@geminixiang/mikan 1.0.0-beta.4 → 1.0.0-beta.40

package/dist/runtime/conversation-runtime.js

@@ -1,18 +1,35 @@
+import { createOfficeAddress, officeKey } from "../office/index.js";
 import { createRunner } from "../agent.js";
-import { defaultCommandHandlers } from "../commands/registry.js";
+import { MikanModels } from "../harness/index.js";
+import { defaultCommandHandlers, dispatchCommand } from "../commands/registry.js";
+import { isPrivateConversation } from "../commands/utils.js";
 import * as log from "../log.js";
-import { reportUserFacingError } from "../observability/sentry.js";
-import { AgentMemoryFileManager, hasMaterializedChatSession, } from "../sessions/agent-memory-file-manager.js";
-import { formatNothingRunning, formatStopping } from "../platform-messages.js";
-import { AgentRunController } from "./agent-run-controller.js";
+import { addLifecycleBreadcrumb, applyRunScope, createRunAttributionAttributes, registerTraceAttribution, reportUserFacingError, } from "../observability/sentry.js";
+import { ChatHistorySync, hasMaterializedChatSession, waitForThreadSessionBootstrap, } from "../sessions/chat-history-sync.js";
+import { shouldRotateTopLevelSession } from "../sessions/rotation.js";
+import { resolveChannelSessionFile } from "../sessions/store.js";
+import { assertSessionKeyBelongsToConversation, deriveSessionKey, inferConversationKind, } from "../sessions/session-key.js";
+import { formatNothingRunning, formatStopped, formatStopping } from "../platform-messages.js";
 import * as Sentry from "@sentry/node";
-import { join } from "path";
-import { getUnresolvedSandboxPathContext } from "../agent.js";
-const MAX_SESSIONS = 500;
-const IDLE_TIMEOUT_MS = 3_600_000;
-function runtimeCwdForSandbox(sandbox, hostWorkspaceRoot, conversationId) {
-    const runtimeWorkspaceRoot = getUnresolvedSandboxPathContext(sandbox, hostWorkspaceRoot).runtimeWorkspaceRoot;
-    return `${runtimeWorkspaceRoot.replace(/\/+$/, "")}/${conversationId}`;
+import { getUnresolvedSandboxPathContext } from "../sandbox/index.js";
+import { disabledVaultManager } from "../vault/disabled.js";
+import { SessionLifecycle } from "./session-lifecycle.js";
+/**
+ * Placeholder token store for embedders that run without the web portal.
+ * Command handlers guard on `portalBaseUrl` before minting tokens, so this
+ * only fires when a portal URL is configured without its backing store.
+ */
+function portalNotConfiguredTokenStore(portal) {
+    return {
+        create: () => {
+            throw new Error(`${portal} portal not configured`);
+        },
+    };
+}
+function runtimeCwdForSandbox(sandbox, workspace, address) {
+    const runtimeWorkspaceRoot = getUnresolvedSandboxPathContext(sandbox, workspace.root).runtimeWorkspaceRoot;
+    // The office key names the same segment on the host and in the runtime.
