@sema-agent/server 7.138.0 → 7.139.0

package/dist/bench/s1/arms.js

@@ -24,7 +24,7 @@ export function bindingFromCheckpoint(cp) {
 }
 const ORACLE_UNDELIVERED = { delivered: false, hiddenTestsGreen: false, buildPassed: false, invariantsOk: false };
 function emptyCostBreakdown() {
-    return { llmRootMicroUsd: 0, nestedSubagentMicroUsd: 0, memoryConsolidationMicroUsd: 0, compactionMicroUsd: 0 };
+    return { llmRootMicroUsd: 0, nestedSubagentMicroUsd: 0, compactionMicroUsd: 0 };
 }
 export function classifyRunStatus(input) {
     if (input.status === "failed")
@@ -40,7 +40,6 @@ export function captureStats(stats) {
         costBreakdown: {
             llmRootMicroUsd: bd.llmRootMicroUsd,
             nestedSubagentMicroUsd: bd.nestedSubagentMicroUsd,
-            memoryConsolidationMicroUsd: bd.memoryConsolidationMicroUsd,
             compactionMicroUsd: bd.compactionMicroUsd,
         },
         humanReview: { count: hr.count, totalWaitMs: hr.totalWaitMs, gates: hr.gates },
@@ -55,7 +54,6 @@ export async function driveSupSuspendResume(initial, deps, implSpec, trap, advan
             return;
         c1Acc.llmRootMicroUsd += b.llmRootMicroUsd;
         c1Acc.nestedSubagentMicroUsd += b.nestedSubagentMicroUsd;
-        c1Acc.memoryConsolidationMicroUsd += b.memoryConsolidationMicroUsd;
         c1Acc.compactionMicroUsd += b.compactionMicroUsd;
     };
     let exitedViaBreak = false;

package/dist/bench/s1/run-firm.js

@@ -109,7 +109,7 @@ function infraFailedRow(cell, ctx) {
         oracle: { delivered: false, hiddenTestsGreen: false, buildPassed: false, invariantsOk: false },
         delivery: { withheld: false },
         stats: {
-            costBreakdown: { llmRootMicroUsd: 0, nestedSubagentMicroUsd: 0, memoryConsolidationMicroUsd: 0, compactionMicroUsd: 0 },
+            costBreakdown: { llmRootMicroUsd: 0, nestedSubagentMicroUsd: 0, compactionMicroUsd: 0 },
             humanReview: { count: 0, totalWaitMs: 0, gates: [] },
         },
         wallTimeSec: 0,
@@ -221,7 +221,7 @@ export function positiveIntArg(raw, def, flag) {
 function dryRunMockFactory() {
     return (trap, seed) => {
         const stats = {
-            costBreakdown: { llmRootMicroUsd: 50_000, nestedSubagentMicroUsd: 0, memoryConsolidationMicroUsd: 0, compactionMicroUsd: 0 },
+            costBreakdown: { llmRootMicroUsd: 50_000, nestedSubagentMicroUsd: 0, compactionMicroUsd: 0 },
             humanReview: { count: 0, totalWaitMs: 0, gates: [] },
         };
         const green = trap.id !== "C2-honest-bound";

package/dist/boot/device-lane.d.ts

@@ -1,7 +1,7 @@
 /**
  * [ref] A10 分段 —— **device lane 的装配件**(device-executor-lane-v2 §4.6/§4.7/§5,车A-4)。
  *
- * 一处建齐三件活对象:**店**(四表双库的 `DeviceStore`)→ **准入链**(`DeviceEnrollment`,含跨副本
+ * 一处建齐三件活对象:**店**(三表双库的 `DeviceStore`;绑定写在根会话行的执行格上)→ **准入链**(`DeviceEnrollment`,读会话店的执行席,含跨副本
  * 限速座)→ **WS 汇聚端**(`DeviceWsHub`)。三件的依赖是单向的(hub 吃 store+enrollment),所以它们
  * 必须在同一处按序建 —— 拆到三处装配点会让「hub 拿到的是不是同一只店」变成一个要读三个文件才答得出
  * 的问题(而答错的后果是 presence 与租约各写各的)。
@@ -15,6 +15,7 @@
  */
 import { type DeviceEnrollment } from "../device-enrollment.js";
 import type { DeviceStore } from "../device-store.js";
+import type { ExecutionPlacementSeat } from "../execution-placement.js";
 import { type DeviceWsHub } from "../device-ws-hub.js";
 import type { ServiceConfig } from "../config.js";
 import type { Logger } from "../observability/logger.js";
@@ -25,6 +26,8 @@ export interface DeviceLaneCtx {
     logger: Logger;
     metrics: Metrics;
     backend: StoreBackend | undefined;
+    /** 会话店的执行席(`sessionStore.executionPlacement`):根会话 ↔ 设备绑定的唯一载体与唯一读。device 车道只在 SQL 后端 ⇒ 席恒在;缺 = 装配缝 ⇒ 本函数响亮抛。 */
+    seat: ExecutionPlacementSeat | undefined;
     /** 本副本 id(写进连接租约行 —— §4.6 的跨副本排障面)。 */
     replicaId: string;
 }
@@ -32,6 +35,8 @@ export interface DeviceLane {
     store: DeviceStore;
     enrollment: DeviceEnrollment;
     hub: DeviceWsHub;
+    /** 会话店的执行席(准入链、工厂、换绑门读的同一只)。 */
+    seat: ExecutionPlacementSeat;
 }
 /**
  * 注册口(`POST /v1/devices/enroll`,pre-auth)的限速策略 —— **本车道自己的地板,不挂任何运维旋钮**。
@@ -49,7 +54,7 @@ export declare const DEVICE_ENROLL_RATE_POLICY: {
     readonly windowMs: 60000;
 };
 /**
- * 建齐 device lane 的三件。返回 `undefined` = **建不起来**(没有 SQL 后端 ⇒ 没有四表店)。
+ * 建齐 device lane 的三件。返回 `undefined` = **建不起来**(没有 SQL 后端 ⇒ 没有设备店)。
  *
  * 只在调用方判定本部署是 device 车道时调用;非 device 车道调用它是纯浪费(会白建一只 WS server)。
  */
@@ -61,7 +66,7 @@ export declare function createDeviceLane(ctx: DeviceLaneCtx): DeviceLane | undef
  * config 层的门①判的是「运维配没配 SQL 坐标」——那句话回答的是**意图**。它回答不了「这次启动**真的
  * 拿到**了店吗」:`openStoreBackendWithFallback` 曾在 `SESSION_BACKEND=auto` 下,SQL 连不上 /
  * 建表失败 ⇒ `backend=undefined` + 一条 warn 就继续启动(那条降级臂已退役:配了 DSN 的库窗内重试、到窗拒启,见 `plugins/store-open-wait.ts`;
- * 仍走得到本门的形:`DB_BACKEND=mysql|pg` 声明了 SQL 而 `SESSION_BACKEND=memory`,刻意不持久 ⇒ 不开店)。那次启动里 device lane 的四表整个不在,
+ * 仍走得到本门的形:`DB_BACKEND=mysql|pg` 声明了 SQL 而 `SESSION_BACKEND=memory`,刻意不持久 ⇒ 不开店)。那次启动里 device lane 的表整个不在,
  * 而 `boot/execution-env.ts` 的第七臂拿不到三件 ⇒ `executionEnvFactory` 落 `undefined` ⇒ core 拿
  * `StubExecutionEnv`:**一台自称在员工设备上执行的 worker 实际在自己进程里跑,而且回执同形**。
  * 那正是 [ref]「执行车道禁静默降级」点名的样板病,也正是 A-1 那条临时门当初要拦的东西 —— 换执法点,

