@sema-agent/server 7.145.0 → 7.147.0

package/dist/boot/retention-lane.d.ts

@@ -29,47 +29,16 @@
  * (车1 已实现)。lane **不补记**它们 —— 补记 = 「删了但审计没落地」的窗口重新打开。receipt 在本文件里
  * 只做两件事:二次确认(日志/指标)与「本轮到底动了多少」的读数。
  */
-import type { RetentionPolicy, RetentionReceipt } from "@sema-agent/core";
+import type { RetentionPolicy } from "@sema-agent/core";
 import type { RetentionMode } from "../config-types.js";
-import type { EndedSpace, SpaceReclaimer } from "../workspace-space.js";
+import type { SpaceReclaimer } from "../workspace-space.js";
+import type { RetentionExecutor } from "../plugins/retention-deployment.js";
 /** 同 domain 连续失败多少次算「卡住了」(fail-loud 的阈值)。`5` 与 reaper 家族的
  *  `REAPER_FAILURE_WARN_THRESHOLD` 同值同理由:一次抖动(一次重连、一次超时)正是容错要吸收的,
  *  只有**连败**才越过「可诊断」这条线。 */
 export declare const RETENTION_SWEEP_STUCK_THRESHOLD = 5;
 /** 租约 TTL = 本倍数 × sweep 间隔(设计稿 §3)。`2` = 允许一轮跑满一个完整间隔还有余量,再多就该让位。 */
 export declare const RETENTION_LEASE_TTL_FACTOR = 2;
-/**
- * lane 消费的**执行器**面 —— core `ManagedRetentionCapability` 的三方法 + 车1 的非契约窄读口
- * `previewRetention`(audit-only 档的读数源;core 契约无 count 面)+ 声明位。
- *
- * 🔴 三方法的入参是 core 契约形的**超集**(多一个 `audit`):车1 的店在运行期对缺席的审计上下文
- * fail-closed 抛错,所以这里把它写进类型 —— 让「忘了传」变成编译错,而不是一次运行期的破坏性调用被拒。
- */
-export interface RetentionExecutor {
-    readonly retention?: "managed" | "none";
-    listRetentionDomains(): Promise<readonly string[]>;
-    previewRetention(input: {
-        domain: string;
-        cutoffMs: number;
-    }): Promise<{
-        checkpoints: number;
-        sessions: number;
-        toolResults: number;
-    }>;
-    expireCheckpoints(input: RetentionDestructiveInput): Promise<RetentionReceipt>;
-    deleteExpiredSessions(input: RetentionDestructiveInput): Promise<RetentionSessionsReceipt>;
-    deleteOrphanToolResults(input: RetentionDestructiveInput): Promise<RetentionReceipt>;
-}
-/** 破坏性调用的入参(判定时点的三格随行 —— 理由逐字见车1 `RetentionAuditContext` 的头注)。 */
-export interface RetentionDestructiveInput {
-    domain: string;
-    cutoffMs: number;
-    audit: {
-        mode: RetentionMode;
-        policyDays: number;
-        fencingToken: number | null;
-    };
-}
 /** 非破坏性审计行的写口(lane 侧属主的那五个词)。 */
 export interface RetentionAuditSink {
     append(row: {
@@ -132,13 +101,6 @@ export interface RetentionSweepCtx {
      *  (缓存卷、`space/` 快照、该会话停驻车道的快照一并回收)。它从不抛(失败 = 一行 + fail-open 计数);缺席 = 本部署没有可回收的东西。 */
     spaceReclaimer?: SpaceReclaimer;
 }
-/**
- * 会话树 sweep 的回执 = core 契约的 `RetentionReceipt` + 本仓一位:`endedSpaces` = 本次删掉的会话树里**结束了的空间**(会话 id + 住客空间键 = 会话化身;
- * 读不出住客的空化身不算),present-iff 非空。lane 把它交给空间的回收座(与会话删除协调器同一只),缓存卷与快照随空间的终结回收。
- */
-export type RetentionSessionsReceipt = RetentionReceipt & {
-    readonly endedSpaces?: readonly EndedSpace[];
-};
 /** 一轮的读数(给日志与判据用;lane 自己不做任何决策依赖它)。 */
 export interface RetentionSweepOutcome {
     /** 本轮真正处理完的 domain 数(丢租中止时 = 中止之前那些)。 */
@@ -168,7 +130,7 @@ export interface RetentionSweepOutcome {
  * 为什么本道必须存在:引擎的门不拦
  *  · 没锁时,执行器在场 × 一只 `"none"` 的店 —— 部署于是**广告了一个不执行的留存面**:能力位说
  *     `{mode,maxAgeDays}`、审计表也在长,而那只店的行谁都没在删。
- *     本仓的 SQL 后端按同一个事实(扫车道开不开,`plugins/retention-store-sql.ts` 的 `retentionSweepRuns`)给它铸的三只店声明词,所以 lane 开着时
+ *     本仓的 SQL 后端按同一个事实(扫车道开不开,`plugins/retention-declaration.ts` 的 `retentionSweepRuns`)给它铸的三只店声明词,所以 lane 开着时
  *     这三只店在这一格上恒是 `managed`;这一格防的是声明与 lane 脱钩的店(别的后端、替身)。
  * 这些都在**启动期**拒(安全控件不得半开),不是让运维从一台"启动成功、什么也没删"的机器上猜。
  *

