@sema-agent/server 7.125.1 → 7.127.0

package/dist/boot/execution-env.js

@@ -10,8 +10,9 @@ import { adbExecutionEnvFactory } from "../plugins/remote-env-adb.js";
 import { deviceExecutionEnvFactory } from "../plugins/remote-env-device.js";
 import { e2bExecutionEnvFactory } from "../plugins/remote-env-e2b.js";
 import { hostExecutionEnvFactory, RemoteHostExecutionEnv } from "../plugins/remote-env-host.js";
-import { k8sExecutionEnvFactory } from "../plugins/remote-env-k8s.js";
+import { checkSandboxEgressPolicy, createSpaceReclaimer, K8S_SANDBOX_NAMESPACE_DEFAULT, k8sExecutionEnvFactory } from "../plugins/remote-env-k8s.js";
 import { createRunWorkspaceSnapshotSeat } from "../fleet/workspace-snapshot-residual.js";
+import { createSpaceCommitFence } from "../workspace-space-commit.js";
 import { localDockerExecutionEnvFactory } from "../plugins/remote-env-local-docker.js";
 import { sshExecutionEnvFactory } from "../plugins/remote-env-ssh.js";
 import { isRemoteScratchpadLane, withRemoteScratchpad } from "../plugins/remote-scratchpad.js";
@@ -22,8 +23,10 @@ import { reapOrphanWorktrees, withWorktreeIsolation } from "../plugins/worktree-
 import { customPkgSourceFromEnv, derivePkgSourceEnv } from "../sandbox-pkg-source.js";
 import { effectiveHostWorkspace } from "../task-cwd.js";
 import { taskInheritEnvRefusal } from "../hosted-posture.js";
+import { workspaceSnapshotTimeoutOf } from "../workspace-space.js";
+import { sayEgressPolicyReading } from "../sandbox-egress-policy.js";
 import { isSandboxPathAdjudicationLane, sandboxPathEnvSlots, withSandboxPathEnvSlot } from "./deferred-sandbox-path-env.js";
-import { REMOTE_EXEC_PROVIDER_WORDS, executionLaneHomeDir, executionLaneOf, isSingleMachineDefaultLane, laneIsolated } from "../execution-lane-caps.js";
+import { REMOTE_EXEC_PROVIDER_WORDS, executionLaneHomeDir, executionLaneOf, isSingleMachineDefaultLane, laneBindsReads, laneIsolated } from "../execution-lane-caps.js";
 function boundedSessionSetter(map, maxEntries) {
     return (sid, value) => {
         map.delete(sid);
@@ -35,10 +38,10 @@ function boundedSessionSetter(map, maxEntries) {
 function forwardedSandboxEnvKeys(remoteExec) {
     switch (remoteExec.provider) {
         case "e2b":
+        case "k8s":
             return Object.keys(remoteExec.sandboxEnv ?? {}).sort();
         case "local-docker":
             return Object.keys(remoteExec.env ?? {}).sort();
-        case "k8s":
         case "ssh":
         case "adb":
         case "host":
@@ -50,18 +53,20 @@ function forwardedSandboxEnvKeys(remoteExec) {
         }
     }
 }
+function buildSandboxLaneEnv(config, explicit) {
+    const merged = { ...derivePkgSourceEnv(config.sandboxPkgSource, customPkgSourceFromEnv()), ...(explicit ?? {}) };
+    return Object.keys(merged).length > 0 ? merged : undefined;
+}
 const MAX_CWD_SESSIONS = 4096;
 export function createSessionScopedRegistries(maxEntries = MAX_CWD_SESSIONS) {
     const perSessionCwd = new Map();
     const perSessionShellEnv = new Map();
     const perSessionInheritEnv = new Map();
-    const perSessionIncarnation = new Map();
     const owners = new Map();
     const dropSession = (sid) => {
         perSessionCwd.delete(sid);
         perSessionShellEnv.delete(sid);
         perSessionInheritEnv.delete(sid);
-        perSessionIncarnation.delete(sid);
         owners.delete(sid);
     };
     const touch = (sid, owner) => {
@@ -96,40 +101,71 @@ export function createSessionScopedRegistries(maxEntries = MAX_CWD_SESSIONS) {
                 perSessionCwd.delete(sid);
                 perSessionShellEnv.delete(sid);
                 perSessionInheritEnv.delete(sid);
-                perSessionIncarnation.delete(sid);
             }
             touch(sid, owner);
         },
         dropSession,
-        noteSessionIncarnation: (sid, incarnation) => {
-            if (incarnation === undefined) {
-                perSessionIncarnation.delete(sid);
-                return;
-            }
-            perSessionIncarnation.set(sid, incarnation);
-            touch(sid, undefined);
-        },
-        sessionIncarnationOf: (sid) => perSessionIncarnation.get(sid),
     };
 }
 export function createK8sRunEnvFactory(k8sCfg, seats, deps) {
-    return (ctx) => {
-        const incarnation = seats.incarnationOf(ctx.sessionId);
+    return async (ctx) => {
+        const onWorkspaceSnapshot = createRunWorkspaceSnapshotSeat(ctx.sessionId);
+        const child = ctx.placementRootSessionId !== ctx.sessionId;
+        const s3Snapshot = child && k8sCfg.s3Snapshot !== undefined ? spaceOff(k8sCfg.s3Snapshot) : k8sCfg.s3Snapshot;
+        const spaceOccupant = child ? undefined : await occupantOf(seats, ctx.sessionId, ctx.taskId);
+        const { cache, ...deploymentCfg } = k8sCfg;
         return k8sExecutionEnvFactory({
-            ...k8sCfg,
+            ...deploymentCfg,
+            ...(cache !== undefined && !child ? { cache } : {}),
+            ...(s3Snapshot !== undefined ? { s3Snapshot } : {}),
             image: seats.imageOf(ctx.sessionId) ?? k8sCfg.image,
