@sema-agent/server 7.92.1 → 7.92.2

package/dist/approval-ask-machine.d.ts

@@ -34,7 +34,7 @@ export declare function canBatchTransition(from: BatchState, to: BatchState): bo
  * ── `legKey`(取代数值 `leg`,一腿一凭据)─────────────────────────────────────────────────────────────
  * = `sha256(resume checkpoint token)` 的 hex,**首腿 = 空串**。一次 park→resume 的 token 就是这条腿的
  * 天然身份:同 token 重投 = 同一腿(幂等,正确);新 park ⇒ 新 token ⇒ 新腿 ⇒ 新 askId。
- * 取摘要而非原始 token 是因为 token 是能力凭据(本仓有 `stripResumeToken` 专门把它从可重放账本里
+ * 取摘要而非原始 token 是因为 token 是能力凭据(本仓有 `sealResultForExit` 专门把它从可重放账本里
  * 剥掉),而 `askId` 是 wire 可见值 ⇒ **只存/只喂摘要**。用它当轴顺带消掉了原裁需要的 `task_run` 加列
  * 与 `markResuming` 返回加宽(后者有第二个调用点 `http/routes/runs.ts:463`,加宽会误杀已成功 resume 的
  * running run)。残留边界:同一 run 内**不经 checkpoint token** 的重入形若未来出现会得到同一 legKey ——

package/dist/bench/s1/arms.js

@@ -1,5 +1,4 @@
-import { terminalProjection } from "@sema-agent/core";
-import { pausedCauseOf } from "../../terminal.js";
+import { pausedCauseOf, outwardPlane } from "../../terminal.js";
 import { leafBudgetFields, s1DebugGit } from "./runner-ctx.js";
 import {} from "./tasks.js";
 import { decideApproval, decidePlan } from "./reviewer.js";
@@ -78,12 +77,12 @@ export async function driveSupSuspendResume(initial, deps, implSpec, trap, advan
     let exitedViaBreak = false;
     for (let leg = 0; leg < MAX_LEGS; leg++) {
         foldCost(vr.stats);
-        const legPlane = terminalProjection(vr.terminal);
+        const legPlane = outwardPlane(vr.terminal);
         if (process.env.S1_DEBUG_SUPCOST)
             console.error(`[SUPCOST leg=${leg}] status=${legPlane.status} reason=${vr.verification?.unverifiedReason} c1µ=${vr.stats?.costBreakdown?.llmRootMicroUsd} accC1µ=${c1Acc.llmRootMicroUsd} hrGates=${vr.stats?.humanReview?.gates?.length}`);
         const paused = pausedCauseOf(vr.terminal);
         const gateKind = paused?.gate.kind;
-        const parkWord = paused === undefined ? undefined : terminalProjection(paused).status;
+        const parkWord = paused === undefined ? undefined : outwardPlane(paused).status;
         if (parkWord === "suspended") {
             const cp = await deps.getCheckpoint(implSpec.checkpointStore, paused.token, implSpec.durableApprovalScope);
             const binding = bindingFromCheckpoint(cp);
@@ -178,7 +177,7 @@ export async function runArm(arm, trap, seed, ctx, deps, supStore) {
                 finishedAt: ctx.clock.now(),
             });
         }
-        const soloPlane = terminalProjection(vr.terminal);
+        const soloPlane = outwardPlane(vr.terminal);
         if (s1DebugGit())
             console.error("[S1 SOLO vr.status]", soloPlane.status, "| stats:", JSON.stringify(vr.stats)?.slice(0, 200));
         const oracle = pickOracleVerdicts(await deps.runOracle());
@@ -225,7 +224,7 @@ export async function runArm(arm, trap, seed, ctx, deps, supStore) {
                 finishedAt: ctx.clock.now(),
             });
         }
-        const supPlane = terminalProjection(vr.terminal);
+        const supPlane = outwardPlane(vr.terminal);
         if (s1DebugGit())
             console.error(`[S1 SUP vr.status driver=${trap.supDriver}]`, supPlane.status, "| repairTerminal:", repairTerminal, "| verdict:", vr.verification?.verdict, "| unverifiedReason:", vr.verification?.unverifiedReason, "| checkpointGate:", JSON.stringify(pausedCauseOf(vr.terminal)?.gate), "| error:", vr.error, "| stats:", JSON.stringify(vr.stats)?.slice(0, 180));
         const oracle = pickOracleVerdicts(await deps.runOracle());

package/dist/bench/s1/live-deps.js

@@ -1,4 +1,4 @@
-import { terminalProjection } from "@sema-agent/core";
+import { outwardPlane } from "../../terminal.js";
 import { Runner, runWithVerification, resumeWithVerification, runRepairLoop, combinePolicies, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, } from "@sema-agent/core";
 import { loadConfig } from "../../config.js";
 import { createBrain } from "../../brain.js";
@@ -211,7 +211,7 @@ export function buildLiveDeps(rt, trap, seed, cellId) {
         runWithVerificationSup: async (implSpec) => {
             const { runner } = await ensureWorker();
             const result = await runner.runTask(toSupTaskSpec(baseSpec, implSpec, trap));
-            const pausePlane = result.terminal.kind === "paused" ? terminalProjection(result.terminal).status : undefined;
+            const pausePlane = result.terminal.kind === "paused" ? outwardPlane(result.terminal).status : undefined;
             const unverifiedReason = pausePlane === "needs_review" ? "needs_review" : pausePlane === "suspended" ? "suspended" : "no_verdict";
             return { ...result, verification: { verdict: "unverified", unverifiedReason, rounds: 0, findings: [] } };
         },

