@sema-agent/server 7.138.0 → 7.140.0

package/dist/boot/session-faces.js

@@ -6,11 +6,12 @@ import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
 import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 import { reapSessionBackgroundHard } from "../background-session-reap.js";
-import { probeSessionChildren, retireSessionChildren, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
+import { probeSessionChildren, retireSessionChildren, sessionChildrenScope, SessionChildrenStopIncompleteError } from "../session-children-retire.js";
+import { SessionActiveRunError } from "../execution-placement.js";
 import { headReadOf, redactIncarnations } from "../session-incarnation.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -49,7 +50,7 @@ export function createSessionFaces(ctx) {
                     return { deleted: false };
                 spaceKey = spaceReclaimer !== undefined ? head.incarnation : undefined;
             }
-            const childScope = owner ?? "default";
+            const childScope = sessionChildrenScope(owner);
             const reach = await probeSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
             if (!reach.reachable) {
                 logger.warn("session_delete_children_still_alive", { sessionId, remaining: reach.unreachableHandles.length, handles: reach.unreachableHandles });
@@ -60,8 +61,8 @@ export function createSessionFaces(ctx) {
                 return { active: runs.active };
             {
                 const children = await retireSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, childScope);
-                if (children.found > 0)
-                    logger.info("session_children_retired", { sessionId, found: children.found, stopped: children.stopped, rounds: children.rounds });
+                if (children.observed.length > 0)
+                    logger.info("session_children_retired", { sessionId, found: children.observed.length, stopped: children.stopped, rounds: children.rounds });
                 if (children.stopped === "incomplete") {
                     logger.warn("session_delete_children_stop_incomplete", { sessionId, remaining: children.remainingHandles.length, handles: children.remainingHandles });
                     throw new SessionChildrenStopIncompleteError(sessionId, children.remainingHandles.length);
@@ -91,8 +92,6 @@ export function createSessionFaces(ctx) {
                 await userInputLedgerStore.deleteBySession(sessionId);
             if (taskListLane)
                 await taskListLane.deleteBySession(sessionId);
-            if (deviceStore)
-                await deviceStore.deleteByRootSession(sessionId);
             dropSessionScoped?.(sessionId);
             if (fileHistoryErasure) {
                 if (typeof fileHistoryErasure.deleteBySession === "function")
@@ -122,7 +121,15 @@ export function createSessionFaces(ctx) {
             }
             if (peerBox !== undefined)
                 await peerBox.store.drop(peerBox.scope, peerBox.handle);
-            const historyDeleted = await ownerAware.deleteSession(sessionId, owner);
+            let historyDeleted;
+            try {
+                historyDeleted = await ownerAware.deleteSession(sessionId, owner);
+            }
+            catch (err) {
+                if (err instanceof SessionActiveRunError)
+                    return { active: err.activeTaskId };
+                throw err;
+            }
             sessionWatchRegistry?.dropSession(sessionId);
             if (historyDeleted && spaceReclaimer !== undefined && spaceKey !== undefined) {
                 void spaceReclaimer.reclaim([{ sessionId, spaceKey }]).catch((err) => {

package/dist/boot/stage-02-web-admin-pull.js

@@ -1,7 +1,7 @@
 import { createUnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import { createWebAdminRuntime } from "./web-admin.js";
 import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
-import { serviceConfigSourceKind } from "../config-provider.js";
+import { configSourceKind } from "../config-provider.js";
 import { logConfigDirMigration, migrateLocalConfigDirectory } from "../config-d-migration.js";
 import { assertLocalConfigDirTrusted } from "../config-dir-trust.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "../model-entry-refusal.js";
@@ -10,7 +10,7 @@ import { judgeServedModelRoute } from "../model-route-endpoint.js";
 import { servedModelTableLeg } from "../model-select.js";
 export async function runStage02(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
-    const configSource = serviceConfigSourceKind(config);
+    const configSource = configSourceKind(config);
     if (configSource === "local") {
         await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: config.configLocalOwnerUid });
         logConfigDirMigration(logger, await migrateLocalConfigDirectory(localRoot));

