@pellux/goodvibes-sdk 0.37.2 → 1.0.0

package/dist/platform/control-plane/session-broker.d.ts

@@ -1,9 +1,8 @@
 import { PersistentStore } from '../state/persistent-store.js';
 import type { RuntimeEventBus } from '../runtime/events/index.js';
 import { RouteBindingManager } from '../channels/index.js';
-import type { AutomationRouteBinding } from '../automation/routes.js';
 import type { SharedSessionCompletion, SharedSessionContinuationRunner, SharedSessionInputRecord } from './session-intents.js';
-import type { FindSharedSessionOptions, SharedSessionMessage, SharedSessionParticipant, SharedSessionRecord, SharedSessionSubmission, SteerSharedSessionMessageInput, SubmitSharedSessionMessageInput } from './session-types.js';
+import type { CreateSharedSessionInput, EnsureSharedSessionInput, FindSharedSessionOptions, ListSharedSessionsOptions, RegisterSharedSessionInput, SharedSessionMessage, SharedSessionRecord, SharedSessionRegisterResult, SharedSessionSubmission, SteerSharedSessionMessageInput, SubmitSharedSessionMessageInput } from './session-types.js';
 import { type SharedSessionAgentStatusProvider, type SharedSessionEventPublisher, type SharedSessionMessageSender, type SharedSessionStoreSnapshot } from './session-broker-helpers.js';
 export declare class SharedSessionBroker {
     private readonly store;
@@ -22,10 +21,10 @@ export declare class SharedSessionBroker {
     private readonly _idleEmptyMs;
     /** Default idle threshold for sessions with content (ms). */
     private readonly _idleLongMs;
-    /**
-     * @param config.idleEmptyMs - Idle timeout for empty (0-message) sessions (default: 10 minutes).
-     * @param config.idleLongMs  - Idle timeout for sessions with content (default: 24 hours).
-     */
+    /** Retention window (ms since closedAt) for CLOSED sessions; Infinity = retain forever. */
+    private readonly _deletionRetentionMs;
+    /** @param config idleEmptyMs (empty-session idle, default 10m), idleLongMs (default
+     * 24h), deletionRetentionMs (closed-session delete age, default Infinity = retain). */
     constructor(config: {
         readonly store?: PersistentStore<SharedSessionStoreSnapshot> | undefined;
         readonly storePath?: string | undefined;
@@ -34,6 +33,7 @@ export declare class SharedSessionBroker {
         readonly messageSender: SharedSessionMessageSender;
         readonly idleEmptyMs?: number | undefined;
         readonly idleLongMs?: number | undefined;
+        readonly deletionRetentionMs?: number | undefined;
     });
     setEventPublisher(publisher: SharedSessionEventPublisher | null): void;
     /**
@@ -61,28 +61,43 @@ export declare class SharedSessionBroker {
     attachRuntimeBus(bus: RuntimeEventBus, sessionResolver: (agentId: string) => string | null): () => void;
     setContinuationRunner(runner: SharedSessionContinuationRunner | null): void;
     start(): Promise<void>;
-    listSessions(limit?: number): SharedSessionRecord[];
+    listSessions(limit?: number, options?: ListSharedSessionsOptions): SharedSessionRecord[];
     getSession(sessionId: string): SharedSessionRecord | null;
     findPreferredSession(options?: FindSharedSessionOptions): Promise<SharedSessionRecord | null>;
-    ensureSession(input?: {
-        readonly sessionId?: string | undefined;
-        readonly title?: string | undefined;
-        readonly metadata?: Record<string, unknown> | undefined;
-        readonly routeBinding?: AutomationRouteBinding | undefined;
-        readonly participant?: SharedSessionParticipant | undefined;
-    }): Promise<SharedSessionRecord>;
+    ensureSession(input?: EnsureSharedSessionInput): Promise<SharedSessionRecord>;
+    /** Idempotent register/heartbeat; a brand-new session is born ALREADY
+     * surface-managed (avoids a create-then-patch race where a concurrent steer
+     * sees active-but-not-yet-managed and hits the executor path). */
+    register(input: RegisterSharedSessionInput): Promise<SharedSessionRegisterResult>;
+    private markSurfaceManaged;
     getMessages(sessionId: string, limit?: number): SharedSessionMessage[];
     getInputs(sessionId: string, limit?: number): SharedSessionInputRecord[];
-    createSession(input?: {
-        readonly id?: string | undefined;
-        readonly title?: string | undefined;
-        readonly metadata?: Record<string, unknown> | undefined;
-        readonly routeBinding?: AutomationRouteBinding | undefined;
-        readonly participant?: SharedSessionParticipant | undefined;
-        readonly kind?: SharedSessionRecord['kind'] | undefined;
-    }): Promise<SharedSessionRecord>;
+    createSession(input?: CreateSharedSessionInput): Promise<SharedSessionRecord>;
     closeSession(sessionId: string): Promise<SharedSessionRecord | null>;
     reopenSession(sessionId: string): Promise<SharedSessionRecord | null>;
+    /**
+     * Permanently remove a shared session record and its queued messages/inputs
+     * from the home-scoped store (W5-S1: a real hard-delete verb, distinct from
+     * `closeSession` — closed sessions are HISTORY and are never touched by this
+     * path unless explicitly asked). Requires the session to already be closed:
+     * deleting a still-active session returns `'active'` so the caller can
+     * surface an honest 409 (close it, then delete) rather than yanking a
+     * record out from under a live participant/agent. An unknown OR
+     * already-deleted id returns `'not-found'` — delete is not a 200-noop; a
+     * second delete of the same id is an honest 404 at the route layer.
