@sema-agent/server 7.140.0 → 7.141.0

package/dist/boot/device-lane.js

@@ -56,4 +56,20 @@ export function assertDeviceLaneWired(isDeviceLane, lane, hasFactory) {
             "an assembly bug, not a configuration one — refusing to start rather than silently execute in-process (#157)");
     }
 }
+export async function noteDeviceRelayBindings(relay, store, logger) {
+    switch (relay.kind) {
+        case "url":
+            return;
+        case "none": {
+            const bindings = await store.countDeviceBindings();
+            if (bindings > 0)
+                logger.warn("device_relay_withdrawn_with_bindings", { bindings });
+            return;
+        }
+        default: {
+            const unknownKind = relay;
+            throw new Error(`noteDeviceRelayBindings: no arm for ${JSON.stringify(unknownKind)}`);
+        }
+    }
+}
 //# sourceMappingURL=device-lane.js.map

package/dist/boot/engine-lease.d.ts

@@ -130,6 +130,29 @@ export interface EngineLeaseExitReport {
     /** 成孤儿到自退之间隔了多久;非孤儿退出时键缺席(不编 0)。 */
     orphanedForMs?: number;
 }
+/**
+ * [ref] —— 租约窗的 wire 读数(`GET /health` 的 `engineLease`;壳持租约的触点节拍据此定,别处起的短窗引擎不再让第二句失败)。
+ *
+ * ## 报的是什么
+ *  · `lingerMs` = 本腿**会执行的最短静默窗**:父还活着的窗({@link EngineLeaseDeps.lingerMs})与孤儿窗({@link EngineLeaseOrphanLane.lingerMs},只在看门狗装了时存在)取小。
+ *    取**最短**而不是「此刻生效」:此刻生效的窗在父死那一拍从 owned 窗掉到孤儿窗,按旧读数定节拍的壳会在下一次读 `/health` 之前被拆台;
+ *    最短窗是配置的性质、不随状态变,壳的触点只要比它密,在任何状态下都留得住引擎。
+ *  · `tickMs` = 自退检查的采样拍。自退发生在**生效窗**满之后、至多再晚一拍(顶注 8);生效窗恒 ≥ `lingerMs`(`lingerMs` 是各窗里最短的一个),所以触点比 `lingerMs` 密 ⇒ 在任何状态下都先于自退。
+ *    读数**不预言**自退时刻:父还活着时生效的是 owned 窗,自退只会更晚。
+ *
+ * ## 一源
+ * 与租约腿自己的行为同一处铸出:`engine_lease_armed` 日志、自退判据用的窗、拍频推导(`tickMs = min(15s, 最短窗)`)和本读数读的是同一组数 ——
+ * 不存在第二处去「算一遍租约窗」。一个永远不到期的窗(owned 窗 = `Infinity` 且没有孤儿车道)不是租约:读数整个缺席,不补 0、不把 `Infinity` 送进 JSON。
+ */
+export interface EngineLeaseFacts {
+    readonly lingerMs: number;
+    readonly tickMs: number;
+}
+/** {@link createEngineLeaseTracker} 的把手:`stop()` 收摊;`facts` 现读 —— **腿还在观察**时才有(收摊 / 自退触发之后缺席,says-yes ⟺ 腿在转)。 */
+export interface EngineLeaseHandle {
+    stop(): void;
+    readonly facts: EngineLeaseFacts | undefined;
+}
 export interface EngineLeaseDeps {
     /** 活附着数 = 本副本当前**打开着的 SSE 流**条数(`drainState.attachedStreams`,由 `createHttpServer` 自赋)。 */
     attachedStreams: () => number;
@@ -167,7 +190,5 @@ export interface EngineLeaseDeps {
     now?: () => number;
 }
 /** 装配并**立刻**起自退检查(装配即 `engine_lease_armed`)。返回停机链用的 `stop()`。 */
-export declare function createEngineLeaseTracker(deps: EngineLeaseDeps): {
-    stop(): void;
-};
+export declare function createEngineLeaseTracker(deps: EngineLeaseDeps): EngineLeaseHandle;
 //# sourceMappingURL=engine-lease.d.ts.map

package/dist/boot/engine-lease.js

@@ -1,7 +1,9 @@
 export const ENGINE_LEASE_TICK_MS = 15_000;
 export function createEngineLeaseTracker(deps) {
     const orphanLane = deps.orphan;
-    const tickMs = deps.tickMs ?? Math.min(ENGINE_LEASE_TICK_MS, deps.lingerMs, orphanLane?.lingerMs ?? Number.POSITIVE_INFINITY);
+    const shortestLingerMs = Math.min(deps.lingerMs, orphanLane?.lingerMs ?? Number.POSITIVE_INFINITY);
+    const tickMs = deps.tickMs ?? Math.min(ENGINE_LEASE_TICK_MS, shortestLingerMs);
+    const leaseFacts = Number.isFinite(shortestLingerMs) ? Object.freeze({ lingerMs: shortestLingerMs, tickMs }) : undefined;
     const now = deps.now ?? (() => performance.now());
     let stopped = false;
     let idleSince = now();
@@ -66,6 +68,11 @@ export function createEngineLeaseTracker(deps) {
         stopped = true;
         clearInterval(timer);
     }
-    return { stop };
+    return {
+        stop,
+        get facts() {
+            return stopped ? undefined : leaseFacts;
+        },
+    };
 }
 //# sourceMappingURL=engine-lease.js.map

