@sema-agent/server 7.135.0 → 7.137.0

package/dist/boot/stage-05-execution-env.d.ts

@@ -7,6 +7,8 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
+    sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
+    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
@@ -30,7 +32,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
-    fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;
+    fleetUsage: import("../fleet-client.js").FleetUsageBins | undefined;
     memoryBundleFaces: import("../memory-bundle-engine.js").MemoryBundleFaces | undefined;
     memoryComplianceFaces: import("../memory-operator-faces.js").MemoryComplianceFaces | undefined;
     memoryOriginFaces: import("../memory-operator-faces.js").MemoryOriginFaces | undefined;
@@ -74,7 +76,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
-    sessionStore: import("@sema-agent/core").SessionStore;
+    sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;

package/dist/boot/stage-05-execution-env.js

@@ -6,18 +6,27 @@ import { headReadOf } from "../session-incarnation.js";
 import * as facts from "../capability-facts.js";
 import { sessionStoreLabelOf } from "../store-posture.js";
 import { runStore } from "./late-binds.js";
+import { SANDBOX_GIT_PLANE_OFF_TEXT } from "../sandbox-git-plane.js";
 export async function runStage05(ctx) {
     const { backend, config, instanceId, logger, metrics, sessionStore, taskAttachmentStore } = ctx;
     const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
-    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}) });
+    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, readSandboxGitPlane, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
     assertDeviceLaneWired(config.remoteExec?.provider === "device", deviceLane, executionEnvFactory !== undefined);
     assertWorkspaceSpaceReadable(facts.workspaceSpace(config), { headOf, spaceCommits }, facts.workspaceCache(config), sessionStoreLabelOf(config.sessionBackend, backend?.kind));
+    if (sandboxSecretSeatGate !== undefined)
+        await sandboxSecretSeatGate();
+    const sandboxGitPlane = await readSandboxGitPlane();
+    if (sandboxGitPlane.state === "on")
+        logger.info("credential_plane_sandbox_git", { state: "on", origins: sandboxGitPlane.origins });
+    else if (sandboxGitPlane.reason !== "single_user" && sandboxGitPlane.reason !== "lane_without_boundary") {
+        logger.info("credential_plane_sandbox_git", { state: "off", reason: sandboxGitPlane.reason, why: SANDBOX_GIT_PLANE_OFF_TEXT[sandboxGitPlane.reason] });
+    }
     const deploymentMods = createDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config) });
     if (config.toolTrace)
         logger.info("tool_trace_enabled", {});
     await assertDeploymentModsAdmitted(deploymentMods);
-    return { ...ctx, deploymentMods, deviceLane, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
+    return { ...ctx, deploymentMods, deviceLane, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map

package/dist/boot/stage-06-runners.d.ts

@@ -70,6 +70,8 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
+    sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
+    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
@@ -93,7 +95,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
-    fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;
+    fleetUsage: import("../fleet-client.js").FleetUsageBins | undefined;
     memoryBundleFaces: import("../memory-bundle-engine.js").MemoryBundleFaces | undefined;
     memoryComplianceFaces: import("../memory-operator-faces.js").MemoryComplianceFaces | undefined;
     memoryOriginFaces: import("../memory-operator-faces.js").MemoryOriginFaces | undefined;
@@ -137,7 +139,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
-    sessionStore: import("@sema-agent/core").SessionStore;
+    sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;

