@sema-agent/server 7.150.0 → 7.151.0

package/dist/http/routes/background.d.ts

@@ -9,7 +9,7 @@
  *
  * ── 读口:逐字投 core `list()` 行 ─────────────────────────────────────────────────────────────────
  * 读的是**进程内**注册表(`defaultTaskRegistry.list`),访问元组 = 会话自己的 `{ owner: sid, sessionId: sid, scope }`
- * (scope = 会话行属主 `owner ?? "default"`,与 core 注册铸值同源)⇒ 可见集完全由 core 的 `canAccess` 判(fail-closed:
+ * (scope = 会话的引擎租户分区 `sessionTenantScope`,经唯一换算 `engineScopeOfOwner`,与 core 注册铸值同源)⇒ 可见集完全由 core 的 `canAccess` 判(fail-closed:
  * 缺轴即拒;本会话的会话驻留行、task id 即会话 id 的 run 行、本会话发起的 workflow、根会话是本会话的后台 agent)。
  * 键逐个处置(下面的 {@link ROW_KEY_DISPOSITION},core 给行加键 ⇒ 编译红):`task_id` 改名 `id`;`retained` **真才带**
  * (core:缺席 ⇒ 这一行在 `includeRetained:false` 的硬面上会停);`description` 是模型写的描述、缺席时是启动时的命令文本 ——
@@ -40,8 +40,8 @@
  *
  * 🔴 **停止口在无凭据写门内**(`credentialGated: ["POST"]`;车OL F1 = 7.102.0 合并复审 gpt-6 腿 [high]):门的两个合取项它都中
  *   —— ① 授权的唯一输入是 principal 头(属主判 `admitSessionRow` 与 operator 臂 `explicitOperatorOk` 读的都是 `gatedSubject`,
- *   无 service 凭证的部署上它收调用方自报的头);② 不可撤销、爆炸半径跨租户(知道会话 id + 自报它的属主 ⇒ 停掉那个会话的后台
- *   进程,`includeRetained:true` 连显式 retain 的活服务一起停)。于是无 service 凭证且未开 `ALLOW_UNAUTHED_WRITES` 的部署上它与
+ *   没带过门凭据的请求上它收调用方自报的头);② 不可撤销、爆炸半径跨租户(知道会话 id + 自报它的属主 ⇒ 停掉那个会话的后台
+ *   进程,`includeRetained:true` 连显式 retain 的活服务一起停)。于是无 service 凭证且未开 `ALLOW_UNAUTHED_WRITES` 的部署上,不带过门凭据的请求打它与
  *   其余改写门同码同句 503 `auth.service_token_required`(在路由之前,`dispatch.ts` 那一道),同一只会话级收敛函数的另一个调用点
  *   `DELETE /v1/sessions/:id` 早在同一形下被 `isDestructiveSessionWrite` 拒。读口 `GET …/background` 不进:它有属主门兜底、只读、
  *   只列本会话,与 `GET /v1/rules` 同判。已知同族缺口(不在本口单独打补丁):能力位 `exitFaces` 不含「凭据就绪」这一项,见契约

package/dist/http/routes/capabilities.js

@@ -19,7 +19,7 @@ import { sendJson, sendError } from "../send.js";
 import { codeFieldOf } from "../../terminal.js";
 import { engineRefusalAnswerOf } from "../engine-refusal.js";
 import { assertNever } from "../route-ctx.js";
-import { fileHistoryCaptureOf } from "../../file-history-capture.js";
+import { fileHistoryCaptureOf, fileHistoryWired } from "../../file-history-capture.js";
 import { projectMemoryEngineCapability } from "../../memory-posture.js";
 import { projectWriteProtectionCapability } from "../../write-protection.js";
 import { projectStoreCapability, unwiredStorePosture } from "../../store-posture.js";
@@ -27,6 +27,7 @@ import { projectWebSearchCapability } from "../../plugins/web-search.js";
 import { projectExecutionLaneCapability } from "../../capabilities/execution-lane.js";
 import { SETTINGS_CONTRACT_CAPABILITY } from "../../capabilities/settings-contract.js";
 import { judgeSandboxGitPlane, sandboxGitPlanePremisesOf } from "../../sandbox-git-plane.js";
+import { SESSION_KINDS } from "../../session-kind.js";
 import { MCP_ASSERTION_HEADER_SENT, MCP_REQUEST_TRANSPORT_KINDS } from "../../mcp-assertion-header.js";
 import { gateCompositeMembers } from "../../capabilities/composite-members.js";
 import { projectApprovalsStreamLiveCapability } from "../../capabilities/approvals-push.js";
@@ -84,6 +85,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 deps.logger?.warn("auto_mode_face_resolver_fault", { fault: autoModeFault });
             const rulesLaneForCaller = facts.ruleLaneForCaller(deps, gatedPerson(req, deps.config)).available;
             const streamApprovalFact = facts.streamApproval(deps);
+            const historyWired = fileHistoryWired(deps.backend);
             sendJson(res, 200, gateCompositeMembers({
                 ...deps.capabilities,
                 ...facts.engineCapabilityBits(),
@@ -213,17 +215,18 @@ export async function handleCapabilities(req, res, match, ctx) {
                 scenarioSubject: true,
                 sessionList: facts.sessionList(deps).available,