+     *
+     * Emits `session-deleted` on the same `session-update` wire channel as
+     * close/reopen/detach so subscribers drop the row live.
+     */
+    deleteSession(sessionId: string): Promise<'deleted' | 'not-found' | 'active'>;
+    /**
+     * Detach a surface's participant + route binding without closing or killing the
+     * session ("detach != close != kill"). Emits `session-detached`. Idempotent:
+     * unknown session -> null (404); closed session or no matching participant ->
+     * returned unchanged (a closed session emits no updates, so "stop receiving
+     * updates" is already satisfied). See {@link detachSharedSessionParticipant}.
+     */
+    detachParticipant(sessionId: string, surfaceId: string): Promise<SharedSessionRecord | null>;
     bindAgent(sessionId: string, agentId: string): Promise<SharedSessionRecord | null>;
     submitMessage(input: SubmitSharedSessionMessageInput): Promise<SharedSessionSubmission>;
     steerMessage(input: SteerSharedSessionMessageInput): Promise<SharedSessionSubmission>;
@@ -113,27 +128,25 @@ export declare class SharedSessionBroker {
     private publishUpdate;
     private publishInputLifecycleEvent;
     private handleIntent;
-    private recordInput;
-    private updateInput;
-    private claimNextQueuedInput;
-    private finalizeAgentInputs;
+    /** Collection read for a live surface (see {@link filterSessionInputsSince}). */
+    getInputsSince(sessionId: string, options?: {
+        readonly state?: SharedSessionInputRecord['state'] | undefined;
+        readonly since?: number | undefined;
+        readonly limit?: number | undefined;
+    }): SharedSessionInputRecord[];
+    /** A live surface reports a collected input delivered (`consumed:false`) or
+     * consumed/completed (`consumed:true`); emits a session_update. Lifecycle rules
+     * live in {@link markSurfaceInputDelivered}. */
+    markInputDelivered(sessionId: string, inputId: string, options?: {
+        readonly consumed?: boolean | undefined;
+    }): Promise<SharedSessionInputRecord | null>;
     private runQueuedFollowUp;
     private sessionInputStore;
     private messageStore;
     private touch;
     private refreshPendingInputCount;
-    /**
-     * Periodic idle-session GC sweep.
-     *
-     * Policy:
-     * - Sessions with messageCount === 0 AND no active agent AND idle longer than
-     *   `_idleEmptyMs` (default 10min) are closed with reason `idle-empty`.
-     * - Sessions with messageCount > 0 AND no active agent AND idle longer than
-     *   `_idleLongMs` (default 24h) are closed with reason `idle-long`.
-     *
-     * "Idle" is measured from `lastActivityAt` (updated on createInput/bindAgent/
-     * appendMessage). Sessions with an active agent are never GC'd.
