@sema-agent/server 1.314.0 → 1.315.0

package/dist/main.js

@@ -58,7 +58,7 @@ import { createRegistryJwtVerifier } from "./auth-bridge.js";
 import { createMetrics } from "./observability/metrics.js";
 import { setRedactionObserver, redactSecrets } from "./trace/redact.js";
 import { RateLimiter } from "./observability/rate-limit.js";
-import { createHttpServer, explicitOperator } from "./http/server.js";
+import { createHttpServer, explicitOperator, } from "./http/server.js";
 import { exportMemoryScope } from "./memory-export.js";
 import { performMemorySync } from "./memory-sync.js";
 import { createMemorySyncRunner, createMemorySyncTransport } from "./memory-sync-client.js";
@@ -1834,73 +1834,77 @@ async function main() {
     if (registryJwtVerifier)
         logger.info("auth_bridge_enabled", { issuer: authBridgeIssuer });
     const hookWakeBus = {};
-    const server = createHttpServer({
-        runner,
-        config,
-        authorize,
-        sessionStoreLabel: config.sessionBackend === "tidb" && backend ? `durable(${backend.kind})` : config.sessionBackend,
-        taskAttachmentStore: taskAttachmentStore ? taskAttachmentStore : undefined,
-        snapshotBlobSqlCapBytes: backend && backend.kind !== "local" && !config.snapshotBlobStore
-            ? (config.snapshotBlobSqlMaxBytes ?? (backend.kind === "mysql" ? SQL_BLOB_DEFAULT_MAX_BYTES : undefined))
-            : undefined,
-        modelReady: () => modelReadyState.ready,
-        scenarioDetails,
-        registryJwtVerifier: registryJwtVerifier ? registryJwtVerifier : undefined,
-        hookWakeBus,
+    const stores = {
         runStore,
-        fleetBus,
-        workflowsCapable,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
+        approvalStore,
         approvalExemptionStore: approvalExemptionStore ? approvalExemptionStore : undefined,
-        sessionTitler: sessionTitler ? sessionTitler : undefined,
+        checkpointStore,
         sessionPolicyStore: sessionPolicyStore ? sessionPolicyStore : undefined,
         fileSnapshotStore: fileSnapshotStore ? fileSnapshotStore : undefined,
-        backend: backend ? backend : undefined,
-        sessionMirrorRuling: principalCaps
-            ? async (p) => (await principalCaps.executionRuling(p))?.sessionMirror
-            : undefined,
-        approvalStore,
-        checkpointStore,
+        taskAttachmentStore: taskAttachmentStore ? taskAttachmentStore : undefined,
         backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
-        parkedReviveTool: parkedReviveTool ? parkedReviveTool : undefined,
-        parkedReviveInheritedGate: parkedReviveInheritedGate ? parkedReviveInheritedGate : undefined,
-        imageIndex,
-        imageBakes,
-        leaderEndpoint,
+        sessionStorage: ownerAware,
         workflowRunStore: workflowRunStore ? workflowRunStore : undefined,
         workflowJournalStore: workflowJournalStore ? workflowJournalStore : undefined,
+        imageIndex,
+        imageBakes,
+        outcomeSink: outcomeSink ? outcomeSink : undefined,
+        sendFileLedger: sendFileLedger ? sendFileLedger : undefined,
+        backend: backend ? backend : undefined,
+    };
+    const coordinators = {
+        elicitation: elicitation ? elicitation : undefined,
+        question: question ? question : undefined,
+        toolApproval: toolApproval ? toolApproval : undefined,
         workflowAgentRegistry: workflowAgentRegistry ? workflowAgentRegistry : undefined,
         subagentSteerRegistry,
-        subagentTaskOutput: (handle, access) => backgroundAgentOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
-        taskHandleOutput: (handle, access) => taskHandleOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
-        taskHandleStop: (handle, access) => taskHandleStop(defaultTaskRegistry, handle, access, backgroundAgentStore),
         workflowCompletionInbox: workflowCompletionInbox ? workflowCompletionInbox : undefined,
-        sessionAudit,
-        sessionStorage: ownerAware,
+        fleetBus,
         sessionWatch: sessionWatchRegistry ? sessionWatchRegistry : undefined,
-        sessionEventsMaxConnections: sessionWatchRegistry ? posIntEnv(process.env.SESSION_EVENTS_MAX_CONNS, 256, 100_000) : undefined,
+        hookWakeBus,
+        sendUserFile: sendUserFileEmitter ? sendUserFileEmitter : undefined,
+        leaderEndpoint,
+        sessionTitler: sessionTitler ? sessionTitler : undefined,
+    };
+    const seams = {
+        sessionAudit,
         purgeSession: purgeSession ? purgeSession : undefined,
+        subagentTaskOutput: (handle, access) => backgroundAgentOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
+        taskHandleOutput: (handle, access) => taskHandleOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
+        taskHandleStop: (handle, access) => taskHandleStop(defaultTaskRegistry, handle, access, backgroundAgentStore),
+        memoryExport: memoryExportBackend ? (scope) => exportMemoryScope(memoryExportBackend, scope) : undefined,
+        memorySync: memoryExportBackend && memorySyncCursors
+            ? (scope, syncReq) => performMemorySync(memoryExportBackend, memorySyncCursors, scope, syncReq)
+            : undefined,
+        sessionMirrorRuling: principalCaps
+            ? async (p) => (await principalCaps.executionRuling(p))?.sessionMirror
+            : undefined,
         instrumentDegenerate,
-        planCacheProbe,
-        modelUsage: modelUsageTracker,
-        promptManifests: promptManifestTracker,
-        elicitation: elicitation ? elicitation : undefined,
-        question: question ? question : undefined,
-        toolApproval: toolApproval ? toolApproval : undefined,
-        sendUserFile: sendUserFileEmitter ? sendUserFileEmitter : undefined,
-        sendFileLedger: sendFileLedger ? sendFileLedger : undefined,
-        instanceId,
+        sideQueryAccounting,
+        parkedReviveTool: parkedReviveTool ? parkedReviveTool : undefined,
+        parkedReviveInheritedGate: parkedReviveInheritedGate ? parkedReviveInheritedGate : undefined,
+    };
+    const observability = {
         logger,
         metrics,
+        modelUsage: modelUsageTracker,
+        promptManifests: promptManifestTracker,
+        planCacheProbe,
+    };
+    const governance = {
+        authorize,
+        registryJwtVerifier: registryJwtVerifier ? registryJwtVerifier : undefined,
         rateLimiter,
         costQuota,
         fleetLease: fleetLease ? fleetLease : undefined,
-        sideQueryAccounting,
-        outcomeSink: outcomeSink ? outcomeSink : undefined,
-        memoryExport: memoryExportBackend ? (scope) => exportMemoryScope(memoryExportBackend, scope) : undefined,
-        memorySync: memoryExportBackend && memorySyncCursors
-            ? (scope, syncReq) => performMemorySync(memoryExportBackend, memorySyncCursors, scope, syncReq)
-            : undefined,
+    };
+    const deployment = {
+        sessionStoreLabel: config.sessionBackend === "tidb" && backend ? `durable(${backend.kind})` : config.sessionBackend,
+        modelReady: () => modelReadyState.ready,
+        scenarioDetails,
+        workflowsCapable,
+        instanceId,
         capabilities: {
             version: serviceVersion(),
             scenarios: Object.keys(scenarios),
@@ -1910,431 +1914,438 @@ async function main() {
         planeDeferredState: () => planeDeferredNoHandoff,
         drainState,
         storeDegraded: storeBackendDegraded,
-        resolveSpec: async (body, _req, auth, opts) => {
-            const requested = gateScenarioRequest(await principalCaps?.scenarioRuling(auth?.principal), body.scenario, config.defaultScenario);
-            gateExecutionLane(await principalCaps?.executionRuling(auth?.principal), config.remoteExec?.provider ?? "in-process");
-            const scenarioName = scenarios[requested] ? requested : "default";
-            if (scenarioName === "autonomous")
-                logger.warn("scenario_autonomous_deprecated", { alias: "code", note: "renamed by [891]; alias keeps finalVerification pinned — pass scenario:'code' (+ explicit finalVerification if wanted)" });
-            const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal);
-            const centerDecls = centerPrompts?.declarations;
-            const appendLessPack = centerDecls
-                ? centerIdentityAssembled(centerDecls, scenarioName, hasConstitutionAnchors)
