@sema-agent/server 7.99.0 → 7.101.0

package/dist/tool-approval.js

@@ -7,10 +7,12 @@ import { hasBidiControls } from "./text-bidi.js";
 import { approvalPayloadFingerprint } from "./plugins/approval-payload-fingerprint.js";
 import { createLogger } from "./observability/logger.js";
 import { recordFailOpen } from "./observability/fail-open.js";
-import { deriveAskId, deriveBatchId, MAX_DECISION_NOTE_CHARS } from "./approval-ask-machine.js";
-import { ApprovalCardEnvelopeSchema, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readReadRootCandidate, readRuleEvidence, readRuleOffersAbsence, RuleOfferRawSchema, backfillLegacyBatchMemberKind, screenUncoveredDetailSeat, } from "./approval-card.js";
-import { projectAskTerminalClaimTruth } from "./plugins/approval-ask-store-sql.js";
+import { deriveAskId, deriveAskScopedBatchId, deriveBatchId, MAX_DECISION_NOTE_CHARS } from "./approval-ask-machine.js";
+import { ApprovalCardEnvelopeSchema, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readReadRootCandidate, readRuleEvidence, readRuleOffersAbsence, readRuleOffersAbsenceSeat, readParkRowTrueSeat, RuleOfferRawSchema, backfillLegacyBatchMemberKind, screenUncoveredDetailSeat, } from "./approval-card.js";
+import { POLICY_REFUSAL_DECISION, projectAskTerminalClaimTruth } from "./plugins/approval-ask-store-sql.js";
+import { settleByPolicy } from "./approval-policy-settlement.js";
 import { governanceAskMarksFor, runWithGovernanceAskScope } from "./governance-ask-marks.js";
+import { governanceOriginOf } from "./runtime-governance.js";
 const defaultLogger = createLogger();
 export const APPROVAL_GATE_KINDS = ["human", "irreversible_ask"];
 export function isApprovalGateKind(k) {
@@ -82,6 +84,24 @@ function sessionAllowKey(owner, sessionId, category) {
 export function standingAnswerMayRetire(facts) {
     return !facts.governanceForced && !facts.requiresRealApproval && !facts.mandated;
 }
+export function parkRowStandingAnswerFacts(pending, gate, governance) {
+    const riskDescriptor = "riskDescriptor" in gate ? gate.riskDescriptor : undefined;
+    return {
+        governanceForced: governanceOriginOf({ riskDescriptor }, governance) === true,
+        requiresRealApproval: readParkRowTrueSeat(pending, "requiresRealApproval"),
+        mandated: readParkRowTrueSeat(pending, "mandated") || mandatedFromSeat(readRuleOffersAbsenceSeat(pending)),
+    };
+}
+function mandatedFromSeat(seat) {
+    switch (seat.state) {
+        case "word":
+            return seat.word === "mandated";
+        case "unreadable":
+            return true;
+        case "absent":
+            return false;
+    }
+}
 export const PERSIST_RULE_TEXT_ERROR = `persistRule.rule must be a non-empty string of at most ${MAX_RULE_TEXT_CHARS} characters`;
 export const PERSIST_RULE_EDITED_FLAG_ERROR = "persistRule.edited must be a boolean when present";
 export const PERSIST_RULE_BATCH_INDEX_ERROR = "persistRule.batchOfferIndex must be a non-negative integer when present";
@@ -152,6 +172,10 @@ export function parseToolApprovalResponse(body) {
     }
     return { ok: false, error: 'decision must be one of "allow" | "allow_session" | "deny"' };
 }
+function unattendedRefusalReason(arm) {
+    return ("UNATTENDED_APPROVAL_POLICY=deny: this deployment declares that no one attends its approvals, so an approval " +
+        `request no one can answer is refused here instead of being parked for a person (arm: ${arm}).`);
+}
 function isChildAsk(req) {
     return req.fromSubagent === true;
 }
@@ -321,11 +345,26 @@ export class ToolApprovalCoordinator {
         this.askAudit = opts?.askAudit;
     }
     unattendedOutcome(site) {
-        const outcome = this.unattendedPolicy === "deny" ? false : "unavailable";
+        let outcome;
+        let outcomeWord;
+        switch (this.unattendedPolicy) {
+            case "park":
+                outcome = "unavailable";
+                outcomeWord = "unavailable";
+                break;
+            case "deny":
+                outcome = { allow: false, settledBy: POLICY_REFUSAL_DECISION.settledBy, reason: unattendedRefusalReason(site.arm) };
+                outcomeWord = "deny";
+                break;
+            default: {
+                const unreachable = this.unattendedPolicy;
+                throw new Error(`unattendedOutcome: unknown UNATTENDED_APPROVAL_POLICY word ${String(unreachable)}`);
+            }
+        }
         defaultLogger.warn("approver_unavailable", {
             arm: site.arm,
             policy: this.unattendedPolicy,
-            outcome: outcome === false ? "deny" : "unavailable",
+            outcome: outcomeWord,
             owner: site.owner ?? null,
             taskId: site.taskId ?? null,
             toolName: site.toolName ?? null,
@@ -336,6 +375,9 @@ export class ToolApprovalCoordinator {
     get unattendedRoutesToPark() {
         return this.unattendedPolicy !== "deny";
     }
+    batchIdFor(askId, sourceTaskId, runId, legKey) {