-            ...(incarnation !== undefined ? { spaceIncarnation: incarnation } : {}),
-            onWorkspaceSnapshot: createRunWorkspaceSnapshotSeat(ctx.sessionId),
+            ...(spaceOccupant !== undefined ? { spaceOccupant } : {}),
+            onWorkspaceSnapshot,
         }, deps)(ctx);
     };
 }
-export function assertWorkspaceSpaceReadable(space, sessionFaceRead, sessionStoreLabel) {
-    if (!space.available || !persistNeedsOccupant(space.policy.persist) || sessionFaceRead !== undefined)
+const STORE_ERROR_CODE = /^[A-Za-z0-9_.:-]{1,64}$/;
+async function occupantOf(seats, sessionId, taskId) {
+    let answer;
+    try {
+        answer = await seats.incarnationOf?.(sessionId);
+    }
+    catch (e) {
+        const code = e?.code;
+        return { fault: typeof code === "string" && STORE_ERROR_CODE.test(code) ? code : "incarnation_read_failed" };
+    }
+    if (answer === undefined)
+        return { unread: "incarnation_unknown" };
+    if (typeof answer !== "string" || answer === "")
+        return { fault: "incarnation_read_failed" };
+    const rows = seats.spaceCommits();
+    return rows !== undefined ? { incarnation: answer, fence: createSpaceCommitFence(rows, answer, taskId) } : { unread: "incarnation_unknown" };
+}
+function spaceOff(store) {
+    const { space: _off, ...parkOnly } = store;
+    return parkOnly;
+}
+export function assertWorkspaceSpaceReadable(space, seats, cache, sessionStoreLabel) {
+    if (space.available && persistNeedsOccupant(space.policy.persist)) {
+        const missing = seats.incarnationOf === undefined ? `the session store (${sessionStoreLabel}) has no by-id occupant read (incarnationOf)`
+            : seats.spaceCommits === undefined ? `this deployment has no store backend to hold the space's commit rows (the session store is ${sessionStoreLabel})`
+                : undefined;
+        if (missing === undefined)
+            return;
+        throw new Error(`WORKSPACE_PERSIST=space but ${missing} [workspace-space-unreadable]: ` +
+            "the k8s workspace space is partitioned by the session occupant and committed under a run-store row, so here no run would restore or save " +
+            '/workspace while GET /v1/capabilities.workspaceSync reports persist "space". Use a store backend (DB_BACKEND=local or DB_BACKEND=mysql|pg; ' +
+            "DB_BACKEND=memory has none), or set WORKSPACE_PERSIST=off (the default is space), and restart");
         return;
-    throw new Error(`WORKSPACE_PERSIST=space but the session store is ${sessionStoreLabel}, which has no session occupant read (sessionFaceOf) [workspace-space-unreadable]: ` +
-        "the k8s workspace space is partitioned by the session occupant, so on this store no run would restore or save /workspace while " +
-        'GET /v1/capabilities.workspaceSync reports persist "space". Use a session store with that read (DB_BACKEND=local, or DB_BACKEND=mysql|pg ' +
-        "with SESSION_BACKEND not memory), or drop WORKSPACE_PERSIST=space (the default is off), and restart");
+    }
+    if (cache.available && (seats.incarnationOf === undefined || seats.spaceCommits === undefined)) {
+        const missing = seats.incarnationOf === undefined
+            ? `the session store (${sessionStoreLabel}) has no by-id occupant read (incarnationOf)`
+            : `this deployment has no store backend to hold the space durably (the session store is ${sessionStoreLabel})`;
+        throw new Error(`WORKSPACE_CACHE=volume but ${missing} [workspace-space-unreadable]: ` +
+            "the k8s build-cache volume belongs to the workspace space, which is keyed by the session occupant, so here no run would get its volume while " +
+            "GET /v1/capabilities.workspaceSync reports cache. Use a store backend (DB_BACKEND=local or DB_BACKEND=mysql|pg; DB_BACKEND=memory has none), or set WORKSPACE_CACHE=off, and restart");
+    }
 }
 function persistNeedsOccupant(persist) {
     switch (persist) {
@@ -158,6 +194,7 @@ export function createExecutionEnv(ctx) {
     const { perSessionShellEnv, setSessionShellEnv } = sessionScoped;
     const { perSessionInheritEnv, setSessionInheritEnv } = sessionScoped;
     let executionEnvFactory;
+    let spaceReclaimer;
     let worktreeReap;
     if (config.remoteExec?.provider === "e2b") {
         executionEnvFactory = e2bExecutionEnvFactory({
@@ -168,10 +205,7 @@ export function createExecutionEnv(ctx) {
             ...(config.remoteExec.livenessMs != null ? { livenessMs: config.remoteExec.livenessMs } : {}),
             ...(config.remoteExec.allowInternetAccess != null ? { allowInternetAccess: config.remoteExec.allowInternetAccess } : {}),
             ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
-            ...(() => {
-                const merged = { ...derivePkgSourceEnv(config.sandboxPkgSource, customPkgSourceFromEnv()), ...(config.remoteExec.sandboxEnv ?? {}) };
-                return Object.keys(merged).length > 0 ? { sandboxEnv: merged } : {};
-            })(),
+            ...((env) => (env !== undefined ? { sandboxEnv: env } : {}))(buildSandboxLaneEnv(config, config.remoteExec.sandboxEnv)),
