@sema-agent/server 7.93.7 → 7.94.0

package/dist/plugins/image-bake-store-sql.js

@@ -1,9 +1,10 @@
 import { uuidv7 } from "@sema-agent/core";
 import { randomBytes } from "node:crypto";
 import { pgSanitizeText, pgHasUnstorable } from "./pg-safe-json.js";
-import { parseJsonOr as parseJson, toIso as iso } from "./sql-row-helpers.js";
+import { toIso as iso, normalizeIsoOrNull as isoOrNull } from "./sql-row-helpers.js";
 import { mysqlDriver, pgDriver, dialectJsonEncoder } from "./sql-driver.js";
-import { mapBakeRow as mapRow, BAKE_SELECT_COLS as SELECT_COLS, } from "./store-contracts.js";
+import { decodeJsonColumn, decodeNullableJsonColumn, foldJsonColumn, jsonColumnText, readNonNullJsonValueColumn, readStringArrayColumn, } from "./sql-json-column.js";
+import {} from "./store-contracts.js";
 import { isDupKeyError } from "./sql-errors.js";
 import { ensureIndexes } from "./ensure-index.js";
 export const PG_IMAGE_BAKE_SCHEMA = [
@@ -61,6 +62,77 @@ export const PG_IMAGE_BAKE_SCHEMA = [
      PRIMARY KEY (pool)
    )`,
 ];
+function bakeSelectCols(dialect) {
+    return [
+        "bake_id",
+        "profile",
+        jsonColumnText(dialect, "bands"),
+        "base_ref",
+        "push",
+        "dry_run",
+        "logs",
+        jsonColumnText(dialect, "argv"),
+        "status",
+        "state",
+        "digest",
+        "repo",
+        "ref",
+        "index_id",
+        "exit_code",
+        "error",
+        "error_code",
+        "manifest_sha",
+        "tag",
+        "idem_key",
+        "ingest_secret",
+        "runner_id",
+        "lease_until",
+        "cancel_requested",
+        "requested_by",
+        "created_at",
+        "updated_at",
+    ].join(", ");
+}
+function mapRow(r) {
+    return {
+        bakeId: r.bake_id,
+        profile: r.profile,
+        bands: decodeNullableJsonColumn(r.bands, readStringArrayColumn, bakeWhere("bands", r.bake_id)) ?? null,
+        baseRef: r.base_ref,
+        push: !!r.push,
+        dryRun: !!r.dry_run,
+        logs: !!r.logs,
+        argv: decodeJsonColumn(r.argv, readStringArrayColumn, bakeWhere("argv", r.bake_id)),
+        status: r.status,
+        state: r.state ?? null,
+        digest: r.digest,
+        repo: r.repo,
+        ref: r.ref,
+        indexId: r.index_id,
+        exitCode: r.exit_code === null ? null : Number(r.exit_code),
+        error: r.error,
+        errorCode: r.error_code ?? null,
+        manifestSha: r.manifest_sha,
+        tag: r.tag,
+        idemKey: r.idem_key,
+        ingestSecret: r.ingest_secret,
+        runnerId: r.runner_id,
+        leaseUntil: isoOrNull(r.lease_until),
+        cancelRequested: !!r.cancel_requested,
+        requestedBy: r.requested_by,
+        createdAt: iso(r.created_at),
+        updatedAt: iso(r.updated_at),
+    };
+}
+const bakeWhere = (column, bakeId) => `image_bake.${column} for bake ${bakeId}`;
+function refusingBakeRow(read) {
+    try {
+        return read();
+    }
+    catch (e) {
+        throw foldJsonColumn(e, (m) => new Error(`image-bake-store: ${m} — refusing rather than serve a bake row nobody can read`));
+    }
+}
 export const IMAGE_BAKE_INDEXES = [
     { table: "image_bake", name: "idx_image_bake_status", columns: ["status"] },
     { table: "image_bake", name: "idx_image_bake_created", columns: ["created_at"] },
@@ -183,23 +255,23 @@ export class SqlImageBake {
         return { created: true, bake };
     }
     async getBake(bakeId) {
-        const { rows } = await this.db.query(this.q(`SELECT ${SELECT_COLS} FROM image_bake WHERE bake_id = ? LIMIT 1`, `SELECT ${SELECT_COLS} FROM image_bake WHERE bake_id = $1 LIMIT 1`), [bakeId]);
-        return rows[0] ? mapRow(rows[0]) : null;