-     */
+    /** Periodic sweep: idle-close active sessions and (only under a finite retention
+     * window) delete closed ones. Full policy lives in {@link sweepSharedSessions}. */
     private gcSweep;
 }
 //# sourceMappingURL=session-broker.d.ts.map

package/dist/platform/control-plane/session-broker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-broker.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/session-broker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,EACV,uBAAuB,EACvB,+BAA+B,EAE/B,wBAAwB,EACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,8BAA8B,EAC9B,+BAA+B,EAChC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,6BAA6B,CAAC;AAyCrC,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAmC;IACvE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0C;IACnE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,cAAc,CAA4C;IAClE,OAAO,CAAC,kBAAkB,CAAgD;IAC1E,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAA+C;IAElE,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IAErC;;;OAGG;gBACS,MAAM,EAAE;QAClB,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,0BAA0B,CAAC,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;QAC5C,QAAQ,CAAC,mBAAmB,EAAE,gCAAgC,CAAC;QAC/D,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;QACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC1C;IAaD,iBAAiB,CAAC,SAAS,EAAE,2BAA2B,GAAG,IAAI,GAAG,IAAI;IAItE;;;;OAIG;IACH,iBAAiB,IAAI,MAAM;IAQ3B;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B;;;;;;;;;;OAUG;IACH,gBAAgB,CACd,GAAG,EAAE,eAAe,EACpB,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAClD,MAAM,IAAI;IAQb,qBAAqB,CAAC,MAAM,EAAE,+BAA+B,GAAG,IAAI,GAAG,IAAI;IAIrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4C5B,YAAY,CAAC,KAAK,SAAM,GAAG,mBAAmB,EAAE;IAIhD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAInD,oBAAoB,CAAC,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAWjG,aAAa,CAAC,KAAK,GAAE;QACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;QAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;KACxD,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAoBrC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,oBAAoB,EAAE;IAInE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,wBAAwB,EAAE;IAK/D,aAAa,CAAC,KAAK,GAAE;QACzB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;QAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;KACpD,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAa/B,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAcpE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAWrE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAiBlF,aAAa,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIvF,YAAY,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIrF,eAAe,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIzF,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IASxI;;;;;OAKG;IACG,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;QACL,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;KACnE,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAcjC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IA2ChJ,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAiBzF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAiB9E,aAAa;YAiBb,yBAAyB;IAoBvC,OAAO,CAAC,oBAAoB;YAOd,cAAc;IAQ5B,OAAO,CAAC,qBAAqB;YAQf,OAAO;IAQrB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,0BAA0B;YAiBpB,YAAY;IA8I1B,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,mBAAmB;YASb,iBAAiB;IAyB/B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,wBAAwB;IAIhC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,OAAO;CAkBhB"}
+{"version":3,"file":"session-broker.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/session-broker.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EACV,uBAAuB,EACvB,+BAA+B,EAE/B,wBAAwB,EACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EAEzB,0BAA0B,EAC1B,oBAAoB,EAEpB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,8BAA8B,EAC9B,+BAA+B,EAChC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAChC,MAAM,6BAA6B,CAAC;AAoDrC,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAmC;IACvE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0C;IACnE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,cAAc,CAA4C;IAClE,OAAO,CAAC,kBAAkB,CAAgD;IAC1E,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAA+C;IAElE,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAE9C;2FACuF;gBAC3E,MAAM,EAAE;QAClB,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,0BAA0B,CAAC,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;QAC5C,QAAQ,CAAC,mBAAmB,EAAE,gCAAgC,CAAC;QAC/D,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;QACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnD;IAcD,iBAAiB,CAAC,SAAS,EAAE,2BAA2B,GAAG,IAAI,GAAG,IAAI;IAItE;;;;OAIG;IACH,iBAAiB,IAAI,MAAM;IAQ3B;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B;;;;;;;;;;OAUG;IACH,gBAAgB,CACd,GAAG,EAAE,eAAe,EACpB,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAClD,MAAM,IAAI;IAQb,qBAAqB,CAAC,MAAM,EAAE,+BAA+B,GAAG,IAAI,GAAG,IAAI;IAIrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B5B,YAAY,CAAC,KAAK,SAAM,EAAE,OAAO,GAAE,yBAA8B,GAAG,mBAAmB,EAAE;IAWzF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAInD,oBAAoB,CAAC,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAYjG,aAAa,CAAC,KAAK,GAAE,wBAA6B,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuBvF;;sEAEkE;IAC5D,QAAQ,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,2BAA2B,CAAC;YAczE,kBAAkB;IAchC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,oBAAoB,EAAE;IAInE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,wBAAwB,EAAE;IAK/D,aAAa,CAAC,KAAK,GAAE,wBAA6B,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAajF,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAcpE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAW3E;;;;;;;;;;;;;