@sema-agent/server 7.6.0 → 7.7.1

package/dist/capabilities/scenarios.js

@@ -7,6 +7,7 @@ import { stablePrompt } from "./prompt.js";
 import { createTeamTool, teamCoordinatorPrompt, getTeam, teamNames } from "./team.js";
 import { createWebSearchBackend, webSearchConfigFromSettings } from "../plugins/web-search.js";
 import { skillsForScenario } from "./skills.js";
+import { pickHandsRunner } from "./hands-lane.js";
 /**
  * Sema product identity, prepended to the core default base for the `default` scenario when
  * {@link ScenarioDeps.brandIdentity} is on. Honest about the substrate (the engine runs whichever model
@@ -88,6 +89,11 @@ export function codePromptProvider(brand) {
 // [2400] CAPS-OPS-11:autonomousPromptProvider 别名导出已随场景退役删除(真身=codePromptProvider)。
 // 其 `@deprecated` JSDoc 曾残留于此,被 tsc 误挂到下方 buildScenarios(三处调用点全告 deprecated
 // ——TODO-3 立案的「迁移」实为孤儿注释,随删除清账;buildScenarios 本身非退役面)。
+/** #196 唯一取用口:场景按自己的判别位取子任务 Runner。场景体内一律不直接摸 `deps.subRunner` /
+ *  `deps.handslessSubRunner` —— 两处各挑一次就是漂移的成因,判别位必须是唯一开关。 */
+function subRunnerFor(deps, hands) {
+    return pickHandsRunner(hands, { full: deps.subRunner, handsless: deps.handslessSubRunner });
+}
 export function buildScenarios(deps) {
     // The default scenario filters skills by "default" — NOT by req.scenario (which may be an unknown name
     // that fell back here): the bundle must be a coherent "default" set, matching how main.ts resolves an
@@ -137,7 +143,9 @@ export function buildScenarios(deps) {
                     // core 1.382 checkpointStore/ensureChildSessionDurable = design/153 parked 状态机的「同车必接」
                     // 一对([1561] 提货单①②,ScenarioDeps 字段注释详述);两者任一缺席 = 净是 pre-153 行为。
                     subagent: {
-                        runner: deps.subRunner,
+                        // #196:default/code 的委派子代**要**手(CC parity;main.ts subRunner 注里那条 "subagent
+                        // couldn't run pwd" 缺陷就是这条腿缺手),故按本场景判别位取 full 支。
+                        runner: subRunnerFor(deps, "full"),
                         background: {
                             registry: defaultTaskRegistry,
                             owner: "unattributed",
@@ -158,6 +166,9 @@ export function buildScenarios(deps) {
                     ...(webSearch ? { webSearch } : {}),
                 }).filter((t) => t.name !== "WebFetch" || deps.requirePrincipal !== true),
             ],
+            // default/code 是手带并集的**故意消费者**(上方 rank-1 BLOCKER 注:CC agent loop MUST have the
+            // full-body roster)——#196 判别位在这里表态 full,收窄只落在声明了 none 的场景上。
+            hands: "full",
             skills: skillsForScenario(deps.skills, "default"),
             // Local/TOC deployment brands the neutral default scenario as Sema (so the local engine answers "who
             // are you" as Sema, not the model's hallucinated identity). Cloud leaves it neutral unless opted in.
@@ -190,13 +201,15 @@ export function buildScenarios(deps) {
         // would let runtime-distributed content rewrite the deployment-pinned system prompt and break the
         // stablePrompt STABLE→VARIABLE prefix-cache discipline (design/12/17).
         scan: (req) => {
-            if (!deps.repoClient)
-                throw new HttpError(501, "scan scenario needs GIT_API_BASEURL configured");
+            const repoClient = requireRepoClient(deps, "scan");
             if (typeof req.repo !== "string" || !req.repo.trim()) {
                 throw new HttpError(400, "scan scenario requires a 'repo' field (owner/name or repo URL)");
             }
             return {
-                tools: [...repoToolsFor(deps.repoClient, parseRepo(req.repo)), nowTool()],
+                tools: [...repoToolsFor(repoClient, parseRepo(req.repo)), nowTool()],
+                // #196:头注的「工具集即边界」自此在**最终 roster** 上成立(修前 core 把手带 band 并集进来,
+                // clone-free 承诺只存在于这份声明里)。
+                hands: "none",
                 skills: skillsForScenario(deps.skills, "scan"),
             };
         },
@@ -212,8 +225,11 @@ export function buildScenarios(deps) {
             }
             const objective = typeof req.objective === "string" ? req.objective : "Discuss the task.";
             const businessContext = typeof req.businessContext === "string" ? req.businessContext : undefined;
