@maudecode/talaria-web 1.18.0 → 1.20.0

package/dist/sessions/service.d.ts

@@ -1,9 +1,10 @@
+import { type ContextDetail } from '@maudecode/talaria-web-contracts';
 /**
  * Route-level session operations (the Python `/api/session*` handlers): the
  * detail payload, list and search, and every mutation with its guards.
  * Runtime concerns owned by other domains arrive through `SessionServiceDeps`.
  */
-import type { PendingSteer, RecoveryAudit, RecoveryRepair } from '@maudecode/talaria-web-contracts';
+import type { AgentStorage, ChatReadiness, PendingSteer, RecoveryAudit, RunStatus, SessionGoal, SessionNotice, RecoveryRepair, SidecarResult } from '@maudecode/talaria-web-contracts';
 import type { RunJournal } from './journal.js';
 import type { DraftStore } from './drafts.js';
 import type { SessionEventBus } from './events.js';
@@ -11,7 +12,7 @@ import { type ListParams, type ListResponse, type Row, type RuntimeOverlay } fro
 import { Session, titleFrom, type Message } from './session.js';
 import { type SessionStore } from './store.js';
 import { type ClaudeCodeSessionSource } from './claude-code.js';
-import { type StateDbRead } from './state-db.js';
+import { type stateDbSessionRow, type StateDbRead, type StateDbSessionSource, type StateDbSettlementRead } from './state-db.js';
 import { type CompressionJob } from './compress.js';
 import { type SidecarLike } from '../sidecar/client.js';
 import { type ToolResultView } from './merge.js';
@@ -21,6 +22,7 @@ import { type ShareStore } from './shares.js';
 import { type MediaAccessDeps } from '../workspace/media.js';
 import { type MediaProjection } from '../workspace/media-refs.js';
 import type { ProjectStore } from '../projects.js';
+import type { GatewaySessions } from './gateway-sessions.js';
 export declare class HttpFailure extends Error {
     readonly status: number;
     readonly extra: Record<string, unknown>;
@@ -28,12 +30,30 @@ export declare class HttpFailure extends Error {
 }
 /**
  * Python `_agent_runtime_barrier_response`: a stale local Agent checkout is refused with a typed 409 before the caller
- * mutates anything. Any other failure of the check is not a verdict and lets the caller proceed.
+ * mutates anything. An unavailable connection is refused before dispatch; other check failures are not a verdict
+ * and let the caller proceed.
  */
 export declare function ensureAgentRuntimeCurrent(sidecar: SidecarLike | null): Promise<void>;
+/** TAL-1254: how soon a worktree lock the sidecar could not confirm is tried again. */
+export declare const WORKTREE_RETAIN_RETRY_MS = 60000;
+/**
+ * TAL-951: whether a chat turn would be admitted now. Ready and source-stale incompatible sidecars both run turn
+ * admission's live check: recovery state can change after the handshake. A check
+ * that cannot answer fails closed as `sidecar_unavailable`.
+ */
+export declare function currentChatReadiness(sidecar: SidecarLike | null): Promise<ChatReadiness>;
+/** Lazy reads shared by one gate sequence, never across a lock wait or sidecar dispatch. */
+interface SessionGateReads {
+    sid: string;
+    owners: (profile?: string) => Promise<Map<string, StateDbSessionSource> | null>;
+    row: () => Promise<ReturnType<typeof stateDbSessionRow>>;
+    meta: () => Promise<Row | null>;
+    messages: (stitch: boolean) => Promise<Message[]>;
+    existing: () => Promise<Set<string>>;
+}
 export interface SessionServiceDeps {
     /** TAL-259: epoch seconds of the state directory's `recovery_stamping_since` marker. */
-    recoveryStampingSince: () => number;
+    recoveryStampingSince: () => Promise<number>;
     /** TAL-255: the Agent sidecar for manual compression (`chat.compress`); null while it is down. */
     sidecar?: () => SidecarLike | null;
     /** Detached sidecar work for a profile: deletion waits for the returned release, so the home outlives the work. */
@@ -41,7 +61,8 @@ export interface SessionServiceDeps {
     /** A profile whose deletion has started takes no new detached work. */
     profileDeleting?: (profile: string | null) => boolean;
     /** TAL-372: the session's background work receipts, for the delegation rows that started them. */
-    backgroundReceipts?: (sid: string) => Receipt[];
+    backgroundReceipts?: (sid: string) => Receipt[] | Promise<Receipt[]>;
+    backgroundPending?: (sid: string) => Promise<Set<string>>;
     store: SessionStore;
     drafts: DraftStore;
     events: SessionEventBus;
@@ -64,15 +85,27 @@ export interface SessionServiceDeps {
         journalDegraded: (streamId: string) => boolean;
         /** TAL-424: the live stream's pending steers, as clients show them. */
         pendingSteers?: (streamId: string) => PendingSteer[];
+        /** The live stream's server-selected presentation, else null. */
+        runStatus?: (streamId: string) => RunStatus | null;
+        liveToolProgress?: (streamId: string) => Record<string, unknown>[];
+        /** TAL-1006: the live stream's open compression span start (epoch seconds), else null. */
+        compressionStartedAt?: (streamId: string) => number | null;