package/dist/boot/device-lane.js

@@ -2,13 +2,18 @@ import { createDeviceEnrollment, createFixedWindowRateLimiter } from "../device-
 import { createDeviceWsHub } from "../device-ws-hub.js";
 export const DEVICE_ENROLL_RATE_POLICY = { limit: 10, windowMs: 60_000 };
 export function createDeviceLane(ctx) {
-    const { config, logger, metrics, backend, replicaId } = ctx;
+    const { config, logger, metrics, backend, replicaId, seat } = ctx;
     const store = backend?.device?.();
     if (!store)
         return undefined;
+    if (seat === undefined) {
+        throw new Error("device lane: the device store is wired but the session store carries no execution placement seat — the session↔device binding lives on the " +
+            "root session row and is read only through that seat; refusing to start a device lane that could neither bind nor read a binding (assembly bug)");
+    }
     const knobs = config.remoteExec?.provider === "device" ? config.remoteExec : undefined;
     const enrollment = createDeviceEnrollment({
         store,
+        seat,
         rateLimiter: createFixedWindowRateLimiter(DEVICE_ENROLL_RATE_POLICY),
     });
     const hub = createDeviceWsHub({
@@ -33,7 +38,7 @@ export function createDeviceLane(ctx) {
         maxPreAuthPerRemote: knobs?.maxPreAuthPerRemote ?? 8,
         enrollRateLimit: `${DEVICE_ENROLL_RATE_POLICY.limit}/${DEVICE_ENROLL_RATE_POLICY.windowMs / 1000}s per caller identity (per replica; independent of RATE_LIMIT_RPM)`,
     });
-    return { store, enrollment, hub };
+    return { store, enrollment, hub, seat };
 }
 export function assertDeviceLaneWired(isDeviceLane, lane, hasFactory) {
     if (!isDeviceLane)

package/dist/boot/execution-env.d.ts

@@ -1,11 +1,12 @@
 import { TaskEnvRegistry } from "../capabilities/sandbox-file-send.js";
 import { SessionEnvironmentSelection } from "../capabilities/select-environment-tool.js";
-import type { ServiceConfig } from "../config.js";
+import { type ServiceConfig } from "../config.js";
 import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import { PerTaskImageRegistry } from "../per-task-image.js";
 import type { DeviceEnrollment } from "../device-enrollment.js";
 import type { DeviceStore } from "../device-store.js";
+import type { ExecutionPlacementSeat } from "../execution-placement.js";
 import type { DeviceWsHub } from "../device-ws-hub.js";
 import { k8sExecutionEnvFactory, type K8sEnvConfig, type K8sEnvDeps, type SandboxSecretSeat } from "../plugins/remote-env-k8s.js";
 import { type SandboxGitPlane, type SandboxGitRunRows } from "../sandbox-git-plane.js";
@@ -117,11 +118,12 @@ export declare function assertWorkspaceSpaceReadable(space: ReturnType<typeof fa
     readonly headOf: HeadRead | undefined;
     readonly spaceCommits: (() => SpaceCommitRows | undefined) | undefined;
 }, cache: ReturnType<typeof facts.workspaceCache>, sessionStoreLabel: string): void;
-/** device lane 的三件活对象(店 / 汇聚端 / 准入链)。缺席 = 本部署没有 device 车道。 */
+/** device lane 的活对象(店 / 汇聚端 / 准入链 + 会话店的执行席 —— 绑定的唯一载体与唯一读,工厂与准入链读同一只)。缺席 = 本部署没有 device 车道。 */
 export interface DeviceLaneWiring {
     store: DeviceStore;
     hub: DeviceWsHub;
     enrollment: DeviceEnrollment;
+    seat: ExecutionPlacementSeat;
 }
 export interface ExecutionEnvCtx {
     config: ServiceConfig;

