@sema-agent/server 7.48.0 → 7.50.0

package/dist/plugins/local-checkpoint-store.d.ts

@@ -1,5 +1,5 @@
 import { type Checkpoint, type CheckpointSummary, type CheckpointToken, type PendingSteerInput, type ReopenReason, type ResolveExpectation, type ResumeOutcome, type StoreDurability, type StoreFidelity } from "@sema-agent/core";
-import { type PendingCheckpoint } from "./checkpoint-store-sql.js";
+import { type DecidedApprovalRecord, type PendingCheckpoint } from "./checkpoint-store-sql.js";
 export interface LocalCheckpointStoreOptions {
     /** taskId join for the pending card (the local FileRunStore's `getActiveTaskId`). Absent ⇒ `taskId: null`. */
     getActiveTaskId?: (sessionId: string) => Promise<string | undefined>;
@@ -91,6 +91,19 @@ export declare class LocalCheckpointStore {
      *  索引里,其 expired 对本探针不可见(core File store 的 listByScope 是 pending-only,无法枚举历史行回填)。
      *  旧存量锁死的恢复把手 = cancel verb([868]①,不依赖本索引);增量行全覆盖。 */
     hasExpiredBySession(sessionId: string): Promise<boolean>;
+    /**
+     * #368 件1 —— SQL 孪生 `findDecidedApprovalsForBinding` 的本地形(判据、词表、失败方向逐条同源;
+     * 那处顶注是唯一真源,这里只记两处**本地形自己的**差别)。
+     *
+     *  · 枚举面走 [868] 的 `sessionTokens` 索引 —— 与 `hasExpiredBySession` 同一条路(core 的 File store
+     *    只能 pending-only 枚举,跨态读只有 `get(token)`),所以它那条**存量限制**在这里逐字同样成立:
+     *    索引建立之前 park 的老行对本口不可见 ⇒ 回放判别不出 ⇒ 调用方逐字回落 404(保守方向)。
+     *  · **没有排序**:本口交出全部命中行,由调用方按「判词一致才回放」判(理由见 SQL 孪生顶注的
+     *    codex R1-[medium] 四段——正是为了消掉「local 只有 createdAt、SQL 有 decided_at_ms」这条排序键
+     *    分岔)。同理回放的 wire 形**刻意不投** `decidedAtMs`:core 的 `Checkpoint` 上没有那个字段,
+     *    投了就是「SQL 车道有、local 车道没有」的键集分岔。
+     */
+    findDecidedApprovalsForBinding(sessionId: string, boundCallId: string): Promise<DecidedApprovalRecord[]>;
     /** `undefined` = no pending row; else the owner scope (local scopes are always strings — never null). */
     peekPendingScope(sessionId: string): Promise<string | null | undefined>;
     /**

package/dist/plugins/local-checkpoint-store.js

@@ -3,7 +3,7 @@ import { existsSync, readFileSync, readdirSync, renameSync, unlinkSync, mkdirSyn
 import { join } from "node:path";
 import { isApprovalGateKind } from "../tool-approval.js";
 import { FileCheckpointStore, atomicWriteFile, sanitizePathComponent, } from "@sema-agent/core";
-import { boundedRuleOffers, boundedToolInput, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS } from "./checkpoint-store-sql.js";
+import { approvalDecisionOfWinner, approvalPayloadFingerprint, boundedRuleOffers, boundedToolInput, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS } from "./checkpoint-store-sql.js";
 import { UNMANAGED_RETENTION } from "./retention-store-sql.js";
 function terminalAtOf(cp) {
     return Math.max(cp.createdAt + TERMINAL_BACKSTOP_MS, (cp.deadline ?? 0) + TERMINAL_GRACE_MS);
@@ -195,6 +195,27 @@ export class LocalCheckpointStore {
         }
         return false;
     }
+    async findDecidedApprovalsForBinding(sessionId, boundCallId) {
+        const tokens = this.sessionTokens.get(sessionId);
+        if (!tokens)
+            return [];
+        const out = [];
+        for (const t of [...tokens]) {
+            const cp = await this.inner.get(t);
+            if (!cp || cp.status !== "resolved")
+                continue;
+            const pa = cp.pendingAction;
+            if (pa?.toolCallId !== boundCallId)
+                continue;
+            out.push({
+                scope: cp.scope,
+                boundInputHash: pa?.boundInputHash ?? null,
+                decision: approvalDecisionOfWinner(cp.resolvedOutcome, boundCallId),
+                payloadFp: cp.resolvedOutcome === undefined ? null : approvalPayloadFingerprint(cp.resolvedOutcome),
+            });
+        }
+        return out;
+    }
     async peekPendingScope(sessionId) {
         for (const { cp } of await this.pendings())
             if (cp.sessionId === sessionId)

