@sema-agent/server 7.142.0 → 7.143.0

package/dist/boot/runner-deps.js

@@ -8,13 +8,13 @@ import { assertAutoConsolidationWirable } from "./memory-consolidation.js";
 import { createHardenedVmRunner } from "../orchestration/hardened-vm-runner.js";
 import { createWorkerHardenedVmRunner } from "../orchestration/hardened-vm-worker-runner.js";
 import { WorkflowAgentRegistry } from "../orchestration/workflow-agent-steer.js";
-import { resolveServedSession } from "../orchestration/workflow-completion-inbox.js";
 import { defaultEngineNoticeRouter, redactNoticeMessage, redactNoticeRuleText } from "../trace/engine-notice-wire.js";
 import { WorkflowNotifyGate } from "../orchestration/workflow-notify-journal.js";
 import { makeLoadProjectMemory, makeProbeInstructionSources } from "../project-memory.js";
 import { createInstructionSourceSeat } from "../instruction-source-notice.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { buildCrossSessionInboundLayers, crossSessionDialogExpiryOf } from "../cross-session-settings.js";
+import { defaultPeerInboundFace } from "../peer-inbound-face.js";
 import { createPeerDirectory } from "../peer-directory.js";
 import { storeFormRefusalInIncident } from "../memory-store-refusal.js";
 import { coreFileHistoryCaptureSeat } from "../file-history-capture.js";
@@ -32,6 +32,7 @@ export function createRunnerDepsOnAsk(toolApproval) {
 export const CONFIG_ADVISORY_CLASSIFICATIONS = new Set([
     "file-history-no-env",
     "file-history-no-store",
+    "input-author-unreadable",
     "interaction-posture-refused",
     "memory-tools-not-mounted",
     "peer-seat-hold",
@@ -47,7 +48,7 @@ export const PROMPT_CACHE_BREAK_CAUSE_LEVEL = {
 };
 const PROMPT_CACHE_BREAK_LEVELS = new Map(Object.entries(PROMPT_CACHE_BREAK_CAUSE_LEVEL));
 const CEILING_ORIGINS = new Set(["walltime", "turns"]);
-export function createEngineNoticeForwarder(logger, router = defaultEngineNoticeRouter, metrics) {
+export function createEngineNoticeForwarder(logger, router = defaultEngineNoticeRouter, metrics, peerInbound = defaultPeerInboundFace) {
     return (notice) => {
         const detail = redactNoticeRuleText(notice.code, notice.detail);
         const message = redactNoticeMessage(notice.message);
@@ -57,6 +58,7 @@ export function createEngineNoticeForwarder(logger, router = defaultEngineNotice
             if (typeof origin === "string" && CEILING_ORIGINS.has(origin))
                 metrics.inc("limit_ceiling_after_answer_total", { origin });
         }
+        peerInbound.observe(notice);
         router.route(notice);
     };
 }
@@ -140,7 +142,7 @@ export function createSharedRunnerDeps(ctx) {
     return shared;
 }
 export function createRunnerDeps(ctx) {
-    const { config, logger, metrics, localRoot, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine, sessionCaptureRecords, memorySyncRunner, runtimeCapsResolver, fileHistoryStore, permissionRuleStore, fleetBus, workflowRunStore, workflowJournalStore, workflowAgentRegistry, workflowNotifyGate, workflowCompletionInbox, deliverWorkflowCompletion, getRunStore, } = ctx;
+    const { config, logger, metrics, localRoot, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine, sessionCaptureRecords, memorySyncRunner, runtimeCapsResolver, fileHistoryStore, permissionRuleStore, fleetBus, workflowRunStore, workflowJournalStore, workflowAgentRegistry, workflowNotifyGate, deliverWorkflowCompletion, } = ctx;
     const peerSessionLister = sessionStore.listSessions?.bind(sessionStore);
     const memoryEngineIncident = createMemoryEngineIncidentSink({ logger, metrics });
     const sharedRunnerDeps = createSharedRunnerDeps(ctx);
@@ -169,20 +171,6 @@ export function createRunnerDeps(ctx) {
                 ...(workflowNotifyGate
                     ? workflowNotifyGate.buildNotifier()
                     : { notify: (input) => deliverWorkflowCompletion(input) }),
-                ackServed: async (input) => {
-                    if (!workflowCompletionInbox)
-                        return;
-                    try {
-                        const sid = await resolveServedSession(input, getRunStore() ? (id) => getRunStore().getRun(id) : undefined);
-                        if (sid) {
-                            await workflowCompletionInbox.markTerminalServed(sid, input.runId);
-                            logger.info("workflow_complete_ack_served", { route: "poll-served", sessionId: sid, runId: input.runId });
-                        }
-                    }
-                    catch (err) {
-                        logger.warn("workflow_ack_served_failed", { runId: input.runId, err: seatText("operator-log-text", String(err)) });
-                    }
-                },
             },
         }
         : {};