OAaG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAcnF;;;;;;OAMG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAiB5F,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAiBlF,aAAa,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIvF,YAAY,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIrF,eAAe,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIzF,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IASxI;;;;;OAKG;IACG,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;QACL,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;KACnE,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAcjC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IA4ChJ,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAiBzF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAiB9E,aAAa;YAiBb,yBAAyB;IAoBvC,OAAO,CAAC,oBAAoB;YAOd,cAAc;IAQ5B,OAAO,CAAC,qBAAqB;YAQf,OAAO;IAQrB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,0BAA0B;YAiBpB,YAAY;IA8K1B,iFAAiF;IACjF,cAAc,CACZ,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAO,GACzJ,wBAAwB,EAAE;IAI7B;;oDAEgD;IAC1C,kBAAkB,CACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAO,GACxD,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;YAY7B,iBAAiB;IAyB/B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,wBAAwB;IAIhC;uFACmF;IACnF,OAAO,CAAC,OAAO;CAkBhB"}

package/dist/platform/control-plane/session-broker.js

@@ -1,12 +1,13 @@
+import { SDKErrorCodes } from '@pellux/goodvibes-errors';
 import { logger } from '../utils/logger.js';
 import { sessionsActive } from '../runtime/metrics.js';
 import { PersistentStore } from '../state/persistent-store.js';
 import { RouteBindingManager } from '../channels/index.js';
 import {} from './session-broker-helpers.js';
-import { createSessionBrokerSnapshot, loadSessionBrokerState, sortSessions, } from './session-broker-state.js';
-import { claimNextQueuedSessionInput, finalizeAgentSessionInputs, recordSharedSessionInput, refreshPendingInputCount, touchSharedSession, updateSharedSessionInput, } from './session-broker-inputs.js';
+import { createSessionBrokerSnapshot, loadSessionBrokerState, reconcileSessionBrokerBoot, sortSessions, } from './session-broker-state.js';
+import { claimNextQueuedSessionInput, filterSessionInputsSince, finalizeAgentSessionInputs, markSurfaceInputDelivered, recordSharedSessionInput, refreshPendingInputCount, touchSharedSession, updateSharedSessionInput, } from './session-broker-inputs.js';
 import { appendSharedSessionMessage, buildSharedSessionContinuationTask, listSharedSessionMessages, } from './session-broker-messages.js';
-import { attachSharedSessionParticipantAndRoute, bindSharedSessionAgent, closeSharedSessionRecord, createSharedSessionRecord, reopenSharedSessionRecord, } from './session-broker-sessions.js';
+import { SESSION_SURFACE_MANAGED_METADATA_KEY, SURFACE_ROUTE_FRESHNESS_MS, attachSharedSessionParticipantAndRoute, bindSharedSessionAgent, closeSharedSessionRecord, createSharedSessionRecord, detachSharedSessionParticipant, participantToAttachInput, registerSharedSession, reopenSharedSessionRecord, shouldRouteInputToSurface, } from './session-broker-sessions.js';
 import { sweepSharedSessions } from './session-broker-gc.js';
 import { SharedSessionRuntimeBusBridge } from './session-broker-runtime-bus.js';
 const MAX_PERSISTED_MESSAGES = 2_000;
@@ -14,11 +15,13 @@ const MAX_CONTINUATION_MESSAGES = 16;
 /** Max inputs retained per session bucket. */
 const MAX_PERSISTED_INPUTS = 500;
 /**
- * How long a closed session is retained in Maps before hard deletion.
- * Allows trailing reads (e.g. status checks shortly after close) to still
- * see the final record. Default: 5 minutes.
+ * Default retention for CLOSED sessions (HISTORY): `POSITIVE_INFINITY` = retain
+ * indefinitely, so the GC sweep NEVER deletes a closed session. A finite value
+ * (constructor `deletionRetentionMs`) is the opt-in deletion authority. The store
+ * is a full snapshot of memory, so there is no separate memory/disk eviction here
+ * (unlike the companion manager); memory is bounded by the per-session cap below.
  */
-const SESSION_DELETION_RETENTION_MS = 5 * 60_000;
+const SESSION_DELETION_RETENTION_MS = Number.POSITIVE_INFINITY;
 export class SharedSessionBroker {
     store;
     routeBindings;
@@ -36,10 +39,10 @@ export class SharedSessionBroker {
     _idleEmptyMs;
     /** Default idle threshold for sessions with content (ms). */
     _idleLongMs;
-    /**
-     * @param config.idleEmptyMs - Idle timeout for empty (0-message) sessions (default: 10 minutes).
-     * @param config.idleLongMs  - Idle timeout for sessions with content (default: 24 hours).
-     */
+    /** Retention window (ms since closedAt) for CLOSED sessions; Infinity = retain forever. */
+    _deletionRetentionMs;
+    /** @param config idleEmptyMs (empty-session idle, default 10m), idleLongMs (default
+     * 24h), deletionRetentionMs (closed-session delete age, default Infinity = retain). */
     constructor(config) {
         if (!config.store && !config.storePath) {
             throw new Error('SharedSessionBroker requires an explicit store or storePath.');
@@ -51,6 +54,7 @@ export class SharedSessionBroker {
         this.messageSender = config.messageSender;
         this._idleEmptyMs = config.idleEmptyMs ?? 10 * 60 * 1000; // 10 min
         this._idleLongMs = config.idleLongMs ?? 24 * 60 * 60 * 1000; // 24 h
+        this._deletionRetentionMs = config.deletionRetentionMs ?? SESSION_DELETION_RETENTION_MS;
     }
     setEventPublisher(publisher) {
         this.eventPublisher = publisher;
@@ -115,24 +119,9 @@ export class SharedSessionBroker {
             this.inputs.set(sessionId, bucket);
         }
         this.loaded = true;
-        // Startup reconciliation cancels inputs stuck in spawned/delivered from a prior run.
