@sema-agent/server 7.53.0 → 7.55.0

package/USAGE.md

@@ -508,6 +508,11 @@ READ_DENY_PATTERNS='[{"pattern":"**/secrets/**"},{"pattern":".ssh","caseSensitiv
   一律启动期点名拒——一个手滑的 deny 集比没有 deny 集更糟(以为挡了其实没挡)。
 - **缺席不铸**:两个键不设就**不传给引擎**——引擎抬默认/扩内建集那天,存量部署自动跟上(与重试上限
   同款「引擎当家」纪律)。
+- **leader 车道同席(S-28,7.54 起)**:`LEADER_ENABLED` 的 leader 编排(planner / worker / repair / conflict 四类
+  任务)与主车道吃**同一份**四键(连同 `MEMORY_DELEGATION_EVIDENCE` / `MEMORY_PROVENANCE` / `MEMORY_CAPTURE_POLICY`
+  与委派入口 caps;取值点唯一 = `buildDeploymentPostureSeats`,leader 不另读 env)。此前(≤7.53)那条腿一席都不带:
+  deny 追加对 leader worker **静默不生效**(core 内建 deny 表仍在)。仍缺 tracer / usageWindows / promptSource 三席
+  (#311 扩面,另车)。
 - **组织下发腿(config-center,7.29 起)**:四键(`READ_FACE` / `READ_DENY_PATTERNS` /
   `READ_DENY_BUILTIN_TIERS` / `READ_DENY_BUILTIN_EXCLUDE`)也可由 config-center 的 `readFace` 域下发
   (`{face?, denyPatterns?, denyBuiltinTiers?, denyBuiltinExclude?}`)。三条规则:

