@sema-agent/server 7.90.0 → 7.91.1

package/dist/adoption/plan.js

@@ -256,6 +256,17 @@ export const REBIND_LEGS = [
         residualKey: ["handle"],
         why: "信箱行的 scope 分区。`scope_key`(字节列)与 `scope`(可读列)存的是同一个值,必须一起改",
     },
+    {
+        leg: "mailbox_tombstone#scope_key",
+        table: "mailbox_tombstone",
+        kind: "bulk-rebind",
+        action: "bucket-rebind",
+        columns: ["scope_key"],
+        matchColumn: "scope_key",
+        encoding: "verbatim",
+        residualKey: ["handle"],
+        why: "S-72 收件人墓碑(预删除态)。**必须与 `mailbox` 同迁**:漏迁它 = 收编后新身份下的会话盒**永久静默拒收**(append 撞一条属于旧身份的墓碑),而那正是墓碑这个机制唯一的失效方向;本表无 `scope` 可读列(与 mailbox_message 同形)",
+    },
     {
         leg: "mailbox_message#scope_key",
         table: "mailbox_message",

package/dist/boot/runner-deps.d.ts

@@ -27,6 +27,7 @@ import type { QuestionCoordinator } from "../question.js";
 import type { ToolApprovalCoordinator } from "../tool-approval.js";
 import type { MemoryBackend } from "@sema-agent/core";
 import type { MemorySyncRunner } from "../memory-sync-client.js";
+import type { MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 /**
  * `RunnerDeps.onAsk` 的装配([ref] 件4:从内联闭包提为具名导出,**纯 testability 重构、零行为变化**)。
  *
@@ -86,6 +87,11 @@ export interface RunnerDepsCtx {
     rosterStore: RunnerDeps["rosterStore"];
     backgroundAgentStore: RunnerDeps["backgroundAgentStore"];
     mailboxStore: RunnerDeps["mailboxStore"];
+    /**
+     * [ref]:mailbox 的**收件人生命周期面**(预删除态)。与 `mailboxStore` **成对**(`boot/stores.ts` 同段铸,
+     * 两键同在场/同缺席);是 peer 目录席三个合取项之一,也是会话删除级联落墓碑的那一口。
+     */
+    mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
     /** [ref]-T1:治理窗账本店(USAGE_WINDOWS 配置时才在场;与 config.usageWindows 成对进 deps)。 */
     usageWindowStore: RunnerDeps["usageWindowStore"];
     brain: ReturnType<typeof createBrain>;

package/dist/boot/runner-deps.js

@@ -13,6 +13,7 @@ import { WorkflowNotifyGate } from "../orchestration/workflow-notify-journal.js"
 import { makeLoadProjectMemory, makeProbeInstructionSources } from "../project-memory.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { buildCrossSessionInboundLayers, crossSessionDialogExpiryOf } from "../cross-session-settings.js";
+import { createPeerDirectory } from "../peer-directory.js";
 export function createRunnerDepsOnAsk(toolApproval) {
     if (!toolApproval)
         return undefined;
@@ -101,6 +102,7 @@ export function createSharedRunnerDeps(ctx) {
 }
 export function createRunnerDeps(ctx) {
     const { config, logger, metrics, localRoot, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine, sessionCaptureRecords, memorySyncRunner, runtimeCapsResolver, fileHistoryStore, permissionRuleStore, fleetBus, workflowRunStore, workflowJournalStore, workflowAgentRegistry, workflowNotifyGate, workflowCompletionInbox, deliverWorkflowCompletion, getRunStore, sessionShellGateExplicitlyOff, } = ctx;
+    const peerSessionLister = sessionStore.listSessions?.bind(sessionStore);
     const memoryEngineIncident = createMemoryEngineIncidentSink({ logger, metrics });
     const sharedRunnerDeps = createSharedRunnerDeps(ctx);
     const workflowModelAllowlist = workflowModelAllowlistFor(config);
@@ -156,6 +158,15 @@ export function createRunnerDeps(ctx) {
         : {};
     const runnerDeps = {
         ...sharedRunnerDeps,
+        peerDirectory: peerSessionLister !== undefined && ctx.mailboxStore !== undefined && ctx.mailboxRecipientLifecycle !== undefined
+            ? createPeerDirectory({
+                lister: peerSessionLister,
+                lifecycle: ctx.mailboxRecipientLifecycle,
+                requirePrincipal: config.requirePrincipal,
+                crossSessionInbound: buildCrossSessionInboundLayers(config),
+                logger,
+            })
+            : undefined,
         onTaskOutcome: outcomeSink
             ? (o) => {
                 metrics.inc("task_outcomes_total", { status: o.status, green: String(o.oracle?.green ?? "unknown") });