             logger,
             metrics,
         });
@@ -188,16 +222,22 @@ export function createExecutionEnv(ctx) {
             ...(config.remoteExec.runtimeClass != null ? { runtimeClass: config.remoteExec.runtimeClass } : {}),
             ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
             ...(config.remoteExec.timeoutMs != null ? { timeoutMs: config.remoteExec.timeoutMs } : {}),
+            dataTimeoutMs: workspaceSnapshotTimeoutOf(config.remoteExec),
             ...(config.remoteExec.memory ? { memory: config.remoteExec.memory } : {}),
             ...(config.remoteExec.cpu ? { cpu: config.remoteExec.cpu } : {}),
-            ...(config.remoteExec.s3Snapshot ? { s3Snapshot: { ...config.remoteExec.s3Snapshot, ...((f) => (f.available ? { space: f.policy } : {}))(facts.workspaceSpace(config)) } } : {}),
+            ...(config.remoteExec.sandboxIpv6 !== undefined ? { ipv6: config.remoteExec.sandboxIpv6 } : {}),
+            ...(config.remoteExec.s3Snapshot ? { s3Snapshot: { ...config.remoteExec.s3Snapshot, ...((f) => (f.available ? { space: { persist: f.policy.persist, keep: f.policy.keep } } : {}))(facts.workspaceSpace(config)) } } : {}),
+            ...((f) => (f.available ? { cache: f.cache } : {}))(facts.workspaceCache(config)),
+            ...(config.remoteExec.workspaceSnapshotExclude ? { snapshotExclude: config.remoteExec.workspaceSnapshotExclude } : {}),
             logger,
-            ...(() => {
-                const derived = derivePkgSourceEnv(config.sandboxPkgSource, customPkgSourceFromEnv());
-                return Object.keys(derived).length > 0 ? { podEnv: derived } : {};
-            })(),
+            ...((env) => (env !== undefined ? { podEnv: env } : {}))(buildSandboxLaneEnv(config, config.remoteExec.sandboxEnv)),
         };
-        executionEnvFactory = createK8sRunEnvFactory(k8sCfg, { imageOf: (sid) => perTaskImage.get(sid), incarnationOf: sessionScoped.sessionIncarnationOf });
+        executionEnvFactory = createK8sRunEnvFactory(k8sCfg, { imageOf: (sid) => perTaskImage.get(sid), incarnationOf: ctx.incarnationOf, spaceCommits: ctx.spaceCommits ?? (() => undefined) });
+        if (k8sCfg.cache !== undefined || k8sCfg.s3Snapshot !== undefined)
+            spaceReclaimer = createSpaceReclaimer(k8sCfg);
+        void checkSandboxEgressPolicy(k8sCfg)
+            .then((gaps) => sayEgressPolicyReading(gaps, logger, k8sCfg.namespace ?? K8S_SANDBOX_NAMESPACE_DEFAULT))
+            .catch((e) => logger.error("sandbox_egress_policy_check_crashed", { error: e instanceof Error ? e.message : String(e), effect: "the sandbox egress self-check did not complete this boot — the lane runs; the egress policy was not read" }));
     }
     else if (config.remoteExec?.provider === "ssh") {
         executionEnvFactory = sshExecutionEnvFactory({
@@ -367,7 +407,15 @@ export function createExecutionEnv(ctx) {
             logger.info("task_inherit_env_honored", { honored: taskInheritEnvRefusal(config) === undefined });
     }
     const lspProvider = config.remoteExec?.provider;
-    const lspManager = (lspProvider === "e2b" || lspProvider === "k8s") && config.lspEnabled
+    const lspLane = executionLaneOf(lspProvider);
+    const lspLaneBindsReads = lspLane !== undefined && laneBindsReads(lspLane);
+    if ((lspProvider === "e2b" || lspProvider === "k8s") && config.lspEnabled && !lspLaneBindsReads) {
+        logger.warn("lsp_not_mounted", {
+            provider: lspProvider,
+            reason: "LSP_ENABLED is set, but this lane's execution environment cannot bind a read to the file that was checked (openBound), so every language-server file sync would be refused; the LSP tool is not mounted on this lane in this version",
+        });
+    }
+    const lspManager = (lspProvider === "e2b" || lspProvider === "k8s") && config.lspEnabled && lspLaneBindsReads
         ? createE2bLspManager({
             log: (event, fields) => logger.info(event, fields),
             scheme: lspProvider === "k8s" ? "ws" : "wss",
@@ -375,7 +423,7 @@ export function createExecutionEnv(ctx) {
             metrics,
         })
         :
-            lspProvider === "host" && config.lspHostEnabled && config.requirePrincipal !== true
+            lspProvider === "host" && config.lspHostEnabled && config.requirePrincipal !== true && lspLaneBindsReads
                 ? createHostLspManager(config, (event, fields) => logger.info(event, fields))
                 : undefined;
     if (lspManager)
@@ -384,9 +432,7 @@ export function createExecutionEnv(ctx) {
         perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv,
         fenceSessionOwner: sessionScoped.fenceSessionOwner,
         dropSessionScoped: sessionScoped.dropSession,
-        noteSessionIncarnation: sessionScoped.noteSessionIncarnation,
-        sessionIncarnationOf: sessionScoped.sessionIncarnationOf,
-        executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager,
+        executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer,
     };
 }
 //# sourceMappingURL=execution-env.js.map

