@springbrand/agent-runtime 0.3.0-alpha.2 → 0.3.0-alpha.21

package/src/submission/admission.ts

@@ -1,5 +1,4 @@
 import type { UIMessage } from "ai";
-import { validateRuntimeAssemblyPin, type RuntimeAssemblyPin } from "../config/pinning";
 import type {
   RuntimeSubmissionAdmissionHook,
   RuntimeSubmissionAdmissionResult,
@@ -12,10 +11,12 @@ import {
   SubmissionQueueFullError,
   type SubmissionInput,
 } from "./lifecycle";
-import { isTerminalSubmissionStatus, submissionAbortReason, type StoredSubmission, type SubmissionRepository } from "./repository";
+import { isTerminalSubmissionStatus, submissionAbortReason, type StoredSubmission, type SubmissionOrigin, type SubmissionRepository } from "./repository";
+import type { RuntimeUnattendedExecutionGrant } from "./contracts";
+import type { ExecutionLevel } from "../lib/execution-level";
 
 // Pending records retain identity indefinitely; only recent attempts reserve capacity.
-const ADMISSION_ATTEMPT_WINDOW_MS = 60_000;
+export const ADMISSION_ATTEMPT_WINDOW_MS = 60_000;
 
 export interface SubmitMessageOptions {
   requestId: string;
@@ -23,6 +24,12 @@ export interface SubmitMessageOptions {
   userMessageId?: string;
   userMessage?: UIMessage & { role: "user" };
   regenerate?: boolean;
+  /** `scheduled` marks a Run injection that locks ordinary input until it ends. */
+  origin?: SubmissionOrigin;
+  /** Maximum execution level allowed by the Schedule Definition. */
+  scheduledMaxExecutionLevel?: ExecutionLevel;
+  /** Trusted Host grant; accepted only for a scheduled Submission. */
+  unattendedExecutionGrant?: RuntimeUnattendedExecutionGrant;
   /** Internal transfer of a durable accepted steer; never a public message option. */
   steerHandoff?: { submissionId: string; steerId: string };
 }
@@ -169,8 +176,6 @@ export class SubmissionAdmission {
             requestId,
             idempotencyKey: idempotencyKey ?? null,
             createdAt: userMessage.timestamp,
-            assemblyRevision: "",
-            assemblyDescriptor: "",
             runtimeKey: runtime.runtimeKey,
             assistantMessageId: crypto.randomUUID(),
             queuedInputJson: JSON.stringify(userMessage),
@@ -182,6 +187,9 @@ export class SubmissionAdmission {
               ? options.userMessageId ?? null
               : null,
             runId,
+            origin: options.origin,
+            scheduledMaxExecutionLevel: options.scheduledMaxExecutionLevel,
+            unattendedExecutionGrant: options.unattendedExecutionGrant,
           });
           const admitted = this.options.submissions.find(runId)!;
           this.options.onAdmitted(admitted, admission?.accepted === true);
@@ -199,38 +207,20 @@ export class SubmissionAdmission {
     };
   }
 
-  /** Validate before loading capabilities, then reuse or atomically persist the first-run pin. */
-  async pin(
+  /** Resolve the saved Agent identity against its current Config before every execution slice. */
+  async prepareCurrentRuntime(
     submission: StoredSubmission,
-    preparePin: () => Promise<RuntimeAssemblyPin>,
-    restoreRuntime?: (runtimeKey: string) => Promise<void>,
+    restoreRuntime: (runtimeKey: string) => Promise<void>,
   ): Promise<StoredSubmission> {
     const current = this.options.submissions.find(submission.submissionId);
     if (!current) throw new Error(`Unknown SpringBrand submission: ${submission.submissionId}`);
-    const hasPin = await validateRuntimeAssemblyPin(current.runtimeKey, {
-      revision: current.assemblyRevision,
-      descriptor: current.assemblyDescriptor,
-    });
-    await restoreRuntime?.(current.runtimeKey);
+    if (!current.runtimeKey) throw new Error("Cannot resume a Submission without its Agent Config ID");
+    await restoreRuntime(current.runtimeKey);
     const restored = this.options.submissions.find(current.submissionId);
     if (!restored || isTerminalSubmissionStatus(restored.status)) {
-      throw new Error("Submission ended before Runtime assembly was pinned");
-    }
-    if (hasPin) return restored;
-    const pin = await preparePin();
-    if (!await validateRuntimeAssemblyPin(current.runtimeKey, pin)) {
-      throw new Error("Submission assembly pin is incomplete");
+      throw new Error("Submission ended while loading current Agent Config");
     }
-    this.options.submissions.pinAssembly(current.submissionId, pin.revision, pin.descriptor);
-    const pinned = this.options.submissions.find(current.submissionId);
-    if (!pinned?.assemblyRevision || !pinned.assemblyDescriptor || isTerminalSubmissionStatus(pinned.status)) {
-      throw new Error("Submission ended before Runtime assembly was pinned");
-    }
-    await validateRuntimeAssemblyPin(pinned.runtimeKey, {
-      revision: pinned.assemblyRevision,
-      descriptor: pinned.assemblyDescriptor,
-    });
-    return pinned;
+    return restored;
   }
 
