@sema-agent/server 7.89.0 → 7.91.1

package/dist/adoption/plan.js

@@ -256,6 +256,17 @@ export const REBIND_LEGS = [
         residualKey: ["handle"],
         why: "信箱行的 scope 分区。`scope_key`(字节列)与 `scope`(可读列)存的是同一个值,必须一起改",
     },
+    {
+        leg: "mailbox_tombstone#scope_key",
+        table: "mailbox_tombstone",
+        kind: "bulk-rebind",
+        action: "bucket-rebind",
+        columns: ["scope_key"],
+        matchColumn: "scope_key",
+        encoding: "verbatim",
+        residualKey: ["handle"],
+        why: "S-72 收件人墓碑(预删除态)。**必须与 `mailbox` 同迁**:漏迁它 = 收编后新身份下的会话盒**永久静默拒收**(append 撞一条属于旧身份的墓碑),而那正是墓碑这个机制唯一的失效方向;本表无 `scope` 可读列(与 mailbox_message 同形)",
+    },
     {
         leg: "mailbox_message#scope_key",
         table: "mailbox_message",

package/dist/boot/fatal-exit.d.ts

@@ -0,0 +1,3 @@
+/** `err` 的 fatal 日志文本:`String(err)` 过形状律一次。纯函数,零副作用。 */
+export declare function buildFatalErrorText(err: unknown): string;
+//# sourceMappingURL=fatal-exit.d.ts.map

package/dist/boot/fatal-exit.js

@@ -0,0 +1,5 @@
+import { redactSecrets } from "../trace/redact.js";
+export function buildFatalErrorText(err) {
+    return redactSecrets(String(err));
+}
+//# sourceMappingURL=fatal-exit.js.map

package/dist/boot/resolve-spec.js

@@ -303,6 +303,7 @@ export function createResolveSpec(ctx) {
             ...(retainBackgroundProcessesFromBody(body.retainBackgroundProcesses, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null })) === true
                 ? { retainBackgroundProcesses: true }
                 : {}),
+            ...(body.excludeAllTools === true ? { excludeAllTools: true } : {}),
             ...(() => { const v = toolNameListFromBody(body.excludeTools); return v ? { excludeTools: v } : {}; })(),
             ...(() => { const v = toolNameListFromBody(body.deferTools); return v ? { deferTools: v } : {}; })(),
             ...(() => { const v = promptProfileFromBody(body.promptProfile); return v ? { promptProfile: v } : {}; })(),
@@ -541,6 +542,7 @@ export function createResolveSpec(ctx) {
             declaredCapable: effectiveMemoryPersistenceCapable(config),
             hands: gated.hands,
             handsReadOnly: governed.handsReadOnly === true,
+            excludeAllTools: governed.excludeAllTools === true,
             excludeTools: governed.excludeTools,
             remoteExecutionEnv: config.remoteExec !== undefined,
         })) {

package/dist/boot/runner-deps.d.ts

@@ -27,6 +27,7 @@ import type { QuestionCoordinator } from "../question.js";
 import type { ToolApprovalCoordinator } from "../tool-approval.js";
 import type { MemoryBackend } from "@sema-agent/core";
 import type { MemorySyncRunner } from "../memory-sync-client.js";
+import type { MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 /**
  * `RunnerDeps.onAsk` 的装配([ref] 件4:从内联闭包提为具名导出,**纯 testability 重构、零行为变化**)。
  *
@@ -86,6 +87,11 @@ export interface RunnerDepsCtx {
     rosterStore: RunnerDeps["rosterStore"];
     backgroundAgentStore: RunnerDeps["backgroundAgentStore"];
     mailboxStore: RunnerDeps["mailboxStore"];
+    /**
+     * [ref]:mailbox 的**收件人生命周期面**(预删除态)。与 `mailboxStore` **成对**(`boot/stores.ts` 同段铸,
+     * 两键同在场/同缺席);是 peer 目录席三个合取项之一,也是会话删除级联落墓碑的那一口。
+     */
+    mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
     /** [ref]-T1:治理窗账本店(USAGE_WINDOWS 配置时才在场;与 config.usageWindows 成对进 deps)。 */
     usageWindowStore: RunnerDeps["usageWindowStore"];
     brain: ReturnType<typeof createBrain>;