                 sessionSearch: facts.sessionList(deps).available,
+                sessionKinds: facts.sessionKinds(deps).available ? [...SESSION_KINDS] : [],
                 sessionFork: facts.sessionFork(deps).available,
                 sessionDelete: facts.sessionDelete(deps).available,
-                resumeAt: Boolean(deps.resumeAnchorStore && headReadPresent(deps.sessionStorage)),
+                resumeAt: deps.backend !== undefined && headReadPresent(deps.sessionStorage),
                 promptSuggestions: true,
                 sessionPolicy: facts.sessionPolicy(deps).available,
                 sessionRulesNamespaceForms: sessionRulesNamespaceFormsHonored(),
-                restoreFiles: Boolean(deps.fileHistoryStore),
-                rewindFilesTo: Boolean(deps.fileHistoryStore && deps.resumeAnchorStore && headReadPresent(deps.sessionStorage)),
+                restoreFiles: historyWired,
+                rewindFilesTo: historyWired && headReadPresent(deps.sessionStorage),
                 sessionRewindFiles: facts.sessionRewindFiles(deps).available,
                 sessionRewindFilesPreview: facts.sessionRewindFilesPreview(deps).available,
-                fileHistoryCapture: fileHistoryCaptureOf(deps.fileHistoryStore, deps.config.fileHistoryCapture),
+                fileHistoryCapture: fileHistoryCaptureOf(historyWired, deps.config.fileHistoryCapture),
                 scheduler: facts.hostScheduler(deps.config).available,
                 sessionSync: facts.sessionSync(deps).available,
                 sessionSyncFileHistory: facts.sessionSyncFileHistory(deps).available,

package/dist/http/routes/fleet.js

@@ -3,7 +3,7 @@ import { FLEET_SNAPSHOT_TERMINAL_MAX_ROWS, isTerminalWorkflowRowStatus, recentTe
 import { taskNotificationFoldKey } from "../../orchestration/workflow-completion-inbox.js";
 import { sendJson, sendError, sseHeaders } from "../send.js";
 import { gatedSubject, sendPrincipalRefusal } from "../principal-gate.js";
-import { routeListFilter } from "../owner-access.js";
+import { routeListFilter, workflowScopeOf } from "../owner-access.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
 export async function handleFleet(req, res, match, ctx) {
@@ -24,22 +24,24 @@ export async function handleFleet(req, res, match, ctx) {
             const fleetParams = new URLSearchParams(match.search);
             const callerSession = fleetParams.get("session");
             const observeOnly = fleetParams.get("observe") === "1";
-            await streamFleet(req, res, fleet.fleetBus, fleetWide ? null : (principal ?? "default"), callerSession || null, observeOnly ? undefined : deps.workflowCompletionInbox, { store: deps.workflowRunStore, scope: fleetWide ? null : (principal ?? "default"), pullScope: principal ?? "default", ready: deps.fleetRecoveryDone });
+            const workflowScope = workflowScopeOf(principal);
+            const viewer = fleetWide ? null : { rows: principal ?? "default", workflows: workflowScope };
+            await streamFleet(req, res, fleet.fleetBus, viewer, callerSession || null, observeOnly ? undefined : deps.workflowCompletionInbox, { store: deps.workflowRunStore, scope: viewer?.workflows ?? null, pullScope: workflowScope, ready: deps.fleetRecoveryDone });
             return;
         }
         default:
             return assertNever(match.decl.id);
     }
 }
-function streamFleet(req, res, bus, callerScope, callerSession = null, completionInbox, terminal) {
+function streamFleet(req, res, bus, viewer, callerSession = null, completionInbox, terminal) {
     return new Promise((resolve) => {
         sseHeaders(res);
-        res.write(`event: meta\ndata: ${JSON.stringify({ type: "meta", version: 1, scoped: callerScope !== null, sessionScoped: callerSession !== null, ...(callerSession !== null ? { session: callerSession } : {}), bgNotifyFailClosed: true })}\n\n`);