package/dist/boot/execution-env.js

@@ -4,6 +4,7 @@ import { createHostLspManager } from "../host-lsp-manager.js";
 import { TaskEnvRegistry } from "../capabilities/sandbox-file-send.js";
 import { DEPLOYMENT_SHAPE_PREDICATES } from "../deployment-shape.js";
 import { SessionEnvironmentSelection } from "../capabilities/select-environment-tool.js";
+import { sandboxEnvNamesInForce } from "../config.js";
 import { createE2bLspManager } from "../lsp/e2b-manager.js";
 import { evictLspOnDestroy } from "../lsp-evict.js";
 import { PerTaskImageRegistry } from "../per-task-image.js";
@@ -11,7 +12,7 @@ import { adbExecutionEnvFactory } from "../plugins/remote-env-adb.js";
 import { deviceExecutionEnvFactory } from "../plugins/remote-env-device.js";
 import { e2bExecutionEnvFactory } from "../plugins/remote-env-e2b.js";
 import { hostExecutionEnvFactory, RemoteHostExecutionEnv } from "../plugins/remote-env-host.js";
-import { boundedStoreCall, checkSandboxEgressPolicy, createSandboxPodApi, createSpaceReclaimer, K8S_SANDBOX_NAMESPACE_DEFAULT, k8sExecutionEnvFactory, readSandboxSecretSeat, rpcTimeoutMsOf } from "../plugins/remote-env-k8s.js";
+import { boundedStoreCall, checkSandboxEgressPolicy, createSandboxPodApi, createSpaceReclaimer, k8sExecutionEnvFactory, readSandboxSecretSeat, rpcTimeoutMsOf } from "../plugins/remote-env-k8s.js";
 import { podSpecPatchBrokerRefusal, SANDBOX_SECRET_SEAT_VERBS } from "../plugins/k8s-exec-protocol.js";
 import { judgeSandboxGitPlane, runIdentitySourceOf, sandboxBrokerSeatOf, sandboxGitPlaneAsksSecretSeat, sandboxGitPlanePremisesOf } from "../sandbox-git-plane.js";
 import { createSandboxPodReaper } from "../plugins/k8s-pod-reaper.js";
@@ -43,24 +44,6 @@ function boundedSessionSetter(map, maxEntries) {
             map.delete(map.keys().next().value);
     };
 }
-function forwardedSandboxEnvKeys(remoteExec) {
-    switch (remoteExec.provider) {
-        case "e2b":
-        case "k8s":
-            return Object.keys(remoteExec.sandboxEnv ?? {}).sort();
-        case "local-docker":
-            return Object.keys(remoteExec.env ?? {}).sort();
-        case "ssh":
-        case "adb":
-        case "host":
-        case "device":
-            return [];
-        default: {
-            const unreachable = remoteExec;
-            throw new Error(`unhandled remote-exec provider: ${String(unreachable.provider)}`);
-        }
-    }
-}
 function buildSandboxLaneEnv(config, explicit) {
     const secretEnv = { ...(explicit ?? {}) };
     const env = Object.fromEntries(Object.entries(derivePkgSourceEnv(config.sandboxPkgSource, config.sandboxPkgSourceCustom)).filter(([name]) => !Object.hasOwn(secretEnv, name)));
@@ -173,7 +156,7 @@ export async function ensureSandboxSecretSeat(k8sCfg, logger, deps, read = () =>
     const names = Object.keys(k8sCfg.podSecretEnv ?? {});
     if (names.length === 0)
         return;
-    const namespace = k8sCfg.namespace ?? K8S_SANDBOX_NAMESPACE_DEFAULT;
+    const namespace = k8sCfg.namespace;
     const seat = await read();
     switch (seat.state) {
         case "granted":
@@ -235,6 +218,12 @@ function buildRealSystemNote(remoteExec) {
         "and the Bash read boundary is a text-level friction floor, not a safety boundary; the safety boundary is a sandbox lane: " +
         `set REMOTE_EXEC=${sandboxLanes} (see docs/DEPLOY-PREREQS.md, section "S-281")`);
 }
+function hostWorktreeUnwrappedRefusal() {
+    return Object.assign(new Error('isolation "worktree" was requested but cannot be honored: this host lane has no worktree wrapper active ' +
+        "(WORKTREE_ISOLATION_ENABLED=true together with WORKTREE_REPO_ROOT=<a git repository> turns it on; a repo root that does not exist or has no `.git` leaves it off — see the boot log), " +
+        "and the base host environment would place the sub-agent in an empty temporary directory instead of an isolated checkout. " +
+        "The sub-agent was not started (fail-closed — no silent fallback to the shared working tree)."), { code: "isolation.unavailable" });
+}
 export function createExecutionEnv(ctx) {
     const { config, logger, metrics, taskAttachmentStore } = ctx;
     const laneHomeDir = executionLaneHomeDir(config);
@@ -275,7 +264,7 @@ export function createExecutionEnv(ctx) {
             ...(config.remoteExec.token ? { token: config.remoteExec.token } : {}),
             ...(config.remoteExec.caCert ? { caCert: config.remoteExec.caCert } : {}),
             ...(config.remoteExec.insecureTls ? { insecureTls: true } : {}),
-            ...(config.remoteExec.namespace ? { namespace: config.remoteExec.namespace } : {}),
+            namespace: config.remoteExec.namespace,
             ...(config.remoteExec.runtimeClass != null ? { runtimeClass: config.remoteExec.runtimeClass } : {}),
             ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
             ...(config.remoteExec.timeoutMs != null ? { timeoutMs: config.remoteExec.timeoutMs } : {}),
@@ -312,7 +301,7 @@ export function createExecutionEnv(ctx) {
         };
         sandboxPodReaper = createSandboxPodReaper({ api: createSandboxPodApi(k8sCfg), logger, metrics });
         void checkSandboxEgressPolicy(k8sCfg)
-            .then((gaps) => sayEgressPolicyReading(gaps, logger, k8sCfg.namespace ?? K8S_SANDBOX_NAMESPACE_DEFAULT))
+            .then((gaps) => sayEgressPolicyReading(gaps, logger, k8sCfg.namespace))
             .catch((e) => logger.error("sandbox_egress_policy_check_crashed", { error: e instanceof Error ? e.message : String(e), effect: "the sandbox egress self-check did not complete this boot — the lane runs; the egress policy was not read" }));
     }
     else if (config.remoteExec?.provider === "ssh") {
@@ -332,6 +321,7 @@ export function createExecutionEnv(ctx) {
                 hub: ctx.deviceLane.hub,
                 store: ctx.deviceLane.store,
                 enrollment: ctx.deviceLane.enrollment,
+                seat: ctx.deviceLane.seat,
                 ...homeDirSeat,
                 ...(config.remoteExec.execTimeoutMs != null ? { execTimeoutMs: config.remoteExec.execTimeoutMs } : {}),
                 perSessionCwd,
@@ -375,6 +365,8 @@ export function createExecutionEnv(ctx) {
                 backgroundShell: config.requirePrincipal !== true,
             };
             executionEnvFactory = (ctx) => {
+                if (ctx.isolation === "worktree")
+                    throw hostWorktreeUnwrappedRefusal();
                 const cwd = effectiveHostWorkspace(perSessionCwd.get(ctx.sessionId), ctx);
                 const shellEnv = perSessionShellEnv.get(ctx.sessionId);
                 const inheritEnv = perSessionInheritEnv.get(ctx.sessionId);
@@ -414,7 +406,7 @@ export function createExecutionEnv(ctx) {
             logger.error("worktree_isolation_disabled_bad_repo_root", {
                 repoRoot: wtRoot,
                 reason: existsSync(wtRoot) ? "not a git repository (no .git)" : "path does not exist",
-                note: "WORKTREE_ISOLATION_ENABLED is set but WORKTREE_REPO_ROOT is not a usable git repo — isolation left OFF; isolation:'worktree' agents run on the shared base env. Fix the path or unset the flag.",
+                note: "WORKTREE_ISOLATION_ENABLED is set but WORKTREE_REPO_ROOT is not a usable git repo — isolation left OFF; isolation:'worktree' workflow agents are refused (isolation.unavailable) until it is fixed. Fix the path or unset the flag.",
             });
         }
         else if (config.remoteExec?.provider === "host") {
@@ -473,7 +465,7 @@ export function createExecutionEnv(ctx) {
     if (executionEnvFactory) {
         const isolated = laneIsolated(executionLaneOf(config.remoteExec.provider));
         const suspendable = DEPLOYMENT_SHAPE_PREDICATES.suspendableHands.holds(config);
-        const sandboxEnvKeys = forwardedSandboxEnvKeys(config.remoteExec);
+        const sandboxEnvKeys = [...sandboxEnvNamesInForce(config)].sort();
         logger.info("remote_exec_enabled", { provider: config.remoteExec.provider, isolated, suspendable, ...(sandboxEnvKeys.length > 0 ? { sandboxEnvKeys } : {}) });
         if (!isolated)
             logger.warn("remote_exec_real_system", { provider: config.remoteExec.provider, note: buildRealSystemNote(config.remoteExec) });