package/dist/boot/runner-deps.js

@@ -13,6 +13,7 @@ import { WorkflowNotifyGate } from "../orchestration/workflow-notify-journal.js"
 import { makeLoadProjectMemory, makeProbeInstructionSources } from "../project-memory.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { buildCrossSessionInboundLayers, crossSessionDialogExpiryOf } from "../cross-session-settings.js";
+import { createPeerDirectory } from "../peer-directory.js";
 export function createRunnerDepsOnAsk(toolApproval) {
     if (!toolApproval)
         return undefined;
@@ -101,6 +102,7 @@ export function createSharedRunnerDeps(ctx) {
 }
 export function createRunnerDeps(ctx) {
     const { config, logger, metrics, localRoot, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine, sessionCaptureRecords, memorySyncRunner, runtimeCapsResolver, fileHistoryStore, permissionRuleStore, fleetBus, workflowRunStore, workflowJournalStore, workflowAgentRegistry, workflowNotifyGate, workflowCompletionInbox, deliverWorkflowCompletion, getRunStore, sessionShellGateExplicitlyOff, } = ctx;
+    const peerSessionLister = sessionStore.listSessions?.bind(sessionStore);
     const memoryEngineIncident = createMemoryEngineIncidentSink({ logger, metrics });
     const sharedRunnerDeps = createSharedRunnerDeps(ctx);
     const workflowModelAllowlist = workflowModelAllowlistFor(config);
@@ -156,6 +158,15 @@ export function createRunnerDeps(ctx) {
         : {};
     const runnerDeps = {
         ...sharedRunnerDeps,
+        peerDirectory: peerSessionLister !== undefined && ctx.mailboxStore !== undefined && ctx.mailboxRecipientLifecycle !== undefined
+            ? createPeerDirectory({
+                lister: peerSessionLister,
+                lifecycle: ctx.mailboxRecipientLifecycle,
+                requirePrincipal: config.requirePrincipal,
+                crossSessionInbound: buildCrossSessionInboundLayers(config),
+                logger,
+            })
+            : undefined,
         onTaskOutcome: outcomeSink
             ? (o) => {
                 metrics.inc("task_outcomes_total", { status: o.status, green: String(o.oracle?.green ?? "unknown") });

package/dist/boot/session-faces.d.ts

@@ -9,6 +9,8 @@ import type { OwnerAwareSessionStore } from "../security.js";
 import type { DeviceStore } from "../device-store.js";
 import { SessionWatchRegistry } from "../session-watch.js";
 import type { TaskListLane } from "./task-list-lane.js";
+import { type RunnerDeps } from "@sema-agent/core";
+import type { MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 export interface SessionFacesCtx {
     config: ServiceConfig;
     logger: Logger;
@@ -31,6 +33,10 @@ export interface SessionFacesCtx {
     deviceStore: DeviceStore | undefined;
     /** per-session cwd/shellEnv 登记簿的清除口(E21 级联的一条腿,codex R1-F1)。缺席 = 装配未接。 */
     dropSessionScoped: ((sid: string) => void) | undefined;
+    /** [ref]:会话盒(`session.<id>`)的信箱 + 它的收件人生命周期面(E21 级联的一条腿)。**成对**在场
+     *  (`boot/stores.ts` 同段铸);缺席 = 本部署无耐久 mailbox ⇒ 无箱可退役。 */
+    mailboxStore: RunnerDeps["mailboxStore"];
+    mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
 }
 export declare function createSessionFaces(ctx: SessionFacesCtx): {
     ownerAware: OwnerAwareSessionStore;