+        /** TAL-899: whether a Stop holds the session's automatic turns until the user's next turn. */
+        automaticTurnsHeld?: (sid: string) => Promise<boolean>;
+        sessionNotices?: (sid: string) => SessionNotice[];
+        sessionGoal?: (sid: string) => SessionGoal | null;
         /** Drop the session's cached agent; `endSession` (delete/clear) also ends its approval grants and parked approvals. */
-        evictAgent: (sid: string, endSession?: boolean) => void;
+        evictAgent: (sid: string, endSession?: boolean) => Promise<void>;
         closeTerminal: (sid: string) => void;
-        /** Python `delete_cli_session`: remove the session's rows from the profile's state.db; resolves false on failure. */
-        deleteCliSession: (profile: string | null, sid: string) => Promise<boolean>;
+        /**
+         * Python `delete_cli_session`: remove the session and its compression continuations from the profile's state.db in one
+         * transaction; `ok` is false on failure, with `refused` when another Agent process holds any of them (TAL-792).
+         */
+        deleteCliSession: (profile: string | null, sid: string) => Promise<SidecarResult<'state_db.delete_cli_session'>>;
     };
     attachmentDir: (sid: string) => string;
     /** A deleted session can never be viewed, so its finished runs are cleared from the relay. */
-    clearRelayCompletions?: (sid: string, profile: string | null) => void;
+    clearRelayCompletions?: (sid: string, profile: string | null) => Promise<void>;
     /** Run journals are removed with their session (Python `delete_run_journal`). */
     journal?: RunJournal;
     hermesHome: string;
@@ -91,9 +124,14 @@ export interface SessionServiceDeps {
     resolveContextLength?: (model: string | null, provider: string | null, profile: string | null) => Promise<number | null>;
     /** `(model, provider)` normalisation from a request (checkpoint 7 wires provider-qualified ids). */
     modelStateFromRequest: (model: unknown, requestedProvider: unknown, currentProvider: string | null) => [string | null, string | null];
+    /** TAL-1040: the explicit launch route for `provider`: its configured endpoint (model, providers or custom_providers), else null. */
+    profileLaunchRoute?: (profile: string, provider: string) => {
+        provider: string;
+        baseUrl: string | null;
+    };
     /** TAL-542: the pair a stale session model starts on, from the profile's catalog; `null` keeps it. */
     repairSessionModel?: (profile: string | null, model: string, provider: string | null) => [string, string] | null;
-    /** TAL-542: builds the catalog `repairSessionModel` reads unless a fresh enough one exists. */
+    /** Explicit discovery for auxiliary title generation; ordinary turn admission uses only fresh cached repair evidence. */
     warmSessionModelRepair?: (profile?: string | null) => Promise<void>;
     yolo: {
         isEnabled: (sid: string) => boolean;
@@ -103,22 +141,19 @@ export interface SessionServiceDeps {
     /** `truncated`: source kinds whose rows stopped at the per-kind window on this read (TAL-482). */
     cliSessions: (profile: string, opts: {
         sourceFilter: string | null;
+        sessionIds?: readonly string[];
+        keepEmpty?: boolean;
+        sidebarRows?: boolean;
     }) => Promise<{
         rows: Row[];
         truncated: ReadonlySet<string>;
+        storage: AgentStorage;
     }>;
-    /** `cliSessions` read on this thread, for the synchronous single-session lookups. */
-    cliSessionsSync: (profile: string, opts: {
-        sourceFilter: string | null;
-    }) => {
-        rows: Row[];
-        truncated: ReadonlySet<string>;
-    };
     /** TAL-551: read-only Claude Code transcripts, listed with the CLI rows when both toggles are on. */
     claudeCode?: ClaudeCodeSessionSource;
     profileHome: (profile: string) => string;
     /** Python `commit_session_memory` (fire-and-forget): the cached Agent flushes memory for a session the user left. */
-    commitSessionMemory?: (sid: string) => void;
+    commitSessionMemory?: (sid: string) => Promise<void>;
     /** TAL-186: the `/api/media` allow-list the transcript media projection rewrites against; without it nothing local is rewritten. */
     media?: {
         access: MediaAccessDeps;
@@ -127,22 +162,27 @@ export interface SessionServiceDeps {
 }
 export declare class SessionService {
     readonly deps: SessionServiceDeps;
+    owner: GatewaySessions | null;
     /** TAL-255: one manual compression worker per session, shared by every compress route. */
     private readonly compressionJobs;
+    /** TAL-1005: the turns now waiting on their session's compression job before they read its history. */
+    private readonly compactionWaiters;
+    private worktreeRetainRetry;
+    private worktreesUnconfirmed;
     constructor(deps: SessionServiceDeps);
     private get store();
     /**
-     * TAL-577: user-turn admission shared by `chat.start` and server-side wakeups, after `ensureAgentRuntimeCurrent`.
