@sema-agent/server 7.103.2 → 7.105.0

package/dist/boot/resolve-spec.js

@@ -41,9 +41,11 @@ import { DeferredSandboxPathEnv, isSandboxPathAdjudicationLane, sandboxPathEnvSl
 import { executionLaneCaps, executionLaneHomeDir, executionLaneOf } from "../execution-lane-caps.js";
 import { effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { memoryFaceMounted } from "../memory-scope.js";
+import { createAssemblyIncarnationRead, sessionFaceReaderOf } from "./session-incarnation-seat.js";
 export function createResolveSpec(ctx) {
-    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, fleetBus, hookWakeBus, noteSessionShellGate, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
+    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, noteSessionIncarnation, hookLlm, hookAgent, fleetBus, hookWakeBus, noteSessionShellGate, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
     assertGuardPatternsUsable(config);
+    const assemblyIncarnationRead = createAssemblyIncarnationRead(sessionFaceReaderOf(ownerAware), (e, f) => logger.warn(e, f));
     const onlySensitiveBaseline = buildOnlySensitiveBaselineWarning(config, {
         approvalSeat: durableEnabled ? "durable" : "absent",
         singleUserAutoAcceptBaseline: singleUserAutoAcceptBaselineApplies(config),
@@ -87,6 +89,8 @@ export function createResolveSpec(ctx) {
         }
         noteSessionShellGate?.(auth?.sessionId, effMode !== undefined && shellGateForMode(effMode) === "off");
         const lane = bindSettingsCwdEnvAndModel(body, auth, gated, effMode, opts);
+        if (auth?.sessionId && assemblyIncarnationRead)
+            noteSessionIncarnation(auth.sessionId, await assemblyIncarnationRead(auth.sessionId));
         const anchors = await resolveHistoryAnchors(body, auth);
         const spec = assembleSpecLiteral(body, auth, req, opts, { ...gated, ...lane, ...anchors }, effMode);
         const folded = await foldGovernanceAndSettings(body, auth, spec, gated, effMode);
@@ -315,6 +319,7 @@ export function createResolveSpec(ctx) {
             acceptPartialRestore: body.acceptPartialRestore === true ? true : undefined,
             ...(body.rewindFiles === true ? { rewindFiles: true } : {}),
             rewindFilesTo: rewindFilesToEntryId,
+            ...(body.fileHistory === "disabled" ? { fileHistory: "disabled" } : {}),
             additionalDirectories,
             additionalReadDirectories,
             enablePlanMode: config.planModeEnabled ? true : undefined,
@@ -510,7 +515,9 @@ export function createResolveSpec(ctx) {
             warn: (msg, meta) => logger.warn(msg, { ...(meta ?? {}), sessionId: auth?.sessionId ?? null }),
         });
         const scratchpadDir = shellScratchpad ??
-            (hostSemanticsLane && auth?.sessionId ? await ensureScratchpadDir(config.localDataRoot ?? localRoot, auth.sessionId) : undefined);
+            (hostSemanticsLane && auth?.sessionId
+                ? await ensureScratchpadDir(config.localDataRoot ?? localRoot, auth.sessionId, (msg, meta) => logger.warn(msg, { ...(meta ?? {}), sessionId: auth.sessionId }))
+                : undefined);
         if (effectiveSettings) {
             const gateCommon = {
                 ...(approvalExemptionStore && auth?.sessionId
@@ -616,28 +623,25 @@ export function createResolveSpec(ctx) {
             perTaskImage.set(auth.sessionId, resolved.ref);
             resolvedImageCaps = resolved.capabilities;
         }
-        if (config.envFactsEnabled) {
-            const pkgSourceLane = config.remoteExec?.provider === "e2b" || config.remoteExec?.provider === "k8s";
-            const remoteScratchpadDir = !hostSemanticsLane && isRemoteScratchpadLane(config.remoteExec?.provider)
-                ? remoteScratchpadDirFor(auth?.sessionId)
-                : undefined;
-            const factScratchpadDir = scratchpadDir ?? remoteScratchpadDir;
-            const facts = buildEnvFacts({
-                profile: taskImageProfile,
-                capabilities: resolvedImageCaps,
-                ...(pkgSourceLane ? { pkgSource: config.sandboxPkgSource } : {}),
-                egress: egressForRemoteExec(config.remoteExec),
-                ...(factScratchpadDir ? { scratchpadDir: factScratchpadDir } : {}),
-                resumeFacts: resumeFactsForLane(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? { k8sSnapshot: Boolean(config.remoteExec.s3Snapshot) } : undefined),
-            });
-            if (facts)
-                governed = { ...governed, envFacts: facts };
-        }
-        if (scratchpadDir !== undefined) {
-            const dirs = governed.additionalDirectories ?? [];
-            if (!dirs.includes(scratchpadDir))
-                governed = { ...governed, additionalDirectories: [...dirs, scratchpadDir] };
-        }
+        const remoteScratchpadDir = !hostSemanticsLane && isRemoteScratchpadLane(config.remoteExec?.provider)
+            ? remoteScratchpadDirFor(auth?.sessionId)
+            : undefined;
+        const declaredScratchpadDir = scratchpadDir ?? remoteScratchpadDir;
+        const pkgSourceLane = config.remoteExec?.provider === "e2b" || config.remoteExec?.provider === "k8s";
+        const facts = buildEnvFacts({
+            ...(declaredScratchpadDir ? { scratchpadDir: declaredScratchpadDir } : {}),
+            ...(config.envFactsEnabled
+                ? {
+                    profile: taskImageProfile,
+                    capabilities: resolvedImageCaps,
+                    ...(pkgSourceLane ? { pkgSource: config.sandboxPkgSource } : {}),
+                    egress: egressForRemoteExec(config.remoteExec),
+                    resumeFacts: resumeFactsForLane(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? { k8sSnapshot: Boolean(config.remoteExec.s3Snapshot) } : undefined),
+                }
+                : {}),
+        });
+        if (facts)
+            governed = { ...governed, envFacts: facts };
         if (config.routerEnabled) {
             const isolatedExecEnv = isIsolatedExecEnv(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? config.remoteExec.runtimeClass : undefined);
             const decision = routeServiceTask({