-                : providerDropsAppend(cap.promptProvider, typeof body.systemPrompt === "string" ? body.systemPrompt : undefined);
-            const acceptedAppend = acceptAppendSystemPrompt(body.appendSystemPrompt, (detail) => logger.warn("append_system_prompt_dropped", { detail, sessionId: auth?.sessionId ?? null }), appendLessPack);
-            const objective = typeof body.objective === "string" ? body.objective : "";
-            const parsedSettings = parseTaskSettings(body.settings);
-            if (opts?.leg === "fresh" && appendLessPack) {
-                const riderPresent = typeof body.appendSystemPrompt === "string" && body.appendSystemPrompt.length > 0;
-                if (riderPresent || parsedSettings.settings?.outputStyle) {
-                    throw new HttpError(400, `${riderPresent ? "appendSystemPrompt" : "settings.outputStyle"} is not supported when the effective prompt is already assembled (constitution anchors in systemPrompt, or a center assembled-identity pack for this scenario): the assembler's pass-through path cannot mount the append slot — fold it into the assembled prompt instead`);
-                }
-            }
-            if (parsedSettings.deferred.length > 0) {
-                logger.warn("task_settings_deferred", { fields: parsedSettings.deferred, sessionId: auth?.sessionId ?? null });
+    };
+    const knobs = {
+        snapshotBlobSqlCapBytes: backend && backend.kind !== "local" && !config.snapshotBlobStore
+            ? (config.snapshotBlobSqlMaxBytes ?? (backend.kind === "mysql" ? SQL_BLOB_DEFAULT_MAX_BYTES : undefined))
+            : undefined,
+        sessionEventsMaxConnections: sessionWatchRegistry ? posIntEnv(process.env.SESSION_EVENTS_MAX_CONNS, 256, 100_000) : undefined,
+    };
+    const resolveSpec = async (body, _req, auth, opts) => {
+        const requested = gateScenarioRequest(await principalCaps?.scenarioRuling(auth?.principal), body.scenario, config.defaultScenario);
+        gateExecutionLane(await principalCaps?.executionRuling(auth?.principal), config.remoteExec?.provider ?? "in-process");
+        const scenarioName = scenarios[requested] ? requested : "default";
+        if (scenarioName === "autonomous")
+            logger.warn("scenario_autonomous_deprecated", { alias: "code", note: "renamed by [891]; alias keeps finalVerification pinned — pass scenario:'code' (+ explicit finalVerification if wanted)" });
+        const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal);
+        const centerDecls = centerPrompts?.declarations;
+        const appendLessPack = centerDecls
+            ? centerIdentityAssembled(centerDecls, scenarioName, hasConstitutionAnchors)
+            : providerDropsAppend(cap.promptProvider, typeof body.systemPrompt === "string" ? body.systemPrompt : undefined);
+        const acceptedAppend = acceptAppendSystemPrompt(body.appendSystemPrompt, (detail) => logger.warn("append_system_prompt_dropped", { detail, sessionId: auth?.sessionId ?? null }), appendLessPack);
+        const objective = typeof body.objective === "string" ? body.objective : "";
+        const parsedSettings = parseTaskSettings(body.settings);
+        if (opts?.leg === "fresh" && appendLessPack) {
+            const riderPresent = typeof body.appendSystemPrompt === "string" && body.appendSystemPrompt.length > 0;
+            if (riderPresent || parsedSettings.settings?.outputStyle) {
+                throw new HttpError(400, `${riderPresent ? "appendSystemPrompt" : "settings.outputStyle"} is not supported when the effective prompt is already assembled (constitution anchors in systemPrompt, or a center assembled-identity pack for this scenario): the assembler's pass-through path cannot mount the append slot — fold it into the assembled prompt instead`);
             }
-            let attachmentNotice;
-            {
-                const reqAtt = body.attachmentIds;
-                if (reqAtt !== undefined) {
-                    if (!Array.isArray(reqAtt) || !reqAtt.every((x) => typeof x === "string" && x.length > 0 && x.length <= 64)) {
-                        throw new HttpError(400, "`attachmentIds` must be an array of attachment ids (strings)");
-                    }
-                    if (reqAtt.length > 16)
-                        throw new HttpError(400, "`attachmentIds` exceeds the per-task limit (16)");
-                    if (reqAtt.length > 0) {
-                        if (!taskAttachmentStore)
-                            throw new HttpError(501, "attachmentIds require a store backend (DB_BACKEND=tidb|pg|local)");
-                        if (!auth?.sessionId)
-                            throw new HttpError(400, "`attachmentIds` requires a session-resolving deployment (no authorizer session)");
-                        const sid = auth.sessionId;
-                        const r = await bindAttachmentsForTask({
-                            store: taskAttachmentStore,
-                            owner: auth?.principal ?? "default",
-                            ids: reqAtt,
-                            sessionId: sid,
-                            leg: opts?.leg === "fresh" ? "fresh" : "resume",
-                            nowMs: Date.now(),
-                            onMissing: (id) => {
-                                if (opts?.leg === "fresh")
-                                    throw new HttpError(400, `attachment not found: ${id}`);
-                                logger.warn("attachment_missing_on_resume", { sessionId: sid, id });
-                            },
-                        });
-                        attachmentNotice = r.notice;
-                    }
+        }
+        if (parsedSettings.deferred.length > 0) {
+            logger.warn("task_settings_deferred", { fields: parsedSettings.deferred, sessionId: auth?.sessionId ?? null });
+        }
+        let attachmentNotice;
+        {
+            const reqAtt = body.attachmentIds;
+            if (reqAtt !== undefined) {
+                if (!Array.isArray(reqAtt) || !reqAtt.every((x) => typeof x === "string" && x.length > 0 && x.length <= 64)) {
+                    throw new HttpError(400, "`attachmentIds` must be an array of attachment ids (strings)");
+                }
+                if (reqAtt.length > 16)
+                    throw new HttpError(400, "`attachmentIds` exceeds the per-task limit (16)");
+                if (reqAtt.length > 0) {
+                    if (!taskAttachmentStore)
+                        throw new HttpError(501, "attachmentIds require a store backend (DB_BACKEND=tidb|pg|local)");
+                    if (!auth?.sessionId)
+                        throw new HttpError(400, "`attachmentIds` requires a session-resolving deployment (no authorizer session)");
+                    const sid = auth.sessionId;
+                    const r = await bindAttachmentsForTask({
+                        store: taskAttachmentStore,
+                        owner: auth?.principal ?? "default",
+                        ids: reqAtt,
+                        sessionId: sid,
+                        leg: opts?.leg === "fresh" ? "fresh" : "resume",
+                        nowMs: Date.now(),
+                        onMissing: (id) => {
+                            if (opts?.leg === "fresh")
+                                throw new HttpError(400, `attachment not found: ${id}`);
+                            logger.warn("attachment_missing_on_resume", { sessionId: sid, id });
+                        },
+                    });
+                    attachmentNotice = r.notice;
                 }
             }
-            const execLane = config.remoteExec?.provider ?? "in-process";
-            if (typeof body.cwd === "string" && body.cwd.length > 0 && auth?.sessionId) {
-                if (cwdHonored(config) && isValidCwd(body.cwd))
-                    setSessionCwd(auth.sessionId, body.cwd);
-                else if (inProcessSingleUserLane(config) && isValidCwd(body.cwd) && satisfiedByProcessCwd(body.cwd, realpathSync))
-                    logger.debug("task_cwd_inherited", { lane: execLane, sessionId: auth.sessionId });
+        }
+        const execLane = config.remoteExec?.provider ?? "in-process";
+        if (typeof body.cwd === "string" && body.cwd.length > 0 && auth?.sessionId) {
+            if (cwdHonored(config) && isValidCwd(body.cwd))
+                setSessionCwd(auth.sessionId, body.cwd);