package/dist/boot/leader.d.ts

@@ -12,6 +12,7 @@ import type { buildPricing } from "../budget.js";
 import { createLeaderEndpoint } from "../leader/endpoint.js";
 import type { Logger } from "../observability/logger.js";
 import type { CheckpointStoreFull, StoreBackend, ToolResultStoreFull } from "../plugins/store-backend.js";
+import type { createSessionStore } from "../plugins/session-store.js";
 import type { RunnerDeps } from "@sema-agent/core";
 export interface LeaderCtx {
     config: ServiceConfig;
@@ -20,7 +21,7 @@ export interface LeaderCtx {
     pricing: ReturnType<typeof buildPricing>;
     executionEnvFactory: RunnerDeps["executionEnvFactory"];
     toolResultStore: ToolResultStoreFull | undefined;
-    sessionStore: ReturnType<StoreBackend["session"]>;
+    sessionStore: ReturnType<typeof createSessionStore>;
     checkpointStore: CheckpointStoreFull | undefined;
     /** [ref] 件B/C/D([ref],codex R2-F1):部署治理三座席 —— leader 车道的每一只 Runner 都要带上它,
      *  否则开了 leader 端点的部署就有一条在部署治理**之外**的执行面(合规否决/锁都够不着)。 */

package/dist/boot/memory-boundary.d.ts

@@ -75,7 +75,7 @@ import type { MemoryEngineBackend } from "@sema-agent/settings-schema/execution-
  * 而且它断言的是 per-task 事实,不是本键的车道级语义。
  *
  * ## 位置与纪律
- * 单源:resolve-spec 的 spec 直通、`shouldDiscloseNoPersistentMemory` 判别式、boot 审计的 declared 位
+ * 单源:resolve-spec 的 spec 直通、`noPersistentMemoryNotice` 判别式、boot 审计的 declared 位
  * 三处都必须读本函数,禁各自重算(operator-knob 律:显式 env 的优先权在这一个函数里执法一次)。
  * 自动补位在 boot 日志上必须可见(stores.ts 的 info 行),部署方随时可用显式 env 覆盖。
  */

package/dist/boot/memory-consolidation.d.ts

@@ -1,6 +1,11 @@
 import type { RestartSliceCtx } from "../web-admin-client/restart-signal.js";
 import type { MemoryConsolidationDriverConfig, ServiceConfig } from "../config-types.js";
-import { type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type MemoryBackend, type MemoryConsolidationDriverDeps, type RunMemoryConsolidationOptions, type SessionCaptureRecordStore } from "@sema-agent/core";
+import { resolveMemoryConsolidationDriver, type ConsolidationWriteJudge, type EngineNotice, type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type MemoryBackend, type MemoryConsolidationDriverDeps, type SessionCaptureRecordStore } from "@sema-agent/core";
+/**
+ * 座解析的 options 形 = core 解析器交回的那只(core 7.50.0 起它**不含** `writeJudge`:判官不是模型席的一部分,由调用方在动词上带)。
+ * 取解析器的返回型而不是自己写 `Omit<…>`:形的属主是 core 的解析器,本仓不持第二份。
+ */
+type ConsolidationSeatOptions = ReturnType<typeof resolveMemoryConsolidationDriver>;
 /** D3 投影的座标签闭集。`role:<name>` 里的 name 只可能是 core 的 role 链两跳之一。 */
 export type ConsolidationSeatLabel = "explicit" | "role:consolidate" | "role:summarize";
 /** {@link buildConsolidationValveAudit} 的告警名闭集(事件名进日志 ⇒ 运维可按名过滤/告警)。 */
@@ -48,8 +53,8 @@ export type ConsolidationSeatBilling = {
 };
 /** 座解析的产物:core 的 options 原样 + 给投影用的两位自证。 */
 export interface ConsolidationDriverSeat {
-    /** `runMemoryConsolidationDriver` 的第三参,core 的 `resolveMemoryConsolidationDriver` 原样产出。 */
-    readonly options: RunMemoryConsolidationOptions;
+    /** `runMemoryConsolidationDriver` 第三参的**模型席那一半**,core 的 `resolveMemoryConsolidationDriver` 原样产出(写判官另由操作面的座给)。 */
+    readonly options: ConsolidationSeatOptions;
     /** D3 的 `seat` 位。 */
     readonly seat: ConsolidationSeatLabel;
     /** 真正会被记进 run 行与 mint 归档的模型 id(= `options.model`,单独拎出来是投影面的便利)。 */
@@ -390,6 +395,27 @@ export declare function assertAutoConsolidationWirable(input: {
     /** 铸好的 `RunnerDeps` 上**真的**有整理席吗(`deps.memoryConsolidation !== undefined`)。 */
     memoryConsolidationWired: boolean;
 }): void;
+/**
+ * 运维阀门腿的写判官座(core 7.50.0 起驱动动词必带)。
+ *
+ * ## 判官只有一只,这条腿拿不到它
+ *
+ * 「这条路径能不能写」在引擎里只有**一只**判官(合成写判官:技能拒行 / 收窄折叠 / 调用方与继承策略 / 人的持久规则车道 /
+ * 组织车道,一条走法一个优先序);引擎的自动整理腿把**腿自己的**那只交给驱动。本腿(运维手动阀门)没有腿:没有名册上的
+ * `Write` 脸、没有引擎盖的豁免根与工作目录、没有持久规则车道 —— 而引擎包今天不导出那只判官的构造器。在本仓手搭一只
+ * 「对部署策略问一次合成 `Write`」的判官 = 把引擎判官的层走法、脸、豁免根、已中止信号的约定与判词读法**再写一份**
+ * (第二个读者,与引擎那只迟早分歧,而且分歧是静默的)。所以本腿不造第二只。
+ *
+ * ## 于是它是一只**响亮的放行座**,登记为保护型欠账
+ *
+ * 答 `no_objection` —— 与 v7.49.x 本腿的行为逐字同(那时驱动根本不问),不回退任何现网能力;每被问一次记一次
+ * `server.memory-consolidation.operator-valve-unjudged`(P-DEBT:计数 + 探针行 + 一次性告警),债在遥测里显形。
+ * 自动整理腿不受影响:它走引擎腿自己的判官,人的持久规则与部署策略照判。
+ * 退役条件:引擎导出宿主可用的写判官构造器(收部署策略 + 一只规则店主体)那一版,本函数换成它、本 tag 删。
+ * scope 与人:本仓的文件后端不按请求主体铸 scope(单用户形是部署声明的全局层 `MEMORY_SCOPE` 与按任务根派生的项目层),
+ * 所以从 scope 读不出「这是谁的库」;匿名 run 读不读本地属主那只规则桶另候裁定 —— 两件都不在本座里猜。
+ */
+export declare function createOperatorValveWriteJudge(): ConsolidationWriteJudge;
 /** 两个 admin 口消费的窄能力面(`ServiceDeps.memoryConsolidation` 的实参来源)。 */
 export interface MemoryConsolidationFaces {
     /** D3 的座位自证(投影用;boot 期解析一次,restart-to-apply)。 */
@@ -446,5 +472,13 @@ export declare function createMemoryConsolidationFaces(store: {
      *  机器钉 capture-optout-lane ②)。S-215 起 local 车道在引擎接线时也供(core 文件三腿,同一只控制面);
      *  缺席 ⇒ 记忆面暗(引擎未接线),与 Runner 同本。 */
     captureRecordStore?: SessionCaptureRecordStore;
+    /** core 7.50.0:整理跑的**写判官座**(必填 —— 缺席不是「没有规则」,core 也拒)。操作面不判任何东西,只把它原样递给驱动动词:
+     *  早问库目录一次、应用时问每个产物文件,答 `no_objection` 以外一律拒写。装配层给哪一只见 {@link createOperatorValveWriteJudge}。 */
+    writeJudge: ConsolidationWriteJudge;
+    /** 引擎通告的**运维行**座(与 Runner 的 `onNotice` 同一只转发器)。缺席 ⇒ 通告只在回执上。判官拒的两种时机都经它走一次:
+     *  应用时拒 = 引擎在驱动里铸的 `memory.consolidation_incomplete`;早问拒 = 驱动抛出的拒绝经引擎导出的构造器转成的
+     *  `memory.consolidation_refused`(本仓不读通告名、不自铸通告形)。 */
+    onNotice?: (notice: EngineNotice) => void;
 }): MemoryConsolidationFaces;
+export {};
 //# sourceMappingURL=memory-consolidation.d.ts.map