package/dist/approval-ask-audit-store.d.ts

@@ -0,0 +1,129 @@
+/** 数据子目录名(挂在 local 数据根下,与 `workflow-notify/` 同层同形)。 */
+export declare const APPROVAL_ASK_AUDIT_DIR = "approval-ask-audit";
+/** 崩溃收敛行的读面上限(新前旧后截断;有界 wire —— 读面不许随月份线性长)。 */
+export declare const CRASH_CONVERGED_LIST_MAX = 200;
+/** 铸造点入参(协调器 askBroadcast 的 register-before-emit 之后挂线)。 */
+export interface AuditAskInput {
+    /** wire 身份 = 呈卡帧上那把 `approvalId`(respond/queue 同源可达;不是本地 pending 键)。 */
+    approvalId: string;
+    /** 出处 run 的 taskId(`origin.taskId`,不是投递连接的)。 */
+    taskId: string;
+    sourceTaskId?: string;
+    sessionId?: string;
+    owner: string | null;
+    toolName: string;
+    toolCallId?: string;
+    /** 出处腿此刻是否在协调器 `runWithContext` 的广播目标里(⇒ 腿闭信号可达)。decided 臂的收敛前提。 */
+    legTracked: boolean;
+    expiresAtMs: number;
+    mintedAtMs: number;
+}
+/** 决议点入参(`settle()` 公共咽喉挂线;五臂全过,不漏窗到期/断连/取消)。 */
+export interface AuditSettleInput {
+    approvalId: string;
+    outcome: "allowed" | "denied" | "expired";
+    /** 走了 park 路由(windowRouteUnavailable)—— 该行的续命在 durable park 面,收敛器不当孤儿。 */
+    parkRouted?: boolean;
+    /** 宿主自报来源(HostSettledBy;在场才带)。收敛器不消费,纯审计。 */
+    settledBy?: string;
+    settledAtMs: number;
+}
+/** 协调器消费的窄写口(协调器只 import type,不拖实现依赖)。 */
+export interface ApprovalAskAuditSink {
+    recordAsk(input: AuditAskInput): void;
+    recordSettle(input: AuditSettleInput): void;
+    /** 腿闭点(`runWithContext` finally)。只为铸过审计行的 taskId 真落行(店内去重)。 */
+    noteLegClosed(taskId: string): void;
+}
+/** v1.1 §6 两分臂(闭集)。 */
+export type CrashOrphanState = "pending" | "decided";
+/** `GET /v1/approvals` additive 键 `crashConverged` 的行形(wire 键集刻意窄:args/卡体不上列表,
+ *  与 `livePending` 行同纪律 —— 不开第二个脱敏面)。 */
+export interface CrashConvergedRow {
+    approvalId: string;
+    toolName: string;
+    taskId: string;
+    sessionId?: string;
+    /** 铸造时刻(键名照 `livePending[].ts`)。 */
+    ts: number;
+    expiresAtMs: number;
+    /** 终态 DENIED 同码(稿 §2 (c) 施工形;SQL 车道收敛器的 fail-closed DENIED 同向)。 */
+    decision: "denied";
+    cause: "crashed_before_park";
+    orphanState: CrashOrphanState;
+    /** decided 臂:人当时批的是 approve(这句话不许被终态同码吞掉)。 */
+    originalDecision?: "approve";
+    decidedAtMs?: number;
+    convergedAtMs: number;
+    /** v1.1 §6 指路位:pending 臂 = 工具零执行可机械证明 ⇒ re-run(core resume 补偿腿)安全,壳可
+     *  默认自动续跑;decided 臂 = 可能半截副作用 ⇒ 留人工确认。 */
+    resumeSafe: boolean;
+}
+/** 读面窄口(HTTP deps 消费;写口/收敛不外漏)。 */
+export interface ApprovalAskAuditReadFace {
+    listCrashConverged(scope: string | undefined): CrashConvergedRow[];
+}
+export declare class FileApprovalAskAuditStore implements ApprovalAskAuditSink, ApprovalAskAuditReadFace {
+    /** 账本绝对路径(测试/取证按文件字节对账 —— 崩溃语义的真源是文件,不是内存投影)。 */
+    readonly ledgerPath: string;
+    private fd;
+    /** codex R2-F1(采):上一次 append 抛出时可能已落**部分**字节(半写)—— 置位后,下一次成功写必须
+     *  先落一个孤立换行把残尾隔离并 fsync(与 boot 修尾同一形,只是发生在同进程内),否则新记录会与残尾
+     *  并成一条坏行、重放双双丢失(丢 settle+leg_closed 会让 ask-only 组冒充 pending 孤儿)。定界自己
+     *  失败 ⇒ 脏标保持,本条记录走留痕臂 —— 绝不往可能的残尾上直接续字节。 */
+    private tailDirty;
+    /** 写字节口(测试注入席:半写故障的确定性构造;生产恒缺省 = `fs.writeSync`)。 */
+    private readonly writeBytes;
+    /** boot 重放快照(冻结于构造时刻 = 前世账本;本进程新写的行不进它 —— 收敛只对前世行)。 */
+    private readonly replayed;
+    /** 前世账本里的腿闭事件(taskId + 行序;decided 臂按「决议行之后」判)。 */
+    private readonly replayedLegClosed;
+    /** 已收敛行(读面数据源;含前世已收敛 + 本次 boot 新收敛)。owner 只做 scope 门,不上 wire。 */
+    private readonly convergedRows;
+    /** 本进程铸过审计行、且腿闭信号可达的 taskId(腿闭去重 + 防无关腿刷账本)。 */
+    private readonly openLegTasks;
+    private convergedOnce;
+    /**
+     * boot 期 fail-stop:mkdir/重放失败**拒启**(File 店族同律)。root = local 数据根
+     * (`config.localDataRoot`;与 `LocalBackend` 同源,见头注装配段)。
+     * 0o700 目录 + 0o600 账本:行携租户身份(owner/sessionId),不得组/他人可读
+     * (`workflow-notify-journal.ts` 同姿态)。
+     */
+    constructor(root: string, internals?: {
+        writeBytes?: (fd: number, buf: Buffer, off: number, len: number) => number;
+    });
+    /** 重放前世账本。撕尾/坏行 = 未提交态,跳过(计数,一条 warn 级 stderr 契约由调用方日志承担 ——
+     *  这里不持 logger 席,与 journal 同姿态;坏行数暴露给收敛日志)。 */
+    private corruptLines;
+    /** 尾部无终止换行(崩在 append 半途)—— ctor 在首次 append 前补孤立换行隔离之(codex R1-F3)。
+     *  ⚠️ 判据是**换行缺席**不是「解析失败」:崩在「JSON 全落、换行未落」的字节窗时撕尾能 parse 成功,
+     *  但不修尾照样会与下一条记录并行。 */
+    private tornTail;
+    private replay;
+    private group;
+    /** append + fsync(逐行落盘:进程猝死不丢已记的行 —— 本店的全部价值就在崩溃时刻)。
+     *  运行期失败**响亮不阻断**:审批可用性不押在审计盘上(盘满/只读时人还得能批),但丢行必须在遥测
+     *  显形([ref] 三件套,census 登记行同批)。 */
+    private append;
+    recordAsk(input: AuditAskInput): void;
+    recordSettle(input: AuditSettleInput): void;
+    noteLegClosed(taskId: string): void;
+    /**
+     * boot 崩溃收敛器(装配层在构造后、协调器开始服务前调一次;幂等跨 boot)。
+     * 判据 = 头注「boot 收敛判据」段(一处成文,不复述)。返回两分臂计数 + 坏行数供 boot 日志。
+     */
+    convergeCrashedAsks(): {
+        pending: number;
+        decided: number;
+        inconsistent: number;
+        corruptLines: number;
+    };
+    private projectRow;
+    /** scope 门与 `listLivePending` 逐字同律:`undefined` = operator 全量(含 owner null 行);串 = 只见
+     *  `owner === scope` 的行(null-owner 行对 principal 不可见,fail-closed 宁少列不超范围;`"__none__"`
+     *  未鉴权哨兵自然恒空)。 */
+    listCrashConverged(scope: string | undefined): CrashConvergedRow[];
+    /** 收 append fd(优雅关闭腿 best-effort;SIGKILL 下不跑也不丢 —— 每行已 fsync)。 */
+    close(): void;
+}
+//# sourceMappingURL=approval-ask-audit-store.d.ts.map