+            else if (inProcessSingleUserLane(config) && isValidCwd(body.cwd) && satisfiedByProcessCwd(body.cwd, realpathSync))
+                logger.debug("task_cwd_inherited", { lane: execLane, sessionId: auth.sessionId });
+            else
+                logger.warn("task_cwd_ignored", { honored: cwdHonored(config), lane: execLane, sessionId: auth.sessionId });
+        }
+        if (parsedSettings.settings?.shellEnv && auth?.sessionId) {
+            if (cwdHonored(config))
+                setSessionShellEnv(auth.sessionId, parsedSettings.settings.shellEnv);
+            else if (inProcessSingleUserLane(config)) {
+                const requested = parsedSettings.settings.shellEnv;
+                const mismatched = shellEnvMismatchCount(requested, process.env);
+                if (mismatched === 0)
+                    logger.debug("task_shell_env_inherited", { lane: execLane, keys: Object.keys(requested).length, sessionId: auth.sessionId });
                 else
-                    logger.warn("task_cwd_ignored", { honored: cwdHonored(config), lane: execLane, sessionId: auth.sessionId });
+                    logger.warn("task_shell_env_ignored", { honored: false, lane: execLane, mismatchedKeys: mismatched, sessionId: auth.sessionId });
             }
-            if (parsedSettings.settings?.shellEnv && auth?.sessionId) {
-                if (cwdHonored(config))
-                    setSessionShellEnv(auth.sessionId, parsedSettings.settings.shellEnv);
-                else if (inProcessSingleUserLane(config)) {
-                    const requested = parsedSettings.settings.shellEnv;
-                    const mismatched = shellEnvMismatchCount(requested, process.env);
-                    if (mismatched === 0)
-                        logger.debug("task_shell_env_inherited", { lane: execLane, keys: Object.keys(requested).length, sessionId: auth.sessionId });
-                    else
-                        logger.warn("task_shell_env_ignored", { honored: false, lane: execLane, mismatchedKeys: mismatched, sessionId: auth.sessionId });
-                }
-                else
-                    logger.warn("task_shell_env_ignored", { honored: false, lane: execLane, sessionId: auth.sessionId });
+            else
+                logger.warn("task_shell_env_ignored", { honored: false, lane: execLane, sessionId: auth.sessionId });
+        }
+        const taskHooks = (() => {
+            const hc = parsedSettings.settings?.hooks;
+            if (!hc)
+                return undefined;
+            if (config.requirePrincipal === true) {
+                logger.warn("task_hooks_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
+                return undefined;
             }
-            const taskHooks = (() => {
-                const hc = parsedSettings.settings?.hooks;
-                if (!hc)
+            const effMode = coercePermissionMode(body.permissionMode) ?? parsedSettings.settings?.permissions?.defaultMode;
+            return createTaskHooks(hc, {
+                logger,
+                sessionId: auth?.sessionId ?? "",
+                cwd: (auth?.sessionId ? perSessionCwd.get(auth.sessionId) : undefined) ?? process.cwd(),
+                ...(effMode ? { permissionMode: effMode } : {}),
+                ...(parsedSettings.settings?.shellEnv ? { shellEnv: parsedSettings.settings.shellEnv } : {}),
+                hookLlm,
+                hookAgent,
+                onHookNotice: (n) => fleetBus.publishHookNotice({
+                    ...n,
+                    ...(auth?.principal ? { ownerScope: auth.principal } : {}),
+                    ...(auth?.sessionId ? { ownerSessionId: auth.sessionId } : {}),
+                }),
+                ...(auth?.sessionId
+                    ? {
+                        wake: async (text) => hookWakeBus.deliver
+                            ?
+                                hookWakeBus.deliver(auth.sessionId, `[hook asyncRewake] ${redactSecrets(text)}`)
+                            : false,
+                    }
+                    : {}),
+            });
+        })();
+        const rawAddDirs = body.additionalDirectories;
+        const additionalDirectories = cwdHonored(config) ? parseAdditionalDirectories(rawAddDirs) : undefined;
+        if (rawAddDirs !== undefined && !cwdHonored(config)) {
+            logger.warn("task_additional_directories_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
+        }
+        const wireCatalog = expandTiers(config.models, config.tiers) ?? config.models;
+        const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog);
+        if (picked.unknownExplicit !== undefined) {
+            metrics.inc("task_model_unknown_fallback_total");
+            logger.warn("task_model_unknown_fallback", { requested: picked.unknownExplicit.slice(0, 120), fallback: picked.model, sessionId: auth?.sessionId ?? null });
+        }
+        if (Array.isArray(body.images) && body.images.length > 0 && !modelSupportsImages(wireCatalog[picked.model])) {
+            metrics.inc("images_omitted_total", { model: picked.model });
+            logger.warn("images_omitted_no_vision_model", { model: picked.model, count: body.images.length });
+        }
+        let resumeAtEntryId;
+        if (typeof body.resumeAt === "string" && body.resumeAt.length > 0) {
+            if (!auth?.sessionId)
+                throw new HttpError(422, "resumeAt requires a session to branch (resume_at.no_session)");
+            if (!resumeAnchorStore || !ownerAware.getLeafId)
+                throw new HttpError(501, "resume-at is not available on this worker (no session-store backend for the anchor map)");
+            resumeAtEntryId = await resumeAnchorStore.resolve(auth.sessionId, body.resumeAt, auth.principal ?? null);
+            if (resumeAtEntryId === undefined)
+                throw new HttpError(404, "resumeAt: no such message in this session (resume_at.unknown_event)");
+        }
+        let rewindFilesToEntryId;
+        if (resumeAtEntryId === undefined && typeof body.rewindFilesTo === "string" && body.rewindFilesTo.length > 0) {
+            if (!auth?.sessionId)
+                throw new HttpError(422, "rewindFilesTo requires a session (rewind_files_to.no_session)");
+            if (!resumeAnchorStore || !ownerAware.getLeafId)
+                throw new HttpError(501, "rewind-files-to is not available on this worker (no session-store backend for the anchor map)");
+            rewindFilesToEntryId = await resumeAnchorStore.resolve(auth.sessionId, body.rewindFilesTo, auth.principal ?? null);
+            if (rewindFilesToEntryId === undefined)
+                throw new HttpError(404, "rewindFilesTo: no such message in this session (rewind_files_to.unknown_event)");
+        }
+        const s4ProjectId = auth?.resolvedProjectId ?? (typeof body.projectId === "string" && body.projectId ? body.projectId : undefined);
+        const s4DefaultScopes = s4ProjectId ? config.projects[s4ProjectId]?.defaultScopes : undefined;
+        const spec = {
+            objective: attachmentNotice ? `${picked.cleanedObjective}\n\n${attachmentNotice}` : picked.cleanedObjective,
+            systemPrompt: typeof body.systemPrompt === "string" ? body.systemPrompt : undefined,
+            appendSystemPrompt: acceptedAppend,
+            sessionId: auth?.sessionId,
+            principal: auth?.principal,
+            images: body.images,
+            ...(body.clientContext ? { clientContext: { timeZone: body.clientContext.timeZone, userEmail: body.clientContext.userEmail } } : {}),
+            ...(() => {
+                const ct = body.compaction?.clampTolerance;
+                return typeof ct === "number" && Number.isFinite(ct) && ct >= 0 && ct <= 1 ? { compaction: { clampTolerance: ct } } : {};
+            })(),
+            outputSchema: body.outputSchema,
+            ...(typeof body.outputRetries === "number" && Number.isFinite(body.outputRetries) && body.outputRetries >= 1
+                ? { outputRetries: Math.min(10, Math.floor(body.outputRetries)) }
+                : {}),
+            resumeAt: resumeAtEntryId,
+            resumeAtMode: normalizeResumeAtMode(body.resumeAtMode, resumeAtEntryId !== undefined),
+            requireExistingSession: body.requireExistingSession === true ? true : undefined,
+            enableFork: enableForkFromBody(body, config, Boolean(centerRuntimeCapsResolver)),
