(req.mandated === true ? { mandated: true } : {}),
-            ...(standingAnswerHome(askStandingAnswerFacts(req, governanceForced, deploymentListAsks)) === "none" ? { rememberRefused: true } : {}),
+            ...(liveSessionAnswer(askStandingAnswerFacts(req, governanceForced, deploymentListAsks), origin).home === "none" ? { rememberRefused: true } : {}),
             ...(typeof req.boundGrantDigest === "string" ? { boundGrantDigest: req.boundGrantDigest, ...(req.boundGrants !== undefined ? { boundGrants: req.boundGrants } : {}) } : {}),
             ...(noRulingCause !== undefined ? { classifierNoRuling: noRulingCause } : {}),
             ...(grantAbsence !== undefined ? { boundGrantAbsence: grantAbsence } : {}),
@@ -1897,7 +1944,7 @@ export class ToolApprovalCoordinator {
             grantBinding: entryGrantBinding,
             classes: entryClasses,
             ...(entryDeploymentListQuestion ? { deploymentListQuestion: true } : {}),
-        }), frame, cardForFrame);
+        }), origin, frame, cardForFrame);
         const cardFrame = askId !== undefined && cardForFrame !== undefined
             ? buildApprovalRequestFrame({ askId, taskId: origin.taskId, approvalId: wireApprovalId, card: cardForFrame, expiresAtMs: persistedExpiresAtMs, nowMs: Date.now(), live: frame })
             : undefined;
@@ -1944,7 +1991,7 @@ export class ToolApprovalCoordinator {
                     if (s.requiresRealApproval === true)
                         continue;
                     s.requiresRealApproval = true;
-                    const card = projectDecisionFacts(pendingEntryStandingAnswerFacts(s), s.frame, s.cardFrame?.card);
+                    const card = projectDecisionFacts(pendingEntryStandingAnswerFacts(s), s, s.frame, s.cardFrame?.card);
                     if (s.cardFrame !== undefined && card !== undefined && card !== s.cardFrame.card)
                         s.cardFrame = { ...s.cardFrame, card };
                 }
@@ -2097,11 +2144,10 @@ export class ToolApprovalCoordinator {
     }
     recordDeploymentListAnswer(decided, entry, judgedOwner, parsed, principal, eligibility) {
         const store = this.sessionGrants;
-        const sessionId = entry.sessionId;
-        if (parsed.value !== "allow_session" || !sessionId || store === undefined)
-            return decided;
-        if (standingAnswerHome(pendingEntryStandingAnswerFacts(entry)) !== "server_store")
+        const answer = liveSessionAnswer(pendingEntryStandingAnswerFacts(entry), entry);
+        if (parsed.value !== "allow_session" || answer.home !== "server_store" || store === undefined)
             return decided;
+        const sessionId = answer.sessionId;
         return (async () => {
             const result = await decided;
             if (result.status !== 200)
@@ -2443,21 +2489,50 @@ export class ToolApprovalCoordinator {
         const openGenerationNow = this.lookupParkRedemption(row.askId) !== undefined ? await this.openGateGeneration(row) : undefined;
         const prior = this.lookupParkRedemption(row.askId);
         if (prior?.redeemed !== undefined && receiptAnswersNow(prior.redeemed.gateGeneration, openGenerationNow))
-            return this.replayRedeemReceipt(id, prior, row, prior.redeemed, parsed);
+            return this.replayRedeemReceipt(id, prior, row, prior.redeemed, parsed, row);
         if (prior?.inflight !== undefined) {
             const shared = await prior.inflight;
             if (shared.status < 200 || shared.status >= 300)
                 return shared;
             if (!receiptAnswersNow(shared.gateGeneration, openGenerationNow))
                 return this.redeemParkedAsk(id, row, parsed, httpReq, principal);