package/dist/boot/execution-lane.d.ts

@@ -5,7 +5,7 @@ import type { Logger } from "../observability/logger.js";
 export declare const FILE_SOURCED_LANES: readonly ["host", "local-docker"];
 export type FileSourcedLane = (typeof FILE_SOURCED_LANES)[number];
 export interface ExecutionLaneComposeCtx {
-    /** 本入口的配置源形态(`configProviderKind` / `serviceConfigSourceKind` 的答案 —— 与它真建的 provider 同一只判据)。
+    /** 本入口的配置源形态(`configSourceKind` 的答案 —— 与它真建的 provider 同一只判据)。
      *  只有 `local` 才读文件;`undefined` = 纯 env 部署。 */
     readonly configSource: "local" | "remote" | undefined;
     /** 配置根(与配置源同一个根,不分裂)。 */

package/dist/boot/governance-seams.d.ts

@@ -45,7 +45,8 @@
  * `retentionSweepRuns`):开 ⇒ `managed`,关(缺省)⇒ `none`;local 形的店恒声明 `none`。删除的执行面是扫车道(`boot/retention-lane.ts`)与 SQL 店上的
  * 执行器,不在本装配点。所以本装配点对件D 只做两件事:①把策略与执行器递给 core 的启动期校验
  * (`assertRetentionCapability` —— 配对由引擎一个判官判:店声明 `managed` 而部署不跑执行器、执行器不是执行器,锁不锁都拒;锁着 + 店不能删 ⇒ 拒启,
- * 「策略锁着、数据永存」不许发生);②策略在场而没有任何 managed 店时打一条响亮 warn。**不**假装有执行面。
+ * 「策略锁着、数据永存」不许发生);②策略在场而扫车道关着(节律缺或为 0)时打一条响亮 warn,句说这个真因。**不**假装有执行面。
+ * 车道关着而策略在场只可能在 `audit-only` 档:`enforce` 而车道不齐在 `loadConfig` 就拒了(配置不变量 `retention-lane-complete`)。
  */
 import { type LockedKey, type ManagedRetentionCapability, type RunnerDeps } from "@sema-agent/core";
 import type { ServiceConfig } from "../config.js";
@@ -61,7 +62,7 @@ export interface GovernanceSeams {
 }
 /** 依赖收窄到真实消费面(接口隔离 —— 测试用真形字面量,零铸形)。 */
 export interface GovernanceSeamsCtx {
-    config: Pick<ServiceConfig, "compliancePosture" | "lockedConfigKeys" | "retentionPolicy" | "mcpServers" | "requirePrincipal">;
+    config: Pick<ServiceConfig, "compliancePosture" | "lockedConfigKeys" | "retentionPolicy" | "retentionSweep" | "mcpServers" | "requirePrincipal">;
     logger: Pick<Logger, "info" | "warn">;
     /**
      * core 留存能力校验的对象集(名字进拒启文案)。喂的是**装配现场的真店**,不是「我以为装了什么」——

