@sema-agent/server 7.55.0 → 7.56.0

package/dist/boot/leader.js

@@ -51,6 +51,12 @@ export function createLeaderFace(ctx) {
                 retentionPolicy: governanceSeams.retentionPolicy,
             },
             deploymentPosture: buildDeploymentPostureSeats(config),
+            ...(ctx.tracer ? { tracer: ctx.tracer } : {}),
+            ...(config.usageWindows && ctx.usageWindowStore
+                ? { usageWindows: config.usageWindows, usageWindowStore: ctx.usageWindowStore }
+                : {}),
+            ...(ctx.promptSource ? { promptSource: ctx.promptSource } : {}),
+            ...(ctx.onError ? { onError: ctx.onError } : {}),
             fanoutEnabled: config.leaderFanoutEnabled,
             ...((process.env.MODEL_ROUTER_ID || process.env.MODEL_CHEAP_ID)
                 ? { routerModel: (process.env.MODEL_ROUTER_ID || process.env.MODEL_CHEAP_ID) }

package/dist/boot/runtime-caps.d.ts

@@ -30,11 +30,12 @@ export interface RuntimeCapsCtx {
  * 都不问 verdict)。
  *
  * ⚠️ center 键 `EntitlementRuntimeCaps.allowMemoryOptOut` 是 settings-schema 的独立小件([ref] §四 开放问题①),
- * 到货前**不算源**;到货后本断言加一条「center 在场」析取臂即可,判据不变。
+ * 已到货(1.4.0,[ref])——析取臂已加(centerEntitlementPresent),判据不变;dry-run 不算源(不 APPLY 即不 ENFORCE 同律)。
  */
 export declare function assertMemoryCapturePolicyWirable(input: {
     policy: ServiceConfig["memoryCapturePolicy"];
     grantSourceWired: boolean;
+    centerEntitlementPresent?: boolean;
 }): void;
 export declare function createRuntimeCaps(ctx: RuntimeCapsCtx): {
     principalCaps: import("../runtime-caps-resolver.js").PrincipalEntitlementsClient | undefined;

package/dist/boot/runtime-caps.js

@@ -4,6 +4,8 @@ export function assertMemoryCapturePolicyWirable(input) {
         return;
     if (input.grantSourceWired)
         return;
+    if (input.centerEntitlementPresent === true)
+        return;
     throw new Error(`MEMORY_CAPTURE_POLICY=governed requires a per-principal memory opt-out verdict source, and this deployment wires NONE ` +
         `— under "governed" core REFUSES every session memory-capture opt-out whose verdict is absent (fail-closed, the posture's ` +
         `own contract), so a governed worker without a source would refuse every \`memory.capture:"off"\` declaration and the ` +
@@ -15,7 +17,7 @@ export function assertMemoryCapturePolicyWirable(input) {
 }
 export function createRuntimeCaps(ctx) {
     const { config, logger } = ctx;
-    assertMemoryCapturePolicyWirable({ policy: config.memoryCapturePolicy, grantSourceWired: ctx.memoryOptOutGrant !== undefined });
+    assertMemoryCapturePolicyWirable({ policy: config.memoryCapturePolicy, grantSourceWired: ctx.memoryOptOutGrant !== undefined, centerEntitlementPresent: Boolean(config.configCenter && !config.configCenter.dryRun) });
     if (config.configCenter && !config.configCenter.dryRun && scopedTokenNeedsWorker(config.configCenter.token, config.configCenter.worker)) {
         logger.warn("runtime_caps_scoped_token_no_worker", {
             reason: "SEMA_REGISTRY_TOKEN is a worker-scoped wpt_ token but SEMA_REGISTRY_WORKER is unset → center 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set SEMA_REGISTRY_WORKER (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.",

package/dist/config-center/types.d.ts

@@ -103,7 +103,8 @@ export interface CenterMcpServer {
      * 所以它的家在 center 下发这条腿;请求腿那半场的门与结构性兑现见 `task-mcp.ts`
      * 的 `assertRequestMcpContentOrigin` 顶注。
      *
-     * ⚠️ **两条腿今天都到不了这里**([ref]③ / [ref]③ / [ref],2026-08-31 双绊线实测更正 —— 本注旧版那句
+     * ✅ **两条腿已通**([ref],settings-schema 1.4.0 补键 + config-provider 映射行,2026-09-02;双绊线翻正销账)。
+     * 病史([ref]③ / [ref]③ / [ref],2026-08-31 双绊线实测更正 —— 本注更旧版那句
      * 「远端 /effective.mcp 腿是直读 JSON,今天就通」**不成立**,doc-rot):settings-schema(原 registry-core)
      * 的 `McpServerSpec` 是默认 strip 的 zod object 且没有 `contentOrigin` 可选键,本地腿在 FileConfigStore 的
      * `parseDomainLoud(DOMAIN_SCHEMAS.mcp)`、远端腿在消费端边界 `readEffectiveWire`([ref] 裁B)**各被剥一次**。