+            suggestNextPrompts: normalizeSuggestNextPrompts(body.suggestNextPrompts),
+            rewindFiles: body.rewindFiles === true ? true : undefined,
+            rewindFilesTo: rewindFilesToEntryId,
+            additionalDirectories,
+            enablePlanMode: config.planModeEnabled ? true : undefined,
+            selfOrchestration: selfOrchestrationFromBody({ selfOrchestration: body.selfOrchestration === true || parsedSettings.settings?.ultracode === true }, config, Boolean(centerRuntimeCapsResolver)),
+            forwardSubagentEvents: body.forwardSubagentEvents === true ? true : undefined,
+            retainSubagentSessions: normalizeRetainSubagentSessions(body.retainSubagentSessions),
+            ...taskAgentsSpecFragment(body.agents, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null })),
+            ...(retainBackgroundProcessesFromBody(body.retainBackgroundProcesses, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null })) === true
+                ? { retainBackgroundProcesses: true }
+                : {}),
+            ...(() => { const v = toolNameListFromBody(body.excludeTools); return v ? { excludeTools: v } : {}; })(),
+            ...(() => { const v = toolNameListFromBody(body.deferTools); return v ? { deferTools: v } : {}; })(),
+            ...(() => { const v = promptProfileFromBody(body.promptProfile); return v ? { promptProfile: v } : {}; })(),
+            ...(typeof body.interactiveTools === "boolean"
+                ? { interactiveTools: body.interactiveTools }
+                : {}),
+            resilience: normalizeResilience(body.resilience, explicitOperator(auth?.principal, config.operatorPrincipals)),
+            finalVerification: cap.finalVerification === true || body.finalVerification === true ? true : undefined,
+            attachments: normalizeAttachments(body.attachments),
+            ...(taskHooks ? { hooks: composeHooks(deploymentHooks, taskHooks) } : {}),
+            model: picked.model,
+            ...((() => {
+                if (typeof body.compactionModel !== "string" || body.compactionModel.length === 0)
+                    return {};
+                const cm = matchCatalogModel(body.compactionModel, wireCatalog);
+                if (cm === undefined) {
+                    if (opts?.leg === "fresh") {
+                        throw new HttpError(400, `unknown compactionModel "${body.compactionModel.slice(0, 120)}" — not in the configured catalog (name, tier word, or id; a catalog refresh may have removed it mid-request)`);
+                    }
+                    metrics.inc("task_model_unknown_fallback_total");
+                    logger.warn("compaction_model_unknown_fallback", { requested: body.compactionModel.slice(0, 120), sessionId: auth?.sessionId ?? null });
+                    return {};
+                }
+                return { compactionModel: cm };
+            })()),
+            thinking: effectiveThinking(body.reasoningEffort, parsedSettings.settings?.ultracode === true),
+            getApiKeyAndHeaders: keyResolver,
+            ...(() => {
+                const limits = resolveTaskLimits(body.limits, taskLimitCaps, taskTimeoutSec, config.requirePrincipal, body.council === true || body.debate === true || scenarioName === "team");
+                const declarations = [];
+                if (taskLimitCaps.timeoutSec !== undefined)
+                    declarations.push({ key: "server.limits.timeoutSecCap", value: String(taskLimitCaps.timeoutSec), reason: "env TASK_TIMEOUT_MAX_SEC (operator ceiling on caller limits.timeoutSec)" });
+                if (taskLimitCaps.maxOutputTokens !== undefined)
+                    declarations.push({ key: "server.limits.maxOutputTokensCap", value: String(taskLimitCaps.maxOutputTokens), reason: "env TASK_MAX_OUTPUT_TOKENS_MAX (operator ceiling)" });
+                if (taskLimitCaps.maxTurns !== undefined)
+                    declarations.push({ key: "server.limits.maxTurnsCap", value: String(taskLimitCaps.maxTurns), reason: "env TASK_MAX_TURNS_MAX (operator ceiling)" });
+                if (config.maxTaskCostUsd > 0)
+                    declarations.push({ key: "server.budget.maxCostUsdCap", value: String(config.maxTaskCostUsd), reason: "env MAX_TASK_COST_USD (operator ceiling; becomes the effective value when the caller sends none)" });
+                if (config.maxTaskTokens > 0)
+                    declarations.push({ key: "server.budget.maxTokensCap", value: String(config.maxTaskTokens), reason: "env MAX_TASK_TOKENS_MAX (operator ceiling; becomes the effective value when the caller sends none)" });
+                if (config.requirePrincipal === true)
+                    declarations.push({ key: "server.limits.wallClockBaseSec", value: "2400/3600", reason: "tenancy wall-clock base (multi-tenant; big tasks 3600) — TASK_TIMEOUT_SEC raises, never shrinks" });
+                return { ...(limits !== undefined ? { limits } : {}), ...(declarations.length > 0 ? { configOverrides: declarations } : {}) };
+            })(),
+            ...(config.requirePrincipal !== true ? { backgroundScope: "session" } : {}),
+            maxCostUsd: cappedCeiling(body.maxCostUsd, config.maxTaskCostUsd),
+            maxTokens: cappedCeiling(body.maxTokens, config.maxTaskTokens),
+            degrade: (() => {
+                if (!config.degrade || cappedCeiling(body.maxCostUsd, config.maxTaskCostUsd) === undefined)
                     return undefined;
-                if (config.requirePrincipal === true) {
-                    logger.warn("task_hooks_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
+                if (Array.isArray(body.images) && body.images.length > 0 && !config.degrade.toSupportsImages) {
+                    metrics.inc("degrade_dropped_total", { reason: "vision_target" });
+                    logger.warn("degrade_dropped", { reason: "vision_target", model: picked.model, images: body.images.length });
                     return undefined;
                 }
-                const effMode = coercePermissionMode(body.permissionMode) ?? parsedSettings.settings?.permissions?.defaultMode;
-                return createTaskHooks(hc, {
-                    logger,
-                    sessionId: auth?.sessionId ?? "",
-                    cwd: (auth?.sessionId ? perSessionCwd.get(auth.sessionId) : undefined) ?? process.cwd(),
-                    ...(effMode ? { permissionMode: effMode } : {}),
-                    ...(parsedSettings.settings?.shellEnv ? { shellEnv: parsedSettings.settings.shellEnv } : {}),
-                    hookLlm,
-                    hookAgent,
-                    onHookNotice: (n) => fleetBus.publishHookNotice({
-                        ...n,
-                        ...(auth?.principal ? { ownerScope: auth.principal } : {}),
-                        ...(auth?.sessionId ? { ownerSessionId: auth.sessionId } : {}),
-                    }),
-                    ...(auth?.sessionId
+                return { to: config.degrade.to, atCostFraction: config.degrade.atCostFraction };
+            })(),
+            memory: memoryEngine ? memorySpecForRequest(auth?.memoryScope, body.memoryWrite, s4DefaultScopes) : undefined,
+            tools: ((base) => {
+                const extra = [...(selectEnvTool ? [selectEnvTool] : []), ...(sendUserFileToolSpec ? [sendUserFileToolSpec] : [])];
+                const merged = extra.length > 0 ? [...(base ?? []), ...extra] : base;
+                return merged && config.toolDeferLongtail ? applyLongtailDefer(merged, true) : merged;
+            })(cap.tools),
+            skills: mergeUserSkills(cap.skills, body.skills, logger),
+            mcp: resolveRequestMcp(mcpForScenario(config.mcpServers, scenarioName), body.mcpServers, config, logger),
+            promptProvider: centerDecls ? centerPromptProvider(centerDecls, scenarioName) : cap.promptProvider,
+            toolPolicy: durableEnabled
+                ? combinePolicies(createDurableQuestionPolicy(), createDurableAskPolicy({
+                    requireApproval: config.approvalRequire, deny: config.approvalDeny, autoBudget: config.approvalAutoBudget, neverAuto: config.approvalNeverAuto,
+                    ...(approvalExemptionStore && auth?.sessionId
                         ? {
-                            wake: async (text) => hookWakeBus.deliver
-                                ?