+            // #196:成员/synthesizer 是纯讨论人格(模板声明零工具),跑在无手 subRunner 上。
+            const hands = "none";
             return {
-                tools: [createTeamTool(deps.subRunner, template, { objective, businessContext })],
+                tools: [createTeamTool(subRunnerFor(deps, hands), template, { objective, businessContext })],
+                hands,
                 skills: skillsForScenario(deps.skills, "team"),
                 promptProvider: teamCoordinatorPrompt,
             };
@@ -224,6 +240,11 @@ export function buildScenarios(deps) {
 export function selectScenario(scenarios, name) {
     return (name && scenarios[name]) || scenarios.default;
 }
+/** 把属主的判别式摊平成 wire 上的两个键(可用臂整键省略原因,契约=「缺席即没有理由」)。 */
+function availabilityFields(deps, toolset) {
+    const verdict = scenarioAvailability(deps, toolset);
+    return verdict.available ? { available: true } : { available: false, unavailableReason: verdict.reason };
+}
 /** 内建五场景详情。default/code/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
  *  fail-loud 语义(缺 GIT_API 配置/principal 即 throw)→ 探针失败落静态表兜底(表↔工厂一致性由测试锁:
  *  测试喂 fake deps 真调工厂对账工具名)。enabled 对内建恒 true(约定②)。 */
@@ -237,7 +258,12 @@ export function builtinScenarioDetails(scenarios, deps) {
         }
     };
     const REPO_TOOLS = ["repo_tree", "repo_read_file", "repo_pull_diff", "Now"];
-    const mk = (name, summary, toolset, tools, promptSummary) => ({ name, source: "builtin", builtin: true, summary, toolset, tools, promptSummary, enabled: true });
+    const mk = (name, summary, toolset, tools, promptSummary) => ({
+        name, source: "builtin", builtin: true, summary, toolset, tools, promptSummary, enabled: true,
+        // [C132]:可用性与上面的静态回退表分家 —— 回退表答的是「工具面长什么样」(缺配置时也照画),
+        // 这两个键答的是「现在点下去会不会 501」。同一份属主判据,内建与 center 两条产线共用。
+        ...availabilityFields(deps, toolset),
+    });
     return {
         code: mk("code", "编码主场景([891] 出厂缺省;CC 编码 persona 蒸馏版,default 全量工具面;终验旋钮独立)", "full-body", probe("code", {}, undefined, ["Now"]), deps.brandIdentity
             ? "Sema 产品身份 + core 编码完全体提示词(CODE_AGENT persona+自治自检;CC 血统对表)"
@@ -250,7 +276,7 @@ export function builtinScenarioDetails(scenarios, deps) {
 }
 /** center 条目详情(有效性判定与 centerScenarios 完全同款:无效条目既不进 overlay 也不进详情——
  *  保证约定①「详情显示的来源=运行实际用的定义」永不错位)。 */
-export function centerScenarioDetails(specs, builtinNames) {
+export function centerScenarioDetails(specs, builtinNames, deps) {
     const out = {};
     for (const spec of specs ?? []) {
         if (spec.enabled === false)
@@ -270,24 +296,62 @@ export function centerScenarioDetails(specs, builtinNames) {
             // 恒空串;字段本身保留(builtin 条目仍有真值,wire 形不变)。
             promptSummary: "",
             enabled: true,
+            // [C132]:center 声明的 repo 型场景与内建的 scan/code-review 受**同一份**判据管辖
+            // ——overlay 不是判据的第二属主。
+            ...availabilityFields(deps, spec.toolset),
         };
     }
     return out;
 }
 const TOOLSETS = {
-    none: { build: () => [nowTool()] },
+    none: { build: () => [nowTool()], hands: "none" },
     "repo-readonly": {
         requiresRepo: true,
+        hands: "none",
         build: (deps, req) => {
-            if (!deps.repoClient)
-                throw new HttpError(501, "this scenario needs GIT_API_BASEURL configured");
+            const repoClient = requireRepoClient(deps, "this");
             if (typeof req.repo !== "string" || !req.repo.trim()) {
                 throw new HttpError(400, "this scenario requires a 'repo' field (owner/name or repo URL)");
             }
-            return [...repoToolsFor(deps.repoClient, parseRepo(req.repo)), nowTool()];
+            return [...repoToolsFor(repoClient, parseRepo(req.repo)), nowTool()];
         },
     },
 };
+const SCENARIO_AVAILABLE = { available: true };
+/**
+ * 🔴 场景可用性的**唯一属主**。列举面(`ScenarioDetail.available` / `unavailableReason`)与请求面
+ * ({@link requireRepoClient} 的 501 拒绝臂,三处调用点)都只从这里取值——两处各写一份就是本仓反复
+ * 吃过的「同一语义两个属主」病:判据一漂,列举面开始说谎而没人先红。一致性由 capabilities.test 的
+ * **对表格**逐名钉住(`available:false` ⟺ 良性请求真吃 501),而不是靠这段注释。
+ *
+ * 判据键 = **toolset**:内建详情与 center 条目都带这个字段,故两条产线天然共用同一份判据。
+ * `requiresRepo` 的 toolset 需要部署配好 git 后端(`GIT_API_BASEURL` ⇒ `deps.repoClient`)。
+ * 词表外的 toolset(内建的 `full-body`/`team`)不依赖后端 ⇒ 恒可用。
+ */
+export function scenarioAvailability(deps, toolset) {