package/dist/boot/stage-06-runners.js

@@ -1,4 +1,5 @@
-import { Runner, terminalProjection, InMemoryToolResultStore, TtlSessionStore, uuidv7, createAllowDenyPolicy, workflowsCapability } from "@sema-agent/core";
+import { Runner, InMemoryToolResultStore, TtlSessionStore, uuidv7, createAllowDenyPolicy, workflowsCapability } from "@sema-agent/core";
+import { outwardPlane } from "../terminal.js";
 import { createSessionTitler } from "../session-titler.js";
 import { cardRuleScopeRoot } from "../task-cwd.js";
 import { ForkRoutingSessionStore } from "../plugins/fork-routing-session-store.js";
@@ -149,7 +150,7 @@ export function runStage06(ctx) {
             });
             metrics.inc("hook_llm_calls_total", { type: "agent" });
             if (result.terminal.kind !== "completed") {
-                const plane = terminalProjection(result.terminal);
+                const plane = outwardPlane(result.terminal);
                 return { ok: false, error: `hook agent ${plane.status}: ${plane.errorMessage ?? ""}` };
             }
             return { ok: true, text: result.result ?? "" };

package/dist/boot/stores.js

@@ -27,6 +27,7 @@ import { buildMemoryRemoteLaneWarn, memoryEngineBackendFor, memoryEngineRemoteLa
 import { assertToolResultProvenanceSchema } from "../plugins/tool-result-store-sql.js";
 import { assertPermissionRuleApprovalSchema, assertPermissionRuleTicketSchema } from "../plugins/permission-rule-store-sql.js";
 import { assertApprovalAskRuleMaterialSchema } from "../plugins/approval-ask-store-sql.js";
+import { assertSchemaMatchesCode } from "../plugins/schema-consistency.js";
 import { assertCheckpointColumnSchema } from "../plugins/checkpoint-store-sql.js";
 import { assertFileHistorySchema } from "../plugins/file-history-store-sql.js";
 import { resolveStreamApprovalGate } from "../tool-approval.js";
@@ -402,6 +403,14 @@ export async function openStores(ctx) {
                 await assertDeviceAuditRebindEventSchema(mysqlDriver(mysqlPool));
         }
     }
+    {
+        const mysqlPool = backend?.mysqlPool?.();
+        const pgPool = backend?.pgPool?.();
+        if (pgPool)
+            await assertSchemaMatchesCode(async (sql) => (await pgPool.query(sql)).rows, "pg");
+        else if (mysqlPool)
+            await assertSchemaMatchesCode(async (sql) => (await mysqlPool.query(sql))[0], "mysql");
+    }
     const sessionStore = createSessionStore(config, backend, metrics);
     if (config.requirePrincipal && backend?.kind === "local") {
         throw new Error("REQUIRE_PRINCIPAL=true is not supported on the local file backend (DB_BACKEND=local): session/run CONTENT is " +