package/dist/config-provider.js

@@ -145,6 +145,7 @@ export function mapToServiceEffective(eff, version) {
                     enabled: s.enabled,
                     ...(s.allowTools !== undefined ? { allowTools: s.allowTools } : {}),
                     ...(s.elicitation !== undefined ? { elicitation: s.elicitation } : {}),
+                    ...(s.contentOrigin !== undefined ? { contentOrigin: s.contentOrigin } : {}),
                 };
                 if (s.transport.kind === "stdio") {
                     return {

package/dist/http/route-ctx.d.ts

@@ -198,10 +198,16 @@ export interface RouteLegs {
         status: number;
         body: object;
     }>;
-    /** assistant 抢占腿的复位(gate-kind 守卫 + 驱动)。 */
+    /** assistant 抢占腿的复位(gate-kind 守卫 + 行级属主复核 + 驱动)。 */
     resumePreempted(sessionId: string, req: IncomingMessage | undefined, 
     /** [ref] 件 S-1:透传给 {@link DriveResumeArgs.acceptEarly}(200 受理语义)。HTTP `/resume` 腿传 `true`。 */
-    acceptEarly?: boolean): Promise<{
+    acceptEarly?: boolean, 
+    /** [ref]②([ref]):调用方已验身份的裁定 —— 腿内在被真正载入的 checkpoint 行上重跑属主判
+     *  ([ref] R3 同形;缺席 = 匿名 dev 部署,不咬)。 */
+    decider?: {
+        principal?: string;
+        explicitOperator: boolean;
+    }): Promise<{
         status: number;
         body: object;
     }>;
@@ -221,7 +227,13 @@ export interface RouteLegs {
         principalPresent?: boolean;
     }, 
     /** [ref] 件 S-1:透传给 {@link DriveResumeArgs.acceptEarly}(200 受理语义)。HTTP `/plan_review` 腿传 `true`。 */
-    acceptEarly?: boolean): Promise<{
+    acceptEarly?: boolean, 
+    /** [ref]②([ref]):调用方已验身份的裁定(直连门 = HMAC 验出的 principal)—— 腿内行级属主复核
+     *  ([ref] R3 同形;缺席 = 匿名 dev 部署,不咬)。 */
+    decider?: {
+        principal?: string;
+        explicitOperator: boolean;
+    }): Promise<{
         status: number;
         body: object;
     }>;

package/dist/http/routes/approvals-assistant.js

@@ -299,7 +299,7 @@ async function handleApprovalsAssistantBody(req, res, url, ctx, miss) {
                 sendError(res, 404, "not_found.run", "task not found");
                 return;
             }
-            const out = await resumePreempted(run.sessionId, req, true);
+            const out = await resumePreempted(run.sessionId, req, true, { principal, explicitOperator });
             sendResumeOutcome(res, out, deps.logger);
             return;
         }
@@ -365,7 +365,7 @@ async function handleApprovalsAssistantBody(req, res, url, ctx, miss) {
                 sendError(res, 404, "not_found.run", "task not found");
                 return;
             }
-            const out = await resumePlanReview(run.sessionId, decision, decision === "edit" ? body.editedPlan : undefined, typeof body.reason === "string" ? body.reason : undefined, req, { taskId, principalPresent: principal !== undefined }, true);
+            const out = await resumePlanReview(run.sessionId, decision, decision === "edit" ? body.editedPlan : undefined, typeof body.reason === "string" ? body.reason : undefined, req, { taskId, principalPresent: principal !== undefined }, true, { principal: deciderPrincipal, explicitOperator });
             sendResumeOutcome(res, out, deps.logger);
             return;
         }

package/dist/http/routes/leader.js

@@ -7,7 +7,7 @@ export async function handleLeader(req, res, url, ctx) {
 }
 async function handleLeaderBody(req, res, url, ctx, miss) {
     const { deps } = ctx;
-    const { readJson, rateLimited, quotaExceeded, leaseDenied } = ctx.helpers;
+    const { readJson, rateLimited, quotaExceeded, leaseDenied, usageWindowDenied } = ctx.helpers;
     if (deps.leaderEndpoint) {
         const isLeaderPost = req.method === "POST" && url === "/v1/leader";
         const isLeaderGet = req.method === "GET" && /^\/v1\/leader\/[^/]+$/.test(url);
@@ -18,7 +18,7 @@ async function handleLeaderBody(req, res, url, ctx, miss) {
             }
             const requester = gatedPrincipal(req, deps.config) ?? null;
             if (isLeaderPost) {
-                if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)))
+                if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)) || (await usageWindowDenied(req, res)))
                     return;
                 let body;
                 try {

package/dist/http/routes/workflows.js

@@ -196,7 +196,7 @@ async function handleWorkflowAgentSteerBody(req, res, url, ctx, miss) {
         sendNotRunningWf(!wfRun
             ? "workflow agent is not running on this replica (no live handle)"
             : wfRun.status === "running"
-                ? "workflow agent is active on another replica — cross-replica live-steer is not yet supported"
+                ? "no live handle for this workflow agent on this replica — the run may be live on another replica (cross-replica live-steer is not yet supported), or this replica holds no steerable stream for it; read the workflow status faces for progress"
                 : `workflow is ${wfRun.status} — agent is not running`);
         return;
     }