package/dist/boot/session-faces.d.ts

@@ -9,6 +9,8 @@ import type { OwnerAwareSessionStore } from "../security.js";
 import type { DeviceStore } from "../device-store.js";
 import { SessionWatchRegistry } from "../session-watch.js";
 import type { TaskListLane } from "./task-list-lane.js";
+import { type RunnerDeps } from "@sema-agent/core";
+import type { MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 export interface SessionFacesCtx {
     config: ServiceConfig;
     logger: Logger;
@@ -31,6 +33,10 @@ export interface SessionFacesCtx {
     deviceStore: DeviceStore | undefined;
     /** per-session cwd/shellEnv 登记簿的清除口(E21 级联的一条腿,codex R1-F1)。缺席 = 装配未接。 */
     dropSessionScoped: ((sid: string) => void) | undefined;
+    /** [ref]:会话盒(`session.<id>`)的信箱 + 它的收件人生命周期面(E21 级联的一条腿)。**成对**在场
+     *  (`boot/stores.ts` 同段铸);缺席 = 本部署无耐久 mailbox ⇒ 无箱可退役。 */
+    mailboxStore: RunnerDeps["mailboxStore"];
+    mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
 }
 export declare function createSessionFaces(ctx: SessionFacesCtx): {
     ownerAware: OwnerAwareSessionStore;

package/dist/boot/session-faces.js

@@ -4,9 +4,9 @@ import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
 import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
-import { defaultTaskRegistry } from "@sema-agent/core";
+import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -79,6 +79,12 @@ export function createSessionFaces(ctx) {
             }
             if (workflowCompletionInbox)
                 await workflowCompletionInbox.purge(sessionId, owner ?? null).catch((err) => logger.warn("workflow_completion_inbox_purge_failed", { sessionId, err: String(err) }));
+            const peerBox = mailboxStore !== undefined && mailboxRecipientLifecycle !== undefined
+                ? { store: mailboxStore, lifecycle: mailboxRecipientLifecycle, scope: owner ?? "default", handle: peerSessionBoxHandle(sessionId) }
+                : undefined;
+            if (peerBox !== undefined) {
+                await peerBox.lifecycle.retireRecipient(peerBox.scope, peerBox.handle, Date.now());
+            }
             await purgeScratchpadDir(config.localDataRoot ?? localRoot, sessionId);
             try {
                 const reaped = defaultTaskRegistry.reapSessionBackground(sessionId, owner ?? "default");
@@ -88,6 +94,8 @@ export function createSessionFaces(ctx) {
             catch (err) {
                 logger.warn("session_background_reap_failed", { sessionId, err: String(err) });
             }
+            if (peerBox !== undefined)
+                await peerBox.store.drop(peerBox.scope, peerBox.handle);
             const historyDeleted = await ownerAware.deleteSession(sessionId, owner);
             sessionWatchRegistry?.dropSession(sessionId);
             return { deleted: historyDeleted || runs.removed > 0 };

package/dist/boot/stage-03-store-backend.d.ts

@@ -4,6 +4,7 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-03-store-backend.js

