@sema-agent/server 1.313.0 → 1.315.0

package/dist/fleet/fleet-bus.js

@@ -262,94 +262,78 @@ export function fleetBackgroundChildPublisher(bus, log) {
             return u.tokens;
         return undefined;
     };
-    return (e) => {
-        if (e.kind === "spawn") {
-            const tomb = meta.get(e.taskId);
-            const inheritParent = !e.parentTaskId && !e.parentSessionId && tomb?.done === true;
-            const m = {
-                ...(e.parentTaskId ? { parentTaskId: e.parentTaskId } : {}),
-                ...(!e.parentTaskId && e.parentSessionId ? { parentSessionLink: e.parentSessionId } : {}),
-                ...(inheritParent && tomb?.parentTaskId !== undefined ? { parentTaskId: tomb.parentTaskId } : {}),
-                ...(inheritParent && tomb?.parentSessionLink !== undefined ? { parentSessionLink: tomb.parentSessionLink } : {}),
-                ...(inheritParent && tomb?.resolvedParentId !== undefined ? { resolvedParentId: tomb.resolvedParentId } : {}),
-                ...(e.sessionScoped && e.owner ? { hostSessionId: e.rootSessionId ?? e.owner } : {}),
-                tenantScope: e.scope ?? "default",
-                sessionScoped: e.sessionScoped,
-                spawnedAt: e.startedAt ?? Date.now(),
-                ...(e.rootSessionId ? { rootSessionId: e.rootSessionId } : {}),
-                ...(e.parentToolCallId ? { parentToolCallId: e.parentToolCallId } : {}),
-                ...(e.sessionId ? { aliasUuid: e.sessionId } : {}),
-                ...(e.workflowRunId ? { workflowRunId: e.workflowRunId } : {}),
-                ...(e.workflowRunId && !(e.sessionScoped && e.owner)
-                    ? (() => {
-                        if (e.rootSessionId)
-                            return { hostSessionId: e.rootSessionId };
-                        if (e.parentSessionId)
-                            return { hostSessionId: e.parentSessionId };
-                        const host = e.parentTaskId ? bus.snapshot().tasks.find((r) => r.id === e.parentTaskId && r.scope === (e.scope ?? "default")) : undefined;
-                        return host?.sessionId ? { hostSessionId: host.sessionId } : {};
-                    })()
-                    : {}),
-                ...(!(e.sessionScoped && e.owner) && !e.workflowRunId && (e.rootSessionId ?? e.parentSessionId)
-                    ? (() => {
-                        if (e.rootSessionId)
-                            return { hostSessionId: e.rootSessionId };
-                        const childScope = e.scope ?? "default";
-                        for (const pm of meta.values()) {
-                            if (pm.aliasUuid === e.parentSessionId && (pm.tenantScope ?? "default") === childScope) {
-                                return pm.hostSessionId ? { hostSessionId: pm.hostSessionId } : {};
-                            }
-                        }
+    const handleSpawn = (e) => {
+        const tomb = meta.get(e.taskId);
+        const inheritParent = !e.parentTaskId && !e.parentSessionId && tomb?.done === true;
+        const m = {
+            ...(e.parentTaskId ? { parentTaskId: e.parentTaskId } : {}),
+            ...(!e.parentTaskId && e.parentSessionId ? { parentSessionLink: e.parentSessionId } : {}),
+            ...(inheritParent && tomb?.parentTaskId !== undefined ? { parentTaskId: tomb.parentTaskId } : {}),
+            ...(inheritParent && tomb?.parentSessionLink !== undefined ? { parentSessionLink: tomb.parentSessionLink } : {}),
+            ...(inheritParent && tomb?.resolvedParentId !== undefined ? { resolvedParentId: tomb.resolvedParentId } : {}),