package/dist/http/server.js

@@ -1809,7 +1809,7 @@ export function createHttpServer(rawDeps) {
             },
         };
     }
-    async function resumePreempted(sessionId, req, acceptEarly) {
+    async function resumePreempted(sessionId, req, acceptEarly, decider) {
         const cs = deps.checkpointStore;
         const RESUMABLE_GATE_KIND = "resource_limit";
         const token = (await cs.findPendingTokenBySession(sessionId, undefined, { gateKinds: [RESUMABLE_GATE_KIND] })) ?? (await cs.findPendingTokenBySession(sessionId));
@@ -1824,6 +1824,13 @@ export function createHttpServer(rawDeps) {
         }
         if (!cp)
             return { status: 404, body: { error: "checkpoint not found", errorCode: "not_found.checkpoint" } };
+        if (decider !== undefined && !decider.explicitOperator) {
+            const cpOwner = decodeCheckpointScope(cp.scope);
+            if (cpOwner !== undefined && cpOwner !== decider.principal) {
+                deps.logger?.warn?.("assistant_resume_row_scope_mismatch", { sessionId, note: "loaded pending row is foreign to the verified caller — TOCTOU fold" });
+                return { status: 404, body: { error: "no resumable suspension for this task (already running, resumed, or expired)", errorCode: "not_found.suspension" } };
+            }
+        }
         const gateKind = cp.gate?.kind;
         if (gateKind !== RESUMABLE_GATE_KIND) {
             return { status: 409, body: { error: `task is suspended on a '${gateKind ?? "unknown"}' gate, not a resumable resource/preempt suspension — an approval gate must be decided via POST /v1/approvals/:id/decide`, errorCode: "gate_not_resumable" } };
@@ -1899,7 +1906,7 @@ export function createHttpServer(rawDeps) {
             ...(acceptEarly === true ? { acceptEarly: true } : {}),
         });
     }
-    async function resumePlanReview(sessionId, decision, editedPlan, reason, req, log, acceptEarly) {
+    async function resumePlanReview(sessionId, decision, editedPlan, reason, req, log, acceptEarly, decider) {
         const cs = deps.checkpointStore;
         const log404 = (r) => deps.logger?.info?.("decide_404", {
             reason: r,
@@ -1923,6 +1930,13 @@ export function createHttpServer(rawDeps) {
             log404("checkpoint-missing");
             return { status: 404, body: { error: "checkpoint not found", errorCode: "not_found.checkpoint" } };
         }
+        if (decider !== undefined && !decider.explicitOperator) {
+            const cpOwner = decodeCheckpointScope(cp.scope);
+            if (cpOwner !== undefined && cpOwner !== decider.principal) {
+                deps.logger?.warn?.("plan_review_row_scope_mismatch", { sessionId, note: "loaded pending row is foreign to the verified caller — TOCTOU fold" });
+                return { status: 404, body: { error: "no pending plan_review for this session (already decided or expired)", errorCode: "not_found.plan_review" } };
+            }
+        }
         const gateKind = cp.gate?.kind;
         if (gateKind !== PLAN_REVIEW_GATE_KIND) {
             return {
@@ -2106,7 +2120,7 @@ export function createHttpServer(rawDeps) {
         if (chunks.length === 0)
             return {};
         try {
-            return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+            return JSON.parse(Buffer.concat(chunks).toString("utf8")) ?? {};
         }
         catch {
             throw new HttpError(400, "invalid JSON body");

package/dist/leader/endpoint.js

@@ -1,4 +1,5 @@
 import { uuidv7 } from "@sema-agent/core";
+import { withPrincipal } from "../observability/principal-context.js";
 import { leaderIdemKey } from "../plugins/leader-run-store-sql.js";
 function statusForLeaderResult(result) {
     switch (result.repairTerminal) {
@@ -37,11 +38,11 @@ export function createLeaderEndpoint(runLeader, opts = {}) {
             }
         }
     }
-    function drive(id, body) {
+    function drive(id, body, owner) {
         void (async () => {
             let terminal;
             try {
-                const result = await runLeader(body);
+                const result = await withPrincipal(owner ?? undefined, () => runLeader(body));
                 const status = statusForLeaderResult(result);
                 terminal = { status: status, result };
                 opts.logger?.info?.("leader_run_done", { id, ok: result.ok, status, ...(result.repairTerminal ? { repairTerminal: result.repairTerminal } : {}), merged: result.merge && result.merge.ok ? result.merge.merged : undefined });
@@ -120,7 +121,7 @@ export function createLeaderEndpoint(runLeader, opts = {}) {
                     return { status: 202, body: { leaderRunId: run.id, status: run.status } };
                 }
                 runs.set(run.id, { id: run.id, status: "running", startedAt: run.startedAtMs, owner });
-                drive(run.id, b);
+                drive(run.id, b, owner);
                 return { status: 202, body: { leaderRunId: run.id, status: "running" } };
             }
             if (scopedIdem) {
@@ -133,7 +134,7 @@ export function createLeaderEndpoint(runLeader, opts = {}) {
             runs.set(id, { id, status: "running", startedAt: Date.now(), owner });
             if (scopedIdem)
                 memIdem.set(scopedIdem, id);
-            drive(id, b);
+            drive(id, b, owner);
             return { status: 202, body: { leaderRunId: id, status: "running" } };
         }
         const m = method === "GET" ? LEADER_ID_RE.exec(url) : null;