@@ -2,10 +2,10 @@ import { uuidv7 } from "@sema-agent/core";
 import { openStores } from "./stores.js";
 export async function runStage03(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
-    const { backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, memoryExportBackend, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngineFacts, } = await openStores({ config, logger, metrics, localRoot });
+    const { backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportBackend, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngineFacts, } = await openStores({ config, logger, metrics, localRoot });
     const instanceId = uuidv7();
     const sessionCaptureRecords = backend?.sessionCaptureRecords();
     const sessionCaptureRecordStore = sessionCaptureRecords?.();
-    return { ...ctx, backend, backgroundAgentStore, breakerState, instanceId, mailboxStore, memoryEngine, memoryExportBackend, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecordStore, sessionCaptureRecords, sessionStore, sqlEngineFacts, storeBackendDegraded, taskAttachmentStore, taskListLane, usageWindowStore };
+    return { ...ctx, backend, backgroundAgentStore, breakerState, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportBackend, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecordStore, sessionCaptureRecords, sessionStore, sqlEngineFacts, storeBackendDegraded, taskAttachmentStore, taskListLane, usageWindowStore };
 }
 //# sourceMappingURL=stage-03-store-backend.js.map

package/dist/boot/stage-04-stores.d.ts

@@ -41,6 +41,7 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-05-execution-env.d.ts

@@ -54,6 +54,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-06-runners.d.ts

@@ -115,6 +115,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-06-runners.js

@@ -21,7 +21,7 @@ import { createGovernanceSeams } from "./governance-seams.js";
 import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-authorizer.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 export function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, config, configCenter, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, config, configCenter, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const { elicitation, question, toolApproval, durableEnabled, streamApprovalGate, approvalAskAudit, sendUserFileEmitter, sendFileLedger, sendUserFileToolSpec } = createLiveCoordinators({
         config, logger, backend, sendUserFileTaskEnvs, ruleConsent,
@@ -116,7 +116,7 @@ export function runStage06(ctx) {
         hands: commitHands,
         mcpRevocations,
         sessionShellGateExplicitlyOff: sessionShellGateRegistry.explicitlyOff,
-        config, logger, metrics, localRoot, promptSource: configCenter.promptSource, rosterStore, backgroundAgentStore, mailboxStore, usageWindowStore, brain,
+        config, logger, metrics, localRoot, promptSource: configCenter.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
         pricing, tracer, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine,
         sessionCaptureRecords,
         memorySyncRunner, toolResultStore: runnerOffloadStore, checkpointStore, sessionPolicyStore, runtimeCapsResolver, fileHistoryStore,

package/dist/boot/stage-07-capability-layer.d.ts

@@ -130,6 +130,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-08-reapers.d.ts

@@ -145,6 +145,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-09-leader.d.ts

@@ -177,6 +177,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-09-leader.js

@@ -6,13 +6,13 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryStore, governanceSeams, localRoot, logger, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryStore, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
         config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
         resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore,
-        workflowCompletionInbox, taskListLane,
+        workflowCompletionInbox, taskListLane, mailboxStore, mailboxRecipientLifecycle,
     });
     const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });
     const drainState = { draining: false };

package/dist/boot/stage-10-http-server.d.ts

@@ -177,6 +177,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     instanceId: string;
+    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: {
         backend: import("@sema-agent/core").MemoryBackend;

package/dist/boot/stage-10-http-server.js

@@ -37,6 +37,7 @@ export async function runStage10(ctx) {
         taskAttachmentStore: taskAttachmentStore ? taskAttachmentStore : undefined,
         backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
         sessionStorage: ownerAware,
+        peerDirectory: runnerDeps.peerDirectory,
         workflowRunStore: workflowRunStore ? workflowRunStore : undefined,
         workflowAgentSessionIndex: workflowAgentSessionIndex ? workflowAgentSessionIndex : undefined,
         workflowJournalStore: workflowJournalStore ? workflowJournalStore : undefined,

package/dist/boot/stores.d.ts

@@ -4,6 +4,7 @@ import { type MemorySyncRunner } from "../memory-sync-client.js";
 import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import { type MemorySyncStore } from "../plugins/memory-sync-store-pg.js";
+import { type MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 import { type TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import { type StoreBackend } from "../plugins/store-backend.js";
 export interface OpenStoresCtx {
@@ -22,6 +23,7 @@ export declare function openStores(ctx: OpenStoresCtx): Promise<{
     memorySyncCursors: MemorySyncStore | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
+    mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
     taskAttachmentStore: TaskAttachmentStore | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryExportBackend: MemoryBackend | undefined;