package/dist/boot/shutdown.d.ts

@@ -31,6 +31,7 @@ import type { BreakerStateStore, CostQuotaStore, RateLimiterStore, StoreBackend
 import type { WorkflowNotifyJournalStore } from "../orchestration/workflow-notify-journal.js";
 import type { ToolApprovalCoordinator } from "../tool-approval.js";
 import type { ParkCommitWatch } from "../plugins/park-commit-watch.js";
+import type { PeerInboundShutdownReading } from "../peer-inbound-face.js";
 import { type DrainState } from "../fleet/drain-entry.js";
 export interface ShutdownCtx {
     config: ServiceConfig;
@@ -94,6 +95,14 @@ export interface ShutdownCtx {
     servingLease?: {
         stop(): void;
     } | undefined;
+    /**
+     * [ref]:被扣跨会话来信的收信方决断面(`peer-inbound-face.ts`,进程单例)的关停口 —— CC `HBe` 的宿主半场(core 不调 `PeerHeldQueue.shutdown()`)。
+     * hardShutdown 起点与审批面收尾**并行**调它、`backend.close()` 之前等它(结清要走信箱店的 CAS 与回执投递):本进程仍被扣的信按 core 的规则
+     * 带 `expired` 回执结清(reason `shutdown`)。缺席 = 本装配不接(测试装配)。
+     */
+    peerInbound?: {
+        shutdown(): Promise<PeerInboundShutdownReading>;
+    } | undefined;
 }
 /**
  * 受控退的**后台宽限**还要等多久(ms)—— hardShutdown 软停后台 shell 之后、`process.exit` 之前,给软停过的行**一次**

package/dist/boot/shutdown.js

@@ -18,7 +18,7 @@ export function backgroundGraceRemainingMs(a) {
     return Math.max(0, Math.min(a.softStoppedAt + a.graceMs, a.deadlineMs) - a.now);
 }
 export function installShutdownHandlers(ctx) {
-    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, webAdmin, version, deviceHub, toolApproval, parkCommits, servingLease, } = ctx;
+    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, webAdmin, version, deviceHub, toolApproval, parkCommits, servingLease, peerInbound, } = ctx;
     const dataRoot = config.localDataRoot;
     if (dataRoot) {
         const prior = readCrashLast(dataRoot);
@@ -93,6 +93,20 @@ export function installShutdownHandlers(ctx) {
                     logger.warn("approval_park_uncommitted_at_shutdown", { approvalId: p.approvalId, taskId: p.taskId });
             })
                 .catch((err) => logger.warn("approval_drain_for_shutdown_failed", { err: seatText("operator-log-text", String(err)) }));
+        const peerInboundDrain = peerInbound === undefined
+            ? Promise.resolve()
+            : (async () => {
+                const deadline = new AbortController();
+                const settled = peerInbound.shutdown().then((reading) => {
+                    if (reading.queues > 0 || reading.scopeUnresolved > 0)
+                        logger.info("peer_inbound_settled_at_shutdown", { queues: reading.queues, scopeUnresolved: reading.scopeUnresolved });
+                }, (err) => logger.warn("peer_inbound_shutdown_failed", { err: seatText("operator-log-text", String(err)) }));
+                const timedOut = delay(Math.max(0, graceDeadlineMs - Date.now()), undefined, { signal: deadline.signal }).then(() => "deadline", () => "done");
+                const winner = await Promise.race([settled.then(() => "done"), timedOut]);
+                deadline.abort();
+                if (winner === "deadline")
+                    logger.warn("peer_inbound_shutdown_unfinished_at_deadline", {});
+            })();
         clearInterval(reaper);
         clearInterval(fleetReconcile.timer);
         const retentionTeardown = retentionLane === undefined
@@ -120,7 +134,7 @@ export function installShutdownHandlers(ctx) {
         const softStoppedAt = Date.now();
         const backgroundGraceMs = backgroundGraceRemainingMs({ softStopped: backgroundSoftStopped, softStoppedAt, now: softStoppedAt, graceMs: HOST_BG_KILL_GRACE_MS, deadlineMs: graceDeadlineMs });
         const backgroundGrace = backgroundGraceMs > 0 ? delay(backgroundGraceMs) : Promise.resolve();
-        const drained = approvalDrain
+        const drained = Promise.all([approvalDrain, peerInboundDrain])
             .then(() => parkCommits?.quiesce(graceDeadlineMs))
             .then((q) => {
             if (q !== undefined && q.inFlight > 0)