   /** The caller shares this synchronous write with its admission/timeout transaction. */

package/src/submission/contracts.ts

@@ -13,6 +13,8 @@ export const APPROVAL_DECISIONS = [
   "allow_level",
 ] as const satisfies readonly ApprovalDecision["decision"][];
 
+export type { RuntimeUnattendedExecutionGrant } from "./unattended";
+
 /**
  * 记录一次待审批 Tool 执行的身份、摘要和原始输入。
  *
@@ -58,12 +60,35 @@ export type ScheduleJob =
  *
  * 触发条件与工作放在同一份规格里，使更新时可以原地替换两者，不用改变任务标识。
  */
+/**
+ * 一条按任务时区解释的当地时间规则。
+ *
+ * @remarks
+ * `once` 在单个本地日历日触发;`daily` 每个本地日触发;`weekly` 在选中的每个本地星期触发
+ * (0 = 周日 … 6 = 周六)。所有星期共用同一个本地钟点。
+ *
+ * 规则只描述当地墙上时间;缺失/重复钟点、起止日期和夏令时语义由
+ * `adapter/cloudflare/scheduling` 的公共计算边界处理。
+ */
+export type LocalScheduleRule =
+  | { kind: "once"; date: string; time: string }
+  | { kind: "daily"; time: string }
+  | { kind: "weekly"; weekdays: number[]; time: string };
+
 export interface ScheduleSpec {
   trigger:
     | { kind: "once-at"; at: string }
     | { kind: "once-in"; seconds: number }
     | { kind: "cron"; cron: string }
-    | { kind: "interval"; seconds: number };
+    | { kind: "interval"; seconds: number }
+    | {
+        kind: "local";
+        rule: LocalScheduleRule;
+        /** 含当天的最早生效本地日期 `YYYY-MM-DD`。 */
+        startDate?: string;
+        /** 含当天的最后生效本地日期 `YYYY-MM-DD`。 */
+        endDate?: string;
+      };
   job: ScheduleJob;
   label?: string;
   /**
@@ -115,7 +140,9 @@ export type MessageDelivery = "steer" | "enqueue";
 export type MessageDispatchErrorCode =
   | "queue_full"
   | "not_steerable"
-  | "invalid_message";
+  | "invalid_message"
+  /** A scheduled Run owns this Session's input until it reaches a terminal state. */
+  | "input_locked";
 
 export type MessageDispatchReceipt =
   | {
@@ -139,3 +166,16 @@ export type MessageDispatchReceipt =
       code: MessageDispatchErrorCode;
       message: string;
     };
+
+/** Complete, credential-free task version prepared by a trusted Host for human confirmation. */
+export interface RuntimeSchedulePreparation {
+  candidateId: string;
+  candidateVersion: string;
+  id?: string;
+  prompt: string;
+  label: string;
+  trigger: ScheduleSpec["trigger"];
+  timezone: string;
+  nextRunAt?: number;
+  authorization: { version: string; missing: string[]; scope: string };
+}