package/dist/approval-ask-audit-store.js

@@ -0,0 +1,284 @@
+import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, writeSync } from "node:fs";
+import { join } from "node:path";
+import { recordFailOpen } from "./observability/fail-open.js";
+export const APPROVAL_ASK_AUDIT_DIR = "approval-ask-audit";
+export const CRASH_CONVERGED_LIST_MAX = 200;
+function readLedgerRecord(u) {
+    if (u === null || typeof u !== "object" || Array.isArray(u))
+        return undefined;
+    const o = u;
+    const s = (k) => {
+        const v = o[k];
+        return typeof v === "string" ? v : undefined;
+    };
+    const num = (k) => {
+        const v = o[k];
+        return typeof v === "number" && Number.isFinite(v) ? v : undefined;
+    };
+    const bool = (k) => {
+        const v = o[k];
+        return typeof v === "boolean" ? v : undefined;
+    };
+    switch (o.kind) {
+        case "ask": {
+            const approvalId = s("approvalId");
+            const taskId = s("taskId");
+            const toolName = s("toolName");
+            const legTracked = bool("legTracked");
+            const expiresAtMs = num("expiresAtMs");
+            const mintedAtMs = num("mintedAtMs");
+            const ownerV = o.owner;
+            const owner = typeof ownerV === "string" ? ownerV : ownerV === null ? null : undefined;
+            if (approvalId === undefined || taskId === undefined || toolName === undefined || legTracked === undefined || expiresAtMs === undefined || mintedAtMs === undefined || owner === undefined) {
+                return undefined;
+            }
+            const toolCallId = s("toolCallId");
+            const sessionId = s("sessionId");
+            const sourceTaskId = s("sourceTaskId");
+            return {
+                kind: "ask",
+                approvalId,
+                taskId,
+                toolName,
+                legTracked,
+                expiresAtMs,
+                mintedAtMs,
+                owner,
+                ...(toolCallId !== undefined ? { toolCallId } : {}),
+                ...(sessionId !== undefined ? { sessionId } : {}),
+                ...(sourceTaskId !== undefined ? { sourceTaskId } : {}),
+            };
+        }
+        case "settle": {
+            const approvalId = s("approvalId");
+            const settledAtMs = num("settledAtMs");
+            const outcomeV = o.outcome;
+            const outcome = outcomeV === "allowed" || outcomeV === "denied" || outcomeV === "expired" ? outcomeV : undefined;
+            if (approvalId === undefined || settledAtMs === undefined || outcome === undefined)
+                return undefined;
+            const settledBy = s("settledBy");
+            return { kind: "settle", approvalId, outcome, settledAtMs, ...(bool("parkRouted") === true ? { parkRouted: true } : {}), ...(settledBy !== undefined ? { settledBy } : {}) };
+        }
+        case "leg_closed": {
+            const taskId = s("taskId");
+            const closedAtMs = num("closedAtMs");
+            if (taskId === undefined || closedAtMs === undefined)
+                return undefined;
+            return { kind: "leg_closed", taskId, closedAtMs };
+        }
+        case "crash_converged": {
+            const approvalId = s("approvalId");
+            const convergedAtMs = num("convergedAtMs");
+            const st = o.orphanState;
+            const orphanState = st === "pending" || st === "decided" ? st : undefined;
+            if (approvalId === undefined || convergedAtMs === undefined || orphanState === undefined)
+                return undefined;
+            return { kind: "crash_converged", approvalId, orphanState, convergedAtMs };
+        }
+        default:
+            return undefined;
+    }
+}
+export class FileApprovalAskAuditStore {
+    ledgerPath;
+    fd;
+    tailDirty = false;
+    writeBytes;
+    replayed = new Map();
+    replayedLegClosed = [];
+    convergedRows = [];
+    openLegTasks = new Set();
+    convergedOnce = false;
+    constructor(root, internals) {
+        this.writeBytes = internals?.writeBytes ?? ((fd, buf, off, len) => writeSync(fd, buf, off, len));
+        const dir = join(root, APPROVAL_ASK_AUDIT_DIR);
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        this.ledgerPath = join(dir, "ledger.jsonl");
+        this.replay();
+        if (this.tornTail) {
+            this.fd = openSync(this.ledgerPath, "a", 0o600);
+            writeSync(this.fd, "\n");
+            fsyncSync(this.fd);
+        }
+    }
+    corruptLines = 0;
+    tornTail = false;
+    replay() {
+        if (!existsSync(this.ledgerPath))
+            return;
+        const text = readFileSync(this.ledgerPath, "utf8");
+        this.tornTail = text.length > 0 && !text.endsWith("\n");
+        let line = 0;
+        for (const raw of text.split("\n")) {
+            if (raw.trim() === "")
+                continue;
+            line += 1;
+            let parsed;
+            try {
+                parsed = JSON.parse(raw);
+            }
+            catch {
+                this.corruptLines += 1;
+                continue;
+            }
+            const rec = readLedgerRecord(parsed);
+            if (rec === undefined) {
+                this.corruptLines += 1;
+                continue;
+            }
+            switch (rec.kind) {
+                case "ask": {
+                    const g = this.group(rec.approvalId, line);
+                    if (g.ask === undefined) {
+                        g.ask = rec;
+                        g.askLine = line;
+                    }
+                    break;
+                }
+                case "settle": {