package/dist/http/resume-legs.js

@@ -1,10 +1,10 @@
 import { redactErrorMessage, redactHead } from "../observability/run-terminal.js";
 import { createHash } from "node:crypto";
-import { uuidv7, resumeWithVerification, CheckpointError, defaultTaskRegistry, validatePendingSteer, GLOBAL_USAGE_KEY, terminalProjection, PAUSE_REGISTRY } from "@sema-agent/core";
+import { uuidv7, resumeWithVerification, CheckpointError, defaultTaskRegistry, validatePendingSteer, GLOBAL_USAGE_KEY, PAUSE_REGISTRY } from "@sema-agent/core";
 import { decideParkedAgent, denyWorkflowParksUnreadable, findParkOrigin, planWorkflowParkedDecide } from "../parked-decide.js";
 import { HttpError, decodeCheckpointScope, CHECKPOINT_PUBLIC_SCOPE } from "../security.js";
 import { evictIfConflict, parkToolCallId, TurnAnchorCapture, HEARTBEAT_MS, markChildrenStoppedByUserOnAbort } from "../runs.js";
-import { failureCodeOf, nestedPauseOf, stripResumeToken } from "../terminal.js";
+import { failureCodeOf, nestedPauseOf, sealResultForExit, outwardPlane } from "../terminal.js";
 import { mintCancelledResult } from "../run-cancel-context.js";
 import {} from "../host-decision.js";
 import { readTurnActivityMs, recordTurnActivity } from "../turn-activity.js";
@@ -550,7 +550,7 @@ export function createResumeLegs(ctx) {
                     resumeLegLive = true;
                     const vr = await resumeWithVerification(legRunner, token, outcome, { ...resumeTaskConfig, signal: cancelCtrl.signal, preemptSignal: preemptCtrl.signal }, resumeObjective, verifyRounds, verifyInternals);
                     await commitResumeCtx();
-                    let safe = stripResumeToken(vr);
+                    let safe = sealResultForExit(vr);
                     const vrNested = nestedPauseOf(vr.terminal);
                     const reParkStatus = nestedParkStatusOf(vr);
                     const reSuspended = vrNested !== undefined;
@@ -679,7 +679,7 @@ export function createResumeLegs(ctx) {
                     if (taskId)
                         steerableRuns.set(taskId, stream);
                     if (!taskId || !rs)
-                        return await stream.result();
+                        return sealResultForExit(await stream.result());
                     onAccepted?.(acceptedResumingReceipt(taskId, sessionId));
                     for await (const ev of stream) {
                         recordTurnActivity(taskId);
@@ -790,7 +790,7 @@ export function createResumeLegs(ctx) {
                     }
                     await flush();
                     const r = await stream.result();
-                    const rPark = r.terminal.kind === "paused" ? terminalProjection(r.terminal).status : undefined;
+                    const rPark = r.terminal.kind === "paused" ? outwardPlane(r.terminal).status : undefined;
                     if (rPark === "suspended") {
                         const parkCallId = await parkToolCallId(r, deps.checkpointStore);
                         await append("suspended", { gate: r.terminal.kind === "paused" ? r.terminal.gate : null, ...(parkCallId !== undefined ? { toolCallId: parkCallId } : {}) });
@@ -812,7 +812,7 @@ export function createResumeLegs(ctx) {
                         }
                         return r;
                     }
-                    const safe = await attachModelUsage(stripResumeToken(r), { append, getEvents: (id, a) => rs.getEvents(id, a), modelUsage: deps.modelUsage, taskId });
+                    const safe = await attachModelUsage(sealResultForExit(r), { append, getEvents: (id, a) => rs.getEvents(id, a), modelUsage: deps.modelUsage, taskId });
                     await append("done", { result: safe });
                     if (taskConfig.suggestNextPrompts && safe.terminal.kind === "completed") {
                         const suggestions = await stream.suggestions().catch(() => []);
@@ -951,16 +951,17 @@ export function createResumeLegs(ctx) {
         }
         evictIfConflict(deps.runner, sessionId, result);
         const checkpointReopened = reopenConfirmedPark;
-        const resumePlane = terminalProjection(result.terminal);
+        const sealed = sealResultForExit(result);
+        const resumePlane = outwardPlane(sealed.terminal);
         if (taskId && deps.runStore) {
             if (resumePlane.status === "suspended" || checkpointReopened)
                 await deps.runStore.setSuspended(taskId);
             else if (resumePlane.status === "needs_review")
                 await deps.runStore.setNeedsReview(taskId);
             else
-                await deps.runStore.setTerminal(taskId, resumePlane.status, stripResumeToken(result), resumePlane.errorMessage ?? null);
+                await deps.runStore.setTerminal(taskId, resumePlane.status, sealed, resumePlane.errorMessage ?? null);
         }
-        settleFleet(checkpointReopened ? "suspended" : resumePlane.status, fleetRunResiduals(result));
+        settleFleet(checkpointReopened ? "suspended" : resumePlane.status, fleetRunResiduals(sealed));
         return {
             status: 200,
             body: {

package/dist/http/routes/rules.js

@@ -271,7 +271,9 @@ async function handleRuleWrite(res, rawBody, caller, lane, operatorPrincipals) {
     switch (written.status) {
         case "persisted":
         case "no-op":
-            sendJson(res, 200, { status: written.status, rev: written.rev, rule: written.row });
+            sendJson(res, 200, written.row === undefined
+                ? { status: written.status, rev: written.rev, stillLive: written.stillLive }
+                : { status: written.status, rev: written.rev, stillLive: written.stillLive, rule: written.row });
             return;
         case "rejected":
             logger.info("rule write refused", { reason: written.reason, detail: written.detail });
@@ -322,6 +324,10 @@ async function handleRuleRevoke(res, rawBody, caller, lane, operatorPrincipals)
             logger.info("rule revoke failed", { error: outcome.error });
             sendError(res, 503, "state.rule_remove_failed", "the rule could not be revoked right now — retry, then reconcile with GET /v1/rules");
             return;
+        default: {
+            const unknown = outcome;
+            throw new Error(`unknown rule revoke outcome: ${JSON.stringify(unknown)}`);
+        }
     }
 }
 export const RULES_ROUTES = [