package/src/submission/delivery.ts

@@ -2,7 +2,7 @@ import type { UIMessage } from "ai";
 import type { PiCanonicalUserInput } from "../conversation/message/contract";
 import type { RuntimeTelemetryCoordinator } from "../telemetry/coordinator";
 import type { RuntimeTurnEvents } from "../telemetry/turn-events";
-import type { HarnessHumanDecisions } from "../tools/human-decisions";
+import type { HarnessHumanDecisions } from "../tools/runtime/human-decisions";
 import type { SubmitMessageOptions } from "./admission";
 import {
   projectSubmissionReceipt,

package/src/submission/finalization.ts

@@ -1,10 +1,10 @@
 import type { AssistantMessage } from "@earendil-works/pi-ai";
-import type { CancelQueuedResult } from "@earendil-works/pi-agent-core";
+import type { CancelQueuedResult } from "./steer-delivery";
 import type { ConversationHistory } from "../conversation/history";
 import type { MessageUiRepository } from "../conversation/repository";
 import type { RuntimeTelemetryCoordinator } from "../telemetry/coordinator";
 import type { RuntimeTurnEvents } from "../telemetry/turn-events";
-import type { HarnessHumanDecisions } from "../tools/human-decisions";
+import type { HarnessHumanDecisions } from "../tools/runtime/human-decisions";
 import { USER_STOP_REASON } from "./contracts";
 import type { SubmissionOutcome } from "./lifecycle";
 import { isTerminalSubmissionStatus, type StoredSubmission, type SubmissionRepository } from "./repository";
@@ -13,6 +13,8 @@ import type { SteerRepository } from "./steer-repository";
 
 /** Commits the Submission outcome and human/Host facts after accepted steering is preserved. */
 export class SubmissionFinalizer {
+  /** User-stop markers appended after their terminal commit; every `finish()` of that Turn awaits it. */
+  private readonly stopMarkers = new Map<string, Promise<unknown>>();
   constructor(private readonly options: {
     submissions: SubmissionRepository;
     steers: SteerRepository;
@@ -34,7 +36,12 @@ export class SubmissionFinalizer {
     message?: string,
   ): Promise<StoredSubmission> {
     const initial = this.read(submissionId);
-    if (isTerminalSubmissionStatus(initial.status)) return initial;
+    if (isTerminalSubmissionStatus(initial.status)) {
+      // A stop RPC and the ending harness finish the same Turn; whichever loses
+      // still waits for the stop marker, so its history broadcast carries it.
+      await this.stopMarkers.get(submissionId);
+      return initial;
+    }
     const aborted = Boolean(initial.abortReason) || outcome === "aborted";
     if (aborted) await this.options.releaseAbortedHarness();
     await finishPendingSteers({
@@ -53,7 +60,13 @@ export class SubmissionFinalizer {
     const output = (await this.options.conversation.storedMessages())
       .filter((entry) => entry.submissionId === submissionId && entry.message.role === "assistant")
       .at(-1)?.message;
-    return this.commit(submissionId, outcome, message, output?.role === "assistant" ? output : undefined);
+    const completed = this.commit(submissionId, outcome, message, output?.role === "assistant" ? output : undefined);
+    const marker = this.stopMarkers.get(submissionId);
+    if (marker) {
+      await marker;
+      this.stopMarkers.delete(submissionId);
+    }
+    return completed;
   }
 
