@sema-agent/server 7.140.0 → 7.142.0

package/dist/boot/runner-deps.js

@@ -21,7 +21,9 @@ import { coreFileHistoryCaptureSeat } from "../file-history-capture.js";
 import { DEPLOYMENT_SHAPE_PREDICATES } from "../deployment-shape.js";
 import { rewindFailureCode } from "../file-history-disclosure.js";
 import { errorKindOf } from "../observability/err-text.js";
+import { codeFieldOf } from "../terminal.js";
 import { buildShownUrlsInText } from "../url-refusal.js";
+import { seatText } from "../trace/exit-seat.js";
 export function createRunnerDepsOnAsk(toolApproval) {
     if (!toolApproval)
         return undefined;
@@ -178,7 +180,7 @@ export function createRunnerDeps(ctx) {
                         }
                     }
                     catch (err) {
-                        logger.warn("workflow_ack_served_failed", { runId: input.runId, err: String(err) });
+                        logger.warn("workflow_ack_served_failed", { runId: input.runId, err: seatText("operator-log-text", String(err)) });
                     }
                 },
             },
@@ -199,7 +201,7 @@ export function createRunnerDeps(ctx) {
         onTaskOutcome: outcomeSink
             ? (o) => {
                 metrics.inc("task_outcomes_total", { status: o.status, green: String(o.oracle?.green ?? "unknown") });
-                void outcomeSink.recordCore(o).catch((err) => logger.warn("task_outcome_record_failed", { runId: o.runId, err: String(err) }));
+                void outcomeSink.recordCore(o).catch((err) => logger.warn("task_outcome_record_failed", { runId: o.runId, err: seatText("operator-log-text", String(err)) }));
             }
             : undefined,
         onElicit: elicitation ? elicitation.elicit : undefined,
@@ -249,17 +251,18 @@ export function createRunnerDeps(ctx) {
             : undefined,
         ...selfOrchestrationDeps,
         onError: (err, ctx) => {
+            const codeField = codeFieldOf(err);
             if (ctx.phase === "degraded") {
-                logger.warn("task_degraded", { sessionId: ctx.sessionId, info: String(err) });
+                logger.warn("task_degraded", { sessionId: ctx.sessionId, ...codeField, info: seatText("operator-log-text", String(err)) });
                 return;
             }
             if (ctx.phase === "prompt-constitution") {
-                logger.warn("prompt_composition_warning", { sessionId: ctx.sessionId, info: String(err) });
+                logger.warn("prompt_composition_warning", { sessionId: ctx.sessionId, ...codeField, info: seatText("operator-log-text", String(err)) });
                 return;
             }
             if (ctx.phase === "rewind") {
                 const code = rewindFailureCode(err);
-                logger.warn("rewind_snapshot_failed", { sessionId: ctx.sessionId, code, info: String(err) });
+                logger.warn("rewind_snapshot_failed", { sessionId: ctx.sessionId, code, info: seatText("operator-log-text", String(err)) });
                 metrics.inc("rewind_snapshot_failed_total", { code });
                 return;
             }
@@ -268,12 +271,12 @@ export function createRunnerDeps(ctx) {
                 return;
             }
             if (ctx.phase === "mcp") {
-                logger.warn("mcp_server_unavailable", { sessionId: ctx.sessionId, kind: errorKindOf(err), info: buildShownUrlsInText(String(err)) });
+                logger.warn("mcp_server_unavailable", { sessionId: ctx.sessionId, kind: errorKindOf(err), ...codeField, info: seatText("operator-log-text", buildShownUrlsInText(String(err))) });
                 metrics.inc("mcp_server_unavailable_total");
                 return;
             }
             if (ctx.phase === "a2a") {
-                logger.warn("a2a_peer_unavailable", { sessionId: ctx.sessionId, kind: errorKindOf(err), info: buildShownUrlsInText(String(err)) });
+                logger.warn("a2a_peer_unavailable", { sessionId: ctx.sessionId, kind: errorKindOf(err), ...codeField, info: seatText("operator-log-text", buildShownUrlsInText(String(err))) });
                 metrics.inc("a2a_peer_unavailable_total");
                 return;
             }
@@ -285,7 +288,8 @@ export function createRunnerDeps(ctx) {
                     sessionId: ctx.sessionId,
                     confirmed: classification !== undefined,
                     ...(classification !== undefined ? { classification, classificationKnown: causeLevel !== undefined } : {}),
-                    err: String(err),
+                    ...codeField,
+                    err: seatText("operator-log-text", String(err)),
                 };
                 metrics.inc("prompt_cache_low_hit_total", {
                     ...(classification !== undefined ? { classification: causeLevel !== undefined ? classification : "unknown" } : {}),
@@ -298,25 +302,24 @@ export function createRunnerDeps(ctx) {
                 return;
             }
             if (ctx.phase === "config") {
-                const code = typeof err?.code === "string" ? err.code : undefined;
                 const classification = ctx.classification;
                 const classificationKnown = classification === undefined ? undefined : CONFIG_ADVISORY_CLASSIFICATIONS.has(classification);
                 const fields = {
                     sessionId: ctx.sessionId,
-                    ...(code !== undefined ? { code } : {}),
+                    ...codeField,
                     ...(classification !== undefined ? { classification, classificationKnown } : {}),
-                    info: String(err),
+                    info: seatText("operator-log-text", String(err)),
                 };
                 logger.warn("runner_config_advisory", fields);
                 metrics.inc("runner_config_advisory_total", {
-                    ...(code !== undefined ? { code } : {}),
+                    ...codeField,
                     ...(classification !== undefined ? { classification: classificationKnown ? classification : "unknown" } : {}),
                     level: "warn",
                 });
                 return;
             }
             metrics.inc("runner_error_total", { phase: ctx.phase });
-            logger.error("runner_error", { phase: ctx.phase, sessionId: ctx.sessionId, err: String(err) });
+            logger.error("runner_error", { phase: ctx.phase, sessionId: ctx.sessionId, ...codeField, err: seatText("operator-log-text", String(err)) });
         },
         ...(ctx.consolidationSeat !== undefined
             ? {