package/dist/boot/runner-deps.d.ts

@@ -86,6 +86,9 @@ export interface RunnerDepsCtx {
     promptSource: RunnerDeps["promptSource"];
     rosterStore: RunnerDeps["rosterStore"];
     backgroundAgentStore: RunnerDeps["backgroundAgentStore"];
+    /** S-506([ref] §5):本副本 per-session 登记簿的**同步**化身读腿(装配期由 resolve-spec 写入)。在场 ⇒ 铸
+     *  `RunnerDeps.memorySessionIncarnation` 座;缺席 ⇒ 座不铸(core 口径:按 id 绑定 = 修前行为)。 */
+    sessionIncarnationOf: ((sessionId: string) => string | undefined) | undefined;
     mailboxStore: RunnerDeps["mailboxStore"];
     /**
      * [ref]:mailbox 的**收件人生命周期面**(预删除态)。与 `mailboxStore` **成对**(`boot/stores.ts` 同段铸,
@@ -157,7 +160,8 @@ export interface RunnerDepsCtx {
     } | undefined;
     /**
      * S-399(core 7.21.1)—— 记忆整理的**已解析座**(`boot/memory-consolidation.ts` 的
-     * `resolveConsolidationDriverSeat` 产物),在场 **iff** `MEMORY_CONSOLIDATION_DRIVER=on` 且记忆引擎接了线。
+     * `resolveConsolidationDriverSeat` 产物),在场 **iff** 整理阀门开着(`resolveConsolidationValve` 的判决:
+     * `MEMORY_CONSOLIDATION_DRIVER=on`,或未设而 S-824 / [ref] 出厂缺省派生成开)且记忆引擎接了线。
      *
      * 🔴 **一座两用,不是两次装配**:同一只座同时喂 admin 阀门的操作面引擎与这里的引擎面两席
      * (`RunnerDeps.memoryConsolidation` + `memoryConsolidationDriver`)。第二次解析会让「谁在花钱」
@@ -192,7 +196,7 @@ export interface RunnerDepsCtx {
     runtimeCapsResolver: RunnerDeps["runtimeCapsResolver"];
     /** [ref] per-edited-file rewind history (core `RunnerDeps.fileHistoryStore`; replaces the retired E19
      *  whole-tree snapshot seat — core 94632197 renamed the seat, not a coexistence). WIRING IS THE OPT-IN.
-     *  S-589:值 = `assembleFileHistory` 的捕获脸(后端 ∧ `FILE_HISTORY_CAPTURE`)。 */
+     *  S-724:值 = `assembleFileHistory` 的店(后端在即在,与旋钮无关 —— 旋钮关的部署照样还原已存历史)。 */
     fileHistoryStore: ReturnType<StoreBackend["fileHistory"]> | undefined;
     /** [ref] 车二:持久化权限规则店 provider(core `RunnerDeps.permissionRuleStore`)。缺席 ⇒ 引擎的
      *  `permissionRules.storeWired` 如实报 false、`AskRequest.ruleOffers` 不铸(诚实缺席)。 */

