@sema-agent/server 7.125.1 → 7.126.0

package/dist/boot/execution-env.js

@@ -10,8 +10,9 @@ import { adbExecutionEnvFactory } from "../plugins/remote-env-adb.js";
 import { deviceExecutionEnvFactory } from "../plugins/remote-env-device.js";
 import { e2bExecutionEnvFactory } from "../plugins/remote-env-e2b.js";
 import { hostExecutionEnvFactory, RemoteHostExecutionEnv } from "../plugins/remote-env-host.js";
-import { k8sExecutionEnvFactory } from "../plugins/remote-env-k8s.js";
+import { createSpaceReclaimer, k8sExecutionEnvFactory } from "../plugins/remote-env-k8s.js";
 import { createRunWorkspaceSnapshotSeat } from "../fleet/workspace-snapshot-residual.js";
+import { createSpaceCommitFence } from "../workspace-space-commit.js";
 import { localDockerExecutionEnvFactory } from "../plugins/remote-env-local-docker.js";
 import { sshExecutionEnvFactory } from "../plugins/remote-env-ssh.js";
 import { isRemoteScratchpadLane, withRemoteScratchpad } from "../plugins/remote-scratchpad.js";
@@ -22,6 +23,7 @@ import { reapOrphanWorktrees, withWorktreeIsolation } from "../plugins/worktree-
 import { customPkgSourceFromEnv, derivePkgSourceEnv } from "../sandbox-pkg-source.js";
 import { effectiveHostWorkspace } from "../task-cwd.js";
 import { taskInheritEnvRefusal } from "../hosted-posture.js";
+import { workspaceSnapshotTimeoutOf } from "../workspace-space.js";
 import { isSandboxPathAdjudicationLane, sandboxPathEnvSlots, withSandboxPathEnvSlot } from "./deferred-sandbox-path-env.js";
 import { REMOTE_EXEC_PROVIDER_WORDS, executionLaneHomeDir, executionLaneOf, isSingleMachineDefaultLane, laneIsolated } from "../execution-lane-caps.js";
 function boundedSessionSetter(map, maxEntries) {
@@ -35,10 +37,10 @@ function boundedSessionSetter(map, maxEntries) {
 function forwardedSandboxEnvKeys(remoteExec) {
     switch (remoteExec.provider) {
         case "e2b":
+        case "k8s":
             return Object.keys(remoteExec.sandboxEnv ?? {}).sort();
         case "local-docker":
             return Object.keys(remoteExec.env ?? {}).sort();
-        case "k8s":
         case "ssh":
         case "adb":
         case "host":
@@ -50,18 +52,20 @@ function forwardedSandboxEnvKeys(remoteExec) {
         }
     }
 }
+function buildSandboxLaneEnv(config, explicit) {
+    const merged = { ...derivePkgSourceEnv(config.sandboxPkgSource, customPkgSourceFromEnv()), ...(explicit ?? {}) };
+    return Object.keys(merged).length > 0 ? merged : undefined;
+}
 const MAX_CWD_SESSIONS = 4096;
 export function createSessionScopedRegistries(maxEntries = MAX_CWD_SESSIONS) {
     const perSessionCwd = new Map();
     const perSessionShellEnv = new Map();
     const perSessionInheritEnv = new Map();
-    const perSessionIncarnation = new Map();
     const owners = new Map();
     const dropSession = (sid) => {
         perSessionCwd.delete(sid);
         perSessionShellEnv.delete(sid);
         perSessionInheritEnv.delete(sid);
-        perSessionIncarnation.delete(sid);
         owners.delete(sid);
     };
     const touch = (sid, owner) => {
@@ -96,40 +100,71 @@ export function createSessionScopedRegistries(maxEntries = MAX_CWD_SESSIONS) {
                 perSessionCwd.delete(sid);
                 perSessionShellEnv.delete(sid);
                 perSessionInheritEnv.delete(sid);
-                perSessionIncarnation.delete(sid);
             }
             touch(sid, owner);
         },
         dropSession,
-        noteSessionIncarnation: (sid, incarnation) => {
-            if (incarnation === undefined) {
-                perSessionIncarnation.delete(sid);
-                return;
-            }
-            perSessionIncarnation.set(sid, incarnation);
-            touch(sid, undefined);
-        },
-        sessionIncarnationOf: (sid) => perSessionIncarnation.get(sid),
     };
 }
 export function createK8sRunEnvFactory(k8sCfg, seats, deps) {
-    return (ctx) => {
-        const incarnation = seats.incarnationOf(ctx.sessionId);
+    return async (ctx) => {
+        const onWorkspaceSnapshot = createRunWorkspaceSnapshotSeat(ctx.sessionId);
+        const child = ctx.placementRootSessionId !== ctx.sessionId;
+        const s3Snapshot = child && k8sCfg.s3Snapshot !== undefined ? spaceOff(k8sCfg.s3Snapshot) : k8sCfg.s3Snapshot;
+        const spaceOccupant = child ? undefined : await occupantOf(seats, ctx.sessionId, ctx.taskId);
+        const { cache, ...deploymentCfg } = k8sCfg;
         return k8sExecutionEnvFactory({
-            ...k8sCfg,
+            ...deploymentCfg,
+            ...(cache !== undefined && !child ? { cache } : {}),
+            ...(s3Snapshot !== undefined ? { s3Snapshot } : {}),
             image: seats.imageOf(ctx.sessionId) ?? k8sCfg.image,
-            ...(incarnation !== undefined ? { spaceIncarnation: incarnation } : {}),
-            onWorkspaceSnapshot: createRunWorkspaceSnapshotSeat(ctx.sessionId),
+            ...(spaceOccupant !== undefined ? { spaceOccupant } : {}),
+            onWorkspaceSnapshot,
         }, deps)(ctx);
     };
 }
-export function assertWorkspaceSpaceReadable(space, sessionFaceRead, sessionStoreLabel) {
-    if (!space.available || !persistNeedsOccupant(space.policy.persist) || sessionFaceRead !== undefined)
+const STORE_ERROR_CODE = /^[A-Za-z0-9_.:-]{1,64}$/;
+async function occupantOf(seats, sessionId, taskId) {
+    let answer;
+    try {
+        answer = await seats.incarnationOf?.(sessionId);
+    }
+    catch (e) {
+        const code = e?.code;
+        return { fault: typeof code === "string" && STORE_ERROR_CODE.test(code) ? code : "incarnation_read_failed" };
+    }
+    if (answer === undefined)
+        return { unread: "incarnation_unknown" };
+    if (typeof answer !== "string" || answer === "")
+        return { fault: "incarnation_read_failed" };
+    const rows = seats.spaceCommits();
+    return rows !== undefined ? { incarnation: answer, fence: createSpaceCommitFence(rows, answer, taskId) } : { unread: "incarnation_unknown" };
+}
+function spaceOff(store) {
+    const { space: _off, ...parkOnly } = store;
+    return parkOnly;
+}
+export function assertWorkspaceSpaceReadable(space, seats, cache, sessionStoreLabel) {
+    if (space.available && persistNeedsOccupant(space.policy.persist)) {
+        const missing = seats.incarnationOf === undefined ? `the session store (${sessionStoreLabel}) has no by-id occupant read (incarnationOf)`