+        return this.unattendedRoutesToPark ? deriveBatchId(sourceTaskId, runId, legKey) : deriveAskScopedBatchId(askId);
+    }
     unattendedAskOutcome(site) {
         return this.unattendedOutcome({
             arm: "window_zero",
@@ -344,6 +386,32 @@ export class ToolApprovalCoordinator {
             ...(site.toolName !== undefined ? { toolName: site.toolName } : {}),
         });
     }
+    async landUnattendedOutcome(outcome, row) {
+        const store = this.askStore;
+        if (outcome === "unavailable" || !store)
+            return outcome;
+        const dispatch = (res, where) => {
+            if (res.claimed) {
+                this.settleSameAskIdParkRoute(row.askId);
+                return undefined;
+            }
+            const read = this.classifyClaimLoss(row.askId, res.current, where);
+            this.dispatchClaimTruth(row.askId, read);
+            return read;
+        };
+        let res;
+        try {
+            res = await this.withStoreDeadline(settleByPolicy(store, row, this.unattendedPolicy), "claimTerminal(unattended-fallback)", DURABLE_CALL_TIMEOUT_MS, (late) => {
+                dispatch(late, "late:unattended-fallback");
+            });
+        }
+        catch (err) {
+            this.noteStoreError(err, "claimTerminal(unattended-fallback)");
+            return outcome;
+        }
+        const read = dispatch(res, "claim:unattended-fallback");
+        return read?.kind === "decided" ? read.outcome : outcome;
+    }
     admit(taskId, owner) {
         if (!this.askStore)
             return () => undefined;
@@ -657,6 +725,23 @@ export class ToolApprovalCoordinator {
         for (const entry of [...entries])
             entry.settleParkRoute();
     }
+    dispatchClaimTruth(askId, read) {
+        switch (read.kind) {
+            case "decided":
+                this.notifyExternalDecision(askId, read.outcome);
+                return;
+            case "parked":
+                this.settleSameAskIdParkRoute(askId);
+                return;
+            case "absent":
+            case "edit-in-flight":
+                return;
+            default: {
+                const unreachable = read;
+                throw new Error(`dispatchClaimTruth: unknown recovery read ${String(unreachable)}`);
+            }
+        }
+    }
     recordParkTombstone(approvalId, tomb) {
         const existing = this.parkTombstones.get(approvalId);
         if (existing !== undefined) {
@@ -901,23 +986,38 @@ export class ToolApprovalCoordinator {
         let wireApprovalId = id;
         let cardForFrame = card;
         let persistedExpiresAtMs = expiresAtMs;
-        let lateEnsuredAskId;
-        let abandonedEnsure = false;
+        let lateEnsuredRow;
+        let lateTerminalRow;
+        let abandonedAs;
         const attemptCreatedAtMs = Date.now();
-        const voidAbandonedRow = (orphanAskId) => {
+        const finishAbandonedRow = (orphan) => {
             const store = this.askStore;
-            if (!store)
-                return;
-            void store
-                .transitionAsk(orphanAskId, "STREAM_PENDING", "VOID", { updatedAtMs: Date.now() })
-                .catch((err) => this.noteStoreError(err, "transitionAsk(abandon-late-ensure)"));
+            if (!store || abandonedAs === undefined)
+                return undefined;
+            if (abandonedAs === "void") {
+                void store
+                    .transitionAsk(orphan.askId, "STREAM_PENDING", "VOID", { updatedAtMs: Date.now() })
+                    .catch((err) => this.noteStoreError(err, "transitionAsk(abandon-late-ensure)"));
+                return undefined;
+            }
+            return this.landUnattendedOutcome(abandonedAs, orphan);
+        };
+        const abandonRow = (handed) => {
+            abandonedAs = handed === undefined || handed === "unavailable" ? "void" : handed;
+            return lateEnsuredRow !== undefined ? finishAbandonedRow(lateEnsuredRow) : undefined;
+        };
+        const replayTerminalRow = (row) => {
+            const replayed = replayTerminalAskRow(row);
+            return replayed === "unavailable"
+                ? this.unattendedOutcome({ arm: "replayed_parked", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability })
+                : replayed;
         };
         if (this.askStore && card) {
             const sourceTaskId = req.sourceTaskId ?? origin.taskId;
             const runId = origin.taskId;
             const legKey = origin.legKey;
             askId = deriveAskId(sourceTaskId, runId, req.toolCallId, legKey, req.delegation?.parentToolCallId);
-            batchId = deriveBatchId(sourceTaskId, runId, legKey);
+            batchId = this.batchIdFor(askId, sourceTaskId, runId, legKey);
             try {
                 const existingOrCreated = await this.withStoreDeadline(this.askStore.ensureAsk({
                     askId,
@@ -936,16 +1036,19 @@ export class ToolApprovalCoordinator {
                     expiresAtMs,