   /** Shares atomic terminal facts with an admitted handoff cancelled before execution. */
@@ -63,7 +76,8 @@ export class SubmissionFinalizer {
     message?: string,
     output?: AssistantMessage,
   ): StoredSubmission {
-    return this.options.transaction(() => {
+    let stoppedByUser = false;
+    const completed = this.options.transaction(() => {
       // Host admission and history reads can await while an explicit stop wins.
       const latest = this.read(submissionId);
       if (isTerminalSubmissionStatus(latest.status)) return latest;
@@ -79,16 +93,9 @@ export class SubmissionFinalizer {
       const status = effectiveOutcome === "succeeded" ? "completed" : effectiveOutcome === "aborted" ? "aborted" : "error";
       this.options.submissions.updateTerminal(submissionId, status, reason, Date.now());
       const completed = this.read(submissionId);
-      if (effectiveOutcome === "aborted" && reason === USER_STOP_REASON) {
-        if (completed.completedAt === null) {
-          throw new Error(
-            `Aborted SpringBrand submission has no completion time: ${submissionId}`,
-          );
-        }
-        this.options.conversation.appendTurnAbortedMarker(
-          submissionId,
-          completed.completedAt,
-        );
+      stoppedByUser = effectiveOutcome === "aborted" && reason === USER_STOP_REASON;
+      if (stoppedByUser && completed.completedAt === null) {
+        throw new Error(`Aborted SpringBrand submission has no completion time: ${submissionId}`);
       }
       this.options.events.submissionTerminal(completed);
       this.options.telemetry.capture("turnFinished", {
@@ -101,6 +108,20 @@ export class SubmissionFinalizer {
       });
       return completed;
     });
+    if (stoppedByUser) this.appendStopMarker(submissionId, completed.completedAt!);
+    return completed;
+  }
+
+  /**
+   * The browser projects `interruptedByUser` from this marker and the next model request sees it as user context.
+   * Pi history writes are async, so the marker follows the synchronous terminal commit.
+   */
+  private appendStopMarker(submissionId: string, completedAt: number): void {
+    const marker = this.options.conversation.appendTurnAbortedMarker(submissionId, completedAt).catch((error: unknown) => {
+      console.warn("[runtime-stop-marker:failed]", submissionId, error instanceof Error ? error.message : String(error));
+    });
+    this.stopMarkers.set(submissionId, marker);
+    this.options.waitUntil(marker);
   }
 
   private read(submissionId: string): StoredSubmission {

package/src/submission/lifecycle.ts

@@ -130,9 +130,9 @@ export type SubmissionOutcome = "succeeded" | "failed" | "aborted";
  * @remarks
  * `SubmissionLifecycle` 把它交给 `execute`，Runtime 据此选择执行前置动作。
  *
- * `recovery` 和 `continuation` 必须分开：前者的进程内配置已经丢失，需重新装配原 runtime key 再打开 Session；
- * 后者是本轮主动让出执行片，持久 operation 和已固定配置保持完好。
- * 区分两者可避免主动让出时重复加载原 runtime key。
+ * `recovery` 和 `continuation` 都以持久化的 Agent 身份重新读取当前配置，
+ * 然后继续同一个持久 operation；前者处理进程恢复，后者处理本轮主动让出执行片。
+ * 两者都不沿用旧执行片的固定配置。
  */
 export type SubmissionExecutionMode =
   /** 首次执行一条新接收的提交。 */
@@ -244,6 +244,7 @@ export class SubmissionLifecycle<
   private readonly executions = new Map<string, Promise<TSubmission>>();
   private readonly activeBySubmission = new Map<string, TActive>();
   private readonly terminalCommits = new Map<string, Promise<TSubmission>>();
+  private preparingAdmissions = 0;
 
   // #region 提交与恢复
 
@@ -262,6 +263,13 @@ export class SubmissionLifecycle<
     >,
   ) {}
 
+  /** Serialize an explicit Runtime change with this Chat's execution queue. */
+  async runConfigControl<T>(run: () => Promise<T>): Promise<T> {
+    const result = await this.queue.enqueue(`runtime-config:${crypto.randomUUID()}`, run);
+    if (result.status === "stale") throw new Error("Runtime configuration control was reset");
+    return result.value;
+  }
+
   /**
    * 接收新提交，或让重复请求加入已有提交。
    *
@@ -275,17 +283,22 @@ export class SubmissionLifecycle<
   ): Promise<SubmissionHandle<TSubmission>> {
     const duplicate = this.findDuplicate(input);
     if (duplicate) return this.join(duplicate);
-    const admitted = await this.admit(
-      input,
-      await input.prepareAdmission(),
-    );
-    if (admitted.admitted) this.pump();
-    return {
-      receipt: admitted.submission,
-      completion: admitted.rejected
-        ? Promise.resolve(admitted.submission)
-        : this.waitForTerminal(admitted.submission.submissionId),
-    };
+    this.preparingAdmissions += 1;
+    try {
+      const admitted = await this.admit(
+        input,
+        await input.prepareAdmission(),
+      );
+      if (admitted.admitted) this.pump();
+      return {
+        receipt: admitted.submission,
+        completion: admitted.rejected
+          ? Promise.resolve(admitted.submission)
+          : this.waitForTerminal(admitted.submission.submissionId),
+      };
+    } finally {
+      this.preparingAdmissions -= 1;
+    }
   }
 