package/dist/boot/stores.js

@@ -10,6 +10,7 @@ import { TiDBMemoryHistoryStore, TiDBMemorySyncStore, ensureTiDBMemoryHistorySch
 import { MinioBlobBackend } from "../plugins/blob-backend.js";
 import { PgBackgroundAgentStore, TiDBBackgroundAgentStore, ensurePgBackgroundAgentSchema, ensureTiDBBackgroundAgentSchema } from "../plugins/background-agent-store-sql.js";
 import { PgMailboxStore, TiDBMailboxStore, ensurePgMailboxSchema, ensureTiDBMailboxSchema } from "../plugins/mailbox-store-sql.js";
+import { createDropOnlyRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 import { PgUsageWindowStore, TiDBUsageWindowStore, ensurePgUsageWindowSchema, ensureTiDBUsageWindowSchema } from "../plugins/usage-window-store-sql.js";
 import { PgRosterStore, TiDBRosterStore, ensurePgRosterSchema, ensureTiDBRosterSchema } from "../plugins/roster-store-sql.js";
 import { LocalTaskAttachmentStore } from "../plugins/local-task-attachment-store.js";
@@ -285,27 +286,34 @@ export async function openStores(ctx) {
             logger.info("task_attachment_store_enabled", { backend: pgPool ? "pg+minio" : mysqlPool ? "tidb+minio" : "file", maxBytes: config.attachmentMaxBytes });
     }
     let mailboxStore;
+    let mailboxRecipientLifecycle;
     {
         const mysqlPool = backend?.mysqlPool?.();
         const pgPool = backend?.pgPool?.();
         if (pgPool) {
             await ensurePgMailboxSchema(async (text, params) => pgPool.query(text, params));
-            mailboxStore = new PgMailboxStore(pgPool, logger);
+            const store = new PgMailboxStore(pgPool, logger);
+            mailboxStore = store;
+            mailboxRecipientLifecycle = store;
         }
         else if (mysqlPool) {
             await ensureTiDBMailboxSchema(mysqlPool);
-            mailboxStore = new TiDBMailboxStore(mysqlPool, logger);
+            const store = new TiDBMailboxStore(mysqlPool, logger);
+            mailboxStore = store;
+            mailboxRecipientLifecycle = store;
         }
         else if (backend?.kind === "local") {
             mailboxStore = new FileMailboxStore(config.localDataRoot ?? localRoot, {
                 onCorruptRead: (info) => logger.warn("mailbox_corrupt_read", { path: info.path, reason: info.reason }),
             });
+            mailboxRecipientLifecycle = createDropOnlyRecipientLifecycle(mailboxStore);
         }
         if (mailboxStore) {
             const laneVerdict = mailboxCrossProcessMountVerdict(mailboxStore);
             logger.info("mailbox_store_enabled", {
                 backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file",
                 crossProcessSafe: mailboxStore.crossProcessSafe,
+                recipientTombstones: pgPool !== undefined || mysqlPool !== undefined,
                 peerLaneMountable: laneVerdict.ok,
                 ...(laneVerdict.ok ? {} : { peerLaneRefusal: laneVerdict.code }),
             });
@@ -424,7 +432,7 @@ export async function openStores(ctx) {
             .startRefresh()
         : undefined;
     return {
-        backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore,
+        backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, mailboxRecipientLifecycle,
         taskAttachmentStore, mailboxStore, memoryExportBackend, memorySyncRunner, sessionStore, breakerState,
         usageWindowStore, memoryPosture, taskListLane, sqlEngineFacts,
     };