-                                    hookWakeBus.deliver(auth.sessionId, `[hook asyncRewake] ${redactSecrets(text)}`)
-                                : false,
+                            exempt: (toolName) => approvalExemptionStore.has(auth.sessionId, toolName),
+                            onExempted: (toolName, rawToolName) => logger.info("approval_exempted", { sessionId: auth.sessionId, toolName, rawToolName }),
                         }
                         : {}),
-                });
-            })();
-            const rawAddDirs = body.additionalDirectories;
-            const additionalDirectories = cwdHonored(config) ? parseAdditionalDirectories(rawAddDirs) : undefined;
-            if (rawAddDirs !== undefined && !cwdHonored(config)) {
-                logger.warn("task_additional_directories_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
-            }
-            const wireCatalog = expandTiers(config.models, config.tiers) ?? config.models;
-            const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog);
-            if (picked.unknownExplicit !== undefined) {
-                metrics.inc("task_model_unknown_fallback_total");
-                logger.warn("task_model_unknown_fallback", { requested: picked.unknownExplicit.slice(0, 120), fallback: picked.model, sessionId: auth?.sessionId ?? null });
-            }
-            if (Array.isArray(body.images) && body.images.length > 0 && !modelSupportsImages(wireCatalog[picked.model])) {
-                metrics.inc("images_omitted_total", { model: picked.model });
-                logger.warn("images_omitted_no_vision_model", { model: picked.model, count: body.images.length });
-            }
-            let resumeAtEntryId;
-            if (typeof body.resumeAt === "string" && body.resumeAt.length > 0) {
-                if (!auth?.sessionId)
-                    throw new HttpError(422, "resumeAt requires a session to branch (resume_at.no_session)");
-                if (!resumeAnchorStore || !ownerAware.getLeafId)
-                    throw new HttpError(501, "resume-at is not available on this worker (no session-store backend for the anchor map)");
-                resumeAtEntryId = await resumeAnchorStore.resolve(auth.sessionId, body.resumeAt, auth.principal ?? null);
-                if (resumeAtEntryId === undefined)
-                    throw new HttpError(404, "resumeAt: no such message in this session (resume_at.unknown_event)");
-            }
-            let rewindFilesToEntryId;
-            if (resumeAtEntryId === undefined && typeof body.rewindFilesTo === "string" && body.rewindFilesTo.length > 0) {
-                if (!auth?.sessionId)
-                    throw new HttpError(422, "rewindFilesTo requires a session (rewind_files_to.no_session)");
-                if (!resumeAnchorStore || !ownerAware.getLeafId)
-                    throw new HttpError(501, "rewind-files-to is not available on this worker (no session-store backend for the anchor map)");
-                rewindFilesToEntryId = await resumeAnchorStore.resolve(auth.sessionId, body.rewindFilesTo, auth.principal ?? null);
-                if (rewindFilesToEntryId === undefined)
-                    throw new HttpError(404, "rewindFilesTo: no such message in this session (rewind_files_to.unknown_event)");
-            }
-            const s4ProjectId = auth?.resolvedProjectId ?? (typeof body.projectId === "string" && body.projectId ? body.projectId : undefined);
-            const s4DefaultScopes = s4ProjectId ? config.projects[s4ProjectId]?.defaultScopes : undefined;
-            const spec = {
-                objective: attachmentNotice ? `${picked.cleanedObjective}\n\n${attachmentNotice}` : picked.cleanedObjective,
-                systemPrompt: typeof body.systemPrompt === "string" ? body.systemPrompt : undefined,
-                appendSystemPrompt: acceptedAppend,
-                sessionId: auth?.sessionId,
-                principal: auth?.principal,
-                images: body.images,
-                ...(body.clientContext ? { clientContext: { timeZone: body.clientContext.timeZone, userEmail: body.clientContext.userEmail } } : {}),
-                ...(() => {
-                    const ct = body.compaction?.clampTolerance;
-                    return typeof ct === "number" && Number.isFinite(ct) && ct >= 0 && ct <= 1 ? { compaction: { clampTolerance: ct } } : {};
-                })(),
-                outputSchema: body.outputSchema,
-                ...(typeof body.outputRetries === "number" && Number.isFinite(body.outputRetries) && body.outputRetries >= 1
-                    ? { outputRetries: Math.min(10, Math.floor(body.outputRetries)) }
-                    : {}),
-                resumeAt: resumeAtEntryId,
-                resumeAtMode: normalizeResumeAtMode(body.resumeAtMode, resumeAtEntryId !== undefined),
-                requireExistingSession: body.requireExistingSession === true ? true : undefined,
-                enableFork: enableForkFromBody(body, config, Boolean(centerRuntimeCapsResolver)),
-                suggestNextPrompts: normalizeSuggestNextPrompts(body.suggestNextPrompts),
-                rewindFiles: body.rewindFiles === true ? true : undefined,
-                rewindFilesTo: rewindFilesToEntryId,
-                additionalDirectories,
-                enablePlanMode: config.planModeEnabled ? true : undefined,
-                selfOrchestration: selfOrchestrationFromBody({ selfOrchestration: body.selfOrchestration === true || parsedSettings.settings?.ultracode === true }, config, Boolean(centerRuntimeCapsResolver)),
-                forwardSubagentEvents: body.forwardSubagentEvents === true ? true : undefined,
-                retainSubagentSessions: normalizeRetainSubagentSessions(body.retainSubagentSessions),
-                ...taskAgentsSpecFragment(body.agents, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null })),
-                ...(retainBackgroundProcessesFromBody(body.retainBackgroundProcesses, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null })) === true
-                    ? { retainBackgroundProcesses: true }
-                    : {}),
-                ...(() => { const v = toolNameListFromBody(body.excludeTools); return v ? { excludeTools: v } : {}; })(),
-                ...(() => { const v = toolNameListFromBody(body.deferTools); return v ? { deferTools: v } : {}; })(),
-                ...(() => { const v = promptProfileFromBody(body.promptProfile); return v ? { promptProfile: v } : {}; })(),
-                ...(typeof body.interactiveTools === "boolean"
-                    ? { interactiveTools: body.interactiveTools }
-                    : {}),
-                resilience: normalizeResilience(body.resilience, explicitOperator(auth?.principal, config.operatorPrincipals)),
-                finalVerification: cap.finalVerification === true || body.finalVerification === true ? true : undefined,
-                attachments: normalizeAttachments(body.attachments),
-                ...(taskHooks ? { hooks: composeHooks(deploymentHooks, taskHooks) } : {}),
-                model: picked.model,
-                ...((() => {
-                    if (typeof body.compactionModel !== "string" || body.compactionModel.length === 0)
-                        return {};
-                    const cm = matchCatalogModel(body.compactionModel, wireCatalog);
-                    if (cm === undefined) {
-                        if (opts?.leg === "fresh") {
-                            throw new HttpError(400, `unknown compactionModel "${body.compactionModel.slice(0, 120)}" — not in the configured catalog (name, tier word, or id; a catalog refresh may have removed it mid-request)`);
-                        }
-                        metrics.inc("task_model_unknown_fallback_total");
-                        logger.warn("compaction_model_unknown_fallback", { requested: body.compactionModel.slice(0, 120), sessionId: auth?.sessionId ?? null });
-                        return {};
-                    }
-                    return { compactionModel: cm };
-                })()),
-                thinking: effectiveThinking(body.reasoningEffort, parsedSettings.settings?.ultracode === true),
-                getApiKeyAndHeaders: keyResolver,
-                ...(() => {
-                    const limits = resolveTaskLimits(body.limits, taskLimitCaps, taskTimeoutSec, config.requirePrincipal, body.council === true || body.debate === true || scenarioName === "team");
-                    const declarations = [];
-                    if (taskLimitCaps.timeoutSec !== undefined)
-                        declarations.push({ key: "server.limits.timeoutSecCap", value: String(taskLimitCaps.timeoutSec), reason: "env TASK_TIMEOUT_MAX_SEC (operator ceiling on caller limits.timeoutSec)" });
-                    if (taskLimitCaps.maxOutputTokens !== undefined)