package/dist/boot/session-faces.js

@@ -4,9 +4,9 @@ import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
 import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
-import { defaultTaskRegistry } from "@sema-agent/core";
+import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -79,6 +79,12 @@ export function createSessionFaces(ctx) {
             }
             if (workflowCompletionInbox)
                 await workflowCompletionInbox.purge(sessionId, owner ?? null).catch((err) => logger.warn("workflow_completion_inbox_purge_failed", { sessionId, err: String(err) }));
+            const peerBox = mailboxStore !== undefined && mailboxRecipientLifecycle !== undefined
+                ? { store: mailboxStore, lifecycle: mailboxRecipientLifecycle, scope: owner ?? "default", handle: peerSessionBoxHandle(sessionId) }
+                : undefined;
+            if (peerBox !== undefined) {
+                await peerBox.lifecycle.retireRecipient(peerBox.scope, peerBox.handle, Date.now());
+            }
             await purgeScratchpadDir(config.localDataRoot ?? localRoot, sessionId);
             try {
                 const reaped = defaultTaskRegistry.reapSessionBackground(sessionId, owner ?? "default");
@@ -88,6 +94,8 @@ export function createSessionFaces(ctx) {
             catch (err) {
                 logger.warn("session_background_reap_failed", { sessionId, err: String(err) });
             }
+            if (peerBox !== undefined)
+                await peerBox.store.drop(peerBox.scope, peerBox.handle);
             const historyDeleted = await ownerAware.deleteSession(sessionId, owner);
             sessionWatchRegistry?.dropSession(sessionId);
             return { deleted: historyDeleted || runs.removed > 0 };

package/dist/boot/stage-03-store-backend.d.ts

@@ -4,6 +4,7 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-03-store-backend.js

@@ -2,10 +2,10 @@ import { uuidv7 } from "@sema-agent/core";
 import { openStores } from "./stores.js";
 export async function runStage03(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
-    const { backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, memoryExportBackend, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngineFacts, } = await openStores({ config, logger, metrics, localRoot });
+    const { backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportBackend, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngineFacts, } = await openStores({ config, logger, metrics, localRoot });
     const instanceId = uuidv7();
     const sessionCaptureRecords = backend?.sessionCaptureRecords();
     const sessionCaptureRecordStore = sessionCaptureRecords?.();
-    return { ...ctx, backend, backgroundAgentStore, breakerState, instanceId, mailboxStore, memoryEngine, memoryExportBackend, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecordStore, sessionCaptureRecords, sessionStore, sqlEngineFacts, storeBackendDegraded, taskAttachmentStore, taskListLane, usageWindowStore };
+    return { ...ctx, backend, backgroundAgentStore, breakerState, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportBackend, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecordStore, sessionCaptureRecords, sessionStore, sqlEngineFacts, storeBackendDegraded, taskAttachmentStore, taskListLane, usageWindowStore };
 }
 //# sourceMappingURL=stage-03-store-backend.js.map

package/dist/boot/stage-04-stores.d.ts

@@ -41,6 +41,7 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-05-execution-env.d.ts

@@ -54,6 +54,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-06-runners.d.ts

@@ -115,6 +115,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-06-runners.js

@@ -21,7 +21,7 @@ import { createGovernanceSeams } from "./governance-seams.js";
 import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-authorizer.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 export function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, config, configCenter, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, config, configCenter, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const { elicitation, question, toolApproval, durableEnabled, streamApprovalGate, approvalAskAudit, sendUserFileEmitter, sendFileLedger, sendUserFileToolSpec } = createLiveCoordinators({
         config, logger, backend, sendUserFileTaskEnvs, ruleConsent,
@@ -116,7 +116,7 @@ export function runStage06(ctx) {
         hands: commitHands,
         mcpRevocations,
         sessionShellGateExplicitlyOff: sessionShellGateRegistry.explicitlyOff,
-        config, logger, metrics, localRoot, promptSource: configCenter.promptSource, rosterStore, backgroundAgentStore, mailboxStore, usageWindowStore, brain,
+        config, logger, metrics, localRoot, promptSource: configCenter.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
         pricing, tracer, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine,
         sessionCaptureRecords,
         memorySyncRunner, toolResultStore: runnerOffloadStore, checkpointStore, sessionPolicyStore, runtimeCapsResolver, fileHistoryStore,

package/dist/boot/stage-07-capability-layer.d.ts

@@ -130,6 +130,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-08-reapers.d.ts

@@ -145,6 +145,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-09-leader.d.ts

@@ -177,6 +177,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-09-leader.js

@@ -6,13 +6,13 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryStore, governanceSeams, localRoot, logger, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryStore, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
         config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
         resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore,
-        workflowCompletionInbox, taskListLane,
+        workflowCompletionInbox, taskListLane, mailboxStore, mailboxRecipientLifecycle,
     });
     const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });
     const drainState = { draining: false };

package/dist/boot/stage-10-http-server.d.ts

@@ -177,6 +177,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-10-http-server.js