+                    const g = this.group(rec.approvalId, line);
+                    if (g.settle === undefined) {
+                        g.settle = rec;
+                        g.settleLine = line;
+                    }
+                    break;
+                }
+                case "leg_closed":
+                    this.replayedLegClosed.push({ taskId: rec.taskId, line });
+                    break;
+                case "crash_converged": {
+                    const g = this.group(rec.approvalId, line);
+                    g.converged = rec;
+                    break;
+                }
+                default: {
+                    const unreachable = rec;
+                    throw new Error(`approval-ask-audit replay: unreachable record ${String(unreachable)}`);
+                }
+            }
+        }
+    }
+    group(approvalId, line) {
+        let g = this.replayed.get(approvalId);
+        if (!g) {
+            g = { firstLine: line };
+            this.replayed.set(approvalId, g);
+        }
+        return g;
+    }
+    append(rec) {
+        try {
+            if (this.fd === undefined)
+                this.fd = openSync(this.ledgerPath, "a", 0o600);
+            if (this.tailDirty) {
+                const nl = Buffer.from("\n", "utf8");
+                let noff = 0;
+                while (noff < nl.length)
+                    noff += this.writeBytes(this.fd, nl, noff, nl.length - noff);
+                fsyncSync(this.fd);
+                this.tailDirty = false;
+            }
+            const buf = Buffer.from(`${JSON.stringify(rec)}\n`, "utf8");
+            let off = 0;
+            while (off < buf.length)
+                off += this.writeBytes(this.fd, buf, off, buf.length - off);
+            fsyncSync(this.fd);
+        }
+        catch (err) {
+            this.tailDirty = true;
+            recordFailOpen("server.approval-ask-audit.append-failed", `kind=${rec.kind} err=${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    recordAsk(input) {
+        if (input.legTracked)
+            this.openLegTasks.add(input.taskId);
+        this.append({ kind: "ask", ...input });
+    }
+    recordSettle(input) {
+        this.append({ kind: "settle", ...input });
+    }
+    noteLegClosed(taskId) {
+        if (!this.openLegTasks.has(taskId))
+            return;
+        this.openLegTasks.delete(taskId);
+        this.append({ kind: "leg_closed", taskId, closedAtMs: Date.now() });
+    }
+    convergeCrashedAsks() {
+        if (this.convergedOnce)
+            return { pending: 0, decided: 0, inconsistent: 0, corruptLines: this.corruptLines };
+        this.convergedOnce = true;
+        let pending = 0;
+        let decided = 0;
+        let inconsistent = 0;
+        for (const [approvalId, g] of this.replayed) {
+            if (g.ask === undefined)
+                continue;
+            if (g.converged !== undefined) {
+                this.convergedRows.push({ row: this.projectRow(g, g.converged.orphanState, g.converged.convergedAtMs), owner: g.ask.owner });
+                continue;
+            }
+            let orphanState;
+            if (g.settle === undefined) {
+                if (this.replayedLegClosed.some((l) => l.taskId === g.ask.taskId && l.line > (g.askLine ?? 0))) {
+                    inconsistent += 1;
+                    continue;
+                }
+                orphanState = "pending";
+            }
+            else if (g.settle.outcome === "allowed" &&
+                g.ask.legTracked &&
+                !this.replayedLegClosed.some((l) => l.taskId === g.ask.taskId && l.line > (g.settleLine ?? 0))) {
+                orphanState = "decided";
+            }
+            if (orphanState === undefined)
+                continue;
+            const convergedAtMs = Date.now();
+            this.append({ kind: "crash_converged", approvalId, orphanState, convergedAtMs });
+            this.convergedRows.push({ row: this.projectRow(g, orphanState, convergedAtMs), owner: g.ask.owner });
+            if (orphanState === "pending")
+                pending += 1;
+            else
+                decided += 1;
+        }
+        this.convergedRows.sort((a, b) => b.row.convergedAtMs - a.row.convergedAtMs);
+        this.convergedRows.length = Math.min(this.convergedRows.length, CRASH_CONVERGED_LIST_MAX);
+        return { pending, decided, inconsistent, corruptLines: this.corruptLines };
+    }
+    projectRow(g, orphanState, convergedAtMs) {
+        const ask = g.ask;
+        return {
+            approvalId: ask.approvalId,
+            toolName: ask.toolName,
+            taskId: ask.taskId,
+            ...(ask.sessionId !== undefined ? { sessionId: ask.sessionId } : {}),
+            ts: ask.mintedAtMs,
+            expiresAtMs: ask.expiresAtMs,
+            decision: "denied",
+            cause: "crashed_before_park",
+            orphanState,
+            ...(orphanState === "decided" ? { originalDecision: "approve", ...(g.settle !== undefined ? { decidedAtMs: g.settle.settledAtMs } : {}) } : {}),
+            convergedAtMs,
+            resumeSafe: orphanState === "pending",
+        };
+    }
+    listCrashConverged(scope) {
+        const rows = [];
+        for (const e of this.convergedRows) {
+            if (scope !== undefined && e.owner !== scope)
+                continue;
+            rows.push(e.row);
+        }
+        return rows;
+    }
+    close() {
+        if (this.fd !== undefined) {
+            try {
+                closeSync(this.fd);
+            }
+            catch {
+            }
+            this.fd = undefined;
+        }
+    }
+}
+//# sourceMappingURL=approval-ask-audit-store.js.map