-                        declarations.push({ key: "server.limits.maxOutputTokensCap", value: String(taskLimitCaps.maxOutputTokens), reason: "env TASK_MAX_OUTPUT_TOKENS_MAX (operator ceiling)" });
-                    if (taskLimitCaps.maxTurns !== undefined)
-                        declarations.push({ key: "server.limits.maxTurnsCap", value: String(taskLimitCaps.maxTurns), reason: "env TASK_MAX_TURNS_MAX (operator ceiling)" });
-                    if (config.maxTaskCostUsd > 0)
-                        declarations.push({ key: "server.budget.maxCostUsdCap", value: String(config.maxTaskCostUsd), reason: "env MAX_TASK_COST_USD (operator ceiling; becomes the effective value when the caller sends none)" });
-                    if (config.maxTaskTokens > 0)
-                        declarations.push({ key: "server.budget.maxTokensCap", value: String(config.maxTaskTokens), reason: "env MAX_TASK_TOKENS_MAX (operator ceiling; becomes the effective value when the caller sends none)" });
-                    if (config.requirePrincipal === true)
-                        declarations.push({ key: "server.limits.wallClockBaseSec", value: "2400/3600", reason: "tenancy wall-clock base (multi-tenant; big tasks 3600) — TASK_TIMEOUT_SEC raises, never shrinks" });
-                    return { ...(limits !== undefined ? { limits } : {}), ...(declarations.length > 0 ? { configOverrides: declarations } : {}) };
-                })(),
-                ...(config.requirePrincipal !== true ? { backgroundScope: "session" } : {}),
-                maxCostUsd: cappedCeiling(body.maxCostUsd, config.maxTaskCostUsd),
-                maxTokens: cappedCeiling(body.maxTokens, config.maxTaskTokens),
-                degrade: (() => {
-                    if (!config.degrade || cappedCeiling(body.maxCostUsd, config.maxTaskCostUsd) === undefined)
-                        return undefined;
-                    if (Array.isArray(body.images) && body.images.length > 0 && !config.degrade.toSupportsImages) {
-                        metrics.inc("degrade_dropped_total", { reason: "vision_target" });
-                        logger.warn("degrade_dropped", { reason: "vision_target", model: picked.model, images: body.images.length });
-                        return undefined;
-                    }
-                    return { to: config.degrade.to, atCostFraction: config.degrade.atCostFraction };
-                })(),
-                memory: memoryEngine ? memorySpecForRequest(auth?.memoryScope, body.memoryWrite, s4DefaultScopes) : undefined,
-                tools: ((base) => {
-                    const extra = [...(selectEnvTool ? [selectEnvTool] : []), ...(sendUserFileToolSpec ? [sendUserFileToolSpec] : [])];
-                    const merged = extra.length > 0 ? [...(base ?? []), ...extra] : base;
-                    return merged && config.toolDeferLongtail ? applyLongtailDefer(merged, true) : merged;
-                })(cap.tools),
-                skills: mergeUserSkills(cap.skills, body.skills, logger),
-                mcp: resolveRequestMcp(mcpForScenario(config.mcpServers, scenarioName), body.mcpServers, config, logger),
-                promptProvider: centerDecls ? centerPromptProvider(centerDecls, scenarioName) : cap.promptProvider,
-                toolPolicy: durableEnabled
-                    ? combinePolicies(createDurableQuestionPolicy(), createDurableAskPolicy({
-                        requireApproval: config.approvalRequire, deny: config.approvalDeny, autoBudget: config.approvalAutoBudget, neverAuto: config.approvalNeverAuto,
-                        ...(approvalExemptionStore && auth?.sessionId
+                }))
+                : approvalEnabled && approvalStore
+                    ? createOaApprovalPolicy({
+                        store: approvalStore,
+                        requireApproval: config.approvalRequire,
+                        deny: config.approvalDeny,
+                        pollMs: config.approvalPollMs,
+                        context: () => ({ sessionId: auth?.sessionId ?? null, owner: auth?.principal ?? null }),
+                        neverAuto: config.approvalNeverAuto,
+                        ...(approvalExemptionStore
                             ? {
-                                exempt: (toolName) => approvalExemptionStore.has(auth.sessionId, toolName),
-                                onExempted: (toolName, rawToolName) => logger.info("approval_exempted", { sessionId: auth.sessionId, toolName, rawToolName }),
+                                exempt: (sessionId, toolName) => approvalExemptionStore.has(sessionId, toolName),
+                                onExempted: (sessionId, toolName) => logger.info("approval_exempted", { sessionId, toolName }),
                             }
                             : {}),
-                    }))
-                    : approvalEnabled && approvalStore
-                        ? createOaApprovalPolicy({
-                            store: approvalStore,
-                            requireApproval: config.approvalRequire,
-                            deny: config.approvalDeny,
-                            pollMs: config.approvalPollMs,
-                            context: () => ({ sessionId: auth?.sessionId ?? null, owner: auth?.principal ?? null }),
-                            neverAuto: config.approvalNeverAuto,
-                            ...(approvalExemptionStore
-                                ? {
-                                    exempt: (sessionId, toolName) => approvalExemptionStore.has(sessionId, toolName),
-                                    onExempted: (sessionId, toolName) => logger.info("approval_exempted", { sessionId, toolName }),
-                                }
-                                : {}),
-                        })
-                        : singleUserAutoAcceptBaseline
-                            ? createAllowDenyPolicy({})
-                            : undefined,
-                ...(durableEnabled
-                    ? {
-                        checkpointStore,
-                        durableApproval: {
-                            scope: auth?.principal ?? "_",
-                            ...(config.approvalTimeoutSec > 0 ? { ttlMs: config.approvalTimeoutSec * 1000 } : {}),
-                        },
-                        ...((rs) => (rs ? { resourceSuspend: rs } : {}))(resourceSuspendOptIn({
-                            enabled: config.resourceSuspend,
-                            ttlSec: config.resourceSuspendTtlSec,
-                            isVerify: body.verify === true,
-                            isCascade: body.cascade === true,
-                            scope: auth?.principal ?? "_",
-                        })),
-                        onQuestion: QUESTION_AWAITS_RESUME,
-                    }
-                    : {}),
-            };
-            const governedBase = applyRuntimeGovernance(spec, { autonomy: config.autonomy, commandPolicy: config.commandPolicy });
-            let governed = governedBase;
-            const bodyMode = coercePermissionMode(body.permissionMode);
-            let effectiveSettings = bodyMode ? withPermissionMode(parsedSettings.settings, bodyMode) : parsedSettings.settings;
-            if (appendLessPack && effectiveSettings?.outputStyle) {
-                logger.warn("output_style_dropped", { detail: "the effective prompt pack cannot mount the append slot (already-assembled systemPrompt or center assembled-identity declaration)", sessionId: auth?.sessionId ?? null });
-                const { outputStyle: _dropped, ...rest } = effectiveSettings;
-                effectiveSettings = Object.keys(rest).length > 0 ? rest : undefined;
-            }
-            if (effectiveSettings?.outputStyle && acceptedAppend && acceptedAppend.length + 2 + effectiveSettings.outputStyle.length > MAX_SETTINGS_OUTPUT_STYLE_CHARS) {
-                logger.warn("output_style_dropped", { detail: `combined append carriers exceed the ${MAX_SETTINGS_OUTPUT_STYLE_CHARS} cap (rider ${acceptedAppend.length} + style ${effectiveSettings.outputStyle.length}) — style dropped (pre-cap stored body on a resume leg?)`, sessionId: auth?.sessionId ?? null });
-                const { outputStyle: _dropped2, ...rest2 } = effectiveSettings;
-                effectiveSettings = Object.keys(rest2).length > 0 ? rest2 : undefined;
-            }
-            const hostSemanticsLane = config.remoteExec === undefined || config.remoteExec.provider === "host";
-            const shellScratchpad = await acceptShellScratchpadDir(body.scratchpadDir, {
-                requirePrincipal: config.requirePrincipal,
-                hostSemanticsLane,
-                warn: (msg, meta) => logger.warn(msg, { ...(meta ?? {}), sessionId: auth?.sessionId ?? null }),
-            });
-            const scratchpadDir = shellScratchpad ??