@@ -37,6 +37,7 @@ export async function runStage10(ctx) {
         taskAttachmentStore: taskAttachmentStore ? taskAttachmentStore : undefined,
         backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
         sessionStorage: ownerAware,
+        peerDirectory: runnerDeps.peerDirectory,
         workflowRunStore: workflowRunStore ? workflowRunStore : undefined,
         workflowAgentSessionIndex: workflowAgentSessionIndex ? workflowAgentSessionIndex : undefined,
         workflowJournalStore: workflowJournalStore ? workflowJournalStore : undefined,

package/dist/boot/stores.d.ts

@@ -4,6 +4,7 @@ import { type MemorySyncRunner } from "../memory-sync-client.js";
 import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import { type MemorySyncStore } from "../plugins/memory-sync-store-pg.js";
+import { type MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 import { type TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import { type StoreBackend } from "../plugins/store-backend.js";
 export interface OpenStoresCtx {
@@ -22,6 +23,7 @@ export declare function openStores(ctx: OpenStoresCtx): Promise<{
     memorySyncCursors: MemorySyncStore | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
+    mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
     taskAttachmentStore: TaskAttachmentStore | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryExportBackend: MemoryBackend | undefined;

package/dist/boot/stores.js

@@ -10,6 +10,7 @@ import { TiDBMemoryHistoryStore, TiDBMemorySyncStore, ensureTiDBMemoryHistorySch
 import { MinioBlobBackend } from "../plugins/blob-backend.js";
 import { PgBackgroundAgentStore, TiDBBackgroundAgentStore, ensurePgBackgroundAgentSchema, ensureTiDBBackgroundAgentSchema } from "../plugins/background-agent-store-sql.js";
 import { PgMailboxStore, TiDBMailboxStore, ensurePgMailboxSchema, ensureTiDBMailboxSchema } from "../plugins/mailbox-store-sql.js";
+import { createDropOnlyRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 import { PgUsageWindowStore, TiDBUsageWindowStore, ensurePgUsageWindowSchema, ensureTiDBUsageWindowSchema } from "../plugins/usage-window-store-sql.js";
 import { PgRosterStore, TiDBRosterStore, ensurePgRosterSchema, ensureTiDBRosterSchema } from "../plugins/roster-store-sql.js";
 import { LocalTaskAttachmentStore } from "../plugins/local-task-attachment-store.js";
@@ -285,27 +286,34 @@ export async function openStores(ctx) {
             logger.info("task_attachment_store_enabled", { backend: pgPool ? "pg+minio" : mysqlPool ? "tidb+minio" : "file", maxBytes: config.attachmentMaxBytes });
     }
     let mailboxStore;
+    let mailboxRecipientLifecycle;
     {
         const mysqlPool = backend?.mysqlPool?.();
         const pgPool = backend?.pgPool?.();
         if (pgPool) {
             await ensurePgMailboxSchema(async (text, params) => pgPool.query(text, params));
-            mailboxStore = new PgMailboxStore(pgPool, logger);
+            const store = new PgMailboxStore(pgPool, logger);
+            mailboxStore = store;
+            mailboxRecipientLifecycle = store;
         }
         else if (mysqlPool) {
             await ensureTiDBMailboxSchema(mysqlPool);
-            mailboxStore = new TiDBMailboxStore(mysqlPool, logger);
+            const store = new TiDBMailboxStore(mysqlPool, logger);
+            mailboxStore = store;
+            mailboxRecipientLifecycle = store;
         }
         else if (backend?.kind === "local") {
             mailboxStore = new FileMailboxStore(config.localDataRoot ?? localRoot, {
                 onCorruptRead: (info) => logger.warn("mailbox_corrupt_read", { path: info.path, reason: info.reason }),
             });
+            mailboxRecipientLifecycle = createDropOnlyRecipientLifecycle(mailboxStore);
         }
         if (mailboxStore) {
             const laneVerdict = mailboxCrossProcessMountVerdict(mailboxStore);
             logger.info("mailbox_store_enabled", {
                 backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file",
                 crossProcessSafe: mailboxStore.crossProcessSafe,
+                recipientTombstones: pgPool !== undefined || mysqlPool !== undefined,
                 peerLaneMountable: laneVerdict.ok,
                 ...(laneVerdict.ok ? {} : { peerLaneRefusal: laneVerdict.code }),
             });
@@ -424,7 +432,7 @@ export async function openStores(ctx) {
             .startRefresh()
         : undefined;
     return {
-        backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore,
+        backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, mailboxRecipientLifecycle,
         taskAttachmentStore, mailboxStore, memoryExportBackend, memorySyncRunner, sessionStore, breakerState,
         usageWindowStore, memoryPosture, taskListLane, sqlEngineFacts,
     };