package/dist/boot/stage-02-web-admin-pull.js

@@ -3,6 +3,7 @@ import { createWebAdminRuntime } from "./web-admin.js";
 import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
 import { configSourceKind } from "../config-provider.js";
 import { logConfigDirMigration, migrateLocalConfigDirectory } from "../config-d-migration.js";
+import { logEnvModelsMigration, runEnvModelsMigration } from "../config-root-migration.js";
 import { assertLocalConfigDirTrusted } from "../config-dir-trust.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "../model-entry-refusal.js";
 import { isRosterGateArmed } from "../config.js";
@@ -13,6 +14,8 @@ export async function runStage02(ctx) {
     const configSource = configSourceKind(config);
     if (configSource === "local") {
         await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: config.configLocalOwnerUid });
+        const envModelsMigration = { root: localRoot, env: process.env, envTableIsPlaceholder: isRosterGateArmed(config.webAdmin) };
+        logEnvModelsMigration(logger, envModelsMigration, await runEnvModelsMigration(envModelsMigration));
         logConfigDirMigration(logger, await migrateLocalConfigDirectory(localRoot));
     }
     await composeExecutionLane(config, { configSource, localRoot, logger, drivesFromFile: FILE_SOURCED_LANES });

package/dist/boot/stage-03-store-backend.d.ts

@@ -5,7 +5,10 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     engineDataRoot: string;
     instanceId: string;
-    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;

package/dist/boot/stage-03-store-backend.js

@@ -2,9 +2,8 @@ import { uuidv7 } from "@sema-agent/core";
 import { openStores } from "./stores.js";
 export async function runStage03(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
-    const { backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportStores, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngine, } = await openStores({ config, logger, metrics, localRoot });
+    const { backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, sessionCaptureRecords, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportStores, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngine, } = await openStores({ config, logger, metrics, localRoot });
     const instanceId = uuidv7();
-    const sessionCaptureRecords = backend?.sessionCaptureRecords();
     return { ...ctx, backend, backgroundAgentStore, breakerState, engineDataRoot, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportStores, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecords, sessionStore, sqlEngine, storePosture, taskAttachmentStore, taskListLane, usageWindowStore };
 }
 //# sourceMappingURL=stage-03-store-backend.js.map

package/dist/boot/stage-04-stores.d.ts

@@ -28,14 +28,17 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
     sideQueryAccounting: import("../budget.js").SideQueryAccounting;
-    toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
+    toolResultStore: import("@sema-agent/core").ToolResultStore | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     engineDataRoot: string;
     instanceId: string;
-    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;

package/dist/boot/stage-04-stores.js

@@ -8,22 +8,20 @@ import { createRuleConsentLane } from "../rules-consent.js";
 import { createConsolidationValve } from "./memory-consolidation.js";
 import { createOperatorFaceIncidentSink } from "../memory-incident-sink.js";
 export async function runStage04(ctx) {
-    const { backend, breakerState, config, logger, memoryEngine, metrics, sessionCaptureRecords } = ctx;
-    const memoryBundleFaces = memoryEngine ? createMemoryBundleFaces(memoryEngine, { ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}) }) : undefined;
+    const { backend, breakerState, config, logger, memoryEngine, metrics } = ctx;
+    const memoryBundleFaces = memoryEngine ? createMemoryBundleFaces(memoryEngine) : undefined;
     const memoryComplianceFaces = memoryEngine
         ? createMemoryComplianceFaces(memoryEngine, {
             onIncident: createOperatorFaceIncidentSink({ logger }, "memory_compliance_incident"),
-            ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
         })
         : undefined;
     const memoryOriginFaces = memoryEngine
         ? createMemoryOriginFaces(memoryEngine, {
             onIncident: createOperatorFaceIncidentSink({ logger }, "memory_origin_incident"),
-            ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
         })
         : undefined;
     const sessionMemoryStatusFace = memoryEngine
-        ? createSessionMemoryStatusFace(memoryEngine, { ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}) })
+        ? createSessionMemoryStatusFace(memoryEngine)
         : undefined;
     const { valve: consolidationValve, watch: consolidationSeatWatch } = createConsolidationValve({ config, memoryEngine, logger });
     const adoptionBoot = await runAdoptionBootScan({ backend, logger });