package/dist/boot/execution-env.js

@@ -30,12 +30,13 @@ import { derivePkgSourceEnv } from "../sandbox-pkg-source.js";
 import { effectiveHostWorkspace } from "../task-cwd.js";
 import { taskInheritEnvRefusal } from "../hosted-posture.js";
 import { sessionFaceOfHead } from "../session-incarnation.js";
+import { isCodeToken } from "../terminal.js";
 import { createCacheMissMemory } from "../workspace-cache.js";
 import { workspaceSnapshotTimeoutOf } from "../workspace-space.js";
 import { sayEgressPolicyReading } from "../sandbox-egress-policy.js";
 import { sandboxPathEnvSlots, withSandboxPathEnvSlot } from "./deferred-sandbox-path-env.js";
 import { createLaneHomeAbsenceReporter } from "../lane-home-probe.js";
-import { REMOTE_EXEC_PROVIDER_WORDS, buildLaneHomeBootNote, buildLaneHomeClaim, capabilitiesFor, executionLaneOf, laneBindsReads, laneIsolated } from "../execution-lane-caps.js";
+import { REMOTE_EXEC_PROVIDER_WORDS, buildLaneHomeBootNote, buildLaneHomeClaim, capabilitiesFor, executionLaneOf, laneBindsReads, laneIsolated, laneSandboxReadFloorState } from "../execution-lane-caps.js";
 import { warnReadDenyFloorUnkept } from "./execution-lane.js";
 function boundedSessionSetter(map, maxEntries) {
     return (sid, value) => {
@@ -126,7 +127,6 @@ export function createK8sRunEnvFactory(k8sCfg, seats, deps) {
         }, deps)(ctx);
     };
 }
-const STORE_ERROR_CODE = /^[A-Za-z0-9_.:-]{1,64}$/;
 const INCARNATION_READ_TIMEOUT = "incarnation_read_timeout";
 async function occupantOf(seats, sessionId, taskId, boundMs) {
     let answer;
@@ -142,7 +142,7 @@ async function occupantOf(seats, sessionId, taskId, boundMs) {
     }
     catch (e) {
         const code = e?.code;
-        return { fault: typeof code === "string" && STORE_ERROR_CODE.test(code) ? code : "incarnation_read_failed" };
+        return { fault: isCodeToken(code) ? code : "incarnation_read_failed" };
     }
     if (answer === undefined)
         return { unread: "incarnation_unknown" };
@@ -252,6 +252,7 @@ export function createExecutionEnv(ctx) {
             ...(config.remoteExec.allowInternetAccess != null ? { allowInternetAccess: config.remoteExec.allowInternetAccess } : {}),
             ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
             ...((env) => (env !== undefined ? { sandboxEnv: env } : {}))(sandboxLaneEnvMerged(buildSandboxLaneEnv(config, config.remoteExec.sandboxEnv))),
+            sandboxReadFloor: config.sandboxReadFloor,
             logger,
             metrics,
         });
@@ -278,6 +279,7 @@ export function createExecutionEnv(ctx) {
             ...(config.remoteExec.workspaceSnapshotExclude ? { snapshotExclude: config.remoteExec.workspaceSnapshotExclude } : {}),
             logger,
             ...((lane) => ({ ...(lane.env !== undefined ? { podEnv: lane.env } : {}), ...(lane.secretEnv !== undefined ? { podSecretEnv: lane.secretEnv } : {}) }))(buildSandboxLaneEnv(config, config.remoteExec.sandboxEnv)),
+            sandboxReadFloor: config.sandboxReadFloor,
         };
         const brokerImage = config.remoteExec.brokerImage;
         executionEnvFactory = createK8sRunEnvFactory(k8sCfg, {
@@ -394,6 +396,7 @@ export function createExecutionEnv(ctx) {
             ...(config.remoteExec.network ? { network: config.remoteExec.network } : {}),
             ...(config.remoteExec.commandTimeoutMs != null ? { commandTimeoutMs: config.remoteExec.commandTimeoutMs } : {}),
             ...(config.remoteExec.env ? { env: config.remoteExec.env } : {}),
+            sandboxReadFloor: config.sandboxReadFloor,
         });
     }
     if (executionEnvFactory && DEPLOYMENT_SHAPE_PREDICATES.remoteScratchpad.holds(config)) {
@@ -466,8 +469,9 @@ export function createExecutionEnv(ctx) {
         const isolated = laneIsolated(executionLaneOf(config.remoteExec.provider));
         const suspendable = DEPLOYMENT_SHAPE_PREDICATES.suspendableHands.holds(config);
         const keepsReadFloor = capabilitiesFor(config).keepsReadFloor;
+        const sandboxReadFloor = laneSandboxReadFloorState(config);
         const sandboxEnvKeys = [...sandboxEnvNamesInForce(config)].sort();
-        logger.info("remote_exec_enabled", { provider: config.remoteExec.provider, isolated, suspendable, keepsReadFloor, ...(sandboxEnvKeys.length > 0 ? { sandboxEnvKeys } : {}) });
+        logger.info("remote_exec_enabled", { provider: config.remoteExec.provider, isolated, suspendable, keepsReadFloor, ...(sandboxReadFloor !== undefined ? { sandboxReadFloor } : {}), ...(sandboxEnvKeys.length > 0 ? { sandboxEnvKeys } : {}) });
         if (!isolated)
             logger.warn("remote_exec_real_system", { provider: config.remoteExec.provider, note: buildRealSystemNote(config.remoteExec) });
         const homeLine = buildLaneHomeBootNote(config);