+    return `${runtimeWorkspaceRoot.replace(/\/+$/, "")}/${workspace.office(address).key}`;
 }
 export function createConversationRuntime(options) {
     return new ConversationRuntimeImpl(options);
@@ -20,45 +37,36 @@ export function createConversationRuntime(options) {
 class ConversationRuntimeImpl {
     constructor(options) {
         this.options = options;
-        this.conversationStates = new Map();
-        this.sessionQueues = new Map();
+        this.sessions = new SessionLifecycle();
         this.inFlightRuns = new Set();
-        this.chatSessionManager = new AgentMemoryFileManager();
+        this.sessionDreamSettlements = new Set();
+        this.chatSessionManager = new ChatHistorySync();
+        this.globalRunnerGeneration = 0;
+        this.conversationRunnerGenerations = new Map();
         this.isShuttingDown = false;
-        const commandServices = { ...options, runtime: this };
-        const commandHandlers = options.commandHandlers ?? defaultCommandHandlers();
-        this.orchestrator = new AgentRunController({
-            workingDir: options.workingDir,
-            commandHandlers,
-            commandServices,
-            isShuttingDown: () => this.isShuttingDown,
-            getState: (sessionKey) => this.conversationStates.get(sessionKey),
-            getOrCreateState: (createOptions) => this.getOrCreateState(createOptions),
-            hasMaterializedSession: ({ conversationDir, sessionKey }) => hasMaterializedChatSession({ conversationDir, sessionKey }),
-            beforeRunTracked: (runPromise) => {
-                this.inFlightRuns.add(runPromise);
-                Sentry.metrics.gauge("agent.sessions.active", this.inFlightRuns.size);
-            },
-            afterRunTracked: (runPromise) => {
-                this.inFlightRuns.delete(runPromise);
-            },
-            onRunFinished: () => {
-                Sentry.metrics.gauge("agent.sessions.active", this.inFlightRuns.size - 1);
-                this.evictIdleSessions();
-            },
-        });
+        this.resolvedModels = options.models ?? MikanModels.create();
+        this.commandServices = {
+            ...options,
+            resourceController: options.resourceController ?? options.provisioner,
+            vaultManager: options.vaultManager ?? disabledVaultManager,
+            linkTokenStore: options.linkTokenStore ?? portalNotConfiguredTokenStore("Login"),
+            sessionViewTokenStore: options.sessionViewTokenStore ?? portalNotConfiguredTokenStore("Session viewer"),
+            adminTokenStore: options.adminTokenStore ?? portalNotConfiguredTokenStore("Admin"),
+            runtime: this,
+        };
+        this.commandHandlers = options.commandHandlers ?? defaultCommandHandlers(this.resolvedModels);
     }
-    isRunning(sessionKey) {
-        const state = this.conversationStates.get(sessionKey);
-        return !!state?.running;
+    isRunning(address, sessionKey) {
+        return this.sessions.isRunning(address, sessionKey);
     }
     getRunningSessions() {
         const sessions = [];
-        for (const [sessionKey, state] of this.conversationStates) {
-            if (state.running && state.startedAt) {
+        for (const state of this.sessions.runningStates()) {
+            if (state.startedAt) {
                 const currentStep = state.runner.getCurrentStep();
                 sessions.push({
-                    sessionKey,
+                    address: state.address,
+                    sessionKey: state.sessionKey,
                     startedAt: state.startedAt,
                     lastActivityAt: state.lastActivityAt,
                     currentTool: currentStep?.label || currentStep?.toolName,
@@ -67,114 +75,571 @@ class ConversationRuntimeImpl {
         }
         return sessions;
     }
-    async handleStop(sessionKey, conversationId, bot) {
-        const state = this.conversationStates.get(sessionKey);
+    async handleStop(address, sessionKey, bot) {
+        assertSessionKeyBelongsToConversation(sessionKey, address.conversationId);
+        const state = this.sessions.get(address, sessionKey);
         if (state?.running) {
             state.stopRequested = true;
             state.runner.abort();
-            const ts = await bot.postMessage(conversationId, formatStopping(bot));
+            const ts = await bot.postMessage(address.conversationId, formatStopping(bot));
             state.stopMessageTs = ts;
         }
         else {
-            await bot.postMessage(conversationId, formatNothingRunning(bot));
+            await bot.postMessage(address.conversationId, formatNothingRunning(bot));
         }
     }
-    forceStop(sessionKey) {
-        const state = this.conversationStates.get(sessionKey);
+    forceStop(address, sessionKey) {
+        const state = this.sessions.get(address, sessionKey);
         if (state?.running) {
             log.logInfo(`[Force Stop] Force stopping session: ${sessionKey}`);
             state.stopRequested = true;
             state.runner.abort();
-            state.running = false;
         }
     }
-    async handleNewCommand(sessionKey, conversationId, bot) {
-        const state = this.conversationStates.get(sessionKey);
-        if (state?.running) {
+    async handleNewCommand(sessionKey, conversationId, bot, message, responder, platform) {
+        // The message's address is the authority; the raw id is still passed for
+        // filesystem layout, so a disagreement must fail loudly, not pick one.