package/dist/boot/runner-deps.js

@@ -3,6 +3,7 @@ import { join } from "node:path";
 import { listCollabWorkflows, resolveCollabWorkflow } from "../capabilities/collab-workflows.js";
 import { fleetBackgroundChildPublisher, FleetEventBus } from "../fleet/fleet-bus.js";
 import { createMemoryEngineIncidentSink } from "../memory-incident-sink.js";
+import { createMemorySessionIncarnationSeat, sessionFaceReaderOf } from "./session-incarnation-seat.js";
 import { assertAutoConsolidationWirable } from "./memory-consolidation.js";
 import { createHardenedVmRunner } from "../orchestration/hardened-vm-runner.js";
 import { createWorkerHardenedVmRunner } from "../orchestration/hardened-vm-worker-runner.js";
@@ -16,6 +17,8 @@ import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { buildCrossSessionInboundLayers, crossSessionDialogExpiryOf } from "../cross-session-settings.js";
 import { createPeerDirectory } from "../peer-directory.js";
 import { targetOutsideStoreInIncident } from "../memory-store-refusal.js";
+import { coreFileHistoryCaptureSeat } from "../file-history-capture.js";
+import { rewindFailureCode } from "../file-history-disclosure.js";
 export function createRunnerDepsOnAsk(toolApproval) {
     if (!toolApproval)
         return undefined;
@@ -186,6 +189,7 @@ export function createRunnerDeps(ctx) {
         memoryBackend: memoryEngine ? memoryEngine.backend : undefined,
         memoryEngineDir: memoryEngine ? memoryEngine.root : undefined,
         memoryCaptureRecordStore: sessionCaptureRecords !== undefined ? (plane) => sessionCaptureRecords(plane) : undefined,
+        memorySessionIncarnation: ctx.sessionIncarnationOf !== undefined && sessionFaceReaderOf(sessionStore) !== undefined ? createMemorySessionIncarnationSeat(ctx.sessionIncarnationOf, (e, f) => logger.warn(e, f)) : undefined,
         onMemoryHarvestReport: memoryEngine
             ? (report, info) => {
                 metrics.inc("memory_harvest_total", { ok: String(report.ok), phase: info.phase, incident: report.incident?.kind ?? "none" });
@@ -212,6 +216,7 @@ export function createRunnerDeps(ctx) {
             : undefined,
         runtimeCapsResolver: runtimeCapsResolver ? runtimeCapsResolver : undefined,
         fileHistoryStore: fileHistoryStore ? fileHistoryStore : undefined,
+        fileHistoryCapture: coreFileHistoryCaptureSeat(fileHistoryStore, config.fileHistoryCapture),
         permissionRuleStore: permissionRuleStore ? permissionRuleStore : undefined,
         onBackgroundChildEvent: fleetBackgroundChildPublisher(fleetBus, (msg, fields) => logger.info(msg, fields)),
         loadProjectMemory: config.requirePrincipal !== true && config.projectMemoryEnabled
@@ -231,7 +236,7 @@ export function createRunnerDeps(ctx) {
                 return;
             }
             if (ctx.phase === "rewind") {
-                const code = /\((\w+)\)/.exec(String(err))?.[1] ?? "unknown";
+                const code = rewindFailureCode(err);
                 logger.warn("rewind_snapshot_failed", { sessionId: ctx.sessionId, code, info: String(err) });
                 metrics.inc("rewind_snapshot_failed_total", { code });
                 return;

package/dist/boot/session-faces.d.ts

@@ -40,6 +40,9 @@ export interface SessionFacesCtx {
      *  (`boot/stores.ts` 同段铸);缺席 = 本部署无耐久 mailbox ⇒ 无箱可退役。 */
     mailboxStore: RunnerDeps["mailboxStore"];
     mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
+    /** S-790 件B:后台子代的耐久店(与 `RunnerDeps.backgroundAgentStore` 同实例)—— 删除协调器据它枚举以本会话为根的子代并结束
+     *  它们(E21 级联的一条腿,做完才删元数据)。缺席 = 本部署没有耐久后台子代(纯内存 dev);那一形只剩本进程登记表里的活行,照样停。 */
+    backgroundAgentStore: RunnerDeps["backgroundAgentStore"];
 }
 export declare function createSessionFaces(ctx: SessionFacesCtx): {
     ownerAware: OwnerAwareSessionStore;
@@ -67,6 +70,8 @@ export declare function createSessionFaces(ctx: SessionFacesCtx): {
         deleted: boolean;
     } | {
         active: string;
+    } | {
+        childrenAlive: readonly string[];
     }>) | undefined;
     instrumentDegenerate: ((result: import("@sema-agent/core").TaskResult) => void) | undefined;
     planCacheProbe: PlanCacheProbe;