                     createdAtMs: attemptCreatedAtMs,
                 }), "ensureAsk", DURABLE_CALL_TIMEOUT_MS, (late) => {
-                    lateEnsuredAskId = late.inserted && late.row.state === "STREAM_PENDING" ? late.row.askId : undefined;
-                    if (abandonedEnsure && lateEnsuredAskId !== undefined)
-                        voidAbandonedRow(lateEnsuredAskId);
+                    if (late.row.state !== "STREAM_PENDING") {
+                        lateTerminalRow = late.row;
+                        this.dispatchClaimTruth(late.row.askId, this.classifyClaimLoss(late.row.askId, projectAskTerminalClaimTruth(late.row), "late:ensureAsk"));
+                        return;
+                    }
+                    lateEnsuredRow = late.inserted ? { askId: late.row.askId, batchId: late.row.batchId } : undefined;
+                    if (lateEnsuredRow !== undefined)
+                        void finishAbandonedRow(lateEnsuredRow);
                 });
+                batchId = existingOrCreated.row.batchId;
                 if (existingOrCreated.row.state !== "STREAM_PENDING") {
                     releaseAdmission();
-                    const replayed = replayTerminalAskRow(existingOrCreated.row);
-                    return replayed === "unavailable"
-                        ? this.unattendedOutcome({ arm: "replayed_parked", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability })
-                        : replayed;
+                    return replayTerminalRow(existingOrCreated.row);
                 }
                 const persistedEnvelope = ApprovalCardEnvelopeSchema.safeParse(existingOrCreated.row.cardJson);
                 const maxMintableWindowMs = Math.max(effectiveWindowMs, this.unreachedTtlMs);
@@ -954,7 +1057,8 @@ export class ToolApprovalCoordinator {
                     this.noteStoreError(new Error(`persisted approval row is unusable (envelopeOk=${persistedEnvelope.success}, deadlineOk=${sanePersistedDeadline}, ` +
                         `origin=${existingOrCreated.inserted ? "row-this-call-just-inserted" : "row-hit-idempotently"})`), "ensureAsk(persisted-row-unusable)");
                     releaseAdmission();
-                    return "unavailable";
+                    const unattended = this.unattendedOutcome({ arm: "persisted_row_unusable", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
+                    return existingOrCreated.inserted ? this.landUnattendedOutcome(unattended, existingOrCreated.row) : unattended;
                 }
                 persistedExpiresAtMs = existingOrCreated.row.expiresAtMs;
                 wireApprovalId = persistedEnvelope.data.approvalId;
@@ -1001,7 +1105,10 @@ export class ToolApprovalCoordinator {
                 let indeterminate = true;
                 for (let attempt = 0; attempt <= DURABLE_CONVERGE_BACKOFF_MS.length; attempt++) {
                     try {
-                        confirmedRowExists = (await this.withStoreDeadline(this.askStore.getAsk(askId), "getAsk(ensureAsk-confirm)")) !== null;
+                        const confirmedRow = await this.withStoreDeadline(this.askStore.getAsk(askId), "getAsk(ensureAsk-confirm)");
+                        confirmedRowExists = confirmedRow !== null;
+                        if (confirmedRow !== null)
+                            batchId = confirmedRow.batchId;
                         indeterminate = false;
                         break;
                     }
@@ -1011,23 +1118,26 @@ export class ToolApprovalCoordinator {
                             await new Promise((r) => setTimeout(r, DURABLE_CONVERGE_BACKOFF_MS[attempt]).unref?.());
                     }
                 }
+                if (lateTerminalRow !== undefined) {
+                    releaseAdmission();
+                    return replayTerminalRow(lateTerminalRow);
+                }
                 if (indeterminate) {
-                    abandonedEnsure = true;
-                    if (lateEnsuredAskId !== undefined)
-                        voidAbandonedRow(lateEnsuredAskId);
+                    const unattended = this.unattendedOutcome({ arm: "ensure_indeterminate", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
+                    const landed = abandonRow(unattended);
                     releaseAdmission();
-                    return "unavailable";
+                    return landed ?? unattended;
                 }
                 if (!confirmedRowExists) {
                     askId = undefined;
                     batchId = undefined;
-                    abandonedEnsure = true;
-                    if (lateEnsuredAskId !== undefined)
-                        voidAbandonedRow(lateEnsuredAskId);
                     if (reachability === "unreached") {
+                        const unattended = this.unattendedOutcome({ arm: "unreached_no_row", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
+                        const landed = abandonRow(unattended);