package/dist/cross-session-settings.d.ts

@@ -28,8 +28,12 @@
  * ### 另一件如实:整条车道今日未挂
  *
  * 两个座位在引擎侧都**以 `RunnerDeps.peerDirectory` 在场为前提**(座缺席 ⇒ 跨会话车道整条不挂,
- * 每个面与 pre-385 构建逐字节相同)。本仓的 peer 目录席位是另一件欠账,故本文件铸出的层今天是
- * **就位待命**而非生效中。这不改变供层的正确性:目录席到货那天零改动即生效。
+ * 每个面与 pre-385 构建逐字节相同)。
+ *
+ * ✅ **7.91.0:目录席已接线**([ref],`boot/runner-deps.ts` 的三合取:会话枚举面 ∧ mailbox 店 ∧ 收件人生命周期面)
+ * —— 旧文字写的是「另一件欠账 …… 就位待命而非生效中」,如实订正:本文件铸的 managed 层在**有席的部署**上
+ * 真的在治理 drain 点的判决了;缺任一合取项的部署(典型 = 无耐久 mailbox 的单机形)上车道整条不挂,层仍是
+ * 就位待命。当初那句「目录席到货那天零改动即生效」已兑现:本文件一个字节未改。
  */
 import type { CrossSessionDialogExpiry, CrossSessionInboundSetting, CrossSessionInboundSettingLayers } from "@sema-agent/core";
 /** 引擎层形的层名 —— 从 core 的类型上取,**引擎加一层 = 本文件编译错**(下面两处闭集都锁在这个联合上)。 */

package/dist/http/routes/capabilities.js

@@ -59,6 +59,7 @@ export async function handleCapabilities(req, res, match, ctx) {
             const { fault: autoModeFault, ...autoMode } = await judgeAutoModeArming(deps.autoModeFace, { requestedMode, principal: gatedPrincipal(req, deps.config), entitlementSource, localDeny: deps.config.permissionsDisableAutoMode });
             if (autoModeFault !== undefined)
                 deps.logger?.warn("auto_mode_face_resolver_fault", { fault: autoModeFault });
+            const rulesLaneReachable = Boolean(deps.ruleConsent) && gatedPrincipal(req, deps.config) !== undefined;
             sendJson(res, 200, {
                 ...deps.capabilities,
                 asyncRuns: Boolean(deps.runStore),
@@ -91,7 +92,8 @@ export async function handleCapabilities(req, res, match, ctx) {
                 memoryConsolidationDriver: Boolean(deps.memoryConsolidation) && deps.config.operatorPrincipals.length > 0,
                 memoryOptOutGrant: Boolean(deps.memoryOptOutGrant) && deps.config.operatorPrincipals.length > 0,
                 outcomeLedger: Boolean(deps.outcomeSink?.summary) && (deps.config.requirePrincipal !== true || deps.config.operatorPrincipals.length > 0),
-                permissionRules: Boolean(deps.ruleConsent) && gatedPrincipal(req, deps.config) !== undefined,
+                permissionRules: rulesLaneReachable,
+                permissionRulesWrite: rulesLaneReachable,
                 permissionRulesRevoke: Boolean(deps.ruleConsent),
                 respondFreeFormRules: true,
                 respondBatchRuleOffers: true,
@@ -150,6 +152,7 @@ export async function handleCapabilities(req, res, match, ctx) {
                 sideQuery: true,
                 agentRoster: Boolean(deps.backgroundAgentStore),
                 retention: retentionAdvertisement(deps.config),
+                peerLane: Boolean(deps.peerDirectory),
                 sessionList: Boolean(deps.sessionStorage?.listSessions ?? deps.runStore?.listSessions),
                 sessionSearch: Boolean(deps.sessionStorage?.listSessions ?? deps.runStore?.listSessions),
                 sessionFork: Boolean(deps.sessionStorage?.fork),