+        const { rows } = await this.db.query(this.q(`SELECT ${bakeSelectCols("tidb")} FROM image_bake WHERE bake_id = ? LIMIT 1`, `SELECT ${bakeSelectCols("pg")} FROM image_bake WHERE bake_id = $1 LIMIT 1`), [bakeId]);
+        return rows[0] ? refusingBakeRow(() => mapRow(rows[0])) : null;
     }
     async getBakeByIdem(idemKey) {
-        const { rows } = await this.db.query(this.q(`SELECT ${SELECT_COLS} FROM image_bake WHERE idem_key = ? LIMIT 1`, `SELECT ${SELECT_COLS} FROM image_bake WHERE idem_key = $1 LIMIT 1`), [idemKey]);
-        return rows[0] ? mapRow(rows[0]) : null;
+        const { rows } = await this.db.query(this.q(`SELECT ${bakeSelectCols("tidb")} FROM image_bake WHERE idem_key = ? LIMIT 1`, `SELECT ${bakeSelectCols("pg")} FROM image_bake WHERE idem_key = $1 LIMIT 1`), [idemKey]);
+        return rows[0] ? refusingBakeRow(() => mapRow(rows[0])) : null;
     }
     async findActiveByArgv(argv) {
-        const { rows } = await this.db.query(this.q(`SELECT ${SELECT_COLS} FROM image_bake WHERE status IN ('queued','running') AND argv = CAST(? AS JSON) ` +
-            "ORDER BY created_at DESC LIMIT 1", `SELECT ${SELECT_COLS} FROM image_bake WHERE status IN ('queued','running') AND argv = $1::jsonb ` +
+        const { rows } = await this.db.query(this.q(`SELECT ${bakeSelectCols("tidb")} FROM image_bake WHERE status IN ('queued','running') AND argv = CAST(? AS JSON) ` +
+            "ORDER BY created_at DESC LIMIT 1", `SELECT ${bakeSelectCols("pg")} FROM image_bake WHERE status IN ('queued','running') AND argv = $1::jsonb ` +
             "ORDER BY created_at DESC LIMIT 1"), [JSON.stringify(argv)]);
-        return rows[0] ? mapRow(rows[0]) : null;
+        return rows[0] ? refusingBakeRow(() => mapRow(rows[0])) : null;
     }
     async findActiveAny() {
-        const { rows } = await this.db.query(`SELECT ${SELECT_COLS} FROM image_bake WHERE status IN ('queued','running') AND dry_run = 0 ` +
+        const { rows } = await this.db.query(`SELECT ${bakeSelectCols(this.db.dialect)} FROM image_bake WHERE status IN ('queued','running') AND dry_run = 0 ` +
             "ORDER BY created_at ASC LIMIT 1", []);
-        return rows[0] ? mapRow(rows[0]) : null;
+        return rows[0] ? refusingBakeRow(() => mapRow(rows[0])) : null;
     }
     async findNextQueuedId() {
         const { rows } = await this.db.query("SELECT bake_id FROM image_bake WHERE status = 'queued' ORDER BY created_at ASC LIMIT 1", []);
@@ -313,13 +385,13 @@ export class SqlImageBake {
         return m == null ? 0 : Number(m);
     }
     async getEvents(bakeId, afterSeq) {
-        const { rows } = await this.db.query(this.q("SELECT seq, line_ord, kind, level, data, ts FROM image_bake_event WHERE bake_id = ? AND seq > ? ORDER BY seq ASC", "SELECT seq, line_ord, kind, level, data, ts FROM image_bake_event WHERE bake_id = $1 AND seq > $2 ORDER BY seq ASC"), [bakeId, afterSeq]);
+        const { rows } = await this.db.query(this.q(`SELECT seq, line_ord, kind, level, ${jsonColumnText("tidb", "data")}, ts FROM image_bake_event WHERE bake_id = ? AND seq > ? ORDER BY seq ASC`, `SELECT seq, line_ord, kind, level, ${jsonColumnText("pg", "data")}, ts FROM image_bake_event WHERE bake_id = $1 AND seq > $2 ORDER BY seq ASC`), [bakeId, afterSeq]);
         return rows.map((r) => ({
             seq: Number(r.seq),
             lineOrd: r.line_ord === null ? null : Number(r.line_ord),
             kind: String(r.kind),
             level: r.level ?? null,
-            data: parseJson(r.data, null),
+            data: decodeNullableJsonColumn(r.data, readNonNullJsonValueColumn, `image_bake_event.data for bake ${bakeId} seq ${String(r.seq)}`) ?? null,
             ts: iso(r.ts),
         }));
     }