+        const address = message.address;
+        if (conversationId !== address.conversationId) {
+            throw new Error(`Conversation id ${JSON.stringify(conversationId)} does not match office ` +
+                JSON.stringify(address.conversationId));
+        }
+        assertSessionKeyBelongsToConversation(sessionKey, address.conversationId);
+        const activeState = this.sessions.get(address, sessionKey);
+        if (activeState?.running ||
+            (activeState?.runSettlement && this.sessionDreamSettlements.has(activeState.runSettlement))) {
+            const activeSettlement = activeState.runSettlement;
+            if (activeSettlement && this.sessionDreamSettlements.has(activeSettlement)) {
+                await activeSettlement;
+                return;
+            }
+            activeState.stopRequested = true;
+            activeState.runner.abort();
+            await activeSettlement;
+        }
+        const state = await this.getOrCreateState({
+            address,
+            conversationId,
+            sessionKey,
+            conversationKind: message.conversationKind,
+        });
+        if (state.running ||
+            (state.runSettlement && this.sessionDreamSettlements.has(state.runSettlement))) {
+            const activeSettlement = state.runSettlement;
+            if (activeSettlement && this.sessionDreamSettlements.has(activeSettlement)) {
+                await activeSettlement;
+                return;
+            }
             state.stopRequested = true;
             state.runner.abort();
+            await activeSettlement;
+            return this.handleNewCommand(sessionKey, conversationId, bot, message, responder, platform);
         }
-        const conversationDir = join(this.options.workingDir, conversationId);
-        const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox, this.options.workingDir, conversationId);
+        const dreamSettlement = this.startSessionDream(state, async () => {
+            let working = false;
+            try {
+                await responder.setWorking(true);
+                working = true;
+                const result = await this.dreamSessionMemory(state, message, platform);
+                if (!result.success) {
+                    const detail = result.errorMessage ? ` ${result.errorMessage}` : "";
+                    await responder.respondDiagnostic(`Could not preserve memory, so the current conversation was not reset.${detail}`, { style: "error" });
+                    return;
+                }
+                await responder.setWorking(false);
+                working = false;
+                await this.resetSession(state, bot);
+            }
+            finally {
+                if (working)
+                    await responder.setWorking(false);
+            }
+        });
+        try {
+            await dreamSettlement;
+        }
+        finally {
+            this.finishSessionDream(state, dreamSettlement);
+        }
+    }
+    startSessionDream(state, dream, markRunning = true) {
+        if (markRunning) {
+            state.running = true;
+            state.stopRequested = false;
+            state.startedAt = Date.now();
+            state.lastActivityAt = Date.now();
+        }
+        const settlement = Promise.resolve().then(dream);
+        state.runSettlement = settlement;
+        this.sessionDreamSettlements.add(settlement);
+        this.inFlightRuns.add(settlement);
+        return settlement;
+    }
+    finishSessionDream(state, settlement) {
+        this.sessionDreamSettlements.delete(settlement);
+        this.inFlightRuns.delete(settlement);
+        if (state.runSettlement !== settlement)
+            return;
+        state.runSettlement = undefined;
+        state.running = false;
+        state.startedAt = 0;
+        state.lastAccessedAt = Date.now();
+        this.sessions.onSettlement(state.address);
+        this.sessions.evictIdle();
+    }
+    async dreamSessionMemory(state, message, platform) {
+        try {
+            const result = await state.runner.dreamSessionMemory(message, platform);
+            // Only a clean stop means the dream finished its work. Everything else —
+            // budget abort, length cutoff, error, blocked — leaves memory unwritten,
+            // and treating it as success resets the session and loses it silently.
+            // Listed as a whitelist so a new stop reason fails safe.