+        res.write(`event: meta\ndata: ${JSON.stringify({ type: "meta", version: 1, scoped: viewer !== null, sessionScoped: callerSession !== null, ...(callerSession !== null ? { session: callerSession } : {}), bgNotifyFailClosed: true })}\n\n`);
         const seenTasks = new Set();
         const seenWf = new Set();
         const sessionOk = (rowSession) => callerSession === null || rowSession === undefined || rowSession === callerSession;
-        const visT = (r) => (callerScope === null || r.scope === callerScope) && sessionOk(r.sessionId);
-        const visW = (r) => (callerScope === null || r.scope === callerScope) && sessionOk(r.sessionId);
+        const visT = (r) => (viewer === null || r.scope === viewer.rows) && sessionOk(r.sessionId);
+        const visW = (r) => (viewer === null || r.scope === viewer.workflows) && sessionOk(r.sessionId);
         const SCOPED_TASK_KEY_DISPOSITION = {
             id: "keep", parentId: "keep", parentToolCallId: "keep", workflowRunId: "keep", status: "keep",
             startedAt: "keep", elapsedMs: "keep", tokens: "keep",
@@ -144,7 +146,7 @@ function streamFleet(req, res, bus, callerScope, callerSession = null, completio
                     break;
                 case "hook_notice": {
                     const hn = frame.notice;
-                    const hScopeOk = callerScope === null || hn.ownerScope === callerScope;
+                    const hScopeOk = viewer === null || hn.ownerScope === viewer.rows;
                     const hSessionOk = callerSession === null || hn.ownerSessionId === callerSession;
                     if (hScopeOk && hSessionOk) {
                         send("hook_notice", { type: "hook_notice", ...hookNoticeWire(hn), ts: frame.ts });
@@ -153,7 +155,7 @@ function streamFleet(req, res, bus, callerScope, callerSession = null, completio
                 }
                 case "bg_notification": {
                     const n = frame.notification;
-                    const scopeOk = callerScope === null || n.ownerScope === callerScope;
+                    const scopeOk = viewer === null || n.ownerScope === viewer.rows;
                     const sessionInjectOk = callerSession === null || n.ownerSessionId === callerSession;
                     if (scopeOk && sessionInjectOk) {
                         const { ownerScope: _os, ownerSessionId: _osid, ...wire } = n;

package/dist/http/routes/projects.d.ts

@@ -9,8 +9,9 @@
  *  · **登记簿只由配置中心下发**:settings-schema 的本地读取集不收 `projects` 域 ⇒ 没有中心腿在应用配置的部署上没有登记簿 —— 两口 501
  *    `capability.unavailable`,能力位 `capabilities.projects`(布尔)读同一只事实(`capability-facts.ts` 的 `projectRegistry`)答 `false`;
  *    有登记簿时答 `true`。本面不开写动词(写到哪里由另一张设计定;写面到货时另立一位,本位不改义)。
- *  · **可见性 fail-closed**:身份判在登记簿在场判**之前**(否则「这台有没有登记簿」先于 401 泄出去);fleet 调用方(列表面 `list.read` 读档(`listFilterOf`))看全部;
- *    带验过主体的调用方只看 `registeredBy` 恰是自己的登记;看不见的与不存在的同码同句(404 `not_found.project`,不给存在性预言机)。
+ *  · **可见性 fail-closed**:身份判在登记簿在场判**之前**(否则「这台有没有登记簿」先于 401 泄出去);判与按 id 取只有一只(`project-registry.ts`:
+ *    fleet 调用方(列表面 `list.read` 读档(`listFilterOf`))看全部,带验过主体的调用方只看 `registeredBy` 恰是自己的登记 —— 项目上下文继承与登记簿默认读层种子同读它);
+ *    看不见的与不存在的同码同句(404 `not_found.project`,不给存在性预言机)。
  *
  * 归档:`archivedAt` 在场 = 已归档。列表缺省不列,`?archived=true` 只列已归档的,`?archived=false` 与缺省同;单项读不论归档与否都答(会话行引用它)。
  */

package/dist/http/routes/projects.js

@@ -4,7 +4,7 @@ import { sendUnauthorized } from "../principal-gate.js";
 import { routeListFilter } from "../owner-access.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
-import { projectVisible } from "../../project-context.js";
+import { projectVisibleTo, visibleProjectOf } from "../../project-registry.js";