-            return this.replayRedeemReceipt(id, prior, row, { decision: shared.decision, body: shared.body, gateGeneration: shared.gateGeneration, ...(shared.rule?.terminal === true ? { rule: shared.rule.body } : {}) }, parsed);
+            return this.replayRedeemReceipt(id, prior, row, { decision: shared.decision, body: shared.body, gateGeneration: shared.gateGeneration, ...(shared.rule?.terminal === true ? { rule: shared.rule.body } : {}) }, parsed, shared.recorded ?? { decisionNote: null });
         }
+        const store = this.askStore;
+        if (store === undefined)
+            return this.notPending();
+        const request = {
+            write: { decision: parsed.value === "deny" ? "deny" : "approve", decider: parsed.decider, ...(parsed.note !== undefined ? { note: parsed.note } : {}) },
+            ...(parsed.value === "allow_session" ? { remember: "session" } : {}),
+            ...(parsed.persistRule !== undefined ? { persistRule: parsed.persistRule } : {}),
+            ...(parsed.updatedInput !== undefined && parsed.value !== "deny" ? { updatedInput: parsed.updatedInput } : {}),
+            ...(principal !== undefined ? { principal } : {}),
+            operator: false,
+            ...(httpReq !== undefined ? { httpReq } : {}),
+        };
+        const out = await this.runParkedFlight(redeem, store, row, row.gateToken, request);
+        if (out.status < 200 || out.status >= 300)
+            return { status: out.status, body: out.body };
+        const rule = out.rule;
+        return {
+            status: out.status,
+            body: {
+                ...out.body,
+                approvalId: id,
+                askId: row.askId,
+                accepted: "parked_redeemed",
+                ...(parsed.value === "allow_session" ? { rememberApplied: out.rememberApplied === true } : {}),
+                ...noteRecordedReceipt(parsed.note, noteLandedOnRow(parsed.note, out.recorded?.decisionNote ?? null)),
+                ...(rule?.body ?? {}),
+            },
+        };
+    }
+    async runParkedFlight(redeem, store, row, gateToken, request) {
+        const decision = request.write.decision;
         const admission = this.parkRedemptionAdmission(row.owner);
         if (admission !== undefined)
-            return admission;
+            return { ...admission, body: admission.body, decision };
         const memo = this.openParkRedemption(row.askId, row.owner);
-        const decision = parsed.value === "deny" ? "deny" : "approve";
-        const gateToken = row.gateToken;
         const flight = (async () => {
             let res;
             try {
@@ -2467,12 +2542,13 @@ export class ToolApprovalCoordinator {
                     gateBoundCallId: row.gateBoundCallId,
                     gateBoundInputHash: row.gateBoundInputHash,
                     decision,
-                    ...(parsed.note !== undefined ? { note: parsed.note } : {}),
-                    decider: parsed.decider,
-                    ...(parsed.updatedInput !== undefined && parsed.value !== "deny" ? { updatedInput: parsed.updatedInput } : {}),
-                    ...(parsed.value === "allow_session" ? { remember: "session" } : {}),
-                    ...(principal !== undefined ? { principal } : {}),
-                    ...(httpReq !== undefined ? { httpReq } : {}),
+                    ...(request.write.note !== undefined ? { note: request.write.note } : {}),
+                    decider: request.write.decider,
+                    ...(request.updatedInput !== undefined && decision === "approve" ? { updatedInput: request.updatedInput } : {}),
+                    ...(request.remember !== undefined ? { remember: request.remember } : {}),