package/dist/boot/stage-05-execution-env.d.ts

@@ -47,14 +47,17 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
     sideQueryAccounting: import("../budget.js").SideQueryAccounting;
-    toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
+    toolResultStore: import("@sema-agent/core").ToolResultStore | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     engineDataRoot: string;
     instanceId: string;
-    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;

package/dist/boot/stage-06-runners.d.ts

@@ -108,14 +108,17 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
     sideQueryAccounting: import("../budget.js").SideQueryAccounting;
-    toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
+    toolResultStore: import("@sema-agent/core").ToolResultStore | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     engineDataRoot: string;
     instanceId: string;
-    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;

package/dist/boot/stage-06-runners.js

@@ -95,7 +95,6 @@ export async function runStage06(ctx) {
             ...(config.memoryProvenance !== undefined ? { provenance: config.memoryProvenance } : {}),
             onIncident: createOperatorFaceIncidentSink({ logger }, "memory_consolidation_incident"),
             onStopDetail: (audit) => logger.warn("memory_consolidation_stop_detail", audit),
-            ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}),
             writeJudge: createOperatorValveWriteJudge({ ruleStoreProvider: permissionRuleProvider, config }),
             onNotice: createEngineNoticeForwarder(logger, defaultEngineNoticeRouter, metrics),
         })
@@ -142,10 +141,9 @@ export async function runStage06(ctx) {
         memorySyncRunner, toolResultStore: runnerOffloadStore, checkpointStore, sessionPolicyStore, runtimeCapsResolver, fileHistoryStore,
         permissionRuleStore: permissionRuleProvider,
         executionEnvFactory, lspManager, fleetBus, deploymentMods, workflowRunStore, workflowJournalStore,
-        workflowAgentRegistry, workflowNotifyGate, workflowCompletionInbox, deliverWorkflowCompletion, orgMemoryAdmission,
+        workflowAgentRegistry, workflowNotifyGate, deliverWorkflowCompletion, orgMemoryAdmission,
         governanceSeams,
         sharedMemoryStores: sharedMemoryStore ? sharedMemoryStore : undefined,
-        getRunStore: () => runStore,
     });
     const orgDeliveryGate = mountOrgDeliveryGate({ runnerDeps, directory: orgMemoryAdmission.directory, mailboxStore, backend, logger });
     const runner = new Runner(runnerDeps);

package/dist/boot/stage-07-capability-layer.d.ts

@@ -125,14 +125,17 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
     sideQueryAccounting: import("../budget.js").SideQueryAccounting;
-    toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
+    toolResultStore: import("@sema-agent/core").ToolResultStore | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     engineDataRoot: string;
     instanceId: string;
-    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -23,8 +23,10 @@ import { createUserInputLedgerAtBoot, writerGoneEvidenceFor } from "../user-inpu
 import { createParkedReviveInheritedGate } from "./parked-revive-gate.js";
 import { createParkedReviveSurface } from "../parked-revive-surface.js";
 import { createWebFetchSummarizeLane } from "./webfetch-summarize-lane.js";
+import { assertGovernanceAssemblable } from "./governance-seams.js";
 import { createRunnerDepsOnAsk } from "./runner-deps.js";
-import { bindRateLimiter, bindRunStore } from "./late-binds.js";
+import { bindRateLimiter, bindRunStore, sessionNotifyDoor } from "./late-binds.js";
+import { createBackgroundCompletionRelay } from "../session-notify-door.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
 import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
@@ -153,6 +155,7 @@ export async function runStage07(ctx) {
     bindRateLimiter(rateLimiter);
     let skills = loadDeploymentSkills(config, logger);
     skills = await webAdmin.applyCenterCapabilities(skills, peerDesk, peerDesk.lease("roster"));
+    assertGovernanceAssemblable(config);
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();
     const webSearch = webSearchCfg ? createWebSearchBackend(webSearchCfg) : undefined;
@@ -181,6 +184,7 @@ export async function runStage07(ctx) {
         ensureChildSessionDurable: ensureChildSessionDurable ? ensureChildSessionDurable : undefined,
         taskListStoreFor: taskListLane.storeFor,
         subagentExtraTools: sendUserFileToolSpec ? subagentSendUserFileExtraTools({ spec: sendUserFileToolSpec }) : undefined,
+        backgroundCompletionSinkFor: createBackgroundCompletionRelay({ door: () => sessionNotifyDoor, logger }),
     };
     const scenarios = buildScenarios(scenarioDeps);
     const builtinDefaultScenario = scenarios.default;