+            ...(e.sessionScoped && e.owner ? { hostSessionId: e.rootSessionId ?? e.owner } : {}),
+            tenantScope: e.scope ?? "default",
+            sessionScoped: e.sessionScoped,
+            spawnedAt: e.startedAt ?? Date.now(),
+            ...(e.rootSessionId ? { rootSessionId: e.rootSessionId } : {}),
+            ...(e.parentToolCallId ? { parentToolCallId: e.parentToolCallId } : {}),
+            ...(e.sessionId ? { aliasUuid: e.sessionId } : {}),
+            ...(e.workflowRunId ? { workflowRunId: e.workflowRunId } : {}),
+            ...(e.workflowRunId && !(e.sessionScoped && e.owner)
+                ? (() => {
+                    if (e.rootSessionId)
+                        return { hostSessionId: e.rootSessionId };
+                    if (e.parentSessionId)
                         return { hostSessionId: e.parentSessionId };
-                    })()
-                    : {}),
-            };
-            remember(e.taskId, m);
-            bus.publishTask({ id: e.taskId, name: redactSecrets(e.description ?? e.name ?? e.taskId), ...(e.agentType ? { agentType: redactSecrets(e.agentType) } : {}), ...rowTags(m), status: "running", tokens: 0, ...(e.transcriptId ? { transcriptId: e.transcriptId } : {}) });
-            dlog("bg_child_event", { kind: "spawn", taskId: e.taskId, sessionScoped: e.sessionScoped, scope: m.tenantScope, hostSessionId: m.hostSessionId ?? null, parentTaskId: m.parentTaskId ?? null });
-            return;
-        }
-        const m = meta.get(e.taskId) ?? { sessionScoped: e.sessionScoped, tenantScope: "default", spawnedAt: Date.now() };
-        if (!meta.has(e.taskId)) {
-            remember(e.taskId, m);
-            dlog("bg_child_event", { kind: `${e.kind}-lazy-mint`, taskId: e.taskId, sessionScoped: e.sessionScoped });
-        }
-        else {
-            remember(e.taskId, m);
-        }
-        if (m.done) {
-            dlog("bg_child_event", { kind: `${e.kind}-after-terminal-ignored`, taskId: e.taskId });
-            return;
-        }
-        if (m.parentToolCallId === undefined && e.parentToolCallId)
-            m.parentToolCallId = e.parentToolCallId;
-        if (e.kind === "tick") {
-            if (!m.suppressedTwin && e.progressTaskId && (!e.progressParentTaskId || e.progressParentTaskId === (m.parentTaskId ?? m.parentSessionLink))) {
-                const tail = ` ${e.progressTaskId}`;
-                for (const row of bus.snapshot().tasks) {
-                    if (row.id.endsWith(tail))
-                        bus.removeTask(row.id);
-                }
-                m.suppressedTwin = true;
-            }
-            if (m.aliasUuid === undefined && e.progressTaskId && (!e.progressParentTaskId || e.progressParentTaskId === (m.parentTaskId ?? m.parentSessionLink))) {
-                m.aliasUuid = e.progressTaskId;
-                for (const [cid, cm] of meta) {
-                    if ((cm.parentTaskId ?? cm.parentSessionLink) === m.aliasUuid && cm.resolvedParentId === undefined && !cm.done) {
-                        bus.publishTask({ id: cid, ...rowTags(cm) });
+                    const host = e.parentTaskId ? bus.snapshot().tasks.find((r) => r.id === e.parentTaskId && r.scope === (e.scope ?? "default")) : undefined;
+                    return host?.sessionId ? { hostSessionId: host.sessionId } : {};
+                })()
+                : {}),
+            ...(!(e.sessionScoped && e.owner) && !e.workflowRunId && (e.rootSessionId ?? e.parentSessionId)
+                ? (() => {
+                    if (e.rootSessionId)
+                        return { hostSessionId: e.rootSessionId };