-                (hostSemanticsLane && auth?.sessionId ? await ensureScratchpadDir(config.localDataRoot ?? localRoot, auth.sessionId) : undefined);
-            if (effectiveSettings) {
-                const fsWriteGate = hostSemanticsLane
-                    ? (() => {
-                        const sessionCwd = auth?.sessionId ? effectiveHostWorkspace(perSessionCwd.get(auth.sessionId), {}) : undefined;
-                        const gateCwd = sessionCwd ??
-                            (config.remoteExec === undefined
-                                ? process.cwd()
-                                : join(config.localDataRoot ?? localRoot, "fs-write-gate-unrooted"));
-                        return {
-                            env: new NodeExecutionEnv({ cwd: gateCwd }),
-                            cwd: gateCwd,
-                            ...(scratchpadDir ? { scratchpadDir } : {}),
-                            ...(config.sensitiveWritePatterns.length > 0 ? { sensitivePatterns: config.sensitiveWritePatterns } : {}),
-                            ...(config.manualModeShellGate ? { shellGate: config.manualModeShellGate } : {}),
-                            ...(approvalExemptionStore && auth?.sessionId
-                                ? {
-                                    isExempt: async (toolName) => {
-                                        const hit = await approvalExemptionStore.has(auth.sessionId, toolName);
-                                        if (hit)
-                                            logger.info("fs_write_gate_exempted", { toolName, sessionId: auth.sessionId });
-                                        return hit;
-                                    },
-                                }
-                                : {}),
-                        };
-                    })()
-                    : undefined;
-                const workflowGate = approvalExemptionStore && auth?.sessionId
-                    ? {
-                        isExempt: async (toolName) => {
-                            const hit = await approvalExemptionStore.has(auth.sessionId, toolName);
-                            if (hit)
-                                logger.info("workflow_gate_exempted", { toolName, sessionId: auth.sessionId });
-                            return hit;
-                        },
-                    }
-                    : undefined;
-                try {
-                    governed = applyTaskSettings(governedBase, effectiveSettings, fsWriteGate, workflowGate);
+                    })
+                    : singleUserAutoAcceptBaseline
+                        ? createAllowDenyPolicy({})
+                        : undefined,
+            ...(durableEnabled
+                ? {
+                    checkpointStore,
+                    durableApproval: {
+                        scope: auth?.principal ?? "_",
+                        ...(config.approvalTimeoutSec > 0 ? { ttlMs: config.approvalTimeoutSec * 1000 } : {}),
+                    },
+                    ...((rs) => (rs ? { resourceSuspend: rs } : {}))(resourceSuspendOptIn({
+                        enabled: config.resourceSuspend,
+                        ttlSec: config.resourceSuspendTtlSec,
+                        isVerify: body.verify === true,
+                        isCascade: body.cascade === true,
+                        scope: auth?.principal ?? "_",
+                    })),
+                    onQuestion: QUESTION_AWAITS_RESUME,
                 }
-                catch (e) {
-                    throw new HttpError(422, `settings are tighten-only and cannot loosen the deployment policy: ${e.message}`);
+                : {}),
+        };
+        const governedBase = applyRuntimeGovernance(spec, { autonomy: config.autonomy, commandPolicy: config.commandPolicy });
+        let governed = governedBase;
+        const bodyMode = coercePermissionMode(body.permissionMode);
+        let effectiveSettings = bodyMode ? withPermissionMode(parsedSettings.settings, bodyMode) : parsedSettings.settings;
+        if (appendLessPack && effectiveSettings?.outputStyle) {
+            logger.warn("output_style_dropped", { detail: "the effective prompt pack cannot mount the append slot (already-assembled systemPrompt or center assembled-identity declaration)", sessionId: auth?.sessionId ?? null });
+            const { outputStyle: _dropped, ...rest } = effectiveSettings;
+            effectiveSettings = Object.keys(rest).length > 0 ? rest : undefined;
+        }
+        if (effectiveSettings?.outputStyle && acceptedAppend && acceptedAppend.length + 2 + effectiveSettings.outputStyle.length > MAX_SETTINGS_OUTPUT_STYLE_CHARS) {
+            logger.warn("output_style_dropped", { detail: `combined append carriers exceed the ${MAX_SETTINGS_OUTPUT_STYLE_CHARS} cap (rider ${acceptedAppend.length} + style ${effectiveSettings.outputStyle.length}) — style dropped (pre-cap stored body on a resume leg?)`, sessionId: auth?.sessionId ?? null });
+            const { outputStyle: _dropped2, ...rest2 } = effectiveSettings;
+            effectiveSettings = Object.keys(rest2).length > 0 ? rest2 : undefined;
+        }
+        const hostSemanticsLane = config.remoteExec === undefined || config.remoteExec.provider === "host";
+        const shellScratchpad = await acceptShellScratchpadDir(body.scratchpadDir, {
+            requirePrincipal: config.requirePrincipal,
+            hostSemanticsLane,
+            warn: (msg, meta) => logger.warn(msg, { ...(meta ?? {}), sessionId: auth?.sessionId ?? null }),
+        });
+        const scratchpadDir = shellScratchpad ??
+            (hostSemanticsLane && auth?.sessionId ? await ensureScratchpadDir(config.localDataRoot ?? localRoot, auth.sessionId) : undefined);
+        if (effectiveSettings) {
+            const fsWriteGate = hostSemanticsLane
+                ? (() => {
+                    const sessionCwd = auth?.sessionId ? effectiveHostWorkspace(perSessionCwd.get(auth.sessionId), {}) : undefined;
+                    const gateCwd = sessionCwd ??