package/dist/plugins/scheduler-support.d.ts

@@ -1,6 +1,6 @@
 import { SchedulerError } from "@sema-agent/core";
 import type { SchedulerCapability, ScheduledIntent, SchedulerContext, ScheduledTaskId, ScheduledTaskSummary } from "@sema-agent/core";
-import type { SchedulerRecord } from "@sema-agent/registry-core/scheduler-store";
+import type { SchedulerRecord } from "@sema-agent/settings-schema/scheduler-store";
 export type { SchedulerRecord };
 /** core `Result<T,E>` shape (harness/types) — `{ok:true,value} | {ok:false,error}`. */
 type Result<T, E> = {

package/dist/plugins/scheduler-support.js

@@ -2,7 +2,7 @@ import { join } from "node:path";
 import { homedir } from "node:os";
 import { randomBytes, createHash } from "node:crypto";
 import { SchedulerError, isValidCronExpr } from "@sema-agent/core";
-import { loadSchedulerStore, saveSchedulerStore } from "@sema-agent/registry-core/node";
+import { loadSchedulerStore, saveSchedulerStore } from "@sema-agent/settings-schema/node";
 const ok = (value) => ({ ok: true, value });
 const err = (error) => ({ ok: false, error });
 export const DEFAULT_SCHEDULER_CAPS = {

package/dist/plugins/usage-window-store-sql.d.ts

@@ -30,13 +30,13 @@ export declare function ensurePgUsageWindowSchema(q: (text: string, params?: unk
 export declare class TiDBUsageWindowStore implements UsageWindowStore {
     private readonly pool;
     constructor(pool: MySqlPool);
-    charge(key: string, tokens: number, at: number, windows: readonly UsageWindow[]): Promise<void>;
+    charge(key: string, tokens: number, at: number, windows: readonly UsageWindow[], costMicroUsd?: number | null): Promise<void>;
     read(key: string, windows: readonly UsageWindow[], now: number): Promise<readonly UsageWindowReading[]>;
 }
 export declare class PgUsageWindowStore implements UsageWindowStore {
     private readonly pool;
     constructor(pool: PgPool);
-    charge(key: string, tokens: number, at: number, windows: readonly UsageWindow[]): Promise<void>;
+    charge(key: string, tokens: number, at: number, windows: readonly UsageWindow[], costMicroUsd?: number | null): Promise<void>;
     read(key: string, windows: readonly UsageWindow[], now: number): Promise<readonly UsageWindowReading[]>;
 }
 //# sourceMappingURL=usage-window-store-sql.d.ts.map