+                    const childScope = e.scope ?? "default";
+                    for (const pm of meta.values()) {
+                        if (pm.aliasUuid === e.parentSessionId && (pm.tenantScope ?? "default") === childScope) {
+                            return pm.hostSessionId ? { hostSessionId: pm.hostSessionId } : {};
+                        }
                     }
+                    return { hostSessionId: e.parentSessionId };
+                })()
+                : {}),
+        };
+        remember(e.taskId, m);
+        bus.publishTask({ id: e.taskId, name: redactSecrets(e.description ?? e.name ?? e.taskId), ...(e.agentType ? { agentType: redactSecrets(e.agentType) } : {}), ...rowTags(m), status: "running", tokens: 0, ...(e.transcriptId ? { transcriptId: e.transcriptId } : {}) });
+        dlog("bg_child_event", { kind: "spawn", taskId: e.taskId, sessionScoped: e.sessionScoped, scope: m.tenantScope, hostSessionId: m.hostSessionId ?? null, parentTaskId: m.parentTaskId ?? null });
+    };
+    const handleTick = (e, m) => {
+        if (!m.suppressedTwin && e.progressTaskId && (!e.progressParentTaskId || e.progressParentTaskId === (m.parentTaskId ?? m.parentSessionLink))) {
+            const tail = ` ${e.progressTaskId}`;
+            for (const row of bus.snapshot().tasks) {
+                if (row.id.endsWith(tail))
+                    bus.removeTask(row.id);
+            }
+            m.suppressedTwin = true;
+        }
+        if (m.aliasUuid === undefined && e.progressTaskId && (!e.progressParentTaskId || e.progressParentTaskId === (m.parentTaskId ?? m.parentSessionLink))) {
+            m.aliasUuid = e.progressTaskId;
+            for (const [cid, cm] of meta) {
+                if ((cm.parentTaskId ?? cm.parentSessionLink) === m.aliasUuid && cm.resolvedParentId === undefined && !cm.done) {
+                    bus.publishTask({ id: cid, ...rowTags(cm) });
                 }
             }
-            const tokens = sumUsage(e.usage);
-            const name = e.name ? redactSecrets(e.name) : undefined;
-            const agentType = e.agentType ? redactSecrets(e.agentType) : name;
-            const currentAction = e.currentAction ? redactSecrets(e.currentAction) : undefined;
-            const currentTool = e.currentTool
-                ? { toolName: e.currentTool.toolName, ...(e.currentTool.target !== undefined ? { target: redactSecrets(e.currentTool.target).slice(0, 300) } : {}) }
-                : undefined;
-            bus.publishTask({ id: e.taskId, ...rowTags(m), status: "running", ...(tokens !== undefined ? { tokens } : {}), ...(name ? { name } : {}), ...(agentType ? { agentType } : {}), ...(currentAction ? { currentAction } : {}), ...(currentTool ? { currentTool } : {}), ...(e.usage?.toolUses !== undefined ? { toolUses: e.usage.toolUses } : {}), ...(e.transcriptId ? { transcriptId: e.transcriptId } : {}) });
-            return;
         }
+        const tokens = sumUsage(e.usage);
+        const name = e.name ? redactSecrets(e.name) : undefined;
+        const agentType = e.agentType ? redactSecrets(e.agentType) : name;
+        const currentAction = e.currentAction ? redactSecrets(e.currentAction) : undefined;
+        const currentTool = e.currentTool
+            ? { toolName: e.currentTool.toolName, ...(e.currentTool.target !== undefined ? { target: redactSecrets(e.currentTool.target).slice(0, 300) } : {}) }
+            : undefined;
+        bus.publishTask({ id: e.taskId, ...rowTags(m), status: "running", ...(tokens !== undefined ? { tokens } : {}), ...(name ? { name } : {}), ...(agentType ? { agentType } : {}), ...(currentAction ? { currentAction } : {}), ...(currentTool ? { currentTool } : {}), ...(e.usage?.toolUses !== undefined ? { toolUses: e.usage.toolUses } : {}), ...(e.transcriptId ? { transcriptId: e.transcriptId } : {}) });