package/dist/boot/stage-03-store-backend.d.ts

@@ -7,16 +7,12 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryEngine: {
-        backend: import("@sema-agent/core").MemoryBackend;
-        root: string;
-    } | undefined;
-    memoryExportBackend: import("@sema-agent/core").MemoryBackend | undefined;
+    memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
+    memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     memorySyncCursors: import("../plugins/memory-sync-store-pg.js").MemorySyncStore | undefined;
     memorySyncRunner: import("../memory-sync-client.js").MemorySyncRunner | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
-    sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;

package/dist/boot/stage-03-store-backend.js

@@ -2,10 +2,9 @@ import { uuidv7 } from "@sema-agent/core";
 import { openStores } from "./stores.js";
 export async function runStage03(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
-    const { backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportBackend, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngine, } = await openStores({ config, logger, metrics, localRoot });
+    const { backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportStores, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngine, } = await openStores({ config, logger, metrics, localRoot });
     const instanceId = uuidv7();
     const sessionCaptureRecords = backend?.sessionCaptureRecords();
-    const sessionCaptureRecordStore = sessionCaptureRecords?.();
-    return { ...ctx, backend, backgroundAgentStore, breakerState, engineDataRoot, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportBackend, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecordStore, sessionCaptureRecords, sessionStore, sqlEngine, storePosture, taskAttachmentStore, taskListLane, usageWindowStore };
+    return { ...ctx, backend, backgroundAgentStore, breakerState, engineDataRoot, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportStores, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecords, sessionStore, sqlEngine, storePosture, taskAttachmentStore, taskListLane, usageWindowStore };
 }
 //# sourceMappingURL=stage-03-store-backend.js.map

package/dist/boot/stage-04-stores.d.ts

@@ -37,16 +37,12 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryEngine: {
-        backend: import("@sema-agent/core").MemoryBackend;
-        root: string;
-    } | undefined;
-    memoryExportBackend: import("@sema-agent/core").MemoryBackend | undefined;
+    memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
+    memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     memorySyncCursors: import("../plugins/memory-sync-store-pg.js").MemorySyncStore | undefined;
     memorySyncRunner: import("../memory-sync-client.js").MemorySyncRunner | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
-    sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;

package/dist/boot/stage-04-stores.js

@@ -7,22 +7,22 @@ import { createBudgetAndTracing } from "./budget-tracing.js";
 import { createRuleConsentLane } from "../rules-consent.js";
 import { createConsolidationValve } from "./memory-consolidation.js";
 export async function runStage04(ctx) {
-    const { backend, breakerState, config, logger, memoryEngine, metrics, sessionCaptureRecordStore } = ctx;
-    const memoryBundleFaces = memoryEngine ? createMemoryBundleFaces(memoryEngine, { ...(sessionCaptureRecordStore !== undefined ? { captureRecordStore: sessionCaptureRecordStore } : {}) }) : undefined;
+    const { backend, breakerState, config, logger, memoryEngine, metrics, sessionCaptureRecords } = ctx;
+    const memoryBundleFaces = memoryEngine ? createMemoryBundleFaces(memoryEngine, { ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}) }) : undefined;
     const memoryComplianceFaces = memoryEngine
         ? createMemoryComplianceFaces(memoryEngine, {
             onIncident: (err) => logger.warn("memory_compliance_incident", { code: err.code ?? null, detail: err.message }),
-            ...(sessionCaptureRecordStore !== undefined ? { captureRecordStore: sessionCaptureRecordStore } : {}),
+            ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
         })
         : undefined;
     const memoryOriginFaces = memoryEngine
         ? createMemoryOriginFaces(memoryEngine, {
             onIncident: (err) => logger.warn("memory_origin_incident", { code: err.code ?? null, detail: err.message }),
-            ...(sessionCaptureRecordStore !== undefined ? { captureRecordStore: sessionCaptureRecordStore } : {}),
+            ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
         })
         : undefined;
     const sessionMemoryStatusFace = memoryEngine
-        ? createSessionMemoryStatusFace(memoryEngine, { ...(sessionCaptureRecordStore !== undefined ? { captureRecordStore: sessionCaptureRecordStore } : {}) })
+        ? createSessionMemoryStatusFace(memoryEngine, { ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}) })
         : undefined;
     const { valve: consolidationValve, watch: consolidationSeatWatch } = createConsolidationValve({ config, memoryEngine, logger });
     const adoptionBoot = await runAdoptionBootScan({ backend, logger });