package/dist/boot/governance-seams.js

@@ -50,17 +50,15 @@ export function createGovernanceSeams(ctx) {
     const retentionPolicy = config.retentionPolicy;
     const locked = lockedKeys.has("retentionPolicy");
     assertRetentionCapability({ policy: retentionPolicy, locked, stores: retentionStores, executor: ctx.retentionExecutor });
-    if (retentionPolicy !== undefined) {
-        const managed = retentionStores.filter((s) => s.store?.retention === "managed");
-        if (managed.length === 0) {
-            logger.warn("retention_policy_not_executed", {
-                maxAgeDays: retentionPolicy.maxAgeDays,
-                note: "RETENTION_MAX_AGE_DAYS is configured but NO wired store declares retention:\"managed\" (the retention sweep lane is off — " +
-                    "RETENTION_SWEEP_INTERVAL_SEC unset or 0 — or the store medium has no sweep) — the policy is a DECLARATION only; nothing " +
-                    "deletes data on its account. It is relayed to the engine for the startup capability check; run the sweep lane on a SQL " +
-                    "backend to make it effective.",
-            });
-        }
+    if (retentionPolicy !== undefined && config.retentionSweep.intervalSec === 0) {
+        logger.warn("retention_policy_not_executed", {
+            maxAgeDays: retentionPolicy.maxAgeDays,
+            mode: config.retentionSweep.mode,
+            retentionSweepIntervalSec: config.retentionSweep.intervalSec,
+            note: "RETENTION_MAX_AGE_DAYS is set but RETENTION_SWEEP_INTERVAL_SEC is unset or 0, so the retention sweep lane is off: nothing deletes data — " +
+                "or records what it would delete — on this policy's account; the policy is a declaration relayed to the engine's startup capability check. " +
+                "To run the lane set RETENTION_SWEEP_INTERVAL_SEC above 0 on a SQL backend (RETENTION_MODE=audit-only records what would be deleted; enforce deletes it).",
+        });
     }
     return { compliancePostureResolver, lockedConfig, retentionPolicy, lockedKeys };
 }

package/dist/boot/memory-consolidation.js

@@ -5,7 +5,7 @@ import { memoryMountRootOf } from "../memory-scope.js";
 import { executionLaneHomeDir } from "../execution-lane-caps.js";
 import { DEFAULT_MODEL_REF, resolveMainModel } from "../model-select.js";
 import { backendOwnsControlPlane } from "../memory-operator-faces.js";
-import { createConsolidationWriteJudge, deliverWriteRefusal, expandTiers, MemoryEngine, readConsolidationDriverRun, resolveMemoryConsolidationDriver, runMemoryConsolidationDriver, } from "@sema-agent/core";
+import { createConsolidationWriteJudge, deliverWriteRefusal, expandTiers, MemoryEngine, modelOriginOf, readConsolidationDriverRun, resolveMemoryConsolidationDriver, runMemoryConsolidationDriver, } from "@sema-agent/core";
 export function resolveConsolidationDriverSeat(deps) {
     let options;
     try {
@@ -151,7 +151,7 @@ export function consolidationSeatBillingOf(plane) {
     catch (err) {
         return { kind: "unresolvable", fault: `the main model (${DEFAULT_MODEL_REF}) does not resolve: ${err instanceof Error ? err.message : String(err)}` };
     }
-    return seat.entry === main ? { kind: "main-model", mainModel: main.id } : { kind: "own-model", seatModel: seat.entry.id, mainModel: main.id };
+    return modelOriginOf(seat.entry) === modelOriginOf(main) ? { kind: "main-model", mainModel: main.id } : { kind: "own-model", seatModel: seat.entry.id, mainModel: main.id };
 }
 export function resolveConsolidationValve(input) {
     const decided = decideConsolidationValve(input);

package/dist/boot/resolve-spec.d.ts

@@ -15,7 +15,7 @@ import type { Metrics } from "../observability/metrics.js";
 import { PerTaskImageRegistry } from "../per-task-image.js";
 import type { StoreBackend } from "../plugins/store-backend.js";
 import { type TaskAttachmentStore } from "../plugins/task-attachment-store.js";
-import { type createPrincipalEntitlementsClient } from "../runtime-caps-resolver.js";
+import type { createPrincipalEntitlementsClient } from "../runtime-caps-resolver.js";
 import { type OwnerAwareSessionStore } from "../security.js";
 import type { MemorySyncRunner } from "../memory-sync-client.js";
 import type { PeerDesk } from "../peer-seat.js";