+    };
+    const handleTerminal = (e, m) => {
         const status = e.status === "completed" ? "completed" : e.status === "killed" ? "killed" : "failed";
         bus.publishTask({
             id: e.taskId, ...rowTags(m), status,
@@ -420,6 +404,31 @@ export function fleetBackgroundChildPublisher(bus, log) {
         m.done = true;
         m.suppressedTwin = true;
     };
+    return (e) => {
+        if (e.kind === "spawn") {
+            handleSpawn(e);
+            return;
+        }
+        const m = meta.get(e.taskId) ?? { sessionScoped: e.sessionScoped, tenantScope: "default", spawnedAt: Date.now() };
+        if (!meta.has(e.taskId)) {
+            remember(e.taskId, m);
+            dlog("bg_child_event", { kind: `${e.kind}-lazy-mint`, taskId: e.taskId, sessionScoped: e.sessionScoped });
+        }
+        else {
+            remember(e.taskId, m);
+        }
+        if (m.done) {
+            dlog("bg_child_event", { kind: `${e.kind}-after-terminal-ignored`, taskId: e.taskId });
+            return;
+        }
+        if (m.parentToolCallId === undefined && e.parentToolCallId)
+            m.parentToolCallId = e.parentToolCallId;
+        if (e.kind === "tick") {
+            handleTick(e, m);
+            return;
+        }
+        handleTerminal(e, m);
+    };
 }
 export function fleetRunLabels(objective) {
     const oneLine = redactSecrets((objective ?? "").replace(/\s+/g, " ")).trim();

package/dist/fleet-lease.d.ts

@@ -65,7 +65,7 @@ export declare class FleetLeaseManager {
     private issueOrRenew;
     private issueOrRenewInner;
 }
-export declare function buildFleetLeaseFromEnv(cfg: {
+export declare function createFleetLeaseFromEnv(cfg: {
     configCenter?: {
         baseUrl: string;
         token: string;

package/dist/fleet-lease.js

@@ -115,7 +115,7 @@ export class FleetLeaseManager {
         }
     }
 }
-export function buildFleetLeaseFromEnv(cfg, opts) {
+export function createFleetLeaseFromEnv(cfg, opts) {
     const cc = cfg.configCenter;
     if (!cc?.baseUrl || !cc.token || !cc.worker)
         return undefined;

package/dist/hooks/hook-llm.d.ts

@@ -11,6 +11,10 @@ export type HookModelPick = {
     ok: false;
     error: string;
 };
+export interface HookLlm {
+    hookModelFor: (requested?: string) => HookModelPick;
+    hookLlm: HookLlmCall;
+}
 export declare function createHookLlm(deps: {
     config: ServiceConfig;
     getKeyResolver: () => ((model: Model) => Promise<{
@@ -20,8 +24,5 @@ export declare function createHookLlm(deps: {
         inc: (name: string, labels?: Record<string, string>) => void;
     };
     fetchImpl?: typeof fetch;
-}): {
-    hookModelFor: (requested?: string) => HookModelPick;
-    hookLlm: HookLlmCall;
-};
+}): HookLlm;
 //# sourceMappingURL=hook-llm.d.ts.map

package/dist/hooks/hook-runner.d.ts

@@ -49,6 +49,6 @@ export interface LlmHookExtra {
     system: string;
     transcript: string;
 }
-export declare function buildTaskHooks(config: HooksConfig, ctx: HookRunnerContext): Hooks | undefined;
+export declare function createTaskHooks(config: HooksConfig, ctx: HookRunnerContext): Hooks | undefined;
 export declare function composeHooks(deployment: Hooks | undefined, task: Hooks): Hooks;
 //# sourceMappingURL=hook-runner.d.ts.map

package/dist/hooks/hook-runner.js

@@ -494,7 +494,7 @@ async function runObserveOnlyEvent(event, groups, matchValue, payload, ctx, once
         }
     }
 }
-export function buildTaskHooks(config, ctx) {