+            if (result.stopReason !== "stop") {
+                return {
+                    success: false,
+                    errorMessage: result.errorMessage ?? `Session Dream stopped early (${result.stopReason})`,
+                };
+            }
+            return { success: true };
+        }
+        catch (err) {
+            return { success: false, errorMessage: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    async rotateSharedSessionAfterDream(address, sessionKey, message, platform) {
+        const conversationId = address.conversationId;
+        if (message.conversationKind !== "shared" || sessionKey !== conversationId)
+            return;
+        const conversationDir = this.options.workspace.office(address).dir;
+        const currentSession = resolveChannelSessionFile(conversationDir);
+        if (!currentSession || !shouldRotateTopLevelSession(currentSession, new Date()))
+            return;
+        await this.sessions.runConversationMaintenance(address, async () => {
+            const session = resolveChannelSessionFile(conversationDir);
+            if (!session || !shouldRotateTopLevelSession(session, new Date()))
+                return;
+            const state = await this.getOrCreateState({
+                address,
+                conversationId,
+                sessionKey,
+                conversationKind: message.conversationKind,
+                currentMessageId: message.id,
+            });
+            const dreamSettlement = this.startSessionDream(state, async () => {
+                const result = await this.dreamSessionMemory(state, message, platform);
+                if (!result.success) {
+                    const detail = result.errorMessage ? `: ${result.errorMessage}` : "";
+                    log.logWarning(`[${conversationId}] Automatic Session Dream failed${detail}`);
+                    return;
+                }
+                const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox, this.options.workspace, address);
+                this.chatSessionManager.resetSession({ conversationDir, sessionKey, cwd: runtimeCwd });
+                this.sessions.discard(address, sessionKey);
+                log.logInfo(`[${conversationId}] Session Dream completed; rotated session: ${sessionKey}`);
+            }, false);
+            try {
+                await dreamSettlement;
+            }
+            finally {
+                this.finishSessionDream(state, dreamSettlement);
+            }
+        });
+    }
+    async resetSession(state, bot) {
+        const { address, sessionKey } = state;
+        const conversationId = address.conversationId;
+        const conversationDir = this.options.workspace.office(address).dir;
+        const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox, this.options.workspace, address);
         this.chatSessionManager.resetSession({ conversationDir, sessionKey, cwd: runtimeCwd });
-        this.conversationStates.delete(sessionKey);
+        this.sessions.discard(address, sessionKey);
         log.logInfo(`[${conversationId}] Session reset: ${sessionKey}`);
         await bot.postMessage(conversationId, "Conversation reset. Send a new message to start fresh.");
     }
     async handleEvent(event, bot, context) {
-        const sessionKey = event.sessionKey ?? `${event.conversationId}:${event.thread_ts ?? event.ts}`;
-        const previous = this.sessionQueues.get(sessionKey) ?? Promise.resolve();
-        const next = previous.catch(() => { }).then(() => this.runSession({ event, bot, context }));
-        this.sessionQueues.set(sessionKey, next);
+        const sessionKey = deriveSessionKey(event);
+        await this.sessions.enqueue(event.address, sessionKey, () => this.runSession({ event, bot, context }));
+    }
+    /**
+     * Dispatch an extension-owned interactive block action: materialize the
+     * conversation's harness instance (activating its extensions) and run the
+     * matching onAction handler — deterministic, no agent run. Serialized on
+     * the session queue so rapid interactions (votes) never interleave.
+     */
+    async handleExtensionAction(params) {
+        if (this.isShuttingDown)
+            return false;
+        const { address, sessionKey, conversationKind, slug, action } = params;
+        const conversationId = address.conversationId;
+        let consumed = false;
+        await this.sessions.enqueue(address, sessionKey, async () => {
+            try {
+                const state = await this.getOrCreateState({
+                    address,
+                    conversationId,
+                    sessionKey,
+                    currentMessageId: action.messageTs ?? sessionKey,
+                    conversationKind,
+                });
+                consumed = await state.runner.tryExtensionAction(slug, action);
+                if (consumed)
+                    state.lastAccessedAt = Date.now();
+            }
+            catch (err) {
+                log.logWarning(`[${conversationId}] Extension action dispatch failed (${slug}:${action.actionId})`, err instanceof Error ? err.message : String(err));
+            }
+        });
+        return consumed;
+    }
+    /**
+     * Dispatch a fired extension callback schedule: materialize the
+     * conversation's harness instance (activating its extensions) and run the
+     * matching `onCallback` handler — deterministic, no agent run, no model
+     * call. Serialized on the session queue so fires never interleave with
+     * block actions or runs in the same conversation.