package/dist/brain.js

@@ -1,22 +1,31 @@
 import { adjudicateModelRoute, createAnthropicBrain, createCircuitBreakerBrain, createDegradingBrain, createFailoverBrain, createOpenAIBrain, createRoutingBrain, hasAuthCarrier, resolveRouteCredential, routeRefusalText, } from "@sema-agent/core";
-import { normalizeBaseUrl } from "@sema-agent/core";
+import { routeKeyOf } from "@sema-agent/core";
 import { buildDefaultResilience } from "./config-types.js";
 import { resolveModelApiKey } from "./key-resolver.js";
 import { catalogBrainLane } from "./model-provider.js";
-import { buildDisplaySafeUrl, redactSecrets } from "./trace/redact.js";
+import { buildDisplaySafeRefusal, buildDisplaySafeUrl } from "./trace/redact.js";
 function isOffDeploymentRoot(baseUrl, config) {
     if (!baseUrl)
         return false;
-    const entry = normalizeBaseUrl(baseUrl);
+    const entry = routeKeyOf(baseUrl);
     if (entry === "")
         return false;
-    return ![config.gatewayBaseUrl, ...config.gatewayFallbackUrls].some((u) => normalizeBaseUrl(u) === entry);
+    return ![config.gatewayBaseUrl, ...config.gatewayFallbackUrls].some((u) => routeKeyOf(u) === entry);
 }
 function degradeDeclaredRoot(fallbackBaseUrl, config) {
     const armed = Boolean(config.gatewayApiKey) && isOffDeploymentRoot(fallbackBaseUrl, config);
     return armed ? config.gatewayBaseUrl : (fallbackBaseUrl || config.gatewayBaseUrl);
 }
 export const FAST_FAIL_MAX_RETRIES = 2;
+function constructRouteBrain(label, sourceUrls, construct) {
+    try {
+        return construct();
+    }
+    catch (e) {
+        const text = buildDisplaySafeRefusal(e instanceof Error ? e.message : String(e), sourceUrls.map((u) => u ?? ""));
+        throw new Error(`${label}: ${text}`, { cause: undefined });
+    }
+}
 const DEFAULT_RESILIENCE = buildDefaultResilience();
 export function createBrain(config, deps = {}) {
     const { fetchImpl, breakerState } = deps;
@@ -34,7 +43,7 @@ export function createBrain(config, deps = {}) {
             : {};
     const routes = [config.gatewayBaseUrl, ...config.gatewayFallbackUrls];
     const openaiBrains = routes.map((baseUrl, i) => {
-        const brain = createOpenAIBrain({
+        const brain = constructRouteBrain(i === 0 ? "gateway route" : `gateway fallback route[${i - 1}]`, [baseUrl], () => createOpenAIBrain({
             baseUrl,
             get apiKey() {
                 return config.gatewayApiKey;
@@ -42,7 +51,7 @@ export function createBrain(config, deps = {}) {
             ...retryCap,
             fetchImpl,
             ...timeouts,
-        });
+        }));
         const isLast = i === routes.length - 1;
         return r.circuitBreaker && !isLast
             ? createCircuitBreakerBrain(brain, {
@@ -54,18 +63,19 @@ export function createBrain(config, deps = {}) {
             : brain;
     });
     const gatewayBrain = openaiBrains.length > 1 ? createFailoverBrain(openaiBrains) : openaiBrains[0];
-    const anthropicBrain = config.anthropic
-        ? createAnthropicBrain({
-            ...(config.anthropic.authToken
-                ? { headers: { Authorization: `Bearer ${config.anthropic.authToken}` } }