package/dist/http/routes/rules.d.ts

@@ -1,6 +1,7 @@
 /**
  * [ref] 车二 + [ref] §2 —— **规则车道的 wire 面**([ref] §7 的导入半场 + [ref] 的撤销半场)。
  *
+ *   POST   /v1/rules                    → 写一条**收紧**规则(deny/ask)进 durable 分区,单步、无票仪式
  *   POST   /v1/rules/cc-import/prepare  → 预览 + 一张**一次性、principal 绑定、有期、载荷绑定**的票
  *   POST   /v1/rules/cc-import/redeem   → 原子消费票 → confirm → 批量兑付进店
  *   GET    /v1/rules                    → 列出自己名下**活着**的规则(keyset 分页,游标绑 rev)
@@ -11,6 +12,11 @@
  * 因此**导入两口**只认已验明的 principal,连 `explicitOperatorOk` 的旁路都不给:一个 operator 想给
  * 自己导规则,用他自己的 principal 走同一条路即可(那时他就是租户)。
  *
+ * 🔴 **`POST /v1/rules` 是撤销口的对偶,不是导入口的简写**(S-511):它写的只有**收紧**方向
+ * (deny/ask),而收紧不需要同意仪式 —— 与撤销为什么不需要是同一条理由(core `removePersistedRule`
+ * 头注逐字:「a host may narrow on a user's behalf, it may not widen」)。放宽(allow)仍然只有两条路:
+ * 一张卡上的人点头,或一次显式的 settings 导入。方向表在 `permission-rule-vocab.ts`,不在本文件。
+ *
  * 🔴 **撤销面两口多一条 operator 超范围域,而这不是上面那句话的例外,是它的对偶**([ref] §2 设计题
  * 一裁定):`?principal=` / body 里的 `principal` 让 operator 读**或收回**任一租户的规则。方向决定授权:
  * 收回是**收紧**(core 的 `removePersistedRule` 头注逐字:「a host may narrow on a user's behalf, it may
@@ -55,6 +61,11 @@ export declare const RULES_ROUTES: readonly [{
     readonly id: "rules-list";
     readonly path: "/v1/rules";
     readonly methods: readonly ["GET"];
+}, {
+    readonly id: "rules-write";
+    readonly path: "/v1/rules";
+    readonly credentialGated: readonly ["POST"];
+    readonly methods: readonly ["POST"];
 }, {
     readonly id: "rules-revoke";
     readonly path: "/v1/rules";