+    if (TOOLSETS[toolset]?.requiresRepo === true && deps.repoClient === undefined) {
+        return { available: false, reason: "git_client_unconfigured" };
+    }
+    return SCENARIO_AVAILABLE;
+}
+/** 拒绝文案的唯一属主:闭集穷举 switch(新增原因词不在这里表态即编译红)。 */
+export function scenarioUnavailableMessage(reason, scenarioLabel) {
+    switch (reason) {
+        case "git_client_unconfigured":
+            return `${scenarioLabel} scenario needs GIT_API_BASEURL configured`;
+    }
+}
+/** repo 型场景取 git 客户端的唯一口(三处场景工厂同源)。不可用 ⇒ 按属主给的原因与文案 501 响亮拒。 */
+function requireRepoClient(deps, scenarioLabel) {
+    const client = deps.repoClient;
+    if (client !== undefined)
+        return client;
+    const verdict = scenarioAvailability(deps, "repo-readonly");
+    // 判成 available 却没有客户端 = 属主与消费面脱钩(对表格会先红)。此处仍 fail-loud,不静默放行。
+    throw new HttpError(501, verdict.available
+        ? `${scenarioLabel} scenario has no repo client although the availability owner reports it available (wiring defect)`
+        : scenarioUnavailableMessage(verdict.reason, scenarioLabel));
+}
 export const SCENARIO_NAME_RE = /^[a-z][a-z0-9-]{1,31}$/;
 // ([1053] registry-core 0.10.15:SCENARIO_PROMPT_MAX 随 ScenarioEntry.prompt 一并退役)
 /**
@@ -316,6 +380,7 @@ export function centerScenarios(deps, specs, builtinNames, logger) {
         const name = spec.name;
         overlay[name] = (req) => ({
             tools: toolset.build(deps, req),
+            hands: toolset.hands, // #196:表态随 toolset 走(center 声明面不可自选 hands —— 能力仍是代码定死的)
             skills: skillsForScenario(deps.skills, name),
         });
         if (builtinNames.includes(name))
@@ -324,13 +389,12 @@ export function centerScenarios(deps, specs, builtinNames, logger) {
     return { overlay, shadows };
 }
 function codeReview(deps, req) {
-    if (!deps.repoClient)
-        throw new HttpError(501, "code-review scenario needs GIT_API_BASEURL configured");
+    const repoClient = requireRepoClient(deps, "code-review");
     if (typeof req.repo !== "string" || !req.repo.trim()) {
         throw new HttpError(400, "code-review scenario requires a 'repo' field (owner/name or repo URL)");
     }
     const coords = parseRepo(req.repo);
-    const repoTools = repoToolsFor(deps.repoClient, coords);
+    const repoTools = repoToolsFor(repoClient, coords);
     const skills = skillsForScenario(deps.skills, "code-review");
     const objective = typeof req.objective === "string" ? req.objective : "Review this repository.";
     // Tiering: `council: true` runs the multi-lens council (L1 parallel lenses + L3 arbiter) — for
@@ -340,11 +404,14 @@ function codeReview(deps, req) {
     // (deterministic + cheaper + cacheable; see design/35). For OPEN-ENDED tasks where the decomposition
     // isn't known, core's `createSubagentTool` (model-driven self-delegation, with maxDepth / isolated
     // context / compressed-report guardrails) is the right tool — wire it in a dedicated scenario then.
+    // #196:两条腿(直评 / council)都声明 none —— 直评腿的 lead 只读仓库工具,council 腿的 lead 只调
+    // run_council;lens/arbiter 子任务同样只读仓库,故 council 工具拿无手 subRunner。
+    const hands = "none";
     if (req.council === true) {
         const rounds = clampRounds(req.rounds); // finite-guarded (NaN/±Inf → undefined → council default 1)
         return {
             tools: [
-                createCouncilTool(deps.subRunner, repoTools, objective, {
+                createCouncilTool(subRunnerFor(deps, hands), repoTools, objective, {
                     metrics: deps.metrics,
                     logger: deps.logger,
                     debate: req.debate === true, // L1+L2+L3 (peer debate) vs L1+L3
@@ -355,11 +422,12 @@ function codeReview(deps, req) {
                     ...(rounds !== undefined ? { rounds } : {}),
                 }),
             ],
+            hands,
             skills,
             promptProvider: coordinatorPrompt,
         };
     }
-    return { tools: repoTools, skills, promptProvider: directReviewerPrompt };
+    return { tools: repoTools, hands, skills, promptProvider: directReviewerPrompt };
 }
 const reviewBody = "Produce ONE prioritized review: a short summary, then findings grouped by severity " +
     "(blocker / major / minor), each with `path:line`, the problem, and a concrete fix. Cite real code — never invent files or symbols.";