+            : seats.spaceCommits === undefined ? `this deployment has no store backend to hold the space's commit rows (the session store is ${sessionStoreLabel})`
+                : undefined;
+        if (missing === undefined)
+            return;
+        throw new Error(`WORKSPACE_PERSIST=space but ${missing} [workspace-space-unreadable]: ` +
+            "the k8s workspace space is partitioned by the session occupant and committed under a run-store row, so here no run would restore or save " +
+            '/workspace while GET /v1/capabilities.workspaceSync reports persist "space". Use a store backend (DB_BACKEND=local or DB_BACKEND=mysql|pg; ' +
+            "DB_BACKEND=memory has none), or set WORKSPACE_PERSIST=off (the default is space), and restart");
         return;
-    throw new Error(`WORKSPACE_PERSIST=space but the session store is ${sessionStoreLabel}, which has no session occupant read (sessionFaceOf) [workspace-space-unreadable]: ` +
-        "the k8s workspace space is partitioned by the session occupant, so on this store no run would restore or save /workspace while " +
-        'GET /v1/capabilities.workspaceSync reports persist "space". Use a session store with that read (DB_BACKEND=local, or DB_BACKEND=mysql|pg ' +
-        "with SESSION_BACKEND not memory), or drop WORKSPACE_PERSIST=space (the default is off), and restart");
+    }
+    if (cache.available && (seats.incarnationOf === undefined || seats.spaceCommits === undefined)) {
+        const missing = seats.incarnationOf === undefined
+            ? `the session store (${sessionStoreLabel}) has no by-id occupant read (incarnationOf)`
+            : `this deployment has no store backend to hold the space durably (the session store is ${sessionStoreLabel})`;
+        throw new Error(`WORKSPACE_CACHE=volume but ${missing} [workspace-space-unreadable]: ` +
+            "the k8s build-cache volume belongs to the workspace space, which is keyed by the session occupant, so here no run would get its volume while " +
+            "GET /v1/capabilities.workspaceSync reports cache. Use a store backend (DB_BACKEND=local or DB_BACKEND=mysql|pg; DB_BACKEND=memory has none), or set WORKSPACE_CACHE=off, and restart");
+    }
 }
 function persistNeedsOccupant(persist) {
     switch (persist) {
@@ -158,6 +193,7 @@ export function createExecutionEnv(ctx) {
     const { perSessionShellEnv, setSessionShellEnv } = sessionScoped;
     const { perSessionInheritEnv, setSessionInheritEnv } = sessionScoped;
     let executionEnvFactory;
+    let spaceReclaimer;
     let worktreeReap;
     if (config.remoteExec?.provider === "e2b") {
         executionEnvFactory = e2bExecutionEnvFactory({
@@ -168,10 +204,7 @@ export function createExecutionEnv(ctx) {
             ...(config.remoteExec.livenessMs != null ? { livenessMs: config.remoteExec.livenessMs } : {}),
             ...(config.remoteExec.allowInternetAccess != null ? { allowInternetAccess: config.remoteExec.allowInternetAccess } : {}),
             ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
-            ...(() => {
-                const merged = { ...derivePkgSourceEnv(config.sandboxPkgSource, customPkgSourceFromEnv()), ...(config.remoteExec.sandboxEnv ?? {}) };
-                return Object.keys(merged).length > 0 ? { sandboxEnv: merged } : {};
-            })(),
+            ...((env) => (env !== undefined ? { sandboxEnv: env } : {}))(buildSandboxLaneEnv(config, config.remoteExec.sandboxEnv)),
             logger,
             metrics,
         });
@@ -188,16 +221,18 @@ export function createExecutionEnv(ctx) {
             ...(config.remoteExec.runtimeClass != null ? { runtimeClass: config.remoteExec.runtimeClass } : {}),
             ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
             ...(config.remoteExec.timeoutMs != null ? { timeoutMs: config.remoteExec.timeoutMs } : {}),
+            dataTimeoutMs: workspaceSnapshotTimeoutOf(config.remoteExec),
             ...(config.remoteExec.memory ? { memory: config.remoteExec.memory } : {}),
             ...(config.remoteExec.cpu ? { cpu: config.remoteExec.cpu } : {}),
-            ...(config.remoteExec.s3Snapshot ? { s3Snapshot: { ...config.remoteExec.s3Snapshot, ...((f) => (f.available ? { space: f.policy } : {}))(facts.workspaceSpace(config)) } } : {}),
+            ...(config.remoteExec.s3Snapshot ? { s3Snapshot: { ...config.remoteExec.s3Snapshot, ...((f) => (f.available ? { space: { persist: f.policy.persist, keep: f.policy.keep } } : {}))(facts.workspaceSpace(config)) } } : {}),
+            ...((f) => (f.available ? { cache: f.cache } : {}))(facts.workspaceCache(config)),
+            ...(config.remoteExec.workspaceSnapshotExclude ? { snapshotExclude: config.remoteExec.workspaceSnapshotExclude } : {}),
             logger,
-            ...(() => {
-                const derived = derivePkgSourceEnv(config.sandboxPkgSource, customPkgSourceFromEnv());
-                return Object.keys(derived).length > 0 ? { podEnv: derived } : {};
-            })(),
+            ...((env) => (env !== undefined ? { podEnv: env } : {}))(buildSandboxLaneEnv(config, config.remoteExec.sandboxEnv)),
         };
-        executionEnvFactory = createK8sRunEnvFactory(k8sCfg, { imageOf: (sid) => perTaskImage.get(sid), incarnationOf: sessionScoped.sessionIncarnationOf });
+        executionEnvFactory = createK8sRunEnvFactory(k8sCfg, { imageOf: (sid) => perTaskImage.get(sid), incarnationOf: ctx.incarnationOf, spaceCommits: ctx.spaceCommits ?? (() => undefined) });
+        if (k8sCfg.cache !== undefined || k8sCfg.s3Snapshot !== undefined)
+            spaceReclaimer = createSpaceReclaimer(k8sCfg);
     }
     else if (config.remoteExec?.provider === "ssh") {
         executionEnvFactory = sshExecutionEnvFactory({
@@ -384,9 +419,7 @@ export function createExecutionEnv(ctx) {
         perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv,
         fenceSessionOwner: sessionScoped.fenceSessionOwner,
         dropSessionScoped: sessionScoped.dropSession,
-        noteSessionIncarnation: sessionScoped.noteSessionIncarnation,
-        sessionIncarnationOf: sessionScoped.sessionIncarnationOf,
-        executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager,
+        executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer,
     };
 }
 //# sourceMappingURL=execution-env.js.map