package/dist/boot/memory-boundary.d.ts

@@ -40,7 +40,7 @@
  * `memory_harvest_rejections_total{code}` + 一条 warn,见 `boot/runner-deps.ts` 的 harvest 报告站点),
  * 等下一次非受限会话走正常门收编。
  * ⚠️ **这一层只在 file 记忆引擎上**(受限视图 = `FileMemoryEngineBackend` 的实装,`materialize` 取它是
- * `?? this.backend` 的可选 seam):`MEMORY_ENGINE_BACKEND=pg|tidb` 的两条腿读侧走库、盘上只是每任务投影,
+ * `?? this.backend` 的可选 seam):`MEMORY_ENGINE_BACKEND=pg|mysql` 的两条腿读侧走库、盘上只是每任务投影,
  * 没有「读磁盘即收编」的通道,`false` 在它们上仍买到披露/写门/零收编 harvest 三件。
  * ⚠️ **口径别混**:受限 = **会话级 verdict 单键**(declared-false 那一个键);`writeScope:null` 的只读
  * **平面**(请求键 `memoryWrite:false` 的 per-run 暂停 / org 层默认只读 / 双根非写面)**保持 adopt-on-read
@@ -75,7 +75,7 @@ export interface MemoryWriteBoundaryFacts {
     declaredCapable: boolean | undefined;
     /** 本部署的记忆引擎后端(`config.memoryEngineBackend`)。**只进文案**,不参与任何判决 —— 它在这里的
      *  唯一作用是把「怎么把根挪进围栏」这句话指向**在该腿上真的有效**的那个旋钮:`MEMORY_ENGINE_DIR` 只被
-     *  file 腿读(memory-scope 的 `resolveMemoryEngineRoot`),pg/tidb 腿的根是
+     *  file 腿读(memory-scope 的 `resolveMemoryEngineRoot`),pg/mysql 腿的根是
      *  `<LOCAL_DATA_ROOT|数据根>/memory-work`(boot/stores.ts 两支),那条腿上指 MEMORY_ENGINE_DIR 是让
      *  operator 去拧一个不接线的旋钮 —— 修不好还以为自己修了。 */
     engineBackend: MemoryEngineBackend;

package/dist/boot/memory-consolidation.d.ts

@@ -210,7 +210,7 @@ export declare function consolidationSeatBillingOf(plane: ConsolidationSeatPlane
  *    (结构上跑不起来由下游 D1 三条拒启臂照拒,本判决不吞);开而座落主模型 ⇒ 开 + 一行
  *    `memory_consolidation_on_main_model`(部署方显式承担,但必须知道账按主模型记)。
  *  · **未设 = 出厂缺省派生**([ref] 取代 [ref] ① 的「出厂 off」实况):
- *      结构上跑不起来(判官 {@link consolidationDriverUnwirable} 有成因:多租户 / `MEMORY_ENGINE=off` / pg·tidb
+ *      结构上跑不起来(判官 {@link consolidationDriverUnwirable} 有成因:多租户 / `MEMORY_ENGINE=off` / pg·mysql
  *      记忆后端 / `MEMORY_PROVENANCE=off`)⇒ **恒关、零提示、零探针** —— 派生开撞上 D1 拒启臂 = 每台配了便宜模型的
  *      多租户 worker 升级即起不来;而配不配便宜模型它都开不了,一句指向 `MODEL_CHEAP_ID` 的提示是误导;
  *      座不落主模型({@link consolidationSeatBillingOf} = `own-model`)⇒ **开**;

package/dist/boot/memory-consolidation.js

@@ -114,7 +114,7 @@ function unwirableRefusal(code, facts) {
                 `(MEMORY_ENGINE_BACKEND=${facts.memoryEngineBackend}) does NOT own an engine control plane (controlPlaneRoot) — ` +
                 `core would derive one on THIS replica's local disk, and a consolidation run's resumable account would die with ` +
                 `the pod (a lost run re-mints the whole library at full model cost on the next attempt). The file memory backend ` +
-                `owns a control plane; the pg/tidb memory backends do not. Set MEMORY_ENGINE_BACKEND=file, or set ` +
+                `owns a control plane; the pg/mysql memory backends do not. Set MEMORY_ENGINE_BACKEND=file, or set ` +
                 `MEMORY_CONSOLIDATION_DRIVER=off.`);
         case "provenance-off":
             return (`MEMORY_CONSOLIDATION_DRIVER=on is incompatible with MEMORY_PROVENANCE=off — core refuses to enable consolidation ` +

package/dist/boot/reapers.d.ts

@@ -167,8 +167,8 @@ interface ReapSessionsInputs {
  * 的那条臂**结构上看不见**它(它从行出发枚举),只有从会话侧枚举才找得到。
  *
  * 两只面必须落在**host durable 店**上,而 release 这一格是承重的:
- *  · `listPlaced` = host 店的分区枚举(SQL 孪生实装;local/File 后端无此面 ⇒ 键**不设**,core 那条腿
- *    如实不可用 —— 绝不给一个恒返回 `[]` 的假面,那会把「枚不了」读成「没有孤儿」);
+ *  · `listPlaced` = host 店的分区枚举(三只持久会话店都实装:SQL 两孪生读 `session_meta`,local 读会话存档行头;
+ *    店上没有这只面 ⇒ 键**不设**,core 那条腿如实不可用 —— 绝不给一个恒返回 `[]` 的假面,那会把「枚不了」读成「没有孤儿」);
  *  · `release` 对 **placed id** 必须走 host 店:路由店(`ForkRoutingSessionStore`)对一个重启后不认识
  *    的 id 会回落 transient(进程内 no-op),那会让 core 数出一次**从未发生**的 release
  *    (`orphanPlacedReleased` 当场变成谎)而字节还在库里。故先按**持久化元组**判(一次 PK 探针),