+                        (config.remoteExec === undefined
+                            ? process.cwd()
+                            : join(config.localDataRoot ?? localRoot, "fs-write-gate-unrooted"));
+                    return {
+                        env: new NodeExecutionEnv({ cwd: gateCwd }),
+                        cwd: gateCwd,
+                        ...(scratchpadDir ? { scratchpadDir } : {}),
+                        ...(config.sensitiveWritePatterns.length > 0 ? { sensitivePatterns: config.sensitiveWritePatterns } : {}),
+                        ...(config.manualModeShellGate ? { shellGate: config.manualModeShellGate } : {}),
+                        ...(approvalExemptionStore && auth?.sessionId
+                            ? {
+                                isExempt: async (toolName) => {
+                                    const hit = await approvalExemptionStore.has(auth.sessionId, toolName);
+                                    if (hit)
+                                        logger.info("fs_write_gate_exempted", { toolName, sessionId: auth.sessionId });
+                                    return hit;
+                                },
+                            }
+                            : {}),
+                    };
+                })()
+                : undefined;
+            const workflowGate = approvalExemptionStore && auth?.sessionId
+                ? {
+                    isExempt: async (toolName) => {
+                        const hit = await approvalExemptionStore.has(auth.sessionId, toolName);
+                        if (hit)
+                            logger.info("workflow_gate_exempted", { toolName, sessionId: auth.sessionId });
+                        return hit;
+                    },
                 }
+                : undefined;
+            try {
+                governed = applyTaskSettings(governedBase, effectiveSettings, fsWriteGate, workflowGate);
             }
-            if (governed.handsReadOnly === true && Array.isArray(governed.tools)) {
-                governed = { ...governed, tools: stripDelegationTools(governed.tools) };
+            catch (e) {
+                throw new HttpError(422, `settings are tighten-only and cannot loosen the deployment policy: ${e.message}`);
             }
-            const bodyProfile = typeof body.sandboxImageProfile === "string" && body.sandboxImageProfile.length > 0 ? body.sandboxImageProfile : undefined;
-            const taskImageProfile = bodyProfile ?? (body.cascade === true || body.verify === true ? undefined : sessionEnvSelection.get(auth?.sessionId));
-            let resolvedImageCaps;
-            if (taskImageProfile !== undefined) {
-                if (config.remoteExec?.provider !== "k8s") {
-                    throw new HttpError(400, "sandboxImageProfile is only supported on the k8s sandbox backend");
-                }
-                if (!imageIndex) {
-                    throw new HttpError(400, "sandboxImageProfile requires the image index (sema-registry backend not configured)");
-                }
-                if (!auth?.sessionId) {
-                    throw new HttpError(400, "sandboxImageProfile requires a resolved session");
-                }
-                const capsNeeded = Array.isArray(body.capabilitiesNeeded)
-                    ? body.capabilitiesNeeded.filter((c) => typeof c === "string")
-                    : undefined;
-                const resolved = await resolveSandboxImageRef({
-                    profile: taskImageProfile,
-                    ...(capsNeeded && capsNeeded.length > 0 ? { capabilitiesNeeded: capsNeeded } : {}),
-                    viewer: { operator: explicitOperator(auth.principal, config.operatorPrincipals), tenantId: auth.principal ?? null },
-                    index: imageIndex,
-                });
-                if (!resolved.ok)
-                    throw new HttpError(resolved.status, resolved.message);
-                perTaskImage.set(auth.sessionId, resolved.ref);
-                resolvedImageCaps = resolved.capabilities;
+        }
+        if (governed.handsReadOnly === true && Array.isArray(governed.tools)) {
+            governed = { ...governed, tools: stripDelegationTools(governed.tools) };
+        }
+        const bodyProfile = typeof body.sandboxImageProfile === "string" && body.sandboxImageProfile.length > 0 ? body.sandboxImageProfile : undefined;
+        const taskImageProfile = bodyProfile ?? (body.cascade === true || body.verify === true ? undefined : sessionEnvSelection.get(auth?.sessionId));
+        let resolvedImageCaps;
+        if (taskImageProfile !== undefined) {
+            if (config.remoteExec?.provider !== "k8s") {
+                throw new HttpError(400, "sandboxImageProfile is only supported on the k8s sandbox backend");
             }
-            if (config.envFactsEnabled) {
-                const pkgSourceLane = config.remoteExec?.provider === "e2b" || config.remoteExec?.provider === "k8s";
-                const remoteScratchpadDir = !hostSemanticsLane && isRemoteScratchpadLane(config.remoteExec?.provider)
-                    ? remoteScratchpadDirFor(auth?.sessionId)
-                    : undefined;
-                const factScratchpadDir = scratchpadDir ?? remoteScratchpadDir;
-                const facts = buildEnvFacts({
-                    profile: taskImageProfile,
-                    capabilities: resolvedImageCaps,
-                    ...(pkgSourceLane ? { pkgSource: config.sandboxPkgSource } : {}),
-                    egress: egressForRemoteExec(config.remoteExec),
-                    ...(factScratchpadDir ? { scratchpadDir: factScratchpadDir } : {}),
-                    resumeFacts: resumeFactsForLane(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? { k8sSnapshot: Boolean(config.remoteExec.s3Snapshot) } : undefined),
-                });
-                if (facts)
-                    governed = { ...governed, envFacts: facts };
+            if (!imageIndex) {
+                throw new HttpError(400, "sandboxImageProfile requires the image index (sema-registry backend not configured)");
             }
-            if (scratchpadDir !== undefined) {
-                const dirs = governed.additionalDirectories ?? [];
-                if (!dirs.includes(scratchpadDir))
-                    governed = { ...governed, additionalDirectories: [...dirs, scratchpadDir] };
+            if (!auth?.sessionId) {
+                throw new HttpError(400, "sandboxImageProfile requires a resolved session");
             }
-            if (config.routerEnabled) {
-                const isolatedExecEnv = isIsolatedExecEnv(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? config.remoteExec.runtimeClass : undefined);
-                const decision = routeServiceTask({
-                    isolatedExecEnv,
-                    hasExecutionEnv: config.remoteExec != null,
-                    ...(config.autonomy ? { autonomy: config.autonomy } : {}),
-                    explicitTeam: body.council === true || body.debate === true || scenarioName === "team",
-                });
-                logger.info("orchestration_routed", { mode: decision.mode, reason: decision.reason, sessionId: auth?.sessionId ?? null });
-                if (decision.mode === "supervisor") {
-                    return tightenTaskSpec(governed, supPostureOverrides());
-                }
+            const capsNeeded = Array.isArray(body.capabilitiesNeeded)
+                ? body.capabilitiesNeeded.filter((c) => typeof c === "string")
+                : undefined;
+            const resolved = await resolveSandboxImageRef({
+                profile: taskImageProfile,
+                ...(capsNeeded && capsNeeded.length > 0 ? { capabilitiesNeeded: capsNeeded } : {}),
+                viewer: { operator: explicitOperator(auth.principal, config.operatorPrincipals), tenantId: auth.principal ?? null },
+                index: imageIndex,
+            });
+            if (!resolved.ok)
+                throw new HttpError(resolved.status, resolved.message);
+            perTaskImage.set(auth.sessionId, resolved.ref);
+            resolvedImageCaps = resolved.capabilities;
+        }
+        if (config.envFactsEnabled) {
+            const pkgSourceLane = config.remoteExec?.provider === "e2b" || config.remoteExec?.provider === "k8s";
+            const remoteScratchpadDir = !hostSemanticsLane && isRemoteScratchpadLane(config.remoteExec?.provider)
+                ? remoteScratchpadDirFor(auth?.sessionId)
+                : undefined;
+            const factScratchpadDir = scratchpadDir ?? remoteScratchpadDir;
+            const facts = buildEnvFacts({
+                profile: taskImageProfile,
+                capabilities: resolvedImageCaps,
+                ...(pkgSourceLane ? { pkgSource: config.sandboxPkgSource } : {}),
+                egress: egressForRemoteExec(config.remoteExec),
+                ...(factScratchpadDir ? { scratchpadDir: factScratchpadDir } : {}),
+                resumeFacts: resumeFactsForLane(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? { k8sSnapshot: Boolean(config.remoteExec.s3Snapshot) } : undefined),
+            });
+            if (facts)
+                governed = { ...governed, envFacts: facts };
+        }
+        if (scratchpadDir !== undefined) {
+            const dirs = governed.additionalDirectories ?? [];
+            if (!dirs.includes(scratchpadDir))
+                governed = { ...governed, additionalDirectories: [...dirs, scratchpadDir] };
+        }
+        if (config.routerEnabled) {
+            const isolatedExecEnv = isIsolatedExecEnv(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? config.remoteExec.runtimeClass : undefined);
+            const decision = routeServiceTask({
+                isolatedExecEnv,
+                hasExecutionEnv: config.remoteExec != null,
+                ...(config.autonomy ? { autonomy: config.autonomy } : {}),
+                explicitTeam: body.council === true || body.debate === true || scenarioName === "team",
+            });
+            logger.info("orchestration_routed", { mode: decision.mode, reason: decision.reason, sessionId: auth?.sessionId ?? null });
+            if (decision.mode === "supervisor") {
+                return tightenTaskSpec(governed, supPostureOverrides());
             }
-            return governed;
-        },
-    });
+        }
+        return governed;
+    };
+    const server = createHttpServer({ runner, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
     runDenySweep = server.denyExpiredApprovals;
     const bindHost = resolveBindHost(config);
     await new Promise((resolve) => (bindHost ? server.listen(config.port, bindHost, resolve) : server.listen(config.port, resolve)));