package/dist/boot/runtime-caps.js

@@ -1,6 +1,7 @@
 import { applyGovernedVerdictAbsenceWarning, applyLocalAutoModeDeny, applyMemoryOptOutGrant, applyObserverEnvOptIn, centerEntitlementSourceWired, createPrincipalEntitlementsClient, } from "../runtime-caps-resolver.js";
 import { scopedTokenNeedsWorker } from "../center-credential.js";
 import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
+import { seatText } from "../trace/exit-seat.js";
 export function assertMemoryCapturePolicyWirable(input) {
     if (input.policy !== "governed")
         return;
@@ -47,7 +48,7 @@ export function createRuntimeCaps(ctx) {
         ? createPrincipalEntitlementsClient({
             center: config.webAdmin,
             ...(config.webAdmin.worker ? { worker: config.webAdmin.worker } : {}),
-            onError: (err, principal) => logger.warn("runtime_caps_resolve_failed", { principal, err: String(err) }),
+            onError: (err, principal) => logger.warn("runtime_caps_resolve_failed", { principal, err: seatText("operator-log-text", String(err)) }),
         })
         : undefined;
     const centerRuntimeCapsResolver = principalCaps?.resolveRuntimeCaps;
@@ -60,7 +61,7 @@ export function createRuntimeCaps(ctx) {
         const withMemoryGrant = applyMemoryOptOutGrant(withObservers, ctx.memoryOptOutGrant, {
             onFault: (err, principal) => logger.warn("memory_optout_grant_resolve_failed", {
                 principal,
-                err: String(err),
+                err: seatText("operator-log-text", String(err)),
                 ...(observability ? {} : { face: "capabilities-read" }),
                 effect: "allowMemoryOptOut left ABSENT for this resolve (never coined as false): open posture ⇒ the opt-out takes effect; governed ⇒ core refuses the run (verdict absent)",
             }),