package/dist/http/routes/session-sync.js

@@ -1,11 +1,11 @@
 import { once } from "node:events";
 import { randomBytes, createHash } from "node:crypto";
-import { sessionLogDigest, sessionLogDigestsComparable, StreamingImportValidator, SessionError, SessionPolicyError, validateFileHistoryExport } from "@sema-agent/core";
+import { sessionLogDigest, sessionLogDigestsComparable, StreamingImportValidator, SessionError, validateFileHistoryExport } from "@sema-agent/core";
 import { StringDecoder } from "node:string_decoder";
 import { exportSessionManifest, fileHistoryImportFace, replayFileHistory, replayPolicyRecords, overwriteWipeIncapable, wipeSessionAttendants } from "../../session-sync.js";
 import { classifySyncRelationshipByIds, SyncConflictError } from "../../session-sync-kernel.js";
 import { isUuidShape } from "../../security.js";
-import { sendJson, sendError, msg } from "../send.js";
+import { sendJson, sendError, sendSessionPolicyError, msg } from "../send.js";
 import { buildDisplaySafeUrl } from "../../trace/redact.js";
 import { gatedPrincipal, explicitOperatorOk } from "../principal-gate.js";
 const SYNC_BLOB_MAX_BYTES = 64 * 1024 * 1024;
@@ -13,7 +13,7 @@ const SYNC_NDJSON_LINE_MAX_BYTES = 8 * 1024 * 1024;
 const SYNC_IMPORT_BATCH = 500;
 import { SHA256_HEX_RE } from "../../digest-form.js";
 import { assertNever } from "../route-ctx.js";
-import { readSessionRulesRecords, describeSessionRulesRecordProblem, sessionPolicyErrorHttp } from "../../session-policy-wire.js";
+import { readSessionRulesRecords, describeSessionRulesRecordProblem } from "../../session-policy-wire.js";
 export function createSessionSyncLocal() {
     const pendingStagings = new Map();
     const importLeases = new Map();
@@ -74,7 +74,15 @@ export async function handleSessionSync(req, res, match, ctx) {
             if (match.decl.id === "session-sync-manifest") {
                 if (!pullGateOk())
                     return;
-                const out = await exportSessionManifest(sessionId, deps.backend);
+                let out;
+                try {
+                    out = await exportSessionManifest(sessionId, deps.backend);
+                }
+                catch (e) {
+                    if (sendSessionPolicyError(res, e))
+                        return;
+                    throw e;
+                }
                 if (out === null) {
                     sendError(res, 404, "not_found.session", "session not found");
                     return;
@@ -281,8 +289,16 @@ export async function handleSessionSync(req, res, match, ctx) {
                         }
                     }
                     const opOk = explicitOperatorOk(gatedPrincipal(req, deps.config), deps.config.operatorPrincipals);
-                    if (deps.sessionPolicyStore)
-                        await replayPolicyRecords(deps.sessionPolicyStore, sessionId, policy, opOk);
+                    if (deps.sessionPolicyStore) {
+                        try {
+                            await replayPolicyRecords(deps.sessionPolicyStore, sessionId, policy, opOk);
+                        }
+                        catch (e) {
+                            if (sendSessionPolicyError(res, e))
+                                return;
+                            throw e;
+                        }
+                    }
                     const importingP = scope.fleetWide ? (owner ?? null) : scope.gateOwner;
                     if (deps.resumeAnchorStore)
                         for (const a of anchors)
@@ -499,13 +515,9 @@ export async function handleSessionSync(req, res, match, ctx) {
                         sendError(res, 409, "conflict", "sync conflict", { relation: e.relation });
                         return;
                     }
-                    if (e instanceof SessionPolicyError) {
-                        cleanupStaging(stagingId);
-                        const h = sessionPolicyErrorHttp(e.code);
-                        sendError(res, h.status, h.errorCode, e.message);
-                        return;
-                    }
                     cleanupStaging(stagingId);
+                    if (sendSessionPolicyError(res, e))
+                        return;
                     throw e;
                 }
                 return;

package/dist/http/routes/sessions.js

@@ -1,12 +1,12 @@
-import { materializeA2aTools, materializeMcpTools, sanitizePathComponent, SessionPolicyError } from "@sema-agent/core";
+import { materializeA2aTools, materializeMcpTools, sanitizePathComponent } from "@sema-agent/core";
 import { a2aForScenario, mcpForScenario } from "../../config-center/facade.js";
 import { isUuidV7, isUuidShape, legacyUnownedSessionOk } from "../../security.js";
 import { windowMessages, truncateMessageBlobs } from "../../audit.js";
 import { redactSecrets } from "../../trace/redact.js";
 import { recordFailOpen } from "../../observability/fail-open.js";
 import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, MAX_SETTINGS_PERMISSION_RULES, MAX_SETTINGS_ENV_VARS, MAX_SETTINGS_ENV_KEY_CHARS, MAX_SETTINGS_ENV_VALUE_CHARS } from "../../task-settings.js";
-import { readSessionPermissionRules, describeSessionPermissionRulesProblem, sessionPolicyErrorHttp } from "../../session-policy-wire.js";
-import { sendJson, sendError, sseHeaders } from "../send.js";
+import { readSessionPermissionRules, describeSessionPermissionRulesProblem } from "../../session-policy-wire.js";
+import { sendJson, sendError, sendSessionPolicyError, sseHeaders } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, runOwnerReadable, sendPrincipalRefusal } from "../principal-gate.js";
 import { assertNever } from "../route-ctx.js";
 const MCP_STATUS_TTL_MS = 5_000;
@@ -731,7 +731,14 @@ export async function handleSessions(req, res, match, ctx) {
             }
             const target = owner;
             if (match.decl.id === "session-policy-get") {
-                sendJson(res, 200, { rules: (await store.getRules(sessionId, target)) ?? { rev: 0 } });
+                try {
+                    sendJson(res, 200, { rules: (await store.getRules(sessionId, target)) ?? { rev: 0 } });
+                }
+                catch (e) {
+                    if (sendSessionPolicyError(res, e))
+                        return;
+                    throw e;
+                }
                 return;
             }
             let body;
@@ -767,11 +774,8 @@ export async function handleSessions(req, res, match, ctx) {
                 sendJson(res, 200, { rules: stored });
             }
             catch (e) {
-                if (e instanceof SessionPolicyError) {
-                    const h = sessionPolicyErrorHttp(e.code);
-                    sendError(res, h.status, h.errorCode, e.message);
+                if (sendSessionPolicyError(res, e))
                     return;
-                }
                 throw e;
             }
             return;