+     * User-turn admission shared by `chat.start` and automatic turns through `TurnRunner.startServerTurn`.
      * A requested workspace must be trusted; the session's own one, when its directory is gone, falls back to the last one.
      */
-    turnWorkspace(s: Session, requested?: unknown): string;
-    /** A `@provider:` id is split; any other model an explicit pick did not just choose is checked against the catalog (TAL-542). */
+    turnWorkspace(s: Session, requested?: unknown): Promise<string>;
+    /** Split qualified ids and opportunistically repair against fresh evidence; missing discovery never delays a turn. */
     turnModel(s: Session, body?: Record<string, unknown>): [string | null, string | null, boolean];
     /**
      * TAL-186: rewrites a session's media references to their URLs. A local path is rewritten only when `/api/media`
      * serves it for this session, under the same resolution, so every rewritten reference loads.
      */
-    mediaProjector(s: Session): (text: string) => MediaProjection | null;
+    mediaProjector(s: Session): Promise<(text: string) => MediaProjection | null>;
     publish(reason: string, profile?: string | null, sessionId?: string | null): void;
     visibleToActiveProfile(profile: string | null | undefined): boolean;
     /**
@@ -150,13 +190,20 @@ export declare class SessionService {
      * not slip past the profile check into a handler that trims and trusts it. A non-empty id that is still unsafe after
      * trimming can name no session and is refused here instead of falling through.
      */
-    sessionIdVisible(raw: unknown): boolean;
+    sessionIdVisible(raw: unknown): Promise<boolean>;
+    private localTargets;
+    /** One receipt-backed physical target for every operation on a local conversation alias, read on the state.db worker. */
+    resolveSessionId(sid: string): Promise<string>;
     /** Python `_lookup_cli_session_metadata(...).get('read_only')` plus the persisted sidecar flag and a not-claimable foreign owner. */
     private isReadOnlyImport;
     /** Python `_session_is_subagent_view_only`: a delegated child by any signal — the persisted sidecar or the state.db row. */
-    isSubagentViewOnly(sid: string): boolean;
-    /** TAL-358: batched `sessions.source` owners from the active profile's state.db. */
-    readonly stateDbSources: (ids: string[]) => Map<string, string> | null;
+    isSubagentViewOnly(sid: string, reads?: SessionGateReads): Promise<boolean>;
+    /** TAL-358: batched `sessions.source` owners from the active profile's state.db, read on the state.db worker (TAL-923). */
+    readonly stateDbSources: (ids: string[], profile?: string) => Promise<Map<string, StateDbSessionSource> | null>;
+    /** The owners of `byProfile`'s ids, read up front, as the synchronous lookup `withOwnerLocks` takes. */
+    private ownerSources;
+    /** `withOwnerLocks` with the owners read on the state.db worker, so a gate or payload never opens state.db on this thread. */
+    private ownerLocked;
     /**
      * TAL-590 (Python #3238): the read-only CLI or API-server imports among `rows` whose active-profile state.db row is
      * gone, so their source was deleted outside Web and no Web action could remove them. An unreadable state.db proves
@@ -172,27 +219,54 @@ export declare class SessionService {
      */
     private listStateDbLookups;
     /** The persisted flag folded with the state.db owner lock (TAL-358): the one read-only rule for mutation gates and the wire. */
-    isReadOnly(s: Session): boolean;
+    readOnlyReason(s: Session | string, profile?: string, reads?: SessionGateReads): Promise<string | null>;
+    private loadedReadOnlyReason;
+    /**
+     * The final owner check before a protected sidecar dispatch or write: callers dispatch as soon as it resolves. The
+     * owner is the Agent's, which can change at any moment, so reading it on the state.db worker (TAL-923) widens no
+     * window Web could close; the session lock, where one is held, still serializes Web's own writes.