+                    ...(request.principal !== undefined ? { principal: request.principal } : {}),
+                    operator: request.operator,
+                    ...(request.httpReq !== undefined ? { httpReq: request.httpReq } : {}),
                 });
             }
             catch (err) {
@@ -2481,8 +2557,9 @@ export class ToolApprovalCoordinator {
             }
             if (res.status < 200 || res.status >= 300)
                 return { ...res, decision };
-            const rule = await this.persistRuleFromRow(row, parsed);
-            return { ...res, decision, ...(rule !== undefined ? { rule } : {}) };
+            const recorded = await this.recordParkedOutcome(store, row, request.write);
+            const rule = await this.persistRuleFromRow(row, request.persistRule, request.updatedInput !== undefined);
+            return { ...res, decision, ...(recorded !== undefined ? { recorded } : {}), ...(rule !== undefined ? { rule } : {}) };
         })();
         memo.inflight = flight;
         let out;
@@ -2495,25 +2572,57 @@ export class ToolApprovalCoordinator {
         if (out.status < 200 || out.status >= 300) {
             if (this.parkRedemptions.get(row.askId) === memo)
                 this.parkRedemptions.delete(row.askId);
-            return { status: out.status, body: out.body };
+            return out;
         }
-        const rule = out.rule;
         if (this.retainParkRedemption(row.askId, memo))
-            memo.redeemed = { decision, body: out.body, gateGeneration: out.gateGeneration, ...(rule?.terminal === true ? { rule: rule.body } : {}) };
-        return {
-            status: out.status,
-            body: {
-                ...out.body,
-                approvalId: id,
-                askId: row.askId,
-                accepted: "parked_redeemed",
-                ...(parsed.value === "allow_session" ? { rememberApplied: out.rememberApplied === true } : {}),
-                ...(rule?.body ?? {}),
-            },
-        };
+            memo.redeemed = { decision, body: out.body, gateGeneration: out.gateGeneration, ...(out.rule?.terminal === true ? { rule: out.rule.body } : {}) };
+        return out;
     }
-    async persistRuleFromRow(row, parsed) {
-        const persistRule = parsed.persistRule;
+    async recordParkedOutcome(store, row, write) {
+        try {
+            const out = await this.writeAskDecision(store, row.askId, { kind: "parked" }, row.owner, write);
+            if (out.ok)
+                return out.row;
+            recordFailOpen("server.approval.parked-decision-not-recorded", `askId=${row.askId} reason=${out.reason}`);
+            return undefined;
+        }
+        catch (err) {
+            this.noteStoreError(err, "recordParkedDecision");
+            recordFailOpen("server.approval.parked-decision-not-recorded", `askId=${row.askId} reason=store_error`);
+            return undefined;
+        }
+    }
+    async decideParkedAsk(store, row, request, idempotencyKey) {
+        for (;;) {
+            const gate = await this.readParkedGate(row);
+            const current = await this.askRowFor(store, row.askId, "getAsk(parked-decision)");
+            if (current === null || current.state !== "PARKED" || !askRowCarriesOwner(current, row.owner))
+                return { kind: "gone" };
+            const inflight = this.lookupParkRedemption(row.askId)?.inflight;
+            if (inflight !== undefined) {
+                await inflight;
+                continue;
+            }
+            const standing = standingParkedDecision(gate, current, idempotencyKey);
+            if (standing !== undefined)
+                return standing;