package/dist/leader/wire.d.ts

@@ -48,6 +48,56 @@ export interface LeaderWireConfig {
      * leader 编排的 planner / worker / repair / conflict 四类任务**静默不生效**(core 内建 deny 表仍在)。
      */
     deploymentPosture?: DeploymentPostureSeats;
+    /**
+     * [ref]([ref])—— **计费/遥测追踪席**,原样递给本车道的每一只 Runner。唯一属主 =
+     * `boot/budget-tracing.ts` 的 `createTracer(...)`(主 runner / subRunner / hook runner 经共享基座吃的
+     * 就是它),`boot/leader.ts` 搬的是**同一只**。
+     *
+     * 🔴 为什么这一席是承重的:`src/budget.ts` 的 `createTracer` 是 `brain.call` **唯一**的记账点 ——
+     * `costQuota.add` / `fleetUsage.record` / `fleetLease.recordSpend` / `model_cost_micro_usd_total` 四个写口
+     * 全在那里(`createBrain` 自己不记账)。而 `POST /v1/leader` 的准入处**读**的正是 costQuota / fleetLease
+     * 这两个桶。缺席 ⇒ 门查的桶与花钱的手不是同一只:`MAX_PRINCIPAL_COST_USD` 与 fleet 租约对这条腿结构性
+     * 失效,而一条 leader run 扇出 ≤6 个带手 worker + planner + repair/conflict 环,全是实钱。
+     * 归因的另一半在 `leader/endpoint.ts` 的 `drive()`(ALS `withPrincipal`)—— 记账臂按 `currentPrincipal()`
+     * 分租户,只补席不包裹 = 归因恒 undefined = 假绿。缺席 ⇒ 展开空对象(与接线前逐字相同)。
+     */
+    tracer?: RunnerDeps["tracer"];
+    /**
+     * [ref]([ref],[ref]-T1)—— **部署级 token 治理窗**两键,**成对**递给本车道的每一只 Runner。
+     * 属主 = `config.usageWindows`(声明)+ `boot/stores.ts` 造的账本店(两者同真同假,与
+     * `boot/runner-deps.ts` 的共享基座同规);leader 不自己读 config。
+     *
+     * 成对的理由是 core 的消费形:`prepare-task.js` 的 `buildUsageGovernance(usageWindows, deps, …)` 要求
+     * 声明与 `deps.usageWindowStore` **同时**在场才铸 `usageGovernance`,缺一即 undefined(既不 check 也不
+     * commit)⇒ 半席只是死键。缺席 ⇒ 展开空对象。
+     * 提交面那一半(`POST /v1/leader` 的 `usageWindowDenied` 门)在 `src/http/routes/leader.ts`。
+     */
+    usageWindows?: RunnerDeps["usageWindows"];
+    usageWindowStore?: RunnerDeps["usageWindowStore"];
+    /**
+     * [ref]([ref])—— **center 发布的 prompt catalog** 席,原样递给本车道的每一只 Runner。唯一属主 =
+     * `boot/config-center.ts` 的 `configCenter.promptSource`(主 runner / subRunner 同一只;run-local 有自己
+     * 的等价腿)。缺席 ⇒ leader 的 planner/worker/repair/conflict 四类**顶层**任务跑引擎内置提示词,而同一
+     * 部署的 `/v1/tasks`、`/v1/runs` 跑运维发布的那一份 —— 且 core 顶层新任务走的是**静默**臂(pinned /
+     * parentCenterArtifactDigest 两支才 `prompt.snapshot_unavailable` fail-loud),运维面零信号。
+     * 缺席 ⇒ 展开空对象(与接线前逐字相同)。
+     */
+    promptSource?: RunnerDeps["promptSource"];
+    /**
+     * [ref] 的**披露半件**([ref],codex 对抗复审 r2-[high],亲读装树 core 后修)—— 部署级错误汇。
+     *
+     * 🔴 为什么它与治理窗席**同生共死**:core 对「治理窗最终扣账失败」的唯一出口就是这一席 ——
+     * `dist/core/runner/runtask.js` 收尾段 `catch (flushErr) { this.deps.onError?.(flushErr, { phase: "config", … }) }`
+     * (以及 10s 慢盘披露的同一只回调),抛错之后任务**按原结果收尾**。挂了窗席却不挂本席 = 一次窗账
+     * 永久丢失时这条腿上零日志零计数,后续提交继续读偏低的窗被放行 —— CLAUDE.md [ref]「治理/门轴禁静默
+     * fail-open」正是说这个。它顺带也把 leader 车道其余 phase(degraded / rewind / memory / mcp / a2a /
+     * prompt-cache …)的既有观测面补齐,与 `onNotice` 席当年([ref]②)同一个理由。
+     *
+     * 属主唯一 = `boot/runner-deps.ts` `createRunnerDeps` 铸的那一只;`boot/leader.ts` 直引
+     * `runnerDeps.onError`(**同一实例**,[ref]§三族A 的最强同源形,与 main.ts subRunner 的先例逐字同姿势),
+     * leader 绝不另写一份臂表(两份必漂)。缺席 ⇒ 展开空对象(与接线前逐字相同)。
+     */
+    onError?: RunnerDeps["onError"];
     /** Worker model brain + catalog (the same the service runs tasks on). */
     brain: Brain;
     models: Record<string, Model>;