package/dist/boot/runner-deps.js

@@ -144,7 +144,7 @@ export function createSharedRunnerDeps(ctx) {
 }
 export function createRunnerDeps(ctx) {
     const { config, logger, metrics, localRoot, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine, sessionCaptureRecords, memorySyncRunner, runtimeCapsResolver, fileHistoryStore, permissionRuleStore, fleetBus, workflowRunStore, workflowJournalStore, workflowAgentRegistry, workflowNotifyGate, deliverWorkflowCompletion, } = ctx;
-    const peerSessionLister = sessionStore.listSessions?.bind(sessionStore);
+    const peerSessionLister = sessionStore.listSessionRows?.bind(sessionStore);
     const memoryEngineIncident = createMemoryEngineIncidentSink({ logger, metrics });
     const sharedRunnerDeps = createSharedRunnerDeps(ctx);
     const workflowModelAllowlist = workflowModelAllowlistFor(config);

package/dist/boot/session-faces.d.ts

@@ -66,6 +66,7 @@ export interface SessionFacesCtx {
 export declare function createSessionFaces(ctx: SessionFacesCtx): {
     ownerAware: OwnerAwareSessionStore;
     sessionAudit: ((sessionId: string, opts?: SessionAuditReadOpts) => Promise<{
+        projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
         sessionId: string;

package/dist/boot/session-faces.js

@@ -1,5 +1,6 @@
 import { buildRewindHandles, buildSessionAudit, buildSessionAuditLocal, buildSessionAuditPg } from "../audit.js";
 import { readSessionAgent } from "../session-agent.js";
+import { readSessionProjectId, sessionWorkspaceStoreOf } from "../session-workspace.js";
 import { makeDegenerateInstrument } from "../degenerate-instrument.js";
 import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
@@ -12,6 +13,7 @@ import { probeSessionChildren, retireSessionChildren, sessionChildrenScope, Sess
 import { SessionActiveRunError } from "../execution-placement.js";
 import { headReadOf, redactIncarnations } from "../session-incarnation.js";
 import { recordFailOpen } from "../observability/fail-open.js";
+import { retireSessionId } from "../deleted-session-ids.js";
 import { seatText } from "../trace/exit-seat.js";
 export function createSessionFaces(ctx) {
     const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, backgroundAgentStore, userInputLedgerStore, spaceReclaimer, } = ctx;
@@ -20,6 +22,7 @@ export function createSessionFaces(ctx) {
     const auditLocalRows = localSessionRowsOf(backend);
     const ownerAware = sessionStore;
     const headOf = headReadOf(sessionStore);
+    const workspaceStore = sessionWorkspaceStoreOf(sessionStore);
     const sessionAudit = mysqlPool || auditPgPool || auditLocalRows
         ? async (sessionId, opts) => {
             const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
@@ -30,9 +33,13 @@ export function createSessionFaces(ctx) {
                     : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
             if (!audit)
                 return undefined;
-            const [head, agent] = await Promise.all([headOf?.(sessionId), opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined]);
+            const [head, agent, projectId] = await Promise.all([
+                headOf?.(sessionId),
+                opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined,
+                opts !== undefined ? readSessionProjectId(workspaceStore, sessionId) : undefined,
+            ]);
             const owner = head?.owner;
-            return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}) };
+            return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}), ...(projectId !== undefined ? { projectId } : {}) };
         }
         : undefined;
     const sessionWatchRegistry = headOf
@@ -102,7 +109,7 @@ export function createSessionFaces(ctx) {
                     await fileHistoryErasure.reap(sessionId, []);
                     logger.warn("session_file_history_baselines_retained", {
                         sessionId,
-                        note: "the local file-history store has no whole-scope purge verb; boundaries were reaped but v1 baselines (original file bytes) remain under the data root until the upstream purge seam lands — recorded as an open deletion-rights gap, not silent",
+                        note: "this file-history store has no whole-scope erase verb (deleteBySession); boundaries were reaped but v1 baselines (original file bytes) remain in the store until it implements that verb — an open deletion-rights gap, not silent",
                     });
                 }
             }
@@ -123,6 +130,7 @@ export function createSessionFaces(ctx) {
             }
             if (peerBox !== undefined)
                 await peerBox.store.drop(peerBox.scope, peerBox.handle);
+            retireSessionId(sessionId, owner, config);
             let historyDeleted;
             try {
                 historyDeleted = await ownerAware.deleteSession(sessionId, owner);