package/dist/boot/stage-06-runners.js

@@ -18,6 +18,7 @@ import { assertApprovalAskRuleMaterialOnBackend } from "./stores.js";
 import { createParkCommitWatch } from "../plugins/park-commit-watch.js";
 import { CHECKPOINT_CTX_SEALING_REQUIRED } from "../http/checkpoint-ctx.js";
 import { sealCheckpointCtxCredentialsM28 } from "../checkpoint-ctx-seal-m28.js";
+import { retirePromptProfileM30 } from "../stored-request-prompt-profile-m30.js";
 import { createRuntimeCaps } from "./runtime-caps.js";
 import { createEngineNoticeForwarder, createRunnerDeps, createSharedRunnerDeps } from "./runner-deps.js";
 import { defaultEngineNoticeRouter } from "../trace/engine-notice-wire.js";
@@ -37,8 +38,11 @@ export async function runStage06(ctx) {
     if (checkpointStore !== undefined) {
         if (checkpointCtxSealing === undefined)
             throw new Error(CHECKPOINT_CTX_SEALING_REQUIRED);
-        const m28 = await sealCheckpointCtxCredentialsM28(checkpointStore, checkpointCtxSealing, { today: new Date().toISOString().slice(0, 10) });
+        const today = new Date().toISOString().slice(0, 10);
+        const m28 = await sealCheckpointCtxCredentialsM28(checkpointStore, checkpointCtxSealing, { today });
         logger.info("checkpoint_ctx_credentials_sealed", { ...m28, note: "one-time migration M28: plaintext request credentials in suspended tasks' resume contexts sealed in place" });
+        const m30 = await retirePromptProfileM30(checkpointStore, { today });
+        logger.info("checkpoint_ctx_prompt_profile_rewritten", { ...m30, note: "one-time migration M30: the retired request key promptProfile in suspended tasks' stored requests rewritten in place (classic becomes promptLean: false); a stored request this did not reach is refused on resume" });
     }
     const { elicitation, question, toolApproval, durableEnabled, streamApprovalGate, approvalAskAudit, approvalExemptionStore, sendUserFileEmitter, sendFileLedger, sendUserFileToolSpec } = createLiveCoordinators({
         config, logger, backend, sendUserFileTaskEnvs, ruleConsent, parkCommits,

package/dist/boot/stage-07-capability-layer.d.ts

@@ -9,6 +9,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     }) => Promise<import("../security.js").AuthContext>;
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
+    loadedSkills: import("../capabilities/skills.js").LoadedSkill[];
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
     parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
@@ -85,6 +86,8 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
+    sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
+    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
@@ -108,7 +111,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
-    fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;
+    fleetUsage: import("../fleet-client.js").FleetUsageBins | undefined;
     memoryBundleFaces: import("../memory-bundle-engine.js").MemoryBundleFaces | undefined;
     memoryComplianceFaces: import("../memory-operator-faces.js").MemoryComplianceFaces | undefined;
     memoryOriginFaces: import("../memory-operator-faces.js").MemoryOriginFaces | undefined;
@@ -152,7 +155,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
-    sessionStore: import("@sema-agent/core").SessionStore;
+    sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -202,6 +202,6 @@ export async function runStage07(ctx) {
     if (defaultScenarioRefusal !== undefined)
         throw new Error(defaultScenarioRefusal);
     logger.info("capabilities", { skills: skills.length, scenarios: Object.keys(scenarios), repoTools: Boolean(repoClient) });
-    return { ...ctx, approvalExemptionStore, approvalNonceStore, authorize, imageBakes, imageIndex, parkedReviveInheritedGate, parkedReviveSurface, rateLimiter, resumeAnchorStore, runStore, scenarioDetails, scenarios, selectEnvTool, taskLimitCaps, taskTimeoutSec, userInputLedger, userInputLedgerStore, webSearchProvider: webSearchCfg?.provider };
+    return { ...ctx, approvalExemptionStore, approvalNonceStore, authorize, imageBakes, imageIndex, loadedSkills: skills, parkedReviveInheritedGate, parkedReviveSurface, rateLimiter, resumeAnchorStore, runStore, scenarioDetails, scenarios, selectEnvTool, taskLimitCaps, taskTimeoutSec, userInputLedger, userInputLedgerStore, webSearchProvider: webSearchCfg?.provider };
 }
 //# sourceMappingURL=stage-07-capability-layer.js.map