package/dist/boot/session-faces.js

@@ -4,10 +4,11 @@ import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
 import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
-import { peerSessionBoxHandle } from "@sema-agent/core";
+import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 import { reapSessionBackgroundHard } from "../background-session-reap.js";
+import { probeSessionChildren, retireSessionChildren, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -39,9 +40,24 @@ export function createSessionFaces(ctx) {
                 if (stillOwner !== owner)
                     return { deleted: false };
             }
+            const childScope = owner ?? "default";
+            const reach = await probeSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
+            if (!reach.reachable) {
+                logger.warn("session_delete_children_still_alive", { sessionId, remaining: reach.unreachableHandles.length, handles: reach.unreachableHandles });
+                return { childrenAlive: reach.unreachableHandles };
+            }
             const runs = runStore ? await runStore.deleteBySession(sessionId, owner) : { removed: 0 };
             if ("active" in runs)
                 return { active: runs.active };
+            {
+                const children = await retireSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
+                if (children.found > 0)
+                    logger.info("session_children_retired", { sessionId, found: children.found, stopped: children.stopped, rounds: children.rounds });
+                if (children.stopped === "incomplete") {
+                    logger.warn("session_delete_children_stop_incomplete", { sessionId, remaining: children.remainingHandles.length, handles: children.remainingHandles });
+                    throw new SessionChildrenStopIncompleteError(sessionId, children.remainingHandles.length);
+                }
+            }
             if (checkpointStore)
                 await checkpointStore.deleteBySession(sessionId, owner);
             if (toolResultStore) {

package/dist/boot/session-incarnation-seat.d.ts

@@ -0,0 +1,41 @@
+/**
+ * S-506([ref] §5)—— 记忆引擎的会话化身座 `RunnerDeps.memorySessionIncarnation` 的装配件。
+ *
+ * core 的座是**同步**签名(`({ sessionId }) => string | undefined`),而会话化身住在会话元数据里、读它是异步的 ⇒ 两段:
+ *  · **写**(装配期):resolve-spec 每次提交(fresh 与 resume 腿同经)经 {@link createAssemblyIncarnationRead} 造的读口异步读一次会话面,
+ *    记进本副本的 per-session 登记簿(`boot/execution-env.ts` 的 `noteSessionIncarnation`,与 cwd / shellEnv 同一只 LRU、同一条围栏、
+ *    同一条删除);
+ *  · **读**(运行期):{@link createMemorySessionIncarnationSeat} 从登记簿同步取。
+ *
+ * ## 读口缺席是装配期事实(合并复审 F2)
+ * 「会话店有没有 `sessionFaceOf`」由 {@link sessionFaceReaderOf} 判,resolve-spec 与 runner-deps 读同一只:缺席(内存会话店 /
+ * 多租户裸 boot / 降级到内存的副本)⇒ resolve-spec **构造时** warn 一次、请求路径上不再判不再打;记忆座不装(恒答 undefined 的座与不装
+ * 同义,core 按 id 绑定 = 修前行为)。修前是每一次提交打一行。
+ *
+ * ## 读不到的臂([ref]:响亮,不静默)
+ * 会话不在 / 读口抛(含空化身的响亮拒)⇒ 这一轮没有化身 ⇒ 座答 `undefined`(core 口径:按 id 绑定 —— 今天的行为,且是**保守**方向:
+ * 上一位住客的 opt-out / 污染标记仍会约束这一位,不会让任何一条被放过)+ warn,**按会话去重**(同一只会话连着读不到只说一次,读到了再
+ * 读不到重新说)。没有「读不到就沿用上次」的臂:装配期读失败会把登记簿那一格**清掉**,座随之答 undefined。
+ *
+ * ## 令牌不出本进程的内存
+ * 不上 wire、不进模型上下文;warn 行只带会话 id —— 缺席的那一臂根本没有令牌可打。
+ */
+import type { RunnerDeps } from "@sema-agent/core";
+import type { SessionFaceReader } from "../session-incarnation.js";
+/** warn 口(logger 的子集)。 */
+type Warn = (event: string, fields: Record<string, unknown>) => void;
+/** 会话店的「属主 + 化身」读口 —— 装配期判一次(resolve-spec 与 runner-deps 读同一只,判据不各写一份)。缺席 = 这只会话店没有它。 */
+export declare function sessionFaceReaderOf(store: unknown): SessionFaceReader | undefined;
+/**
+ * 装配期化身读口(resolve-spec **构造时**建一次)。读口缺席 ⇒ 当场 warn 一次、返回 `undefined`(请求路径上不再判不再打);
+ * 在场 ⇒ 返回一只读:读到 ⇒ 化身;会话不在 / 读抛 ⇒ `undefined` + 按会话去重的 warn。不抛:这是记忆座的输入,不是提交的准入门
+ * (提交的属主门在 authorizer;读失败的那一格由座答 undefined 兜成保守绑定)。
+ */
+export declare function createAssemblyIncarnationRead(read: SessionFaceReader | undefined, warn: Warn): ((sessionId: string) => Promise<string | undefined>) | undefined;
+/**
+ * `RunnerDeps.memorySessionIncarnation` 的同步座:从本副本的 per-session 登记簿取装配期读数。缺席 ⇒ `undefined` + 每个会话一行 warn。
+ * 命名照工厂律:返回的是带行为的闭包 ⇒ `create*`。
+ */
+export declare function createMemorySessionIncarnationSeat(incarnationOf: (sessionId: string) => string | undefined, warn: Warn): NonNullable<RunnerDeps["memorySessionIncarnation"]>;
+export {};
+//# sourceMappingURL=session-incarnation-seat.d.ts.map