 import { projectByTable } from "../../trace/projection-table.js";
 export const PROJECT_NOT_FOUND_MESSAGE = "no such project";
 export const PROJECT_ROW_DISPOSITIONS = {
@@ -49,7 +49,6 @@ export async function handleProjects(req, res, match, ctx) {
         sendError(res, 501, "capability.unavailable", "the project registry is not available on this deployment: projects are published only by the configuration center, and no center configuration is applied here");
         return;
     }
-    const visible = (registration) => projectVisible(registration, viewer);
     switch (match.decl.id) {
         case "projects-list": {
             const archived = readArchivedQuery(new URLSearchParams(match.search).get("archived"));
@@ -58,7 +57,7 @@ export async function handleProjects(req, res, match, ctx) {
                 return;
             }
             const projects = Object.entries(registry.registry)
-                .filter(([, registration]) => visible(registration) && (registration.archivedAt !== undefined) === archived)
+                .filter(([, registration]) => projectVisibleTo(viewer, registration) && (registration.archivedAt !== undefined) === archived)
                 .map(([id, registration]) => projectRowOf(id, registration));
             sendJson(res, 200, { projects });
             return;
@@ -70,8 +69,8 @@ export async function handleProjects(req, res, match, ctx) {
                 return;
             }
             const id = raw.toLowerCase();
-            const registration = Object.hasOwn(registry.registry, id) ? registry.registry[id] : undefined;
-            if (registration === undefined || !visible(registration)) {
+            const registration = visibleProjectOf(registry.registry, id, viewer);
+            if (registration === undefined) {
                 sendError(res, 404, "not_found.project", PROJECT_NOT_FOUND_MESSAGE);
                 return;
             }

package/dist/http/routes/runs.js

@@ -16,8 +16,8 @@ import { idemCallerOf, idemKeyOf, inflightKeyOf, submissionIdemOf } from "../ide
 import { streamSseLog } from "../sse-log.js";
 import { bindSseLifecycle } from "../sse-lifecycle.js";
 import { buildApprovalPreamble, buildApprovalPreambleSseFrames, readClosedWordSeat, storedCardDemandsAPerson } from "../../approval-card.js";
-import { heldAskOf, liveHostSource, readDecider, retiredDecisionKeyFacts, DECIDED_BY_NOT_IN_PROOF, POLICY_CANNOT_ALLOW_PERSON_ASK } from "../../host-decision.js";
-import { ASK_DECISION_CONSUMER_ABSENT, approvalPreambleReplays, outcomeOfDecidedRow, parkSessionOf, presentedApprovalFrameFamily, resolveStreamApprovalGate } from "../../tool-approval.js";
+import { heldAskOf, readDecider, retiredDecisionKeyFacts, DECIDED_BY_NOT_IN_PROOF, POLICY_CANNOT_ALLOW_PERSON_ASK } from "../../host-decision.js";
+import { ASK_DECISION_CONSUMER_ABSENT, approvalPreambleReplays, decidedRowFacts, outcomeOfDecidedRow, parkSessionOf, presentedApprovalFrameFamily, resolveStreamApprovalGate } from "../../tool-approval.js";
 import { MAX_DECISION_NOTE_CHARS, noteLandedOnRow, noteRecordedReceipt } from "../../approval-ask-machine.js";
 import { askRowEndingCause } from "../../approval-deny-reasons.js";
 import { normalizeRunEventType, screenedStoredEventData } from "../../trace/project.js";
@@ -35,6 +35,7 @@ import { mintAndDriveDurableRun } from "../durable-run-leg.js";
 import { SUBMISSION_CLAIM_FACE } from "../execution-context.js";
 import { admitRunById, admitRunByIdem, enter, readVisibleRun, sessionFactsReadOf } from "../owner-access.js";
 import { keyAdmission, ownerCellOf, recoveredSubject } from "../../owner-faces.js";
+import { engineScopeOfOwner } from "../../engine-identity.js";
 import { personOf } from "../../owner-brands.js";