package/dist/boot/resolve-spec.js

@@ -1,6 +1,6 @@
 import { realpathSync } from "node:fs";
 import { join } from "node:path";
-import { NodeExecutionEnv, QUESTION_AWAITS_RESUME, deriveAskEffective, expandTiers, modePolicyOf, resolveAskSeamForm } from "@sema-agent/core";
+import { NodeExecutionEnv, QUESTION_AWAITS_RESUME, deriveAskEffective, expandTiers, resolveAskSeamForm } from "@sema-agent/core";
 import { cappedCeiling } from "../budget.js";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { SessionEnvironmentSelection, selectEnvironmentTool } from "../capabilities/select-environment-tool.js";
@@ -14,7 +14,7 @@ import { createDeploymentListExemption, gateIntentUnserviceableReason, singleUse
 import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScratchpadDir, resumeFactsForLane, scratchpadCoveringTaskRoot } from "../env-facts.js";
 import { FleetEventBus } from "../fleet/fleet-bus.js";
 import { createSettingsHooksRegistration, settingsHooksBudgetMs } from "../hooks/hook-runner.js";
-import { HOST_POSTURE_REFUSED_CODE, taskInheritEnvRefusal, taskWriteFaceRefusal } from "../hosted-posture.js";
+import { HOST_POSTURE_REFUSED_CODE, permissionModeWriteFaceRefusal, taskInheritEnvRefusal } from "../hosted-posture.js";
 import { headerStr } from "../http/principal-gate.js";
 import { explicitOperatorOk } from "../http/server.js";
 import { isAtMentionable, matchCatalogModel, refusedCatalogEntry, resolveTaskModel, selectableCatalog, terminalCatalogName } from "../model-select.js";
@@ -51,6 +51,7 @@ import { TENANCY_WALL_CLOCK_BASE_SEC, enableForkFromBody, normalizeRetainSubagen
 import { redactSecrets } from "../trace/redact.js";
 import { DeferredSandboxPathEnv, sandboxPathEnvSlots } from "./deferred-sandbox-path-env.js";
 import { executionLaneHomeDir, executionLaneOf, laneWiresExecutionEnv } from "../execution-lane-caps.js";
+import { executionConfigRootOf } from "../execution-config-root.js";
 import { withUnattendedLeg } from "../unattended-permission-mode.js";
 import { fieldConflictFacts } from "../field-conflict.js";
 function unrooted(spec) {
@@ -160,8 +161,8 @@ export function createResolveSpec(ctx) {
             assertRequestImageUrls(body.images);
         const gated = await gateScenarioAndAppend(body, auth, opts);
         const effMode = effectivePermissionMode(body, gated.parsedSettings.settings);
-        if (effMode !== undefined && modePolicyOf(effMode).writeFace === "open") {
-            const why = taskWriteFaceRefusal(config);
+        {
+            const why = permissionModeWriteFaceRefusal(effMode, config);
             if (why !== undefined)
                 throw new HttpError(422, why, { code: HOST_POSTURE_REFUSED_CODE });
         }
@@ -579,9 +580,11 @@ export function createResolveSpec(ctx) {
                 ? await ensureScratchpadDir(config.localDataRoot ?? localRoot, auth.sessionId, (msg, meta) => logger.warn(msg, { ...(meta ?? {}), sessionId: auth.sessionId }))
                 : undefined);
         if (effectiveSettings) {
+            const configRoot = executionConfigRootOf(config);
             const ruleBases = {
                 ...(pathAdjudication.taskRoot !== undefined ? { taskRoot: pathAdjudication.taskRoot } : {}),
                 ...(pathAdjudication.taskHome !== undefined ? { taskHome: pathAdjudication.taskHome } : {}),
+                ...(configRoot !== undefined ? { configRoot } : {}),
             };
             try {
                 governed = applyTaskSettings(governedBase, effectiveSettings, ruleBases);

package/dist/boot/session-faces.d.ts

@@ -16,7 +16,7 @@ import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import type { WorkflowCompletionInbox } from "../orchestration/workflow-completion-inbox.js";
 import { PlanCacheProbe } from "../plan-cache-probe.js";
-import type { CheckpointStoreFull, StoreBackend, ToolResultStoreFull } from "../plugins/store-backend.js";
+import { type CheckpointStoreFull, type StoreBackend, type ToolResultStoreFull } from "../plugins/store-backend.js";
 import type { createSessionStore } from "../plugins/session-store.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import type { FileHistoryErasureFace } from "../file-history-capture.js";