package/dist/boot/memory-boundary.d.ts

@@ -75,7 +75,7 @@ import type { MemoryEngineBackend } from "@sema-agent/settings-schema/execution-
  * 而且它断言的是 per-task 事实,不是本键的车道级语义。
  *
  * ## 位置与纪律
- * 单源:resolve-spec 的 spec 直通、`shouldDiscloseNoPersistentMemory` 判别式、boot 审计的 declared 位
+ * 单源:resolve-spec 的 spec 直通、`noPersistentMemoryNotice` 判别式、boot 审计的 declared 位
  * 三处都必须读本函数,禁各自重算(operator-knob 律:显式 env 的优先权在这一个函数里执法一次)。
  * 自动补位在 boot 日志上必须可见(stores.ts 的 info 行),部署方随时可用显式 env 覆盖。
  */

package/dist/boot/parked-revive-gate.d.ts

@@ -72,9 +72,6 @@ export interface ParkedReviveGateDeps {
     };
     /** host 腿 cwd 占位的落地根(main.ts 的 `localRoot`;`config.localDataRoot` 优先)。 */
     readonly localRoot: string;
-    /** S-133:守卫集 `dataRoot` = boot 已铸的引擎记忆根(`memoryEngine.root`,boot/stores.ts 单一写者),不在本腿重推导
-     *  (重推导 = 第二个写者,7.59.0 重扫 codex 轮抓到 HTTP 腿 fallback 与 stores 不同源正是这一形)。`undefined` = 引擎未接。 */
-    readonly memoryEngineRoot: string | undefined;
     /** 沙箱 lane 的真 env 登记簿。缺省 = 进程内唯一那只(工厂装饰器写的同一个);测试注入自建实例。 */
     readonly slots?: SandboxPathEnvSlots;
 }

package/dist/boot/parked-revive-gate.js

@@ -11,7 +11,7 @@ function hostGateCwd(config, localRoot) {
     return join(config.localDataRoot ?? localRoot, "parked-revive-unrooted");
 }
 export function createParkedReviveInheritedGate(deps) {
-    const { config, question, approvalExemptionStore, logger, localRoot, approverSeat, memoryEngineRoot } = deps;
+    const { config, question, approvalExemptionStore, logger, localRoot, approverSeat } = deps;
     const slots = deps.slots ?? sandboxPathEnvSlots;
     return async (row, identity) => {
         const metadata = await chainMetadataOf(deps, row, identity);
@@ -33,7 +33,7 @@ export function createParkedReviveInheritedGate(deps) {
             question,
             ...(approvalExemptionStore !== undefined && rootSessionId ? { exemption: createDeploymentListExemption(approvalExemptionStore, rootSessionId, logger, "parked_revive") } : {}),
         });
-        const governed = applyRuntimeGovernance({ objective: "", toolPolicy: baseline }, createDeploymentGovernanceInputs(config, pathAdjudication, { engineDataRoot: memoryEngineRoot }));
+        const governed = applyRuntimeGovernance({ objective: "", toolPolicy: baseline }, createDeploymentGovernanceInputs(config, pathAdjudication));
         return {
             parentConstraints: [
                 {

package/dist/boot/resolve-spec.d.ts

@@ -39,8 +39,6 @@ export interface ResolveSpecCtx {
     /** 两张 per-session 登记簿的**租户围栏**(codex R1-F1):每次提交对拍本会话的主人,换主即清。
      *  论证(为什么 device lane 把这条从「不需要」变成「必需」)逐字见 `createSessionScopedRegistries` 头注。 */
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    /** S-506([ref] §5):装配期化身读数的写腿(per-session 登记簿,与围栏同一只;记忆座同步从那里读)。 */
-    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
     hookLlm: ReturnType<typeof createHookLlm>["hookLlm"];
     hookAgent: HookLlmCall;
     fleetBus: FleetEventBus;