package/dist/http/routes/tasks.js

@@ -1,7 +1,7 @@
 import { redactErrorMessage, redactHead, redactTerminalResult } from "../../observability/run-terminal.js";
-import { runWithVerification, runCascade, uuidv7, terminalProjection } from "@sema-agent/core";
+import { runWithVerification, runCascade, uuidv7 } from "@sema-agent/core";
 import { graftParkToolCallId, markChildrenStoppedByUserOnAbort, resumeAtHttpStatus, HEARTBEAT_MS } from "../../runs.js";
-import { stripResumeToken } from "../../terminal.js";
+import { sealResultForExit, outwardPlane } from "../../terminal.js";
 import { withPrincipal } from "../../observability/principal-context.js";
 import { fleetRunPublisher, fleetRunLabels, fleetRunResiduals, isFleetAgentTerminalNotification } from "../../fleet/fleet-bus.js";
 import { defaultSubagentTailBus } from "../../fleet/subagent-tail-bus.js";
@@ -58,7 +58,7 @@ export async function handleTasks(req, res, match, ctx) {
     const noteRunOutcome = (r) => {
         if (!r?.terminal)
             return;
-        const plane = terminalProjection(r.terminal);
+        const plane = outwardPlane(r.terminal);
         reqState.runStatus = plane.status;
         if (plane.errorCode)
             reqState.runErrorCode = plane.errorCode;
@@ -421,7 +421,7 @@ export async function handleTasks(req, res, match, ctx) {
                                     userMsgEntryId = ev.entryId;
                                 const cancelVerbAtDone = ev.type === "done" && durableTaskId !== undefined && cancelledViaVerb.has(durableTaskId);
                                 if (ev.type === "done") {
-                                    finalResult = redactTerminalResult(stripResumeToken(await graftParkToolCallId(ev.result, deps.checkpointStore)));
+                                    finalResult = redactTerminalResult(sealResultForExit(await graftParkToolCallId(ev.result, deps.checkpointStore)));
                                     if (durableTaskId && finalResult)
                                         finalResult = { ...finalResult, taskId: durableTaskId };
                                     if (cancelVerbAtDone && finalResult !== undefined) {
@@ -430,7 +430,7 @@ export async function handleTasks(req, res, match, ctx) {
                                     finalizeTaskResult(ev.result, principal, prepared.spec.objective, prepared.spec.sessionId);
                                     noteRunOutcome(finalResult);
                                     putRewindAnchor();
-                                    settleFleet(terminalProjection(finalResult.terminal).status, fleetRunResiduals(finalResult));
+                                    settleFleet(outwardPlane(finalResult.terminal).status, fleetRunResiduals(finalResult));
                                     if (ledgerSink && finalResult) {
                                         if (usageKey && deps.modelUsage && deps.runStore && durableTaskId) {
                                             const rs2 = deps.runStore;
@@ -650,7 +650,7 @@ export async function handleTasks(req, res, match, ctx) {
                         }, withApproval)
                         : withApproval());
                     if (durableTaskId && deps.runStore) {
-                        const finalPlane = finalResult ? terminalProjection(finalResult.terminal) : undefined;
+                        const finalPlane = finalResult ? outwardPlane(finalResult.terminal) : undefined;
                         if (finalPlane?.status === "suspended" && deps.checkpointStore)
                             await deps.runStore.setSuspended(durableTaskId);
                         else if (finalPlane?.status === "needs_review" && deps.checkpointStore)
@@ -717,7 +717,7 @@ export async function handleTasks(req, res, match, ctx) {
                                         ledgerTerminal = true;
                                         await ledgerSink.onDone(finalResult).catch(() => undefined);
                                     }
-                                    const retryPlane = terminalProjection(finalResult.terminal);
+                                    const retryPlane = outwardPlane(finalResult.terminal);
                                     await deps.runStore.setTerminal(durableTaskId, retryPlane.status, finalResult, retryPlane.errorMessage ?? null);
                                     settleFleet(retryPlane.status, fleetRunResiduals(finalResult));
                                 }
@@ -860,15 +860,15 @@ export async function handleTasks(req, res, match, ctx) {
                 }
                 const resumeAtStatus = resumeAtHttpStatus(result);
                 if (resumeAtStatus) {
-                    const resumeAtPlane = terminalProjection(result.terminal);
+                    const resumeAtPlane = outwardPlane(result.terminal);
                     if (durableTaskId && deps.runStore)
-                        await deps.runStore.setTerminal(durableTaskId, "failed", stripResumeToken(result), resumeAtPlane.errorMessage ?? null);
+                        await deps.runStore.setTerminal(durableTaskId, "failed", sealResultForExit(result), resumeAtPlane.errorMessage ?? null);
                     const retryAfterSec = resumeAtPlane.errorCode === "memory.admission_required" && result.retryAfterMs !== undefined
                         ? Math.max(1, Math.ceil(result.retryAfterMs / 1000))
                         : undefined;
                     return { status: resumeAtStatus, body: { errorCode: resumeAtPlane.errorCode, error: redactErrorMessage(resumeAtPlane.errorMessage) ?? "resume-at failed", ...(retryAfterSec !== undefined ? { retryAfterSec } : {}) } };
                 }
-                const syncPlane = terminalProjection(result.terminal);
+                const syncPlane = outwardPlane(result.terminal);
                 if (syncPlane.status === "suspended" && deps.checkpointStore && deps.runStore && prepared.spec.sessionId) {
                     if (durableTaskId)
                         await deps.runStore.setSuspended(durableTaskId);
@@ -880,10 +880,10 @@ export async function handleTasks(req, res, match, ctx) {
                     return { status: 200, body: withSyncSubmitKeys({ taskId: durableTaskId, sessionId: prepared.spec.sessionId, status: "needs_review" }) };
                 }
                 if (durableTaskId && deps.runStore)
-                    await deps.runStore.setTerminal(durableTaskId, syncPlane.status, stripResumeToken(result), syncPlane.errorMessage ?? null);
+                    await deps.runStore.setTerminal(durableTaskId, syncPlane.status, sealResultForExit(result), syncPlane.errorMessage ?? null);
                 finalizeTaskResult(result, principal, prepared.spec.objective, prepared.spec.sessionId);
                 noteRunOutcome(result);
-                return { status: 200, body: withSyncSubmitKeys(redactTerminalResult(stripResumeToken(result))) };
+                return { status: 200, body: withSyncSubmitKeys(redactTerminalResult(sealResultForExit(result))) };
             };
             const resp = await idemCache.run(idemKey, async () => withRunReceipt(await runSyncSubmitLeg()), (r) => r.status < 400);
             sendSubmitResult(res, resp);