package/dist/http/routes/rules.js

@@ -3,11 +3,11 @@ import { sendJson, sendError, httpErrorCode } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk } from "../principal-gate.js";
 import { assertNever } from "../route-ctx.js";
 import { createLogger } from "../../observability/logger.js";
-import { RULE_IMPORT_RETRY_AFTER_SEC, MAX_RULE_SCOPE_CHARS, parseRuleScope, serializeRuleScope } from "../../rules-consent.js";
+import { RULE_IMPORT_RETRY_AFTER_SEC, MAX_RULE_SCOPE_CHARS, parseRuleScope, sameWireRuleIdentity, serializeRuleScope } from "../../rules-consent.js";
 import { CONTROL_AND_BIDI_CHARS } from "../../text-bidi.js";
 import { HttpError } from "../../security.js";
 import { MAX_RULE_TEXT_CHARS, RULE_BEHAVIORS } from "@sema-agent/core";
-import { PERSISTED_RULE_MATCHES, isPersistedRuleTool } from "../../permission-rule-vocab.js";
+import { PERSISTED_RULE_MATCHES, isPersistedRuleTool, isDirectWritableRuleBehavior } from "../../permission-rule-vocab.js";
 const logger = createLogger();
 export const RULES_CC_IMPORT_PREPARE_PATH = "/v1/rules/cc-import/prepare";
 export const RULES_CC_IMPORT_REDEEM_PATH = "/v1/rules/cc-import/redeem";
@@ -58,7 +58,7 @@ const LOCAL_IMPORT_ROW_SHAPE_PIN = true;
 void LOCAL_IMPORT_ROW_SHAPE_PIN;
 const LocalImportPrepareBodySchema = z.object({ rows: z.array(LocalImportRowSchema).min(1) }).strict();
 const LocalImportRedeemBodySchema = z.object({ ticket: TicketStringSchema }).strict();
-const RuleRevokeBodySchema = z
+const RuleIdentityBodySchema = z
     .object({
     behavior: z.enum(RULE_BEHAVIORS),
     rule: z.string().min(1).max(1024),
@@ -118,6 +118,10 @@ export async function handleRules(req, res, match, ctx) {
         await handleRuleRevoke(res, rawBody, principal, lane, deps.config.operatorPrincipals);
         return;
     }
+    if (match.decl.id === "rules-write") {
+        await handleRuleWrite(res, rawBody, principal, lane, deps.config.operatorPrincipals);
+        return;
+    }
     if (match.decl.id === "rules-local-import-prepare") {
         const parsed = LocalImportPrepareBodySchema.safeParse(rawBody);
         if (!parsed.success) {
@@ -242,8 +246,52 @@ async function handleRuleList(res, search, caller, lane, operatorPrincipals) {
         : undefined;
     sendJson(res, 200, { rules: page, rev: listing.rev, ...(nextCursor !== undefined ? { nextCursor } : {}) });
 }
+async function handleRuleWrite(res, rawBody, caller, lane, operatorPrincipals) {
+    const parsed = RuleIdentityBodySchema.safeParse(rawBody);
+    if (!parsed.success) {
+        sendError(res, 400, "request.body_shape", "body must be {behavior, rule, scope} with an optional principal");
+        return;
+    }
+    const behavior = parsed.data.behavior;
+    if (!isDirectWritableRuleBehavior(behavior)) {
+        sendError(res, 400, "request.field_invalid", "this endpoint writes standing refusals only: behavior must be 'deny' or 'ask' — a standing approval is minted by answering a permission question or by importing settings, never by this call");
+        return;
+    }
+    const scope = parseRuleScope(parsed.data.scope);
+    if (scope === undefined) {
+        sendError(res, 400, "request.body_shape", "scope must be 'global' or 'project:<root>' with a non-empty root");
+        return;
+    }
+    const target = resolveTargetPrincipal(parsed.data.principal, caller, operatorPrincipals);
+    if (!target.ok) {
+        sendError(res, 403, "auth.operator_only", "writing another principal's rules is an operator-only action");
+        return;
+    }
+    const written = await lane.writeRule({ principal: target.principal, behavior, rule: parsed.data.rule, scope });
+    switch (written.status) {
+        case "persisted":
+        case "no-op":
+            sendJson(res, 200, { status: written.status, rev: written.rev, rule: written.row });
+            return;
+        case "rejected":
+            logger.info("rule write refused", { reason: written.reason, detail: written.detail });
+            sendError(res, 400, "request.field_invalid", "this rule was not written — `reason` names which check refused it and `detail` says why", {
+                reason: written.reason,
+                detail: written.detail,
+            });
+            return;
+        case "indeterminate":
+            logger.info("rule write indeterminate", { detail: written.detail });
+            sendError(res, 503, "state.rule_write_failed", "this write could not be confirmed as a standing rule — retry, then reconcile with GET /v1/rules");
+            return;
+        default: {
+            const unknown = written;
+            throw new Error(`unknown rule write outcome: ${JSON.stringify(unknown)}`);
+        }
+    }
+}
 async function handleRuleRevoke(res, rawBody, caller, lane, operatorPrincipals) {
-    const parsed = RuleRevokeBodySchema.safeParse(rawBody);
+    const parsed = RuleIdentityBodySchema.safeParse(rawBody);
     if (!parsed.success) {
         sendError(res, 400, "request.body_shape", "body must be {behavior, rule, scope} with an optional principal");
         return;
@@ -264,7 +312,7 @@ async function handleRuleRevoke(res, rawBody, caller, lane, operatorPrincipals)
             sendJson(res, 200, { status: "removed", rev: outcome.rev, stillLive: outcome.stillLive });
             return;
         case "no-op": {
-            const stillLive = (await lane.listRules(target.principal)).rows.some((r) => r.rule === parsed.data.rule && r.scope === serializeRuleScope(scope));
+            const stillLive = (await lane.listRules(target.principal)).rows.some((r) => sameWireRuleIdentity(r, { behavior: parsed.data.behavior, rule: parsed.data.rule, scope: serializeRuleScope(scope) }));
             sendJson(res, 200, { status: "no-op", rev: outcome.rev, stillLive });
             return;
         }
@@ -280,6 +328,7 @@ export const RULES_ROUTES = [
     { id: "rules-local-import-prepare", path: RULES_LOCAL_IMPORT_PREPARE_PATH, methods: ["POST"] },
     { id: "rules-local-import-redeem", path: RULES_LOCAL_IMPORT_REDEEM_PATH, methods: ["POST"] },
     { id: "rules-list", path: RULES_PATH, methods: ["GET"] },
+    { id: "rules-write", path: RULES_PATH, credentialGated: ["POST"], methods: ["POST"] },
     { id: "rules-revoke", path: RULES_PATH, credentialGated: ["DELETE"], methods: ["DELETE"] },
     { prefix: "/v1/rules/cc-import/", credentialGated: ["POST"] },
     { prefix: "/v1/rules/local-import/", credentialGated: ["POST"] },