package/dist/boot/resolve-spec.js

@@ -7,7 +7,7 @@ import { SessionEnvironmentSelection, selectEnvironmentTool } from "../capabilit
 import { sendUserFileTool } from "../capabilities/send-user-file-tool.js";
 import { gateScenarioRequest, mergeUserSkills, selectScenario } from "../capabilities/scenarios.js";
 import { stampHandsLane, toolPolicyForHands } from "../capabilities/hands-lane.js";
-import { buildNoticeLaneFacts, shouldDiscloseNoPersistentMemory, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
+import { buildNoticeLaneFacts, noPersistentMemoryNotice, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
 import { applyLongtailDefer } from "../capabilities/tool-defer.js";
 import { assertGuardPatternsUsable, buildApprovalGrantNotice, buildOnlySensitiveBaselineWarning, createApprovalBaselinePolicy, createDeploymentGovernanceInputs } from "../deployment-governance.js";
 import { createDeploymentListExemption, gateIntentUnserviceableReason, singleUserAutoAcceptBaselineApplies } from "../approval.js";
@@ -31,25 +31,23 @@ import { HttpError, createCodedHttpError, encodeCheckpointScope } from "../secur
 import { memoryProjectKeyFor, memorySpecForRequest } from "../memory-scope.js";
 import { inheritEnvFieldIssue, singleMemberOffFieldIssue } from "../request-value-closure.js";
 import { a2aForScenario, mcpForScenario } from "../web-admin-client/facade.js";
-import { normalizeAttachments, normalizeResilience, normalizeResumeAtMode, normalizeSuggestNextPrompts, promptProfileFromBody, resolveTaskLimits, retainBackgroundProcessesFromBody, taskAgentsSpecFragment, toolMaterializeStrategyFromBody, toolNameListFromBody } from "../spec-fields.js";
+import { normalizeAttachments, normalizeResilience, normalizeResumeAtMode, normalizeSuggestNextPrompts, promptProfileFromBody, resolveTaskLimits, retainBackgroundProcessesFromBody, taskAgentsSpecFragment, toolMaterializeStrategyFromBody, allowToolsSpecFragment, toolNameListFromBody } from "../spec-fields.js";
 import { isAbsoluteHostPath } from "@sema-agent/settings-schema";
 import { cwdHonored, deviceCwdHonored, effectiveHostWorkspace, inProcessSingleUserLane, parseAdditionalDirectories, satisfiedByProcessCwd, shellEnvMismatchCount } from "../task-cwd.js";
 import { assertRequestA2aUnlocked, resolveRequestA2a } from "../task-a2a.js";
 import { assertRequestMcpContentOrigin, assertRequestMcpUnlocked, resolveRequestMcp } from "../task-mcp.js";
 import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, acceptAppendSystemPrompt, applyTaskSettings, effectivePermissionMode, effectiveThinking, hasConstitutionAnchors, parseTaskSettings, taskHooksHonored, providerDropsAppend, settingsPermissionBucketIssue, withPermissionMode } from "../task-settings.js";
 import { skillDenyInertEntryOf } from "../rule-entry-list.js";
-import { enableForkFromBody, normalizeRetainSubagentSessions, selfOrchestrationFromBody } from "../task-workflow.js";
+import { TENANCY_WALL_CLOCK_BASE_SEC, enableForkFromBody, normalizeRetainSubagentSessions, selfOrchestrationFromBody } from "../task-workflow.js";
 import { redactSecrets } from "../trace/redact.js";
 import { DeferredSandboxPathEnv, isSandboxPathAdjudicationLane, sandboxPathEnvSlots } from "./deferred-sandbox-path-env.js";
 import { executionLaneCaps, executionLaneHomeDir, executionLaneOf } from "../execution-lane-caps.js";
 import { effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { withUnattendedLeg } from "../unattended-permission-mode.js";
 import { memoryFaceMounted } from "../memory-scope.js";
-import { createAssemblyIncarnationRead, sessionFaceReaderOf } from "./session-incarnation-seat.js";
 export function createResolveSpec(ctx) {
-    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, noteSessionIncarnation, hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
+    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
     assertGuardPatternsUsable(config);
-    const assemblyIncarnationRead = createAssemblyIncarnationRead(sessionFaceReaderOf(ownerAware), (e, f) => logger.warn(e, f));
     const onlySensitiveBaseline = buildOnlySensitiveBaselineWarning(config, {
         approvalSeat: durableEnabled ? "durable" : "absent",
         singleUserAutoAcceptBaseline: singleUserAutoAcceptBaselineApplies(config),
@@ -124,8 +122,6 @@ export function createResolveSpec(ctx) {
                 throw new HttpError(422, why, { code: HOST_POSTURE_REFUSED_CODE });
         }
         const lane = bindSettingsCwdEnvAndModel(body, auth, gated, opts);
-        if (auth?.sessionId && assemblyIncarnationRead)
-            noteSessionIncarnation(auth.sessionId, await assemblyIncarnationRead(auth.sessionId));
         const anchors = await resolveHistoryAnchors(body, auth);
         const spec = assembleSpecLiteral(body, auth, req, opts, { ...gated, ...lane, ...anchors }, effMode);
         const folded = await foldGovernanceAndSettings(body, auth, spec, gated, effMode);
@@ -368,6 +364,7 @@ export function createResolveSpec(ctx) {
                 : {}),
             ...(body.excludeAllTools === true ? { excludeAllTools: true } : {}),
             ...(() => { const v = toolNameListFromBody(body.excludeTools); return v ? { excludeTools: v } : {}; })(),
+            ...allowToolsSpecFragment(body.allowTools),
             ...(() => { const v = toolNameListFromBody(body.deferTools); return v ? { deferTools: v } : {}; })(),
             ...(() => { const v = promptProfileFromBody(body.promptProfile); return v ? { promptProfile: v } : {}; })(),
             ...(() => { const v = toolMaterializeStrategyFromBody(body.toolMaterializeStrategy); return v ? { toolMaterializeStrategy: v } : {}; })(),
@@ -409,7 +406,7 @@ export function createResolveSpec(ctx) {
             thinking: effectiveThinking(body.reasoningEffort, parsedSettings.settings?.ultracode === true),
             getApiKeyAndHeaders: getKeyResolver(),
             ...(() => {
-                const limits = resolveTaskLimits(body.limits, taskLimitCaps, taskTimeoutSec, config.requirePrincipal, body.council === true || body.debate === true || scenarioName === "discuss", (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null }));
+                const limits = resolveTaskLimits(body.limits, taskLimitCaps, taskTimeoutSec, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null }));
                 const declarations = [];
                 if (taskLimitCaps.timeoutSec !== undefined)
                     declarations.push({ key: "server.limits.timeoutSecCap", value: String(taskLimitCaps.timeoutSec), reason: "env TASK_TIMEOUT_MAX_SEC (seconds; operator ceiling applied to caller limits.maxWalltimeMs as cap×1000)" });
@@ -422,7 +419,7 @@ export function createResolveSpec(ctx) {
                 if (config.maxTaskTokens > 0)
                     declarations.push({ key: "server.budget.maxTokensCap", value: String(config.maxTaskTokens), reason: "env MAX_TASK_TOKENS_MAX (operator ceiling; becomes the effective value when the caller sends none)" });
                 if (config.requirePrincipal === true)
-                    declarations.push({ key: "server.limits.wallClockBaseSec", value: "2400/3600", reason: "tenancy wall-clock base (multi-tenant; big tasks 3600) — TASK_TIMEOUT_SEC raises, never shrinks" });
+                    declarations.push({ key: "server.limits.wallClockBaseSec", value: String(TENANCY_WALL_CLOCK_BASE_SEC), reason: "tenancy wall-clock base (multi-tenant) — TASK_TIMEOUT_SEC raises, never shrinks" });
                 const maxCostUsd = cappedCeiling(body.maxCostUsd, config.maxTaskCostUsd);
                 const maxTokens = cappedCeiling(body.maxTokens, config.maxTaskTokens);
                 const degrade = (() => {
@@ -518,7 +515,7 @@ export function createResolveSpec(ctx) {
                 }),
                 ...laneHomeBase(),
             };
-        const governedBase = applyRuntimeGovernance(spec, createDeploymentGovernanceInputs(config, pathAdjudication, { engineDataRoot: memoryEngine?.root }));
+        const governedBase = applyRuntimeGovernance(spec, createDeploymentGovernanceInputs(config, pathAdjudication));
         let governed = governedBase;
         let effectiveSettings = effMode ? withPermissionMode(parsedSettings.settings, effMode) : parsedSettings.settings;
         if (appendLessPack && effectiveSettings?.outputStyle) {
@@ -600,16 +597,15 @@ export function createResolveSpec(ctx) {
                 throw new HttpError(422, `request settings cannot be applied as written: ${e.message}`);
             }
         }
-        if (shouldDiscloseNoPersistentMemory({
+        const notice = noPersistentMemoryNotice({
             memoryFaceMounted: memoryFaceMounted(governed.memory),
             declaredCapable: effectiveMemoryPersistenceCapable(config),
             hands: gated.hands,
             handsReadOnly: governed.handsReadOnly === true,
-            excludeAllTools: governed.excludeAllTools === true,
-            excludeTools: governed.excludeTools,
             ...buildNoticeLaneFacts(executionLaneOf(config.remoteExec?.provider)),
-        })) {
-            governed = { ...governed, promptProvider: withNoPersistentMemoryNotice(governed.promptProvider) };
+        });
+        if (notice !== "silent") {
+            governed = { ...governed, promptProvider: withNoPersistentMemoryNotice(governed.promptProvider, notice) };
         }
         return { governed, scratchpadDir, hostSemanticsLane };
     };
@@ -667,7 +663,6 @@ export function createResolveSpec(ctx) {
                 isolatedExecEnv,
                 hasExecutionEnv: executionLaneCaps(executionLaneOf(config.remoteExec?.provider)).coreRemoteExecutionEnv === "supported",
                 ...(config.autonomy ? { autonomy: config.autonomy } : {}),
-                explicitTeam: body.council === true || body.debate === true || scenarioName === "discuss",
             });
             logger.info("orchestration_routed", { mode: decision.mode, reason: decision.reason, sessionId: auth?.sessionId ?? null });
             if (decision.mode === "supervisor") {