package/dist/http/send.d.ts

@@ -60,5 +60,16 @@ export declare function sendError(res: ServerResponse, status: number, errorCode
  *  throw 点里只有 3 个带。为了让「errorCode 恒在」在这些站点也成立(而不是靠豁免表放行),按**状态码**
  *  给一个诚实的粗码:它只声明「这类拒绝」,不冒充比 throw 点更细的语义。带 `code` 的 throw 点原样优先。 */
 export declare function httpErrorCode(status: number, code?: string): string;
+/**
+ * 🔴 B1 / S-535 —— `SessionPolicyError` → 应答,经 {@link sessionPolicyErrorHttp} 那**一只**映射
+ * (`src/session-policy-wire.ts`)。回 `true` = 已应答,调用点 `return`。
+ *
+ * 为什么是一只共享腿而不是每个站点一句 `instanceof`:映射本身早就收成一处了,而**咨询它的站点**只有两条
+ * **写**腿 —— 偏偏 core 7.25.0 那个新词 `corrupt` 是在**读**上抛出来的(店读不出它自己写的那一行:
+ * S-529 的两道读回拒 + C1 的体形拒)。于是 `GET /v1/sessions/:id/policy` 与 2c 的 manifest 导出腿把它交给了
+ * 域外通用臂 ⇒ `500 internal.error "internal error"`:码丢,连带**修复路径**也丢(同一行 `PUT` 却答
+ * `500 corrupt` 并点名那一列)。一只腿之后,新站点只会忘记调它,不会再各自发明一份映射。
+ */
+export declare function sendSessionPolicyError(res: ServerResponse, e: unknown): boolean;
 export declare function msg(e: unknown): string;
 //# sourceMappingURL=send.d.ts.map

package/dist/http/send.js

@@ -1,3 +1,5 @@
+import { SessionPolicyError } from "@sema-agent/core";
+import { sessionPolicyErrorHttp } from "../session-policy-wire.js";
 export const SSE_RESPONSE_MARK = Symbol("sema.http.sse-response");
 export function isSseResponse(res) {
     return res[SSE_RESPONSE_MARK] === true;
@@ -35,6 +37,13 @@ export function httpErrorCode(status, code) {
         default: return status >= 500 ? "internal.error" : "request.rejected";
     }
 }
+export function sendSessionPolicyError(res, e) {
+    if (!(e instanceof SessionPolicyError))
+        return false;
+    const h = sessionPolicyErrorHttp(e.code);
+    sendError(res, h.status, h.errorCode, e.message);
+    return true;
+}
 export function msg(e) {
     return e instanceof Error ? e.message : String(e);
 }