package/dist/boot/session-faces.d.ts

@@ -16,7 +16,7 @@ import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import type { WorkflowCompletionInbox } from "../orchestration/workflow-completion-inbox.js";
 import { PlanCacheProbe } from "../plan-cache-probe.js";
-import type { CheckpointStoreFull, StoreBackend, ToolResultStoreFull } from "../plugins/store-backend.js";
+import { type CheckpointStoreFull, type StoreBackend, type ToolResultStoreFull } from "../plugins/store-backend.js";
 import type { createSessionStore } from "../plugins/session-store.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import type { FileHistoryErasureFace } from "../file-history-capture.js";

package/dist/boot/session-faces.js

@@ -2,6 +2,7 @@ import { buildRewindHandles, buildSessionAudit, buildSessionAuditLocal, buildSes
 import { makeDegenerateInstrument } from "../degenerate-instrument.js";
 import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
+import { localSessionRowsOf } from "../plugins/store-backend.js";
 import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
 import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
@@ -10,21 +11,22 @@ import { probeSessionChildren, retireSessionChildren, sessionChildrenScope, Sess
 import { SessionActiveRunError } from "../execution-placement.js";
 import { headReadOf, redactIncarnations } from "../session-incarnation.js";
 import { recordFailOpen } from "../observability/fail-open.js";
+import { seatText } from "../trace/exit-seat.js";
 export function createSessionFaces(ctx) {
     const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
-    const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
+    const auditLocalRows = localSessionRowsOf(backend);
     const ownerAware = sessionStore;
     const headOf = headReadOf(sessionStore);
-    const sessionAudit = mysqlPool || auditPgPool || auditLocalRoot
+    const sessionAudit = mysqlPool || auditPgPool || auditLocalRows
         ? async (sessionId, opts) => {
             const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
             const audit = mysqlPool
                 ? await buildSessionAudit(mysqlPool, sessionId, handles)
                 : auditPgPool
                     ? await buildSessionAuditPg(auditPgPool, sessionId, handles)
-                    : await buildSessionAuditLocal(auditLocalRoot, sessionId, handles);
+                    : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
             if (!audit)
                 return undefined;
             const [head, placement] = await Promise.all([headOf?.(sessionId), opts !== undefined ? ownerAware.placementOf?.(sessionId) : undefined]);
@@ -105,7 +107,7 @@ export function createSessionFaces(ctx) {
                 }
             }
             if (workflowCompletionInbox)
-                await workflowCompletionInbox.purge(sessionId, owner ?? null).catch((err) => logger.warn("workflow_completion_inbox_purge_failed", { sessionId, err: String(err) }));
+                await workflowCompletionInbox.purge(sessionId, owner ?? null).catch((err) => logger.warn("workflow_completion_inbox_purge_failed", { sessionId, err: seatText("operator-log-text", String(err)) }));
             const peerBox = mailboxStore !== undefined && mailboxRecipientLifecycle !== undefined
                 ? { store: mailboxStore, lifecycle: mailboxRecipientLifecycle, scope: owner ?? "default", handle: peerSessionBoxHandle(sessionId) }
                 : undefined;
@@ -117,7 +119,7 @@ export function createSessionFaces(ctx) {
                 await reapSessionBackgroundHard(sessionId, owner ?? "default", { includeRetained: false, reason: "session_deleted" }, logger);
             }
             catch (err) {
-                logger.warn("session_background_reap_failed", { sessionId, err: String(err) });
+                logger.warn("session_background_reap_failed", { sessionId, err: seatText("operator-log-text", String(err)) });
             }
             if (peerBox !== undefined)
                 await peerBox.store.drop(peerBox.scope, peerBox.handle);
@@ -137,7 +139,7 @@ export function createSessionFaces(ctx) {
                     logger.warn("workspace_space_reclaim_failed", {
                         sessionId,
                         stage: "seat_threw",
-                        error: redactIncarnations(String(err)),
+                        error: seatText("operator-log-text", redactIncarnations(String(err))),
                         effect: "the ended space's cache volume and snapshot objects may stay (the reclaim seat threw, which its contract forbids; the session delete went ahead) — the bucket's lifecycle rule is the fallback for objects, the volume is deleted by label sema.space",
                     });
                 });