+     */
+    async handleExtensionScheduleCallback(fire) {
+        if (this.isShuttingDown)
+            return false;
+        const address = createOfficeAddress(fire.platform, fire.conversationId);
+        const conversationId = fire.conversationId;
+        // Schedules belong to the conversation, not a thread: use the top-level
+        // session scope, like the schedules that fire agent runs.
+        const sessionKey = conversationId;
+        let consumed = false;
+        await this.sessions.enqueue(address, sessionKey, async () => {
+            try {
+                const state = await this.getOrCreateState({
+                    address,
+                    conversationId,
+                    sessionKey,
+                    currentMessageId: `extsched:${fire.slug}.${fire.scheduleName}`,
+                    conversationKind: inferConversationKind(fire.platform, conversationId),
+                });
+                consumed = await state.runner.tryExtensionScheduleCallback(fire.slug, fire.callback, {
+                    scheduleName: fire.scheduleName,
+                    ...(fire.args !== undefined ? { args: fire.args } : {}),
+                });
+                if (consumed)
+                    state.lastAccessedAt = Date.now();
+            }
+            catch (err) {
+                log.logWarning(`[${conversationId}] Extension schedule dispatch failed (${fire.slug}.${fire.scheduleName} → ${fire.callback})`, err instanceof Error ? err.message : String(err));
+            }
+        });
+        return consumed;
+    }
+    async runSession({ event, bot, context }) {
+        const conversationId = event.conversationId;
+        if (this.isShuttingDown) {
+            log.logInfo(`[${conversationId}] Rejected event during shutdown: ${event.text.substring(0, 50)}`);
+            return;
+        }
+        const sessionKey = deriveSessionKey(event);
+        const privateConversation = isPrivateConversation(event);
+        const handledCommand = await dispatchCommand(this.commandHandlers, {
+            bot,
+            responder: context.responder,
+            platform: context.platform.name,
+            address: event.address,
+            platformUserId: event.user,
+            platformUserName: context.message.userName,
+            conversationId,
+            vaultConversationId: event.vaultConversationId,
+            sessionKey,
+            commandText: event.text,
+            privateConversation,
+            services: this.commandServices,
+        });
+        if (handledCommand)
+            return;
+        const address = event.address;
+        const activeSettlement = this.sessions.get(address, sessionKey)?.runSettlement;
+        if (activeSettlement)
+            await activeSettlement;
+        if (sessionKey === conversationId) {
+            await this.rotateSharedSessionAfterDream(address, sessionKey, context.message, context.platform);
+        }
+        const releaseConversationWork = await this.sessions.acquireConversationWork(address);
         try {
-            await next;
+            const conversationDir = this.options.workspace.office(address).dir;
+            const waitedForParent = await waitForThreadSessionBootstrap({
+                parentSessionKey: conversationId,
+                sessionKey,
+                hasThreadSession: () => hasMaterializedChatSession({ conversationDir, sessionKey }),
+                isParentRunning: () => this.sessions.get(address, conversationId)?.running === true,
+            });
+            if (waitedForParent) {
+                log.logInfo(`[${conversationId}] Delayed thread bootstrap until parent session sealed: ${sessionKey}`);
+            }
+            let state;
+            try {
+                state = await this.getOrCreateState({
+                    address,
+                    conversationId,
+                    sessionKey,
+                    currentMessageId: event.ts,
+                    conversationKind: event.conversationKind,
+                });
+                state.runner.syncChatHistory(event.ts);
+                // Extension-contributed commands: deterministic dispatch, no agent run.
+                // Built-in commands already had their chance above, so extensions can
+                // never shadow them; unmatched slash text falls through to the agent.