package/dist/plugins/usage-window-store-sql.js

@@ -14,13 +14,24 @@ function parseRecord(raw, key) {
     }
     const badShape = (detail) => new Error(`usage_window record for key "${key}" has an invalid shape (${detail}) — refusing to mis-count a governance window`);
     const finite = (x) => typeof x === "number" && Number.isFinite(x);
+    const costKeys = (e) => {
+        if (e.costMicroUsd !== undefined && (typeof e.costMicroUsd !== "number" || !Number.isSafeInteger(e.costMicroUsd) || e.costMicroUsd < 0)) {
+            throw badShape("`costMicroUsd` present but not a non-negative safe integer");
+        }
+        if (e.costUnknown !== undefined && e.costUnknown !== true)
+            throw badShape("`costUnknown` present but not literal true");
+        return {
+            ...(e.costMicroUsd !== undefined ? { costMicroUsd: e.costMicroUsd } : {}),
+            ...(e.costUnknown === true ? { costUnknown: true } : {}),
+        };
+    };
     const slots = r.slots.map((s) => {
         if (s === null || typeof s !== "object")
             throw badShape("`slots` entry is not an object");
         const { at, tokens } = s;
         if (!finite(at) || !finite(tokens))
             throw badShape("`slots` entry has a non-finite-numeric `at`/`tokens`");
-        return { at, tokens };
+        return { at, tokens, ...costKeys(s) };
     });
     const buckets = r.buckets.map((b) => {
         if (b === null || typeof b !== "object")
@@ -29,7 +40,7 @@ function parseRecord(raw, key) {
         if (!finite(windowMs) || windowMs <= 0 || !finite(openedAt) || !finite(tokens)) {
             throw badShape("`buckets` entry has a non-finite-numeric `windowMs`/`openedAt`/`tokens` (windowMs must be > 0)");
         }
-        return { windowMs, openedAt, tokens };
+        return { windowMs, openedAt, tokens, ...costKeys(b) };
     });
     return { slots, buckets };
 }
@@ -54,7 +65,7 @@ export class TiDBUsageWindowStore {
     constructor(pool) {
         this.pool = pool;
     }
-    async charge(key, tokens, at, windows) {
+    async charge(key, tokens, at, windows, costMicroUsd) {
         const c = await this.pool.getConnection();
         try {
             await c.beginTransaction();
@@ -68,7 +79,7 @@ export class TiDBUsageWindowStore {
                 throw new Error(`usage_window row for key "${key}" vanished between ensure and lock — refusing to drop a governance charge`);
             }
             const record = parseRecord(rows[0].record, key);
-            const next = chargeUsageRecord(record, tokens, at, windows);
+            const next = chargeUsageRecord(record, tokens, at, windows, costMicroUsd);
             await c.query(`UPDATE ${USAGE_WINDOW_TABLE} SET record = ?, updated_at_ms = ? WHERE usage_key = ?`, [JSON.stringify(next), at, key]);
             await c.commit();
         }
@@ -91,7 +102,7 @@ export class PgUsageWindowStore {
     constructor(pool) {
         this.pool = pool;
     }
-    async charge(key, tokens, at, windows) {
+    async charge(key, tokens, at, windows, costMicroUsd) {
         const c = await this.pool.connect();
         try {
             await c.query("BEGIN");
@@ -105,7 +116,7 @@ export class PgUsageWindowStore {
                 throw new Error(`usage_window row for key "${key}" vanished between ensure and lock — refusing to drop a governance charge`);
             }
             const record = parseRecord(rows[0].record, key);
-            const next = chargeUsageRecord(record, tokens, at, windows);
+            const next = chargeUsageRecord(record, tokens, at, windows, costMicroUsd);
             await c.query(`UPDATE ${USAGE_WINDOW_TABLE} SET record = $1, updated_at_ms = $2 WHERE usage_key = $3`, [JSON.stringify(next), at, key]);
             await c.query("COMMIT");
         }

package/dist/run-local.js

@@ -4,7 +4,7 @@ import { join } from "node:path";
 import { realpathSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { fileURLToPath } from "node:url";
-import { loadRemoteExec } from "@sema-agent/registry-core/node";
+import { loadRemoteExec } from "@sema-agent/settings-schema/node";
 import { Runner, uuidv7, parseModelMention, AdoptionError, FileStorageBackend, NodeExecutionEnv, NodeLspManager, TtlSessionStore, CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore } from "@sema-agent/core";
 import { hasOperatorGateIntent } from "./approval.js";
 import { createBrain } from "./brain.js";