+            if (request.write.decision === "approve" && request.policyMayNotApprove === true)
+                return { kind: "policy_refused" };
+            const redeem = this.parkedRedeem?.();
+            if (redeem === undefined || row.gateToken === null) {
+                if (row.gateToken === null)
+                    defaultLogger.error("tool approval parked row carries no gate token — nothing to redeem", { askId: row.askId });
+                return { kind: "gate_only" };
+            }
+            const out = await this.runParkedFlight(redeem, store, current, row.gateToken, request);
+            if (out.status === 200)
+                return { kind: "accepted", body: out.body, ...(out.recorded !== undefined ? { recorded: out.recorded } : {}) };
+            if ((await this.readParkedGate(row))?.kind === "decided")
+                continue;
+            return { kind: "refused", status: out.status, body: out.body };
+        }
+    }
+    async persistRuleFromRow(row, persistRule, inputWasEdited) {
         if (persistRule === undefined)
             return undefined;
         const flag = (rulePersisted, ruleRefusal, echo) => ({
@@ -2533,7 +2642,7 @@ export class ToolApprovalCoordinator {
         const command = row.ruleCommand;
         if (command === null)
             return flag(false, "rule_material_absent");
-        if (parsed.updatedInput !== undefined)
+        if (inputWasEdited)
             return flag(false, "rule_input_edited");
         const offers = card.ruleOffers ?? [];
         const scope = row.ruleScopeRoot !== null ? { kind: "project", root: row.ruleScopeRoot } : undefined;
@@ -2590,10 +2699,10 @@ export class ToolApprovalCoordinator {
             return { ...flag(false, "rule_store_error"), terminal: false };
         }
     }
-    async replayRedeemReceipt(id, memo, row, receipt, parsed) {
+    async replayRedeemReceipt(id, memo, row, receipt, parsed, recordedNote) {
         let rule = receipt.decision === "approve" ? receipt.rule : this.lateRuleRefusal(parsed);
         if (receipt.decision === "approve" && rule === undefined && parsed.persistRule !== undefined) {
-            const flight = memo.ruleInflight ?? this.persistRuleFromRow(row, parsed);
+            const flight = memo.ruleInflight ?? this.persistRuleFromRow(row, parsed.persistRule, parsed.updatedInput !== undefined);
             const isOwner = memo.ruleInflight === undefined;
             if (isOwner)
                 memo.ruleInflight = flight;
@@ -2619,6 +2728,7 @@ export class ToolApprovalCoordinator {
                 accepted: "parked_redeemed",
                 idempotent: true,
                 decision: receipt.decision === "approve" ? "allow" : "deny",
+                ...noteRecordedReceipt(parsed.note, noteLandedOnRow(parsed.note, recordedNote.decisionNote)),
                 ...(rule ?? {}),
             },
         };
@@ -2702,19 +2812,36 @@ export class ToolApprovalCoordinator {
             return withFlag(false, "rule_store_error");
         }
     }
+    writeAskDecision(store, askId, form, owner, write) {
+        switch (form.kind) {
+            case "live":
+                return this.withStoreDeadline(store.decideAsk(askId, form.batchId, owner, liveDecideInputOf(write)), "decideAsk", DURABLE_CALL_TIMEOUT_MS, (late) => {
+                    if (!late.ok)
+                        return;
+                    if (decidedRowFacts(late.row) === undefined) {
+                        defaultLogger.error("ask decision landed after its deadline on a row that is not an authoritative human decision — not settled", { askId, state: late.row.state, provisional: late.row.provisional });
+                        return;