package/dist/boot/memory-consolidation.js

@@ -1,8 +1,9 @@
 import { redactSecrets } from "../trace/redact.js";
+import { recordFailOpen } from "../observability/fail-open.js";
 import { memoryMountRootOf } from "../memory-scope.js";
 import { DEFAULT_MODEL_REF, resolveMainModel } from "../model-select.js";
 import { backendOwnsControlPlane } from "../memory-operator-faces.js";
-import { expandTiers, MemoryEngine, readConsolidationDriverRun, resolveMemoryConsolidationDriver, runMemoryConsolidationDriver, } from "@sema-agent/core";
+import { CONSOLIDATION_WRITE_REFUSED_CODE, ConsolidationRefusedError, expandTiers, MemoryEngine, memoryConsolidationRefusedNotice, readConsolidationDriverRun, resolveMemoryConsolidationDriver, runMemoryConsolidationDriver, } from "@sema-agent/core";
 export function resolveConsolidationDriverSeat(deps) {
     let options;
     try {
@@ -316,6 +317,12 @@ export function assertAutoConsolidationWirable(input) {
         `unset, or set MEMORY_AUTO_CONSOLIDATION=off (unsetting it is NOT the same: the engine's named default is ON as of ` +
         `core 7.21.1).`);
 }
+export function createOperatorValveWriteJudge() {
+    return () => {
+        recordFailOpen("server.memory-consolidation.operator-valve-unjudged");
+        return { verdict: "no_objection" };
+    };
+}
 export function createMemoryConsolidationFaces(store, input) {
     const engine = new MemoryEngine({
         backend: store.backend,
@@ -331,7 +338,16 @@ export function createMemoryConsolidationFaces(store, input) {
         model: input.seat.model,
         scopes: input.scopes,
         run: (scope) => flight(scope, async () => {
-            const receipt = await runMemoryConsolidationDriver(engine, scope, input.seat.options);
+            const receipt = await runMemoryConsolidationDriver(engine, scope, {
+                ...input.seat.options,
+                writeJudge: input.writeJudge,
+                ...(input.onNotice !== undefined ? { onNotice: input.onNotice } : {}),
+            }).catch((err) => {
+                if (input.onNotice !== undefined && err instanceof ConsolidationRefusedError && err.code === CONSOLIDATION_WRITE_REFUSED_CODE) {
+                    input.onNotice(memoryConsolidationRefusedNotice({ code: err.code, scope, reason: err.message, ...(err.occurrenceId !== undefined ? { occurrenceId: err.occurrenceId } : {}) }));
+                }
+                throw err;
+            });
             if (receipt.stopDetail !== undefined) {
                 input.onStopDetail?.(buildStopDetailAudit({ scope, runId: receipt.runId, outcome: receipt.outcome, stopDetail: receipt.stopDetail }));
             }