package/dist/approval-card.d.ts

@@ -488,10 +488,13 @@ export interface ApprovalRequestFrame {
  * 那一次原子事务真正翻成 `VOID` 的行集(`expireAsk`/`bindBatch` 的 `voidedSiblings` 返回形),不是
  * 「本批全体」的推断。
  *
- * 🔴 **发射面 = live emit only,不进 durable tail**(设计稿 §8 C-3/C-5):撤卡帧由 reaper 腿/收敛器
- * 这类**没有账本上下文**的调用点产出,那里没有 seq 可分配,硬塞进账本会铸出一条序号自造的行。丢帧的
- * 结构补偿 = 172 §3.1 的「preamble 是壳侧卡集**全量对账基准**,不在基准内的一律清」——壳重连时的
- * preamble 本身就会让一张没收到撤卡帧的僵尸卡消失。
+ * 🔴 **发射面 = 逐 ctx 分发,durable 腿落账本、sync 腿 live-only**([ref] [ref] 改述;原句「live emit
+ * only——reaper/收敛器无 seq 可分配」把**调用点**的约束错安在投递面上):帧恒经 `emitRevokeTo` 交给各
+ * ctx 的 `emitRevoke` 钩子,bg/resume 两条 durable 腿的钩子就是本腿账本的 `append`(seq 由腿的 ledger
+ * 链步分配,与帧从哪个调用点来无关),于是「卡帧在哪个账本、撤帧就在哪个账本」逐 ctx 自洽;sync 腿的
+ * 钩子仍是 live SSE 写(行为零变)。丢帧(ctx 已退场/append 失败)的结构补偿不变 = 172 §3.1 的
+ * 「preamble 是壳侧卡集**全量对账基准**,不在基准内的一律清」——壳重连时的 preamble 本身就会让一张
+ * 没收到撤卡帧的僵尸卡消失;账本里重放的撤帧只用于时间线渲染,不是卡集基准。
  *
  * v1 **不带 per-ask 终态**(§7-4 裁定):中选者另有 `PARKED` 的下行面(410 体 + 重放消失),壳按
  * `askIds` 清卡即可。
@@ -506,10 +509,19 @@ export interface ApprovalRevokeFrame {
     /** `superseded_by_park` = 降级连坐(窗到期/收敛器绑定中选者,兄弟被撤);`aborted` = run 取消。 */
     reason: "superseded_by_park" | "aborted";
     serverNowMs: number;
+    /**
+     * [ref](codex R1-[high] 采,additive):**出处 run** 的 wire id(= 同 ask 呈卡帧的 `taskId`,
+     * `AskOriginIdentity.taskId` / 行上 `task_id` 同源)。为什么必须带:分发集合是 broker 的 session 形
+     * (`boundAsk` 的继承链闭包 + 收敛器/reaper 的 `emitRevoke(frame, target)` 都按 (owner, sessionId)
+     * 反查),集合里可躺着**别的 run** 的 ctx —— durable 腿的 ctx 收帧即落**自己**账本,无此键则那条行
+     * 无法归属,消费端也无从过滤(收敛器 current-set 形下甚至可能是一条无配对卡帧的孤儿撤帧行)。
+     */
+    taskId: string;
 }
 /** 撤卡帧的纯构造(`build*`:返回纯数据,无方法无捕获行为)。`askIds` 拷贝一份 —— 调用方传进来的多是
- *  store 返回的数组,帧不该与它共享可变引用。 */
-export declare function buildRevokeFrame(batchId: string, askIds: readonly string[], reason: ApprovalRevokeFrame["reason"], serverNowMs: number): ApprovalRevokeFrame;
+ *  store 返回的数组,帧不该与它共享可变引用。`originTaskId` 必填([ref] 归属轴,见帧顶注)——发射点
+ *  恒有出处(askBroadcast 的 `origin.taskId` / 收敛器与 reaper 的行上 `task_id`),可选会让漏传静默。 */
+export declare function buildRevokeFrame(batchId: string, askIds: readonly string[], reason: ApprovalRevokeFrame["reason"], serverNowMs: number, originTaskId: string): ApprovalRevokeFrame;
 /**
  * 持久行 → 重放帧(设计稿 §5.2 逐字)。
  *