package/dist/boot/session-faces.js

@@ -2,6 +2,7 @@ import { buildRewindHandles, buildSessionAudit, buildSessionAuditLocal, buildSes
 import { makeDegenerateInstrument } from "../degenerate-instrument.js";
 import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
+import { localSessionRowsOf } from "../plugins/store-backend.js";
 import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
 import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
@@ -14,17 +15,17 @@ export function createSessionFaces(ctx) {
     const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
-    const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
+    const auditLocalRows = localSessionRowsOf(backend);
     const ownerAware = sessionStore;
     const headOf = headReadOf(sessionStore);
-    const sessionAudit = mysqlPool || auditPgPool || auditLocalRoot
+    const sessionAudit = mysqlPool || auditPgPool || auditLocalRows
         ? async (sessionId, opts) => {
             const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
             const audit = mysqlPool
                 ? await buildSessionAudit(mysqlPool, sessionId, handles)
                 : auditPgPool
                     ? await buildSessionAuditPg(auditPgPool, sessionId, handles)
-                    : await buildSessionAuditLocal(auditLocalRoot, sessionId, handles);
+                    : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
             if (!audit)
                 return undefined;
             const [head, placement] = await Promise.all([headOf?.(sessionId), opts !== undefined ? ownerAware.placementOf?.(sessionId) : undefined]);

package/dist/boot/shutdown.js

@@ -74,6 +74,7 @@ export function installShutdownHandlers(ctx) {
     let closingAt = 0;
     let parentWatch;
     let engineLease;
+    let leaseFactsReader;
     const hardShutdown = () => {
         if (closing)
             return;
@@ -280,6 +281,8 @@ export function installShutdownHandlers(ctx) {
                 : {}),
             log: (event, fields) => logger.info(event, fields),
         });
+        leaseFactsReader = () => engineLease?.facts;
+        drainState.engineLease = leaseFactsReader;
     }
     let disposed = false;
     return {
@@ -302,6 +305,8 @@ export function installShutdownHandlers(ctx) {
             engineLease?.stop();
             if (drainState.enter === enterByRequest)
                 drainState.enter = undefined;
+            if (leaseFactsReader !== undefined && drainState.engineLease === leaseFactsReader)
+                drainState.engineLease = undefined;
         },
     };
 }

package/dist/boot/stage-05-execution-env.js

@@ -1,6 +1,6 @@
 import { assembleDeploymentMods } from "./deployment-mods.js";
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
-import { assertDeviceLaneWired, createDeviceLane } from "./device-lane.js";
+import { assertDeviceLaneWired, createDeviceLane, noteDeviceRelayBindings } from "./device-lane.js";
 import { assertWorkspaceSpaceReadable, createExecutionEnv } from "./execution-env.js";
 import { headReadOf } from "../session-incarnation.js";
 import * as facts from "../capability-facts.js";
@@ -15,6 +15,8 @@ export async function runStage05(ctx) {
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
     const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, readSandboxGitPlane, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
     assertDeviceLaneWired(config.remoteExec?.provider === "device", deviceLane, executionEnvFactory !== undefined);
+    if (deviceLane !== undefined && config.remoteExec?.provider === "device")
+        await noteDeviceRelayBindings(config.remoteExec.relay, deviceLane.store, logger);
     assertWorkspaceSpaceReadable(facts.workspaceSpace(config), { headOf, spaceCommits }, facts.workspaceCache(config), sessionStoreLabelOf(config.sessionBackend, backend?.kind));
     if (sandboxSecretSeatGate !== undefined)
         await sandboxSecretSeatGate();

package/dist/boot/stage-06-runners.d.ts

@@ -7,7 +7,6 @@
  * 🔴 `runStore` / `parkedAskRedeem` 经 `late-binds.ts` 的晚绑 cell 读(原文同作用域前向引用/晚绑 holder)。
  */
 import { Runner } from "@sema-agent/core";
-import { ForkRoutingSessionStore } from "../plugins/fork-routing-session-store.js";
 import type { runStage05 } from "./stage-05-execution-env.js";
 export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>): Promise<{
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
@@ -44,7 +43,6 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: Runner;
-    subRunnerSessions: ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;

package/dist/boot/stage-06-runners.js

@@ -230,6 +230,6 @@ export async function runStage06(ctx) {
         onError: runnerDeps.onError ? runnerDeps.onError : undefined,
     };
     const subRunner = new Runner(subRunnerDeps);
-    return { ...ctx, approvalAskAudit, approvalExemptionStore, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekResolver, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subRunnerSessions, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowParkDecisions, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate };
+    return { ...ctx, approvalAskAudit, approvalExemptionStore, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekResolver, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowParkDecisions, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate };
 }
 //# sourceMappingURL=stage-06-runners.js.map