-                : { apiKey: config.anthropic.apiKey }),
-            baseUrl: config.anthropic.baseUrl ?? "https://api.anthropic.com",
-            version: config.anthropic.version,
-            cacheBreakpoints: config.anthropic.cacheBreakpoints,
-            ...(config.anthropic.maxRetries !== undefined ? { maxRetries: config.anthropic.maxRetries } : {}),
+    const anthropicCfg = config.anthropic;
+    const anthropicBrain = anthropicCfg
+        ? constructRouteBrain("anthropic route", [anthropicCfg.baseUrl], () => createAnthropicBrain({
+            ...(anthropicCfg.authToken
+                ? { headers: { Authorization: `Bearer ${anthropicCfg.authToken}` } }
+                : { apiKey: anthropicCfg.apiKey }),
+            baseUrl: anthropicCfg.baseUrl ?? "https://api.anthropic.com",
+            version: anthropicCfg.version,
+            cacheBreakpoints: anthropicCfg.cacheBreakpoints,
+            ...(anthropicCfg.maxRetries !== undefined ? { maxRetries: anthropicCfg.maxRetries } : {}),
             fetchImpl,
             ...timeouts,
-        })
+        }))
         : undefined;
     let brain = anthropicBrain
         ? createRoutingBrain({ anthropic: anthropicBrain }, { fallback: gatewayBrain })
@@ -81,7 +91,7 @@ export function createBrain(config, deps = {}) {
             const fallback = fallbackLane === "anthropic" && anthropicBrain
                 ?
                     anthropicBrain
-                : createOpenAIBrain({
+                : constructRouteBrain(`degrade target "${degradeTo}"`, [fallbackModel.baseUrl, config.gatewayBaseUrl], () => createOpenAIBrain({
                     get baseUrl() {
                         return degradeDeclaredRoot(fallbackModel.baseUrl, config);
                     },
@@ -91,7 +101,7 @@ export function createBrain(config, deps = {}) {
                     ...(config.gatewayMaxRetries !== undefined ? { maxRetries: config.gatewayMaxRetries } : {}),
                     fetchImpl,
                     ...timeouts,
-                });
+                }));
             const degradeEntryModel = {
                 ...fallbackModel,
                 get headers() {
@@ -158,7 +168,10 @@ export function brainSummary(config) {
             const verdict = adjudicateModelRoute({ id: target.id, baseUrl: target.baseUrl }, resolveRouteCredential({ ...(config.gatewayApiKey ? { configApiKey: config.gatewayApiKey } : {}) }), { baseUrl: degradeDeclaredRoot(target.baseUrl, config) });
             return verdict.ok
                 ? { reactiveDegradeRoutePairing: `ok:${verdict.posture}`, reactiveDegradeRouteRefusal: null }
-                : { reactiveDegradeRoutePairing: `broken:${verdict.code}`, reactiveDegradeRouteRefusal: redactSecrets(routeRefusalText(verdict)) };
+                : {
+                    reactiveDegradeRoutePairing: `broken:${verdict.code}`,
+                    reactiveDegradeRouteRefusal: buildDisplaySafeRefusal(routeRefusalText(verdict), [target.baseUrl ?? "", degradeDeclaredRoot(target.baseUrl, config)]),
+                };
         })()),
     };
 }