+export function createTaskHooks(config, ctx) {
     const configured = Object.keys(config).filter((e) => (config[e]?.length ?? 0) > 0);
     const dark = configured.filter((e) => HOOK_EVENT_OWNER[e] === "engine" && !LIT_EVENTS.includes(e));
     if (dark.length > 0) {
@@ -523,7 +523,7 @@ export function buildTaskHooks(config, ctx) {
     const onceFired = new Set();
     const hooks = {};
     if (pre) {
-        hooks.preToolUse = async (toolName, input, tctx) => {
+        const preToolUseHook = async (toolName, input, tctx) => {
             let currentInput = input;
             let rewritten = false;
             let asked;
@@ -608,9 +608,10 @@ export function buildTaskHooks(config, ctx) {
             }
             return undefined;
         };
+        hooks.preToolUse = preToolUseHook;
     }
     if (post) {
-        hooks.postToolUse = async (toolName, input, output, tctx) => {
+        const postToolUseHook = async (toolName, input, output, tctx) => {
             const contexts = [];
             const responseText = output.content
                 .map((c) => (c && typeof c === "object" && typeof c.text === "string" ? c.text : ""))
@@ -657,9 +658,10 @@ export function buildTaskHooks(config, ctx) {
             }
             return contexts.length > 0 ? { additionalContext: contexts.join("\n") } : undefined;
         };
+        hooks.postToolUse = postToolUseHook;
     }
     if (postFailure) {
-        hooks.postToolUseFailure = async (toolName, input, f, tctx) => {
+        const postToolUseFailureHook = async (toolName, input, f, tctx) => {
             const contexts = [];
             const payload = {
                 ...basePayload(ctx),
@@ -700,9 +702,10 @@ export function buildTaskHooks(config, ctx) {
             }
             return contexts.length > 0 ? { additionalContext: contexts.join("\n") } : undefined;
         };
+        hooks.postToolUseFailure = postToolUseFailureHook;
     }
     if (postBatch) {
-        hooks.postToolBatch = async (calls) => {
+        const postToolBatchHook = async (calls) => {
             const contexts = [];
             const payload = {
                 ...basePayload(ctx),
@@ -740,9 +743,10 @@ export function buildTaskHooks(config, ctx) {
             }
             return contexts.length > 0 ? { additionalContext: contexts.join("\n") } : undefined;
         };
+        hooks.postToolBatch = postToolBatchHook;
     }
     if (promptSubmit) {
-        hooks.userPromptSubmit = async (prompt) => {
+        const userPromptSubmitHook = async (prompt) => {
             const contexts = [];
             const payload = { ...basePayload(ctx), hook_event_name: "UserPromptSubmit", prompt: clip(prompt, MAX_TOOL_INPUT_CHARS) };
             const singles = await runMatchingEntries("UserPromptSubmit", ignoreMatchers(promptSubmit), "", payload, ctx, onceFired, Date.now() + MAX_HOOK_EVENT_TOTAL_SECONDS * 1000);
@@ -777,9 +781,10 @@ export function buildTaskHooks(config, ctx) {
             }
             return contexts.length > 0 ? { additionalContext: contexts.join("\n") } : undefined;
         };
+        hooks.userPromptSubmit = userPromptSubmitHook;
     }
     if (stopEntries) {
-        hooks.stop = async (sctx) => {
+        const stopHook = async (sctx) => {
             const payload = { ...basePayload(ctx), hook_event_name: "Stop", stop_hook_active: sctx.stopHookActive };
             let llmExtra;
             const wantsPrompt = stopEntries.some((g) => g.hooks.some((h) => h.type === "prompt"));
@@ -867,9 +872,10 @@ export function buildTaskHooks(config, ctx) {
                 ...(contexts.length ? { additionalContext: contexts.join("\n") } : {}),