   /**
@@ -551,7 +564,7 @@ export class SubmissionLifecycle<
    * 读取持久层而不是只看 `executions`，才能覆盖重启后尚未恢复的提交。
    */
   isBusy(): boolean {
-    return this.options.store.countUnfinished() > 0;
+    return this.preparingAdmissions > 0 || this.options.store.countUnfinished() > 0;
   }
 
   // 作用：在有限时间内轮询 Runtime 是否已无活动提交。

package/src/submission/repository.ts

@@ -1,5 +1,7 @@
 import type { SqlTaggedTemplate } from "agents/chat";
-import type { LaneSnapshot } from "@earendil-works/pi-agent-core";
+
+import type { ExecutionLevel } from "../lib/execution-level";
+import type { RuntimeUnattendedExecutionGrant } from "./unattended";
 
 // Submission 的统一定义见 ./index.ts。
 // #region 状态与行类型
@@ -11,6 +13,14 @@ export type SubmissionStatus =
   | "skipped"
   | "error";
 
+/**
+ * 谁发起了这条 Submission。
+ *
+ * `scheduled` 是定时 Run 的注入:它在本 Session 未结束期间独占输入,
+ * 普通 `user` Submission 必须被拒绝,而不是排队等它结束。
+ */
+export type SubmissionOrigin = "user" | "scheduled";
+
 const TERMINAL_SUBMISSION_STATUSES: ReadonlySet<SubmissionStatus> = new Set([
   "completed",
   "aborted",
@@ -36,8 +46,6 @@ export interface StoredSubmission {
   error: string | null;
   createdAt: number;
   completedAt: number | null;
-  assemblyRevision: string;
-  assemblyDescriptor: string;
   runtimeKey: string;
   assistantMessageId: string;
   abortReason: string | null;
@@ -46,9 +54,24 @@ export interface StoredSubmission {
   userMessageId: string | null;
   regenerateMessageId: string | null;
   runId: string | null;
+  origin: SubmissionOrigin;
+  scheduledMaxExecutionLevel: ExecutionLevel | null;
+  unattendedExecutionGrant: RuntimeUnattendedExecutionGrant | null;
+  unattendedFailure: string | null;
   retryable?: boolean;
 }
 
+/** Saved key and whether its Submission can still execute. */
+export interface StoredRuntimeKey {
+  readonly runtimeKey: string;
+  readonly unfinished: boolean;
+}
+
+export interface RuntimeKeyRewrite {
+  readonly from: string;
+  readonly to: string;
+}
+
 /** Reuse durable stop intent when transferring work out of the source Submission. */
 export function submissionAbortReason(submission: StoredSubmission | null): string | undefined {
   return submission?.abortReason ||
@@ -60,8 +83,6 @@ export interface NewSubmission {
   requestId: string;
   idempotencyKey: string | null;
   createdAt: number;
-  assemblyRevision: string;
-  assemblyDescriptor: string;
   runtimeKey?: string;
   assistantMessageId: string;
   queuedInputJson?: string | null;
@@ -69,6 +90,9 @@ export interface NewSubmission {
   userMessageId?: string | null;
   regenerateMessageId?: string | null;
   runId?: string | null;
+  origin?: SubmissionOrigin;
+  scheduledMaxExecutionLevel?: ExecutionLevel;
+  unattendedExecutionGrant?: RuntimeUnattendedExecutionGrant;
 }
 
 type SubmissionRow = {
@@ -80,8 +104,6 @@ type SubmissionRow = {
   error: string | null;
   created_at: number;
   completed_at: number | null;
-  assembly_revision: string;
-  assembly_descriptor: string;
   runtime_key: string;
   assistant_message_id: string;
   abort_reason: string | null;
@@ -90,7 +112,11 @@ type SubmissionRow = {
   user_message_id: string | null;
   regenerate_message_id: string | null;
   run_id: string | null;
+  origin: string | null;
+  scheduled_max_execution_level: string | null;
   admission_retryable: number | null;
+  unattended_execution_grant_json: string | null;
+  unattended_failure: string | null;
 };
 