 import { withSubject } from "../../observability/principal-context.js";
 import { readResumeCtx, resumeCtxUnreadableAnswer } from "../resume-ctx-read.js";
@@ -49,6 +50,11 @@ const STEER_PRIORITY_CHOICES = STEER_PRIORITY_WORDS.length <= 2 ? STEER_PRIORITY
 const ASK_PARKING_RETRY_AFTER_SEC = 2;
 const ASK_ACTOR_LABEL_MAX = 256;
 const AskDecisionActorSchema = ActorAssertionWire.strip();
+function mirrorRetryAfter(res, body) {
+    const retryAfterSec = body !== null && typeof body === "object" ? body.retryAfterSec : undefined;
+    if (typeof retryAfterSec === "number" && Number.isFinite(retryAfterSec) && retryAfterSec >= 0)
+        res.setHeader("retry-after", String(Math.ceil(retryAfterSec)));
+}
 const AskDecisionBodySchema = z
     .object({
     decision: z.enum(["approve", "deny"]),
@@ -885,7 +891,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
         if (!gated)
             return;
         const { run } = gated;
-        const out = await subagentTaskOutput(target, { owner: runId, scope: run.owner ?? "default", ...(run.sessionId ? { sessionId: run.sessionId } : {}) });
+        const out = await subagentTaskOutput(target, { owner: runId, scope: engineScopeOfOwner(run.owner), ...(run.sessionId ? { sessionId: run.sessionId } : {}) });
         const details = out.details;
         if (details?.error === "not_found" || details?.type !== "background_agent") {
             if (!sendHandleMiss(res, run, deps.instanceId))
@@ -914,7 +920,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
             return;
         const { run } = gatedTail;
         const it = defaultSubagentTailBus.subscribe(target);
-        const probe = await subagentTaskOutput(target, { owner: runId, scope: run.owner ?? "default", ...(run.sessionId ? { sessionId: run.sessionId } : {}) });
+        const probe = await subagentTaskOutput(target, { owner: runId, scope: engineScopeOfOwner(run.owner), ...(run.sessionId ? { sessionId: run.sessionId } : {}) });
         const probeDetails = probe.details;
         if (probeDetails?.error === "not_found" || probeDetails?.type !== "background_agent") {
             void it.return?.();
@@ -982,7 +988,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
             return;
         const { run } = gatedB;
         const q = new URLSearchParams(match.search);
-        const access = { owner: runId, scope: run.owner ?? "default", ...(run.sessionId ? { sessionId: run.sessionId } : {}) };
+        const access = { owner: runId, scope: engineScopeOfOwner(run.owner), ...(run.sessionId ? { sessionId: run.sessionId } : {}) };
         if (q.get("filter") !== null) {
             sendError(res, 400, "request.param_unsupported", "filter is not accepted on the wire — fetch the output and filter client-side (note: the wire serves the clipped projection)");
             return;
@@ -1189,10 +1195,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
         }
         const body = await readJson(req);
         const { status, body: respBody } = await approvalFact.coordinator.respond(id, principal, body, req, { readRootGrantAccepted: facts.readRootGrant(deps).available });
-        const retryAfterSec = respBody.retryAfterSec;
-        if (typeof retryAfterSec === "number" && Number.isFinite(retryAfterSec) && retryAfterSec >= 0) {
-            res.setHeader("retry-after", String(Math.ceil(retryAfterSec)));
-        }
+        mirrorRetryAfter(res, respBody);
         sendJson(res, status, respBody);
         return;
     }
@@ -1205,6 +1208,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
             return;
         }
         const askStore = streamFact.askStore;
+        const coordinator = streamFact.coordinator;
         const principal = gatedSubject(req, deps.config);