package/dist/approval-card.js

@@ -269,8 +269,8 @@ export function buildApprovalRequestFrame(input) {
         approvalId: input.approvalId,
     };
 }
-export function buildRevokeFrame(batchId, askIds, reason, serverNowMs) {
-    return { type: "approval_revoke", schemaVersion: 1, batchId, askIds: [...askIds], reason, serverNowMs };
+export function buildRevokeFrame(batchId, askIds, reason, serverNowMs, originTaskId) {
+    return { type: "approval_revoke", schemaVersion: 1, batchId, askIds: [...askIds], reason, serverNowMs, taskId: originTaskId };
 }
 export function buildReplayFrame(row, nowMs) {
     const parsed = ApprovalCardEnvelopeSchema.safeParse(row.cardJson);

package/dist/approval-reconciler.d.ts

@@ -246,7 +246,8 @@ export interface ReconcileStats {
     /** 段二:被代打 `expireAsk` 的孤儿 `STREAM_PENDING` 行数(赢 CAS 的)。 */
     orphansExpired: number;
 }
-/** 撤卡帧的投递面(live only,见 `ApprovalRevokeFrame` 顶注)。收敛器不认识 SSE,只交给这个口。 */
+/** 撤卡帧的投递面(逐 ctx 分发:durable 腿落账本、sync 腿 live,见 `ApprovalRevokeFrame` 顶注)。
+ *  收敛器不认识 SSE 也不认识账本,只交给这个口(broker 反查活 ctx,各 ctx 自带自己的写口)。 */
 export type ApprovalRevokeEmitter = (frame: ApprovalRevokeFrame, target: {
     owner: string | null;
     sessionId: string;

package/dist/approval-reconciler.js

@@ -83,7 +83,7 @@ export function createApprovalReconciler(deps) {
         if (askIds.length === 0 || !emitRevoke)
             return;
         try {
-            emitRevoke(buildRevokeFrame(row.batchId, askIds, reason, nowMs), { owner: row.owner, sessionId: row.sessionId, taskId: row.taskId });
+            emitRevoke(buildRevokeFrame(row.batchId, askIds, reason, nowMs, row.taskId), { owner: row.owner, sessionId: row.sessionId, taskId: row.taskId });
         }
         catch (err) {
             try {

package/dist/boot/config-center.js

@@ -400,7 +400,7 @@ export async function createConfigCenterRuntime(ctx) {
             if (effective?.skills && config.configCenter) {
                 skills = await applyCenterSkills(skills, effective.skills, config.configCenter.baseUrl, config.configCenter.token, logger, undefined, configLkgEnabled() ? defaultSkillCacheDir() : undefined);
             }
-            if (effective?.plugins && config.configCenter) {
+            if (effective?.plugins) {
                 const pluginOut = await applyCenterPlugins(skills, effective, {
                     cacheRoot: join(config.localDataRoot ?? join(homedir(), ".ai-agent"), "plugin-cache"),
                     allowHosts: config.pluginsAllowHosts,
@@ -618,7 +618,7 @@ export async function createConfigCenterRuntime(ctx) {
                                 }
                                 logger.info("sema_registry_refreshed", {
                                     version: r.effective.version,
-                                    note: "teams + runtime governance + models/roles/roster hot-applied; skills/mcp/runtime-gates/scenarios are restart-to-apply",
+                                    note: "collab + runtime governance + limits + models/roles/roster hot-applied; skills/mcp/runtime-gates(approvalRequire)/scenarios are restart-to-apply",
                                     ...(pendingRestart ? { restartRequired: true, restartReasons: pendingRestart.reasons } : {}),
                                 });
                                 latestEffective = r.effective;