package/dist/leader/wire.js

@@ -13,6 +13,7 @@ import { runLeaderTask } from "./leader.js";
 import { attachRepairLoopDeps } from "./repair-wire.js";
 import { routePlanWithFallback, validateSubtasks } from "./planner.js";
 import { createEngineNoticeSeat } from "../boot/runner-deps.js";
+import { currentPrincipal } from "../observability/principal-context.js";
 const REPAIR_LOOP_WIRED = true;
 const sh = (env) => async (cmd) => {
     const r = await env.exec(`bash -lc ${JSON.stringify(cmd)}`);
@@ -130,6 +131,14 @@ export function createLeaderRunner(cfg) {
     const onNoticeSeat = createEngineNoticeSeat(cfg.logger);
     const governanceSeat = cfg.governance ?? {};
     const deploymentPostureSeat = cfg.deploymentPosture ?? {};
+    const tracerSeat = cfg.tracer ? { tracer: cfg.tracer } : {};
+    const usageWindowSeat = cfg.usageWindows && cfg.usageWindowStore ? { usageWindows: cfg.usageWindows, usageWindowStore: cfg.usageWindowStore } : {};
+    const promptSourceSeat = cfg.promptSource ? { promptSource: cfg.promptSource } : {};
+    const onErrorSeat = cfg.onError ? { onError: cfg.onError } : {};
+    const principalSpec = () => {
+        const p = currentPrincipal();
+        return p ? { principal: p } : {};
+    };
     const mkRepair = (rawEnv, repoDir, oracleFiles) => {
         if (repairRounds <= 0)
             return undefined;
@@ -143,7 +152,7 @@ export function createLeaderRunner(cfg) {
                         throw new Error(`oracle still present after remove (${f.path}) — refusing repair (measurement integrity)`);
                 }
                 try {
-                    const runner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat, executionEnv: rawEnv, rootPath: repoDir });
+                    const runner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat, ...tracerSeat, ...usageWindowSeat, ...promptSourceSeat, ...onErrorSeat, executionEnv: rawEnv, rootPath: repoDir });
                     const objective = [
                         `The integrated project at ${repoDir} fails its build/test. Make the MINIMAL change to the working tree so this command exits 0 (cd into the repo and run it yourself to confirm):`,
                         `  ${testCmd}`,
@@ -155,6 +164,7 @@ export function createLeaderRunner(cfg) {
                     const res = await runner
                         .runTaskStream({
                         objective,
+                        ...principalSpec(),
                         sessionId: `leader-repair-${Date.now()}-${round}`,
                         limits: { maxCostUsd: repairBudgetUsd, maxWalltimeMs: Math.max(300_000, Math.floor(leaderTimeoutMs / 2)) },
                     })
@@ -186,7 +196,7 @@ export function createLeaderRunner(cfg) {
                         throw new Error(`oracle still present after remove (${f.path}) — refusing conflict-resolve (measurement integrity)`);
                 }
                 try {
-                    const runner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat, executionEnv: rawEnv, rootPath: repoDir });
+                    const runner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat, ...tracerSeat, ...usageWindowSeat, ...promptSourceSeat, ...onErrorSeat, executionEnv: rawEnv, rootPath: repoDir });
                     const objective = [
                         `A parallel worker '${workerId}' ported a module on its own branch, but applying its patch onto the already-integrated tree at ${repoDir} produced a MERGE CONFLICT (git apply --3way). The OTHER workers' patches already applied cleanly — integrate THIS worker's changes too, resolving the overlap.`,
                         `Resolve EVERY conflict in the working tree: open each file containing conflict markers (<<<<<<< / ======= / >>>>>>>) and merge BOTH sides' real intent (keep both workers' behaviour — never drop one side just to make it apply). Then apply any rejected hunks recorded in *.rej files by hand, and DELETE every *.rej and *.orig file.`,
@@ -199,6 +209,7 @@ export function createLeaderRunner(cfg) {
                     const res = await runner
                         .runTaskStream({
                         objective,
+                        ...principalSpec(),
                         sessionId: `leader-conflict-${Date.now()}-${round}`,
                         limits: { maxCostUsd: repairBudgetUsd, maxWalltimeMs: Math.max(300_000, Math.floor(leaderTimeoutMs / 2)) },
                     })
@@ -249,10 +260,11 @@ export function createLeaderRunner(cfg) {
             if (Array.isArray(body.subtasks) && body.subtasks.length > 0) {
                 return validateSubtasks(body.subtasks);
             }
-            const planRunner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat });
+            const planRunner = new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat, ...tracerSeat, ...usageWindowSeat, ...promptSourceSeat, ...onErrorSeat });
             const runRoute = async (prompt) => {
                 const res = await planRunner.runTaskStream({
                     objective: prompt,
+                    ...principalSpec(),
                     sessionId: `leader-route-${Date.now()}`,
                     ...(cfg.routerModel ? { model: cfg.routerModel } : {}),
                 }).result();
@@ -339,7 +351,7 @@ export function createLeaderRunner(cfg) {
                     workerId: sub.workerId, sessionId, branch: sub.branch,
                     baseSha,
                     runner: keepCtxWarm(new Runner({
-                        brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat,
+                        brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat, ...tracerSeat, ...usageWindowSeat, ...promptSourceSeat, ...onErrorSeat,
                         ...(cfg.toolResultStore ? { toolResultStore: cfg.toolResultStore } : {}),
                         ...(cfg.sessionStore ? { sessionStore: cfg.sessionStore } : {}),
                         executionEnvFactory: (ctx) => withStaging(envFactory(ctx), stage, async (e) => {
@@ -347,7 +359,7 @@ export function createLeaderRunner(cfg) {
                         }),
                     })),
                     fetchDiff: () => fetchUploadedDiff(getUrl),
-                    spec: { ...workerLimits, ...sub.spec, ...durableSpec, ...resourceSpec, objective: `${sub.spec.objective}${uploadStepSuffix(W)}` },
+                    spec: { ...workerLimits, ...sub.spec, ...durableSpec, ...resourceSpec, ...principalSpec(), objective: `${sub.spec.objective}${uploadStepSuffix(W)}` },
                 };
             }
             if (!cfg.e2bApiKey)
@@ -359,10 +371,10 @@ export function createLeaderRunner(cfg) {
             const baseSha = await sh(env)(`cd ${repo} && git rev-parse HEAD`);
             return {
                 workerId: sub.workerId, sessionId, branch: sub.branch, baseSha,
-                runner: keepCtxWarm(new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat, ...(cfg.toolResultStore ? { toolResultStore: cfg.toolResultStore } : {}), ...(cfg.sessionStore ? { sessionStore: cfg.sessionStore } : {}), executionEnv: env })),
+                runner: keepCtxWarm(new Runner({ brain: cfg.brain, models: cfg.models, roles: cfg.roles, pricing: cfg.pricing, ...onNoticeSeat, ...governanceSeat, ...deploymentPostureSeat, ...tracerSeat, ...usageWindowSeat, ...promptSourceSeat, ...onErrorSeat, ...(cfg.toolResultStore ? { toolResultStore: cfg.toolResultStore } : {}), ...(cfg.sessionStore ? { sessionStore: cfg.sessionStore } : {}), executionEnv: env })),
                 diffEnv: env,
                 destroy: () => env.destroy().then(() => { }),
-                spec: { ...workerLimits, ...sub.spec, ...durableSpec, ...resourceSpec },
+                spec: { ...workerLimits, ...sub.spec, ...durableSpec, ...resourceSpec, ...principalSpec() },
             };
         };
         const provisionIntegrationSandbox = async () => {