-        const restartReason = 'daemon restart — agent state unknown';
-        for (const [sessionId, bucket] of this.inputs.entries()) {
-            let changed = false;
-            for (let i = 0; i < bucket.length; i++) {
-                const entry = bucket[i];
-                if (entry.state === 'spawned' || entry.state === 'delivered') {
-                    bucket[i] = { ...entry, state: 'cancelled', updatedAt: Date.now(), error: restartReason };
-                    changed = true;
-                }
-            }
-            if (changed)
-                this.refreshPendingInputCount(sessionId);
-        }
-        for (const [sessionId, session] of this.sessions.entries()) {
-            if (session.activeAgentId) {
-                this.sessions.set(sessionId, { ...session, activeAgentId: undefined, updatedAt: Date.now() });
-            }
+        // Boot reconciliation: cancel stuck spawned/delivered inputs, clear stale activeAgentId.
+        for (const sessionId of reconcileSessionBrokerBoot(this.sessions, this.inputs)) {
+            this.refreshPendingInputCount(sessionId);
         }
         await this.persist();
         if (!this._gcInterval) {
@@ -142,8 +131,18 @@ export class SharedSessionBroker {
             this._gcInterval = iv;
         }
     }
-    listSessions(limit = 100) {
-        return sortSessions(this.sessions.values()).slice(0, Math.max(1, limit));
+    listSessions(limit = 100, options = {}) {
+        const sorted = sortSessions(this.sessions.values());
+        const filtered = sorted.filter((session) => {
+            if (options.project !== undefined && session.project !== options.project)
+                return false;
+            if (options.kind !== undefined && session.kind !== options.kind)
+                return false;
+            if (options.includeClosed === false && session.status === 'closed')
+                return false;
+            return true;
+        });
+        return filtered.slice(0, Math.max(1, limit));
     }
     getSession(sessionId) {
         return this.sessions.get(sessionId) ?? null;
@@ -157,29 +156,64 @@ export class SharedSessionBroker {
                 return false;
             if (options.surfaceKind && !session.surfaceKinds.includes(options.surfaceKind))
                 return false;
+            if (options.project !== undefined && session.project !== options.project)
+                return false;
             return true;
         });
         return candidates[0] ?? null;
     }
     async ensureSession(input = {}) {
         await this.start();
-        if (input.sessionId) {
-            const existing = this.sessions.get(input.sessionId);
-            if (existing) {
-                if (existing.status === 'closed') {
-                    return (await this.reopenSession(existing.id)) ?? existing;
-                }
-                return existing;
-            }
+        const existing = input.sessionId ? this.sessions.get(input.sessionId) : undefined;
+        if (existing) {
+            const active = existing.status === 'closed'
+                ? (await this.reopenSession(existing.id)) ?? existing
+                : existing;
+            // Adopt: record the participant + advance lastSeenAt (register heartbeat).
+            return input.participant
+                ? this.attachParticipantAndRoute(active, participantToAttachInput(input.participant, input.title))
+                : active;
         }
         return this.createSession({
             id: input.sessionId,
+            kind: input.kind,
+            project: input.project,
             title: input.title,
             metadata: input.metadata,
             routeBinding: input.routeBinding,
             participant: input.participant,
         });
     }
+    /** Idempotent register/heartbeat; a brand-new session is born ALREADY
+     * surface-managed (avoids a create-then-patch race where a concurrent steer
+     * sees active-but-not-yet-managed and hits the executor path). */
+    async register(input) {
+        await this.start();
+        const createManaged = (i) => this.createSession({ ...i, metadata: { ...i.metadata, [SESSION_SURFACE_MANAGED_METADATA_KEY]: true } });
+        const result = await registerSharedSession({
+            getSession: (id) => this.sessions.get(id) ?? null,
+            createSession: createManaged,
+            reopenSession: (id) => this.reopenSession(id),
+            attachParticipant: (s, a) => this.attachParticipantAndRoute(s, a),
+        }, input);
+        const marked = await this.markSurfaceManaged(result.record.id); // backstop; no-op if already set
+        return marked ? { ...result, record: marked } : result;
+    }
+    async markSurfaceManaged(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return null;
+        if (session.metadata?.[SESSION_SURFACE_MANAGED_METADATA_KEY] === true)
+            return session;
+        const updated = {
+            ...session,
+            metadata: { ...session.metadata, [SESSION_SURFACE_MANAGED_METADATA_KEY]: true },
+            updatedAt: Date.now(),
+        };
+        this.sessions.set(updated.id, updated);
+        await this.persist();
+        return updated;
+    }
     getMessages(sessionId, limit = 100) {
         return listSharedSessionMessages(this.messageStore(), sessionId, limit);
     }
@@ -224,6 +258,61 @@ export class SharedSessionBroker {
         this.publishUpdate('session-reopened', updated);
         return updated;
     }
+    /**
+     * Permanently remove a shared session record and its queued messages/inputs
+     * from the home-scoped store (W5-S1: a real hard-delete verb, distinct from
+     * `closeSession` — closed sessions are HISTORY and are never touched by this
+     * path unless explicitly asked). Requires the session to already be closed:
+     * deleting a still-active session returns `'active'` so the caller can
+     * surface an honest 409 (close it, then delete) rather than yanking a
+     * record out from under a live participant/agent. An unknown OR
+     * already-deleted id returns `'not-found'` — delete is not a 200-noop; a
+     * second delete of the same id is an honest 404 at the route layer.