package/dist/runs.js

@@ -252,7 +252,7 @@ export async function runInBackground(runner, spec, runStore, taskId, metrics, p
                         }
                     }
                 },
-                onTaskNotification: (n) => {
+                onTaskNotification: (n, opts) => {
                     if (n.task_type === "workflow")
                         return;
                     defaultSubagentTailBus.forgetHandleContentMode(n.task_id);
@@ -263,12 +263,12 @@ export async function runInBackground(runner, spec, runStore, taskId, metrics, p
                     const parked = !legLive && Boolean(workflowCompletionInbox && spec.sessionId);
                     completionDiagLog?.("task_notification_observed", { route: "bg-run-start", taskId: n.task_id, taskType: n.task_type, status: n.status, hadFleetRow: hadRow, legLive, parkedDurable: parked });
                     if (parked) {
-                        void workflowCompletionInbox.enqueue(taskNotificationInboxEntry(spec.sessionId, elicitOwner ?? owner, n, Date.now(), taskId)).catch((err) => completionDiagLog?.("park_enqueue_failed", { route: "bg-run-start", taskId: n.task_id, err: err instanceof Error ? err.message : String(err) }));
+                        void workflowCompletionInbox.enqueue(taskNotificationInboxEntry(spec.sessionId, elicitOwner ?? owner, n, Date.now(), taskId, opts?.priority)).catch((err) => completionDiagLog?.("park_enqueue_failed", { route: "bg-run-start", taskId: n.task_id, err: err instanceof Error ? err.message : String(err) }));
                     }
                     else if (legLive) {
                         const key = taskNotificationStreamKey(n);
                         if (notifiedKeys.get(key) === undefined) {
-                            notifiedKeys.set(key, append("task_notification", taskNotificationEventData({ notification: n })).then(() => true, () => false));
+                            notifiedKeys.set(key, append("task_notification", taskNotificationEventData({ notification: n, ...(opts?.priority !== undefined ? { priority: opts.priority } : {}) })).then(() => true, () => false));
                         }
                     }
                 },

package/dist/runtime-caps-resolver.d.ts

@@ -27,7 +27,7 @@
  * this seam feeds the ENGINE, and `allowUltracode` is enforced at the service settings-resolution layer, not here.
  */
 import type { RuntimeCaps } from "@sema-agent/core";
-import type { EntitlementRuntimeCaps } from "@sema-agent/registry-core";
+import type { EntitlementRuntimeCaps } from "@sema-agent/settings-schema";
 import { fetchPrincipalCaps, type ExecutionRuling } from "./config-center/facade.js";
 import type { ScenarioRuling } from "./capabilities/scenarios.js";
 import type { ServiceConfig } from "./config-types.js";

package/dist/runtime-governance.d.ts

@@ -1,6 +1,6 @@
 /**
  * Runtime governance compiler — the "second baton" (center §10, core 1.114.0): turn the
- * operator's declarative `runtime.autonomy` + `runtime.commandPolicy` (`@sema-agent/registry-core`,
+ * operator's declarative `runtime.autonomy` + `runtime.commandPolicy` (`@sema-agent/settings-schema`,
  * carried to the service via sema-registry `EffectiveConfig.runtime`) into TIGHTEN-ONLY overrides on the
  * per-task `TaskSpec`. Pure so it is unit-testable in isolation (the spec is otherwise assembled inside
  * main.ts's `resolveSpec`).

package/dist/task-settings.d.ts

@@ -36,7 +36,7 @@
  *    main.ts 单用户闸),仅 malformed 才报 deferred;旧「需要 remote hook-runner」是接线前拍照。)
  */
 import { type ExecutionEnv, type TaskSpec, type ThinkingLevel, type ToolPolicy, type PromptProvider } from "@sema-agent/core";
-import type { HooksConfig } from "@sema-agent/registry-core/hooks";
+import type { HooksConfig } from "@sema-agent/settings-schema/hooks";
 /** The permission MODE a client may request (SDK `SettingsPermissions.defaultMode`), the [820]/[822] five-word
  *  table. ⚠️ This is a DELIBERATE deployment set, NOT a copy of any CC set (A-065 P2-1 corpus check): CC's own
  *  full enum is SIX words (= ours + `dontAsk`), CC's managed/remote form accepts FOUR (= ours − `bypassPermissions`,