package/dist/boot/shutdown.js

@@ -9,6 +9,7 @@ import { createEngineLeaseTracker } from "./engine-lease.js";
 import { writeExitLast, readExitLast, clearExitLast } from "./exit-last.js";
 import { isScriptRealmRejection, describeRejectionReason } from "../orchestration/hardened-vm-runner.js";
 import { DRAIN_CAUSE_COUNTS_AS_FIRST_STOP_SIGNAL, HARD_STOP_ACTION_ID, drainDeadlineBeyondBound } from "../fleet/drain-entry.js";
+import { seatText } from "../trace/exit-seat.js";
 const HARD_STOP_GRACE_MS = 10_000;
 const FINAL_EXIT_MS = 15_000;
 export function backgroundGraceRemainingMs(a) {
@@ -74,6 +75,7 @@ export function installShutdownHandlers(ctx) {
     let closingAt = 0;
     let parentWatch;
     let engineLease;
+    let leaseFactsReader;
     const hardShutdown = () => {
         if (closing)
             return;
@@ -90,7 +92,7 @@ export function installShutdownHandlers(ctx) {
                 for (const p of uncommittedParks)
                     logger.warn("approval_park_uncommitted_at_shutdown", { approvalId: p.approvalId, taskId: p.taskId });
             })
-                .catch((err) => logger.warn("approval_drain_for_shutdown_failed", { err: String(err) }));
+                .catch((err) => logger.warn("approval_drain_for_shutdown_failed", { err: seatText("operator-log-text", String(err)) }));
         clearInterval(reaper);
         clearInterval(fleetReconcile.timer);
         const retentionTeardown = retentionLane === undefined
@@ -106,7 +108,7 @@ export function installShutdownHandlers(ctx) {
         engineLease?.stop();
         storeLiveProbe?.stop();
         servingLease?.stop();
-        void deviceHub?.close().catch((err) => logger.warn("device_hub_close_failed", { err: String(err) }));
+        void deviceHub?.close().catch((err) => logger.warn("device_hub_close_failed", { err: seatText("operator-log-text", String(err)) }));
         webAdmin?.stopRefreshLoop();
         otelExporter?.stop();
         breakerState?.stop();
@@ -280,6 +282,8 @@ export function installShutdownHandlers(ctx) {
                 : {}),
             log: (event, fields) => logger.info(event, fields),
         });
+        leaseFactsReader = () => engineLease?.facts;
+        drainState.engineLease = leaseFactsReader;
     }
     let disposed = false;
     return {
@@ -302,6 +306,8 @@ export function installShutdownHandlers(ctx) {
             engineLease?.stop();
             if (drainState.enter === enterByRequest)
                 drainState.enter = undefined;
+            if (leaseFactsReader !== undefined && drainState.engineLease === leaseFactsReader)
+                drainState.engineLease = undefined;
         },
     };
 }