+     */
+    assertWritable(session: Session | string, profile?: string, reads?: SessionGateReads): Promise<void>;
+    /** Controls can exist without a local session file; use the same id the sidecar will address. */
+    idForMutation(sid: string): Promise<string>;
+    isReadOnly(s: Session): Promise<boolean>;
+    /** Recheck after the mutex wait; legacy local metadata/handoff actions keep their existing read-only allowance. */
+    private withMutationLock;
     /** Full session for mutation, refusing read-only imports (Python `_get_or_materialize_session`). */
-    getForMutation(sid: string): Session;
+    getForMutation(sid: string, reads?: SessionGateReads): Promise<Session>;
     private get404;
     /** The Agent's state.db rows for this session (empty for subagent views, which never merge). */
-    stateDbRows(s: Session): Message[];
-    /** `stateDbRows` and whether the read succeeded on a state.db whose messages carry ids (TAL-493). */
-    stateDbRead(s: Session): StateDbRead;
+    stateDbRows(s: Session): Promise<Message[]>;
+    /**
+     * `stateDbRows` and whether the read succeeded on a state.db whose messages carry ids (TAL-493). TAL-1162: read on the
+     * state.db worker; a worker failure is a failed read.
+     */
+    stateDbRead(s: Session): Promise<StateDbRead>;
+    /** `stateDbRead`'s projection of the rows past `afterId` alone (the detail's page tail), on the state.db worker. */
+    stateDbTailRead(s: Session, afterId: number, unidentified: readonly ReadonlyMap<string, number>[]): Promise<StateDbRead & {
+        anchor?: Message;
+        requiresFullRead?: boolean;
+    }>;
+    /** The one read a turn's settlement builds its context from and settles with (`stateDbSettlementRead`). */
+    settlementRead(s: Session): Promise<StateDbSettlementRead>;
+    /**
+     * Preserve existing transcript provenance before a turn adds Agent rows from its starting database read. The stamp
+     * lands before this returns; the read follows.
+     */
+    beginStateDbTurn(s: Session): Promise<StateDbRead>;
     private stateDbPath;
     /**
      * Python `_merged_session_messages_for_display`: the sidecar transcript merged append-only with the Agent's state.db
      * rows (a WebUI conversation continued from the CLI shows the CLI turns). This is the coordinate space `GET
      * /api/session` exposes, so branching and the next model history slice/extend the same list.
      */
-    mergedTranscript(s: Session, local?: Message[], stateRows?: Message[]): Message[];
+    mergedTranscript(s: Session, local: Message[], stateRows: Message[]): Message[];
     /**
      * TAL-493: record the highest state.db id this boundary or settled turn read, under the session lock in the same save,
      * so the merge never replays a covered row and appends every row committed after the read. Call it after the boundary
      * fields are set: the marker holds only while they and the row it names stay as recorded.
      */
-    markStateDbSeen(s: Session, read?: StateDbRead, opts?: {
+    markStateDbSeen(s: Session, read: StateDbRead, opts?: {
         boundary?: boolean;
     }): void;
     /**
@@ -208,7 +282,8 @@ export declare class SessionService {
         previousContext: Message[];
         agentRows?: Message[] | null;
         startId?: number | null;
-        read?: StateDbRead;
+        startGeneration?: string | null;
+        read: StateDbSettlementRead;
     }): void;
     /**
      * TAL-921: the model context a turn leaves when it ends without its settled result (an error, a Stop, a dead run), as a
@@ -229,15 +304,22 @@ export declare class SessionService {
      * extended append-only with the Agent's state.db rows (a CLI continuation of this session reaches the model), except
      * for a compressed context whose anchor cannot be verified — that stays context-only.
      */
-    modelContext(s: Session, stateRows?: Message[]): Message[];
+    modelContext(s: Session, stateRows: Message[]): Message[];
+    /** `modelContext` over a state.db read taken now. */
+    readModelContext(s: Session): Promise<Message[]>;
     /**
      * TAL-518: the model context a `/btw` clone inherits: the chat's history plus its running turn's prompt, which
      * deferred save keeps out of `messages` and `context_messages` until settlement.
      */
-    sideQuestionContext(s: Session): Message[];
+    sideQuestionContext(s: Session): Promise<Message[]>;
     /** Python `_is_messaging_session_id`: from the WebUI metadata or the Agent's row. */
     private isMessagingSession;
-    /** Python `_lookup_cli_session_metadata`: the sidebar row for a state.db session in the active profile. */
+    private sessionGateReads;
+    /**
+     * Python `_lookup_cli_session_metadata`: the sidebar row for a state.db session in the active profile, else its plain
+     * row (a segment its chain's row does not name). Both are read by id: the sidebar listing would scan every session to
+     * rank its window (TAL-923).