package/dist/boot/stage-08-reapers.d.ts

@@ -138,14 +138,17 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
     sideQueryAccounting: import("../budget.js").SideQueryAccounting;
-    toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
+    toolResultStore: import("@sema-agent/core").ToolResultStore | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     engineDataRoot: string;
     instanceId: string;
-    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;

package/dist/boot/stage-09-leader.d.ts

@@ -162,14 +162,17 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
     sideQueryAccounting: import("../budget.js").SideQueryAccounting;
-    toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
+    toolResultStore: import("@sema-agent/core").ToolResultStore | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     engineDataRoot: string;
     instanceId: string;
-    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;

package/dist/boot/stage-10-http-server.d.ts

@@ -161,14 +161,17 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     sessionMemoryStatusFace: import("../memory-operator-faces.js").SessionMemoryStatusFace | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
     sideQueryAccounting: import("../budget.js").SideQueryAccounting;
-    toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
+    toolResultStore: import("@sema-agent/core").ToolResultStore | undefined;
     tracer: import("@sema-agent/core").TracerHook;
     backend: import("../plugins/store-backend.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
     engineDataRoot: string;
     instanceId: string;
-    mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryEngine: import("../memory-scope-stores.js").MemoryScopeStores | undefined;
     memoryExportStores: import("../memory-scope-stores.js").MemoryScopeStores | undefined;

package/dist/boot/stage-10-http-server.js

@@ -13,6 +13,7 @@ import { backgroundAgentOutput, taskHandleOutput, taskHandleStop } from "../runs
 import { createStoreLiveProbe } from "../store-live-probe.js";
 import { counterStoreLabel } from "../plugins/store-backend.js";
 import { sessionStoreLabelOf } from "../store-posture.js";
+import { defaultPeerInboundFace, peerBoxScope } from "../peer-inbound-face.js";
 import { startFleetClientFromConfig } from "../fleet-client.js";
 import { createCenterWiringReader } from "../capabilities/center-wiring.js";
 import { mintEngineSignal } from "../fleet/engine-signal.js";
@@ -187,6 +188,7 @@ export async function runStage10(ctx) {
         centerIdentityNoticeState: () => webAdmin.centerIdentityNoticeState(),
         modelRefusalsState: () => webAdmin.modelRefusalsState(),
         candidateRejectionState: () => webAdmin.candidateRejectionState(),
+        latestPlaneRefusalState: () => webAdmin.latestPlaneRefusalState(),
         configHandoffState: () => webAdmin.configHandoffState(),
         mcpRevocations,
         mcpRevocationState: () => webAdmin.mcpRevocationState(),
@@ -225,7 +227,7 @@ export async function runStage10(ctx) {
         ...(runStore ? { runs: runStore } : {}),
         ...(workflowRunStore ? { workflows: workflowRunStore } : {}),
         agents: backgroundAgentStore,
-        hasPendingAsk: toolApproval ? (originTaskId) => toolApproval.hasLivePendingFrom(originTaskId) : undefined,
+        hasPendingAsk: toolApproval ? (names) => toolApproval.hasLivePendingFromLeg(names) : undefined,
         instanceId,
         logger,
         metrics,
@@ -342,6 +344,12 @@ export async function runStage10(ctx) {
         retentionLane: retentionLaneStarted,
         releaseRetentionLease: retentionLaneStore !== undefined ? () => retentionLaneStore.release(instanceId) : undefined,
         servingLease,
+        peerInbound: {
+            shutdown: () => defaultPeerInboundFace.shutdown(async (sessionId) => {
+                const head = await ownerAware.headOf?.(sessionId);
+                return head === undefined ? undefined : peerBoxScope(head.owner);
+            }),
+        },
     });
     servingLease?.resumeStickyDenial();
     return { ...ctx };