package/dist/fleet/fleet-terminal-window.js

@@ -144,8 +144,10 @@ function evictIfIdle(store, scope, st) {
  */
 /** [3156] 轮2 真红的修:进程内终态行 seed 缓存 —— **写路径顺手喂**(publishFleet 的 terminal 臂),
  *  读侧零库查询零时序竞态。存在理由:durable pull 的查询键是 caller 的 scope,而 fleetWide 连接
- *  (无 auth 部署恒是)的可见性判据放行**全部** scope —— 查询键与可见性判据不同源,引擎铸行的
- *  scope("anon:shell-live")永远不等于 caller 侧的 "default",pull 恒 miss。seed 缓存按「发生过什么」
+ *  (无 auth 部署恒是)的可见性判据放行**全部** scope —— 查询键与可见性判据不同源。行 scope 的值
+ *  = 提交方自报的 principal 经引擎透传("anon:shell-live" 是 cli 壳在本地单用户模式**自发的 header
+ *  值**,引擎只做 scope=principal 赋值,不发明该字面量;[3225] 后续侦察定谳,勿再写「引擎铸」),
+ *  它永远不等于 caller 读侧的 "default",pull 恒 miss。seed 缓存按「发生过什么」
  *  记(与订阅方无关),读侧再过各连接自己的 visW。不是活跃集:bus 的 Map 零触碰,单写者不变量原样。
  *  有界:行数 ≤ MAX_ROWS×2、窗长同 WINDOW_MS,超界丢最旧。 */
 const seededTerminalRows = [];
@@ -174,11 +176,12 @@ function seededRowsInWindow() {
 export async function recentTerminalWorkflowRows(store, scope, pullScope) {
     // [3156]:seed 缓存 = 本进程生命周期内全部终态(含 boot recover 判死)的同源可达径——fleetWide 连接
     // (scope=null,可见性判据放行全 scope)取 seed **全量**,并以 `pullScope`(caller principal,尽力形)
-    // 做 durable pull 兜底:pull 的查询键与引擎铸行 scope 可能不同源(cli 轮2 实测 "default" vs
-    // "anon:shell-live" 恒 miss),中了是增益、中不了还有 seed——两径并集,谁都不当唯一真源。
+    // 做 durable pull 兜底:pull 的查询键与行 scope(提交方自报 principal 的透传值)可能不同源
+    // (cli 轮2 实测 "default" vs 壳自发的 "anon:shell-live" 恒 miss),中了是增益、中不了还有 seed
+    // ——两径并集,谁都不当唯一真源。
     // scoped 连接:seed 按本 scope 滤 + durable pull 本 scope(跨进程兜底)。
-    // [3193] 病理3:seed 侧不再按 caller scope 预滤——那是第二份可见性判据(F1 病族),与引擎铸行
-    // scope("anon:shell-live" vs caller "default")恒 miss。本函数只产**候选集**;可见/擦除由路由的
+    // [3193] 病理3:seed 侧不再按 caller scope 预滤——那是第二份可见性判据(F1 病族),与行 scope
+    // (壳自发 "anon:shell-live" vs caller "default")恒 miss。本函数只产**候选集**;可见/擦除由路由的
     // visW/stripW 同一套判据裁(与快照活行、增量帧同源),窗与 MAX_ROWS 双界仍在。
     const seeded = seededRowsInWindow();
     const effectiveScope = scope ?? pullScope;

package/dist/hooks/hook-runner.js

@@ -1395,6 +1395,17 @@ export function composeHooks(deployment, task) {
     const t = task;
     const out = {};
     if (d.preToolUse || t.preToolUse) {
+        // 🔴 观察标(core 5.20.0 `Hooks.preToolUseObservational`)的传承折:复合体只有在**每一只在场的
+        // `preToolUse` 都声明了纯观察**时才继续声明。方向是 fail-closed 的——
+        //  · 漏传承(该声明没声明)= 退回 5.19.0 行为:多一条链条目,跨副本赎回被响亮拒(吵,但不失守);
+        //  · 错传承(有真裁决者却声明了)= core 把复合体的判词整条**拒绝采纳**,客户端 `settings.hooks`
+        //    的 deny/ask 静默蒸发 —— 这是安全轴上的静默 fail-open,比原缺陷坏得多。
+        // 故判据是「无人反对」而不是「有人赞成」:任一在场面未声明 ⇒ 复合体不声明。
+        // 缺席的槽不算反对票(`d.preToolUse` 不在 = 部署侧没有面可裁决,不影响 task 侧的性质)。
+        const bothObservational = (d.preToolUse === undefined || d.preToolUseObservational === true) &&
+            (t.preToolUse === undefined || t.preToolUseObservational === true);
+        if (bothObservational)
+            out.preToolUseObservational = true;
         out.preToolUse = async (toolName, input, ctx) => {
             let current = input;
             const contexts = [];