+                    }
+                    this.notifyExternalDecision(askId, outcomeOfDecidedRow(late.row));
+                });
+            case "parked":
+                return this.withStoreDeadline(store.recordParkedDecision(askId, owner, askDecisionRecordOf(write)), "recordParkedDecision", DURABLE_CALL_TIMEOUT_MS);
+            default: {
+                const unhandled = form;
+                throw new Error(`writeAskDecision: unhandled form ${JSON.stringify(unhandled)}`);
+            }
+        }
+    }
     async respondWithCas(askStore, askId, batchId, owner, entry, parsed, ruleEligibility) {
         let winnerRow;
         let ambiguousConfirmedRow;
         let noteLanded = false;
         try {
-            const decided = await this.withStoreDeadline(askStore.decideAsk(askId, batchId, owner, {
+            const decided = await this.writeAskDecision(askStore, askId, { kind: "live", batchId }, owner, {
                 decision: parsed.value === "deny" ? "deny" : "approve",
-                ...(parsed.note !== undefined ? { decisionNote: parsed.note } : {}),
-                ...(parsed.value !== "deny" && parsed.updatedInput !== undefined ? { updatedInput: parsed.updatedInput } : {}),
-                ...liveHostSource(parsed.decider),
-            }), "decideAsk", DURABLE_CALL_TIMEOUT_MS, (late) => {
-                if (late.ok)
-                    this.notifyExternalDecision(askId, outcomeOfDecidedRow(late.row));
+                decider: parsed.decider,
+                ...(parsed.note !== undefined ? { note: parsed.note } : {}),
+                ...(parsed.updatedInput !== undefined ? { updatedInput: parsed.updatedInput } : {}),
             });
             if (decided.ok) {
                 winnerRow = decided.row;
@@ -2781,25 +2908,11 @@ export class ToolApprovalCoordinator {
     }
     finishRespond(entry, judgedOwner, parsed, opts) {
         let rememberApplied;
-        const home = standingAnswerHome(pendingEntryStandingAnswerFacts(entry));
-        let grantable;
-        switch (home) {
-            case "seat":
-                grantable = true;
-                break;
-            case "none":
-            case "server_store":
-                grantable = false;
-                break;
-            default: {
-                const unhandled = home;
-                throw new Error(`unhandled standing-answer home: ${String(unhandled)}`);
-            }
-        }
         if (parsed.value === "allow_session") {
-            const grantKey = grantable ? sessionAllowKey(judgedOwner, entry.sessionId, entry.incarnation, sessionAllowCategory(entry.toolName), entry.grantBinding) : undefined;
-            rememberApplied = grantKey !== undefined;
-            if (grantKey !== undefined) {
+            const answer = liveSessionAnswer(pendingEntryStandingAnswerFacts(entry), entry);
+            rememberApplied = answer.home === "seat";
+            if (answer.home === "seat") {
+                const grantKey = sessionAllowKey(judgedOwner, answer.seat, sessionAllowCategory(entry.toolName), entry.grantBinding);
                 if (this.allowAllSessions.size >= MAX_ALLOW_SESSIONS) {
                     const oldest = this.allowAllSessions.values().next().value;
                     if (oldest !== undefined)
@@ -2807,7 +2920,7 @@ export class ToolApprovalCoordinator {
                 }
                 this.allowAllSessions.add(grantKey);
             }
-            else if (grantable && entry.sessionId) {
+            else if (answer.home === "none" && answer.occupantUnreadable) {
                 defaultLogger.warn("session_grant_refused_occupant_unreadable", { sessionId: entry.sessionId, toolName: entry.toolName });