package/dist/boot/stores.d.ts

@@ -3,7 +3,6 @@ import { type MemorySyncRunner } from "../memory-sync-client.js";
 import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import { type MemorySyncStore } from "../plugins/memory-sync-store-pg.js";
-import { type MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
 import { type TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import { type StoreBackend } from "../plugins/store-backend.js";
 import { type MemoryScopeStores } from "../memory-scope-stores.js";
@@ -29,7 +28,10 @@ export declare function openStores(ctx: OpenStoresCtx): Promise<{
     memorySyncCursors: MemorySyncStore | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
-    mailboxRecipientLifecycle: MailboxRecipientLifecycle | undefined;
+    mailboxRecipientLifecycle: Readonly<{
+        retireRecipient: NonNullable<import("@sema-agent/core").MailboxStore["retireRecipient"]>;
+        listRetiredRecipients: NonNullable<import("@sema-agent/core").MailboxStore["listRetiredRecipients"]>;
+    }> | undefined;
     taskAttachmentStore: TaskAttachmentStore | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;
     memoryExportStores: MemoryScopeStores | undefined;
@@ -40,5 +42,6 @@ export declare function openStores(ctx: OpenStoresCtx): Promise<{
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
+    sessionCaptureRecords: import("../plugins/store-backend.js").SessionCaptureRecordSource | undefined;
 }>;
 //# sourceMappingURL=stores.d.ts.map

package/dist/boot/stores.js

@@ -12,7 +12,7 @@ import { MinioBlobBackend } from "../plugins/blob-backend.js";
 import { ensureSnapshotBuckets } from "../plugins/snapshot-bucket-presence.js";
 import { PgBackgroundAgentStore, TiDBBackgroundAgentStore, ensurePgBackgroundAgentSchema, ensureTiDBBackgroundAgentSchema } from "../stores-sql/background-agent-store-sql.js";
 import { PgMailboxStore, TiDBMailboxStore, ensurePgMailboxSchema, ensureTiDBMailboxSchema } from "../plugins/mailbox-store-sql.js";
-import { createDropOnlyRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
+import { recipientLifecycleOf } from "../plugins/mailbox-recipient-lifecycle.js";
 import { PgUsageWindowStore, TiDBUsageWindowStore, ensurePgUsageWindowSchema, ensureTiDBUsageWindowSchema } from "../stores-sql/usage-window-store-sql.js";
 import { PgRosterStore, TiDBRosterStore, ensurePgRosterSchema, ensureTiDBRosterSchema } from "../plugins/roster-store-sql.js";
 import { LocalTaskAttachmentStore } from "../plugins/local-task-attachment-store.js";
@@ -29,7 +29,7 @@ import { assertCloudSnapshotBlobPosture, openStoreBackendWithFallback } from "..
 import { createMemoryEngineIncidentSink } from "../memory-incident-sink.js";
 import { announceLockedLegacyMemoryLayers } from "../memory-layer-legacy-lock.js";
 import { createEngineNoticeForwarder } from "./runner-deps.js";
-import { buildMemoryRemoteLaneWarn, memoryEngineBackendFor, memoryEngineRemoteLanePosture, memoryEngineRootFor, memoryLayersNamedBy, memoryMountRootOf } from "../memory-scope.js";
+import { buildMemoryRemoteLaneWarn, memoryEngineBackendFor, memoryEngineRemoteLanePosture, memoryEngineRootFor, memoryMountRootOf } from "../memory-scope.js";
 import { createMemoryScopeStores } from "../memory-scope-stores.js";
 import { assertToolResultProvenanceSchema } from "../plugins/tool-result-store-sql.js";
 import { assertPermissionRuleApprovalSchema, assertPermissionRuleTicketSchema } from "../plugins/permission-rule-store-sql.js";
@@ -124,7 +124,8 @@ export async function openStores(ctx) {
     let memoryEngine;
     const engineDataRoot = memoryEngineRootFor(config, localRoot);
     const memoryEngineIncident = createMemoryEngineIncidentSink({ logger, metrics });
-    const scopeStoresOver = (deployment) => createMemoryScopeStores({ backend: deployment, root: engineDataRoot, namedLayers: () => memoryLayersNamedBy(config), onIncident: memoryEngineIncident });
+    const sessionCaptureRecords = backend?.sessionCaptureRecords();
+    const scopeStoresOver = (deployment) => createMemoryScopeStores({ backend: deployment, root: engineDataRoot, onIncident: memoryEngineIncident, ...(sessionCaptureRecords !== undefined ? { captureRecords: sessionCaptureRecords } : {}) });
     let memorySyncCursors;
     let vectorMode;
     if (config.memoryEngineBackend !== "file" && config.memoryEngineEnabled) {
@@ -301,20 +302,19 @@ export async function openStores(ctx) {
             await ensurePgMailboxSchema(async (text, params) => pgPool.query(text, params));
             const store = new PgMailboxStore(pgPool, logger);
             mailboxStore = store;
-            mailboxRecipientLifecycle = store;
         }
         else if (mysqlPool) {
             await ensureTiDBMailboxSchema(mysqlPool);
             const store = new TiDBMailboxStore(mysqlPool, logger);
             mailboxStore = store;
-            mailboxRecipientLifecycle = store;
         }
         else if (backend?.kind === "local") {
             mailboxStore = new FileMailboxStore(config.localDataRoot ?? localRoot, {
                 onCorruptRead: createCorruptReadFailOpenSeat("server.mailbox.corrupt-record-skipped"),
             });
-            mailboxRecipientLifecycle = createDropOnlyRecipientLifecycle(mailboxStore);
         }
+        if (mailboxStore)
+            mailboxRecipientLifecycle = recipientLifecycleOf(mailboxStore);
         if (mailboxStore) {
             const laneVerdict = mailboxCrossProcessMountVerdict(mailboxStore);
             logger.info("mailbox_store_enabled", {
@@ -439,7 +439,7 @@ export async function openStores(ctx) {
     return {
         backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, mailboxRecipientLifecycle,
         taskAttachmentStore, mailboxStore, memoryExportStores, memorySyncRunner, sessionStore, breakerState,
-        usageWindowStore, memoryPosture, taskListLane, sqlEngine,
+        usageWindowStore, memoryPosture, taskListLane, sqlEngine, sessionCaptureRecords,
     };
 }
 //# sourceMappingURL=stores.js.map