package/dist/http/routes/sessions-list.js

@@ -1,6 +1,7 @@
 import { isUuidV7, legacyUnownedAmnestyOpen } from "../../security.js";
 import { sendJson, sendError } from "../send.js";
 import { filterFingerprint } from "../cursor-fingerprint.js";
+import { sessionTempoOfRunStatus } from "../../plugins/store-contracts.js";
 import { assertNever } from "../route-ctx.js";
 export async function handleSessionsList(req, res, match, ctx) {
     const { deps } = ctx;
@@ -120,7 +121,11 @@ async function handleSessionList(res, lister, query, forceOwner, includeUnowned
     const page = hasMore ? rows.slice(0, limit) : rows;
     const last = page[page.length - 1];
     const nextCursor = hasMore && last ? encodeSessionCursor({ lastActivityAt: last.lastActivityAt, sessionId: last.sessionId }, f) : undefined;
-    sendJson(res, 200, { sessions: page, ...(nextCursor ? { nextCursor } : {}) });
+    const sessions = page.map((r) => {
+        const tempo = sessionTempoOfRunStatus(r.lastStatus);
+        return tempo === undefined ? r : { ...r, tempo };
+    });
+    sendJson(res, 200, { sessions, ...(nextCursor ? { nextCursor } : {}) });
 }
 export const SESSIONS_LIST_ROUTES = [
     { id: "sessions-list", path: "/v1/sessions", methods: ["GET"] },

package/dist/http/server.d.ts

@@ -163,6 +163,18 @@ export interface ServiceStoreDeps {
      *  `task_run` runs ledger. When it carries `listSessions`, GET /v1/sessions sources sessions from the session
      *  store (task_run only joins for run preview); `fork`/`deleteSession` enable the fork/delete routes. */
     sessionStorage?: OwnerAwareSessionStore;
+    /**
+     * [ref] —— 跨会话车道的**发现席**(core `RunnerDeps.peerDirectory`),与 `RunnerDeps` 侧**同一个对象**
+     * (`boot/stage-10-http-server.ts` 直接递 `runnerDeps.peerDirectory`)。
+     *
+     * 🔴 HTTP 面**今天不读它的内容**:它在这里的唯一作用是让 `GET /v1/capabilities.peerLane` 那一位
+     * 「说 yes ⟺ 车道真的挂上了」成为**同一个值**的读取,而不是把那条三合取的装配谓词在路由里**重写一遍**
+     * (重写的那一份必然漂 —— 本仓能力位族的既有病,见 `routes/capabilities.ts` 里 `agentRoster` 的同款注)。
+     * ⚠️ 精确说法是**值** iff,不是键 present-iff:那一位与同族的 `sessionList` 一样是 `Boolean(...)`,
+     * 本席缺席时键仍在、值为 `false`(`test/capabilities-http.test.ts` 的桩部署那一格逐字钉着它)。
+     * 「键缺席」只发生在**老版本 worker** 上,那是版本事实,不是本部署的车道事实。
+     */
+    peerDirectory?: import("@sema-agent/core").PeerDirectory;
     /** S8 workflow-run store ([ref]/98): enables GET /v1/workflows (list) + /v1/workflows/:id (detail).
      *  Set when SELF_ORCHESTRATION_ENABLED. Live progress (/v1/workflows/:id/stream) is in-process
      *  (subscribeWorkflow) and works whenever self-orchestration is on, store or not. Runs are owner-gated by