package/dist/capabilities/memory-notice.d.ts

@@ -51,6 +51,12 @@ export interface MemoryFaceFacts {
     hands: ScenarioHands;
     /** 折完 governance+settings 后的最终 `handsReadOnly`(plan 模式 / autonomy 收窄)。手带只剩读腿。 */
     handsReadOnly: boolean;
+    /** 折完之后的最终 `TaskSpec.excludeAllTools`(S-493;core 7.8.0 [ref])。`true` = **整只**工具面卸空
+     *  (core `prepareDeferClassify` 对它直接 `roster.unmountWhere(() => true)`)⇒ 手带在场也一条落盘路都不剩。
+     *  🔴 它与下面那张名单是**同一个语义面**(「哪些工具不在 roster 上」)的两种声明,判据合成一只
+     *  {@link isUnmounted} —— 上游同版的姊妹谓词 `fullShellReachable` 也正是把 `spec.excludeAllTools !== true`
+     *  当一个合取项(`prepare-inherited-gate.js:174` 亲读),本仓与它同口径。 */
+    excludeAllTools: boolean;
     /** 折完之后的最终 `TaskSpec.excludeTools`(roster 真卸载,不是延迟披露)。**全部**已知落盘路都被排掉
      *  ⇒ 手带在场也等于没有写通道 —— core 的 `rosterCanPersist` 也是按排除后的 roster 算的,这里跟上。 */
     excludeTools: readonly string[] | undefined;
@@ -71,7 +77,7 @@ export interface MemoryFaceFacts {
  *  ① engine 在场 ⇒ **否**(引擎的座位,见文件头注);
  *  ② 部署显式声明 ⇒ 声明说了算(`true` 撤回 / `false` 强制)—— operator 的部署事实压过我们的推断,
  *     与 core 对 `memoryPersistenceCapable` 的处置同向;
- *  ③ 否则推断:有已知落盘路(手带在场且不是只读)⇒ 否;没有 ⇒ 是。
+ *  ③ 否则推断:有已知落盘路(手带在场、不是只读、不在 remote 车道、且没被卸载决定卸光)⇒ 否;没有 ⇒ 是。
  */
 export declare function shouldDiscloseNoPersistentMemory(facts: MemoryFaceFacts): boolean;
 /**

package/dist/capabilities/memory-notice.js

@@ -2,11 +2,11 @@ import { NO_PERSISTENT_MEMORY_NOTICE } from "@sema-agent/core";
 import { hasConstitutionAnchors } from "../task-settings.js";
 export const KNOWN_PERSISTENCE_TOOL_NAMES = ["Write", "Edit", "NotebookEdit", "Bash"];
 export const NO_PERSISTENT_MEMORY_SECTION_ID = "sema/memory.no-persistent";
-function anyPersistenceToolSurvives(excludeTools) {
-    if (excludeTools === undefined || excludeTools.length === 0)
-        return true;
-    const excluded = new Set(excludeTools);
-    return KNOWN_PERSISTENCE_TOOL_NAMES.some((name) => !excluded.has(name));
+function isUnmounted(facts, name) {
+    return facts.excludeAllTools || (facts.excludeTools?.includes(name) ?? false);
+}
+function anyPersistenceToolSurvives(facts) {
+    return KNOWN_PERSISTENCE_TOOL_NAMES.some((name) => !isUnmounted(facts, name));
 }
 export function shouldDiscloseNoPersistentMemory(facts) {
     if (facts.memoryFaceMounted)
@@ -17,7 +17,7 @@ export function shouldDiscloseNoPersistentMemory(facts) {
         return true;
     if (facts.remoteExecutionEnv)
         return true;
-    return !anyPersistenceToolSurvives(facts.excludeTools);
+    return !anyPersistenceToolSurvives(facts);
 }
 const NOTICE_BLOCK = { id: NO_PERSISTENT_MEMORY_SECTION_ID, slot: "behavior", text: NO_PERSISTENT_MEMORY_NOTICE };
 function mountNotice(decls) {