+     */
     private lookupCliMeta;
     private claudeCodeRows;
     /** Python `_session_index_marks_was_webui`: an index row that once owned a WebUI sidecar (self-heal 404). */
@@ -247,43 +329,59 @@ export declare class SessionService {
      * a WebUI sidecar. `materialized` sessions are writeable (the caller persists the sidecar), `not_claimable` ones are
      * read-only stubs, `was_webui`/`no_foreign_state`/`invalid_sid` answer 404.
      */
-    claimOrSynthesizeCliSession(sid: string, metaIn?: Row | null): {
+    claimOrSynthesizeCliSession(sid: string, metaIn?: Row | null, reads?: SessionGateReads): Promise<{
         session: Session | null;
         reason: 'materialized' | 'not_claimable' | 'was_webui' | 'no_foreign_state' | 'invalid_sid';
-    };
+    }>;
     private mutationTarget;
     /**
      * TAL-551: a Claude Code import is a live view of a transcript Claude Code keeps writing. Web never stores a copy,
      * which would freeze its messages and pin it to one profile.
      */
     private rejectClaudeCode;
-    private rejectSubagent;
+    private rejectViewOnly;
+    /** All transcript transports use the same live-run and durable-pending evidence. */
+    backgroundUpdates<T>(s: Session, messages: T[], reviewRows?: (turnId: string) => Message[]): Promise<T[]>;
     /** TAL-372: each delegation row of a turn's scene carries the status of the work it started. */
-    backgroundLinked(s: Session, messages: unknown[]): unknown[];
+    backgroundLinked(s: Session, messages: unknown[]): Promise<unknown[]>;
     /** `compact()` plus messages, redacted for the wire (Python `_public_session_projection`). */
-    publicSession(s: Session, withMessages?: boolean): Record<string, unknown>;
+    publicSession(s: Session, withMessages?: boolean, messages?: Message[]): Promise<Record<string, unknown>>;
+    /** Opaque read identity, including context changes that do not alter display message counts. */
+    private contextDetailKey;
     /** `compact()` with the wire streaming/read-only flags (TAL-312), for replies that return the session row. */
-    wireRow(s: Session): Record<string, unknown>;
+    wireRow(s: Session): Promise<Record<string, unknown>>;
     /**
      * TAL-303: the label for a session's workspace, from its own profile's registry (a profileless row is the root's).
      * One resolver serves one response, so each profile's registry is read once however many rows it names.
      */
-    workspaceNames(): (row: {
+    workspaceNames(rows: readonly {
         profile?: unknown;
         workspace?: unknown;
-    }) => string | null;
+    }[]): Promise<(row: {
+        profile?: unknown;
+        workspace?: unknown;
+    }) => string | null>;
     /** The agent's display name for a session's profile (`assistant_name`). */
     assistantName(s: Session): string;
     /** Python `public_session_projection(s.__dict__)`: every persisted field, redacted (session export). */
     publicSessionDocument(s: Session): Record<string, unknown>;
     private loadRevision;
+    private readonly pageTails;
+    private readonly pageContexts;
+    private prefixIndex;
+    /** Existing projections, once per complete turn range, in absolute transcript coordinates. */
+    private deriveRange;
+    private limitedDetail;
     /** Python `_handle_session_get` on the WebUI sidecar (state.db merge pending). */
     detail(sid: string, query: {
         messages?: string | null | undefined;
         msg_limit?: string | null | undefined;
         msg_before?: string | null | undefined;
         resolve_model?: string | null | undefined;
-    }): Record<string, unknown>;
+    }): Promise<Record<string, unknown>>;
+    /** Project an already settled session without reloading it or running endpoint recovery/profile gates. */
+    windowedDetail(s: Session, limit: number): Promise<Record<string, unknown>>;
+    private detailPayload;
     /**
      * TAL-454: the chat `/branch` copied, while it still loads (archived included). A compression continuation is also a
      * fork of its parent but not a branch, so it links nowhere.