package/dist/plugins/image-index-sql.js

@@ -1,7 +1,9 @@
 import { createHash } from "node:crypto";
 import { pgSafeJsonStringify, pgSanitizeText, pgHasUnstorable, PgUnstorableError } from "./pg-safe-json.js";
-import { mapImageRow as mapRow, } from "./store-contracts.js";
+import {} from "./store-contracts.js";
 import { mysqlDriver, pgDriver } from "./sql-driver.js";
+import { createObjectColumnReader, decodeNullableJsonColumn, foldJsonColumn, jsonColumnText, readJsonArrayColumn, readJsonObjectColumn } from "./sql-json-column.js";
+import { normalizeIsoOrNull as isoOrNull } from "./sql-row-helpers.js";
 import { ensureIndexes } from "./ensure-index.js";
 export const PG_IMAGE_INDEX_SCHEMA = [
     `CREATE TABLE IF NOT EXISTS sandbox_image_index (
@@ -29,6 +31,67 @@ export const PG_IMAGE_INDEX_SCHEMA = [
      PRIMARY KEY (id)
    )`,
 ];
+function imageSelectCols(dialect) {
+    return [
+        "id",
+        "profile",
+        jsonColumnText(dialect, "bands"),
+        "repo",
+        "tag",
+        "digest",
+        jsonColumnText(dialect, "toolchain_versions"),
+        jsonColumnText(dialect, "capabilities"),
+        jsonColumnText(dialect, "pod_contract"),
+        "size_bytes",
+        "status",
+        "visibility",
+        "tenant_id",
+        "manifest_sha",
+        "recipe_git_sha",
+        "generator_version",
+        "build_date",
+        "supersedes",
+        "signed",
+        "created_at",
+        "updated_at",
+    ].join(", ");
+}
+const readCapabilitiesColumn = createObjectColumnReader();
+const readPodContractColumn = createObjectColumnReader();
+function mapRow(r) {
+    const at = (column) => `sandbox_image_index.${column} for image ${r.id}`;
+    return {
+        id: r.id,
+        profile: r.profile,
+        bands: decodeNullableJsonColumn(r.bands, readJsonArrayColumn, at("bands")) ?? [],
+        repo: r.repo,
+        tag: r.tag,
+        digest: r.digest,
+        toolchainVersions: decodeNullableJsonColumn(r.toolchain_versions, readJsonObjectColumn, at("toolchain_versions")) ?? {},
+        capabilities: decodeNullableJsonColumn(r.capabilities, readCapabilitiesColumn, at("capabilities")) ?? {},
+        podContract: decodeNullableJsonColumn(r.pod_contract, readPodContractColumn, at("pod_contract")) ?? {},
+        sizeBytes: r.size_bytes === null ? null : Number(r.size_bytes),
+        status: r.status,
+        visibility: r.visibility,
+        tenantId: r.tenant_id,
+        manifestSha: r.manifest_sha,
+        recipeGitSha: r.recipe_git_sha,
+        generatorVersion: r.generator_version,
+        buildDate: isoOrNull(r.build_date),
+        supersedes: r.supersedes,
+        signed: !!r.signed,
+        createdAt: isoOrNull(r.created_at) ?? new Date(0).toISOString(),
+        updatedAt: isoOrNull(r.updated_at) ?? new Date(0).toISOString(),
+    };
+}
+function refusingImageRow(read) {
+    try {
+        return read();
+    }
+    catch (e) {
+        throw foldJsonColumn(e, (m) => new Error(`image-index: ${m} — refusing rather than serve an image row nobody can read`));
+    }
+}
 export const IMAGE_INDEX_INDEXES = [
     { table: "sandbox_image_index", name: "uq_repo_digest", columns: ["repo", "digest"], unique: true },
     { table: "sandbox_image_index", name: "idx_sandbox_image_index_profile_status", columns: ["profile", "status", "visibility"] },
@@ -199,26 +262,26 @@ export class SqlImageIndex {
         return id;
     }
     async getById(id) {
-        const { rows } = await this.db.query(this.q("SELECT * FROM sandbox_image_index WHERE id=? LIMIT 1", "SELECT * FROM sandbox_image_index WHERE id = $1 LIMIT 1"), [id]);