             };
         };
+        hooks.stop = stopHook;
     }
     if (stopFailureEntries) {
-        hooks.stopFailure = async (fctx) => {
+        const stopFailureHook = async (fctx) => {
             const turnError = toAssistantTurnError(fctx.errorKind);
             const payload = {
                 ...basePayload(ctx),
@@ -879,9 +885,10 @@ export function buildTaskHooks(config, ctx) {
             };
             await runObserveOnlyEvent("StopFailure", stopFailureEntries, turnError, payload, ctx, onceFired);
         };
+        hooks.stopFailure = stopFailureHook;
     }
     if (preCompactEntries) {
-        hooks.preCompact = async (pctx) => {
+        const preCompactHook = async (pctx) => {
             const payload = {
                 ...basePayload(ctx),
                 hook_event_name: "PreCompact",
@@ -911,9 +918,10 @@ export function buildTaskHooks(config, ctx) {
             }
             return undefined;
         };
+        hooks.preCompact = preCompactHook;
     }
     if (postCompactEntries) {
-        hooks.postCompact = async (cctx) => {
+        const postCompactHook = async (cctx) => {
             const payload = {
                 ...basePayload(ctx),
                 hook_event_name: "PostCompact",
@@ -922,6 +930,7 @@ export function buildTaskHooks(config, ctx) {
             };
             await runObserveOnlyEvent("PostCompact", postCompactEntries, cctx.trigger, payload, ctx, onceFired);
         };
+        hooks.postCompact = postCompactHook;
     }
     return hooks;
 }

package/dist/http/server.d.ts

@@ -30,58 +30,59 @@ export interface RequestAuth {
     memoryScope?: string;
     resolvedProjectId?: string;
 }
-export interface ServiceDeps {
+export interface ServiceCoreDeps {
     runner: Runner;
     config: ServiceConfig;
-    registryJwtVerifier?: {
-        verify: (bearer: string) => Promise<import("../auth-bridge.js").VerifyOutcome>;
-    };
-    hookWakeBus?: {
-        deliver?: (sessionId: string, text: string) => Promise<boolean>;
-    };
-    drainState?: {
-        draining: boolean;
-        since?: number;
-        inflight?: () => number;
-        lastActivityAt?: () => number;
-    };
-    storeDegraded?: boolean;
-    sessionStoreLabel?: string;
-    modelReady?: () => boolean;
-    scenarioDetails?: Record<string, import("../capabilities/scenarios.js").ScenarioDetail>;
-    authorize?: (ctx: {
-        req: IncomingMessage;
-        body: TaskRequestBody;
-    }) => Promise<RequestAuth>;
     resolveSpec: (body: TaskRequestBody, req: IncomingMessage | undefined, auth?: RequestAuth, opts?: {
         leg?: "fresh" | "resume";
     }) => TaskSpec | Promise<TaskSpec>;
+}
+export interface ServiceStoreDeps {
     runStore?: RunStore;
     resumeAnchorStore?: ResumeAnchorStore;
-    sessionTitler?: {
-        maybeTitle(sessionId: string, objective: string): void;
-    };
+    approvalStore?: ApprovalStore;
     approvalExemptionStore?: ApprovalExemptionStore;
+    checkpointStore?: CheckpointStoreFull;
     sessionPolicyStore?: ServiceSessionPolicyStore;
     fileSnapshotStore?: ServiceFileSnapshotStore;
-    snapshotBlobSqlCapBytes?: number;
-    backend?: StoreBackend;
-    sessionMirrorRuling?: (principal: string | undefined) => Promise<SessionMirrorRuling | undefined>;
-    approvalStore?: ApprovalStore;
-    checkpointStore?: CheckpointStoreFull;
-    backgroundAgentStore?: import("@sema-agent/core").BackgroundAgentStore;
-    parkedReviveTool?: import("@sema-agent/core").ToolSpec;
-    parkedKnownAgentTypes?: ReadonlySet<string>;