         if (deps.config.requirePrincipal && principal === undefined) {
             sendPrincipalRefusal(res, req, deps.config);
@@ -1247,7 +1251,8 @@ export async function handleRunVerbs(req, res, match, ctx) {
             askNotFound();
             return;
         }
-        const askAdmission = keyAdmission("ask.decide", { subject: principal, operator: explicitOperatorOk(principal === undefined ? undefined : personOf(principal), deps.config) }, ownerCellOf(row0.owner));
+        const callerIsOperator = explicitOperatorOk(principal === undefined ? undefined : personOf(principal), deps.config);
+        const askAdmission = keyAdmission("ask.decide", { subject: principal, operator: callerIsOperator }, ownerCellOf(row0.owner));
         if (askAdmission === undefined) {
             askNotFound();
             return;
@@ -1259,7 +1264,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
             via: askAdmission === "row" ? "owner" : "operator",
         };
         const decidedRowIsAuthoritative = (row) => {
-            if (row.state !== "DECIDED" || row.decision !== "approve" && row.decision !== "deny" || row.provisional || row.decidedAtMs === null) {
+            if (decidedRowFacts(row) === undefined) {
                 deps.logger?.error?.("ask_decision_row_not_authoritative", {
                     taskId,
                     askId,
@@ -1290,8 +1295,8 @@ export async function handleRunVerbs(req, res, match, ctx) {
         const replayDecided = (row) => {
             const storedActor = projectDecisionActor(row.decisionActor);
             sendJson(res, 200, {
-                askId: row.askId,
-                taskId: row.taskId,
+                askId,
+                taskId,
                 decision: row.decision,
                 decidedAtMs: row.decidedAtMs,
                 ...(storedActor ? { actor: storedActor } : {}),
@@ -1299,7 +1304,78 @@ export async function handleRunVerbs(req, res, match, ctx) {
                 ...noteReceipt(row),
             });
         };
-        const sendTerminal = (row) => {
+        const policyMayNotApprove = (row) => body.decision === "approve" && policyCannotAnswer(heldAskOf(storedCardDemandsAPerson(row.cardJson)), decider.decidedBy);
+        const refusePolicyApprove = () => sendError(res, 400, "request.field_conflict", POLICY_CANNOT_ALLOW_PERSON_ASK, fieldConflictFacts("policy_person_ask", ["decidedBy", "decision"]));
+        const conflictWithFirst = (row) => {
+            const first = projectDecisionActor(row.decisionActor);
+            sendError(res, 409, "conflict.ask_decided", "this ask was already decided — the first decision stands and is echoed here", {
+                decision: row.decision,
+                decidedAtMs: row.decidedAtMs,
+                ...(first ? { actor: first } : {}),
+                ...decisionNoteEcho(row),
+            });
+        };
+        const answerParked = async (row) => {
+            const answer = await coordinator.decideParkedAsk(askStore, row, {
+                write: { decision: body.decision, decider, ...(body.note !== undefined ? { note: body.note } : {}), actor, ...(body.idempotencyKey !== undefined ? { idempotencyKey: body.idempotencyKey } : {}) },
+                ...(body.decision === "approve" && hasUpdatedInput ? { updatedInput: body.updatedInput } : {}),
+                ...(principal !== undefined ? { principal } : {}),
+                operator: callerIsOperator,
+                policyMayNotApprove: policyMayNotApprove(row),
+                httpReq: req,
+            }, body.idempotencyKey);
+            switch (answer.kind) {
+                case "standing": {
+                    const first = { decision: answer.decision, decidedAtMs: answer.decidedAtMs, decisionActor: answer.actor ?? null, decisionNote: answer.decisionNote ?? null };