package/dist/boot/web-admin.d.ts

@@ -1,4 +1,4 @@
-import { type ModelRefusalsSignal } from "@sema-agent/settings-schema";
+import { type ModelPlaneRefusalCode, type ModelRefusalsSignal } from "@sema-agent/settings-schema";
 import { CenterPromptSource, type SwappableDeps } from "@sema-agent/core";
 import { buildPricing } from "../budget.js";
 import { type Scenario, type ScenarioDeps, type ScenarioDetail } from "../capabilities/scenarios.js";
@@ -128,6 +128,10 @@ export interface WebAdminRuntime {
      *  名 → 码 + 组拒码)。描述**最近一次被判的那份中心候选目录**(每次候选 apply 的报告 `ApplyReport.modelRefusals` 投影;组拒时就是被拒
      *  的那份 —— 引擎自己的拒因表不换代)。没有可报的拒 / 没有配置管道 / 还没判过候选 ⇒ `undefined`(键缺席)。值变了 ⇒ 通知自报订阅者。 */
     modelRefusalsState(): ModelRefusalsSignal | undefined;
+    /** `GET /v1/models.modelPlane` 的 `planeRefusalCode` 与 `catalog` 的模型面那一半的**同一只**取值口:**最新到达**的目录候选被模型面组拒的码。
+     *  在场 ⇔ 模型拒因信号带 `plane` ∧ 落下它的那次 apply 是最新一次到达(到达计数相等,不按收货序数比 —— 本地腿只改决定文件时同一序数再到达)。
+     *  与 {@link modelRefusalsState} 的 `plane` 分两个主语:那一键 = 最近一份**被 stage 判过**的模型面的组拒判决(不随更新的到达撤);本口随每一次更新的到达撤。 */
+    latestPlaneRefusalState(): ModelPlaneRefusalCode | undefined;
     /** [ref]:`GET /v1/models.candidateRejected` 的取值口 —— 最近一次候选被判官整拒的结论(`candidateRejection` 座;域集就是判官交出的 `rejected.domains`)。
      *  present-iff 当前生效的配置是因判官整拒了最近一份候选而回落的那一份:后来的候选被判 clean 即撤下;还没判过候选 / 没有配置管道 ⇒ `undefined`(键缺席)。
      *  dry-run 姿势(`webAdmin.dryRun`,compare-only)恒 `undefined`:候选从不被应用,生效配置恒是 env,拒判是预演读数(日志行照响),不是配置没换的原因。 */