package/dist/boot/retention-lane.d.ts

@@ -31,6 +31,7 @@
  */
 import type { RetentionPolicy, RetentionReceipt } from "@sema-agent/core";
 import type { RetentionMode } from "../config-types.js";
+import type { EndedSpace, SpaceReclaimer } from "../workspace-space.js";
 /** 同 domain 连续失败多少次算「卡住了」(fail-loud 的阈值)。`5` 与 reaper 家族的
  *  `REAPER_FAILURE_WARN_THRESHOLD` 同值同理由:一次抖动(一次重连、一次超时)正是容错要吸收的,
  *  只有**连败**才越过「可诊断」这条线。 */
@@ -56,7 +57,7 @@ export interface RetentionExecutor {
         toolResults: number;
     }>;
     expireCheckpoints(input: RetentionDestructiveInput): Promise<RetentionReceipt>;
-    deleteExpiredSessions(input: RetentionDestructiveInput): Promise<RetentionReceipt>;
+    deleteExpiredSessions(input: RetentionDestructiveInput): Promise<RetentionSessionsReceipt>;
     deleteOrphanToolResults(input: RetentionDestructiveInput): Promise<RetentionReceipt>;
 }
 /** 破坏性调用的入参(判定时点的三格随行 —— 理由逐字见车1 `RetentionAuditContext` 的头注)。 */
@@ -127,7 +128,17 @@ export interface RetentionSweepCtx {
      * `createThrottledReaperCatch` 必须建在 `setInterval` 之外是同一条理由。
      */
     streaks?: Map<string, number>;
+    /** 结束的空间的回收座(k8s 车道 ∧ 配了缓存卷或快照存储时在场;与会话删除协调器同一只):enforce 删掉会话树之后,把回执里结束了的空间交给它
+     *  (缓存卷、`space/` 快照、该会话停驻车道的快照一并回收)。它从不抛(失败 = 一行 + fail-open 计数);缺席 = 本部署没有可回收的东西。 */
+    spaceReclaimer?: SpaceReclaimer;
 }
+/**
+ * 会话树 sweep 的回执 = core 契约的 `RetentionReceipt` + 本仓一位:`endedSpaces` = 本次删掉的会话树里**结束了的空间**(会话 id + 住客空间键 = 会话化身;
+ * 读不出住客的空化身不算),present-iff 非空。lane 把它交给空间的回收座(与会话删除协调器同一只),缓存卷与快照随空间的终结回收。
+ */
+export type RetentionSessionsReceipt = RetentionReceipt & {
+    readonly endedSpaces?: readonly EndedSpace[];
+};
 /** 一轮的读数(给日志与判据用;lane 自己不做任何决策依赖它)。 */
 export interface RetentionSweepOutcome {
     /** 本轮真正处理完的 domain 数(丢租中止时 = 中止之前那些)。 */