package/dist/boot/stage-05-execution-env.d.ts

@@ -56,16 +56,12 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryEngine: {
-        backend: import("@sema-agent/core").MemoryBackend;
-        root: string;
-    } | undefined;
-    memoryExportBackend: import("@sema-agent/core").MemoryBackend | undefined;
+    memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
+    memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     memorySyncCursors: import("../plugins/memory-sync-store-pg.js").MemorySyncStore | undefined;
     memorySyncRunner: import("../memory-sync-client.js").MemorySyncRunner | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
-    sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;

package/dist/boot/stage-05-execution-env.js

@@ -10,7 +10,7 @@ import { SANDBOX_GIT_PLANE_OFF_TEXT } from "../sandbox-git-plane.js";
 import { createPeerDesk } from "../peer-seat.js";
 export async function runStage05(ctx) {
     const { backend, config, instanceId, logger, metrics, sessionStore, taskAttachmentStore } = ctx;
-    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, replicaId: instanceId }) : undefined;
+    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
     const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, readSandboxGitPlane, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
@@ -29,7 +29,7 @@ export async function runStage05(ctx) {
     const { registrations: deploymentMods, loaded: deploymentModsLoaded } = await assembleDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config), declaration: config.modsDeclaration, logger });
     const peerDesk = createPeerDesk({ log: logger });
     metrics.dynamicGauge("peer_registry_entries", "Peer desk entries (declared peer credentials registered for in-flight legs and the roster)", () => peerDesk.size().entries);
-    metrics.dynamicGauge("peer_registry_holders", "Peer desk host leases holding entries, summed across entries", () => peerDesk.size().holders);
+    metrics.dynamicGauge("peer_registry_holders", "Peer desk holders of entries (host leases and engine holds), summed across entries", () => peerDesk.size().holders);
     return { ...ctx, deploymentMods, deploymentModsLoaded, deviceLane, peerDesk, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map

package/dist/boot/stage-06-runners.d.ts

@@ -119,16 +119,12 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryEngine: {
-        backend: import("@sema-agent/core").MemoryBackend;
-        root: string;
-    } | undefined;
-    memoryExportBackend: import("@sema-agent/core").MemoryBackend | undefined;
+    memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
+    memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     memorySyncCursors: import("../plugins/memory-sync-store-pg.js").MemorySyncStore | undefined;
     memorySyncRunner: import("../memory-sync-client.js").MemorySyncRunner | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
-    sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;

package/dist/boot/stage-06-runners.js

@@ -30,7 +30,7 @@ import { parkedAskRedeem, runStore } from "./late-binds.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
 import { retentionSweepRuns } from "../plugins/retention-store-sql.js";
 export async function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, workflowParkDecisions, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const parkCommitted = backend?.checkpoint && config.durableApproval ? createParkCommitWatch(backend.checkpoint(logger)) : undefined;
     const checkpointStore = parkCommitted?.store;
@@ -70,7 +70,6 @@ export async function runStage06(ctx) {
     const retentionLaneStore = backend?.retentionLane?.();
     assertRetentionLaneWirable({
         intervalSec: config.retentionSweep.intervalSec,
-        policy: config.retentionPolicy,
         executor: retentionExecutor,
         stores: [
             { name: "sessionStore", store: sessionStore },
@@ -95,7 +94,7 @@ export async function runStage06(ctx) {
             ...(config.memoryProvenance !== undefined ? { provenance: config.memoryProvenance } : {}),
             onIncident: (err) => logger.warn("memory_consolidation_incident", { code: err.code ?? null, detail: err.message }),
             onStopDetail: (audit) => logger.warn("memory_consolidation_stop_detail", audit),
-            ...(sessionCaptureRecordStore !== undefined ? { captureRecordStore: sessionCaptureRecordStore } : {}),
+            ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
             writeJudge: createOperatorValveWriteJudge({ ruleStoreProvider: permissionRuleProvider, config }),
             onNotice: createEngineNoticeForwarder(logger, defaultEngineNoticeRouter, metrics),
         })