package/dist/http/route-ctx.d.ts

@@ -15,7 +15,7 @@
  * 本文件对 server.ts 的引用一律 `import type`(tsc 擦除,非装载边)。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { TaskStream, TaskSpec, TaskResult, QuestionAnswer, CheckpointToken, ResumeOutcome } from "@sema-agent/core";
+import type { TaskStream, TaskSpec, TaskResult, QuestionAnswer, CheckpointToken, ResumeOutcome, Runner } from "@sema-agent/core";
 import type { FlatServiceDeps, RequestAuth } from "./server.js";
 import type { TaskRequestBody, DecideBinding } from "./wire-types.js";
 import type { IdempotencyCache } from "./idempotency.js";
@@ -82,6 +82,9 @@ export interface RouteRequestState {
  *  命名后好处不只是过 B4 门:两个消费域现在都能对同一个符号做 `import type` 标注,而不是各自重推断结构。 */
 export interface PreparedTaskSubmission {
     spec: TaskSpec;
+    /** #196:本次提交的执行 Runner —— 场景 hands=none 时是无手孪生(不挂 executionEnvFactory)。
+     *  两个消费域一律用它,不再直接摸 `deps.runner`(那正是「场景表态了、执行点没听」的缝)。 */
+    runner: Runner;
     auth?: RequestAuth;
     verify?: VerifyRoundsSpec;
     cascade?: boolean;
@@ -91,6 +94,9 @@ export interface PreparedTaskSubmission {
 /** B4①(命名化):`driveResumeIntoRunLog` 的入参形(resume 家族共用)——原为 9 成员内联匿名对象。 */
 export interface DriveResumeArgs {
     token: CheckpointToken;
+    /** #196:续跑腿的执行 Runner。resume 会用同一条 resolveSpec 重解析场景,故与首跑选同一只 —— 否则
+     *  一次续跑就把手带 band 重新 mount 回来(收窄只在首跑成立 = 没成立)。 */
+    runner: Runner;
     sessionId: string;
     principal: string | undefined;
     fleetScope: string;

package/dist/http/routes/fleet.js

@@ -48,8 +48,12 @@ async function handleFleetBody(req, res, url, ctx, miss) {
         // #189:终态行窗的 durable 读交给 streamFleet 在**订阅注册之后**做(见那里的缓冲段)——放在这里
         // (开流之前)会让"帧已扇出而本连接尚未订阅"的窗口凭空多出一个读的时长,codex R1-H1 红先复现过。
         // [3156] 轮2 真红修:终态窗的查询键必须与可见性判据**同源**——fleetWide 连接(callerScope=null,
-        // visW 放行全 scope)此前窗却按 caller principal("default")查,而行的 scope 是引擎铸的
-        // ("anon:shell-live")⇒ durable pull 恒 miss。fleetWide ⇒ null(窗走进程内 seed 缓存,全 scope)。
+        // visW 放行全 scope)此前窗却按 caller principal("default")查,而行的 scope 是提交方自报
+        // principal 的透传值(cli 壳本地单用户模式自发 "anon:shell-live";引擎不发明该字面量,[3225]
+        // 后续侦察定谳)⇒ durable pull 恒 miss。fleetWide ⇒ null(窗走进程内 seed 缓存,全 scope)。
+        // 读侧 `?? "default"` 三处与 core 写侧铸链同源(core prepare-task `spec.principal ?? "default"`,
+        // 其 CHANGELOG 成文「Single-tenant spelling is an explicit scope:"default"」)——在 core 撤其
+        // 写侧铸点前,server 单方面撤读侧会把无主部署的 durable pull 面弄瞎,故保持同源不动。
         await streamFleet(req, res, deps.fleetBus, fleetWide ? null : (principal ?? "default"), callerSession || null, observeOnly ? undefined : deps.workflowCompletionInbox, { store: deps.workflowRunStore, scope: fleetWide ? null : (principal ?? "default"), pullScope: principal ?? "default", ready: deps.fleetRecoveryDone });
         return;
     }

package/dist/http/routes/runs.js

@@ -326,7 +326,8 @@ async function handleRunsBody(req, res, url, ctx, miss) {
                 rootTaskId: taskId,
                 ...fleetRunLabels(prepared.spec.objective), // BC-1: name = short objective preview (description = live-activity, set by the publisher onEvent tool_start)
             });
-            void runInBackground(deps.runner, { ...prepared.spec, sessionId }, runStore, taskId, deps.metrics, prepared.auth?.principal, prepared.verify, prepared.cascade ? cascadeConfig(deps.config.cascadeLadder, prepared.spec.limits?.maxCostUsd) : undefined, deps.instrumentDegenerate, deps.planCacheProbe, deps.config.traceThinking, inflightRuns, preemptableRuns, steerableRuns, deps.modelUsage, deps.elicitation, // E23: per-run elicitation context (onElicit routes inbound MCP elicitations to this run's stream)
+            void runInBackground(prepared.runner, // #196:场景 hands 判别位选出的 Runner(hands=none ⇒ 无手孪生)
+            { ...prepared.spec, sessionId }, runStore, taskId, deps.metrics, prepared.auth?.principal, prepared.verify, prepared.cascade ? cascadeConfig(deps.config.cascadeLadder, prepared.spec.limits?.maxCostUsd) : undefined, deps.instrumentDegenerate, deps.planCacheProbe, deps.config.traceThinking, inflightRuns, preemptableRuns, steerableRuns, deps.modelUsage, deps.elicitation, // E23: per-run elicitation context (onElicit routes inbound MCP elicitations to this run's stream)
             gatedPrincipal(req, deps.config) ?? null, // E23: the VERIFIED principal that may answer (same source the respond gate uses — never the spoofable header)
             captureTurnAnchor, // E18: per-turn (message eventId → leaf entryId) anchor capture
             fleetPub, // MF-Fleet: the run-scoped fleet-row publisher (onStart/onEvent/onTerminal across all legs)