package/dist/boot/session-incarnation-seat.js

@@ -0,0 +1,69 @@
+const MISS_WARNED_MAX = 4096;
+export function sessionFaceReaderOf(store) {
+    const s = store;
+    return typeof s?.sessionFaceOf === "function" ? s.sessionFaceOf.bind(s) : undefined;
+}
+function createPerSessionWarn(warn) {
+    const warned = new Set();
+    return {
+        once(sessionId, fields) {
+            if (warned.has(sessionId))
+                return;
+            if (warned.size >= MISS_WARNED_MAX)
+                warned.clear();
+            warned.add(sessionId);
+            warn("session_incarnation_unavailable", { sessionId, ...fields });
+        },
+        clear(sessionId) {
+            warned.delete(sessionId);
+        },
+    };
+}
+export function createAssemblyIncarnationRead(read, warn) {
+    if (read === undefined) {
+        warn("session_incarnation_unavailable", {
+            reason: "no_session_face_read",
+            note: "this deployment's session store has no sessionFaceOf read (an in-memory session store) — session incarnations are not read and memory records bind by id alone; stated once at assembly",
+        });
+        return undefined;
+    }
+    const perSession = createPerSessionWarn(warn);
+    return async (sessionId) => {
+        try {
+            const face = await read(sessionId);
+            if (face === undefined) {
+                perSession.once(sessionId, { reason: "session_absent", note: "no session row at assembly — memory records for this session bind by id alone this run" });
+                return undefined;
+            }
+            perSession.clear(sessionId);
+            return face.incarnation;
+        }
+        catch (e) {
+            const code = e?.code;
+            perSession.once(sessionId, {
+                reason: typeof code === "string" ? code : "read_failed",
+                note: "the session face could not be read at assembly — memory records for this session bind by id alone this run",
+            });
+            return undefined;
+        }
+    };
+}
+export function createMemorySessionIncarnationSeat(incarnationOf, warn) {
+    const warned = new Set();
+    return ({ sessionId }) => {
+        const incarnation = incarnationOf(sessionId);
+        if (incarnation !== undefined)
+            return incarnation;
+        if (!warned.has(sessionId)) {
+            if (warned.size >= MISS_WARNED_MAX)
+                warned.clear();
+            warned.add(sessionId);
+            warn("memory_session_incarnation_unknown", {
+                sessionId,
+                note: "no incarnation was read for this session on this replica (not assembled here, or its read failed) — the memory engine binds this session's records by id alone",
+            });
+        }
+        return undefined;
+    };
+}
+//# sourceMappingURL=session-incarnation-seat.js.map

package/dist/boot/stage-01-config.js

@@ -1,6 +1,6 @@
 import { homedir } from "node:os";
-import { join } from "node:path";
 import { loadConfig, logConfigDiagnostics, splitLocalRoots } from "../config.js";
+import { configLocalRoot } from "../config-provider.js";
 import { crossInvariant } from "../config-invariants.js";
 import { drainNumEnvWarnings } from "../plugins/remote-shell.js";
 import { setWebSearchBadPayloadObserver } from "../plugins/web-search.js";
@@ -44,7 +44,7 @@ export function runStage01() {
         else
             logger.info("run_failed", fields);
     });
-    const localRoot = config.configLocalDir ?? process.env.AGENT_DATA_DIR ?? join(homedir(), ".ai-agent");
+    const localRoot = configLocalRoot(config);
     const rootsSplit = splitLocalRoots({
         localDataRoot: config.localDataRoot,
         configLocalDir: config.configLocalDir,