                         releaseAdmission();
-                        return this.unattendedOutcome({ arm: "unreached_no_row", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
+                        return landed ?? unattended;
                     }
+                    void abandonRow(undefined);
                 }
             }
         }
@@ -1044,7 +1154,7 @@ export class ToolApprovalCoordinator {
         let selfEntry;
         let hostSettled;
         let denyReasonSettled;
-        const shapeDeny = () => {
+        const shapeDeny = (bare) => {
             if (hostSettled !== undefined || (denyReasonSettled !== undefined && denyReasonSettled !== "")) {
                 return {
                     allow: false,
@@ -1052,18 +1162,17 @@ export class ToolApprovalCoordinator {
                     ...(denyReasonSettled !== undefined && denyReasonSettled !== "" ? { reason: denyReasonSettled } : {}),
                 };
             }
-            return false;
+            return bare;
         };
         const shapeOutcome = (settled) => {
             if (windowRouteUnavailable) {
-                return this.unattendedOutcome({ arm: "window_expired", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability }) === false
-                    ? shapeDeny()
-                    : "unavailable";
+                const unattended = this.unattendedOutcome({ arm: "window_expired", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
+                return unattended === "unavailable" ? unattended : shapeDeny(unattended);
             }
             if (settled.allowed) {
                 return settled.updatedInput !== undefined ? { allow: true, updatedInput: settled.updatedInput } : true;
             }
-            return shapeDeny();
+            return shapeDeny(false);
         };
         const settle = (allowed, outcome, updatedInput, hostSettledBy, denyReason) => {
             if (done)
@@ -1104,21 +1213,7 @@ export class ToolApprovalCoordinator {
         const broadcastClaimTruth = (read) => {
             if (askId === undefined)
                 return;
-            switch (read.kind) {
-                case "decided":
-                    this.notifyExternalDecision(askId, read.outcome);
-                    return;
-                case "parked":
-                    this.settleSameAskIdParkRoute(askId);
-                    return;
-                case "absent":
-                case "edit-in-flight":
-                    return;
-                default: {
-                    const unreachable = read;
-                    throw new Error(`broadcastClaimTruth: unknown recovery read ${String(unreachable)}`);
-                }
-            }
+            this.dispatchClaimTruth(askId, read);
         };
         const settleFromClaimLoss = (read) => {
             switch (read.kind) {
@@ -1271,7 +1366,7 @@ export class ToolApprovalCoordinator {
                 await resolveLocalOutcome({
                     intent: "expire",
                     storeLabel: "claimTerminal(window)",
-                    claim: (timeoutMs) => boundedClaim(() => store.claimTerminal(pinnedAskId, pinnedBatchId, "expire"), "claimTerminal(window)", timeoutMs, (late) => {
+                    claim: (timeoutMs) => boundedClaim(() => settleByPolicy(store, { askId: pinnedAskId, batchId: pinnedBatchId }, this.unattendedPolicy), "claimTerminal(window)", timeoutMs, (late) => {
                         if (!late.claimed) {
                             lateClaimLossSettle(late.current, "expire");
                             return;
@@ -1459,7 +1554,7 @@ export class ToolApprovalCoordinator {
                     await resolveLocalOutcome({
                         intent: "unreachable",
                         storeLabel: "claimTerminal(emit-failed)",
-                        claim: (timeoutMs) => boundedClaim(() => store.claimTerminal(pinnedAskId, pinnedBatchId, "expire"), "claimTerminal(emit-failed)", timeoutMs, (late) => {
+                        claim: (timeoutMs) => boundedClaim(() => settleByPolicy(store, { askId: pinnedAskId, batchId: pinnedBatchId }, this.unattendedPolicy), "claimTerminal(emit-failed)", timeoutMs, (late) => {
                             if (!late.claimed) {
                                 lateClaimLossSettle(late.current, "unreachable");
                                 return;
@@ -2011,6 +2106,7 @@ export class ToolApprovalCoordinator {
                 ...(e.sessionId !== undefined ? { sessionId: e.sessionId } : {}),
                 ...(e.requiresRealApproval ? { requiresRealApproval: true } : {}),
                 ...(e.governanceForced ? { governanceForced: true } : {}),
+                ...(e.mandated ? { mandated: true } : {}),
                 ...(e.originTaskId !== undefined ? { fromSubagent: true, originTaskId: e.originTaskId } : {}),
                 ...(contentKind !== undefined ? { contentKind } : {}),
                 frame: e.frame.approvalId === id ? e.frame : { ...e.frame, approvalId: id },