+     *
+     * Emits `session-deleted` on the same `session-update` wire channel as
+     * close/reopen/detach so subscribers drop the row live.
+     */
+    async deleteSession(sessionId) {
+        await this.start();
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return 'not-found';
+        if (session.status !== 'closed')
+            return 'active';
+        this.sessions.delete(sessionId);
+        this.messages.delete(sessionId);
+        this.inputs.delete(sessionId);
+        await this.persist();
+        sessionsActive.set(this.sessions.size);
+        this.publishUpdate('session-deleted', { sessionId });
+        return 'deleted';
+    }
+    /**
+     * Detach a surface's participant + route binding without closing or killing the
+     * session ("detach != close != kill"). Emits `session-detached`. Idempotent:
+     * unknown session -> null (404); closed session or no matching participant ->
+     * returned unchanged (a closed session emits no updates, so "stop receiving
+     * updates" is already satisfied). See {@link detachSharedSessionParticipant}.
+     */
+    async detachParticipant(sessionId, surfaceId) {
+        await this.start();
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return null;
+        if (session.status === 'closed')
+            return session;
+        const { session: updated, changed } = detachSharedSessionParticipant(session, surfaceId);
+        if (!changed)
+            return session;
+        this.sessions.set(sessionId, updated);
+        await this.persist();
+        this.publishUpdate('session-detached', {
+            sessionId: updated.id,
+            surfaceId,
+            participants: updated.participants.length,
+        });
+        return updated;
+    }
     async bindAgent(sessionId, agentId) {
         await this.start();
         const session = this.sessions.get(sessionId);
@@ -231,7 +320,7 @@ export class SharedSessionBroker {
             return null;
         const updated = bindSharedSessionAgent(session, agentId);
         this.sessions.set(sessionId, updated);
-        const claimed = this.claimNextQueuedInput(sessionId, agentId);
+        const claimed = claimNextQueuedSessionInput(this.sessionInputStore(), sessionId, agentId);
         await this.persist();
         this.publishUpdate('session-agent-bound', updated);
         if (claimed) {
@@ -300,7 +389,7 @@ export class SharedSessionBroker {
             ...(metadata.status === 'failed' ? { lastError: body } : {}),
         };
         this.sessions.set(sessionId, updated);
-        const finalizedInputs = this.finalizeAgentInputs(sessionId, agentId, metadata.status === 'failed' ? 'failed' : metadata.status === 'cancelled' ? 'cancelled' : 'completed', metadata.status === 'failed' ? body : undefined);
+        const finalizedInputs = finalizeAgentSessionInputs(this.sessionInputStore(), sessionId, agentId, metadata.status === 'failed' ? 'failed' : metadata.status === 'cancelled' ? 'cancelled' : 'completed', metadata.status === 'failed' ? body : undefined);
         await this.persist();
         this.publishUpdate('session-agent-completed', {
             sessionId,
@@ -319,7 +408,7 @@ export class SharedSessionBroker {
     }
     async cancelInput(sessionId, inputId) {
         await this.start();
-        const updated = this.updateInput(sessionId, inputId, (entry) => {
+        const updated = updateSharedSessionInput(this.sessionInputStore(), sessionId, inputId, (entry) => {
             if (entry.state !== 'queued')
                 return entry;
             return {
@@ -456,6 +545,10 @@ export class SharedSessionBroker {
             });
             created = true;
         }
+        // Closed sessions are history: steer/follow-up/submit against an EXISTING
+        // closed record are rejected before mutation; auto-create for a missing session is untouched.