-        return rows[0] ? mapRow(rows[0]) : null;
+        const { rows } = await this.db.query(this.q(`SELECT ${imageSelectCols("tidb")} FROM sandbox_image_index WHERE id=? LIMIT 1`, `SELECT ${imageSelectCols("pg")} FROM sandbox_image_index WHERE id = $1 LIMIT 1`), [id]);
+        return rows[0] ? refusingImageRow(() => mapRow(rows[0])) : null;
     }
     async getByDigest(digest) {
-        const { rows } = await this.db.query(this.q("SELECT * FROM sandbox_image_index WHERE digest=? ORDER BY updated_at DESC LIMIT 1", "SELECT * FROM sandbox_image_index WHERE digest = $1 ORDER BY updated_at DESC LIMIT 1"), [digest]);
-        return rows[0] ? mapRow(rows[0]) : null;
+        const { rows } = await this.db.query(this.q(`SELECT ${imageSelectCols("tidb")} FROM sandbox_image_index WHERE digest=? ORDER BY updated_at DESC LIMIT 1`, `SELECT ${imageSelectCols("pg")} FROM sandbox_image_index WHERE digest = $1 ORDER BY updated_at DESC LIMIT 1`), [digest]);
+        return rows[0] ? refusingImageRow(() => mapRow(rows[0])) : null;
     }
     async latestPublished(profile, viewer) {
         if (this.db.dialect === "tidb") {
             const vis = visibilityClauseTidb(viewer);
-            const { rows } = await this.db.query(`SELECT * FROM sandbox_image_index
+            const { rows } = await this.db.query(`SELECT ${imageSelectCols("tidb")} FROM sandbox_image_index
           WHERE profile=? AND status='published' AND ${vis.sql}
           ORDER BY (build_date IS NULL), build_date DESC, created_at DESC LIMIT 1`, [profile, ...vis.params]);
-            return rows[0] ? mapRow(rows[0]) : null;
+            return rows[0] ? refusingImageRow(() => mapRow(rows[0])) : null;
         }
         const vis = visibilityClausePg(viewer, 2);
-        const { rows } = await this.db.query(`SELECT * FROM sandbox_image_index
+        const { rows } = await this.db.query(`SELECT ${imageSelectCols("pg")} FROM sandbox_image_index
         WHERE profile = $1 AND status = 'published' AND ${vis.sql}
         ORDER BY build_date DESC NULLS LAST, created_at DESC LIMIT 1`, [profile, ...vis.params]);
-        return rows[0] ? mapRow(rows[0]) : null;
+        return rows[0] ? refusingImageRow(() => mapRow(rows[0])) : null;
     }
     async list(filter) {
         const limit = Math.min(Math.max(1, filter.limit ?? DEFAULT_LIMIT), MAX_LIMIT);
@@ -246,7 +309,7 @@ export class SqlImageIndex {
                     params.push(new Date(c.createdAt), new Date(c.createdAt), c.id);
                 }
             }
-            const sql = `SELECT * FROM sandbox_image_index WHERE ${where.join(" AND ")} ` +
+            const sql = `SELECT ${imageSelectCols("tidb")} FROM sandbox_image_index WHERE ${where.join(" AND ")} ` +
                 `ORDER BY created_at DESC, id DESC LIMIT ?`;
             const { rows } = await this.db.query(sql, [...params, limit + 1]);
             rawRows = rows;
@@ -276,13 +339,13 @@ export class SqlImageIndex {
                     idx += 3;
                 }
             }
-            const sql = `SELECT * FROM sandbox_image_index WHERE ${where.join(" AND ")} ` +
+            const sql = `SELECT ${imageSelectCols("pg")} FROM sandbox_image_index WHERE ${where.join(" AND ")} ` +
                 `ORDER BY created_at DESC, id DESC LIMIT $${idx}`;
             params.push(limit + 1);
             const { rows } = await this.db.query(sql, params);
             rawRows = rows;
         }
-        let entries = rawRows.map(mapRow);
+        let entries = refusingImageRow(() => rawRows.map(mapRow));
         let nextCursor = null;
         if (entries.length > limit) {
             entries = entries.slice(0, limit);