+                if (event.text.trim().startsWith("/")) {
+                    const handled = await state.runner.tryExtensionCommand(context.message, context.responder);
+                    if (handled) {
+                        state.lastAccessedAt = Date.now();
+                        return;
+                    }
+                }
+            }
+            catch (err) {
+                reportUserFacingError(err, {
+                    domain: "mikan",
+                    surface: "session_setup",
+                    operation: "get_or_create_state",
+                    severity: "error",
+                    platform: context.platform.name,
+                    context: {
+                        conversationId,
+                        sessionKey,
+                        messageId: context.message.id,
+                        threadTs: context.message.threadTs,
+                        attachmentCount: context.message.attachments?.length ?? 0,
+                    },
+                });
+                throw err;
+            }
+            state.running = true;
+            state.stopRequested = false;
+            state.startedAt = Date.now();
+            state.lastActivityAt = Date.now();
+            log.logInfo(`[${conversationId}] Starting run: ${event.text.substring(0, 50)}`);
+            const runPromise = (async () => {
+                try {
+                    const result = await this.runWithInstrumentation(context, { conversationId, sessionKey, startedAt: state.startedAt }, async () => {
+                        await context.responder.setTyping(true);
+                        await context.responder.setWorking(true);
+                        try {
+                            return await state.runner.run(context.message, context.responder, context.platform);
+                        }
+                        finally {
+                            await context.responder.setWorking(false);
+                        }
+                    });
+                    if (result?.stopReason === "aborted" && state.stopRequested) {
+                        if (state.stopMessageTs) {
+                            await bot.updateMessage(conversationId, state.stopMessageTs, formatStopped(bot));
+                            state.stopMessageTs = undefined;
+                        }
+                        else {
+                            await bot.postMessage(conversationId, formatStopped(bot));
+                        }
+                    }
+                }
+                finally {
+                    state.running = false;
+                    state.lastAccessedAt = Date.now();
+                    Sentry.metrics.gauge("agent.sessions.active", this.inFlightRuns.size - 1);
+                }
+            })();
+            this.inFlightRuns.add(runPromise);
+            state.runSettlement = runPromise;
+            Sentry.metrics.gauge("agent.sessions.active", this.inFlightRuns.size);
+            try {
+                await runPromise;
+            }
+            finally {
+                this.inFlightRuns.delete(runPromise);
+                if (state.runSettlement === runPromise)
+                    state.runSettlement = undefined;
+                this.sessions.onSettlement(address);
+                this.sessions.evictIdle();
+            }
         }
         finally {
-            if (this.sessionQueues.get(sessionKey) === next) {
-                this.sessionQueues.delete(sessionKey);
-            }
+            releaseConversationWork();
         }
     }
-    async runSession({ event, bot, context }) {
-        await this.orchestrator.runSession({ event, bot, context });
-    }
-    async createSessionSandbox(options) {
-        const state = await this.getOrCreateState(options);
-        return state.runner;
-    }
-    switchConversationModel(conversationId, _provider, _model) {
-        return this.clearConversationStates(conversationId, `[${conversationId}] Model switched; cleared cached session runners`);
+    async runWithInstrumentation(context, meta, body) {
+        const { conversationId, sessionKey, startedAt } = meta;
+        const { message, platform } = context;
+        const attribution = createRunAttributionAttributes({
+            conversationId,
+            sessionKey,
+            messageId: message.id,
+            platform: platform.name,
+            userId: message.userId,
+            userName: message.userName,
+            threadTs: message.threadTs,
+        });
+        Sentry.metrics.count("agent.run.started", 1, {
+            attributes: attribution,
+        });
+        return Sentry.startSpan({ name: "agent.run", op: "agent", attributes: attribution }, async (span) => Sentry.withScope(async (scope) => {
+            registerTraceAttribution(span, attribution);
+            applyRunScope(scope, {
+                conversationId,
+                sessionKey,
+                messageId: message.id,
+                platform: platform.name,