package/dist/trace/core-keyset-guard.d.ts

@@ -17,7 +17,7 @@
  * ⑨⑩([ref],2026-08-31)把两个最大的 wire 面也纳入:TaskSpec 按「server 有无写点」记 Wired/Unwired,
  * TaskResult 按「转发/摘除」记 Forwarded/Stripped —— 谁改 resolve-spec.ts / runs.ts 的发射点谁同步本文件。
  */
-import type { TaskNotificationPayload, SemaProvenance, BackgroundChildEvent, RosterEntry, AskRequest, CheckpointSummary, TaskEvent, TraceEvent, MailboxMessage, MailboxAppendMessage, TaskSpec, TaskResult, WiringManifest, GateOutcome, GateDisposition, Settlement, PausedCause, WorkflowRun, ReadRootGrantCandidate, McpReconnectResult, McpServerStatus } from "@sema-agent/core";
+import type { TaskNotificationPayload, SemaProvenance, BackgroundChildEvent, RosterEntry, AskRequest, CheckpointSummary, PendingAction, TaskEvent, TraceEvent, MailboxMessage, MailboxAppendMessage, TaskSpec, TaskResult, WiringManifest, GateOutcome, GateDisposition, Settlement, PausedCause, WorkflowRun, ReadRootGrantCandidate, McpReconnectResult, McpServerStatus, NodeLspManagerOptions, RunnerDeps } from "@sema-agent/core";
 import type { ToolApprovalFrame } from "../tool-approval.js";
 /** 编译期断言:T 必须收敛到 never(有残余键 = tsc 红)。
  *  🔴 **导出**([ref] U1/U2):本仓「词表闭集,未处置成员=编译红」的钉法只许有**一个**形 ——
@@ -25,7 +25,7 @@ import type { ToolApprovalFrame } from "../tool-approval.js";
  *  `type X<T extends never> = T`(抄一份就是第二个写者,两处哪天分岔谁都发现不了)。
  *  本文件只有类型、不产 JS,所以被 `import type` 引用不新增任何运行期边。 */
 export type AssertAllKeysHandled<T extends never> = T;
-type NotificationProjected = "task_id" | "task_type" | "toolUseId" | "status" | "summary" | "result" | "output_file" | "usage" | "sessionId" | "seq" | "lines" | "stoppedBy" | "source" | "exitCode" | "partial" | "diagnostics" | "recentSteps" | "editedFiles" | "resumable" | "completionId" | "error" | "errorCode" | "apiFailure" | "agentMessage" | "_sema_provenance";
+type NotificationProjected = "task_id" | "task_type" | "toolUseId" | "status" | "summary" | "result" | "output_file" | "usage" | "sessionId" | "seq" | "lines" | "stoppedBy" | "source" | "exitCode" | "partial" | "diagnostics" | "recentSteps" | "editedFiles" | "resumable" | "completionId" | "error" | "errorCode" | "apiFailure" | "agentMessage" | "_sema_provenance" | "spawnName" | "handback" | "compaction" | "resupplied" | "attempt";
 type NotificationExcluded = (typeof import("./wire-projection-faces.js").WIRE_PROJECTION_FACES)["task_notification"]["excluded"][number];
 type _GuardNotification = AssertAllKeysHandled<Exclude<keyof TaskNotificationPayload, NotificationProjected | NotificationExcluded>>;
 type _GuardNotificationReverse = AssertAllKeysHandled<Exclude<NotificationProjected | NotificationExcluded, keyof TaskNotificationPayload>>;
@@ -59,8 +59,8 @@ type _GuardMailboxReverse = AssertAllKeysHandled<Exclude<MailboxProjected, keyof
 type MailboxAppendProjected = "from" | "content" | "sentAt" | "hopChain" | "peerMeta";
 type _GuardMailboxAppend = AssertAllKeysHandled<Exclude<keyof MailboxAppendMessage, MailboxAppendProjected>>;
 type _GuardMailboxAppendReverse = AssertAllKeysHandled<Exclude<MailboxAppendProjected, keyof MailboxAppendMessage>>;
-type WiringSectionProjected = "schemaVersion" | "leg" | "ask" | "question" | "interaction" | "elicit" | "parkLane" | "session" | "fleet" | "permissionRules" | "modelGate" | "autoMode" | "mcp" | "tools" | "hooks" | "lsp" | "writeProtection";
-type WiringSectionExcluded = "governance" | "configFingerprint" | "autoConsolidation" | "readDeny";
+type WiringSectionProjected = "schemaVersion" | "leg" | "ask" | "question" | "interaction" | "elicit" | "parkLane" | "session" | "fleet" | "permissionRules" | "modelGate" | "autoMode" | "mcp" | "tools" | "hooks" | "lsp" | "writeProtection" | "teamRole";
+type WiringSectionExcluded = "governance" | "configFingerprint" | "autoConsolidation" | "readDeny" | "peerPresence" | "fileHistory";
 type _GuardWiringSections = AssertAllKeysHandled<Exclude<keyof WiringManifest, WiringSectionProjected | WiringSectionExcluded>>;
 type _GuardWiringSectionsReverse = AssertAllKeysHandled<Exclude<WiringSectionProjected | WiringSectionExcluded, keyof WiringManifest>>;
 type WiringSection<K extends keyof WiringManifest> = NonNullable<WiringManifest[K]>;
@@ -130,15 +130,23 @@ type _GuardPermissionTraceReverse = AssertAllKeysHandled<Exclude<PermissionTrace
 /** `T` 非 `never` 时收敛到 `never`(空集 ⇒ 残留 `"EMPTY"` ⇒ tsc 红)。 */
 type AssertNonEmpty<T> = [T] extends [never] ? "EMPTY" : never;
 type _GuardPermissionTraceNonEmpty = AssertAllKeysHandled<AssertNonEmpty<PermissionTraceKind>>;
-type SummaryProjected = "sessionId" | "scope" | "createdAt" | "gateKind" | "severity" | "spentMicroUsd" | "deadline" | "hasBidiControls" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "ruleStoreUnreadable";
+type SummaryProjected = "sessionId" | "scope" | "createdAt" | "gateKind" | "severity" | "spentMicroUsd" | "deadline" | "hasBidiControls" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "ruleStoreUnreadable" | "mandated";
 type SummaryExcluded = "token" | "toolInput" | "toolName" | "toolCallId" | "preview" | "principal" | "sourceTaskId" | "contentKind" | "restoreMode" | "checkpointId" | "previewWithheld";
 type _GuardInboxSummary = AssertAllKeysHandled<Exclude<keyof CheckpointSummary, SummaryProjected | SummaryExcluded>>;
 type _GuardInboxSummaryReverse = AssertAllKeysHandled<Exclude<SummaryProjected | SummaryExcluded, keyof CheckpointSummary>>;