package/dist/plugins/local-checkpoint-store.d.ts

@@ -183,8 +183,29 @@ export declare class LocalCheckpointStore {
         sessionId: string;
         scope: string;
     }>>;
-    putCtx(sessionId: string, ctx: unknown): Promise<void>;
-    getCtx<T = unknown>(sessionId: string): Promise<T | null>;
+    /**
+     * 🔴 **写腿的形闸与 SQL 孪生逐字同一条**(codex 对抗复审 r1 [medium],验真后按类修):TS 的 `object` 说不出
+     * 「序列化之后是一只 JSON 对象」—— 数组 / `Date` / `toJSON()` 返回标量或 `null` 的对象全都通得过类型面,
+     * 各自写出一份读腿判坏的字节。而这一写是**无条件覆盖**,所以它会「成功」地把一份读得回来的耐久 ctx 换成
+     * 读不回来的 —— 调用方拿 2xx,下一次续跑永久 409。⇒ 闸在落盘之前,盘上那一份原样不动。
+     *
+     * 🔴 **闸判的必须是「将要落盘的那一串字节」本身**(codex r2 [medium],验真后修):初版判的是
+     * `JSON.stringify(ctx)`,而真正落盘的是 `JSON.stringify(rec)` —— `toJSON(key)` 拿得到**键名**,所以
+     * 一个 `toJSON(k){ return k === "ctx" ? null : {…} }` 的对象验的是 `{…}`、写的是 `{"ctx":null}`
+     * (实测两串逐字不同)。有状态的序列化器同理。⇒ 整条记录**只序列化一次**,闸判那一串,写也写那一串。
+     */
+    putCtx(sessionId: string, ctx: object): Promise<void>;
+    /**
+     * 🔴 **坏体 ⇒ 拒,绝不读成缺席**(S-577,与 SQL 孪生同一条判据)。修前这里是
+     * `catch { return null }` + `(rec.ctx as T) ?? null`,于是一个撕裂 / 手改 / 权限读不动的 ctx 文件与
+     * 「这条会话根本没有 ctx」在消费点上**逐字同答**(409 `resume context missing`)—— 运维据此去「重新
+     * 提交一个任务」,而真因是盘上那一格坏了。三个店同向:不是「这一行不在」,是「这一行读不出来」。
+     *
+     * `ctx` 的形判据同 SQL 孪生:**一只 JSON 对象** —— 而且是**同一只读者**({@link createCtxRecordReader}
+     * 里合成的 {@link createObjectColumnReader}),不是「同一个意思的两份判据」。写腿 `putCtx(…, ctx: object)`
+     * 只收对象,读腿只认对象,两条腿一个类型。
+     */
+    getCtx<T extends object = object>(sessionId: string): Promise<T | null>;
     /** GC ctx files whose lifecycle is over — same three guards as the SQL twins (stale ∧ no pending ∧ no active run). */
     reapCtx(cutoff: number): Promise<number>;
     /**