package/dist/boot/retention-lane.js

@@ -99,6 +99,8 @@ async function sweepDomainEnforce(ctx, d) {
     };
     const checkpoints = await ctx.executor.expireCheckpoints(input);
     const sessions = await ctx.executor.deleteExpiredSessions(input);
+    if (sessions.endedSpaces !== undefined && ctx.spaceReclaimer !== undefined)
+        await ctx.spaceReclaimer.reclaim(sessions.endedSpaces);
     const toolResults = await ctx.executor.deleteOrphanToolResults(input);
     const touched = checkpoints.deleted + sessions.deleted + toolResults.deleted;
     if (touched > 0) {

package/dist/boot/runner-deps.d.ts

@@ -87,9 +87,6 @@ export interface RunnerDepsCtx {
     promptSource: RunnerDeps["promptSource"];
     rosterStore: RunnerDeps["rosterStore"];
     backgroundAgentStore: RunnerDeps["backgroundAgentStore"];
-    /** S-506([ref] §5):本副本 per-session 登记簿的**同步**化身读腿(装配期由 resolve-spec 写入)。在场 ⇒ 铸
-     *  `RunnerDeps.memorySessionIncarnation` 座;缺席 ⇒ 座不铸(core 口径:按 id 绑定 = 修前行为)。 */
-    sessionIncarnationOf: ((sessionId: string) => string | undefined) | undefined;
     mailboxStore: RunnerDeps["mailboxStore"];
     /**
      * [ref]:mailbox 的**收件人生命周期面**(预删除态)。与 `mailboxStore` **成对**(`boot/stores.ts` 同段铸,
@@ -159,6 +156,9 @@ export interface RunnerDepsCtx {
         backend: MemoryBackend;
         root: string;
     } | undefined;
+    /** core 7.49.0 [ref]:引擎数据根(boot 事实,`boot/stores.ts` 恒铸 —— 记忆引擎开不开都在)。共享基座把它交成每只 Runner 的
+     *  `memoryEngineDir`:引擎从它解出每条腿的唯一豁免根(守卫集不再收 `dataRoot`)。开引擎时与 `memoryEngine.root` 同一只。 */
+    engineDataRoot: string;
     /**
      * S-399(core 7.21.1)—— 记忆整理的**已解析座**(`boot/memory-consolidation.ts` 的
      * `resolveConsolidationDriverSeat` 产物),在场 **iff** 整理阀门开着(`resolveConsolidationValve` 的判决:
@@ -236,7 +236,7 @@ export interface RunnerDepsCtx {
 }
 /** [ref] A10 留档发现②:main runner `RunnerDeps` 与 main.ts subRunner 字面量之间此前手工重复
  * 的 ~15 个键,类型标注见 {@link createSharedRunnerDeps} 头注。 */
-export type SharedRunnerDeps = Pick<RunnerDeps, "brain" | "readFace" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "delegationEntryCaps" | "crossSessionInbound" | "crossSessionDialogExpiry" | "writeProtectedPaths" | "allowedTools" | "models" | "roles" | "tiers" | "pricing" | "tracer" | "promptSource" | "executionEnvFactory" | "lspManager" | "backgroundAgentStore" | "mailboxStore" | "rosterStore" | "hooks" | "toolResultStore" | "checkpointStore" | "hands" | "sessionPolicyStore" | "usageWindows" | "usageWindowStore" | "memoryScopeAdmission" | "deploymentMemoryScopes" | "sharedMemoryStores" | "compliancePostureResolver" | "lockedConfig" | "retentionPolicy" | "onNotice" | "mcpRevocations">;
+export type SharedRunnerDeps = Pick<RunnerDeps, "brain" | "readFace" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "delegationEntryCaps" | "crossSessionInbound" | "crossSessionDialogExpiry" | "writeProtectedPaths" | "memoryEngineDir" | "allowedTools" | "models" | "roles" | "tiers" | "pricing" | "tracer" | "promptSource" | "executionEnvFactory" | "lspManager" | "backgroundAgentStore" | "mailboxStore" | "rosterStore" | "hooks" | "toolResultStore" | "checkpointStore" | "hands" | "sessionPolicyStore" | "usageWindows" | "usageWindowStore" | "memoryScopeAdmission" | "deploymentMemoryScopes" | "sharedMemoryStores" | "compliancePostureResolver" | "lockedConfig" | "retentionPolicy" | "onNotice" | "mcpRevocations">;
 /**
  * [ref] A10 留档发现②(review 2026-07-29,[ref]§三族A 同源修补的延续):main runner 的
  * `RunnerDeps` 字面量(下方 `createRunnerDeps`)与 `main.ts` 里 subRunner 的 `new Runner({...})`
@@ -263,7 +263,7 @@ export type SharedRunnerDeps = Pick<RunnerDeps, "brain" | "readFace" | "readDeny
  *    属性,比再抽一层共享基座更强的同源保证),不重复收纳进这里。
  */
 /** 基座真实消费的窄面(Pick)——subRunner 调用点(main.ts)只需凑这 13 个字段,不必造全量 ctx。 */
-export type SharedRunnerDepsCtx = Pick<RunnerDepsCtx, "config" | "brain" | "pricing" | "tracer" | "promptSource" | "executionEnvFactory" | "lspManager" | "backgroundAgentStore" | "mailboxStore" | "rosterStore" | "deploymentHooks" | "toolResultStore" | "checkpointStore" | "sessionPolicyStore" | "hands" | "usageWindowStore" | "orgMemoryAdmission" | "sharedMemoryStores" | "logger" | "governanceSeams" | "mcpRevocations" | "metrics">;
+export type SharedRunnerDepsCtx = Pick<RunnerDepsCtx, "config" | "brain" | "pricing" | "tracer" | "promptSource" | "executionEnvFactory" | "lspManager" | "backgroundAgentStore" | "mailboxStore" | "rosterStore" | "deploymentHooks" | "toolResultStore" | "checkpointStore" | "sessionPolicyStore" | "hands" | "usageWindowStore" | "orgMemoryAdmission" | "sharedMemoryStores" | "logger" | "governanceSeams" | "mcpRevocations" | "metrics" | "engineDataRoot">;
 /** 转发席只需要 `inc` —— 刻意窄到这一个动词,免得把整只 Metrics 拖进这条纯转发腿。 */
 export interface EngineNoticeMetricsSeat {
     inc: (name: string, labels?: Record<string, string>) => void;