@@ -299,10 +397,13 @@ export declare class SessionService {
     /** A session without a sidecar, synthesized from state.db for this profile; 404/409 like the detail. */
     private foreignSession;
     /** Python `_handle_session_get` without a sidecar: the state.db transcript as a (read-only or claimable) foreign stub. */
+    foreignMessages(messages: Message[], session: object): Message[];
     private foreignSessionDetail;
     /** Clear persisted streaming flags when no live stream backs them (Python `_clear_stale_stream_state`). */
-    clearStaleStreamState(session: Session): boolean;
-    list(params: Omit<ListParams, 'activeProfile' | 'isolatedProfileMode' | 'profilesMatch' | 'cliRows' | 'gatewayIdentity' | 'stateDbSources' | 'truncatedSources' | 'pruneOrphanedImports' | 'webuiRows'>): Promise<{
+    clearStaleStreamState(session: Session): Promise<boolean>;
+    /** Expand saved aliases in one worker query independently of the bounded native sidebar window. */
+    private persistedAliasMetadata;
+    list(params: Omit<ListParams, 'activeProfile' | 'isolatedProfileMode' | 'profilesMatch' | 'cliRows' | 'gatewayIdentity' | 'stateDbSources' | 'truncatedSources' | 'agentStorage' | 'pruneOrphanedImports' | 'webuiRows' | 'webDiagnosticIds'>): Promise<{
         body: ListResponse;
         etag: string;
     }>;
@@ -310,7 +411,7 @@ export declare class SessionService {
         content: boolean;
         depth: number;
         allProfiles: boolean;
-    }): Record<string, unknown>;
+    }): Promise<Record<string, unknown>>;
     /**
      * TAL-308: the sidebar search. The candidates are exactly the `/api/sessions` rows for `params` (visibility, source,
      * archived, projection and order), narrowed to `projectId` (`none`: rows without a project), then matched on the
@@ -323,9 +424,10 @@ export declare class SessionService {
     }): Promise<Record<string, unknown>>;
     /** The first of a stored session's first `depth` messages (0: all) containing every term, with its redacted excerpt. */
     private contentMatch;
-    status(sid: string): Record<string, unknown>;
-    usage(sid: string): Record<string, unknown>;
-    resolveNewSessionWorkspace(body: Record<string, unknown>, visiblePrevSessionId: string | null, profile: string | null): string | null;
+    status(sid: string): Promise<Record<string, unknown>>;
+    contextDetail(sid: string, expectedKey: string): Promise<ContextDetail>;
+    usage(sid: string): Promise<Record<string, unknown>>;
+    resolveNewSessionWorkspace(body: Record<string, unknown>, visiblePrevSessionId: string | null, profile: string | null): Promise<string | null>;
     /** The server owns the names' normalization (TAL-631): trimmed, blanks dropped, and nothing left is the profile's defaults. */
     validateToolsetsShape(toolsets: unknown): string[] | null;
     create(body: Record<string, unknown>, opts?: {
@@ -335,41 +437,105 @@ export declare class SessionService {
             repo_root: string;
             created_at: number;
         } | null;
-    }): Session;
+    }): Promise<Session>;
+    /**
+     * TAL-1040: an `ignore_config` / `safe` chat starts through the active profile's Agent owner, which freezes the mode before
+     * any Agent import. That owner reads no profile default, so the launch route is explicit: the requested model, else this
+     * profile's default as a normal chat starts, with that provider's configured endpoint.
+     */
+    createDiagnostic(body: Record<string, unknown>, mode: 'ignore_config' | 'safe'): Promise<Record<string, unknown>>;
     /** Python `_persist_generated_session_title`: title + generated/manual flags under the session lock, then insights sync. */
     persistGeneratedTitle(sid: string, nextTitle: string, eventReason: string): Promise<Session>;
     rename(sid: string, rawTitle: unknown): Promise<Record<string, unknown>>;
     private pinChain;
     pin(sid: string, pinRequested: boolean): Promise<Record<string, unknown>>;
     private pinUnserialized;
+    /**
+     * TAL-1254: relock the worktrees of every unarchived worktree chat (or just `only`) for the running sidecar, so the
+     * Agent's worktree sweep reads them as live, and flag each one git no longer has as retained. Runs before a
+     * (re)started sidecar reports ready and when a chat is unarchived. The Agent's sweep runs outside Talaria, so a lock
+     * the sidecar could not confirm is retried until git takes it; meanwhile that tree keeps its flag.
+     */
+    retainWorktrees(call: SidecarLike['call'], only?: Session): Promise<void>;
+    /**
+     * Every persisted worktree chat, read from its own file: the index only narrows the files to read, since a crash
+     * between a save and its index update can leave a session out of the index or with a stale `archived`. A file that
+     * cannot be read now, or a session directory that cannot be listed, falls back to the index rows (`_unread`, so their
+     * flags are left alone) and counts in `unread`, which keeps retention retrying until every file has been read.
+     */
+    private worktreeSessionRows;
+    /** One pending retry at a time; a sidecar that is not ready by then retains everything in its next ready gate instead. */
+    private retryWorktreeRetention;
     archive(sid: string, archived: boolean): Promise<Record<string, unknown>>;
     move(sid: string, targetProjectId: string | null): Promise<Record<string, unknown>>;
+    private readonly modelConfirmationKey;
+    private confirmModelSwitch;
     update(sid: string, body: Record<string, unknown>): Promise<Record<string, unknown>>;
     setToolsets(sid: string, toolsets: unknown): Promise<Record<string, unknown>>;
     /** Python `/api/personality/set` persistence: the name only; the prompt is resolved by the caller. */
     setPersonality(sid: string, name: string | null): Promise<string | null>;
-    truncate(sid: string, keepRaw: unknown): Promise<Record<string, unknown>>;
+    /**
+     * TAL-929: under a `hold`, a cut that discards more than one user turn changes nothing and answers with its counts,
+     * unless `confirmToken` is the token of the rows it would remove now: a transcript that changed since asks again.