package/dist/boot/coordinators.d.ts

@@ -12,6 +12,7 @@ import { ElicitationCoordinator } from "../elicitation.js";
 import type { Logger } from "../observability/logger.js";
 import { QuestionCoordinator } from "../question.js";
 import { ToolApprovalCoordinator, type ParkedAskRedeem } from "../tool-approval.js";
+import { FileApprovalAskAuditStore } from "../approval-ask-audit-store.js";
 import { SendUserFileEmitter } from "../capabilities/send-user-file-tool.js";
 import { TaskEnvRegistry } from "../capabilities/sandbox-file-send.js";
 import type { StoreBackend } from "../plugins/store-backend.js";
@@ -38,6 +39,7 @@ export declare function createLiveCoordinators(ctx: LiveCoordinatorsCtx): {
     toolApproval: ToolApprovalCoordinator | undefined;
     durableEnabled: boolean;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate;
+    approvalAskAudit: FileApprovalAskAuditStore | undefined;
     sendUserFileEmitter: SendUserFileEmitter | undefined;
     sendFileLedger: import("../plugins/send-file-ledger.js").SendFileLedger | undefined;
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("typebox").TSchema> | undefined;

package/dist/boot/coordinators.js

@@ -1,6 +1,7 @@
 import { ElicitationCoordinator } from "../elicitation.js";
 import { QuestionCoordinator } from "../question.js";
 import { ToolApprovalCoordinator, resolveStreamApprovalGate } from "../tool-approval.js";
+import { FileApprovalAskAuditStore } from "../approval-ask-audit-store.js";
 import { SendUserFileEmitter, SEND_USER_FILE_MAX_BYTES, sendUserFileTool } from "../capabilities/send-user-file-tool.js";
 import { createSandboxFileSend, TaskEnvRegistry } from "../capabilities/sandbox-file-send.js";
 import { createSendUserFileIssuer } from "../plugins/send-user-file.js";
@@ -27,6 +28,21 @@ export function createLiveCoordinators(ctx) {
             toolApproval: config.toolApprovalEnabled === true,
         });
     }
+    const approvalAskAudit = config.toolApprovalEnabled && backend?.kind === "local" && config.localDataRoot !== undefined
+        ? new FileApprovalAskAuditStore(config.localDataRoot)
+        : undefined;
+    if (approvalAskAudit) {
+        const converged = approvalAskAudit.convergeCrashedAsks();
+        if (converged.pending > 0 || converged.decided > 0 || converged.inconsistent > 0 || converged.corruptLines > 0) {
+            logger.warn("approval_ask_audit_crash_converged", {
+                pending: converged.pending,
+                decided: converged.decided,
+                inconsistent: converged.inconsistent,
+                corruptLines: converged.corruptLines,
+                note: "orphan approval asks from a previous crash were converged to crashed_before_park; see GET /v1/approvals crashConverged",
+            });
+        }
+    }
     const toolApproval = config.toolApprovalEnabled
         ? new ToolApprovalCoordinator({
             ...(streamApprovalGate.active
@@ -39,6 +55,7 @@ export function createLiveCoordinators(ctx) {
             ...(ruleScopeRootFor !== undefined ? { ruleScopeRootFor } : {}),
             unattendedPolicy: config.unattendedApprovalPolicy,
             ...(getParkedRedeem !== undefined ? { parkedRedeem: getParkedRedeem } : {}),
+            ...(approvalAskAudit !== undefined ? { askAudit: approvalAskAudit } : {}),
         })
         : undefined;
     const sendUserFileEmitter = (() => {
@@ -83,6 +100,6 @@ export function createLiveCoordinators(ctx) {
             : rawSend;
         return sendUserFileTool({ send, emitter: sendUserFileEmitter });
     })();
-    return { elicitation, question, toolApproval, durableEnabled, streamApprovalGate, sendUserFileEmitter, sendFileLedger, sendUserFileToolSpec };
+    return { elicitation, question, toolApproval, durableEnabled, streamApprovalGate, approvalAskAudit, sendUserFileEmitter, sendFileLedger, sendUserFileToolSpec };
 }
 //# sourceMappingURL=coordinators.js.map

package/dist/boot/leader.js

@@ -1,5 +1,6 @@
 import { createLeaderEndpoint } from "../leader/endpoint.js";
 import { createLeaderRunner } from "../leader/wire.js";
+import { buildDeploymentPostureSeats } from "./runner-deps.js";
 export function leaderK8sMinioGap(leaderEnabled, leaderProvider, hasS3) {
     if (!(leaderEnabled && leaderProvider === "k8s" && !hasS3))
         return null;
@@ -49,6 +50,7 @@ export function createLeaderFace(ctx) {
                 lockedConfig: governanceSeams.lockedConfig,
                 retentionPolicy: governanceSeams.retentionPolicy,
             },
+            deploymentPosture: buildDeploymentPostureSeats(config),
             fanoutEnabled: config.leaderFanoutEnabled,
             ...((process.env.MODEL_ROUTER_ID || process.env.MODEL_CHEAP_ID)
                 ? { routerModel: (process.env.MODEL_ROUTER_ID || process.env.MODEL_CHEAP_ID) }