package/dist/boot/resolve-spec.js

@@ -25,7 +25,6 @@ import { bindAttachmentsForTask } from "../plugins/task-attachment-store.js";
 import { resourceSuspendOptIn } from "../resource-suspend.js";
 import { routeServiceTask, supPostureOverrides } from "../router/route-orchestration.js";
 import { tightenGoverned } from "../governance-overrides.js";
-import { gateExecutionLane } from "../runtime-caps-resolver.js";
 import { applyRuntimeGovernance } from "../runtime-governance.js";
 import { HttpError, createCodedHttpError, encodeCheckpointScope } from "../security.js";
 import { headReadOf, sessionFaceOfHead } from "../session-incarnation.js";
@@ -55,6 +54,10 @@ import { executionLaneHomeDir, executionLaneOf, laneWiresExecutionEnv } from "..
 import { effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { withUnattendedLeg } from "../unattended-permission-mode.js";
 import { fieldConflictFacts } from "../field-conflict.js";
+function unrooted(spec) {
+    const { sessionId: _neverWritten, ...resolved } = spec;
+    return resolved;
+}
 export function createResolveSpec(ctx) {
     const { config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver, getKeyResolver, taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec, selectEnvTool, sendUserFileToolSpec, memoryEngine, memorySyncRunner, durableEnabled, approvalExemptionStore, checkpointStore, imageIndex, perTaskImage, sessionEnvSelection, liveQuestionFace, approverSeat, lockedKeys, loadedSkills, peerDesk, } = ctx;
     const deploymentSkillSources = new Map(loadedSkills.map((k) => [k.spec.name, k.source]));
@@ -179,9 +182,9 @@ export function createResolveSpec(ctx) {
     };
     const gateScenarioAndAppend = async (body, auth, opts) => {
         const scenarioName = await scenarioGate(auth?.principal, body.scenario);
-        gateExecutionLane(await principalCaps?.executionRuling(auth?.principal), executionLaneOf(config.remoteExec?.provider), logger);
-        const sessionWitness = auth?.sessionId !== undefined ? { sessionId: auth.sessionId, incarnation: (sessionHeadOf === undefined ? undefined : sessionFaceOfHead(auth.sessionId, await sessionHeadOf(auth.sessionId)))?.incarnation ?? null } : undefined;
-        const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal, sessionWitness !== undefined ? { sessionId: sessionWitness.sessionId, delegationRoot: sessionWitness } : {});
+        const root = opts.execution.root;
+        const sessionWitness = { sessionId: root, incarnation: (sessionHeadOf === undefined ? undefined : sessionFaceOfHead(root, await sessionHeadOf(root)))?.incarnation ?? null };
+        const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal, { sessionId: sessionWitness.sessionId, delegationRoot: sessionWitness });
         const acceptedAppend = acceptAppendSystemPrompt(body.appendSystemPrompt, (detail) => logger.warn("append_system_prompt_dropped", { detail, sessionId: auth?.sessionId ?? null }));
         const objective = typeof body.objective === "string" ? body.objective : "";
         const parsedSettings = parseTaskSettings(body.settings, opts?.leg === "fresh" || !taskHooksHonored(config) ? {} : { storedHooksReread: storedHooksRereadM20(new Date().toISOString().slice(0, 10)) });
@@ -375,7 +378,6 @@ export function createResolveSpec(ctx) {
             appendSystemPrompt: acceptedAppend,
             ...(body.outputStyle !== undefined ? { outputStyle: body.outputStyle } : {}),
             ...(body.projectMemory !== undefined ? { projectMemory: body.projectMemory } : {}),
-            sessionId: auth?.sessionId,
             ...(legProjectId !== undefined ? { projectId: legProjectId } : {}),
             principal: auth?.principal,
             images: body.images,
@@ -396,7 +398,6 @@ export function createResolveSpec(ctx) {
             suggestNextPrompts: normalizeSuggestNextPrompts(body.suggestNextPrompts),
             restoreFiles: body.restoreFiles === true ? true : undefined,
             acceptPartialRestore: body.acceptPartialRestore === true ? true : undefined,
-            ...(body.rewindFiles === true ? { rewindFiles: true } : {}),
             rewindFilesTo: rewindFilesToEntryId,
             ...(body.fileHistory === "disabled" ? { fileHistory: "disabled" } : {}),
             additionalDirectories,
@@ -670,9 +671,7 @@ export function createResolveSpec(ctx) {
     };
     const resolveSpecForLeg = async (body, req, auth, opts) => {
         const spec = await resolveSpec(body, req, auth, opts);
-        if (opts?.unattendedLeg !== true)
-            return spec;
-        return withUnattendedLeg(spec);
+        return unrooted(opts.unattendedLeg !== true ? spec : withUnattendedLeg(spec));
     };
     return resolveSpecForLeg;
 }

package/dist/boot/retention-lane.d.ts

@@ -158,14 +158,15 @@ export interface RetentionSweepOutcome {
  *  · core 那道判**配对**,锁不锁都判(`executor` 必给):声明 `managed` 的店 × 没有执行器(`null`)⇒ 拒;执行器四个契约方法
  *    (`listRetentionDomains` / `expireCheckpoints` / `deleteExpiredSessions` / `deleteOrphanToolResults`)缺一 ⇒ 拒;
  *    **锁着**的策略盖在声明 `none` 的店上 ⇒ 拒。它不问 lane 开没开、策略在不在,也不拦没锁时「执行器在场 × 店声明 `none`」(部署可以持有执行器而不在某只店上跑);
- *  · **本道**问的是「lane 开着的时候,它真的能删吗」——**不看 locked 状态**:策略在场、执行器在场、lane 调的**五**个方法都在
+ *  · **本道**问的是「lane 开着的时候,它接得上能删的东西吗」——**不看 locked 状态**:执行器在场、lane 调的**五**个方法都在
  *    (多出的 `previewRetention` 是 audit-only 档的读数口,不在 core 的四方法契约里,引擎的检查覆盖不到它)、每只被 lane 消费的店都声明 `managed`。
  *    「执行器在场」与「契约方法齐」两格和引擎的判官说的是同一件事(各自一句拒句),其余几格是引擎不问的。
  *
+ * 「lane 开着而没有视界(天数)」与「`RETENTION_MODE=enforce` 而车道不齐」不在本道:那是配置事实,判在 `loadConfig` 的配置不变量段
+ * (`config-invariants.ts` 的 `retentionLaneRefusal`,一条规则)—— 到得了本道的部署,lane 开着就一定有视界。本道只判**接线**(配置看不见的那几格)。
+ *
  * 为什么本道必须存在:引擎的门不拦
- *  ① `RETENTION_SWEEP_INTERVAL_SEC>0` 而 policy 缺席 = 没有有效 cutoff 的 sweep(每 tick 什么都算不出来,
- *     读数一路 0,看起来像"没有候选");
- *  ② 没锁时,执行器在场 × 一只 `"none"` 的店 —— 部署于是**广告了一个不执行的留存面**:能力位说
+ *  · 没锁时,执行器在场 × 一只 `"none"` 的店 —— 部署于是**广告了一个不执行的留存面**:能力位说
  *     `{mode,maxAgeDays}`、审计表也在长,而那只店的行谁都没在删。
  *     本仓的 SQL 后端按同一个事实(扫车道开不开,`plugins/retention-store-sql.ts` 的 `retentionSweepRuns`)给它铸的三只店声明词,所以 lane 开着时
  *     这三只店在这一格上恒是 `managed`;这一格防的是声明与 lane 脱钩的店(别的后端、替身)。
@@ -176,7 +177,6 @@ export interface RetentionSweepOutcome {
  */
 export declare function assertRetentionLaneWirable(input: {
     intervalSec: number;
-    policy: RetentionPolicy | undefined;
     executor: RetentionExecutor | undefined;
     stores: ReadonlyArray<{
         name: string;