+     * Without one (a released App, which asked on the device) the cut proceeds as before.
+     */
+    truncate(sid: string, keepRaw: unknown, hold?: {
+        confirmToken: string | null;
+    } | null): Promise<Record<string, unknown>>;
+    /**
+     * TAL-929: the confirmation a cut at `keep` needs, or null for one that removes at most one user turn. Counted on the rows
+     * the detail shows, state.db continuation included, since `keep` indexes them: the user turns the cut removes, and the
+     * messages after the row it starts at.
+     */
+    private heldCut;
     /**
      * Python `_handle_session_compress_start`: validate, then join the session's running job or start a fresh one (a
      * finished job is replaced). The stale-runtime refusal comes before a job exists; a running job is joined without it.
      */
-    startCompression(sid: string, focusRaw: unknown): Promise<CompressionJob>;
+    startCompression(sid: string, focusRaw: unknown, opts?: {
+        automatic?: boolean;
+    }): Promise<CompressionJob>;
+    /**
+     * TAL-1005: compact the session in its joinable compression job before the next turn reads its history. A running job
+     * is always joined; a new one starts when the session is `due` (`compactionDue`, read from the store when omitted).
+     * `turn` is the waiting turn's stream: the job leaves its rows alone. `onWait` runs once a job is being waited on; an abort of `signal` (the turn's Stop) ends the wait but not the
+     * job. True when the job installed a compressed context. Never throws: a failed job leaves the Agent's own preflight.
+     */
+    ensureCompacted(sid: string, opts?: {
+        turn?: string;
+        signal?: AbortSignal;
+        onWait?: () => void | Promise<void>;
+        due?: boolean;
+    }): Promise<boolean>;
+    /**
+     * TAL-1005: measure the model context again when it holds a post-compression estimate the rows after it may have
+     * outgrown (a waiting turn's prompt, a stopped or failed turn's work). Skipped while a turn owns the session, which
+     * settles its own figures, or once the estimate changed meanwhile. True when it stored a new estimate.
+     */
+    remeasureContext(sid: string): Promise<boolean>;
+    private storedCompactionDue;
+    /** Whether the session's context (the post-compression estimate, else the last prompt) reached the next turn's threshold. */
+    compactionDue(s: Session): boolean;
     /** The session a compression may run on now, and the model history it compresses: the context a turn would send, so a
-     * repeat compression builds on the previous summary instead of re-reading the whole display transcript. */
+     * repeat compression builds on the previous summary instead of re-reading the whole display transcript. `context` is
+     * that history unsanitized and `stateRows` the state.db read it came from. */
     private compressionTarget;
-    /** The loaded session's own compression guards: no running turn and enough model history. */
-    private compressionHistory;
+    /**
+     * The loaded session's own compression guards: no running turn and enough model history. TAL-1005: a turn waiting on
+     * the compression has not read its history yet, so it does not block; the context leaves out its rows, as it does.
+     */
+    private compressionContext;
     /** TAL-614: whether a manual compression would start now: `compressionTarget`'s gates, with `readOnly` the wire flag. */
     private canCompress;
     /** TAL-258: the session's WebUI record (absent for a CLI or gateway session) and the profile whose state.db holds its rows. */
     private handoffTarget;
     /** Python `_handle_conversation_rounds` (TAL-258): the session's rounds and whether the handoff dock is due. */
-    conversationRounds(sid: string, since: number | null): {
+    conversationRounds(sid: string, since: number | null): Promise<{
         ok: true;
         rounds: number;
         threshold: number;
         should_show: boolean;
-    };
+    }>;
     /**
      * Python `_handle_handoff_summary` (TAL-258): the session's main model summarizes its last 50 state.db messages after
      * `since`, and the summary is appended as a display-only `handoff_summary` tool row. A failed or cut-off answer falls
@@ -391,25 +557,30 @@ export declare class SessionService {
      * the session lock keeps two summaries from both passing that check. A card neither store saved answers 503.