package/dist/trace/core-keyset-guard.d.ts

@@ -27,9 +27,9 @@ type _GuardBgNotif = AssertAllKeysHandled<Exclude<keyof BackgroundChildEvent, Bg
 type RosterProjected = "name" | "agentId" | "sessionId" | "toolUseId" | "owner" | "scope" | "sessionScoped" | "rootSessionId" | "model" | "modelFallback" | "createdAt";
 type _GuardRoster = AssertAllKeysHandled<Exclude<keyof RosterEntry, RosterProjected>>;
 type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "persistedRuleShadowed" | "probeCause" | "ruleEvidence" | "requiresRealApproval";
-type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "probeReason" | "hasBidiControls";
+type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "probeReason" | "hasBidiControls" | "previewWithheld";
 type _GuardAsk = AssertAllKeysHandled<Exclude<keyof AskRequest, AskProjected | AskExcluded>>;
-type TaskEventHandled = "text_delta" | "reasoning_delta" | "tool_start" | "tool_end" | "turn_end" | "compacted" | "diagnostics" | "message_committed" | "status" | "task_notification" | "task_progress" | "steering_injected" | "workspace_changed" | "done" | "context_usage" | "compaction_outcome" | "human_input" | "wiring_manifest";
+type TaskEventHandled = "text_delta" | "reasoning_delta" | "tool_start" | "tool_end" | "turn_end" | "compacted" | "diagnostics" | "message_committed" | "status" | "task_notification" | "task_progress" | "steering_injected" | "workspace_changed" | "done" | "context_usage" | "compaction_outcome" | "human_input" | "wiring_manifest" | "text_end";
 type _GuardTaskEvent = AssertAllKeysHandled<Exclude<TaskEvent["type"], TaskEventHandled>>;
 type MailboxProjected = "seq" | "from" | "content" | "sentAt" | "hopChain";
 type _GuardMailbox = AssertAllKeysHandled<Exclude<keyof MailboxMessage, MailboxProjected>>;
@@ -45,7 +45,7 @@ type _GuardPermissionTraceReverse = AssertAllKeysHandled<Exclude<PermissionTrace
 type AssertNonEmpty<T> = [T] extends [never] ? "EMPTY" : never;
 type _GuardPermissionTraceNonEmpty = AssertAllKeysHandled<AssertNonEmpty<PermissionTraceKind>>;
 type SummaryProjected = "sessionId" | "scope" | "createdAt" | "gateKind" | "severity" | "spentMicroUsd" | "deadline" | "hasBidiControls";
-type SummaryExcluded = "token" | "toolInput" | "toolName" | "toolCallId" | "preview" | "principal" | "sourceTaskId" | "contentKind" | "restoreMode" | "checkpointId";
+type SummaryExcluded = "token" | "toolInput" | "toolName" | "toolCallId" | "preview" | "principal" | "sourceTaskId" | "contentKind" | "restoreMode" | "checkpointId" | "previewWithheld";
 type _GuardInboxSummary = AssertAllKeysHandled<Exclude<keyof CheckpointSummary, SummaryProjected | SummaryExcluded>>;
 export type CoreKeysetGuards = [
     _GuardNotification,