package/dist/main.js

@@ -536,7 +536,7 @@ async function main() {
         resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore,
         workflowCompletionInbox, taskListLane,
     });
-    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend });
+    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });
     const drainState = { draining: false };
     const authBridgeIssuer = process.env.AUTH_BRIDGE_ISSUER || config.configCenter?.baseUrl;
     const registryJwtVerifier = authBridgeIssuer

package/dist/plugins/checkpoint-store-sql.d.ts

@@ -120,6 +120,18 @@ export interface PendingCheckpoint {
      * 展示/分诊用,永不参与 resume / gate / CAS(core 同款 ECHO-ONLY 定性)。
      */
     hasBidiControls?: true;
+    /**
+     * [ref]([ref]② core 点名 / [ref] 认领):**内容问句分型键** —— `"content_ask"` 当这条 tool_approval
+     * park 门住的是保留工具 AskUserQuestion(问用户的问题,不是副作用工具),消费端(cli/壳审批面)据它
+     * 渲问句 UI 而不用嗅探 `toolName`。词与判据 = core `summarizeCheckpoint` 的同一行规则(行上 core 铸的
+     * `toolName` 的**全函数**派生;词属主 `approval-content-kind.ts`,parity 钉看漂移)——**不是**
+     * `hasBidiControls` 那类「server 不重算」的扫描位:派生 ≠ 重扫。
+     * 🔴 `"content_ask"` 或**缺席**([ref]② OMIT 纪律,恒不铸 `null`/`false`):缺席 = 非内容问句门
+     * (普通工具门 / 非工具 park / toolName 缺席的存量行)。展示/分诊用,永不参与 resume / gate / CAS。
+     * 两条 durable 读面(`GET /v1/approvals` 行 + `/stream` `pending` 帧)经同一投影同时携带;live 腿的
+     * 同名键在 `LivePendingRow.contentKind`(同一词属主)。
+     */
+    contentKind?: "content_ask";
 }
 /**
  * [ref]([ref] / DEBTS [ref]):session 键读口(`findPendingTokenBySession` / `peekPendingScope`)的**行绑定**。