package/dist/boot/stage-04-stores.js

@@ -6,18 +6,19 @@ import { auditDormantPermissionRules } from "./permission-rules-audit.js";
 import { createBudgetAndTracing } from "./budget-tracing.js";
 import { createRuleConsentLane } from "../rules-consent.js";
 import { createConsolidationValve } from "./memory-consolidation.js";
+import { createOperatorFaceIncidentSink } from "../memory-incident-sink.js";
 export async function runStage04(ctx) {
     const { backend, breakerState, config, logger, memoryEngine, metrics, sessionCaptureRecords } = ctx;
     const memoryBundleFaces = memoryEngine ? createMemoryBundleFaces(memoryEngine, { ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}) }) : undefined;
     const memoryComplianceFaces = memoryEngine
         ? createMemoryComplianceFaces(memoryEngine, {
-            onIncident: (err) => logger.warn("memory_compliance_incident", { code: err.code ?? null, detail: err.message }),
+            onIncident: createOperatorFaceIncidentSink({ logger }, "memory_compliance_incident"),
             ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
         })
         : undefined;
     const memoryOriginFaces = memoryEngine
         ? createMemoryOriginFaces(memoryEngine, {
-            onIncident: (err) => logger.warn("memory_origin_incident", { code: err.code ?? null, detail: err.message }),
+            onIncident: createOperatorFaceIncidentSink({ logger }, "memory_origin_incident"),
             ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
         })
         : undefined;

package/dist/boot/stage-05-execution-env.d.ts

@@ -10,7 +10,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
-    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
+    sandboxGitPlane: () => import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;

package/dist/boot/stage-05-execution-env.js

@@ -1,6 +1,6 @@
 import { assembleDeploymentMods } from "./deployment-mods.js";
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
-import { assertDeviceLaneWired, createDeviceLane } from "./device-lane.js";
+import { assertDeviceLaneWired, createDeviceLane, noteDeviceRelayBindings } from "./device-lane.js";
 import { assertWorkspaceSpaceReadable, createExecutionEnv } from "./execution-env.js";
 import { headReadOf } from "../session-incarnation.js";
 import * as facts from "../capability-facts.js";
@@ -13,16 +13,20 @@ export async function runStage05(ctx) {
     const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
-    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, readSandboxGitPlane, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
+    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, sandboxGitPlane: sandboxGitPlaneSeat, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
     assertDeviceLaneWired(config.remoteExec?.provider === "device", deviceLane, executionEnvFactory !== undefined);
+    if (deviceLane !== undefined && config.remoteExec?.provider === "device")
+        await noteDeviceRelayBindings(config.remoteExec.relay, deviceLane.store, logger);
     assertWorkspaceSpaceReadable(facts.workspaceSpace(config), { headOf, spaceCommits }, facts.workspaceCache(config), sessionStoreLabelOf(config.sessionBackend, backend?.kind));
     if (sandboxSecretSeatGate !== undefined)
         await sandboxSecretSeatGate();
-    const sandboxGitPlane = await readSandboxGitPlane();
-    if (sandboxGitPlane.state === "on")
-        logger.info("credential_plane_sandbox_git", { state: "on", origins: sandboxGitPlane.origins });
-    else if (sandboxGitPlane.reason !== "single_user" && sandboxGitPlane.reason !== "lane_without_boundary") {
-        logger.info("credential_plane_sandbox_git", { state: "off", reason: sandboxGitPlane.reason, why: SANDBOX_GIT_PLANE_OFF_TEXT[sandboxGitPlane.reason] });
+    await sandboxGitPlaneSeat.settle();
+    const sandboxGitPlane = sandboxGitPlaneSeat.now;
+    const bootPlane = sandboxGitPlane();
+    if (bootPlane.state === "on")
+        logger.info("credential_plane_sandbox_git", { state: "on", origins: bootPlane.origins });
+    else if (bootPlane.reason !== "single_user" && bootPlane.reason !== "lane_without_boundary") {
+        logger.info("credential_plane_sandbox_git", { state: "off", reason: bootPlane.reason, why: SANDBOX_GIT_PLANE_OFF_TEXT[bootPlane.reason] });
     }
     if (config.toolTrace)
         logger.info("tool_trace_enabled", {});