package/dist/http/routes/tasks.js

@@ -601,7 +601,7 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                             // (mid-flight ctrl+b) and, as a natural consequence, steer/compact — now reach a mid-turn
                             // INTERACTIVE run too (previously only the bg + resume legs registered). Deregistered in the
                             // outer finally (with the fleet settle), so an early throw can't leak a stale handle.
-                            const liveStream = deps.runner.runTaskStream({ ...prepared.spec, signal: ac.signal }, undefined, fwdInternals);
+                            const liveStream = prepared.runner.runTaskStream({ ...prepared.spec, signal: ac.signal }, undefined, fwdInternals); // #196:场景 hands 判别位选出的 Runner
                             liveStreamRef = liveStream;
                             if (durableTaskId)
                                 steerableRuns.set(durableTaskId, liveStream);
@@ -1283,9 +1283,10 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                     // ── B3 ── 原文此处是一处三层三元,把三条模型驱动腿挤在五行里。三腿具名化后判别顺序
                     // (verify → cascade → plain)、短路语义、传参**逐字不变**;`runWithVerification` 仍是整对象
                     // 直传(快审 F1:cost 顶不在重建中丢失),`runCascade` 仍从操作员梯子 + 本任务预算现算配置。
-                    const verifyLeg = (v) => runWithVerification(deps.runner, specWithSignal, v);
-                    const cascadeLeg = () => runCascade(deps.runner, specWithSignal, cascadeConfig(deps.config.cascadeLadder, prepared.spec.limits?.maxCostUsd));
-                    const plainLeg = () => deps.runner.runTask(specWithSignal);
+                    // #196:三腿一律跑 `prepared.runner`(场景 hands 判别位选出的那只),不再直接摸 deps.runner。
+                    const verifyLeg = (v) => runWithVerification(prepared.runner, specWithSignal, v);
+                    const cascadeLeg = () => runCascade(prepared.runner, specWithSignal, cascadeConfig(deps.config.cascadeLadder, prepared.spec.limits?.maxCostUsd));
+                    const plainLeg = () => prepared.runner.runTask(specWithSignal);
                     result = await withPrincipal(principal, () => prepared.verify ? verifyLeg(prepared.verify) : prepared.cascade ? cascadeLeg() : plainLeg());
                 }
                 finally {

package/dist/http/server.d.ts

@@ -77,6 +77,12 @@ export interface ServiceCoreDeps {
     resolveSpec: (body: TaskRequestBody, req: IncomingMessage | undefined, auth?: RequestAuth, opts?: {
         leg?: "fresh" | "resume";
     }) => TaskSpec | Promise<TaskSpec>;
+    /**
+     * #196 场景 hands lane 选路:按 `resolveSpec` 刚产出的 TaskSpec 取本任务的执行 Runner。
+     * 装配点(main.ts)把「场景判别位 → Runner 对」的映射整只闭包传进来 —— 本层不解释场景,只取用。
+     * 缺席 ⇒ 恒 {@link ServiceDeps.runner}(单 Runner 部署形 = #196 之前的行为,逐字不变;测试桩即此形)。
+     */
+    runnerFor?: (spec: TaskSpec) => Runner;
 }
 /** **durable 持久面**:每个键 present ⇔ 对应路由/能力位在场,absent ⇒ 501(诚实缺席),
  *  绝不静默降级。装配点 = main.ts 的 store backend 开箱段。 */