+type ParkArmKeys = keyof Extract<PendingAction, {
+    kind: "tool_approval";
+}>;
+type ParkArmQueueProjected = "toolName" | "toolCallId" | "boundInputHash" | "ruleOffers" | "hasBidiControls" | keyof import("../approval-card.js").ParkRowFacts;
+type ParkArmQueueExcluded = "kind" | "args" | "batchToolCallIds" | "completedCallIds" | "capabilityId" | "contractId" | "shapeDigest" | "implementationRevision" | "rosterDigest" | "family" | "pathTarget" | "preview" | "previewWithheld" | "execCwd" | "denialLimitFallback" | "origin" | "ruleStoreUnreadable";
+type _GuardParkArmQueue = AssertAllKeysHandled<Exclude<ParkArmKeys, ParkArmQueueProjected | ParkArmQueueExcluded>>;
+type _GuardParkArmQueueReverse = AssertAllKeysHandled<Exclude<ParkArmQueueProjected | ParkArmQueueExcluded, ParkArmKeys>>;
+type _NoDoubleBookParkArmQueue = AssertAllKeysHandled<Extract<ParkArmQueueProjected, ParkArmQueueExcluded>>;
 type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requireExistingSession" | "oneShot" | "clientContext" | "resumeAt" | "resumeAtMode" | "model" | "compactionModel" | "thinking" | "systemPrompt" | "appendSystemPrompt" | "promptProvider" | "memory" | "suggestNextPrompts" | "restoreFiles" | "acceptPartialRestore" | "rewindFilesTo" | "tools" | "excludeTools" | "deferTools" | "toolMaterializeStrategy" | "promptProfile" | "toolPolicy" | "onAsk" | "onQuestion" | "hooks" | "durableApproval" | "resourceSuspend" | "resilience" | "finalVerification" | "checkpointStore" | "handsReadOnly" | "memoryPersistenceCapable" | "additionalDirectories" | "additionalReadDirectories" | "enablePlanMode" | "interactiveTools" | "enableFork" | "shellGate" | "writeFace" | "mcp" | "a2a" | "skills" | "backgroundScope" | "envFacts" | "limits" | "configOverrides" | "forwardSubagentEvents" | "retainSubagentSessions" | "retainBackgroundProcesses" | "outputSchema" | "outputRetries" | "compaction" | "attachments" | "selfOrchestration" | "getApiKeyAndHeaders" | "interactionPosture" | "agents" | "approverPosture" | "taskId" | "signal" | "preemptSignal" | "modelRole" | "enableBlockedReport" | "maxSuspends" | "autoModeRequested" | "skillListingBudgetFraction" | "skillListingMaxDescChars" | "excludeAllTools";
-type TaskSpecUnwired = "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars";
+type TaskSpecUnwired = "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars" | "peerPresence" | "fileHistory";
 type _GuardTaskSpec = AssertAllKeysHandled<Exclude<keyof TaskSpec, TaskSpecWired | TaskSpecUnwired>>;
 type _GuardTaskSpecReverse = AssertAllKeysHandled<Exclude<TaskSpecWired | TaskSpecUnwired, keyof TaskSpec>>;
-type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "terminal" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "remoteEnvFailures" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveWriteFace" | "effectiveMemoryScopes" | "stats" | "editedFiles" | "responseModel";
+type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "terminal" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "remoteEnvFailures" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveWriteFace" | "effectiveMemoryScopes" | "stats" | "editedFiles" | "responseModel" | "compaction";
 type TaskResultStripped = never;
 type _GuardTaskResult = AssertAllKeysHandled<Exclude<keyof TaskResult, TaskResultForwarded | TaskResultStripped>>;
 type _GuardTaskResultReverse = AssertAllKeysHandled<Exclude<TaskResultForwarded | TaskResultStripped, keyof TaskResult>>;
@@ -197,6 +205,13 @@ type McpListingIncompleteKeys = keyof NonNullable<McpReconnectResult["listingInc
 type McpListingIncompleteProjected = "reason" | "pages" | "budgetMs" | "error";
 type _GuardMcpListingIncomplete = AssertAllKeysHandled<Exclude<McpListingIncompleteKeys, McpListingIncompleteProjected>>;
 type _GuardMcpListingIncompleteReverse = AssertAllKeysHandled<Exclude<McpListingIncompleteProjected, McpListingIncompleteKeys>>;
+type LspOptionsWired = "env" | "log";
+type LspOptionsUnwired = "onNotice" | "servers" | "spawn" | "readText" | "resolveRoot" | "warmup" | "maxSessions" | "idleTtlMs" | "diagnostics";
+type _GuardLspOptions = AssertAllKeysHandled<Exclude<keyof NodeLspManagerOptions, LspOptionsWired | LspOptionsUnwired>>;
+type _GuardLspOptionsReverse = AssertAllKeysHandled<Exclude<LspOptionsWired | LspOptionsUnwired, keyof NodeLspManagerOptions>>;
+type _NoDoubleBookLspOptions = AssertAllKeysHandled<Extract<LspOptionsWired, LspOptionsUnwired>>;
+type RunnerDepsDroppedPendingS724 = "fileHistoryCapture";
+type _GuardFacelessRunnerDepsReverse = AssertAllKeysHandled<Exclude<RunnerDepsDroppedPendingS724, keyof RunnerDeps>>;
 export type CoreKeysetGuards = [
     _GuardNotification,
     _GuardNotificationReverse,
@@ -259,6 +274,9 @@ export type CoreKeysetGuards = [
     _GuardPermissionTraceNonEmpty,
     _GuardInboxSummary,
     _GuardInboxSummaryReverse,
+    _GuardParkArmQueue,
+    _NoDoubleBookParkArmQueue,
+    _GuardParkArmQueueReverse,
     _GuardTaskSpec,
     _GuardTaskSpecReverse,
     _GuardTaskResult,
@@ -294,7 +312,11 @@ export type CoreKeysetGuards = [
     _GuardMcpListingIncomplete,
     _GuardMcpListingIncompleteReverse,
     _GuardWiringMcpLiveness,
-    _GuardWiringMcpLivenessReverse
+    _GuardWiringMcpLivenessReverse,
+    _GuardLspOptions,
+    _NoDoubleBookLspOptions,
+    _GuardLspOptionsReverse,
+    _GuardFacelessRunnerDepsReverse
 ];
 export {};
 //# sourceMappingURL=core-keyset-guard.d.ts.map