package/dist/boot/stage-07-capability-layer.d.ts

@@ -135,16 +135,12 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryEngine: {
-        backend: import("@sema-agent/core").MemoryBackend;
-        root: string;
-    } | undefined;
-    memoryExportBackend: import("@sema-agent/core").MemoryBackend | undefined;
+    memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
+    memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     memorySyncCursors: import("../plugins/memory-sync-store-pg.js").MemorySyncStore | undefined;
     memorySyncRunner: import("../memory-sync-client.js").MemorySyncRunner | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
-    sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;

package/dist/boot/stage-08-reapers.d.ts

@@ -148,16 +148,12 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryEngine: {
-        backend: import("@sema-agent/core").MemoryBackend;
-        root: string;
-    } | undefined;
-    memoryExportBackend: import("@sema-agent/core").MemoryBackend | undefined;
+    memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
+    memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     memorySyncCursors: import("../plugins/memory-sync-store-pg.js").MemorySyncStore | undefined;
     memorySyncRunner: import("../memory-sync-client.js").MemorySyncRunner | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
-    sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;

package/dist/boot/stage-09-leader.d.ts

@@ -172,16 +172,12 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryEngine: {
-        backend: import("@sema-agent/core").MemoryBackend;
-        root: string;
-    } | undefined;
-    memoryExportBackend: import("@sema-agent/core").MemoryBackend | undefined;
+    memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
+    memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     memorySyncCursors: import("../plugins/memory-sync-store-pg.js").MemorySyncStore | undefined;
     memorySyncRunner: import("../memory-sync-client.js").MemorySyncRunner | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
-    sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;

package/dist/boot/stage-09-leader.js

@@ -6,9 +6,8 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, checkpointCtxSealing, config, webAdmin, deploymentMods, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, spaceReclaimer, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, checkpointCtxSealing, config, webAdmin, deploymentMods, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, spaceReclaimer, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
-        deviceStore: deviceLane?.store,
         dropSessionScoped,
         config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
         resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure,

package/dist/boot/stage-10-http-server.d.ts

@@ -171,16 +171,12 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryEngine: {
-        backend: import("@sema-agent/core").MemoryBackend;
-        root: string;
-    } | undefined;
-    memoryExportBackend: import("@sema-agent/core").MemoryBackend | undefined;
+    memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
+    memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     memorySyncCursors: import("../plugins/memory-sync-store-pg.js").MemorySyncStore | undefined;
     memorySyncRunner: import("../memory-sync-client.js").MemorySyncRunner | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
-    sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../plugins/store-backend.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;