 // #endregion
@@ -108,8 +134,6 @@ function mapRow(row: SubmissionRow): StoredSubmission {
     error: row.error,
     createdAt: row.created_at,
     completedAt: row.completed_at,
-    assemblyRevision: row.assembly_revision,
-    assemblyDescriptor: row.assembly_descriptor,
     runtimeKey: row.runtime_key,
     assistantMessageId: row.assistant_message_id,
     abortReason: row.abort_reason,
@@ -118,6 +142,12 @@ function mapRow(row: SubmissionRow): StoredSubmission {
     userMessageId: row.user_message_id,
     regenerateMessageId: row.regenerate_message_id,
     runId: row.run_id,
+    origin: row.origin === "scheduled" ? "scheduled" : "user",
+    scheduledMaxExecutionLevel: row.scheduled_max_execution_level as ExecutionLevel | null,
+    unattendedExecutionGrant: row.unattended_execution_grant_json
+      ? JSON.parse(row.unattended_execution_grant_json) as RuntimeUnattendedExecutionGrant
+      : null,
+    unattendedFailure: row.unattended_failure,
     retryable: row.admission_retryable === null
       ? undefined
       : row.admission_retryable === 1,
@@ -139,18 +169,44 @@ export class SubmissionRepository {
     return this.transact(run);
   }
 
+  /** Return saved identities for a one-time Host-owned key migration. */
+  listRuntimeKeys(): StoredRuntimeKey[] {
+    return this.sql<{ runtime_key: string; unfinished: number }>`
+      SELECT runtime_key,
+             MAX(CASE WHEN status IN ('pending', 'running') THEN 1 ELSE 0 END) AS unfinished
+      FROM pi_submissions
+      WHERE runtime_key <> ''
+      GROUP BY runtime_key
+      ORDER BY runtime_key
+    `.map((row) => ({ runtimeKey: row.runtime_key, unfinished: row.unfinished === 1 }));
+  }
+
+  /** Rewrite each saved identity atomically after the Host validates active work. */
+  rewriteRuntimeKeys(rewrites: readonly RuntimeKeyRewrite[]): void {
+    this.transact(() => {
+      for (const { from, to } of rewrites) {
+        if (from === to) continue;
+        this.sql`UPDATE pi_submissions SET runtime_key = ${to} WHERE runtime_key = ${from}`;
+      }
+    });
+  }
+
   // 按 submissionId 读取一条完整 Submission，不存在时返回 null。
   // Runtime 和 SubmissionLifecycle 在准入、执行、取消、结束与恢复时调用，调用方必须处理 null。
   // 所有列在这里一次投影并统一映射，不能让不同调用方各自拼出不完整的 Submission。
   find(id: string): StoredSubmission | null {
     const row = this.sql<SubmissionRow>`
       SELECT submission_id, request_id, idempotency_key, status, accepted,
-             error, created_at, completed_at, assembly_revision,
-             assembly_descriptor, runtime_key, assistant_message_id, abort_reason,
+             error, created_at, completed_at,
+             runtime_key, assistant_message_id, abort_reason,
              queued_input_json, queued_ui_message_json, user_message_id,
              regenerate_message_id,
              run_id,
-             admission_retryable
+             origin,
+             scheduled_max_execution_level,
+             admission_retryable,
+             unattended_execution_grant_json,
+             unattended_failure
       FROM pi_submissions
       WHERE submission_id = ${id}
     `[0];
@@ -248,10 +304,10 @@ export class SubmissionRepository {
     this.sql`
       INSERT INTO pi_submissions (
         submission_id, request_id, idempotency_key, status, accepted,
-        created_at, assembly_revision, assembly_descriptor, runtime_key,
+        created_at, runtime_key,
         assistant_message_id, queued_input_json, queued_ui_message_json,
         user_message_id, regenerate_message_id,
-        run_id
+        run_id, origin, scheduled_max_execution_level, unattended_execution_grant_json
       ) VALUES (
         ${s.submissionId},
         ${s.requestId},
@@ -259,19 +315,37 @@ export class SubmissionRepository {
         'pending',
         1,
         ${s.createdAt},
-        ${s.assemblyRevision},
-        ${s.assemblyDescriptor},
         ${s.runtimeKey ?? ""},
         ${s.assistantMessageId},
         ${s.queuedInputJson ?? null},
         ${s.queuedUiMessageJson ?? null},
         ${s.userMessageId ?? null},
         ${s.regenerateMessageId ?? null},
-        ${s.runId ?? s.submissionId}
+        ${s.runId ?? s.submissionId},
+        ${s.origin ?? "user"},
+        ${s.scheduledMaxExecutionLevel ?? null},
+        ${s.unattendedExecutionGrant
+          ? JSON.stringify(s.unattendedExecutionGrant)
+          : null}
       )
     `;
   }
 