package/dist/boot/stage-08-reapers.d.ts

@@ -22,6 +22,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     }) => Promise<import("../security.js").AuthContext>;
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
+    loadedSkills: import("../index.js").LoadedSkill[];
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
     parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
@@ -98,6 +99,8 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
+    sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
+    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
@@ -121,7 +124,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
-    fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;
+    fleetUsage: import("../fleet-client.js").FleetUsageBins | undefined;
     memoryBundleFaces: import("../memory-bundle-engine.js").MemoryBundleFaces | undefined;
     memoryComplianceFaces: import("../memory-operator-faces.js").MemoryComplianceFaces | undefined;
     memoryOriginFaces: import("../memory-operator-faces.js").MemoryOriginFaces | undefined;
@@ -165,7 +168,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
-    sessionStore: import("@sema-agent/core").SessionStore;
+    sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;

package/dist/boot/stage-08-reapers.js

@@ -5,12 +5,13 @@ import { startRetentionLane, RETENTION_LEASE_TTL_FACTOR } from "./retention-lane
 import { createLimitSync } from "./limit-sync.js";
 import { runDenySweep } from "./late-binds.js";
 export function runStage08(ctx) {
-    const { approvalAskAudit, approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, spaceReclaimer, handslessRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, userInputLedger, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
+    const { approvalAskAudit, approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, spaceReclaimer, sandboxPodReaper, handslessRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, userInputLedger, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
     const reaper = startReapers({
         config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, parkCommits,
         rateLimiter, costQuota, toolResultStore, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap,
         workflowNotifyGate, workflowRecoverOpts, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore,
         backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore, userInputLedger, approvalAskAudit,
+        ...(sandboxPodReaper !== undefined ? { sandboxPodReaper } : {}),
         getRunDenySweep: () => runDenySweep,
     });
     const ttlMs = config.retentionSweep.intervalSec * 1000 * RETENTION_LEASE_TTL_FACTOR;

package/dist/boot/stage-09-leader.d.ts

@@ -46,6 +46,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     }) => Promise<import("../security.js").AuthContext>;
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
+    loadedSkills: import("../index.js").LoadedSkill[];
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
     parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
@@ -122,6 +123,8 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
+    sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
+    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
@@ -145,7 +148,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
-    fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;
+    fleetUsage: import("../fleet-client.js").FleetUsageBins | undefined;
     memoryBundleFaces: import("../memory-bundle-engine.js").MemoryBundleFaces | undefined;
     memoryComplianceFaces: import("../memory-operator-faces.js").MemoryComplianceFaces | undefined;
     memoryOriginFaces: import("../memory-operator-faces.js").MemoryOriginFaces | undefined;
@@ -189,7 +192,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
-    sessionStore: import("@sema-agent/core").SessionStore;
+    sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;

package/dist/boot/stage-10-http-server.d.ts

@@ -45,6 +45,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     }) => Promise<import("../security.js").AuthContext>;
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
+    loadedSkills: import("../index.js").LoadedSkill[];
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
     parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
@@ -121,6 +122,8 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
+    sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
+    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
@@ -144,7 +147,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
-    fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;
+    fleetUsage: import("../fleet-client.js").FleetUsageBins | undefined;
     memoryBundleFaces: import("../memory-bundle-engine.js").MemoryBundleFaces | undefined;
     memoryComplianceFaces: import("../memory-operator-faces.js").MemoryComplianceFaces | undefined;
     memoryOriginFaces: import("../memory-operator-faces.js").MemoryOriginFaces | undefined;
@@ -188,7 +191,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../plugins/store-backend.js").SessionCaptureRecordSource | undefined;
-    sessionStore: import("@sema-agent/core").SessionStore;
+    sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;

package/dist/boot/stage-10-http-server.js

@@ -29,7 +29,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -168,6 +168,7 @@ export async function runStage10(ctx) {
         writeProtection: buildWriteProtectionPosture(config),
         webSearchProvider,
         sealedKeyPublic: webAdmin.sealedKeyPublic,
+        sandboxGitPlane,
         instanceId,
         capabilities: {
             version: serviceVersion(),
@@ -197,7 +198,7 @@ export async function runStage10(ctx) {
         sessionEventsMaxConnections: sessionWatchRegistry ? posIntEnv(process.env.SESSION_EVENTS_MAX_CONNS, 256, 100_000) : undefined,
     };
     const resolveSpec = createResolveSpec({
-        config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver,
+        config, logger, metrics, localRoot, scenarios, loadedSkills, principalCaps, centerRuntimeCapsResolver,
         getKeyResolver: () => webAdmin.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,