+                userId: message.userId,
+                userName: message.userName,
+                threadTs: message.threadTs,
+            });
+            addLifecycleBreadcrumb("agent.run.started", {
+                channel_id: conversationId,
+                platform: platform.name,
+                has_attachments: (message.attachments?.length ?? 0) > 0,
+            });
+            try {
+                const result = await body();
+                const durationMs = Date.now() - startedAt;
+                const completionAttrs = {
+                    ...attribution,
+                    stop_reason: result.stopReason,
+                };
+                Sentry.metrics.distribution("agent.run.duration", durationMs, {
+                    unit: "millisecond",
+                    attributes: completionAttrs,
+                });
+                Sentry.metrics.count("agent.run.completed", 1, { attributes: completionAttrs });
+                addLifecycleBreadcrumb("agent.run.completed", {
+                    channel_id: conversationId,
+                    platform: platform.name,
+                    stop_reason: result.stopReason,
+                    duration_ms: durationMs,
+                });
+                return result;
+            }
+            catch (err) {
+                scope.setContext("agent_run_error", {
+                    conversationId,
+                    sessionKey,
+                    platform: platform.name,
+                    messageId: message.id,
+                    threadTs: message.threadTs,
+                });
+                reportUserFacingError(err, {
+                    domain: "mikan",
+                    surface: "agent_run",
+                    operation: "run",
+                    severity: "error",
+                    platform: platform.name,
+                    context: {
+                        conversationId,
+                        sessionKey,
+                        messageId: message.id,
+                        threadTs: message.threadTs,
+                        attachmentCount: message.attachments?.length ?? 0,
+                    },
+                });
+                Sentry.metrics.count("agent.run.errors", 1, {
+                    attributes: attribution,
+                });
+                log.logWarning(`[${conversationId}] Run error`, err instanceof Error ? err.message : String(err));
+                return undefined;
+            }
+        }));
     }
-    refreshConversationEnvironment(conversationId) {
-        return this.clearConversationStates(conversationId, `[${conversationId}] Environment refreshed; cleared cached session runners`);
+    switchConversationModel(address, _provider, _model) {
+        this.bumpConversationRunnerGeneration(address);
+        return this.clearOffice(address, "Model switched");
     }
-    isConversationSession(sessionKey, conversationId) {
-        return sessionKey === conversationId || sessionKey.startsWith(`${conversationId}:`);
+    refreshConversationEnvironment(address) {
+        this.bumpConversationRunnerGeneration(address);
+        return this.clearOffice(address, "Environment refreshed");
     }
-    clearConversationStates(conversationId, message) {
-        for (const [sessionKey, state] of this.conversationStates) {
-            if (this.isConversationSession(sessionKey, conversationId) && state.running) {
-                return false;
+    refreshAllConversations() {
+        this.globalRunnerGeneration++;
+        const busy = [];
+        for (const address of this.sessions.offices()) {
+            if (!this.clearOffice(address, "Global settings changed")) {
+                this.sessions.deferConversationClear(address);
+                busy.push(address);
             }
         }
-        for (const sessionKey of Array.from(this.conversationStates.keys())) {
-            if (this.isConversationSession(sessionKey, conversationId)) {
-                this.conversationStates.delete(sessionKey);
-            }
+        return { busy };
+    }
+    clearOffice(address, reason) {
+        const cleared = this.sessions.clearConversation(address);
+        if (cleared) {
+            log.logInfo(`[${address.conversationId}] ${reason}; cleared cached session runners`);
+        }
+        return cleared;
+    }
+    bumpConversationRunnerGeneration(address) {
+        const key = officeKey(address);
+        this.conversationRunnerGenerations.set(key, (this.conversationRunnerGenerations.get(key) ?? 0) + 1);
+    }
+    runnerGeneration(address) {
+        return `${this.globalRunnerGeneration}:${this.conversationRunnerGenerations.get(officeKey(address)) ?? 0}`;
+    }
+    async createCurrentRunner(options, conversationDir, sessionScope) {
+        while (true) {
+            const generation = this.runnerGeneration(options.address);
+            const runner = await createRunner({
+                sandboxConfig: this.options.sandbox,
+                sessionKey: options.sessionKey,