package/dist/boot/stage-02-registry-pull.js

@@ -1,8 +1,11 @@
 import { createUnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import { createConfigCenterRuntime } from "./config-center.js";
+import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
+import { serviceConfigSourceKind } from "../config-provider.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "../model-entry-refusal.js";
 export async function runStage02(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
+    await composeExecutionLane(config, { configSource: serviceConfigSourceKind(config), localRoot, logger, drivesFromFile: FILE_SOURCED_LANES });
     const configCenter = await createConfigCenterRuntime({ config, logger, metrics, localRoot });
     const noDefaultModel = defaultModelRefusal(config, "env");
     if (noDefaultModel !== undefined) {
@@ -12,7 +15,6 @@ export async function runStage02(ctx) {
     if (mintedRefused !== undefined) {
         throw new Error(mintedRefused);
     }
-    await configCenter.applyLocalRemoteExec();
     const ceilingVerdict = createUnpricedCeilingVerdict({ config, logger });
     ceilingVerdict.judge();
     return { ...ctx, ceilingVerdict, configCenter };

package/dist/boot/stage-04-stores.d.ts

@@ -1,6 +1,8 @@
 import type { runStage03 } from "./stage-03-store-backend.js";
 export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>): Promise<{
     brain: import("@sema-agent/core").Brain;
+    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
+    consolidationValve: import("./memory-consolidation.js").ConsolidationValve;
     costQuota: import("../observability/cost-quota.js").CostQuota | import("../plugins/pg-cost-quota.js").PgCostQuota | import("../plugins/tidb-cost-quota.js").TiDBCostQuota;
     degradeRouteWatch: import("../brain.js").DegradeRouteWatch;
     counterDegradeHook: (info: {

package/dist/boot/stage-04-stores.js

@@ -5,6 +5,7 @@ import { runAdoptionBootScan } from "./adoption.js";
 import { auditDormantPermissionRules } from "./permission-rules-audit.js";
 import { createBudgetAndTracing } from "./budget-tracing.js";
 import { createRuleConsentLane } from "../rules-consent.js";
+import { createConsolidationValve } from "./memory-consolidation.js";
 export async function runStage04(ctx) {
     const { backend, breakerState, config, logger, memoryEngine, metrics, sessionCaptureRecordStore } = ctx;
     const memoryBundleFaces = memoryEngine ? createMemoryBundleFaces(memoryEngine, { ...(sessionCaptureRecordStore !== undefined ? { captureRecordStore: sessionCaptureRecordStore } : {}) }) : undefined;
@@ -23,6 +24,7 @@ export async function runStage04(ctx) {
     const sessionMemoryStatusFace = memoryEngine
         ? createSessionMemoryStatusFace(memoryEngine, { ...(sessionCaptureRecordStore !== undefined ? { captureRecordStore: sessionCaptureRecordStore } : {}) })
         : undefined;
+    const { valve: consolidationValve, watch: consolidationSeatWatch } = createConsolidationValve({ config, memoryEngine, logger });
     const adoptionBoot = await runAdoptionBootScan({ backend, logger });
     if (adoptionBoot.scanned > 0 || adoptionBoot.error !== undefined) {
         logger.info("adoption_boot_scan", { ...adoptionBoot });
@@ -44,6 +46,6 @@ export async function runStage04(ctx) {
         });
     }
     await auditDormantPermissionRules({ stores: permissionRuleStores, logger, explicit: config.permissionRulesEnabledExplicit });
-    return { ...ctx, brain, costQuota, degradeRouteWatch, counterDegradeHook, fileHistoryErasure, fileHistoryStore, fleetLease, fleetUsage, memoryBundleFaces, memoryComplianceFaces, memoryOriginFaces, modelUsageTracker, permissionRuleProvider, permissionRuleStores, pricing, promptManifestTracker, ruleConsent, sessionMemoryStatusFace, sessionPolicyStore, sideQueryAccounting, toolResultStore, tracer };
+    return { ...ctx, brain, consolidationSeatWatch, consolidationValve, costQuota, degradeRouteWatch, counterDegradeHook, fileHistoryErasure, fileHistoryStore, fleetLease, fleetUsage, memoryBundleFaces, memoryComplianceFaces, memoryOriginFaces, modelUsageTracker, permissionRuleProvider, permissionRuleStores, pricing, promptManifestTracker, ruleConsent, sessionMemoryStatusFace, sessionPolicyStore, sideQueryAccounting, toolResultStore, tracer };
 }
 //# sourceMappingURL=stage-04-stores.js.map

package/dist/boot/stage-05-execution-env.d.ts

@@ -6,14 +6,18 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
+    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
+    sessionIncarnationOf: (sid: string) => string | undefined;
     setSessionCwd: (sid: string, cwd: string) => void;
     setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
+    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
+    consolidationValve: import("./memory-consolidation.js").ConsolidationValve;
     costQuota: import("../observability/cost-quota.js").CostQuota | import("../plugins/pg-cost-quota.js").PgCostQuota | import("../plugins/tidb-cost-quota.js").TiDBCostQuota;
     degradeRouteWatch: import("../brain.js").DegradeRouteWatch;
     counterDegradeHook: (info: {