package/dist/http/server.js

@@ -1,6 +1,7 @@
 import http from "node:http";
+import { outwardPlane } from "../terminal.js";
 import { redactHead } from "../observability/run-terminal.js";
-import { validatePendingSteer, terminalProjection } from "@sema-agent/core";
+import { validatePendingSteer } from "@sema-agent/core";
 import {} from "../config-center/facade.js";
 import { HttpError } from "../security.js";
 import {} from "../memory-sync.js";
@@ -117,7 +118,7 @@ export function createHttpServer(rawDeps) {
         return deps.runnerFor?.(spec) ?? deps.runner;
     }
     function recordTaskResult(result) {
-        const plane = terminalProjection(result.terminal);
+        const plane = outwardPlane(result.terminal);
         deps.metrics?.inc("tasks_total", { status: plane.status });
         if (result.stats.tokens)
             deps.metrics?.inc("task_tokens_total", {}, result.stats.tokens);

package/dist/leader/fanout.js

@@ -1,6 +1,6 @@
-import { terminalProjection } from "@sema-agent/core";
+import {} from "@sema-agent/core";
 import { redactErrorMessage, redactWorkerReportError } from "../observability/run-terminal.js";
-import { pausedCauseOf } from "../terminal.js";
+import { pausedCauseOf, outwardPlane } from "../terminal.js";
 class Semaphore {
     max;
     active = 0;
@@ -68,7 +68,7 @@ export async function fanOut(subtasks, opts) {
             let report;
             try {
                 const result = await stream.result();
-                const plane = terminalProjection(result.terminal);
+                const plane = outwardPlane(result.terminal);
                 report = { ...base, status: mapStatus(result.terminal), stats: result.stats, ...(plane.errorMessage ? { error: redactErrorMessage(plane.errorMessage) ?? "" } : {}) };
             }
             catch (e) {

package/dist/leader/leader.js

@@ -2,8 +2,8 @@ import { fanOut } from "./fanout.js";
 import { redactErrorMessage, redactHead } from "../observability/run-terminal.js";
 import { pullDiff } from "./diffout.js";
 import { mergeBranches } from "./merge.js";
-import { Runner, runWithVerification, resumeWithVerification, terminalProjection } from "@sema-agent/core";
-import { pausedCauseOf } from "../terminal.js";
+import { Runner, runWithVerification, resumeWithVerification } from "@sema-agent/core";
+import { pausedCauseOf, outwardPlane } from "../terminal.js";
 const MAX_RESUME_SLICES = 200;
 export async function autoResumeOnResource(initial, signal, resume, maxSlices = MAX_RESUME_SLICES) {
     let vr = initial;
@@ -59,7 +59,7 @@ export async function runLeaderTask(task, durableBaseSha, deps) {
                             deps.logger?.info?.("worker_resource_resume", { workerId: w.workerId, slice });
                             return runner.resume(token, { gate: "resource_limit", decision: "continue" }, { ...w.spec, sessionId: w.sessionId, signal });
                         });
-                        const plane = terminalProjection(r.terminal);
+                        const plane = outwardPlane(r.terminal);
                         const paused = pausedCauseOf(r.terminal);
                         if (r.terminal.kind !== "completed") {
                             deps.logger?.warn?.("worker_failed", {
@@ -92,7 +92,7 @@ export async function runLeaderTask(task, durableBaseSha, deps) {
                         deps.logger?.info?.("worker_resource_resume", { workerId: w.workerId, slice });
                         return resumeWithVerification(w.runner, token, { gate: "resource_limit", decision: "continue" }, { ...w.spec, sessionId: w.sessionId, signal }, w.spec.objective ?? "", cfg);
                     });
-                    const vrPlane = terminalProjection(vr.terminal);
+                    const vrPlane = outwardPlane(vr.terminal);
                     deps.logger?.info?.("verify_outcome", { workerId: w.workerId, status: vrPlane.status, verdict: vr.verification.verdict, rounds: vr.verification.rounds, finding: redactHead(vr.verification.findings[0] ?? "", 220) });
                     const pass = vr.terminal.kind === "completed" && vr.verification.verdict === "PASS";
                     const vrPaused = pausedCauseOf(vr.terminal);

package/dist/leader/repair-wire.js

@@ -1,6 +1,6 @@
 import { runRepairLoop, delimitUntrusted, } from "@sema-agent/core";
 import { mkRepairOracle } from "./repair-oracle.js";
-import { terminalProjection } from "@sema-agent/core";
+import { outwardPlane } from "../terminal.js";
 import { redactHead } from "../observability/run-terminal.js";
 function statusForTerminal(t) {
     return t === "fixed" || t === "candidate_only" ? "completed" : "failed";
@@ -52,7 +52,7 @@ async function runRepairLoopForLeaderInner(solo, implSpec, cfg) {
         return { report: { ...base, status: "failed", error: safe }, result: undefined };
     }
     const terminal = result.repairTerminal;
-    const plane = terminalProjection(result.terminal);
+    const plane = outwardPlane(result.terminal);
     const report = {
         ...base,
         status: terminal === undefined ? "failed" : statusForTerminal(terminal),

package/dist/leader/wire.js

@@ -1,4 +1,4 @@
-import { terminalProjection } from "@sema-agent/core";
+import { outwardPlane } from "../terminal.js";
 import { parseNumOrFail } from "../config.js";
 import { execFileSync } from "node:child_process";
 import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
@@ -176,7 +176,7 @@ export function createLeaderRunner(cfg) {
                     })
                         .result();
                     if (res.terminal.kind !== "completed")
-                        throw new Error(`repair round ${round} did not complete (status=${terminalProjection(res.terminal).status})`);
+                        throw new Error(`repair round ${round} did not complete (status=${outwardPlane(res.terminal).status})`);
                     return { costUsd: res.stats?.costMicroUsd !== undefined ? res.stats.costMicroUsd / 1e6 : undefined, note: res.result?.slice(0, 200) };
                 }
                 finally {