             }
         }
@@ -2880,7 +2993,8 @@ export class ToolApprovalCoordinator {
             grantBinding: { kind: "unreadable" },
             ...(card.classes !== undefined ? { classes: card.classes } : {}),
         };
-        const rememberRefused = standingAnswerHome(pendingEntryStandingAnswerFacts(facts)) === "none";
+        const leg = row.sessionId !== row.taskId ? { sessionId: row.sessionId } : {};
+        const rememberRefused = liveSessionAnswer(pendingEntryStandingAnswerFacts(facts), leg).home === "none";
         const cardFrame = (card.rememberRefused === true) === rememberRefused
             ? replayFrame
             : { ...replayFrame, card: rememberRefused ? { ...card, rememberRefused: true } : (({ rememberRefused: _stale, ...rest }) => rest)(card) };
@@ -2911,7 +3025,7 @@ export class ToolApprovalCoordinator {
             owner: row.owner,
             ownerReadSeq: this.rowReadSeq,
             executionLane: row.executionLane,
-            ...(row.sessionId !== row.taskId ? { sessionId: row.sessionId } : {}),
+            ...leg,
             ...(card.fromSubagent === true ? { originTaskId: row.sourceSessionId } : {}),
             toolName: card.toolName,
             ...facts,
@@ -3042,28 +3156,11 @@ export class ToolApprovalCoordinator {
                 continue;
             seen.add(entry.askId);
         }
-        const waitingStart = waiting.length > 0 ? this.suspendedPollOffset % waiting.length : 0;
-        const adoptedStart = adopted.length > 0 ? this.adoptedPollOffset % adopted.length : 0;
-        const ordered = [
-            ...[...waiting.slice(waitingStart), ...waiting.slice(0, waitingStart)].map((askId) => ({ askId, tier: "waiting" })),
-            ...[...adopted.slice(adoptedStart), ...adopted.slice(0, adoptedStart)].map((askId) => ({ askId, tier: "adopted" })),
-        ];
-        const deadlineMs = Date.now() + SUSPENDED_POLL_BUDGET_MS;
         let settled = 0;
-        let polled = 0;
-        let polledWaiting = 0;
-        let polledAdopted = 0;
-        let truncated = false;
-        for (const { askId, tier } of ordered) {
-            if (polled >= SUSPENDED_POLL_MAX_PER_TICK || Date.now() >= deadlineMs) {
-                truncated = true;
-                break;
-            }
-            polled++;
-            if (tier === "waiting")
-                this.suspendedPollOffset = waitingStart + ++polledWaiting;
-            else
-                this.adoptedPollOffset = adoptedStart + ++polledAdopted;
+        const { visited: polled, truncated } = await boundedRotation([
+            { items: waiting, cursor: this.suspendedPollCursor },
+            { items: adopted, cursor: this.adoptedPollCursor },
+        ], { maxPerTick: SUSPENDED_POLL_MAX_PER_TICK, budgetMs: SUSPENDED_POLL_BUDGET_MS }, async (askId) => {
             let row;
             const readSeq = this.nextRowReadSeq();
             try {
@@ -3071,24 +3168,24 @@ export class ToolApprovalCoordinator {
             }
             catch (err) {
                 this.noteStoreError(err, "getAsk(poll-suspended)");
-                continue;
+                return;
             }
             if (row === null) {
                 this.forgetAdoptedAsk(askId);
-                continue;
+                return;
             }
             if (row.state === "STREAM_PENDING") {
                 this.followRowOwner(askId, row.owner, readSeq);
-                continue;
+                return;
             }
             if (this.editedDecisionInFlight(askId))
-                continue;
+                return;
             const endingCause = askRowEndingCause(row);
             if (endingCause !== undefined) {