package/dist/boot/stage-05-execution-env.js

@@ -5,7 +5,7 @@ import { createExecutionEnv } from "./execution-env.js";
 export function runStage05(ctx) {
     const { backend, config, instanceId, logger, metrics, taskAttachmentStore } = ctx;
     const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, replicaId: instanceId }) : undefined;
-    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}) });
+    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, dropSessionScoped, noteSessionIncarnation, sessionIncarnationOf, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}) });
     assertDeviceLaneWired(config.remoteExec?.provider === "device", deviceLane, executionEnvFactory !== undefined);
     const toolTracer = config.toolTrace ? createToolTracer(logger) : undefined;
     if (toolTracer)
@@ -14,6 +14,6 @@ export function runStage05(ctx) {
         ...(toolTracer ? composeHooks(createPermissionDeniedMeter(metrics), toolTracer) : createPermissionDeniedMeter(metrics)),
         ...(config.hooksTimeoutMs !== undefined ? { timeoutMs: config.hooksTimeoutMs } : {}),
     };
-    return { ...ctx, deploymentHooks, deviceLane, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionShellEnv, worktreeReap };
+    return { ...ctx, deploymentHooks, deviceLane, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, noteSessionIncarnation, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, sessionIncarnationOf, setSessionCwd, setSessionShellEnv, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map

package/dist/boot/stage-06-runners.d.ts

@@ -13,7 +13,6 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;
     checkpointStore: import("../plugins/store-backend.js").CheckpointStoreFull | undefined;
-    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
     durableEnabled: boolean;
     elicitation: import("../elicitation.js").ElicitationCoordinator | undefined;
     fleetBus: import("../fleet/fleet-bus.js").FleetEventBus;
@@ -67,14 +66,18 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
+    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
+    sessionIncarnationOf: (sid: string) => string | undefined;
     setSessionCwd: (sid: string, cwd: string) => void;
     setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
+    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
+    consolidationValve: import("./memory-consolidation.js").ConsolidationValve;
     costQuota: import("../observability/cost-quota.js").CostQuota | import("../plugins/pg-cost-quota.js").PgCostQuota | import("../plugins/tidb-cost-quota.js").TiDBCostQuota;
     degradeRouteWatch: import("../brain.js").DegradeRouteWatch;
     counterDegradeHook: (info: {