+  /**
+   * 是否存在一条未结束的定时 Submission。
+   *
+   * 定时 Run 未结束时它独占本 Session 的输入:普通消息在准入前被拒绝,
+   * 不排队等待。Run 进入终态后查询自然为空,普通追问恢复。
+   */
+  hasUnfinishedScheduled(): boolean {
+    return (
+      this.sql<{ count: number }>`
+        SELECT COUNT(*) AS count FROM pi_submissions
+        WHERE status IN ('pending', 'running') AND origin = 'scheduled'
+      `[0]?.count ?? 0
+    ) > 0;
+  }
+
   insertRejected(s: {
     submissionId: string;
     requestId: string;
@@ -285,29 +359,24 @@ export class SubmissionRepository {
     this.sql`
       INSERT INTO pi_submissions (
         submission_id, request_id, idempotency_key, status, accepted,
-        error, created_at, completed_at, assembly_revision,
-        assembly_descriptor, runtime_key, assistant_message_id, abort_reason,
+        error, created_at, completed_at,
+        runtime_key, assistant_message_id, abort_reason,
         run_id, admission_retryable, user_message_id
       ) VALUES (
         ${s.submissionId}, ${s.requestId}, ${s.idempotencyKey}, 'skipped', 0,
-        ${s.code}, ${s.createdAt}, ${s.createdAt}, '', '', '', ${s.assistantMessageId ?? s.submissionId}, NULL,
+        ${s.code}, ${s.createdAt}, ${s.createdAt}, '', ${s.assistantMessageId ?? s.submissionId}, NULL,
         ${s.submissionId}, ${s.retryable ? 1 : 0}, ${s.userMessageId ?? null}
       )
     `;
   }
 
-  pinAssembly(id: string, revision: string, descriptor: string): boolean {
-    const updated = this.sql<{ submission_id: string }>`
+  recordUnattendedFailure(id: string, reason: string): void {
+    this.sql`
       UPDATE pi_submissions
-      SET assembly_revision = ${revision},
-          assembly_descriptor = ${descriptor}
+      SET unattended_failure = COALESCE(unattended_failure, ${reason})
       WHERE submission_id = ${id}
-        AND assembly_revision = ''
-        AND assembly_descriptor = ''
         AND status IN ('pending', 'running')
-      RETURNING submission_id
     `;
-    return updated.length === 1;
   }
 
   // 只在当前状态属于 from 时把 Submission 切换到 to，否则返回 false。
@@ -386,27 +455,6 @@ export class SubmissionRepository {
     `;
   }
 
-  /** Recover ownership from the matching Pi operation, using only its active branch. */
-  associateSessionEntries(
-    submissionId: string,
-    snapshot: Pick<LaneSnapshot, "operation" | "lastResult" | "tipId" | "transcript">,
-  ): void {
-    const boundary = snapshot.operation?.id === submissionId
-      ? { fromTipId: snapshot.operation.fromTipId, tipId: snapshot.tipId }
-      : snapshot.lastResult?.operationId === submissionId
-        ? snapshot.lastResult
-        : undefined;
-    if (!boundary) return;
-    const start = boundary.fromTipId === null
-      ? 0
-      : snapshot.transcript.findIndex(({ id }) => id === boundary.fromTipId) + 1;
-    const end = boundary.tipId === null
-      ? snapshot.transcript.length
-      : snapshot.transcript.findIndex(({ id }) => id === boundary.tipId) + 1;
-    for (const entry of snapshot.transcript.slice(start, end || undefined)) {
-      this.linkSessionEntry(entry.id, submissionId);
-    }
-  }
 
   listSessionEntrySubmissionLinks(): Map<string, string> {
     const rows = this.sql<{