package/dist/boot/retention-lane.js

@@ -7,12 +7,6 @@ export function assertRetentionLaneWirable(input) {
     if (input.intervalSec <= 0)
         return;
     const lockNote = input.locked === true ? " (the retentionPolicy key is LOCKED, but this gate refuses either way)" : "";
-    if (input.policy === undefined) {
-        throw new Error(`RETENTION_SWEEP_INTERVAL_SEC=${input.intervalSec} arms the managed-retention sweep lane, but RETENTION_MAX_AGE_DAYS is not ` +
-            `configured — the lane would run with NO horizon to compute a cutoff from, enumerate domains every tick and delete nothing, ` +
-            `while the capability surface advertises a retention face that does not exist${lockNote}. Set RETENTION_MAX_AGE_DAYS, or set ` +
-            `RETENTION_SWEEP_INTERVAL_SEC=0 to leave the lane off.`);
-    }
     if (input.executor === undefined) {
         throw new Error(`RETENTION_SWEEP_INTERVAL_SEC=${input.intervalSec} arms the managed-retention sweep lane, but this deployment wires NO retention ` +
             `executor — the destructive store methods live on the SQL backends only (DB_BACKEND=mysql|pg); the local/file backend honestly ` +

package/dist/boot/runner-deps.d.ts

@@ -66,7 +66,9 @@ export declare function createRunnerDepsOnAsk(toolApproval: ToolApprovalCoordina
  *  [ref]:第五词 `shell-gate-off` 随 core 7.34.0 的 off 车道一起退役(引擎侧零发射点),同批删 —— 它唯一的本仓消费者
  *  (「本 session 显式 bypass ⇒ 降级 info」那条回查腿与 `boot/session-shell-gate-registry.ts` 登记簿)一并删干净。所以这是「按实现亲读」的开集快照,不是 core 类型闭集——词表外的值原样进日志并标
  *  `classificationKnown:false`(指标标签折 `unknown`),不吞不编;与安装包的锁步由 test/boot-runner-deps-shared-base.test.ts
- *  的 dist 扫描格钉住(两种发射写法都读;读不出词的经变量发射点本身红;core 加词/收进 d.ts 那天先红)。 */
+ *  的 dist 扫描格钉住(两种发射写法都读;读不出词的经变量发射点本身红;core 加词/收进 d.ts 那天先红)。
+ *  第七词 `peer-seat-hold`(runtask 的 `holdDeclarations`,字面量):对端座的三员对象里 `hold` / `release` 抛了 ⇒ 引擎报一次、该引用
+ *  不被持有;座是本仓的 desk,所以这是部署自己的故障,与其余六词同走 warn + 计数。 */
 export declare const CONFIG_ADVISORY_CLASSIFICATIONS: ReadonlySet<string>;
 /** [ref]:core 的 [ref] 前缀缓存**断裂**探测器交给宿主的根因**闭集**,以及每个词的日志级别。
  *  闭集**不抄词**:词源直接取 core 公开导出的 `CacheBreakFinding["cause"]`(`@sema-agent/core` 根导出,

package/dist/boot/runner-deps.js

@@ -32,6 +32,7 @@ export const CONFIG_ADVISORY_CLASSIFICATIONS = new Set([
     "file-history-no-store",
     "interaction-posture-refused",
     "memory-tools-not-mounted",
+    "peer-seat-hold",
     "sandbox-admission-unavailable",
     "shared-memory-not-mounted",
 ]);
@@ -131,7 +132,7 @@ export function createSharedRunnerDeps(ctx) {
         lockedConfig: ctx.governanceSeams.lockedConfig,
         retentionPolicy: ctx.governanceSeams.retentionPolicy,
         mcpRevocations: ctx.mcpRevocations ? ctx.mcpRevocations : undefined,
-        peerSeat: ctx.peerDesk.seat.answer,
+        peerSeat: ctx.peerDesk.seat,
     };
     return shared;
 }

package/dist/boot/session-faces.d.ts

@@ -21,7 +21,6 @@ import type { createSessionStore } from "../plugins/session-store.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import type { FileHistoryErasureFace } from "../file-history-capture.js";
 import type { OwnerAwareSessionStore } from "../security.js";
-import type { DeviceStore } from "../device-store.js";
 import { SessionWatchRegistry } from "../session-watch.js";
 import type { TaskListLane } from "./task-list-lane.js";
 import { type RunnerDeps } from "@sema-agent/core";
@@ -48,8 +47,6 @@ export interface SessionFacesCtx {
     workflowCompletionInbox: WorkflowCompletionInbox | undefined;
     /** [ref]:会话级任务清单车道(E21 级联的一条腿)。缺席 = 装配未接本车道 ⇒ 无清单可删。 */
     taskListLane: TaskListLane | undefined;
-    /** device lane 的四表店(E21 级联的一条腿:`device_session` 绑定行随会话删)。缺席 = 非 SQL 后端。 */
-    deviceStore: DeviceStore | undefined;
     /** per-session cwd/shellEnv 登记簿的清除口(E21 级联的一条腿,codex R1-F1)。缺席 = 装配未接。 */
     dropSessionScoped: ((sid: string) => void) | undefined;
     /** [ref]:会话盒(`session.<id>`)的信箱 + 它的收件人生命周期面(E21 级联的一条腿)。**成对**在场