      */
     private persistHandoffMarker;
+    /** The same live presentation for session detail and journal snapshot recovery. */
+    currentRunStatus(sid: string, streamId: string | null): RunStatus | null;
     /** The session's compression job; a deleted session's finished result is dropped rather than served. */
-    compressionJob(sid: string): CompressionJob | undefined;
+    compressionJob(sid: string): Promise<CompressionJob | undefined>;
     /**
      * Python `_handle_session_compress`: compress the sanitized transcript in the sidecar outside the lock, then under the
-     * session lock refuse a result the session moved past (stream state or transcript changed) and install it as the
+     * session lock refuse a result the session moved past (another stream, or a transcript changed) and install it as the
      * model context with the manual anchor and the #4836 boundary that keeps state.db from replaying compressed rows.
-     * The guards run again first: a stream may have started while the caller awaited the runtime check.
+     * The guards run again first: a stream may have started while the caller awaited the runtime check. TAL-1005: rows
+     * the job's waiting turns added meanwhile (a prompt, a Stop) stay after the compressed context.
      */
     private compressSession;
+    /** Profile-scoped, best-effort lifecycle delivery; archive only notifies plugins. */
+    private finalizeSession;
     clear(sid: string): Promise<Record<string, unknown>>;
     retry(sid: string): Promise<Record<string, unknown>>;
     undo(sid: string): Promise<Record<string, unknown>>;
-    duplicate(sid: string): Record<string, unknown>;
-    branch(sid: string, body: Record<string, unknown>): Record<string, unknown>;
+    duplicate(sid: string): Promise<Record<string, unknown>>;
+    branch(sid: string, body: Record<string, unknown>): Promise<Record<string, unknown>>;
     /** Python `read_session_lineage_report` on the active profile's state.db. */
-    lineageReport(sid: string): Record<string, unknown>;
+    lineageReport(sid: string): Promise<Record<string, unknown>>;
     /** TAL-259: recovery reads the active profile's state.db, and a recovered sidecar joins that profile. */
     private recoveryDeps;
-    recoveryAudit(): RecoveryAudit;
+    recoveryAudit(): Promise<RecoveryAudit>;
     recoveryRepairSafe(): Promise<RecoveryRepair>;
     /**
      * Python `_handle_session_compression_recovery_start`: open a compression-exhausted session's focused continuation, an
@@ -420,30 +591,32 @@ export declare class SessionService {
     /** Python `find_compression_recovery_session`: the oldest same-profile continuation started from `sid`, cached or persisted. */
     private compressionRecoveryChild;
     /** The run that keeps `delete` answering 409, if any; stream status reports it so a draining client can wait on it (TAL-622). */
-    activeRunBlocking(sid: string): string | null;
+    activeRunBlocking(sid: string): Promise<string | null>;
     delete(sid: string): Promise<Record<string, unknown>>;
-    cleanup(zeroOnly: boolean): Record<string, unknown>;
-    import(body: Record<string, unknown>): Record<string, unknown>;
-    readDraft(sid: string): Record<string, unknown>;
+    /** The committed Agent deletion targets and cleanup outcome; throws 409 `refused` while an Agent process holds a row. */
+    private deleteStateDbRows;
+    cleanup(zeroOnly: boolean): Promise<Record<string, unknown>>;
+    import(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    readDraft(sid: string): Promise<Record<string, unknown>>;
     writeDraft(body: Record<string, unknown>): Promise<Record<string, unknown>>;
     saveAnchorScene(body: Record<string, unknown>): Promise<Record<string, unknown>>;
     /** The session and the full transcript its detail is built from; a state.db-only session gives its synthesized one. */
     private fullTranscript;
-    readAnchorScene(query: Record<string, string | null | undefined>): Record<string, unknown>;
+    readAnchorScene(query: Record<string, string | null | undefined>): Promise<Record<string, unknown>>;
     /** TAL-331: one tool call's whole result, which a limited response clipped (`result_truncated`), redacted like the detail. */
     readToolResult(query: {
         session_id: string;
         tool_call_id: string;
-    }): {
+    }): Promise<{
         tool_call_id: string;
         result: string;
         result_view: ToolResultView;
-    };
-    createShare(sid: string): Record<string, unknown>;
-    revokeShare(sid: string): Record<string, unknown>;
-    loadShare(token: string): Record<string, unknown>;
+    }>;
+    createShare(sid: string): Promise<Record<string, unknown>>;
+    revokeShare(sid: string): Promise<Record<string, unknown>>;
+    loadShare(token: string): Promise<Record<string, unknown>>;
     yolo(sid: string): Record<string, unknown>;
-    setYolo(sid: string, enabled: boolean): Record<string, unknown>;
+    setYolo(sid: string, enabled: boolean): Promise<Record<string, unknown>>;
 }
 export declare const AUTO_TITLE_LABELS: Set<string>;
 /** Python `apply_session_title_rename`. */