package/dist/boot/stores.d.ts

@@ -37,7 +37,7 @@ export declare function openStores(ctx: OpenStoresCtx): Promise<{
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryExportBackend: MemoryBackend | undefined;
     memorySyncRunner: MemorySyncRunner | undefined;
-    sessionStore: import("@sema-agent/core").SessionStore;
+    sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;

package/dist/boot/stores.js

@@ -9,7 +9,7 @@ import { TiDBMemoryEngineBackend, ensureTiDBMemoryEngineSchema } from "../plugin
 import { PgMemoryHistoryStore, PgMemorySyncStore, ensurePgMemoryHistorySchema, ensurePgMemorySyncSchema } from "../plugins/memory-sync-store-pg.js";
 import { TiDBMemoryHistoryStore, TiDBMemorySyncStore, ensureTiDBMemoryHistorySchema, ensureTiDBMemorySyncSchema } from "../plugins/memory-sync-store-tidb.js";
 import { MinioBlobBackend } from "../plugins/blob-backend.js";
-import { ensureSnapshotBucket } from "../plugins/snapshot-bucket-presence.js";
+import { ensureSnapshotBuckets } from "../plugins/snapshot-bucket-presence.js";
 import { PgBackgroundAgentStore, TiDBBackgroundAgentStore, ensurePgBackgroundAgentSchema, ensureTiDBBackgroundAgentSchema } from "../plugins/background-agent-store-sql.js";
 import { PgMailboxStore, TiDBMailboxStore, ensurePgMailboxSchema, ensureTiDBMailboxSchema } from "../plugins/mailbox-store-sql.js";
 import { createDropOnlyRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
@@ -58,8 +58,7 @@ export async function openStores(ctx) {
     let backend;
     let storeDegradedReason;
     const dsnConfigured = !!(config.tidb || config.pg);
-    if (config.snapshotBlobStore)
-        await ensureSnapshotBucket(config.snapshotBlobStore, config.storeLockWaitMs, logger);
+    await ensureSnapshotBuckets(config, logger);
     const wantDb = config.sessionBackend === "tidb" ||
         config.dbBackend === "local" ||
         (config.sessionBackend === "auto" && dsnConfigured);