package/dist/boot/parked-revive-gate.d.ts

@@ -72,9 +72,6 @@ export interface ParkedReviveGateDeps {
     };
     /** host 腿 cwd 占位的落地根(main.ts 的 `localRoot`;`config.localDataRoot` 优先)。 */
     readonly localRoot: string;
-    /** S-133:守卫集 `dataRoot` = boot 已铸的引擎记忆根(`memoryEngine.root`,boot/stores.ts 单一写者),不在本腿重推导
-     *  (重推导 = 第二个写者,7.59.0 重扫 codex 轮抓到 HTTP 腿 fallback 与 stores 不同源正是这一形)。`undefined` = 引擎未接。 */
-    readonly memoryEngineRoot: string | undefined;
     /** 沙箱 lane 的真 env 登记簿。缺省 = 进程内唯一那只(工厂装饰器写的同一个);测试注入自建实例。 */
     readonly slots?: SandboxPathEnvSlots;
 }

package/dist/boot/parked-revive-gate.js

@@ -11,7 +11,7 @@ function hostGateCwd(config, localRoot) {
     return join(config.localDataRoot ?? localRoot, "parked-revive-unrooted");
 }
 export function createParkedReviveInheritedGate(deps) {
-    const { config, question, approvalExemptionStore, logger, localRoot, approverSeat, memoryEngineRoot } = deps;
+    const { config, question, approvalExemptionStore, logger, localRoot, approverSeat } = deps;
     const slots = deps.slots ?? sandboxPathEnvSlots;
     return async (row, identity) => {
         const metadata = await chainMetadataOf(deps, row, identity);
@@ -33,7 +33,7 @@ export function createParkedReviveInheritedGate(deps) {
             question,
             ...(approvalExemptionStore !== undefined && rootSessionId ? { exemption: createDeploymentListExemption(approvalExemptionStore, rootSessionId, logger, "parked_revive") } : {}),
         });
-        const governed = applyRuntimeGovernance({ objective: "", toolPolicy: baseline }, createDeploymentGovernanceInputs(config, pathAdjudication, { engineDataRoot: memoryEngineRoot }));
+        const governed = applyRuntimeGovernance({ objective: "", toolPolicy: baseline }, createDeploymentGovernanceInputs(config, pathAdjudication));
         return {
             parentConstraints: [
                 {

package/dist/boot/resolve-spec.d.ts

@@ -39,8 +39,6 @@ export interface ResolveSpecCtx {
     /** 两张 per-session 登记簿的**租户围栏**(codex R1-F1):每次提交对拍本会话的主人,换主即清。
      *  论证(为什么 device lane 把这条从「不需要」变成「必需」)逐字见 `createSessionScopedRegistries` 头注。 */
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    /** S-506([ref] §5):装配期化身读数的写腿(per-session 登记簿,与围栏同一只;记忆座同步从那里读)。 */
-    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
     hookLlm: ReturnType<typeof createHookLlm>["hookLlm"];
     hookAgent: HookLlmCall;
     fleetBus: FleetEventBus;