package/dist/boot/stage-06-runners.d.ts

@@ -7,7 +7,6 @@
  * 🔴 `runStore` / `parkedAskRedeem` 经 `late-binds.ts` 的晚绑 cell 读(原文同作用域前向引用/晚绑 holder)。
  */
 import { Runner } from "@sema-agent/core";
-import { ForkRoutingSessionStore } from "../plugins/fork-routing-session-store.js";
 import type { runStage05 } from "./stage-05-execution-env.js";
 export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>): Promise<{
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
@@ -44,7 +43,6 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: Runner;
-    subRunnerSessions: ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;
@@ -73,7 +71,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
-    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
+    sandboxGitPlane: () => import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;

package/dist/boot/stage-06-runners.js

@@ -29,6 +29,7 @@ import { mountOrgDeliveryGate } from "./org-delivery.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
 import { retentionSweepRuns } from "../plugins/retention-store-sql.js";
+import { createOperatorFaceIncidentSink } from "../memory-incident-sink.js";
 export async function runStage06(ctx) {
     const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, workflowParkDecisions, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
@@ -92,7 +93,7 @@ export async function runStage06(ctx) {
             seat: consolidationSeat,
             scopes: config.memoryConsolidationDriver.scopes,
             ...(config.memoryProvenance !== undefined ? { provenance: config.memoryProvenance } : {}),
-            onIncident: (err) => logger.warn("memory_consolidation_incident", { code: err.code ?? null, detail: err.message }),
+            onIncident: createOperatorFaceIncidentSink({ logger }, "memory_consolidation_incident"),
             onStopDetail: (audit) => logger.warn("memory_consolidation_stop_detail", audit),
             ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
             writeJudge: createOperatorValveWriteJudge({ ruleStoreProvider: permissionRuleProvider, config }),
@@ -230,6 +231,6 @@ export async function runStage06(ctx) {
         onError: runnerDeps.onError ? runnerDeps.onError : undefined,
     };
     const subRunner = new Runner(subRunnerDeps);
-    return { ...ctx, approvalAskAudit, approvalExemptionStore, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekResolver, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subRunnerSessions, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowParkDecisions, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate };
+    return { ...ctx, approvalAskAudit, approvalExemptionStore, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekResolver, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowParkDecisions, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate };
 }
 //# sourceMappingURL=stage-06-runners.js.map