                 const before = this.waitingRegistrationCount(askId);
                 this.settleVoidedSiblings([askId], endingCause);
                 settled += before;
-                continue;
+                return;
             }
             const outcome = replayTerminalAskRow(row);
             if (outcome === "unavailable") {
@@ -3096,11 +3193,11 @@ export class ToolApprovalCoordinator {
                 const parkCause = askRowParkTrigger(row) ?? (Date.now() >= row.expiresAtMs ? APPROVAL_ENDING_CAUSES.TTL_EXPIRED : APPROVAL_ENDING_CAUSES.SHUTDOWN_BEFORE_PARK);
                 this.settleSameAskIdParkRoute(askId, parkCause);
                 settled += before;
-                continue;
+                return;
             }
             const delivered = this.notifyExternalDecision(askId, outcome).settled;
             settled += delivered;
-        }
+        });
         const backlog = Math.max(0, waiting.length + adopted.length - polled);
         if (truncated) {
             defaultLogger.warn("approval_suspended_poll_truncated", {
@@ -3109,8 +3206,8 @@ export class ToolApprovalCoordinator {
                 backlog,
                 maxPerTick: SUSPENDED_POLL_MAX_PER_TICK,
                 budgetMs: SUSPENDED_POLL_BUDGET_MS,
-                resumeFromOffset: this.suspendedPollOffset,
-                resumeAdoptedFromOffset: this.adoptedPollOffset,
+                resumeFromOffset: this.suspendedPollCursor.offset,
+                resumeAdoptedFromOffset: this.adoptedPollCursor.offset,
             });
         }
         return { polled, settled, backlog, truncated };

package/dist/trace/engine-notice-wire.d.ts

@@ -1,3 +1,4 @@
+import { projectMcpAuthorization } from "../mcp-authorization-face.js";
 /**
  * 上 wire 的通告码 —— **显式闭集常量表**(设计稿 ①,起步三码;今天的码数以本常量自身为准——
  * 在散文里抄数字必陈腐,codex 5.65 增量批 R1-[low] 实逮:上一句曾写「今天九码」而表里是十条。
@@ -108,6 +109,19 @@ export declare function redactNoticeMessage(message: unknown): string;
  * 交中和形,空白 / 超长的条目两只码不同)。其余字段、其余码原样。
  */
 export declare function redactNoticeRuleText(code: string, detail: Record<string, unknown> | undefined): Record<string, unknown> | undefined;
+/**
+ * 通告 `detail` 里**平铺着一条有处置表的记录**的码:码 → 那条记录的成员名与出门投影(一张表,不在 {@link engineNoticeEventData} 里写分支)。
+ * 记录成员只经那只投影出门(结构位:不过 {@link sanitizeWireText} 的脱敏与截断 —— 结构位的形与长由记录的属主判);detail 的其余成员照旧经
+ * {@link sanitizeNoticeDetail},合并按引擎 detail 的原键序。投影答 `undefined`(`reason` 出闭集 / 缺席)⇒ 记录成员整组缺席(在场而读不出由表的丢弃口计一次),
+ * 与状态面「整格缺席」同一失败方向。
+ * 运维日志腿(`boot/runner-deps.ts` 的转发席)不读这张登记:日志答「发生了什么」(给运维,整行过日志行的出口座),wire 答「用户拿到什么」—— 两个问题,两个读者。
+ */
+export declare const NOTICE_DETAIL_RECORDS: {
+    readonly "mcp.authorization_required": {
+        readonly members: readonly string[];
+        readonly project: typeof projectMcpAuthorization;
+    };
+};
 export declare function engineNoticeEventData(notice: {
     code: string;
     message: string;

package/dist/trace/engine-notice-wire.js

@@ -2,6 +2,7 @@ import { uuidv7 } from "@sema-agent/core";
 import { redactSecrets } from "./redact.js";
 import { redactListEntry } from "../list-entry-display.js";
 import { recordFailOpen } from "../observability/fail-open.js";
+import { MCP_AUTHORIZATION_MEMBERS, projectMcpAuthorization } from "../mcp-authorization-face.js";
 export const ENGINE_NOTICE_WIRE_CODES = [
     "memory.session_polluted",
     "memory.harvest_quarantined",
@@ -136,11 +137,27 @@ export function redactNoticeRuleText(code, detail) {
     });
     return { ...detail, [at.array]: redacted };
 }
+export const NOTICE_DETAIL_RECORDS = {
+    "mcp.authorization_required": { members: MCP_AUTHORIZATION_MEMBERS, project: projectMcpAuthorization },
+};