package/dist/boot/stage-07-capability-layer.d.ts

@@ -60,7 +60,6 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
-    subRunnerSessions: import("../plugins/fork-routing-session-store.js").ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -1,12 +1,12 @@
 import { DEFAULT_MODEL_REF } from "../model-select.js";
-import { probeSearchBackend, uuidv7 } from "@sema-agent/core";
+import { probeSearchBackend, resolveSubagentTranscriptTier, uuidv7 } from "@sema-agent/core";
 import { selectEnvironmentTool } from "../capabilities/select-environment-tool.js";
 import { subagentSendUserFileExtraTools } from "../capabilities/send-user-file-tool.js";
 import { parseCapEnv, parseNumOrFailNonNegative } from "../config.js";
-import { ensureChildSessionDurableWithPromotion } from "../plugins/session-store.js";
+import { attestChildSessionDurable } from "../plugins/session-store.js";
 import { webSearchConfigFromEnv, createWebSearchBackend, shouldProbeWebSearchOnBoot } from "../plugins/web-search.js";
 import { createAuthorizer } from "../security.js";
-import { buildForceDurableGateInertNotice, buildNoResponderBootWarns, gateIntentUnserviceableReason, singleUserAutoAcceptBaselineApplies } from "../approval.js";
+import { buildForceDurableGateInertNotice, buildNoResponderBootWarns, buildSingleUserDefaultPostureNotice, gateIntentUnserviceableReason, singleUserAutoAcceptBaselineApplies } from "../approval.js";
 import { executionLaneOf, laneWiresExecutionEnv } from "../execution-lane-caps.js";
 import { loadDeploymentSkills } from "../capabilities/skills.js";
 import { createRepoClient } from "../capabilities/repo-tools.js";
@@ -29,7 +29,7 @@ import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
 import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 export async function runStage07(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, peerDesk, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, peerDesk, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore);
     const runStore = backend ? backend.run() : undefined;
     bindRunStore(runStore);
@@ -126,10 +126,8 @@ export async function runStage07(ctx) {
     }))
         logger.warn(w.event, w.fields);
     if (singleUserAutoAcceptBaselineApplies(config)) {
-        logger.info("tool_policy_single_user_default", {
-            posture: "adjudicated auto-accept — ALL write/hand/MCP tool surfaces auto-allowed (core per-surface UNGATED enumeration suppressed for single-user turnkey)",
-            tighten: "APPROVAL_REQUIRE / AUTONOMY / commandPolicy (re-surfaces + gates specific surfaces)",
-        });
+        const posture = buildSingleUserDefaultPostureNotice();
+        logger.info(posture.event, posture.fields);
     }
     if (config.directDoorActive)
         logger.info("direct_door_active", { iss: config.principalJwtIss, aud: config.principalJwtAud, operators: config.operatorPrincipals.length });
@@ -169,8 +167,8 @@ export async function runStage07(ctx) {
         })
             .catch((e) => logger.warn("web_search_probe_failed", { provider: webSearchCfg.provider, error: e instanceof Error ? e.message : String(e) }));
     }
-    const ensureChildSessionDurable = checkpointStore && config.sessionBackend === "tidb"
-        ? (sessionId, root) => ensureChildSessionDurableWithPromotion(sessionStore, subRunnerSessions, sessionId, root, logger)
+    const ensureChildSessionDurable = checkpointStore && resolveSubagentTranscriptTier(backgroundAgentStore !== undefined, sessionStore) === "full"
+        ? (sessionId, root) => attestChildSessionDurable(sessionStore, sessionId, root, logger)
         : undefined;
     const webFetchSummarize = createWebFetchSummarizeLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver(), logger });
     const scenarioDeps = {

package/dist/boot/stage-08-reapers.d.ts

@@ -73,7 +73,6 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: Runner;
-    subRunnerSessions: import("../plugins/fork-routing-session-store.js").ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;

package/dist/boot/stage-09-leader.d.ts

@@ -97,7 +97,6 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
-    subRunnerSessions: import("../plugins/fork-routing-session-store.js").ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;

package/dist/boot/stage-10-http-server.d.ts

@@ -96,7 +96,6 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
-    subRunnerSessions: import("../plugins/fork-routing-session-store.js").ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;

package/dist/boot/stage-10-http-server.js

@@ -96,6 +96,7 @@ export async function runStage10(ctx) {
         memoryCompliance: memoryComplianceFaces,
         memoryOriginFace: memoryOriginFaces,
         sessionMemoryStatus: sessionMemoryStatusFace,
+        memorySyncLeg: memorySyncRunner,
         memoryAutoConsolidationArmed: autoRunOnRecommendationEffective(runnerDeps),
         memoryConsolidationValve: consolidationValve,
         memoryConsolidation: memoryConsolidationFaces,