package/dist/boot/reapers.d.ts

@@ -82,7 +82,8 @@ export interface ReapersCtx {
     rosterStore: RunnerDeps["rosterStore"];
     backgroundAgentStore: RunnerDeps["backgroundAgentStore"];
     mailboxStore: RunnerDeps["mailboxStore"];
-    /** [ref] 车6:流内审批撤卡帧的 live 投递口(收敛器/孤儿代打腿产出的帧经它反查 broker 的活连接)。
+    /** [ref] 车6:流内审批撤卡帧的投递口(收敛器/孤儿代打腿产出的帧经它反查 broker 的活连接;[ref] 起
+     *  活连接里的 durable 腿 ctx 会把帧落进本腿账本,sync 腿仍 live)。
      *  `TOOL_APPROVAL_ENABLED=false` 的部署恒 undefined ⇒ 收敛器照常收敛,只是不发通知帧(壳侧靠
      *  重连 preamble 对账,见 approval-card.ts 的 `ApprovalRevokeFrame` 顶注)。 */
     toolApproval: ToolApprovalCoordinator | undefined;

package/dist/boot/resolve-spec.js

@@ -289,9 +289,7 @@ export function createResolveSpec(ctx) {
             ...(() => { const v = toolNameListFromBody(body.deferTools); return v ? { deferTools: v } : {}; })(),
             ...(() => { const v = promptProfileFromBody(body.promptProfile); return v ? { promptProfile: v } : {}; })(),
             ...(() => { const v = toolMaterializeStrategyFromBody(body.toolMaterializeStrategy); return v ? { toolMaterializeStrategy: v } : {}; })(),
-            ...(typeof body.interactiveTools === "boolean"
-                ? { interactiveTools: body.interactiveTools }
-                : {}),
+            ...(typeof body.interactiveTools === "boolean" ? { interactiveTools: body.interactiveTools } : {}),
             ...(declaresInteractivePosture(body, req, opts) ? { interactionPosture: "interactive" } : {}),
             ...(typeof body.oneShot === "boolean" ? { oneShot: body.oneShot } : {}),
             resilience: normalizeResilience(body.resilience, explicitOperatorOk(auth?.principal, config.operatorPrincipals)),

package/dist/boot/runner-deps.d.ts

@@ -230,6 +230,26 @@ export declare function createEngineNoticeSeat(logger: {
 } | undefined, router?: EngineNoticeRouter): {
     onNotice?: NonNullable<RunnerDeps["onNotice"]>;
 };
+/**
+ * [ref](黑板 [ref],[ref] 登记)—— **部署姿态座席族**:运维在配置面写下的姿态(READ 面四席 + 记忆三席 +
+ * 委派入口 caps)。core 明写「每个 run 读**准备它的那只 Runner** 的 deps」⇒ 一台部署里跑任务的**每一只**
+ * Runner 都必须带同一份:主 runner / subRunner / run-local(经 {@link createSharedRunnerDeps} 展开)+
+ * **leader lane 五只**(`boot/leader.ts` → `LeaderWireConfig.deploymentPosture` → `src/leader/wire.ts`
+ * 五处 `...deploymentPostureSeat`)。
+ *
+ * 🔴 本函数是这一族**唯一**的取值点。两处各读一遍 config 就是 [ref]§三族A「主挂了、副漏挂」的病族形——
+ * [ref] 正是 leader 那条腿漏了**全族**(修前 wire.ts 五处一席都没有;边界曾靠
+ * `test/memory-delegation-evidence-lane.test.ts` ⑤ 组的机器门如实登记,现已翻成正向门)。leader 不许自己
+ * 再读 config 铸一份,只吃本函数经 cfg 递过去的产物(`test/leader-deployment-posture-seats.test.ts` ③ 钉)。
+ *
+ * 纯数据(键值全是 config 透传,无闭包)⇒ `build*`(CLAUDE.md 工厂律)。键**恒在场**、缺席 = `undefined`
+ * ([ref] S4 house style;core 消费点全按 `!== undefined` / `??` 判 —— dist
+ * `prepare-hands-readface.js:96-97`、`prepare-config-doors.js:199/215/229`、`prepare-task.js:1487` 亲读,
+ * 「键为 undefined」与「键缺席」对引擎逐字等价)。**不复制引擎缺省**(`roots`/`static-face`/`carry`/`open`/
+ * CC parity 20/200 一个都不抄):上游改缺省之日起本仓不会成为第二份真源。
+ */
+export type DeploymentPostureSeats = Pick<RunnerDeps, "readFace" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "delegationEntryCaps">;
+export declare function buildDeploymentPostureSeats(config: Pick<ServiceConfig, keyof DeploymentPostureSeats>): DeploymentPostureSeats;
 export declare function createSharedRunnerDeps(ctx: SharedRunnerDepsCtx): SharedRunnerDeps;
 export declare function createRunnerDeps(ctx: RunnerDepsCtx): RunnerDeps;
 //# sourceMappingURL=runner-deps.d.ts.map