package/dist/boot/runner-deps.js

@@ -1,16 +1,14 @@
 import { createFileWorkflowScriptStore } from "@sema-agent/core";
 import { join } from "node:path";
-import { listCollabWorkflows, resolveCollabWorkflow } from "../capabilities/collab-workflows.js";
 import { lkgReadDenyRows } from "../config-lkg.js";
 import { fleetBackgroundChildPublisher, FleetEventBus } from "../fleet/fleet-bus.js";
 import { createMemoryEngineIncidentSink } from "../memory-incident-sink.js";
-import { createMemorySessionIncarnationSeat, sessionFaceReaderOf } from "./session-incarnation-seat.js";
 import { assertAutoConsolidationWirable } from "./memory-consolidation.js";
 import { createHardenedVmRunner } from "../orchestration/hardened-vm-runner.js";
 import { createWorkerHardenedVmRunner } from "../orchestration/hardened-vm-worker-runner.js";
 import { WorkflowAgentRegistry } from "../orchestration/workflow-agent-steer.js";
 import { resolveServedSession } from "../orchestration/workflow-completion-inbox.js";
-import { defaultEngineNoticeRouter, redactNoticeRuleText } from "../trace/engine-notice-wire.js";
+import { defaultEngineNoticeRouter, redactNoticeMessage, redactNoticeRuleText } from "../trace/engine-notice-wire.js";
 import { WorkflowNotifyGate } from "../orchestration/workflow-notify-journal.js";
 import { makeLoadProjectMemory, makeProbeInstructionSources } from "../project-memory.js";
 import { createInstructionSourceSeat } from "../instruction-source-notice.js";
@@ -43,7 +41,8 @@ const CEILING_ORIGINS = new Set(["walltime", "turns"]);
 export function createEngineNoticeForwarder(logger, router = defaultEngineNoticeRouter, metrics) {
     return (notice) => {
         const detail = redactNoticeRuleText(notice.code, notice.detail);
-        logger.warn("engine_notice", { code: notice.code, message: notice.message, ...(detail !== undefined ? { detail } : {}) });
+        const message = redactNoticeMessage(notice.message);
+        logger.warn("engine_notice", { code: notice.code, message, ...(detail !== undefined ? { detail } : {}) });
         if (metrics !== undefined && notice.code === "task.interrupt_unconsumed") {
             const origin = notice.detail?.origin;
             if (typeof origin === "string" && CEILING_ORIGINS.has(origin))
@@ -103,6 +102,7 @@ export function createSharedRunnerDeps(ctx) {
         usageWindows: ctx.config.usageWindows ? ctx.config.usageWindows : undefined,
         usageWindowStore: ctx.usageWindowStore ? ctx.usageWindowStore : undefined,
         sharedMemoryStores: ctx.sharedMemoryStores ? ctx.sharedMemoryStores : undefined,
+        memoryEngineDir: ctx.engineDataRoot,
         compliancePostureResolver: ctx.governanceSeams.compliancePostureResolver,
         lockedConfig: ctx.governanceSeams.lockedConfig,
         retentionPolicy: ctx.governanceSeams.retentionPolicy,
@@ -123,16 +123,7 @@ export function createRunnerDeps(ctx) {
                 : createHardenedVmRunner(),
             workflowRunStore: workflowRunStore ? workflowRunStore : undefined,
             workflowJournalStore: workflowJournalStore ? workflowJournalStore : undefined,
-            workflowScriptStore: (() => {
-                const fileStore = createFileWorkflowScriptStore(join(config.localDataRoot ?? localRoot, "workflow-scripts"));
-                return {
-                    scopePartitioned: true,
-                    persist: fileStore.persist.bind(fileStore),
-                    load: fileStore.load.bind(fileStore),
-                    resolveName: (name) => resolveCollabWorkflow(name) ?? fileStore.resolveName?.(name),
-                    list: () => listCollabWorkflows(),
-                };
-            })(),
+            workflowScriptStore: createFileWorkflowScriptStore(join(config.localDataRoot ?? localRoot, "workflow-scripts")),
             onWorkflowAgentSpawn: workflowAgentRegistry
                 ? (handle) => {
                     const unregister = workflowAgentRegistry.register(handle);
@@ -192,9 +183,7 @@ export function createRunnerDeps(ctx) {
         },
         sessionStore,
         memoryBackend: memoryEngine ? memoryEngine.backend : undefined,
-        memoryEngineDir: memoryEngine ? memoryEngine.root : undefined,
         memoryCaptureRecordStore: sessionCaptureRecords !== undefined ? (plane) => sessionCaptureRecords(plane) : undefined,
-        memorySessionIncarnation: ctx.sessionIncarnationOf !== undefined && sessionFaceReaderOf(sessionStore) !== undefined ? createMemorySessionIncarnationSeat(ctx.sessionIncarnationOf, (e, f) => logger.warn(e, f)) : undefined,
         onMemoryHarvestReport: memoryEngine
             ? (report, info) => {
                 metrics.inc("memory_harvest_total", { ok: String(report.ok), phase: info.phase, incident: report.incident?.kind ?? "none" });