package/dist/boot/stores.js

@@ -18,6 +18,8 @@ import { PgRosterStore, TiDBRosterStore, ensurePgRosterSchema, ensureTiDBRosterS
 import { LocalTaskAttachmentStore } from "../plugins/local-task-attachment-store.js";
 import { PgTaskAttachmentStore, TiDBTaskAttachmentStore, ensurePgTaskAttachmentSchema, ensureTiDBTaskAttachmentSchema } from "../plugins/task-attachment-store.js";
 import { createSessionStore } from "../plugins/session-store.js";
+import { buildSqlPoolMissingRefusal, missingSqlCoordinateKeys } from "../sql-engine-coordinates.js";
+import { runApprovalBatchKindlessCensus } from "../approval-batch-census.js";
 import { runAndLogOneTimeMigrations } from "../plugins/one-time-migrations.js";
 import { createTaskListLane } from "./task-list-lane.js";
 import { ensurePgTaskListSchema, ensureTiDBTaskListSchema } from "../plugins/task-list-store-sql.js";
@@ -33,7 +35,7 @@ import { assertToolResultProvenanceSchema } from "../plugins/tool-result-store-s
 import { assertPermissionRuleApprovalSchema, assertPermissionRuleTicketSchema } from "../plugins/permission-rule-store-sql.js";
 import { assertApprovalAskRuleMaterialSchema } from "../plugins/approval-ask-store-sql.js";
 import { assertSchemaMatchesCode } from "../plugins/schema-consistency.js";
-import { assertCheckpointColumnSchema } from "../plugins/checkpoint-store-sql.js";
+import { SqlCheckpointStore, assertCheckpointColumnSchema } from "../plugins/checkpoint-store-sql.js";
 import { assertFileHistorySchema } from "../plugins/file-history-store-sql.js";
 import { buildMemoryBoundaryLaneFacts, buildMemoryWriteBoundaryAudit } from "./memory-boundary.js";
 import { buildMemoryPosture } from "../memory-posture.js";
@@ -42,7 +44,7 @@ import { establishSqlEnginePosture, sqlPoolsOf } from "../sql-engine-posture.js"
 import { buildStorePosture } from "../store-posture.js";
 const DARK_REASON_PROSE = {
     engine_off: () => "MEMORY_ENGINE=off",
-    multi_tenant_file_backend: () => "multi-tenant on the FILE backend (no tenant isolation; set MEMORY_ENGINE_BACKEND=pg|tidb to light up)",
+    multi_tenant_file_backend: () => "multi-tenant on the FILE backend (no tenant isolation; set MEMORY_ENGINE_BACKEND=pg|mysql to light up)",
     remote_lane_split: (lane) => `remote exec lane "${lane}" (worker/sandbox file planes split; MEMORY_ENGINE_REMOTE_LANE=allow overrides)`,
 };
 export async function assertApprovalAskRuleMaterialOnBackend(backend) {
@@ -97,6 +99,10 @@ export async function openStores(ctx) {
     }
     if (backend)
         await runAndLogOneTimeMigrations(logger, backend);
+    {
+        const censusStore = backend !== undefined && backend.kind !== "local" ? backend.checkpoint?.() : undefined;
+        void runApprovalBatchKindlessCensus(censusStore instanceof SqlCheckpointStore ? censusStore : undefined, logger);
+    }
     if ((process.env.REWIND_SNAPSHOT_MAX_MB ?? "") !== "") {
         logger.warn("rewind_snapshot_max_mb_retired", {
             note: "REWIND_SNAPSHOT_MAX_MB no longer has an effect: the whole-tree snapshot epoch is retired (S-15); per-edited-file history captures only files the agent touches, with no tree walk and no size gate. Remove the env var. Per-blob SQL sizing is governed by SNAPSHOT_BLOB_SQL_MAX_BYTES / object storage as before.",
@@ -136,7 +142,7 @@ export async function openStores(ctx) {
         if (dialect === "pg") {
             const pool = backend?.pgPool();
             if (!pool)
-                throw new Error("MEMORY_ENGINE_BACKEND=pg requires DB_BACKEND=pg (the memory engine binds the same PG pool) — refusing to start half-configured");
+                throw new Error(buildSqlPoolMissingRefusal({ engine: dialect, declared: config.dbBackend === dialect, missing: missingSqlCoordinateKeys(dialect, process.env) }));
             const q = async (text, params) => { const r = await pool.query(text, params); return { rows: r.rows }; };
             await ensurePgMemoryEngineSchema(q);
             await ensurePgMemoryHistorySchema(q);
@@ -173,7 +179,7 @@ export async function openStores(ctx) {
         else {
             const pool = backend?.mysqlPool();
             if (!pool)
-                throw new Error("MEMORY_ENGINE_BACKEND=tidb requires DB_BACKEND=mysql — refusing to start half-configured");
+                throw new Error(buildSqlPoolMissingRefusal({ engine: dialect, declared: config.dbBackend === dialect, missing: missingSqlCoordinateKeys(dialect, process.env) }));
             await ensureTiDBMemoryEngineSchema(pool);
             await ensureTiDBMemoryHistorySchema(pool);
             await ensureTiDBMemorySyncSchema(pool);

package/dist/boot/web-admin.js

@@ -37,6 +37,7 @@ const MODELS_REJECTION_PHRASE = {
     invalid_json: "读不出(不是合法的 JSON)",
     not_object: "读不出(解析出来不是 JSON 对象:null / 数组 / 标量)",
     io: "读不出(文件读失败:权限、路径是目录或 I/O 错误)",
+    too_deep: "读不出(嵌套过深:深过整棵目录的内容版本能算的层数)",
     retired_domain: "是带事实的退役域文档",
 };
 function lkgReadNote(scope) {

package/dist/capabilities/scenarios.d.ts

@@ -87,7 +87,7 @@ export interface ScenarioContext {
      * 由**每一个**接了停驻挂点的取用方显式交出(一条读法,没有回落):请求腿 = 本请求经鉴权解析的会话与受理时那一读(`boot/resolve-spec.ts`);`/decide` 赎回面 = 行上的
      * `rootSessionId` 与赎回腿写口放行的那一位住客(`parked-revive-surface.ts`,交不交座都交)。它**只**喂停驻挂点,不挂任何会话级设施(那是 {@link sessionId} 的事,
      * 判据是「这只 bundle 是不是在那只会话上取用的」,与属主来源是两个独立判据)。缺席 = 没有根可交(boot 期探针、run-local、行上没有根)⇒ 律给哨兵。
-     * 挂点在停驻那一刻再读一次根行:住客不是见证的那一位(删了、同 id 被重新登记)⇒ 停驻否决 —— 不按新住客晋升或认领。
+     * 挂点在停驻那一刻再读一次根行:住客不是见证的那一位(删了、同 id 被重新登记)⇒ 停驻否决 —— 不按新住客认领。
      */
     delegationRoot?: DelegationRootWitness;
 }