package/dist/boot/stage-10-http-server.js

@@ -7,6 +7,7 @@ import { isPricingConfigured } from "../budget.js";
 import { createHandsRunnerSelector } from "../capabilities/hands-lane.js";
 import { createHttpServer } from "../http/server.js";
 import { exportMemoryScope } from "../memory-export.js";
+import { memoryStoreForRequest } from "../memory-scope-stores.js";
 import { performMemorySync } from "../memory-sync.js";
 import { backgroundAgentOutput, taskHandleOutput, taskHandleStop } from "../runs.js";
 import { createStoreLiveProbe } from "../store-live-probe.js";
@@ -29,7 +30,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentModsLoaded, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
+    const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentModsLoaded, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportStores, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -86,9 +87,9 @@ export async function runStage10(ctx) {
         subagentTaskOutput: (handle, access) => backgroundAgentOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
         taskHandleOutput: (handle, access) => taskHandleOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
         taskHandleStop: (handle, access) => taskHandleStop(defaultTaskRegistry, handle, access, backgroundAgentStore),
-        memoryExport: memoryExportBackend ? (scope) => exportMemoryScope(memoryExportBackend, scope) : undefined,
-        memorySync: memoryExportBackend && memorySyncCursors
-            ? (scope, syncReq) => performMemorySync(memoryExportBackend, memorySyncCursors, scope, syncReq)
+        memoryExport: memoryExportStores ? (scope) => exportMemoryScope(memoryStoreForRequest(memoryExportStores, [scope]), scope) : undefined,
+        memorySync: memoryExportStores && memorySyncCursors
+            ? (scope, syncReq) => performMemorySync(memoryStoreForRequest(memoryExportStores, [scope]), memorySyncCursors, scope, syncReq)
             : undefined,
         memoryBundleExport: memoryBundleFaces ? memoryBundleFaces.exportScopes : undefined,
         memoryBundleImport: memoryBundleFaces ? memoryBundleFaces.importBundle : undefined,
@@ -105,6 +106,7 @@ export async function runStage10(ctx) {
         sessionMirrorRuling: principalCaps
             ? async (p) => (await principalCaps.executionRuling(p))?.sessionMirror
             : undefined,
+        executionRuling: principalCaps ? (p) => principalCaps.executionRuling(p) : undefined,
         instrumentDegenerate,
         sideQueryAccounting,
         parkedReviveSurface: parkedReviveSurface ? parkedReviveSurface : undefined,
@@ -118,7 +120,6 @@ export async function runStage10(ctx) {
         planCacheProbe,
     };
     const governance = {
-        authorize,
         webAdminJwtVerifier: webAdminJwtVerifier ? webAdminJwtVerifier : undefined,
         rateLimiter,
         costQuota,
@@ -214,7 +215,7 @@ export async function runStage10(ctx) {
     const runnerFor = createHandsRunnerSelector({ full: runner, handsless: handslessRunner });
     const sideQuery = createSideQueryLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver() });
     const scenarioGate = createScenarioGate({ config, scenarios, principalCaps, logger }, "peek");
-    const server = createHttpServer({ runner, runnerFor, sideQuery, scenarioGate, peerDesk, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
+    const server = createHttpServer({ runner, runnerFor, sideQuery, scenarioGate, peerDesk, config, authorize, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
     bindServerLateSeats({ config, logger, server });
     const fleetReconcile = startFleetReconciler({
         bus: fleetBus,

package/dist/boot/stores.d.ts

@@ -1,4 +1,3 @@
-import { type MemoryBackend } from "@sema-agent/core";
 import type { ServiceConfig } from "../config.js";
 import { type MemorySyncRunner } from "../memory-sync-client.js";
 import type { Logger } from "../observability/logger.js";
@@ -7,6 +6,7 @@ import { type MemorySyncStore } from "../plugins/memory-sync-store-pg.js";
 import { type MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 import { type TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import { type StoreBackend } from "../plugins/store-backend.js";
+import { type MemoryScopeStores } from "../memory-scope-stores.js";
 export interface OpenStoresCtx {
     config: ServiceConfig;
     logger: Logger;
@@ -24,10 +24,7 @@ export declare function assertApprovalAskRuleMaterialOnBackend(backend: StoreBac
 export declare function openStores(ctx: OpenStoresCtx): Promise<{
     backend: StoreBackend | undefined;
     storePosture: import("../store-posture.js").StorePosture;
-    memoryEngine: {
-        backend: MemoryBackend;
-        root: string;
-    } | undefined;
+    memoryEngine: MemoryScopeStores | undefined;
     engineDataRoot: string;
     memorySyncCursors: MemorySyncStore | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
@@ -35,7 +32,7 @@ export declare function openStores(ctx: OpenStoresCtx): Promise<{
     mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
     taskAttachmentStore: TaskAttachmentStore | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
-    memoryExportBackend: MemoryBackend | undefined;
+    memoryExportStores: MemoryScopeStores | undefined;
     memorySyncRunner: MemorySyncRunner | undefined;
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;