+                    if (answer.byThisRequest)
+                        replayDecided(first);
+                    else
+                        conflictWithFirst(first);
+                    return;
+                }
+                case "refused":
+                    if (answer.status === 404) {
+                        askNotFound();
+                        return;
+                    }
+                    mirrorRetryAfter(res, answer.body);
+                    sendJson(res, answer.status, answer.body);
+                    return;
+                case "gone":
+                    askNotFound();
+                    return;
+                case "policy_refused":
+                    refusePolicyApprove();
+                    return;
+                case "gate_only":
+                    sendError(res, 410, "gone.ask_parked", "the in-stream window closed and this ask was parked onto the durable approval gate — decide it through that gate for the session echoed here", {
+                        sessionId: parkSessionOf(row),
+                        gateBoundCallId: row.gateBoundCallId,
+                        gateBoundInputHash: row.gateBoundInputHash,
+                    });
+                    return;
+                case "accepted": {
+                    const recorded = answer.recorded ?? { decisionNote: null };
+                    sendJson(res, 200, {
+                        ...answer.body,
+                        askId,
+                        taskId,
+                        decision: body.decision,
+                        decidedAtMs: answer.recorded?.decidedAtMs ?? Date.now(),
+                        actor,
+                        accepted: "parked_redeemed",
+                        ...decisionNoteEcho(recorded),
+                        ...noteReceipt(recorded),
+                    });
+                    return;
+                }
+                default: {
+                    const unhandled = answer;
+                    throw new Error(`unhandled parked ask answer: ${JSON.stringify(unhandled)}`);
+                }
+            }
+        };
+        const sendTerminal = async (row) => {
             switch (row.state) {
                 case "DECIDED": {
                     if (!syncLiveFromDecidedRow(row))
@@ -1308,21 +1384,11 @@ export async function handleRunVerbs(req, res, match, ctx) {
                         replayDecided(row);
                         return;
                     }
-                    const first = projectDecisionActor(row.decisionActor);
-                    sendError(res, 409, "conflict.ask_decided", "this ask was already decided — the first decision stands and is echoed here", {
-                        decision: row.decision,
-                        decidedAtMs: row.decidedAtMs,
-                        ...(first ? { actor: first } : {}),
-                        ...decisionNoteEcho(row),
-                    });
+                    conflictWithFirst(row);
                     return;
                 }
                 case "PARKED":
-                    sendError(res, 410, "gone.ask_parked", "the in-stream window closed and this ask was parked onto the durable approval gate — decide it through that gate for the session echoed here", {
-                        sessionId: parkSessionOf(row),
-                        gateBoundCallId: row.gateBoundCallId,
-                        gateBoundInputHash: row.gateBoundInputHash,
-                    });
+                    await answerParked(row);
                     return;
                 case "DENIED":
                 case "VOID": {
@@ -1367,23 +1433,23 @@ export async function handleRunVerbs(req, res, match, ctx) {