package/dist/plugins/local-checkpoint-store.js

@@ -1,17 +1,41 @@
+import { z } from "zod";
 import { ASK_USER_QUESTION_TOOL_NAME, contentKindOf } from "../approval-content-kind.js";
 import { createHash } from "node:crypto";
-import { existsSync, readFileSync, readdirSync, renameSync, unlinkSync, mkdirSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, unlinkSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import { isApprovalGateKind } from "../tool-approval.js";
 import { FileCheckpointStore, atomicWriteFile, executionVerdict, sanitizePathComponent, } from "@sema-agent/core";
 import { approvalDecisionOfWinner, approvalPayloadFingerprint, boundedRuleOffers, boundedToolInput, pendingActionToolCallId, pendingRowPrecedes, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS } from "./checkpoint-store-sql.js";
+import { quarantineUnreadableSidecar } from "./local-sidecar-quarantine.js";
+import { createZodColumnReader, decodeJsonColumn, readStringArrayColumn } from "./sql-json-column.js";
 import { UNMANAGED_RETENTION } from "./retention-store-sql.js";
+import { assertJsonColumnWritable, createObjectColumnReader } from "./sql-json-column.js";
 function terminalAtOf(cp) {
     return Math.max(cp.createdAt + TERMINAL_BACKSTOP_MS, (cp.deadline ?? 0) + TERMINAL_GRACE_MS);
 }
 function ctxFileOf(sessionId) {
     return `${sanitizePathComponent(sessionId).slice(0, 48)}-${createHash("sha256").update(sessionId).digest("hex").slice(0, 12)}.json`;
 }
+const CtxRecordSchema = z.object({
+    sessionId: z.string(),
+    updatedAt: z.number(),
+    ctx: z.unknown(),
+});
+const readCtxRecord = createZodColumnReader(CtxRecordSchema);
+const readScopeRegistry = readStringArrayColumn;
+const readSessionTokenIndex = createZodColumnReader(z.record(z.string(), z.array(z.string())));
+function createCtxRecordReader() {
+    const readPayload = createObjectColumnReader();
+    return (body) => {
+        const envelope = readCtxRecord(body);
+        if (envelope.problem !== undefined)
+            return { problem: envelope.problem };
+        const payload = readPayload(envelope.value.ctx);
+        if (payload.problem !== undefined)
+            return { problem: `its \`ctx\` member is not a JSON object (${payload.problem})` };
+        return { value: { ...envelope.value, ctx: payload.value } };
+    };
+}
 export class LocalCheckpointStore {
     retention = UNMANAGED_RETENTION;
     durability = "durable";
@@ -37,37 +61,23 @@ export class LocalCheckpointStore {
         mkdirSync(this.tmpDir, { recursive: true });
         if (existsSync(this.scopesPath)) {
             try {
-                const arr = JSON.parse(readFileSync(this.scopesPath, "utf8"));
-                if (Array.isArray(arr))
-                    for (const s of arr)
-                        if (typeof s === "string")
-                            this.scopes.add(s);
+                for (const s of decodeJsonColumn(readFileSync(this.scopesPath, "utf8"), readScopeRegistry, "checkpoint-scopes.json (the local scope registry)"))
+                    this.scopes.add(s);
             }
             catch (e) {
-                const quarantine = `${this.scopesPath}.corrupt-${Date.now()}`;
-                try {
-                    renameSync(this.scopesPath, quarantine);
-                }
-                catch {
-                }
+                quarantineUnreadableSidecar(this.scopesPath, "LocalCheckpointStore scope registry", e instanceof Error ? e.message : String(e));
                 this.scopeRegistryCorrupt = true;
-                console.warn(`LocalCheckpointStore: checkpoint-scopes.json is corrupt (${e instanceof Error ? e.message : String(e)}) — ` +
-                    `will rebuild the scope set from the data plane on first read (core listScopes); ` +
-                    `file quarantined at ${quarantine}`);
+                console.warn("LocalCheckpointStore: will rebuild the scope set from the data plane on first read (core listScopes) — enumeration is EMPTY until then");
             }
         }
         if (existsSync(this.sessionTokensPath)) {
             try {
-                const rec = JSON.parse(readFileSync(this.sessionTokensPath, "utf8"));
-                if (rec && typeof rec === "object" && !Array.isArray(rec)) {
-                    for (const [sid, toks] of Object.entries(rec)) {
-                        if (!Array.isArray(toks))
-                            continue;
-                        this.sessionTokens.set(sid, new Set(toks.filter((t) => typeof t === "string")));
-                    }
-                }
+                const rec = decodeJsonColumn(readFileSync(this.sessionTokensPath, "utf8"), readSessionTokenIndex, "checkpoint-session-tokens.json (the local session→tokens index)");
+                for (const [sid, toks] of Object.entries(rec))
+                    this.sessionTokens.set(sid, new Set(toks));
             }
-            catch {
+            catch (e) {
+                quarantineUnreadableSidecar(this.sessionTokensPath, "LocalCheckpointStore session→tokens index", e instanceof Error ? e.message : String(e));
             }
         }
     }
@@ -298,19 +308,16 @@ export class LocalCheckpointStore {
     }
     async putCtx(sessionId, ctx) {
         const rec = { sessionId, updatedAt: Date.now(), ctx };
-        atomicWriteFile(this.tmpDir, join(this.ctxDir, ctxFileOf(sessionId)), JSON.stringify(rec));
+        const text = JSON.stringify(rec);
+        assertJsonColumnWritable(text, createCtxRecordReader(), `checkpoint ctx for session ${JSON.stringify(sessionId)} (local write leg)`);
+        atomicWriteFile(this.tmpDir, join(this.ctxDir, ctxFileOf(sessionId)), text);
     }
     async getCtx(sessionId) {
         const p = join(this.ctxDir, ctxFileOf(sessionId));
         if (!existsSync(p))
             return null;
-        try {
-            const rec = JSON.parse(readFileSync(p, "utf8"));
-            return rec.sessionId === sessionId ? (rec.ctx ?? null) : null;
-        }
-        catch {
-            return null;
-        }
+        const rec = decodeJsonColumn(readFileSync(p, "utf8"), createCtxRecordReader(), `checkpoint-ctx ${ctxFileOf(sessionId)} for session ${JSON.stringify(sessionId)}`);
+        return rec.sessionId === sessionId ? rec.ctx : null;
     }
     async reapCtx(cutoff) {
         let n = 0;
@@ -320,7 +327,7 @@ export class LocalCheckpointStore {
             const p = join(this.ctxDir, f);
             let rec;
             try {
-                rec = JSON.parse(readFileSync(p, "utf8"));
+                rec = decodeJsonColumn(readFileSync(p, "utf8"), readCtxRecord, `checkpoint-ctx ${f} (reap scan)`);
             }
             catch {
                 continue;