+        if (session.status === 'closed')
+            throw Object.assign(new Error('Session is closed'), { code: SDKErrorCodes.SESSION_CLOSED, status: 409 });
         const updatedSession = await this.attachParticipantAndRoute(session, input, binding ?? undefined);
         const userMessage = await this.appendMessage(updatedSession.id, {
             role: 'user',
@@ -470,7 +563,14 @@ export class SharedSessionBroker {
                 sessionIntent: intent,
             },
         });
-        const queuedInput = this.recordInput(updatedSession.id, intent, input, binding?.id, userMessage.id);
+        const queuedInput = recordSharedSessionInput(this.sessionInputStore(), {
+            sessionId: updatedSession.id,
+            intent,
+            message: input,
+            routeId: binding?.id,
+            causationId: userMessage.id,
+            maxPersistedInputs: MAX_PERSISTED_INPUTS,
+        });
         this.publishInputLifecycleEvent('session-input-queued', queuedInput, {
             messageId: userMessage.id,
         });
@@ -478,7 +578,7 @@ export class SharedSessionBroker {
         if (intent !== 'follow-up' && activeAgentId) {
             const sent = this.messageSender.send('orchestrator', activeAgentId, input.body, { kind: 'directive' });
             if (sent) {
-                const delivered = this.updateInput(updatedSession.id, queuedInput.id, (entry) => ({
+                const delivered = updateSharedSessionInput(this.sessionInputStore(), updatedSession.id, queuedInput.id, (entry) => ({
                     ...entry,
                     state: 'delivered',
                     activeAgentId,
@@ -509,7 +609,7 @@ export class SharedSessionBroker {
                 };
             }
             if (intent === 'steer' && !allowSpawnFallback) {
-                const rejected = this.updateInput(updatedSession.id, queuedInput.id, (entry) => ({
+                const rejected = updateSharedSessionInput(this.sessionInputStore(), updatedSession.id, queuedInput.id, (entry) => ({
                     ...entry,
                     state: 'rejected',
                     updatedAt: Date.now(),
@@ -549,6 +649,25 @@ export class SharedSessionBroker {
                 created,
             };
         }
+        // Surface routing: a steer/follow-up with a LIVE surface participant (other than the
+        // sender) queues for that surface (sessions.inputs.list/deliver); no live surface keeps the executor path below.
+        if ((intent === 'steer' || intent === 'follow-up') &&
+            shouldRouteInputToSurface(updatedSession, Date.now(), SURFACE_ROUTE_FRESHNESS_MS, { surfaceId: input.surfaceId })) {
+            await this.persist();
+            this.publishInputLifecycleEvent('session-input-queued-for-surface', queuedInput, {
+                messageId: userMessage.id,
+            });
+            return {
+                session: this.sessions.get(updatedSession.id),
+                userMessage,
+                routeBinding: binding ?? undefined,
+                input: queuedInput,
+                intent,
+                mode: 'queued-for-surface',
+                state: queuedInput.state,
+                created,
+            };
+        }
         await this.persist();
         return {
             session: this.sessions.get(updatedSession.id),
@@ -562,24 +681,23 @@ export class SharedSessionBroker {
             created,
         };
     }
-    recordInput(sessionId, intent, input, routeId, causationId) {
-        return recordSharedSessionInput(this.sessionInputStore(), {
-            sessionId,
-            intent,
-            message: input,
-            routeId,
-            causationId,
-            maxPersistedInputs: MAX_PERSISTED_INPUTS,
-        });
-    }
-    updateInput(sessionId, inputId, transform) {
-        return updateSharedSessionInput(this.sessionInputStore(), sessionId, inputId, transform);
+    /** Collection read for a live surface (see {@link filterSessionInputsSince}). */
+    getInputsSince(sessionId, options = {}) {
+        return filterSessionInputsSince(this.inputs.get(sessionId) ?? [], options);
     }
-    claimNextQueuedInput(sessionId, agentId) {
-        return claimNextQueuedSessionInput(this.sessionInputStore(), sessionId, agentId);
-    }
-    finalizeAgentInputs(sessionId, agentId, nextState, error) {
-        return finalizeAgentSessionInputs(this.sessionInputStore(), sessionId, agentId, nextState, error);
+    /** A live surface reports a collected input delivered (`consumed:false`) or
+     * consumed/completed (`consumed:true`); emits a session_update. Lifecycle rules
+     * live in {@link markSurfaceInputDelivered}. */
+    async markInputDelivered(sessionId, inputId, options = {}) {
+        await this.start();
+        const consumed = options.consumed === true;
+        const updated = markSurfaceInputDelivered(this.sessionInputStore(), sessionId, inputId, consumed);
+        if (!updated)
+            return null;
+        this.refreshPendingInputCount(sessionId);
+        await this.persist();
+        this.publishInputLifecycleEvent(consumed ? 'session-input-completed' : 'session-input-delivered', updated);
+        return updated;
     }
     async runQueuedFollowUp(sessionId) {
         if (!this.continuationRunner)
@@ -620,23 +738,13 @@ export class SharedSessionBroker {
     refreshPendingInputCount(sessionId) {
         refreshPendingInputCount(this.sessionInputStore(), sessionId);
     }
-    /**
-     * Periodic idle-session GC sweep.