package/dist/boot/stage-07-capability-layer.d.ts

@@ -60,7 +60,6 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
-    subRunnerSessions: import("../plugins/fork-routing-session-store.js").ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;
@@ -89,7 +88,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
-    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
+    sandboxGitPlane: () => import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -1,12 +1,12 @@
 import { DEFAULT_MODEL_REF } from "../model-select.js";
-import { probeSearchBackend, uuidv7 } from "@sema-agent/core";
+import { probeSearchBackend, resolveSubagentTranscriptTier, uuidv7 } from "@sema-agent/core";
 import { selectEnvironmentTool } from "../capabilities/select-environment-tool.js";
 import { subagentSendUserFileExtraTools } from "../capabilities/send-user-file-tool.js";
 import { parseCapEnv, parseNumOrFailNonNegative } from "../config.js";
-import { ensureChildSessionDurableWithPromotion } from "../plugins/session-store.js";
+import { attestChildSessionDurable } from "../plugins/session-store.js";
 import { webSearchConfigFromEnv, createWebSearchBackend, shouldProbeWebSearchOnBoot } from "../plugins/web-search.js";
 import { createAuthorizer } from "../security.js";
-import { buildForceDurableGateInertNotice, buildNoResponderBootWarns, gateIntentUnserviceableReason, singleUserAutoAcceptBaselineApplies } from "../approval.js";
+import { buildForceDurableGateInertNotice, buildNoResponderBootWarns, buildSingleUserDefaultPostureNotice, gateIntentUnserviceableReason, singleUserAutoAcceptBaselineApplies } from "../approval.js";
 import { executionLaneOf, laneWiresExecutionEnv } from "../execution-lane-caps.js";
 import { loadDeploymentSkills } from "../capabilities/skills.js";
 import { createRepoClient } from "../capabilities/repo-tools.js";
@@ -28,8 +28,9 @@ import { bindRateLimiter, bindRunStore } from "./late-binds.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
 import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
+import { seatText } from "../trace/exit-seat.js";
 export async function runStage07(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, peerDesk, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, peerDesk, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore);
     const runStore = backend ? backend.run() : undefined;
     bindRunStore(runStore);
@@ -126,10 +127,8 @@ export async function runStage07(ctx) {
     }))
         logger.warn(w.event, w.fields);
     if (singleUserAutoAcceptBaselineApplies(config)) {
-        logger.info("tool_policy_single_user_default", {
-            posture: "adjudicated auto-accept — ALL write/hand/MCP tool surfaces auto-allowed (core per-surface UNGATED enumeration suppressed for single-user turnkey)",
-            tighten: "APPROVAL_REQUIRE / AUTONOMY / commandPolicy (re-surfaces + gates specific surfaces)",
-        });
+        const posture = buildSingleUserDefaultPostureNotice();
+        logger.info(posture.event, posture.fields);
     }
     if (config.directDoorActive)
         logger.info("direct_door_active", { iss: config.principalJwtIss, aud: config.principalJwtAud, operators: config.operatorPrincipals.length });
@@ -167,10 +166,10 @@ export async function runStage07(ctx) {
             else
                 logger.warn("web_search_probe_failed", { provider: webSearchCfg.provider, error: r.error, note: "WebSearch stays mounted — the tool will fail per-call until this is fixed; the service is not blocked by it." });
         })
-            .catch((e) => logger.warn("web_search_probe_failed", { provider: webSearchCfg.provider, error: e instanceof Error ? e.message : String(e) }));
+            .catch((e) => logger.warn("web_search_probe_failed", { provider: webSearchCfg.provider, error: seatText("operator-log-text", e instanceof Error ? e.message : String(e)) }));
     }
-    const ensureChildSessionDurable = checkpointStore && config.sessionBackend === "tidb"
-        ? (sessionId, root) => ensureChildSessionDurableWithPromotion(sessionStore, subRunnerSessions, sessionId, root, logger)
+    const ensureChildSessionDurable = checkpointStore && resolveSubagentTranscriptTier(backgroundAgentStore !== undefined, sessionStore) === "full"
+        ? (sessionId, root) => attestChildSessionDurable(sessionStore, sessionId, root, logger)
         : undefined;
     const webFetchSummarize = createWebFetchSummarizeLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver(), logger });
     const scenarioDeps = {

package/dist/boot/stage-08-reapers.d.ts

@@ -73,7 +73,6 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: Runner;
-    subRunnerSessions: import("../plugins/fork-routing-session-store.js").ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;
@@ -102,7 +101,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
-    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
+    sandboxGitPlane: () => import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;

package/dist/boot/stage-08-reapers.js

@@ -4,6 +4,7 @@ import { startReapers } from "./reapers.js";
 import { startRetentionLane, RETENTION_LEASE_TTL_FACTOR } from "./retention-lane.js";
 import { createLimitSync } from "./limit-sync.js";
 import { runDenySweep } from "./late-binds.js";
+import { seatText } from "../trace/exit-seat.js";
 export function runStage08(ctx) {
     const { approvalAskAudit, approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, spaceReclaimer, sandboxPodReaper, handslessRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, userInputLedger, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
     const reaper = startReapers({
@@ -48,7 +49,7 @@ export function runStage08(ctx) {
     const otelExporter = config.otel
         ? startOtlpExporter(metrics, {
             ...config.otel,
-            onError: (err) => logger.warn("otel_export_failed", { err: String(err) }),
+            onError: (err) => logger.warn("otel_export_failed", { err: seatText("operator-log-text", String(err)) }),
         })
         : undefined;
     const limitSync = createLimitSync({ config, rateGate: rateLimiter, quota: costQuota, logger });
@@ -67,7 +68,7 @@ export function runStage08(ctx) {
             }
             catch (err) {
                 if (i > 0)
-                    logger.error("runner_deps_swap_split", { failedAt: name, seats: Object.keys(next), swapped: bootRunners.slice(0, i).map(([n]) => n), err: String(err) });
+                    logger.error("runner_deps_swap_split", { failedAt: name, seats: Object.keys(next), swapped: bootRunners.slice(0, i).map(([n]) => n), err: seatText("operator-log-text", String(err)) });
                 throw err;
             }
         }