package/dist/trace/engine-notice-wire.d.ts

@@ -1,10 +1,20 @@
 /**
- * 上 wire 的通告码 —— **显式闭集常量表**(设计稿 ①,起步三码)。
+ * 上 wire 的通告码 —— **显式闭集常量表**(设计稿 ①,起步三码;今天九码)。
  *
- * 三码同族:都是「这条 session 的记忆姿态」的披露,resume 之后仍然相关 ⇒ 也进 durable 账本
+ * 起步的那六码同族:都是「这条 session 的记忆姿态」的披露,resume 之后仍然相关 ⇒ 也进 durable 账本
  * (cli 断连补看走既有 events 重放腿,[4634](ii))。
+ *
+ * ⚠️ **自 #366(core 5.61.0)起本表不再是单一族**:`task.turn_interrupted` 与 `task.user_*_undrained`
+ * 两族是前三条**非记忆面**的成员(前者=一次插话真的切断了在飞的 turn;后两者=用户的输入被彻底丢弃)。
+ * 判据没有变(受众 × 投递可行性 × 去重单位三条合取,见顶注),变的只是「碰巧六条都是记忆码」这个
+ * 事实——别再把「是不是记忆姿态码」当成入册的隐性第四条判据。这条隐性判据正是 `task.user_*_undrained`
+ * 两码在明拒表里陈腐多时的帮凶之一(见它们的键注)。
+ *
+ * 🔴 **表长了就得同步三处**(#366 实测,少一处即门红):`test/engine-notice-wire.test.ts` 的闭集 pin、
+ * 同文件 G1 e2e 的全码扇出夹具、以及契约文档附录 D.3 那张表(含**小节标题里的码数** —— 那道门本批
+ * 刚立,立完就在下一次加码时自己咬住了)。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
 /** 白名单谓词(单点):路由与门都读这一个,不许第二处手抄码串。 */
 export declare function isEngineNoticeWireCode(code: string): code is EngineNoticeWireCode;

package/dist/trace/engine-notice-wire.js

@@ -7,6 +7,10 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     "memory.hold_opened",
     "memory.hold_released",
     "memory.hold_disposed",
+    "task.turn_interrupted",
+    "steering.parked_input_blocked",
+    "task.user_steer_undrained",
+    "task.user_followup_undrained",
 ];
 const WIRE_CODES = new Set(ENGINE_NOTICE_WIRE_CODES);
 export function isEngineNoticeWireCode(code) {

package/dist/trace/injection-tier.d.ts

@@ -0,0 +1,33 @@
+/**
+ * design/373 注入档位(core 5.61.0)的**闭集单点**(#366)。
+ *
+ * ## 为什么本仓要自己留一份词表
+ * 理想写法是复用 core 的谓词 `isSystemInjectionPriority` / 数据表 `SYSTEM_INJECTION_PRIORITIES`。
+ * 但 core 5.61.0 **没有把它们放进根 barrel**(`dist/index.d.ts` 只导出了 `SystemInjectionPriority`
+ * 这个**类型**),而 `@sema-agent/core` 的 `package.json#exports` 只开了 `.` / `./bench` / `./fixtures`
+ * 三口 ⇒ 深导入被 exports map 关死,结构上够不着运行期的那份。
+ *
+ * 于是用本仓既有的**双向锚**姿势(`http/routes/notify-wake.ts` 的 `NOTIFY_STATUSES` 先例):
+ *  · `satisfies` 管「表内不许有词表外的词」—— core 删/改档位 ⇒ 编译红;
+ *  · 穷举断言管「词表不许有表外的词」—— core 加档位 ⇒ 编译红。
+ * 两条合起来 = 上游任何一侧的增删都在编译期被逼着处置,而不是运行时静默漂。
+ *
+ * ## 为什么单独一个叶子模块
+ * 消费点有两个且分属两条依赖链:`trace/project.ts`(wire 投影)与
+ * `orchestration/workflow-completion-inbox.ts`(durable park 载荷)。手抄两份就是值拷贝漂移源
+ * (本仓 [1532] 起的老病族);把它挂在任一方又会在两条链之间拉一条没必要的边。零依赖叶子最干净。
+ *
+ * 🔴 上游哪天补了根导出:删掉本文件,两处改成一行谓词调用。
+ */
+import type { SystemInjectionPriority } from "@sema-agent/core";
+/** 三档闭集,与 core `SystemInjectionPriority` 双向锚(见顶注)。 */
+export declare const INJECTION_TIERS: readonly ["now", "next", "later"];
+/**
+ * 边界守卫 —— 闭集内的值原样返回,**其余一律 `undefined`**(= 缺席)。
+ *
+ * 🔴 方向是**丢键**而不是补默认:core 的键注逐字写着「ABSENT is a fact, not a default …… never read
+ * absence as `"later"`」。一个闭集外的值意味着上游发了一个我们不认识的档位,这时候把它原样推上 wire
+ * 是在替上游对消费端做承诺,补一个默认则是把「不可知」洗成一条断言 —— 两者都比「说没有」更坏。
+ */
+export declare function injectionTierOrAbsent(value: unknown): SystemInjectionPriority | undefined;
+//# sourceMappingURL=injection-tier.d.ts.map