package/dist/trace/engine-notice-wire.d.ts

@@ -16,8 +16,34 @@
  * 同文件 G1 e2e 的全码扇出夹具、以及契约文档附录 D.3 那张表(含**小节标题里的码数** —— 那道门本批
  * 刚立,立完就在下一次加码时自己咬住了)。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "instructions.source_changed"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
+/**
+ * S-690 —— **本仓自铸**的通告码与它们的受众(码 / 铸点 / 受众三者的属主都是本仓)。
+ *
+ * 为什么可以有这一族:core 的 `EngineNotice.code` 刻意是开放 `string`,顶注逐字「a host forwarding its own notices
+ * through the same sink is a supported shape」—— 部署经同一只 `onNotice` 转发体投自己的通告,白名单 / 归属 / 消毒 /
+ * 隔离四件判据一个不绕。为什么受众写在这里:core 的 `NOTICE_AUDIENCE` 只收录 core 自己铸的码,对本仓的码
+ * `noticeAudienceOf` 只会读保守默认 `"operator"` —— 那是「不认识」,不是判决。顶注的「本仓不许自造第二份受众语义」
+ * 说的是 **core 的码**;本表只收 core 码册里**没有**的码,这里是它们唯一的一份受众语义。
+ *
+ * 🔴 机器门(`test/engine-notice-wire.test.ts` 的 server 自铸码属主门):① 本表的码与 core 运行期码册 `ENGINE_NOTICE_CODES`
+ * **零交集**(core 哪天铸了同名码 ⇒ 属主变成两个,当场红:销本表的行、改走 core 的受众与工厂);② 判 `"user"` 的码必须
+ * 入白名单;③ 白名单里的码,受众一律由「本表 ∪ core 注册表」给,判出来必须是 `"user"`。
+ */
+export declare const SERVER_NOTICE_AUDIENCE: {
+    readonly "instructions.source_changed": "user";
+    /**
+     * O2(7.101.0 合并复审)—— boot 期探测到 ≤7.30.x 引擎留下的锁住的记忆层(唯一铸点 `src/memory-layer-legacy-lock.ts`,
+     * 调用点 = `boot/stores.ts` 的 file 记忆引擎装配段)。受众 **operator**:恢复动词是运维在数据根上执行一次 `chmod -R u+w`,
+     * 而且铸在 boot 期、没有任何会话 ⇒ 不上 wire、不进白名单,只走转发体的日志终点(`engine_notice` warn)。
+     * `detail: { layers, remedy }` —— 层名(挂载面的直接子目录名)与那一句补救;条目名 / 内容不进。
+     */
+    readonly "memory.layer_locked_legacy": "operator";
+};
+export type ServerNoticeCode = keyof typeof SERVER_NOTICE_AUDIENCE;
+/** 该码是否本仓自铸(属主判据单点:门与投递面都读这一个)。 */
+export declare function isServerNoticeCode(code: string): code is ServerNoticeCode;
 /** 白名单谓词(单点):路由与门都读这一个,不许第二处手抄码串。 */
 export declare function isEngineNoticeWireCode(code: string): code is EngineNoticeWireCode;
 /**

package/dist/trace/engine-notice-wire.js

@@ -23,7 +23,15 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     "mcp.injection_dropped",
     "delegation.ask_unresolvable",
     "task.interrupt_unconsumed",
+    "instructions.source_changed",
 ];
+export const SERVER_NOTICE_AUDIENCE = {
+    "instructions.source_changed": "user",
+    "memory.layer_locked_legacy": "operator",
+};
+export function isServerNoticeCode(code) {
+    return Object.hasOwn(SERVER_NOTICE_AUDIENCE, code);
+}
 const WIRE_CODES = new Set(ENGINE_NOTICE_WIRE_CODES);
 export function isEngineNoticeWireCode(code) {
     return WIRE_CODES.has(code);

package/dist/trace/ledger-sink.js

@@ -1,7 +1,7 @@
 import {} from "@sema-agent/core";
 import { outwardPlane } from "../terminal.js";
 import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
-import { NotifiedKeys, taskNotificationStreamKey } from "../orchestration/workflow-completion-inbox.js";
+import { NotifiedKeys, taskNotificationStreamKeyOf } from "../orchestration/workflow-completion-inbox.js";
 import { isParkLedgerEventType } from "./ledger-events.js";
 import { isModelSegmentBoundary, reasoningDeltaBytes, reasoningSegmentEventId } from "./model-segment.js";
 export function createSerialLedgerAppend(appendEvent, startSeq) {
@@ -119,7 +119,7 @@ export function createLedgerSink(opts) {
                 break;
             case "task_notification": {
                 const tn = ev.notification;
-                const tnKey = tn?.task_id ? taskNotificationStreamKey({ task_type: tn.task_type, task_id: tn.task_id, status: String(tn.status), seq: tn.seq }) : undefined;
+                const tnKey = taskNotificationStreamKeyOf(tn);
                 const tnPrior = tnKey !== undefined ? keys.get(tnKey) : undefined;
                 if (tnPrior === undefined || !(await tnPrior)) {
                     const write = append("task_notification", taskNotificationEventData(ev));