package/dist/capabilities/team.d.ts

@@ -20,6 +20,43 @@ import type { Logger } from "../observability/logger.js";
  * registerTeams` 那条消费腿——本文件旧注里「registry pushes more at runtime via GET /api/config/effective → teams」
  * 是 doc-rot。今天 `registerTeams` 只剩公共信任边界这一层意义(调用方=测试),注册表在生产上恒等于 BUILTIN_TEAMS;
  * 中心侧的多 agent 讨论配置面是 `collab` 域(0.7 继任者),投影成命名 workflow(capabilities/collab-workflows.ts)。
+ *
+ * 🔴 **成员重派阶梯收窄(core 7.24.0 [ref];本仓 7.90.0 提货批的读数说明,零改动)** —— 一次讨论**花的子 run
+ * 数掉一半**,上游实测:两成员一轮的讨论从 **6 个子 run 变 3 个**。原因:`runTurn` 此前对**每一个**没有
+ * 「completed 且有正文」落地的成员轮都重派一次(同目标、同提示词、同模型、同工具面),包括那些**结局上
+ * 不可能变**的终局;现在只对引擎能**肯定**认出是确定性的两种终局拒绝重派(`blocked` 因由 = 宿主
+ * `UserPromptSubmit` 的拒绝,照字面信;`failed` 且治理表判 TERMINAL 的码,读 `classifySubagentError`)。
+ *
+ * 🔴 **这不是「丢了重试」,读数变低也不是故障**(写在这里是因为它唯一会被误读的地方就是账单与子代行数):
+ *  · 其余一切**照旧**保留第二次尝试 —— 那个分类器的 `logic`/`unknown` 桶是**else 臂**(它不认识的码全落
+ *    那里),把「永不重派」挂在 else 臂上会让**将来每一个新码**默默变成不可重派,所以那条判决留在表里。
+ *    ⚠️ **本句在 7.90.0(core 7.24.2 / [ref])修了措辞**:上一版写的是「`stream_torn` 住在 `logic` 桶里
+ *    (else 臂)…负控挑它最有判别力」—— core 本版给三个 in-band 终局输出码**各自开了行**
+ *    (`stream_torn → network`(transient)/ `refusal → logic` / `length_empty → logic`),所以
+ *    `stream_torn` **已经不在 else 臂上了**(本车亲跑差分实测:`classifySubagentError({code:"stream_torn"})`
+ *    从 7.24.1 的 `{errorKind:"logic", retryable:false}` 变 7.24.2 的 `{errorKind:"network", retryable:true}`
+ *    —— 注意 `errorKind` 与 `retryable` **两个字段都翻了**,提货单只点了后者)。
+ *    **结局没变**(`stream_torn` 照旧重派 ⇒ 仍 6):重派闸 `canDifferOnRetry` 判的是「`blocked` 因由 + 治理表
+ *    判 TERMINAL」,从不读桶名 —— 变的是**理由**(从「掉进 else 臂」变成「表里那一行说它 transient」)。
+ *    ⇒ 拿 `stream_torn` 当 **else 臂**负控从本版起**没有判别力了**(它是一条有行的码);要挑 else 臂代表,
+ *    挑**未知码** / **无码的 `failed`** / **空正文的 `completed`** —— 那三形才真的落 else 臂。
+ *  · `[unavailable: <status>/<code>]` 标记、讨论转录、预算记账的**形一个字节没变**。
+ *  · **本仓没有任何按子 run 数计费 / 计量的座**(2026-09-19 车JG 亲扫:`billable` 是 `http/route-table.ts` 上
+ *    「这条路由算不算一次计费提交」的路由性质,与子 run 无关;`council_runs_total` 数的是**议会被调用了几次**,
+ *    不是子代;成员轮不建 run-store 行,它们是 TaskRegistry 上的 `a*` 句柄)。⇒ 本版在本仓**零改动**,
+ *    唯一会动的读数是 `GET /v1/runs/:id/subagents` 的**行数**与经 `stats` 透传的**用量/花费**(都变低),
+ *    两者都是上游事实的透传、本仓不据行数做任何裁决。
+ *
+ * 🔴 **判据按「前缀族」写,不按具体码字**(test 仓对 core 7.24.0 的实测②,本仓照此记账;将来真在本仓开
+ * 计量点时钉法同此):引擎读的是治理表对**码**的裁决,而裁决是按**前缀族**给的 —— 一个族里凭空合成的码
+ * (test 实测的 `usage.FAKE_prefix_only`)照样判 TERMINAL ⇒ **3**。所以正控/负控各挑**一个**代表就够,
+ * 逐字抄那张码表只会在上游加一行的那天变成谎:
+ *  · **⇒ 3(不重派)**:`blocked` 因由,以及 7 个被治理表判 TERMINAL 的前缀族失败码(合成同前缀码同判);
+ *  · **⇒ 仍 6(照旧两次)**:两个 transient 码 `memory.admission_required` / `config.compliance_required`,
+ *    以及 `stream_torn` / `refusal` / `length_empty` / 未知码 / 无码的 `failed` / 空正文的 `completed`。
+ *    🔴 **这六形自 core 7.24.2([ref])起不再同源**:前三形在分类器里**各有一行**
+ *    (`stream_torn → network` transient / `refusal`、`length_empty` → `logic`),后三形才是真的 **else 臂**。
+ *    结局(仍 6)对六形都没变,但**负控要挑真 else 臂**:未知码 / 无码的 `failed` / 空正文的 `completed`。
  */
 type TeamFn = typeof runTeamDiscussion;
 export interface TeamMemberTemplate {