package/dist/boot/web-admin.js

@@ -12,7 +12,7 @@ import { applyCenterArtifact, centerSourceOnError, withPromptArtifactBackfill }
 import { centerScenarios, centerScenarioDetails } from "../capabilities/scenarios.js";
 import { isRosterGateArmed } from "../config.js";
 import { DEPLOYMENT_SHAPE_PREDICATES } from "../deployment-shape.js";
-import { defaultLkgPath, defaultSkillCacheDir, saveLkg, loadLkg, legacyV1LkgPath, migrateV1Lkg } from "../config-lkg.js";
+import { defaultLkgPath, defaultSkillCacheDir, saveLkg, loadLkg } from "../config-lkg.js";
 import { answerStillCurrent, centerStateBin, credentialIdentityNow, judgeCenterCredentialAtBoot } from "../center-credential.js";
 import { createCenterConfigTier } from "../center-config-tier.js";
 import { buildCenterCredentialHealthView, createCenterCredentialRenewer } from "../center-credential-renewer.js";
@@ -21,6 +21,7 @@ import { createConfigProvider, raceBootFetch, serviceConfigSourceKind, BOOT_FETC
 import { ConfigDirUntrustedError } from "../config-dir-trust.js";
 import { createKeyResolver } from "../key-resolver.js";
 import { buildSealedKeyPublicFace, ensureCheckpointCtxSealing, ensureSealedKeyStore, reportExecutionPublicKey } from "../sealed-key.js";
+import { anthropicLaneCredentialOf } from "../model-route-gap.js";
 import { applyEffective, applyCenterReadFace, buildReadFaceBaseline, buildReadFaceSwapCandidate, restoreReadFaceBaseline, mutateInPlace, logEffectiveDiff, applySkillsManifest, skillManifestEntriesNotInstalled, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, withModelPlaneOf, fullyLandedForLkg, NO_CENTER_EFFECTIVE, isNoCenterEffective, fetchPromptArtifact } from "../web-admin-client/facade.js";
 import { buildConfigHandoff, buildRestartSignal, configHandoffMissing } from "../fleet/engine-signal.js";
 import { createMcpRevocationLedger, enabledMcpEntries } from "../web-admin-client/mcp-revocation.js";
@@ -133,7 +134,7 @@ export async function createWebAdminRuntime(ctx) {
         }
         return r;
     };
-    const sealedKeyDir = join(config.localDataRoot ?? localRoot, "sealed-key");
+    const sealedKeyDir = config.sealedKeyDir ?? join(config.localDataRoot ?? localRoot, "sealed-key");
     let sealedKeys;
     try {
         sealedKeys = await ensureSealedKeyStore(sealedKeyDir, logger);
@@ -146,6 +147,11 @@ export async function createWebAdminRuntime(ctx) {
         });
     }
     catch (err) {
+        if (config.sealedKeyDir !== undefined) {
+            throw new Error(`SEALED_KEY_DIR=${config.sealedKeyDir}: the declared model-key custody directory cannot hold a sealed-key store (${String(err)}) — ` +
+                `refusing to start rather than run with every sealed model unusable (no_key_store). Make that directory creatable, owned by ` +
+                `the service user and chmod-able to 0700 on a writable filesystem, or unset SEALED_KEY_DIR to use <data root>/sealed-key.`);
+        }
         logger.warn("sealed_key_store_unavailable", { err: String(err), note: "sealed api keys cannot be unsealed on this host — models carrying sealedApiKey will fail loud per-model" });
     }
     let checkpointCtxSealing;
@@ -153,7 +159,7 @@ export async function createWebAdminRuntime(ctx) {
         checkpointCtxSealing = await ensureCheckpointCtxSealing(sealedKeyDir, logger);
     }
     catch (err) {
-        logger.warn("checkpoint_ctx_sealing_unavailable", { err: err instanceof Error ? err.message : String(err), note: "suspended tasks' request credentials cannot be sealed on this host; with durable approvals on the boot refuses — make <data root>/sealed-key/checkpoint-ctx-keys/ creatable and chmod-able by the service, or repair / remove a key file there whose public and private halves do not belong together" });
+        logger.warn("checkpoint_ctx_sealing_unavailable", { err: err instanceof Error ? err.message : String(err), dir: join(sealedKeyDir, "checkpoint-ctx-keys"), note: "suspended tasks' request credentials cannot be sealed on this host; with durable approvals on the boot refuses — make that directory (under the sealed-key custody directory: SEALED_KEY_DIR, default <data root>/sealed-key) creatable and chmod-able by the service, or repair / remove a key file there whose public and private halves do not belong together" });
     }
     const configProvider = serviceConfigSourceKind(config) !== undefined
         ? createConfigProvider({
@@ -458,19 +464,6 @@ export async function createWebAdminRuntime(ctx) {
                 return null;
             }
             const lkgPath = lkgPathFor(identity);
-            const legacy = await migrateV1Lkg({ legacyPath: config.configLkgPath ?? legacyV1LkgPath(config, cc?.worker), binPath: lkgPath, worker: cc?.worker, identity });
-            switch (legacy.outcome) {
-                case "none":
-                    break;
-                case "migrated":
-                    logger.info("config_lkg_migrated", { from: legacy.from, retiredTo: legacy.retiredTo, to: lkgPath, note: "formatVersion 1 LKG (pull-token identity = this worker) migrated once into this credential identity's bin; the old file was renamed, not deleted" });
-                    if (legacy.retireError !== undefined)
-                        logger.warn("config_lkg_legacy_not_retired", { path: legacy.from, reason: legacy.retireError, note: "the bin was written and is used; only the old file's rename / copy failed" });
-                    break;
-                case "not-migrated":
-                    logger.warn("config_lkg_unusable", { path: legacy.path, reason: legacy.reason, note: "env fallback serves; the cache rewrites on the next clean candidate" });
-                    return null;
-            }
             const read = await loadLkg(lkgPath, cc?.worker, identity);
             if (!read.lkg) {
                 if (read.reason !== "absent")
@@ -800,7 +793,7 @@ export async function createWebAdminRuntime(ctx) {
         },
         initKeyResolver() {
             keyResolver = createKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
-            if (process.env.ANTHROPIC_AUTH_TOKEN && !process.env.ANTHROPIC_API_KEY && (Object.keys(config.modelApiKeys).length > 0 || Object.keys(config.modelApiKeyEnv).length > 0)) {
+            if (anthropicLaneCredentialOf(config.anthropic ?? {})?.kind === "bearer" && (Object.keys(config.modelApiKeys).length > 0 || Object.keys(config.modelApiKeyEnv).length > 0)) {
                 logger.warn("per_model_key_bearer_gateway_combo", {
                     perModelKeys: Object.keys(config.modelApiKeys).length + Object.keys(config.modelApiKeyEnv).length,
                     note: "ANTHROPIC_AUTH_TOKEN (Bearer) deployment with per-model keys: core's per-call auth REPLACES the Authorization header with x-api-key for those models — a Bearer-only gateway will 401 them. Remove the per-model key for such models, or use a gateway accepting x-api-key.",