package/dist/boot/stage-06-runners.js

@@ -7,10 +7,9 @@ import { withoutExecutionEnv } from "../capabilities/hands-lane.js";
 import { redactSecrets } from "../trace/redact.js";
 import { hasServiceAuth } from "../http/server.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
-import { backendOwnsControlPlane } from "../memory-operator-faces.js";
 import { createHookLlm, buildHookFailureText } from "../hooks/hook-llm.js";
 import { assertRetentionLaneWirable } from "./retention-lane.js";
-import { assertConsolidationDriverWirable, buildConsolidationValveAudit, createConsolidationSeatWatch, createMemoryConsolidationFaces, resolveConsolidationDriverSeat } from "./memory-consolidation.js";
+import { buildConsolidationValveAudit, createMemoryConsolidationFaces, resolveConsolidationDriverSeat } from "./memory-consolidation.js";
 import { createPerModelAuthSeat } from "./side-query-lane.js";
 import { createWorkflowOrchestration } from "./workflow-orchestration.js";
 import { createLiveCoordinators } from "./coordinators.js";
@@ -22,7 +21,7 @@ import { createGovernanceSeams } from "./governance-seams.js";
 import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-authorizer.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 export function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, config, configCenter, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, sessionIncarnationOf, config, configCenter, consolidationValve, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const { elicitation, question, toolApproval, durableEnabled, streamApprovalGate, approvalAskAudit, sendUserFileEmitter, sendFileLedger, sendUserFileToolSpec } = createLiveCoordinators({
         config, logger, backend, sendUserFileTaskEnvs, ruleConsent,
@@ -56,14 +55,7 @@ export function runStage06(ctx) {
         ],
         locked: (config.lockedConfigKeys ?? []).includes("retentionPolicy"),
     });
-    assertConsolidationDriverWirable({
-        enabled: config.memoryConsolidationDriver.enabled,
-        memoryEngineWired: memoryEngine !== undefined,
-        controlPlaneOwned: backendOwnsControlPlane(memoryEngine?.backend),
-        memoryEngineBackend: config.memoryEngineBackend,
-        ...(config.memoryProvenance !== undefined ? { provenance: config.memoryProvenance } : {}),
-    });
-    const consolidationSeat = config.memoryConsolidationDriver.enabled && memoryEngine
+    const consolidationSeat = consolidationValve.enabled && memoryEngine
         ? resolveConsolidationDriverSeat({
             brain,
             models: config.models,
@@ -72,7 +64,6 @@ export function runStage06(ctx) {
             getApiKeyAndHeaders: createPerModelAuthSeat(() => configCenter.getKeyResolver()),
         })
         : undefined;
-    const consolidationSeatWatch = consolidationSeat ? createConsolidationSeatWatch(() => ({ models: config.models, tiers: config.tiers, roles: config.roles })) : undefined;
     const memoryConsolidationFaces = consolidationSeat && memoryEngine
         ? createMemoryConsolidationFaces(memoryEngine, {
             seat: consolidationSeat,
@@ -84,7 +75,7 @@ export function runStage06(ctx) {
         })
         : undefined;
     for (const w of buildConsolidationValveAudit({
-        enabled: config.memoryConsolidationDriver.enabled,
+        valve: consolidationValve,
         operatorPrincipals: config.operatorPrincipals,
         hasServiceAuth: hasServiceAuth(config),
         allowUnauthedWrites: config.allowUnauthedWrites ?? false,
@@ -93,6 +84,7 @@ export function runStage06(ctx) {
     }
     if (memoryConsolidationFaces !== undefined) {
         logger.info("memory_consolidation_driver_armed", {
+            valve: consolidationValve.source,
             seat: memoryConsolidationFaces.seat,
             model: memoryConsolidationFaces.model,
             scopes: memoryConsolidationFaces.scopes,
@@ -118,6 +110,7 @@ export function runStage06(ctx) {
         hands: commitHands,
         mcpRevocations,
         sessionShellGateExplicitlyOff: sessionShellGateRegistry.explicitlyOff,
+        sessionIncarnationOf,
         config, logger, metrics, localRoot, promptSource: configCenter.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
         pricing, tracer, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine,
         sessionCaptureRecords,
@@ -212,6 +205,6 @@ export function runStage06(ctx) {
     };
     const subRunner = new Runner(subRunnerDeps);
     const handslessSubRunner = new Runner(withoutExecutionEnv(subRunnerDeps));
-    return { ...ctx, approvalAskAudit, centerRuntimeCapsResolver, checkpointStore, consolidationSeatWatch, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, handslessSubRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekResolver, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionShellGateRegistry, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subRunnerSessions, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable };
+    return { ...ctx, approvalAskAudit, centerRuntimeCapsResolver, checkpointStore, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, handslessSubRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekResolver, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionShellGateRegistry, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subRunnerSessions, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable };
 }
 //# sourceMappingURL=stage-06-runners.js.map

package/dist/boot/stage-07-capability-layer.d.ts

@@ -27,7 +27,6 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;
     checkpointStore: import("../plugins/store-backend.js").CheckpointStoreFull | undefined;
-    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
     durableEnabled: boolean;
     elicitation: import("../elicitation.js").ElicitationCoordinator | undefined;
     fleetBus: import("../fleet/fleet-bus.js").FleetEventBus;
@@ -81,14 +80,18 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
+    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
+    sessionIncarnationOf: (sid: string) => string | undefined;
     setSessionCwd: (sid: string, cwd: string) => void;
     setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
+    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
+    consolidationValve: import("./memory-consolidation.js").ConsolidationValve;
     costQuota: import("../observability/cost-quota.js").CostQuota | import("../plugins/pg-cost-quota.js").PgCostQuota | import("../plugins/tidb-cost-quota.js").TiDBCostQuota;
     degradeRouteWatch: import("../brain.js").DegradeRouteWatch;
     counterDegradeHook: (info: {

package/dist/boot/stage-08-reapers.d.ts

@@ -40,7 +40,6 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;
     checkpointStore: import("../plugins/store-backend.js").CheckpointStoreFull | undefined;
-    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
     durableEnabled: boolean;
     elicitation: import("../elicitation.js").ElicitationCoordinator | undefined;
     fleetBus: import("../fleet/fleet-bus.js").FleetEventBus;
@@ -94,14 +93,18 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
+    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
+    sessionIncarnationOf: (sid: string) => string | undefined;
     setSessionCwd: (sid: string, cwd: string) => void;
     setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
+    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
+    consolidationValve: import("./memory-consolidation.js").ConsolidationValve;
     costQuota: import("../observability/cost-quota.js").CostQuota | import("../plugins/pg-cost-quota.js").PgCostQuota | import("../plugins/tidb-cost-quota.js").TiDBCostQuota;
     degradeRouteWatch: import("../brain.js").DegradeRouteWatch;
     counterDegradeHook: (info: {