package/dist/plugins/checkpoint-store-sql.js

@@ -1,3 +1,4 @@
+import { contentKindOf } from "../approval-content-kind.js";
 import { createHash } from "node:crypto";
 import { APPROVAL_GATE_KINDS_SQL_IN } from "../tool-approval.js";
 import { CheckpointError, MAX_RULE_TEXT_CHARS, validatePendingSteer, appendPendingSteer, checkpointVersionOf, winnerFromOutcome, summarizeCheckpoint, MAX_SUPPORTED_CHECKPOINT_VERSION, } from "@sema-agent/core";
@@ -437,6 +438,7 @@ export class SqlCheckpointStore {
             ? await this.db.query(`${base}${this.q(" AND c.scope=?", " AND c.scope=$1")} ORDER BY c.created_at_ms ASC`, [scope])
             : await this.db.query(`${base} ORDER BY c.created_at_ms ASC`);
         const out = rows.map((r) => {
+            const toolName = r.tool_name ?? null;
             const toolCallId = r.tool_call_id ?? null;
             const boundInputHash = r.bound_input_hash ?? null;
             const gateKind = r.gate_kind ?? null;
@@ -444,7 +446,7 @@ export class SqlCheckpointStore {
             return {
                 sessionId: String(r.session_id),
                 scope: String(r.scope),
-                toolName: r.tool_name ?? null,
+                toolName,
                 toolCallId,
                 ...(toolCallId !== null ? { boundCallId: toolCallId } : {}),
                 ...(boundInputHash !== null ? { boundInputHash } : {}),
@@ -456,6 +458,7 @@ export class SqlCheckpointStore {
                 riskDescriptor: readRiskDescriptorCell(r.risk_descriptor),
                 ...(ruleOffers !== undefined ? { ruleOffers } : {}),
                 ...(Number(r.has_bidi_controls) === 1 ? { hasBidiControls: true } : {}),
+                ...(contentKindOf(toolName) !== undefined ? { contentKind: "content_ask" } : {}),
             };
         });
         return out.sort((a, b) => (b.riskDescriptor?.severity ?? 0) - (a.riskDescriptor?.severity ?? 0) || a.createdAt - b.createdAt);

package/dist/plugins/file-run-store.js

@@ -453,6 +453,7 @@ export class FileRunStore {
                 continue;
             const sorted = [...arr].sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime() || (a.taskId < b.taskId ? 1 : a.taskId > b.taskId ? -1 : 0));
             const latest = sorted[0];
+            const latestRunId = latest.result?.runId;
             const times = arr.map((r) => r.createdAt.getTime());
             const last = Math.max(...times);
             const first = Math.min(...times);
@@ -465,6 +466,7 @@ export class FileRunStore {
                 objectivePreview: latest.objectivePreview,
                 lastStatus: latest.status,
                 lastRunId: latest.taskId,
+                ...(typeof latestRunId === "string" && latestRunId !== "" ? { lastTaskRunId: latestRunId } : {}),
                 title: null,
             });
         }

package/dist/plugins/local-checkpoint-store.js

@@ -1,3 +1,4 @@
+import { contentKindOf } from "../approval-content-kind.js";
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync, readdirSync, renameSync, unlinkSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
@@ -160,6 +161,7 @@ export class LocalCheckpointStore {
                     return rs !== undefined ? { ruleOffers: rs } : {};
                 })(),
                 ...(pa?.hasBidiControls === true ? { hasBidiControls: true } : {}),
+                ...(contentKindOf(pa?.toolName ?? null) !== undefined ? { contentKind: "content_ask" } : {}),
             });
         }
         return rows.sort((a, b) => (b.riskDescriptor?.severity ?? 0) - (a.riskDescriptor?.severity ?? 0) || a.createdAt - b.createdAt);