package/dist/boot/stage-09-leader.d.ts

@@ -97,7 +97,6 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
-    subRunnerSessions: import("../plugins/fork-routing-session-store.js").ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;
@@ -126,7 +125,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
-    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
+    sandboxGitPlane: () => import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;

package/dist/boot/stage-10-http-server.d.ts

@@ -96,7 +96,6 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
-    subRunnerSessions: import("../plugins/fork-routing-session-store.js").ForkRoutingSessionStore;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
     toolApproval: import("../tool-approval.js").ToolApprovalCoordinator | undefined;
     workflowAgentRegistry: import("../orchestration/workflow-agent-steer.js").WorkflowAgentRegistry | undefined;
@@ -125,7 +124,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
-    sandboxGitPlane: import("../sandbox-git-plane.js").SandboxGitPlane;
+    sandboxGitPlane: () => import("../sandbox-git-plane.js").SandboxGitPlane;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;

package/dist/boot/stage-10-http-server.js

@@ -29,6 +29,7 @@ import { installShutdownHandlers } from "./shutdown.js";
 import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
+import { seatText } from "../trace/exit-seat.js";
 export async function runStage10(ctx) {
     const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentModsLoaded, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportStores, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
@@ -96,6 +97,7 @@ export async function runStage10(ctx) {
         memoryCompliance: memoryComplianceFaces,
         memoryOriginFace: memoryOriginFaces,
         sessionMemoryStatus: sessionMemoryStatusFace,
+        memorySyncLeg: memorySyncRunner,
         memoryAutoConsolidationArmed: autoRunOnRecommendationEffective(runnerDeps),
         memoryConsolidationValve: consolidationValve,
         memoryConsolidation: memoryConsolidationFaces,
@@ -131,7 +133,7 @@ export async function runStage10(ctx) {
             classifierModel: () => {
                 const route = classifierRouteFor(runnerDeps);
                 if (route.fault !== undefined)
-                    logger.debug("auto_mode_classifier_route_unresolved", { fault: route.fault });
+                    logger.debug("auto_mode_classifier_route_unresolved", { fault: seatText("operator-log-text", route.fault) });
                 return route.id;
             },
         },
@@ -256,7 +258,7 @@ export async function runStage10(ctx) {
             bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",
             ...(config.bindHostSource ? { bindHostSource: config.bindHostSource } : {}),
             ...(config.bindHostSource === "HOST" ? { note: "bind failed for a host inherited from the HOST env var — set BIND_HOST explicitly (e.g. BIND_HOST=127.0.0.1)." } : {}),
-            error: e instanceof Error ? e.message : String(e),
+            error: seatText("operator-log-text", e instanceof Error ? e.message : String(e)),
         });
         throw e;
     }
@@ -266,7 +268,7 @@ export async function runStage10(ctx) {
     }
     server.on("error", (e) => {
         logger.error("server_error", {
-            error: e.message,
+            error: seatText("operator-log-text", e.message),
             ...("code" in e ? { code: String(e.code) } : {}),
         });
     });
@@ -323,7 +325,7 @@ export async function runStage10(ctx) {
         void workflowNotifyGate
             .recover(workflowRecoverOpts)
             .then((tally) => logger.info("workflow_notify_recovered", tally))
-            .catch((err) => logger.warn("workflow_notify_recover_failed", { err: String(err) }))
+            .catch((err) => logger.warn("workflow_notify_recover_failed", { err: seatText("operator-log-text", String(err)) }))
             .finally(() => resolveFleetRecovery());
     }
     else {