package/dist/trace/injection-tier.js

@@ -0,0 +1,7 @@
+export const INJECTION_TIERS = ["now", "next", "later"];
+const _injectionTierExhaustive = true;
+void _injectionTierExhaustive;
+export function injectionTierOrAbsent(value) {
+    return typeof value === "string" && INJECTION_TIERS.includes(value) ? value : undefined;
+}
+//# sourceMappingURL=injection-tier.js.map

package/dist/trace/project.d.ts

@@ -12,7 +12,7 @@
  * old session-join `toolOutput` hook is gone, there's a real source now); `eventId`/`parentToolCallId` (§E2) ride
  * each content event, additive / tolerate-absent.
  */
-import type { ApprovalSettledBy, TaskResult } from "@sema-agent/core";
+import type { ApprovalSettledBy, TaskResult, SystemInjectionPriority } from "@sema-agent/core";
 import { type AskDenyResolution } from "@sema-agent/core";
 import type { RunEvent, RunRecord } from "../plugins/store-contracts.js";
 import type { ModelUsageDelta, ModelUsageTracker, PromptManifestRecord } from "../budget.js";
@@ -212,6 +212,10 @@ export declare function taskNotificationEventData(ev: {
     };
     eventId?: string;
     parentToolCallId?: string;
+    /** design/373 §3.6(core 5.61.0,additive):本帧**投出去时的注入档位**。见下方投影处的键注 —— 它是
+     *  **事件顶层**键,不是 {@link TaskNotificationPayload} 的键,所以只有把整只 core 事件交给本投影的腿
+     *  拿得到它;只拿到载荷的 park-drain 腿结构上没有这一位。 */
+    priority?: SystemInjectionPriority;
 }): Record<string, unknown>;
 /** The `compacted` payload — EXPLICIT WHITELIST shared by all three legs (bg runs.ts + resume append + the sync
  *  live SSE frame; the 1.72 task_progress lesson: never `{...ev}`). trigger/tokensBefore (MF-18) verbatim;

package/dist/trace/project.js

@@ -1,5 +1,6 @@
 import { isApprovalSettledBy, isAskDenyResolution } from "@sema-agent/core";
 import { redactSecrets, redactDeep } from "./redact.js";
+import { injectionTierOrAbsent } from "./injection-tier.js";
 export async function appendModelUsageDelta(append, modelUsage, taskId) {
     const delta = modelUsage?.drain(taskId);
     if (delta) {
@@ -141,6 +142,10 @@ export function taskNotificationEventData(ev) {
         ...(n.result !== undefined ? { result: redactSecrets(n.result) } : {}),
         ...(n.output_file !== undefined ? { output_file: redactSecrets(n.output_file) } : {}),
         ...(n.usage !== undefined ? { usage: n.usage } : {}),
+        ...(() => {
+            const tier = injectionTierOrAbsent(ev.priority);
+            return tier !== undefined ? { priority: tier } : {};
+        })(),
         ...identityFields(ev),
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.48.0",
+  "version": "7.50.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,8 +54,8 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.60.1",
-    "@sema-agent/registry-core": "^0.19.0",
+    "@sema-agent/core": "5.63.0",
+    "@sema-agent/settings-schema": "1.0.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",