package/dist/plugins/local-session-store.d.ts

@@ -27,6 +27,7 @@ export declare class LocalSessionStore implements SessionStore {
      *  has only TERMINAL runs (no live tail to re-attach), so `lastRunId` falls back to null and the shell uses its
      *  no-anchor path — same posture as the other local degrades here (runCount:0, lastStatus:""). Persisting it would
      *  need a sidecar-format change (the #10 clobber area); deferred until a real local-file-backed need. */
+    /** K-5c/[ref]/[ref]:per-session 最近一次 run 的 {taskId, runId?}(noteTaskRun 席;runId omit ⇒ 清座)。 */
     private readonly lastTaskRun;
     /** 2c P1d-β — live staged-import handles keyed by stagingId, so a local staging's in-memory buffer is readable via
      *  readStagedEntries (the durable twins re-read the staged session_event rows; local has no such rows). */
@@ -173,15 +174,14 @@ export declare class LocalSessionStore implements SessionStore {
     /** K-5c (core 1.155 SessionStore seam): core's Runner calls this at runTask START with the run's taskId, so the
      *  latest run surfaces as `lastRunId` on listSessions even while it is still running/suspended (the local backend
      *  has no runs ledger to derive it from, unlike the TiDB/PG twins). In-memory, last-write-wins per session.
-     *  [ref](core 5.65 增量批,**有意缓议**):core 的第三参 engine runId 在此**尚未消费**——它唯一的
-     *  合法出口是 listSessions 行上的 `lastTaskRunId`,而 `SessionSummary` 是 canonical spec 的**闭集**
-     *  (sema-sdk spec/openapi.yaml `additionalProperties:false`,producer-contract sessionsList 格咬着),
-     *  加键是跨仓 spec 节拍的事。spec 开键那一批再落:map 值扩成 `{taskId, runId?}` + 两座同动清座语义
-     *  (对齐 core TtlSessionStore.noteTaskRun 的 omit⇒clear,session-store.js 亲读)+ 行投影。
-     *  codex 5.65 增量批 R1-[medium] 曾建议「存储先行、投影另批」——**驳**:本店 runId 的唯一读点就是
-     *  行投影,先写不读=黑盒不可测的死状态(红先律无红可铺);清座语义单独存在也无观察面。存储与投影
-     *  必须同批,债主=sessions 列表 wire 键的 spec 节拍批(本注即债的定位锚)。 */
-    noteTaskRun(sessionId: string, taskId: string): void;
+     *  [ref] → [ref]([ref] 兑现;上一版「有意缓议」注即本批债锚,兑现随批撤):第三参 engine runId
+     *  自本批起**消费** —— map 值 {taskId, runId?} + 行投影 `lastTaskRunId` + **两座同动清座**(omit ⇒
+     *  清 runId 座,对齐 core TtlSessionStore.noteTaskRun 的 omit⇒clear 契约,core session.d.ts:204-212
+     *  亲读:旧 run 的 runId 挂在新 task 旁 = 把上一条 run 的身份错标给新 run)。存储与行投影同批落
+     *  (codex 5.65 R1-[medium]「存储先行、投影另批」之驳仍成立:本店 runId 唯一读点即行投影)。
+     *  wire 半场:HTTP 面零投影透传(sessions-list.ts,additive 键随行上 wire);sema-sdk spec
+     *  `SessionSummary` 闭集候 SDK 开键([ref]/.82 班车)——SDK 落键即端到端闭合。 */
+    noteTaskRun(sessionId: string, taskId: string, runId?: string): void;
     /** Synthesize a session's objective preview = the most-recent USER text message (the objective the run last saw).
      *  Reads the session's entries through the repo; any read error degrades to null (never fails the list). */
     private previewOf;

package/dist/plugins/local-session-store.js

@@ -275,6 +275,7 @@ export class LocalSessionStore {
                 continue;
             const firstActivityAt = meta.createdAt || new Date(0).toISOString();
             const lastActivityAt = this.lastActivity.get(meta.id) ?? firstActivityAt;
+            const lastRun = this.lastTaskRun.get(meta.id);
             all.push({
                 sessionId: meta.id,
                 owner,
@@ -283,7 +284,8 @@ export class LocalSessionStore {
                 runCount: 0,
                 objectivePreview: await this.previewOf(meta),
                 lastStatus: "",
-                lastRunId: this.lastTaskRun.get(meta.id) ?? null,
+                lastRunId: lastRun?.taskId ?? null,
+                ...(lastRun?.runId !== undefined ? { lastTaskRunId: lastRun.runId } : {}),
                 title: this.titleState.titles.get(meta.id) ?? null,
             });
         }
@@ -298,8 +300,8 @@ export class LocalSessionStore {
             : filtered;
         return after.slice(0, opts.limit);
     }
-    noteTaskRun(sessionId, taskId) {
-        this.lastTaskRun.set(sessionId, taskId);
+    noteTaskRun(sessionId, taskId, runId) {
+        this.lastTaskRun.set(sessionId, { taskId, ...(runId !== undefined ? { runId } : {}) });
     }
     async previewOf(meta) {
         try {

package/dist/plugins/memory-run-store.js

@@ -186,6 +186,7 @@ export class MemoryRunStore {
                 continue;
             const sorted = [...arr].sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime() || (a.taskId < b.taskId ? 1 : a.taskId > b.taskId ? -1 : 0));
             const latest = sorted[0];
+            const latestRunId = latest.result?.runId;
             const times = arr.map((r) => r.createdAt.getTime());
             const last = Math.max(...times);
             const first = Math.min(...times);
@@ -198,6 +199,7 @@ export class MemoryRunStore {
                 objectivePreview: latest.objectivePreview,
                 lastStatus: latest.status,
                 lastRunId: latest.taskId,
+                ...(typeof latestRunId === "string" && latestRunId !== "" ? { lastTaskRunId: latestRunId } : {}),
                 title: null,
             });
         }