package/dist/http/server.js

@@ -1,7 +1,7 @@
 import http from "node:http";
 import { once } from "node:events";
 import { createHash } from "node:crypto";
-import { uuidv7, isThinkingLevel, expandTiers, resumeWithVerification, CheckpointError, HAND_TOOL_EFFECTS, defaultTaskRegistry, validatePendingSteer, subscribeWorkflow, GLOBAL_USAGE_KEY, usageRetryAfterMs } from "@sema-agent/core";
+import { uuidv7, isThinkingLevel, expandTiers, resumeWithVerification, CheckpointError, HAND_TOOL_EFFECTS, RETIRED_TOOL_NAMES, defaultTaskRegistry, validatePendingSteer, subscribeWorkflow, GLOBAL_USAGE_KEY, usageRetryAfterMs } from "@sema-agent/core";
 import { decideParkedAgent, findParkedAgentForCheckpoint } from "../parked-decide.js";
 import { matchCatalogModel } from "../model-select.js";
 import {} from "../config-center/facade.js";
@@ -107,7 +107,10 @@ const MAX_IMAGE_BASE64_BYTES = 6 * 1024 * 1024; // a single inline image's base6
 // Hand (executionEnv) tool names core mounts at the runner when an executionEnvFactory is configured — the
 // authoritative set is core `HAND_TOOL_EFFECTS` (root-exported since 1.70). These are NEVER in spec.tools, so
 // the durable-resume satisfiability pre-check must union them when remote exec is on.
-const HAND_TOOL_NAMES = Object.keys(HAND_TOOL_EFFECTS);
+// [3248]: filter RETIRED_TOOL_NAMES — core 5.21.0 left retired "MultiEdit" in HAND_TOOL_EFFECTS; a retired
+// name is never mounted, so keeping it here would let the pre-check claim satisfiability for a tool that
+// cannot exist (same derivation hygiene as hands-lane.ts HANDS_BAND_TOOL_NAMES).
+const HAND_TOOL_NAMES = Object.keys(HAND_TOOL_EFFECTS).filter((n) => !RETIRED_TOOL_NAMES.has(n));
 /** [1245] codex-3/4 — the REOPEN-class resume failures: core's runtask reopened the checkpoint (store.reopen,
  *  dist-read) BEFORE returning this failed result, so the park is STILL PENDING and decidable. Everything
  *  downstream must treat these as a re-park, never terminal: the durable event log writes `suspended` (not
@@ -615,6 +618,11 @@ export function createHttpServer(rawDeps) {
             return;
         sendError(res, 404, "not_found.route", "not found");
     }
+    /** #196:本任务跑哪只 Runner —— 由装配点按场景 hands 判别位裁定(main.ts 的 `runnerFor` 闭包)。
+     *  seam 缺席 = 单 Runner 部署形(#196 之前的行为逐字不变),不是降级臂。 */
+    function runnerFor(spec) {
+        return deps.runnerFor?.(spec) ?? deps.runner;
+    }
     /** Read + validate the body, authorize, and build the spec. Returns null if it already responded. */
     async function prepareSpec(req, res) {
         const body = (await readJson(req));
@@ -1205,7 +1213,10 @@ export function createHttpServer(rawDeps) {
         }
         try {
             const auth = deps.authorize ? await deps.authorize({ req, body }) : undefined;
-            return { spec: await deps.resolveSpec(body, req, auth, { leg: "fresh" }), auth, verify, cascade, jobId: body.jobId, body };
+            const spec = await deps.resolveSpec(body, req, auth, { leg: "fresh" });
+            // #196:执行 Runner 与 spec 同一次解析产出 —— 两个消费域(tasks 同步/流式、runs 异步)拿的都是这一只,
+            // 不各自再问一遍(再问 = 两处判别,正是漂移的成因)。
+            return { spec, runner: runnerFor(spec), auth, verify, cascade, jobId: body.jobId, body };
         }
         catch (err) {
             if (err instanceof HttpError) {
@@ -1413,9 +1424,12 @@ export function createHttpServer(rawDeps) {
         // Typed pre-check: the pending tool must still exist in the rebuilt config; a scenario
         // redeploy that removed it means the approval can no longer be applied — fail clearly, never a 500/silent.
         // The "hand" tools are NOT in spec.tools — core mounts them at the runner from the executionEnvFactory
-        // (core `HAND_TOOL_EFFECTS`, not re-exported from the package root → mirrored here). When this deployment
-        // has remote exec configured the rebuilt task WILL expose them, so union them in; else gating a hand tool
-        // (the common code-agent case) would always 422 on resume. Keep in sync with core's HAND_TOOL_EFFECTS.
+        // (`HAND_TOOL_NAMES` above derives from core's root-exported `HAND_TOOL_EFFECTS`; nothing is mirrored here).
+        // When this deployment has remote exec configured the rebuilt task WILL expose them, so union them in; else
+        // gating a hand tool (the common code-agent case) would always 422 on resume.
+        // #196 旁注:本 union 只看部署有没有 remoteExec,不看本任务的 hands lane —— 对 hands=none 的任务这是
+        // **过近似**(那些工具根本没 mount,也就不可能有它们的 park 行),只影响 422 的 UX 宽严,不放大任何权限;
+        // band 的**完整**名单(含 Monitor/EnterWorktree/… 这些不在 effects 表里的)在 capabilities/hands-lane.ts。
         // [2380] RB-476(5.0.0):Q6 折叠预检退役——满足性匹配按 RAW 名。pre-floor 旧名 checkpoint
         // (`bash`/`run_workflow` 等)在此 422 诚实拒,与 core 自己的 resume.tool_unavailable 同方向
         // ([2364] 令:耐久面响亮牺牲 + P-7 重开,不静默兜)。现役名恒自映射。
@@ -1510,7 +1524,7 @@ export function createHttpServer(rawDeps) {
         // heartbeat, the resumeStream / resumeWithVerification loop, CheckpointError classification, re-suspend vs
         // terminal drive. This HITL /decide path supplies a `policy_ask` outcome; the scheduler preempt path supplies
         // a `resource_limit`/continue one — sharing this prevents the two resume entries from drifting.
-        return driveResumeIntoRunLog({ token, sessionId: cp.sessionId, principal: auth.principal, fleetScope: resumeFleetScope(req, auth), taskConfig, resumeObjective, outcome, verifyRounds, ...(onResumeCommitted ? { onResumeCommitted } : {}) });