package/dist/plugins/local-session-store.d.ts

@@ -107,6 +107,20 @@ export declare class LocalSessionStore implements SessionStore {
     private doFlush;
     /** Throttled best-effort warn for a sidecar I/O failure (bug D): never throws, at most once per ~minute so a
      *  persistently-failing disk doesn't spam the log on every debounced flush. */
+    /**
+     * 读不出一份边档时的**唯一**处置(两只 sidecar 共用)——先**留证**再降级。
+     *
+     * 🔴 为什么留证是必需的而不是洁癖(codex 对抗复审一轮 [medium],亲验为真;红先在
+     * `test/local-store-bad-body.test.ts`):两只边档都是**整档原子替换**的写法,所以「读不出 ⇒ 空表 +
+     * 继续服务」之后,**下一次写就把原档盖掉了**。对一份整份是垃圾的体无所谓;对一份只有某一格值型
+     * 不对的**混合体**,那等于把一次局部的、可修的损坏放大成一次全量的、不可逆的丢失。判据不变
+     * (半份值仍然不许端出去),改的是拒的那一刻。
+     *
+     * 两条 warn 各说一件事:{@link quarantineUnreadableSidecar} 说「字节挪到哪了」(每次都说,因为它稀有
+     * 且不可重现),{@link warnSidecar} 说「这条腿降级了」(节流,因为写失败可能每拍都发生)。
+     * ENOENT(首次启动没有这份档)在调用点就被排除,压根到不了这里。
+     */
+    private refuseSidecar;
     private warnSidecar;
     acquire(sessionId?: string, opts?: {
         requireExisting?: boolean;

package/dist/plugins/local-session-store.js

@@ -2,6 +2,8 @@ import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
 import { SessionError, validateEntriesForImport } from "@sema-agent/core";
 import { contentForkRelation, fastForwardSharedContentDiverged, identicalIdsAlsoIdenticalContent } from "../session-sync-content.js";
+import { quarantineUnreadableSidecar } from "./local-sidecar-quarantine.js";
+import { decodeJsonColumn, readStringRecordColumn } from "./sql-json-column.js";
 import { UNMANAGED_RETENTION } from "./retention-store-sql.js";
 import { classifySyncRelationshipByIds, SyncConflictError, stagingIdFor, } from "../session-sync-kernel.js";
 const ownerEq = (a, b) => (a ?? null) === (b ?? null);
@@ -62,15 +64,15 @@ export class LocalSessionStore {
             const path = this.titleSidecarPath;
             st.loaded = (async () => {
                 try {
-                    const parsed = JSON.parse(await readFile(path, "utf8"));
+                    const parsed = decodeJsonColumn(await readFile(path, "utf8"), readStringRecordColumn, "session-titles.json (the local title sidecar)");
                     for (const [id, t] of Object.entries(parsed)) {
-                        if (typeof t === "string" && !st.titles.has(id))
+                        if (!st.titles.has(id))
                             st.titles.set(id, t);
                     }
                 }
                 catch (e) {
                     if (e?.code !== "ENOENT")
-                        this.warnSidecar("read", e);
+                        this.refuseSidecar(path, "LocalSessionStore title sidecar", e);
                 }
             })();
         }
@@ -113,16 +115,15 @@ export class LocalSessionStore {
             const path = this.sidecarPath;
             this.loaded = (async () => {
                 try {
-                    const raw = await readFile(path, "utf8");
-                    const parsed = JSON.parse(raw);
+                    const parsed = decodeJsonColumn(await readFile(path, "utf8"), readStringRecordColumn, "session-last-activity.json (the local recency sidecar)");
                     for (const [id, ts] of Object.entries(parsed)) {
-                        if (typeof ts === "string" && !this.lastActivity.has(id))
+                        if (!this.lastActivity.has(id))
                             this.lastActivity.set(id, ts);
                     }
                 }
                 catch (e) {
                     if (e?.code !== "ENOENT")
-                        this.warnSidecar("read", e);
+                        this.refuseSidecar(path, "LocalSessionStore lastActivity sidecar", e);
                 }
             })();
         }
@@ -164,6 +165,10 @@ export class LocalSessionStore {
         if (this.dirty)
             await this.doFlush();
     }
+    refuseSidecar(path, what, e) {
+        quarantineUnreadableSidecar(path, what, e instanceof Error ? e.message : String(e));
+        this.warnSidecar("read", e);
+    }
     warnSidecar(op, e) {
         const now = Date.now();
         if (now - this.lastWarnAt < 60_000)

package/dist/plugins/local-sidecar-quarantine.d.ts

@@ -0,0 +1,10 @@
+/**
+ * 把一份读不出形的档挪开并**大声说**。永不抛(它挂在降级臂上,不许把降级变成故障)。
+ *
+ * @param path    原档路径。
+ * @param what    给人读的一句话:这是什么档、读不出会怎样(进 warn 文案)。
+ * @param reason  判形失败的原因(属主的错误文案 / 异常消息)。
+ * @returns 隔离档的路径;挪不动时 `undefined`(此时 warn 里已说清)。
+ */
+export declare function quarantineUnreadableSidecar(path: string, what: string, reason: string): string | undefined;
+//# sourceMappingURL=local-sidecar-quarantine.d.ts.map