package/dist/brain.js

@@ -6,6 +6,7 @@ import { createHash } from "node:crypto";
 import { isModelKeyPoison, modelKeyPoisonIdentity } from "./key-resolver.js";
 import { anthropicRouteRoot, brainLaneFor, mountRoutes, routeTableOf } from "./model-provider.js";
 import { openaiRouteBaseUrl } from "./model-route-endpoint.js";
+import { anthropicLaneCredentialOf } from "./model-route-gap.js";
 import { catalogEntryFingerprint } from "./web-admin-client/restart-signal.js";
 import { buildDisplaySafeRefusal, buildDisplaySafeUrl } from "./trace/redact.js";
 import { createModelReachBrain } from "./model-unreachable-notice.js";
@@ -82,9 +83,7 @@ export function createBrainAssembly(config, deps = {}) {
             ? createFailoverBrain(openaiBrains)
             : openaiBrains[0];
     const brainRoutes = mountRoutes(config, (anthropicCfg) => constructRouteBrain("anthropic route", [anthropicCfg.baseUrl], () => createAnthropicBrain({
-        ...(anthropicCfg.authToken
-            ? { headers: { Authorization: `Bearer ${anthropicCfg.authToken}` } }
-            : { apiKey: anthropicCfg.apiKey }),
+        ...anthropicCredentialFields(anthropicLaneCredentialOf(anthropicCfg)),
         baseUrl: anthropicRouteRoot(anthropicCfg),
         version: anthropicCfg.version,
         cacheBreakpoints: anthropicCfg.cacheBreakpoints,
@@ -139,6 +138,16 @@ export function createBrainAssembly(config, deps = {}) {
     }
     return { brain: createModelReachBrain(brain), degradeRoute: { read: () => ({ baked: degradeBaked, current: degradeRouteFingerprint(config) }) } };
 }
+function anthropicCredentialFields(credential) {
+    if (credential === undefined)
+        return {};
+    switch (credential.kind) {
+        case "x-api-key":
+            return { apiKey: credential.value };
+        case "bearer":
+            return { headers: { Authorization: `Bearer ${credential.value}` } };
+    }
+}
 export function createBrain(config, deps = {}) {
     return createBrainAssembly(config, deps).brain;
 }