package/dist/boot/session-faces.d.ts

@@ -6,7 +6,7 @@
  *
  * ⚠️ **位置即契约**:
  *  1. `sessionWatchRegistry` 必须在 `purgeSession` **之前**构造 —— purge 尾部的 `dropSession` 是
- *     同副本租户轮转围栏(delete 即终结旧 owner 的 SSE 订阅),两者是一对。
+ *     同副本租户轮转围栏(delete 即终结旧 owner 的 SSE 订阅),两者是一对;空间回收座在它**之后**起、且不在应答路径里。
  *  2. `setLeafAdvanceListener(...)` 是**进程级单点**装载(leaf-bus 只有一个监听位),必须与
  *     registry 的构造同段发生,晚于它、早于任何会 append 的路由。
  */
@@ -26,6 +26,7 @@ import type { TaskListLane } from "./task-list-lane.js";
 import { type RunnerDeps } from "@sema-agent/core";
 import type { MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 import type { UserInputLedgerStore } from "../user-input-ledger.js";
+import type { SpaceReclaimer } from "../workspace-space.js";
 export interface SessionFacesCtx {
     config: ServiceConfig;
     logger: Logger;
@@ -60,6 +61,9 @@ export interface SessionFacesCtx {
     /** S-965:用户输入受理账本的**店**(E21 级联的一条腿:该会话的受理行随会话删)。与受理 / 收敛 / 告知读的是同一只(stage-07 取一次)。
      *  缺席 = 本部署没装账本(env-only:没有 backend / run 店)⇒ 无行可删。 */
     userInputLedgerStore: UserInputLedgerStore | undefined;
+    /** k8s 车道工作区空间的回收座(配了构建缓存卷或快照存储时在场;与托管留存 sweep 同一只)—— E21 级联的一条腿:会话删了 =
+     *  这位住客的空间结束了,它的缓存卷、`space/` 快照、该会话停驻车道的快照随之回收。缺席 = 本部署没有可回收的东西。 */
+    spaceReclaimer?: SpaceReclaimer;
 }
 export declare function createSessionFaces(ctx: SessionFacesCtx): {
     ownerAware: OwnerAwareSessionStore;

package/dist/boot/session-faces.js

@@ -7,8 +7,10 @@ import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
 import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 import { reapSessionBackgroundHard } from "../background-session-reap.js";
 import { probeSessionChildren, retireSessionChildren, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
+import { SessionIncarnationMissingError, redactIncarnations, sessionFaceReadOf } from "../session-incarnation.js";
+import { recordFailOpen } from "../observability/fail-open.js";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -34,6 +36,28 @@ export function createSessionFaces(ctx) {
         })
         : undefined;
     setLeafAdvanceListener(sessionWatchRegistry ? (sid, leaf, owner, seq) => sessionWatchRegistry.notifyLocal(sid, leaf, owner, seq) : undefined);
+    const readSessionFace = sessionFaceReadOf(sessionStore);
+    const occupantSpaceKeyOf = async (sessionId, owner) => {
+        if (readSessionFace === undefined)
+            return undefined;
+        try {
+            const face = await readSessionFace(sessionId);
+            return face !== undefined && face.owner === owner ? face.incarnation : undefined;
+        }
+        catch (err) {
+            if (err instanceof SessionIncarnationMissingError)
+                return undefined;
+            const reason = "occupant_unreadable";
+            recordFailOpen("server.workspace-cache.reclaim-failed", `reason=${reason}`);
+            logger.warn("workspace_cache_reclaim_failed", {
+                sessionId,
+                reason,
+                error: redactIncarnations(String(err)),
+                effect: "the deleted session's space could not be read, so its build-cache volume and snapshot objects are not reclaimed (the session delete went ahead) — delete the volume by label sema.space; the objects fall to the bucket's lifecycle rule",
+            });
+            return undefined;
+        }
+    };
     const purgeSession = ownerAware.deleteSession
         ? async (sessionId, owner) => {
             if (ownerAware.ownerOf) {
@@ -41,6 +65,7 @@ export function createSessionFaces(ctx) {
                 if (stillOwner !== owner)
                     return { deleted: false };
             }
+            const spaceKey = spaceReclaimer !== undefined ? await occupantSpaceKeyOf(sessionId, owner) : undefined;
             const childScope = owner ?? "default";
             const reach = await probeSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
             if (!reach.reachable) {
@@ -116,6 +141,17 @@ export function createSessionFaces(ctx) {
                 await peerBox.store.drop(peerBox.scope, peerBox.handle);
             const historyDeleted = await ownerAware.deleteSession(sessionId, owner);
             sessionWatchRegistry?.dropSession(sessionId);
+            if (historyDeleted && spaceReclaimer !== undefined && spaceKey !== undefined) {
+                void spaceReclaimer.reclaim([{ sessionId, spaceKey }]).catch((err) => {
+                    recordFailOpen("server.workspace-space.reclaim-failed", "stage=seat_threw");
+                    logger.warn("workspace_space_reclaim_failed", {
+                        sessionId,
+                        stage: "seat_threw",
+                        error: redactIncarnations(String(err)),
+                        effect: "the ended space's cache volume and snapshot objects may stay (the reclaim seat threw, which its contract forbids; the session delete went ahead) — the bucket's lifecycle rule is the fallback for objects, the volume is deleted by label sema.space",
+                    });
+                });
+            }
             return { deleted: historyDeleted || runs.removed > 0 };
         }
         : undefined;

package/dist/boot/stage-03-store-backend.d.ts

@@ -3,6 +3,7 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
+    engineDataRoot: string;
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;