package/dist/boot/resolve-spec.js

@@ -7,7 +7,7 @@ import { SessionEnvironmentSelection, selectEnvironmentTool } from "../capabilit
 import { sendUserFileTool } from "../capabilities/send-user-file-tool.js";
 import { gateScenarioRequest, mergeUserSkills, selectScenario } from "../capabilities/scenarios.js";
 import { stampHandsLane, toolPolicyForHands } from "../capabilities/hands-lane.js";
-import { buildNoticeLaneFacts, shouldDiscloseNoPersistentMemory, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
+import { buildNoticeLaneFacts, noPersistentMemoryNotice, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
 import { applyLongtailDefer } from "../capabilities/tool-defer.js";
 import { assertGuardPatternsUsable, buildApprovalGrantNotice, buildOnlySensitiveBaselineWarning, createApprovalBaselinePolicy, createDeploymentGovernanceInputs } from "../deployment-governance.js";
 import { createDeploymentListExemption, gateIntentUnserviceableReason, singleUserAutoAcceptBaselineApplies } from "../approval.js";
@@ -31,25 +31,23 @@ import { HttpError, createCodedHttpError, encodeCheckpointScope } from "../secur
 import { memoryProjectKeyFor, memorySpecForRequest } from "../memory-scope.js";
 import { inheritEnvFieldIssue, singleMemberOffFieldIssue } from "../request-value-closure.js";
 import { a2aForScenario, mcpForScenario } from "../web-admin-client/facade.js";
-import { normalizeAttachments, normalizeResilience, normalizeResumeAtMode, normalizeSuggestNextPrompts, promptProfileFromBody, resolveTaskLimits, retainBackgroundProcessesFromBody, taskAgentsSpecFragment, toolMaterializeStrategyFromBody, toolNameListFromBody } from "../spec-fields.js";
+import { normalizeAttachments, normalizeResilience, normalizeResumeAtMode, normalizeSuggestNextPrompts, promptProfileFromBody, resolveTaskLimits, retainBackgroundProcessesFromBody, taskAgentsSpecFragment, toolMaterializeStrategyFromBody, allowToolsSpecFragment, toolNameListFromBody } from "../spec-fields.js";
 import { isAbsoluteHostPath } from "@sema-agent/settings-schema";
 import { cwdHonored, deviceCwdHonored, effectiveHostWorkspace, inProcessSingleUserLane, parseAdditionalDirectories, satisfiedByProcessCwd, shellEnvMismatchCount } from "../task-cwd.js";
 import { assertRequestA2aUnlocked, resolveRequestA2a } from "../task-a2a.js";
 import { assertRequestMcpContentOrigin, assertRequestMcpUnlocked, resolveRequestMcp } from "../task-mcp.js";
 import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, acceptAppendSystemPrompt, applyTaskSettings, effectivePermissionMode, effectiveThinking, hasConstitutionAnchors, parseTaskSettings, taskHooksHonored, providerDropsAppend, settingsPermissionBucketIssue, withPermissionMode } from "../task-settings.js";
 import { skillDenyInertEntryOf } from "../rule-entry-list.js";
-import { enableForkFromBody, normalizeRetainSubagentSessions, selfOrchestrationFromBody } from "../task-workflow.js";
+import { TENANCY_WALL_CLOCK_BASE_SEC, enableForkFromBody, normalizeRetainSubagentSessions, selfOrchestrationFromBody } from "../task-workflow.js";
 import { redactSecrets } from "../trace/redact.js";
 import { DeferredSandboxPathEnv, isSandboxPathAdjudicationLane, sandboxPathEnvSlots } from "./deferred-sandbox-path-env.js";
 import { executionLaneCaps, executionLaneHomeDir, executionLaneOf } from "../execution-lane-caps.js";
 import { effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { withUnattendedLeg } from "../unattended-permission-mode.js";
 import { memoryFaceMounted } from "../memory-scope.js";
-import { createAssemblyIncarnationRead, sessionFaceReaderOf } from "./session-incarnation-seat.js";
 export function createResolveSpec(ctx) {
-    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, noteSessionIncarnation, hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
+    const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getCenterPrompts, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, checkpointStore, deploymentHooks, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, } = ctx;
     assertGuardPatternsUsable(config);
-    const assemblyIncarnationRead = createAssemblyIncarnationRead(sessionFaceReaderOf(ownerAware), (e, f) => logger.warn(e, f));
     const onlySensitiveBaseline = buildOnlySensitiveBaselineWarning(config, {
         approvalSeat: durableEnabled ? "durable" : "absent",
         singleUserAutoAcceptBaseline: singleUserAutoAcceptBaselineApplies(config),
@@ -124,8 +122,6 @@ export function createResolveSpec(ctx) {
                 throw new HttpError(422, why, { code: HOST_POSTURE_REFUSED_CODE });
         }
         const lane = bindSettingsCwdEnvAndModel(body, auth, gated, opts);
-        if (auth?.sessionId && assemblyIncarnationRead)
-            noteSessionIncarnation(auth.sessionId, await assemblyIncarnationRead(auth.sessionId));
         const anchors = await resolveHistoryAnchors(body, auth);
         const spec = assembleSpecLiteral(body, auth, req, opts, { ...gated, ...lane, ...anchors }, effMode);
         const folded = await foldGovernanceAndSettings(body, auth, spec, gated, effMode);
@@ -368,6 +364,7 @@ export function createResolveSpec(ctx) {
                 : {}),
             ...(body.excludeAllTools === true ? { excludeAllTools: true } : {}),
             ...(() => { const v = toolNameListFromBody(body.excludeTools); return v ? { excludeTools: v } : {}; })(),
+            ...allowToolsSpecFragment(body.allowTools),
             ...(() => { const v = toolNameListFromBody(body.deferTools); return v ? { deferTools: v } : {}; })(),
             ...(() => { const v = promptProfileFromBody(body.promptProfile); return v ? { promptProfile: v } : {}; })(),
             ...(() => { const v = toolMaterializeStrategyFromBody(body.toolMaterializeStrategy); return v ? { toolMaterializeStrategy: v } : {}; })(),
@@ -409,7 +406,7 @@ export function createResolveSpec(ctx) {
             thinking: effectiveThinking(body.reasoningEffort, parsedSettings.settings?.ultracode === true),
             getApiKeyAndHeaders: getKeyResolver(),
             ...(() => {
-                const limits = resolveTaskLimits(body.limits, taskLimitCaps, taskTimeoutSec, config.requirePrincipal, body.council === true || body.debate === true || scenarioName === "discuss", (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null }));
+                const limits = resolveTaskLimits(body.limits, taskLimitCaps, taskTimeoutSec, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null }));
                 const declarations = [];
                 if (taskLimitCaps.timeoutSec !== undefined)
                     declarations.push({ key: "server.limits.timeoutSecCap", value: String(taskLimitCaps.timeoutSec), reason: "env TASK_TIMEOUT_MAX_SEC (seconds; operator ceiling applied to caller limits.maxWalltimeMs as cap×1000)" });
@@ -422,7 +419,7 @@ export function createResolveSpec(ctx) {
                 if (config.maxTaskTokens > 0)
                     declarations.push({ key: "server.budget.maxTokensCap", value: String(config.maxTaskTokens), reason: "env MAX_TASK_TOKENS_MAX (operator ceiling; becomes the effective value when the caller sends none)" });
                 if (config.requirePrincipal === true)
-                    declarations.push({ key: "server.limits.wallClockBaseSec", value: "2400/3600", reason: "tenancy wall-clock base (multi-tenant; big tasks 3600) — TASK_TIMEOUT_SEC raises, never shrinks" });
+                    declarations.push({ key: "server.limits.wallClockBaseSec", value: String(TENANCY_WALL_CLOCK_BASE_SEC), reason: "tenancy wall-clock base (multi-tenant) — TASK_TIMEOUT_SEC raises, never shrinks" });
                 const maxCostUsd = cappedCeiling(body.maxCostUsd, config.maxTaskCostUsd);
                 const maxTokens = cappedCeiling(body.maxTokens, config.maxTaskTokens);
                 const degrade = (() => {
@@ -518,7 +515,7 @@ export function createResolveSpec(ctx) {
                 }),
                 ...laneHomeBase(),
             };
-        const governedBase = applyRuntimeGovernance(spec, createDeploymentGovernanceInputs(config, pathAdjudication, { engineDataRoot: memoryEngine?.root }));
+        const governedBase = applyRuntimeGovernance(spec, createDeploymentGovernanceInputs(config, pathAdjudication));
         let governed = governedBase;
         let effectiveSettings = effMode ? withPermissionMode(parsedSettings.settings, effMode) : parsedSettings.settings;
         if (appendLessPack && effectiveSettings?.outputStyle) {
@@ -600,16 +597,15 @@ export function createResolveSpec(ctx) {
                 throw new HttpError(422, `request settings cannot be applied as written: ${e.message}`);
             }
         }
-        if (shouldDiscloseNoPersistentMemory({
+        const notice = noPersistentMemoryNotice({
             memoryFaceMounted: memoryFaceMounted(governed.memory),
             declaredCapable: effectiveMemoryPersistenceCapable(config),
             hands: gated.hands,
             handsReadOnly: governed.handsReadOnly === true,
-            excludeAllTools: governed.excludeAllTools === true,
-            excludeTools: governed.excludeTools,
             ...buildNoticeLaneFacts(executionLaneOf(config.remoteExec?.provider)),
-        })) {
-            governed = { ...governed, promptProvider: withNoPersistentMemoryNotice(governed.promptProvider) };
+        });
+        if (notice !== "silent") {
+            governed = { ...governed, promptProvider: withNoPersistentMemoryNotice(governed.promptProvider, notice) };
         }
         return { governed, scratchpadDir, hostSemanticsLane };
     };
@@ -667,7 +663,6 @@ export function createResolveSpec(ctx) {
                 isolatedExecEnv,
                 hasExecutionEnv: executionLaneCaps(executionLaneOf(config.remoteExec?.provider)).coreRemoteExecutionEnv === "supported",
                 ...(config.autonomy ? { autonomy: config.autonomy } : {}),
-                explicitTeam: body.council === true || body.debate === true || scenarioName === "discuss",
             });
             logger.info("orchestration_routed", { mode: decision.mode, reason: decision.reason, sessionId: auth?.sessionId ?? null });
             if (decision.mode === "supervisor") {