+function noticeDetailOf(code, detail) {
+    const records = NOTICE_DETAIL_RECORDS;
+    const record = Object.hasOwn(records, code) ? records[code] : undefined;
+    if (record === undefined || detail === undefined)
+        return sanitizeNoticeDetail(redactNoticeRuleText(code, detail));
+    const own = (key) => record.members.includes(key);
+    const face = { ...record.project(Object.fromEntries(Object.entries(detail).filter(([k]) => own(k)))) };
+    const rest = sanitizeNoticeDetail(redactNoticeRuleText(code, Object.fromEntries(Object.entries(detail).filter(([k]) => !own(k)))));
+    return Object.fromEntries(Object.keys(detail).flatMap((k) => {
+        const from = own(k) ? face : rest;
+        return Object.hasOwn(from, k) ? [[k, from[k]]] : [];
+    }));
+}
 export function engineNoticeEventData(notice, sessionId, nowMs, eventId) {
     return {
         code: notice.code,
         message: redactNoticeMessage(notice.message).slice(0, NOTICE_TEXT_MAX),
-        detail: sanitizeNoticeDetail(redactNoticeRuleText(notice.code, notice.detail)),
+        detail: noticeDetailOf(notice.code, notice.detail),
         sessionId,
         ts: nowMs,
         eventId,

package/dist/trace/project.d.ts

@@ -217,7 +217,7 @@ export declare function toolStartEventData(ev: {
  * `done` 永远到不了、重连恒复现同一处),而 `gate-outcome-defective` 那一格还不涨。
  *
  * ⇒ 兑现方式从「枚举」换成**结构**:任何逃出投影的异常同走既有的那一口 report + withhold。规则因此变少
- * (不是「守住已知的 N 种坏形」而是「坏字节一律 withhold」)。core 7.51.0 起筛本身对任意 JSON 形不抛(KL-1731-a:只覆盖 JSON ——
+ * (不是「守住已知的 N 种坏形」而是「坏字节一律 withhold」)。core 7.51.0 起筛本身对任意 JSON 形不抛([ref]:只覆盖 JSON ——
  * 访问器 / Proxy 这类非 JSON 值仍可能抛),本仓此前叠在筛前的具名形门与成员门(第二读法)随之退役,诊断串就是筛给的缺陷句。
  * ⛔ **刻意不动**「先脱敏后截断」的次序:截断在前会把跨界的密钥切成半截明文留在输出里,而且它只治
  * `note` 一条叶(`approver` 同病)—— 那是给一个类打两个特判,正是本仓要消掉的形。
@@ -294,7 +294,8 @@ export declare function reasoningEndEventData(ev: Record<string, unknown>): Segm
  *  can never appear here) — SAME UNTRUSTED RAW contract as `output` (a card carries `originalFile`/stdout bodies),
  *  so it gets the same deep redaction before it is persisted or echoed — except a media card's `file.base64` (image / document
  *  cards: the second encoding of the same bytes the `output` block carries), which, like the block's `data`, is an encoding of
- *  bytes and not text ({@link projectToolStructured}; the durable face drops it in the ledger confluence). `label`(core 展示名,同 tool_start 的
+ *  bytes and not text; a card that carries a record with a disposition table (an MCP authorization failure card's `authorization`) has that member
+ *  projected by the record's table ({@link projectToolCard}, the one reader of a tool card — session history reads `toolResult.details` with it too; the durable face drops the media bytes in the ledger confluence). `label`(core 展示名,同 tool_start 的
  *  label 待遇 verbatim)白名单排查(2026-07-24)补齐进函数本体——此前外包给调用点各自手动拼接,7 处只有
  *  3 处记得拼,resume leg + ledger-sink 落盘两处漏了,持久化记录本身缺 label 一写盘就永久追不回来。 */
 export declare function toolEndEventData(ev: {
@@ -333,7 +334,7 @@ export declare function toolEndEventData(ev: {
  *  · `toolCallId` / `toolName` —— 调用 id(🔴 [ref] 订正:出身是**服务商**在 tool_use / tool_calls 里给的,引擎缺席时自铸兜底、越界时折叠 ——
  *    此前写「引擎铸」不实)与名册里的工具名(与 `tool_start` 逐字同源)⇒ verbatim。调用 id 这一族的形状在**全部面的共同入口**一次施加 ——
  *    core 7.36.0([ref])brain 建调用那一行的准入(在形原样 / 越界单射折叠,原字节只在转录 `ToolCall.wireId`),一方 brain 新铸的调用在逐帧面上
- *    恒是在形的引擎 id(残余两条 [ref]:≤7.106.0 写下的存量行 resume 出来的帧是服务商原串逐字;宿主 Brain 不准入 KL-1207-a —— 详见
+ *    恒是在形的引擎 id(残余两条 [ref]:≤7.106.0 写下的存量行 resume 出来的帧是服务商原串逐字;宿主 Brain 不准入 [ref] —— 详见
  *    run-terminal `admitProviderEcho` 顶注);
  *    本仓不设第二道闸(见 run-terminal `admitProviderEcho` 顶注;[ref] 关)。
  *  · `elapsedTimeSeconds` —— 引擎铸的整秒,单调、一 call 一个原点 ⇒ 有限数才铸键。