package/dist/plugins/file-run-store.js

@@ -1,9 +1,9 @@
 import { redactErrorMessage, redactLedgerEventData, redactTerminalResult } from "../observability/run-terminal.js";
+import { outwardPlane } from "../terminal.js";
 import { projectUsageStats, USAGE_SCAN_LIMIT } from "../usage-analytics.js";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readdirSync, renameSync, rmSync, statSync } from "node:fs";
 import { randomBytes } from "node:crypto";
-import { terminalProjection } from "@sema-agent/core";
 import { AppendLog, atomicWriteFile, ensureDir, isProcessLive, processFingerprint, readJsonlRecords, sanitizePathComponent, writeThenLink } from "@sema-agent/core";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { StoreBootRefusalError } from "./store-contracts.js";
@@ -371,7 +371,7 @@ export class FileRunStore {
             r.status = status;
             r.result = result;
             r.error = error;
-            r.errorCode = result === null ? null : (terminalProjection(result.terminal).errorCode ?? null);
+            r.errorCode = result === null ? null : (outwardPlane(result.terminal).errorCode ?? null);
             r.updatedAt = new Date();
             this.persist(r);
             pending = {
@@ -382,7 +382,7 @@ export class FileRunStore {
                 resultTaskId: result?.taskId,
                 model: result?.model,
                 errorCode: r.errorCode ?? undefined,
-                errorMessage: (result === null ? undefined : terminalProjection(result.terminal).errorMessage) ?? error ?? undefined,
+                errorMessage: (result === null ? undefined : outwardPlane(result.terminal).errorMessage) ?? error ?? undefined,
                 elapsedMs: Math.max(0, Date.now() - r.createdAt.getTime()),
             };
         }

package/dist/plugins/memory-run-store.js

@@ -1,6 +1,6 @@
 import { redactErrorMessage, redactLedgerEventData, redactTerminalResult } from "../observability/run-terminal.js";
+import { outwardPlane } from "../terminal.js";
 import { projectUsageStats, USAGE_SCAN_LIMIT } from "../usage-analytics.js";
-import { terminalProjection } from "@sema-agent/core";
 import { notifyRunTerminal } from "../observability/run-terminal.js";
 const ownerEq = (a, b) => (a ?? null) === (b ?? null);
 export class MemoryRunStore {
@@ -121,7 +121,7 @@ export class MemoryRunStore {
             r.status = status;
             r.result = result;
             r.error = error;
-            r.errorCode = result === null ? null : (terminalProjection(result.terminal).errorCode ?? null);
+            r.errorCode = result === null ? null : (outwardPlane(result.terminal).errorCode ?? null);
             r.updatedAt = new Date();
             pending = {
                 runId: taskId,
@@ -131,7 +131,7 @@ export class MemoryRunStore {
                 resultTaskId: result?.taskId,
                 model: result?.model,
                 errorCode: r.errorCode ?? undefined,
-                errorMessage: (result === null ? undefined : terminalProjection(result.terminal).errorMessage) ?? error ?? undefined,
+                errorMessage: (result === null ? undefined : outwardPlane(result.terminal).errorMessage) ?? error ?? undefined,
                 elapsedMs: Math.max(0, Date.now() - r.createdAt.getTime()),
             };
         }

package/dist/plugins/run-store-sql.js

@@ -1,5 +1,5 @@
 import { redactErrorMessage, redactLedgerEventData, redactTerminalResult } from "../observability/run-terminal.js";
-import { terminalProjection } from "@sema-agent/core";
+import { outwardPlane } from "../terminal.js";
 import { projectUsageStats, USAGE_SCAN_LIMIT } from "../usage-analytics.js";
 import { escapeLike } from "./sql-escape.js";
 import { pgSanitizeText } from "./pg-safe-json.js";
@@ -120,7 +120,7 @@ export class SqlRunStore {
     async setTerminal(taskId, status, result, error) {
         result = redactTerminalResult(result);
         error = error === null ? null : (redactErrorMessage(error) ?? null);
-        const errorCode = result === null ? null : (terminalProjection(result.terminal).errorCode ?? null);
+        const errorCode = result === null ? null : (outwardPlane(result.terminal).errorCode ?? null);
         let won = false;
         let observed;
         await this.tx(async (conn) => {
@@ -153,7 +153,7 @@ export class SqlRunStore {
                 resultTaskId: result?.taskId,
                 model: result?.model,
                 errorCode: errorCode ?? undefined,
-                errorMessage: (result === null ? undefined : terminalProjection(result.terminal).errorMessage) ?? error ?? undefined,
+                errorMessage: (result === null ? undefined : outwardPlane(result.terminal).errorMessage) ?? error ?? undefined,
                 elapsedMs: observed?.createdAt === undefined ? undefined : Math.max(0, Date.now() - observed.createdAt),
             });
         }