package/dist/boot/retention-lane.d.ts

@@ -31,6 +31,7 @@
  */
 import type { RetentionPolicy, RetentionReceipt } from "@sema-agent/core";
 import type { RetentionMode } from "../config-types.js";
+import type { EndedSpace, SpaceReclaimer } from "../workspace-space.js";
 /** 同 domain 连续失败多少次算「卡住了」(fail-loud 的阈值)。`5` 与 reaper 家族的
  *  `REAPER_FAILURE_WARN_THRESHOLD` 同值同理由:一次抖动(一次重连、一次超时)正是容错要吸收的,
  *  只有**连败**才越过「可诊断」这条线。 */
@@ -56,7 +57,7 @@ export interface RetentionExecutor {
         toolResults: number;
     }>;
     expireCheckpoints(input: RetentionDestructiveInput): Promise<RetentionReceipt>;
-    deleteExpiredSessions(input: RetentionDestructiveInput): Promise<RetentionReceipt>;
+    deleteExpiredSessions(input: RetentionDestructiveInput): Promise<RetentionSessionsReceipt>;
     deleteOrphanToolResults(input: RetentionDestructiveInput): Promise<RetentionReceipt>;
 }
 /** 破坏性调用的入参(判定时点的三格随行 —— 理由逐字见车1 `RetentionAuditContext` 的头注)。 */
@@ -127,7 +128,17 @@ export interface RetentionSweepCtx {
      * `createThrottledReaperCatch` 必须建在 `setInterval` 之外是同一条理由。
      */
     streaks?: Map<string, number>;
+    /** 结束的空间的回收座(k8s 车道 ∧ 配了缓存卷或快照存储时在场;与会话删除协调器同一只):enforce 删掉会话树之后,把回执里结束了的空间交给它
+     *  (缓存卷、`space/` 快照、该会话停驻车道的快照一并回收)。它从不抛(失败 = 一行 + fail-open 计数);缺席 = 本部署没有可回收的东西。 */
+    spaceReclaimer?: SpaceReclaimer;
 }
+/**
+ * 会话树 sweep 的回执 = core 契约的 `RetentionReceipt` + 本仓一位:`endedSpaces` = 本次删掉的会话树里**结束了的空间**(会话 id + 住客空间键 = 会话化身;
+ * 读不出住客的空化身不算),present-iff 非空。lane 把它交给空间的回收座(与会话删除协调器同一只),缓存卷与快照随空间的终结回收。
+ */
+export type RetentionSessionsReceipt = RetentionReceipt & {
+    readonly endedSpaces?: readonly EndedSpace[];
+};
 /** 一轮的读数(给日志与判据用;lane 自己不做任何决策依赖它)。 */
 export interface RetentionSweepOutcome {
     /** 本轮真正处理完的 domain 数(丢租中止时 = 中止之前那些)。 */

package/dist/boot/retention-lane.js

@@ -99,6 +99,8 @@ async function sweepDomainEnforce(ctx, d) {
     };
     const checkpoints = await ctx.executor.expireCheckpoints(input);
     const sessions = await ctx.executor.deleteExpiredSessions(input);
+    if (sessions.endedSpaces !== undefined && ctx.spaceReclaimer !== undefined)
+        await ctx.spaceReclaimer.reclaim(sessions.endedSpaces);
     const toolResults = await ctx.executor.deleteOrphanToolResults(input);
     const touched = checkpoints.deleted + sessions.deleted + toolResults.deleted;
     if (touched > 0) {