package/dist/capability-facts.d.ts

@@ -140,6 +140,15 @@ export declare function mcpReconnect(d: Pick<Deps, "runStore" | "sessionStorage"
     runStore: Store<"runStore">;
     sessionStorage: HeadReadingSessionStore;
 }>;
+/**
+ * 在飞 run 的切档口(`POST /v1/runs/:id/permission-mode`)= 持久 run 账面 ∧ checkpoint 店(ctx 面)。后一格是承重的:切档要读这条 run 的
+ * **存储体**(本任务 settings 的 kill-switch 由受理判官折,与提交口同一份事实),也要把准入的词写回存储体(run 模式词的唯一来源,续跑腿读它);
+ * 没有 ctx 面的部署两件都做不了 ⇒ 不提供这一口(能力位 `permissionModeWrite` 同读本事实)。
+ */
+export declare function permissionModeWrite(d: Pick<Deps, "runStore" | "checkpointStore">): Fact<"run_store_absent" | "checkpoint_store_absent", {
+    runStore: Store<"runStore">;
+    checkpointStore: Store<"checkpointStore">;
+}>;
 export declare function sessionAuditView(d: Pick<Deps, "sessionAudit">): Fact<"session_audit_absent", {
     sessionAudit: Store<"sessionAudit">;
 }>;

package/dist/capability-facts.js

@@ -113,6 +113,15 @@ export function mcpReconnect(d) {
         return owned;
     return yes({ runStore: runs.runStore, sessionStorage: owned.sessionStorage });
 }
+export function permissionModeWrite(d) {
+    const runs = durableRuns(d);
+    if (!runs.available)
+        return runs;
+    const park = checkpointPark(d);
+    if (!park.available)
+        return park;
+    return yes({ runStore: runs.runStore, checkpointStore: park.checkpointStore });
+}
 export function sessionAuditView(d) {
     return d.sessionAudit !== undefined ? yes({ sessionAudit: d.sessionAudit }) : no("session_audit_absent");
 }

package/dist/card-void.d.ts

@@ -0,0 +1,38 @@
+/**
+ * **结算时作废一张本服务兑现不了的卡** —— 全仓「结算作废」的唯一动词:读卡 → 卡仍 pending ∧ 卡在调用方说的那只会话上 ⇒
+ * 按卡**自己的** scope 走 checkpoint 店的 `expire`(与引擎的本进程仲裁器、续跑的 resolve 同一只 CAS,恰一个赢家)。不新增任何持久态。
+ *
+ * 规则只有一条:**本服务兑现不了的卡不留在待决面上**。两个产地读这一只动词,各自只答「手里是哪一张卡、它该在哪只会话上」:
+ *  · 验证器自己的停驻(`verifier-pause-card.ts`):卡在验证器现铸的会话上,本服务的续跑链连不回它;
+ *  · 停驻没落定就以失败收场的腿(`runs.ts` 的 `voidHeldParkCard`:后台腿与续跑腿):卡在本 run 的会话上,但兑现它的那条 run 已经
+ *    `failed`、认领已放 —— 卡的命运先于认领释放(调用方先调本动词、再放认领)。
+ *
+ * 不抛:作废没做成(店读 / 作废抛错、卡的会话对不上、没接店)⇒ 卡回到「留在待决面上、由审批兜底收割收走」的形,按产地登记的 tag
+ * 响亮留痕(计数 + 探针行 + 一次 warn),结算照常往下走。卡已不 pending / 已不在 ⇒ 什么都不做(CAS 输给了别的结算者,结局相同)。
+ *
+ * ## 🚧 过渡(引擎动词到货即改调)
+ * 店级 `expire` 只作废卡,**不释放**引擎为这张卡钉住的会话(引擎在停驻时 pin 会话,只在续跑终局 / 续跑失败臂 unpin):
+ * 被作废的卡的会话在本副本内存里一直常驻到进程重启。引擎给出「作废停驻卡并释放其会话」的动词之后,本动词改调它(两个产地一字不改)。
+ */
+import type { CheckpointToken } from "@sema-agent/core";
+import { type FailOpenTag } from "./observability/fail-open.js";
+/** 结算点手里那只 checkpoint 店的两个动词:读卡(取它自己的 scope / 会话 / 状态)→ 按卡自己的 scope CAS 作废。 */
+export interface CardVoidPort {
+    get(token: CheckpointToken): Promise<{
+        readonly scope?: string;
+        readonly sessionId?: string;
+        readonly status?: string;
+    } | null>;
+    expire(token: CheckpointToken, scope: string): Promise<boolean>;
+}
+/** 要作废的那一张:停驻带回的凭据 + 它应在的会话(对不上就不动它 —— 只作废**这一张**)。 */
+export interface CardRef {
+    readonly token: CheckpointToken;
+    readonly sessionId: string | undefined;
+}
+/**
+ * 作废 `card`(见模块头注)。`tag` = 产地登记的 F 类 tag;`at` = 探针行上的产地现场(例 `leg=bg`),接在 `reason=` 之后;
+ * detail 形 `reason=<词>[ <at>][ err=<原句>]`,不含凭据。
+ */
+export declare function voidPendingCard(card: CardRef, cards: CardVoidPort | undefined, tag: FailOpenTag, at?: string): Promise<void>;
+//# sourceMappingURL=card-void.d.ts.map