-     *
-     * Policy:
-     * - Sessions with messageCount === 0 AND no active agent AND idle longer than
-     *   `_idleEmptyMs` (default 10min) are closed with reason `idle-empty`.
-     * - Sessions with messageCount > 0 AND no active agent AND idle longer than
-     *   `_idleLongMs` (default 24h) are closed with reason `idle-long`.
-     *
-     * "Idle" is measured from `lastActivityAt` (updated on createInput/bindAgent/
-     * appendMessage). Sessions with an active agent are never GC'd.
-     */
+    /** Periodic sweep: idle-close active sessions and (only under a finite retention
+     * window) delete closed ones. Full policy lives in {@link sweepSharedSessions}. */
     gcSweep() {
         const anyChanged = sweepSharedSessions({ sessions: this.sessions, messages: this.messages, inputs: this.inputs }, {
             idleEmptyMs: this._idleEmptyMs,
             idleLongMs: this._idleLongMs,
-            deletionRetentionMs: SESSION_DELETION_RETENTION_MS,
+            deletionRetentionMs: this._deletionRetentionMs,
             publishUpdate: (event, payload) => this.publishUpdate(event, payload),
         });
         if (anyChanged) {

package/dist/platform/control-plane/session-store-importer.d.ts

@@ -0,0 +1,57 @@
+/**
+ * session-store-importer.ts
+ *
+ * Boot-time migration that folds every pre-existing session store into the ONE
+ * home-scoped durable broker store. Idempotent and safe to run repeatedly — the
+ * merge is keyed on session id, so a re-run over the same sources is a no-op.
+ *
+ * Sources folded in (One-Platform Wave 1, S1 spine):
+ *  1. Companion chat files — ~/.goodvibes/companion-chat/sessions/*.json
+ *     (home-scoped, projectless → project 'unknown'); INCLUDING closed sessions.
+ *  2. Per-project broker snapshots — <root>/.goodvibes/<surface>/control-plane/
+ *     sessions.json (the old project-scoped store path); stamped project = <root>.
+ *  3. The stale agent-fork store — same broker-snapshot shape under its surface.
+ *
+ * No session is dropped (closed included); deletion remains the GC's job. Corrupt
+ * or partial files are logged and skipped per-file — the run never aborts.
+ */
+/** A legacy store to fold into the home store. */
+export interface LegacySessionSource {
+    /** 'broker-store' = a SharedSessionStoreSnapshot JSON file; 'companion-dir' = a dir of PersistedChatSession files. */
+    readonly kind: 'broker-store' | 'companion-dir';
+    /** File path (broker-store) or directory path (companion-dir). */
+    readonly path: string;
+    /** Project to stamp on records that carry no explicit project. Companion sources default to 'unknown'. */
+    readonly project?: string | undefined;
+}
+export interface ImportLegacySessionsResult {
+    /** Total sessions in the home store after the import. */
+    readonly total: number;
+    /** Sessions newly added by this run (0 on an idempotent re-run). */
+    readonly imported: number;
+    /** Sources that did not exist on disk (skipped, not an error). */
+    readonly missingSources: readonly string[];
+    /** Files that failed to parse and were skipped. */
+    readonly skippedFiles: readonly string[];
+}
+/**
+ * Discover the legacy stores reachable from a single project root plus the
+ * home-scoped companion directory. Scans <projectRoot>/.goodvibes/<surface>/
+ * control-plane/sessions.json across every surface subdir (tui, goodvibes,
+ * agent, …). The home store itself is never returned as a source.
+ */
+export declare function discoverLegacySessionSources(input: {
+    readonly projectRoot: string;
+    readonly companionSessionsDir?: string | undefined;
+}): LegacySessionSource[];
+/**
+ * Fold every source into the home store at `homeStorePath`, idempotently.
+ * Starts from the existing home store, merges each source keyed by session id
+ * (newer updatedAt wins; messages/inputs union-deduped by id), and re-persists
+ * atomically. A second run over the same sources produces the same store.
+ */
+export declare function importLegacySessionStores(input: {
+    readonly homeStorePath: string;
+    readonly sources: readonly LegacySessionSource[];
+}): Promise<ImportLegacySessionsResult>;
+//# sourceMappingURL=session-store-importer.d.ts.map

package/dist/platform/control-plane/session-store-importer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store-importer.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/session-store-importer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA0BH,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,sHAAsH;IACtH,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,eAAe,CAAC;IAChD,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0GAA0G;IAC1G,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,0BAA0B;IACzC,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAQD;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpD,GAAG,mBAAmB,EAAE,CA0BxB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAClD,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAkCtC"}