+        return driveResumeIntoRunLog({ runner: runnerFor(spec), token, sessionId: cp.sessionId, principal: auth.principal, fleetScope: resumeFleetScope(req, auth), taskConfig, resumeObjective, outcome, verifyRounds, ...(onResumeCommitted ? { onResumeCommitted } : {}) });
     }
     /**
      * The resume-drive machinery SHARED by `resumeCheckpoint` (operator /decide, `policy_ask`) and `resumePreempted`
@@ -1524,7 +1538,8 @@ export function createHttpServer(rawDeps) {
      * (setSuspended, keep the lock) vs a terminal (setTerminal), and returns the HTTP {status, body}.
      */
     async function driveResumeIntoRunLog(args) {
-        const { token, sessionId, principal, fleetScope, taskConfig, resumeObjective, outcome, verifyRounds } = args;
+        // #196:`runner` = 本次续跑的执行 Runner(场景 hands 判别位裁定,与首跑同源;见 DriveResumeArgs 注)。
+        const { runner: legRunner, token, sessionId, principal, fleetScope, taskConfig, resumeObjective, outcome, verifyRounds } = args;
         // ── #151 车3 刀 3b:resume 腿的 `legKey` 真值(设计稿 §3.2′)──────────────────────────────────
         // 一次 park→resume 的 checkpoint token **就是**这条腿的天然身份:同一 token 重投 = 同一条腿(幂等,
         // askId 不变);新 park ⇒ 新 token ⇒ 新腿 ⇒ 新 askId ⇒ **重新征询**(§3.3「resume 只重放未完成兄弟」)。
@@ -1732,7 +1747,7 @@ export function createHttpServer(rawDeps) {
                 if (verifyRounds !== undefined) {
                     // resumeWithVerification runs the SAME pre-CAS guard + atomic CAS as resume() internally, so a lost
                     // CAS rejects with CheckpointError before any work — handled by the catch below, same as the stream path.
-                    const vr = await resumeWithVerification(deps.runner, token, outcome, { ...taskConfig, signal: cancelCtrl.signal, preemptSignal: preemptCtrl.signal }, resumeObjective, verifyRounds); // 快审 F1:整对象直传
+                    const vr = await resumeWithVerification(legRunner, token, outcome, { ...taskConfig, signal: cancelCtrl.signal, preemptSignal: preemptCtrl.signal }, resumeObjective, verifyRounds); // 快审 F1:整对象直传
                     let safe = stripCheckpointToken(vr);
                     // 🔴 A re-suspend on a LATER gate is NOT terminal: core maps it to status:"failed" +
                     // verification.unverifiedReason:"suspended" with the checkpoint token still live. Treat it exactly like
@@ -1828,7 +1843,7 @@ export function createHttpServer(rawDeps) {
                     // (`++seq` is a sync increment — sink-vs-loop appends get unique seqs); only when a durable log exists.
                     // false once this leg settles — notifications after that take the durable-inbox path.
                     resumeLegLive = true;
-                    const stream = await deps.runner.resumeStream(token, outcome, { ...taskConfig, signal: cancelCtrl.signal, preemptSignal: preemptCtrl.signal }, {
+                    const stream = await legRunner.resumeStream(token, outcome, { ...taskConfig, signal: cancelCtrl.signal, preemptSignal: preemptCtrl.signal }, {
                         onForwardEvent: (e) => {
                             fleetPub?.onForwardEvent(e);
                             // S2 live tail(复审 #1:forward sink 有三条腿——resume 腿上 spawn 的 bg 子代同样带
@@ -2256,7 +2271,7 @@ export function createHttpServer(rawDeps) {
         // A resource-suspended task that was submitted with verify:true is re-gated on completion (parity with the
         // HITL path — the flag rides the persisted ctx.body).
         const verifyRounds = verifyRoundsFromBody(ctx.body);
-        return driveResumeIntoRunLog({ token, sessionId: cp.sessionId, principal: auth.principal, fleetScope: resumeFleetScope(req, auth), taskConfig, resumeObjective, outcome: { gate: "resource_limit", decision: "continue" }, verifyRounds });
+        return driveResumeIntoRunLog({ runner: runnerFor(spec), token, sessionId: cp.sessionId, principal: auth.principal, fleetScope: resumeFleetScope(req, auth), taskConfig, resumeObjective, outcome: { gate: "resource_limit", decision: "continue" }, verifyRounds });
     }
     /** design/144 §3:wake 一个 task_done 纯 park——非门决策,解除 park 消费消息续跑。owner 门:非 operator
      *  只能 wake 自己 scope 的 park(404 无 oracle);core 端 gate_pending/nothing_to_deliver 双拒兜底。 */
@@ -2314,6 +2329,7 @@ export function createHttpServer(rawDeps) {
         const spec = await deps.resolveSpec({ ...ctx.body, resumeAt: undefined }, req, auth);
         const { objective: resumeObjective, sessionId: _sessionId, ...taskConfig } = spec;
         return driveResumeIntoRunLog({
+            runner: runnerFor(spec),
             token,
             sessionId: cp.sessionId,
             principal: auth.principal,
@@ -2379,7 +2395,7 @@ export function createHttpServer(rawDeps) {
             ...(editedPlan !== undefined ? { editedPlan } : {}),
             ...(reason ? { reason } : {}),
         };
-        return driveResumeIntoRunLog({ token, sessionId: cp.sessionId, principal: auth.principal, fleetScope: resumeFleetScope(req, auth), taskConfig, resumeObjective, outcome, verifyRounds });
+        return driveResumeIntoRunLog({ runner: runnerFor(spec), token, sessionId: cp.sessionId, principal: auth.principal, fleetScope: resumeFleetScope(req, auth), taskConfig, resumeObjective, outcome, verifyRounds });
     }
     function recordTaskResult(result) {
         deps.metrics?.inc("tasks_total", { status: result.status });