+                office: this.options.workspace.office(options.address),
+                sessionScope,
+                vaultManager: this.options.vaultManager,
+                provisioner: this.options.provisioner,
+                resourceController: this.options.resourceController,
+                sessionView: this.options.sessionViewTokenStore
+                    ? {
+                        tokenStore: this.options.sessionViewTokenStore,
+                        portalBaseUrl: this.options.portalBaseUrl,
+                    }
+                    : undefined,
+                platformNotifier: this.options.platformNotifier,
+                platformReactor: this.options.platformReactor,
+                platformUploader: this.options.platformUploader,
+                platformBlockKit: this.options.platformBlockKit,
+                platformDmOpener: this.options.platformDmOpener,
+                platformHistoryFetcher: this.options.platformHistoryFetcher,
+                platformUserLister: this.options.platformUserLister,
+                extensionScheduleEngine: this.options.extensionScheduleEngine,
+                platformToolPackFactories: this.options.platformToolPackFactories,
+                models: this.resolvedModels,
+            });
+            if (generation === this.runnerGeneration(options.address))
+                return runner;
+            await runner.dispose();
         }
-        log.logInfo(message);
-        return true;
     }
     async getOrCreateState(options) {
-        const { conversationId, sessionKey, currentMessageId } = options;
-        const existing = this.conversationStates.get(sessionKey);
+        const { address, sessionKey, currentMessageId } = options;
+        const existing = this.sessions.get(address, sessionKey);
         if (existing?.running)
             return existing;
-        const conversationDir = join(this.options.workingDir, conversationId);
-        const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox, this.options.workingDir, conversationId);
+        const conversationDir = this.options.workspace.office(address).dir;
+        const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox, this.options.workspace, address);
         const sessionScope = await this.chatSessionManager.resolveSessionScope({
             conversationDir,
             sessionKey,
             cwd: runtimeCwd,
             currentMessageId,
-            rotateTopLevelSession: options.conversationKind === "shared" && sessionKey === conversationId,
+            rotateTopLevelSession: false,
         });
         if (existing && existing.sessionFile === sessionScope.contextFile) {
             existing.lastAccessedAt = Date.now();
             return existing;
         }
+        // A stale state (rotated session file) is being replaced: release the old
+        // runner's extension resources before the new one takes the slot.
+        if (existing)
+            this.sessions.discard(address, sessionKey);
         const state = {
+            address,
+            sessionKey,
             running: false,
-            runner: await createRunner(this.options.sandbox, sessionKey, conversationId, conversationDir, this.options.workingDir, sessionScope, this.options.vaultManager, this.options.provisioner, {
-                tokenStore: this.options.sessionViewTokenStore,
-                portalBaseUrl: this.options.portalBaseUrl,
-            }, this.options.platformNotifier),
+            runner: await this.createCurrentRunner(options, conversationDir, sessionScope),
             stopRequested: false,
             lastAccessedAt: Date.now(),
             sessionFile: sessionScope.contextFile,
             startedAt: 0,
         };
-        this.conversationStates.set(sessionKey, state);
+        this.sessions.set(state);
         return state;
     }
     async shutdown(timeoutMs = 30_000) {
@@ -197,26 +662,5 @@ class ConversationRuntimeImpl {
             });
         }
     }
-    evictIdleSessions() {
-        const now = Date.now();
-        for (const [key, state] of this.conversationStates) {
-            if (!state.running && now - state.lastAccessedAt > IDLE_TIMEOUT_MS) {
-                this.conversationStates.delete(key);
-            }
-        }
-        if (this.conversationStates.size > MAX_SESSIONS) {
-            const idleSessions = [];
-            for (const [key, state] of this.conversationStates) {
-                if (!state.running) {
-                    idleSessions.push({ key, lastAccessedAt: state.lastAccessedAt });
-                }
-            }
-            idleSessions.sort((a, b) => a.lastAccessedAt - b.lastAccessedAt);
-            const toEvict = this.conversationStates.size - MAX_SESSIONS;
-            for (let i = 0; i < toEvict && i < idleSessions.length; i++) {
-                this.conversationStates.delete(idleSessions[i].key);
-            }
-        }
-    }
 }
 //# sourceMappingURL=conversation-runtime.js.map