-    parkedReviveInheritedGate?: (row: import("@sema-agent/core").BackgroundAgentRecord) => unknown;
     taskAttachmentStore?: TaskAttachmentStore;
-    imageIndex?: ImageIndex;
-    imageBakes?: ImageBake;
-    leaderEndpoint?: LeaderEndpoint;
+    backgroundAgentStore?: import("@sema-agent/core").BackgroundAgentStore;
+    sessionStorage?: OwnerAwareSessionStore;
     workflowRunStore?: WorkflowRunStore;
     workflowJournalStore?: import("@sema-agent/core").WorkflowJournalStore;
-    workflowsCapable?: boolean;
+    imageIndex?: ImageIndex;
+    imageBakes?: ImageBake;
+    outcomeSink?: import("../plugins/file-outcome-sink.js").OutcomeSink;
+    sendFileLedger?: import("../plugins/send-file-ledger.js").SendFileLedger;
+    backend?: StoreBackend;
+}
+export interface ServiceCoordinatorDeps {
+    elicitation?: ElicitationCoordinator;
+    question?: QuestionCoordinator;
+    toolApproval?: ToolApprovalCoordinator;
     workflowAgentRegistry?: WorkflowAgentRegistry;
     subagentSteerRegistry?: SubagentSteerRegistry;
+    workflowCompletionInbox?: WorkflowCompletionInbox;
+    fleetBus?: FleetEventBus;
+    sessionWatch?: import("../session-watch.js").SessionWatchRegistry;
+    hookWakeBus?: {
+        deliver?: (sessionId: string, text: string) => Promise<boolean>;
+    };
+    sendUserFile?: import("../capabilities/send-user-file-tool.js").SendUserFileEmitter;
+    leaderEndpoint?: LeaderEndpoint;
+    sessionTitler?: {
+        maybeTitle(sessionId: string, objective: string): void;
+    };
+}
+export interface ServiceSeamDeps {
+    sessionAudit?: (sessionId: string) => Promise<({
+        owner: string | null;
+    } & Record<string, unknown>) | undefined>;
+    purgeSession?: (sessionId: string, owner: string | null) => Promise<{
+        deleted: boolean;
+    } | {
+        active: string;
+    }>;
     subagentTaskOutput?: (handle: string, access: {
         owner: string;
         scope: string;
@@ -106,23 +107,10 @@ export interface ServiceDeps {
         content: string;
         details: unknown;
     }>;
-    workflowCompletionInbox?: WorkflowCompletionInbox;
-    fleetBus?: FleetEventBus;
-    sessionAudit?: (sessionId: string) => Promise<({
-        owner: string | null;
-    } & Record<string, unknown>) | undefined>;
-    sessionStorage?: OwnerAwareSessionStore;
-    purgeSession?: (sessionId: string, owner: string | null) => Promise<{
-        deleted: boolean;
-    } | {
-        active: string;
-    }>;
-    instanceId?: string;
-    logger?: Logger;
-    metrics?: Metrics;
-    rateLimiter?: RateGate;
-    costQuota?: QuotaTracker;
-    fleetLease?: FleetLeaseManager;
+    memoryExport?: (scope: string) => Promise<MemoryEntry[]>;
+    memorySync?: (scope: string, syncReq: MemorySyncRequest) => Promise<MemorySyncResponse>;
+    sessionMirrorRuling?: (principal: string | undefined) => Promise<SessionMirrorRuling | undefined>;
+    instrumentDegenerate?: (result: TaskResult) => void;
     sideQueryAccounting?: (principal: string | undefined, r: {
         model: string;
         family?: "input-includes-cached" | "input-excludes-cached";
@@ -136,30 +124,68 @@ export interface ServiceDeps {
             };
         };
     }) => void;
-    outcomeSink?: import("../plugins/file-outcome-sink.js").OutcomeSink;
-    memoryExport?: (scope: string) => Promise<MemoryEntry[]>;
-    memorySync?: (scope: string, syncReq: MemorySyncRequest) => Promise<MemorySyncResponse>;
-    instrumentDegenerate?: (result: TaskResult) => void;
-    planCacheProbe?: PlanCacheProbe;
+    parkedReviveTool?: import("@sema-agent/core").ToolSpec;
+    parkedKnownAgentTypes?: ReadonlySet<string>;