package/dist/trace/project.d.ts

@@ -422,6 +422,17 @@ export declare function taskNotificationEventData(ev: {
          *  `kind` 过闭集(`trace/sema-provenance.ts` 单点,park 半场同一判据);`agentType` 本 mount 恒缺席(工具无
          *  agent-type 席),在场即透传(fleet spawn 帧按 taskId 可 join 时上游给)。 */
         _sema_provenance?: SemaProvenanceInput;
+        /** core 7.30.0 [ref] S1 / #1034 / #1036(S-616):委派终态帧三枚 facet + 重供两键 —— 判据单点在
+         *  `trace/task-notification-facets.ts`(与 park 半场同一只;入参按 `unknown` 收、判过形才成 typed)。 */
+        spawnName?: string;
+        handback?: string;
+        compaction?: {
+            passes: number;
+            breakerOpen: boolean;
+            kind?: string;
+        };
+        resupplied?: boolean;
+        attempt?: number;
     };
     eventId?: string;
     parentToolCallId?: string;
@@ -840,6 +851,8 @@ export declare function compactedEventData(ev: {
      *  的数、post 恒是结构和 + 固定提示词开销,两者的差混坐标,实测在普通 run 上是负数)。本仓的处置因此
      *  是**三条都逐字透传、一条都不合成**:谁要画上下文表就读 `freedTokens`,读不到就渲染 unknown。 */
     freedTokens?: number;
+    /** core 7.30.0 #1036(S-616):这一次压缩**摘要掉**了几条之前已交给模型的跨会话消息(在场 iff ≥1)。 */
+    summarizedCrossSessionMessages?: number;
     durationMs?: number;
     phaseDurations?: {
         prepareMs?: number;

package/dist/trace/project.js

@@ -1,10 +1,12 @@
 import { redactErrorMessage, redactModelText } from "../observability/run-terminal.js";
-import { MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, ToolRoster, ToolRosterDelta, WRITE_PROTECTION_TARGET_VIEWS } from "@sema-agent/core";
+import { MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, TEAM_ROLES, ToolRoster, ToolRosterDelta, WRITE_PROTECTION_TARGET_VIEWS } from "@sema-agent/core";
 import { Value } from "typebox/value";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { redactSecrets, redactDeep } from "./redact.js";
 import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceOrAbsent } from "./sema-provenance.js";
+import { resupplyFields, terminalFrameFacetFields } from "./task-notification-facets.js";
+import { dropProjectedFace } from "./projection-drop.js";
 export async function appendModelUsageDelta(append, modelUsage, taskId) {
     const delta = modelUsage?.drain(taskId);
     if (delta) {
@@ -229,10 +231,6 @@ export function toolEndEventData(ev) {
         ...identityFields(ev),
     };
 }
-const dropProjectedFace = (what) => {
-    recordFailOpen("server.trace.projection-input-malformed", what);
-    return undefined;
-};
 export function toolProgressEventData(ev) {
     const id = typeof ev.toolCallId === "string" && ev.toolCallId !== "" ? ev.toolCallId : undefined;
     const name = typeof ev.toolName === "string" && ev.toolName !== "" ? ev.toolName : undefined;
@@ -326,6 +324,8 @@ export function taskNotificationEventData(ev) {
             const p = semaProvenanceOrAbsent(n._sema_provenance);
             return p !== undefined ? { _sema_provenance: p } : {};
         })(),
+        ...terminalFrameFacetFields(n),
+        ...resupplyFields(n),
         ...(() => {
             const tier = injectionTierOrAbsent(ev.priority);
             return tier !== undefined ? { priority: tier } : {};
@@ -535,9 +535,17 @@ export function wiringManifestEventData(ev) {
         return { targetView };
     })();
     const mcp = projectWiringManifestMcpRows(m.mcp);
+    const teamRole = (() => {
+        if (m.teamRole === undefined)
+            return undefined;
+        if (!TEAM_ROLES.includes(m.teamRole))
+            return dropProjectedFace("wiring_manifest.teamRole is outside core TEAM_ROLES");
+        return m.teamRole;
+    })();
     return {
         ...(num(m.schemaVersion) !== undefined ? { schemaVersion: m.schemaVersion } : {}),
         ...(str(legIn.kind) !== undefined ? { leg: { kind: legIn.kind } } : {}),
+        ...(teamRole !== undefined ? { teamRole } : {}),
         ...(ask !== undefined ? { ask } : {}),
         ...(question !== undefined ? { question } : {}),
         ...(str(interactionIn.posture) !== undefined ? { interaction: { posture: interactionIn.posture } } : {}),
@@ -676,6 +684,15 @@ export function compactedEventData(ev) {
         ...(num(ev.tokensAfter) !== undefined ? { tokensAfter: num(ev.tokensAfter) } : {}),
         ...(num(ev.triggerTokensBefore) !== undefined ? { triggerTokensBefore: num(ev.triggerTokensBefore) } : {}),
         ...(num(ev.freedTokens) !== undefined ? { freedTokens: num(ev.freedTokens) } : {}),
+        ...(() => {
+            const v = ev.summarizedCrossSessionMessages;
+            if (v === undefined)
+                return {};
+            if (Number.isInteger(v) && v >= 1)
+                return { summarizedCrossSessionMessages: v };
+            dropProjectedFace("compacted.summarizedCrossSessionMessages is not an integer >= 1");
+            return {};
+        })(),
         ...(num(ev.durationMs) !== undefined ? { durationMs: num(ev.durationMs) } : {}),
         ...(phaseDurations !== undefined ? { phaseDurations } : {}),
     };

package/dist/trace/projection-drop.d.ts

@@ -0,0 +1,2 @@
+export declare function dropProjectedFace(what: string): undefined;
+//# sourceMappingURL=projection-drop.d.ts.map