package/dist/plugins/local-sidecar-quarantine.js

@@ -0,0 +1,15 @@
+import { renameSync } from "node:fs";
+export function quarantineUnreadableSidecar(path, what, reason) {
+    const target = `${path}.corrupt-${Date.now()}-${process.pid}`;
+    try {
+        renameSync(path, target);
+    }
+    catch (e) {
+        console.warn(`${what}: ${path} is unreadable (${reason}) and could NOT be quarantined (${e instanceof Error ? e.message : String(e)}) — ` +
+            `the bytes are still at that path; a later write to it may replace them`);
+        return undefined;
+    }
+    console.warn(`${what}: ${path} is unreadable (${reason}) — quarantined at ${target} so the next write cannot replace it`);
+    return target;
+}
+//# sourceMappingURL=local-sidecar-quarantine.js.map

package/dist/plugins/local-task-attachment-store.d.ts

@@ -1,4 +1,4 @@
-import type { TaskAttachmentStore, TaskAttachmentRecord } from "./task-attachment-store.js";
+import { type TaskAttachmentStore, type TaskAttachmentRecord } from "./task-attachment-store.js";
 export declare class LocalTaskAttachmentStore implements TaskAttachmentStore {
     private readonly dir;
     private metas;

package/dist/plugins/local-task-attachment-store.js

@@ -1,6 +1,9 @@
 import { promises as fsp } from "node:fs";
 import { join } from "node:path";
+import { TaskAttachmentRecordSchema } from "./task-attachment-store.js";
+import { createZodColumnReader, decodeJsonColumn } from "./sql-json-column.js";
 const ID_RE = /^[0-9a-f-]{16,64}$/i;
+const readAttachmentMeta = createZodColumnReader(TaskAttachmentRecordSchema);
 export class LocalTaskAttachmentStore {
     dir;
     metas;
@@ -19,8 +22,8 @@ export class LocalTaskAttachmentStore {
                     if (!ID_RE.test(id))
                         continue;
                     try {
-                        const meta = JSON.parse(await fsp.readFile(join(this.dir, f), "utf8"));
-                        if (meta && meta.id === id)
+                        const meta = decodeJsonColumn(await fsp.readFile(join(this.dir, f), "utf8"), readAttachmentMeta, `attachments/${f} (task attachment meta)`);
+                        if (meta.id === id)
                             m.set(id, meta);
                     }
                     catch {

package/dist/plugins/mailbox-store-sql.d.ts

@@ -55,9 +55,12 @@ export declare const MAILBOX_MSG_TABLE = "mailbox_message";
  *  —— `mailbox` 行是**盒**事实(next_seq / lease),墓碑是**收件人**事实,两者的生命周期本来就不同
  *  (`drop` 同时终结两者 —— 墓碑随箱亡,理由全文见 `mailbox-recipient-lifecycle.ts` 模块头)。 */
 export declare const MAILBOX_TOMBSTONE_TABLE = "mailbox_tombstone";
-/** 店侧日志座(可选;boot 注入 `Logger`)。7.58.0 合并重扫 [medium]:坏 `peer_meta` 行的 fail-closed 抛必须**响亮**——core 唯一的
- *  claimLease 调用方(peer-session-drain)吞掉该错,店不记这一笔就成了「静默永久卡箱」。抛之前记 `mailbox_peer_meta_corrupt`
- *  (scope/handle/seq/code),运维按 seq 修行。 */
+/** 店侧日志座(可选;boot 注入 `Logger`)。7.58.0 合并重扫 [medium]:坏行的 fail-closed 抛必须**响亮**——core 唯一的
+ *  claimLease 调用方(peer-session-drain)吞掉该错,店不记这一笔就成了「静默永久卡箱」。抛之前记
+ *  `mailbox_message_column_corrupt`(scope/handle/seq/column/code),运维按 seq 修行。
+ *  🔴 S-550 车③a **改名并归一**:旧事件名 `mailbox_peer_meta_corrupt` 在 `hop_chain` 也变成 fail-closed 的
+ *  那一刻就说不出真话了(同一条读腿两列同判)。一个事件 + 一个 `column` 字段,而不是两个事件名 —— 运维
+ *  面按 column 分桶,店里只有一条留痕规则。 */
 export interface MailboxStoreLogger {
     warn(event: string, fields: Record<string, unknown>): void;
 }