package/dist/boot/session-faces.js

@@ -6,11 +6,12 @@ import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
 import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 import { reapSessionBackgroundHard } from "../background-session-reap.js";
-import { probeSessionChildren, retireSessionChildren, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
+import { probeSessionChildren, retireSessionChildren, sessionChildrenScope, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
+import { SessionActiveRunError } from "../execution-placement.js";
 import { headReadOf, redactIncarnations } from "../session-incarnation.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -49,7 +50,7 @@ export function createSessionFaces(ctx) {
                     return { deleted: false };
                 spaceKey = spaceReclaimer !== undefined ? head.incarnation : undefined;
             }
-            const childScope = owner ?? "default";
+            const childScope = sessionChildrenScope(owner);
             const reach = await probeSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
             if (!reach.reachable) {
                 logger.warn("session_delete_children_still_alive", { sessionId, remaining: reach.unreachableHandles.length, handles: reach.unreachableHandles });
@@ -60,8 +61,8 @@ export function createSessionFaces(ctx) {
                 return { active: runs.active };
             {
                 const children = await retireSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
-                if (children.found > 0)
-                    logger.info("session_children_retired", { sessionId, found: children.found, stopped: children.stopped, rounds: children.rounds });
+                if (children.observed.length > 0)
+                    logger.info("session_children_retired", { sessionId, found: children.observed.length, stopped: children.stopped, rounds: children.rounds });
                 if (children.stopped === "incomplete") {
                     logger.warn("session_delete_children_stop_incomplete", { sessionId, remaining: children.remainingHandles.length, handles: children.remainingHandles });
                     throw new SessionChildrenStopIncompleteError(sessionId, children.remainingHandles.length);
@@ -91,8 +92,6 @@ export function createSessionFaces(ctx) {
                 await userInputLedgerStore.deleteBySession(sessionId);
             if (taskListLane)
                 await taskListLane.deleteBySession(sessionId);
-            if (deviceStore)
-                await deviceStore.deleteByRootSession(sessionId);
             dropSessionScoped?.(sessionId);
             if (fileHistoryErasure) {
                 if (typeof fileHistoryErasure.deleteBySession === "function")
@@ -122,7 +121,15 @@ export function createSessionFaces(ctx) {
             }
             if (peerBox !== undefined)
                 await peerBox.store.drop(peerBox.scope, peerBox.handle);
-            const historyDeleted = await ownerAware.deleteSession(sessionId, owner);
+            let historyDeleted;
+            try {
+                historyDeleted = await ownerAware.deleteSession(sessionId, owner);
+            }
+            catch (err) {
+                if (err instanceof SessionActiveRunError)
+                    return { active: err.activeTaskId };
+                throw err;
+            }
             sessionWatchRegistry?.dropSession(sessionId);
             if (historyDeleted && spaceReclaimer !== undefined && spaceKey !== undefined) {
                 void spaceReclaimer.reclaim([{ sessionId, spaceKey }]).catch((err) => {

package/dist/boot/stage-02-web-admin-pull.js

@@ -1,7 +1,7 @@
 import { createUnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import { createWebAdminRuntime } from "./web-admin.js";
 import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
-import { serviceConfigSourceKind } from "../config-provider.js";
+import { configSourceKind } from "../config-provider.js";
 import { logConfigDirMigration, migrateLocalConfigDirectory } from "../config-d-migration.js";
 import { assertLocalConfigDirTrusted } from "../config-dir-trust.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "../model-entry-refusal.js";
@@ -10,7 +10,7 @@ import { judgeServedModelRoute } from "../model-route-endpoint.js";
 import { servedModelTableLeg } from "../model-select.js";
 export async function runStage02(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
-    const configSource = serviceConfigSourceKind(config);
+    const configSource = configSourceKind(config);
     if (configSource === "local") {
         await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: config.configLocalOwnerUid });
         logConfigDirMigration(logger, await migrateLocalConfigDirectory(localRoot));

package/dist/boot/stage-05-execution-env.js

@@ -10,7 +10,7 @@ import { SANDBOX_GIT_PLANE_OFF_TEXT } from "../sandbox-git-plane.js";
 import { createPeerDesk } from "../peer-seat.js";
 export async function runStage05(ctx) {
     const { backend, config, instanceId, logger, metrics, sessionStore, taskAttachmentStore } = ctx;
-    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, replicaId: instanceId }) : undefined;
+    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
     const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, readSandboxGitPlane, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
@@ -29,7 +29,7 @@ export async function runStage05(ctx) {
     const { registrations: deploymentMods, loaded: deploymentModsLoaded } = await assembleDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config), declaration: config.modsDeclaration, logger });
     const peerDesk = createPeerDesk({ log: logger });
     metrics.dynamicGauge("peer_registry_entries", "Peer desk entries (declared peer credentials registered for in-flight legs and the roster)", () => peerDesk.size().entries);
-    metrics.dynamicGauge("peer_registry_holders", "Peer desk host leases holding entries, summed across entries", () => peerDesk.size().holders);
+    metrics.dynamicGauge("peer_registry_holders", "Peer desk holders of entries (host leases and engine holds), summed across entries", () => peerDesk.size().holders);
     return { ...ctx, deploymentMods, deploymentModsLoaded, deviceLane, peerDesk, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map