package/dist/broker/broker.d.ts

@@ -0,0 +1,89 @@
+import * as net from "node:net";
+import * as tls from "node:tls";
+import type { Duplex } from "node:stream";
+import { type GitEndpoint } from "./http1.js";
+import { LeaseBook, type LeaseBookEvent, type MonotonicClock } from "./lease-book.js";
+/** Every line the broker logs (closed set; none carries a credential or a body). */
+export type BrokerLogEvent = LeaseBookEvent | {
+    event: "refused";
+    status: number;
+    rule: string;
+} | {
+    event: "exchange";
+    i: number;
+    method: string;
+    endpoint: GitEndpoint;
+    upstreamStatus: number;
+    authenticated: boolean;
+} | {
+    event: "upstream_failed";
+    i: number;
+    endpoint: GitEndpoint;
+    problem: string;
+} | {
+    event: "aborted";
+    i: number;
+    endpoint: GitEndpoint;
+    why: string;
+} | {
+    event: "listening";
+    host: string;
+    port: number;
+} | {
+    event: "lease_file_unreadable";
+    problem: string;
+};
+export interface UpstreamTarget {
+    readonly protocol: "https:" | "http:";
+    readonly hostname: string;
+    readonly port: number;
+}
+/** Opens the upstream connection for one exchange (production: {@link createUpstreamConnector}; the pins inject a plain socket). */
+export type UpstreamConnector = (target: UpstreamTarget) => Duplex;
+/**
+ * Rule 9. https ⇒ `tls.connect` with the runtime's default trust store, `rejectUnauthorized: true` and the origin's host name as SNI / the
+ * name checked (no CA override, no identity override, no knob to skip either); http ⇒ a plain socket (an http entry is never usable, so it
+ * never carries a credential). No proxy environment is read.
+ */
+export declare function createUpstreamConnector(impl?: {
+    tlsConnect?: (opts: tls.ConnectionOptions) => Duplex;
+    netConnect?: (opts: net.NetConnectOpts) => Duplex;
+}): UpstreamConnector;
+/** The two upstream bounds (rule 14). */
+export interface BrokerUpstreamTimeouts {
+    readonly connectMs: number;
+    readonly headersMs: number;
+}
+/** The bounds every broker runs with — the two constants; nothing configures them. */
+export declare const BROKER_UPSTREAM_TIMEOUTS_DEFAULT: BrokerUpstreamTimeouts;
+export interface BrokerDeps {
+    readonly book: LeaseBook;
+    readonly connect: UpstreamConnector;
+    readonly log: (e: BrokerLogEvent) => void;
+    /** Test seam only (the pins shorten the bounds); absent ⇒ {@link BROKER_UPSTREAM_TIMEOUTS_DEFAULT}. */
+    readonly timeouts?: BrokerUpstreamTimeouts;
+}
+/** The broker's listener: each connection carries one request. */
+export declare function createBrokerServer(deps: BrokerDeps): net.Server;
+/** Rule 11: a Location resolved against the upstream request URL stays only if it is this origin, inside the git namespace, with an allowed query. */
+export declare function rewriteLocation(location: string, upstreamUrl: string, origin: string, i: number): string | undefined;
+/**
+ * The broker process: load the lease file, listen on the loopback, re-read the file every `pollMs` (a changed text is loaded; an
+ * unreadable file is a refused file — everything withdrawn). Returns once listening.
+ */
+export declare function runBroker(opts: {
+    leasePath: string;
+    host: string;
+    port: number;
+    pollMs: number;
+    log: (e: BrokerLogEvent) => void;
+    clock?: MonotonicClock;
+    connect?: UpstreamConnector;
+}): Promise<{
+    port: number;
+    book: LeaseBook;
+    close(): Promise<void>;
+}>;
+/** The readiness probe (same program, `--probe`): GET the local ready route; true ⇔ 200 within `timeoutMs`. */
+export declare function probeBroker(host: string, port: number, timeoutMs: number): Promise<boolean>;
+//# sourceMappingURL=broker.d.ts.map