+    parkedReviveInheritedGate?: (row: import("@sema-agent/core").BackgroundAgentRecord) => unknown;
+}
+export interface ServiceObservabilityDeps {
+    logger?: Logger;
+    metrics?: Metrics;
     modelUsage?: ModelUsageTracker;
     promptManifests?: PromptManifestTracker;
-    elicitation?: ElicitationCoordinator;
-    question?: QuestionCoordinator;
-    toolApproval?: ToolApprovalCoordinator;
-    sendUserFile?: import("../capabilities/send-user-file-tool.js").SendUserFileEmitter;
-    sendFileLedger?: import("../plugins/send-file-ledger.js").SendFileLedger;
-    sessionWatch?: import("../session-watch.js").SessionWatchRegistry;
-    sessionEventsMaxConnections?: number;
-    sessionEventsHeartbeatMs?: number;
-    sessionEventsStallMs?: number;
+    planCacheProbe?: PlanCacheProbe;
+}
+export interface ServiceGovernanceDeps {
+    authorize?: (ctx: {
+        req: IncomingMessage;
+        body: TaskRequestBody;
+    }) => Promise<RequestAuth>;
+    registryJwtVerifier?: {
+        verify: (bearer: string) => Promise<import("../auth-bridge.js").VerifyOutcome>;
+    };
+    rateLimiter?: RateGate;
+    costQuota?: QuotaTracker;
+    fleetLease?: FleetLeaseManager;
+}
+export interface ServiceDeploymentDeps {
+    instanceId?: string;
     capabilities?: Record<string, unknown>;
+    scenarioDetails?: Record<string, import("../capabilities/scenarios.js").ScenarioDetail>;
+    sessionStoreLabel?: string;
+    storeDegraded?: boolean;
+    drainState?: {
+        draining: boolean;
+        since?: number;
+        inflight?: () => number;
+        lastActivityAt?: () => number;
+    };
+    modelReady?: () => boolean;
     restartState?: () => RestartSignal | undefined;
     planeDeferredState?: () => {
         version: number;
         since: number;
         blocked?: string[];
     } | undefined;
+    workflowsCapable?: boolean;
+}
+export interface ServiceKnobDeps {
+    snapshotBlobSqlCapBytes?: number;
+    sessionEventsMaxConnections?: number;
+    sessionEventsHeartbeatMs?: number;
+    sessionEventsStallMs?: number;
+}
+export interface ServiceDepGroups {
+    stores?: ServiceStoreDeps;
+    coordinators?: ServiceCoordinatorDeps;
+    seams?: ServiceSeamDeps;
+    observability?: ServiceObservabilityDeps;
+    governance?: ServiceGovernanceDeps;
+    deployment?: ServiceDeploymentDeps;
+    knobs?: ServiceKnobDeps;
 }
+export type FlatServiceDeps = ServiceCoreDeps & Partial<ServiceStoreDeps & ServiceCoordinatorDeps & ServiceSeamDeps & ServiceObservabilityDeps & ServiceGovernanceDeps & ServiceDeploymentDeps & ServiceKnobDeps>;
+export type ServiceDeps = FlatServiceDeps & ServiceDepGroups;
+export declare function flattenServiceDeps(deps: ServiceDeps): FlatServiceDeps;
 export type { TaskRequestBody } from "./wire-types.js";
 export declare const MAX_USER_SKILLS = 10;
 export declare const MAX_SKILL_CONTENT_CHARS = 1048576;
@@ -175,7 +201,7 @@ export declare function cascadeConfig(ladder: readonly string[], maxCostUsd?: nu
 export declare function clampVerifyRounds(v: unknown): number;
 export declare function scopedIdempotencyKey(raw: string | undefined, source: string | null, principal: string | undefined): string | undefined;
 export declare function isQuestionAnswer(v: unknown): v is QuestionAnswer;
-export declare function createHttpServer(deps: ServiceDeps): http.Server & {
+export declare function createHttpServer(rawDeps: ServiceDeps): http.Server & {
     denyExpiredApprovals: (now: number) => Promise<void>;
 };
 export declare function streamApprovals(req: IncomingMessage, res: ServerResponse, cs: Pick<CheckpointStoreFull, "listPending">, scope: string | undefined, pollMs?: number): Promise<void>;