             }
         }
         if (row0.state !== "STREAM_PENDING") {
-            sendTerminal(row0);
+            await sendTerminal(row0);
             return;
         }
-        if (body.decision === "approve" && policyCannotAnswer(heldAskOf(storedCardDemandsAPerson(row0.cardJson)), decider.decidedBy)) {
-            sendError(res, 400, "request.field_conflict", POLICY_CANNOT_ALLOW_PERSON_ASK, fieldConflictFacts("policy_person_ask", ["decidedBy", "decision"]));
+        if (policyMayNotApprove(row0)) {
+            refusePolicyApprove();
             return;
         }
         let outcome;
         const releaseEditMark = body.decision === "approve" && hasUpdatedInput ? deps.toolApproval?.markEditedDecisionInFlight(askId) : undefined;
         try {
-            outcome = await askStore.decideAsk(askId, row0.batchId, row0.owner, {
+            outcome = await coordinator.writeAskDecision(askStore, askId, { kind: "live", batchId: row0.batchId }, row0.owner, {
                 decision: body.decision,
-                decisionActor: actor,
-                decisionNote: body.note ?? null,
-                idempotencyKey: body.idempotencyKey ?? null,
-                ...liveHostSource(decider),
-                ...(body.decision === "approve" && hasUpdatedInput ? { updatedInput: body.updatedInput } : {}),
+                decider,
+                actor,
+                ...(body.note !== undefined ? { note: body.note } : {}),
+                ...(body.idempotencyKey !== undefined ? { idempotencyKey: body.idempotencyKey } : {}),
+                ...(hasUpdatedInput ? { updatedInput: body.updatedInput } : {}),
             });
         }
         catch (err) {
@@ -1443,7 +1509,7 @@ export async function handleRunVerbs(req, res, match, ctx) {
                 askNotFound();
                 return;
             }
-            sendTerminal(outcome.row);
+            await sendTerminal(outcome.row);
             return;
         }
         if (!decidedRowIsAuthoritative(outcome.row))

package/dist/http/routes/session-sync.d.ts

@@ -13,6 +13,7 @@ import { type ImportAnchor, type StagingHandle } from "../../session-sync-kernel
 import type { DurableOwnerKey } from "../../owner-brands.js";
 import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 import { type SessionRowPatch } from "../../session-row.js";
+import { type SessionFace } from "../../session-incarnation.js";
 export type PendingStaging = {
     handle: StagingHandle;
     realSessionId: string;
@@ -33,9 +34,9 @@ export type PendingStaging = {
     /** The principal that opened this staging, kept as the handle's owner key (`null` = a fleet caller opened it) — a different caller may not drive it
      *  (404, no oracle; compared through `owner-faces.ts` `sameKey` only). */
     openedBy: DurableOwnerKey | null;
-    /** The owner cell the gate judged when it opened this staging (head-read reading `headOf(id)?.owner`: `undefined` = no such session) — the commit lands only on
-     *  this same cell (`StagedCommitOptions.expectedOwner`, `session-sync-kernel.ts`); `owner` above (the re-stamped importing principal) is derived from it for a fleet caller. */
-    expectedOwner: string | null | undefined;
+    /** The live occupant the gate judged when it opened this staging (owner ∧ incarnation, the head read: `undefined` = no live session) — the commit lands only on
+     *  this same occupant (`StagedCommitOptions.expectedOccupant`, `session-sync-kernel.ts`); `owner` above (the re-stamped importing principal) is derived from its owner for a fleet caller. */
+    expectedOccupant: SessionFace | undefined;
     /** 开这张暂存时占下的导入租约的键({@link importLeaseKey});续期与放掉都按它,不再从会话 id 重算。 */
     leaseKey: string;
 };