package/dist/boot/shutdown.js

@@ -5,8 +5,8 @@ import { createParentWatch } from "../parent-watch.js";
 import { setTimeout as delay } from "node:timers/promises";
 import { HOST_BG_KILL_GRACE_MS } from "../plugins/remote-env-host.js";
 import { installProcessExitBoundary } from "./exit-boundary.js";
-import { createEngineLeaseTracker } from "./engine-lease.js";
-import { writeExitLast, readExitLast, clearExitLast } from "./exit-last.js";
+import { backgroundShellsUnreachable, createEngineLeaseTracker, laneWork } from "./engine-lease.js";
+import { writeExitLast, readExitLast, clearExitLast, EXIT_LAST_FORMAT } from "./exit-last.js";
 import { isScriptRealmRejection, describeRejectionReason } from "../orchestration/hardened-vm-runner.js";
 import { DRAIN_CAUSE_COUNTS_AS_FIRST_STOP_SIGNAL, HARD_STOP_ACTION_ID, drainDeadlineBeyondBound } from "../fleet/drain-entry.js";
 import { seatText } from "../trace/exit-seat.js";
@@ -24,10 +24,20 @@ export function installShutdownHandlers(ctx) {
         const prior = readCrashLast(dataRoot);
         if (prior)
             logger.warn("crash_last_found", { at: prior.at, version: prior.version, pid: prior.pid, uptimeMs: prior.uptimeMs, ...(prior.inflight !== undefined ? { inflight: prior.inflight } : {}), err: prior.err });
-        const lastExit = readExitLast(dataRoot);
+        const lastExitReading = readExitLast(dataRoot);
+        if (lastExitReading?.kind === "formatMismatch") {
+            logger.warn("exit_last_stale_format", {
+                fileFormat: lastExitReading.fileFormat,
+                buildFormat: EXIT_LAST_FORMAT,
+                note: "exit-last.json on this data root was written in a different format by another engine version — it is not projected " +
+                    "(no exit_last_found for it) and is removed now; only the previous exit's self-exit record is lost, nothing else is affected.",
+            });
+            clearExitLast(dataRoot);
+        }
+        const lastExit = lastExitReading?.kind === "found" ? lastExitReading.info : undefined;
         if (lastExit) {
             logger.info("exit_last_found", {
-                at: lastExit.at, version: lastExit.version, pid: lastExit.pid, orphan: lastExit.orphan, reason: lastExit.reason,
+                at: lastExit.at, version: lastExit.version, pid: lastExit.pid, lane: lastExit.lane, reason: lastExit.reason,
                 idleForMs: lastExit.idleForMs, attached: lastExit.attached, inflight: lastExit.inflight, lingerMs: lastExit.lingerMs,
                 ...(lastExit.orphanedForMs !== undefined ? { orphanedForMs: lastExit.orphanedForMs } : {}),
                 crashedDuringExit: prior !== undefined && prior.pid === lastExit.pid,
@@ -76,6 +86,7 @@ export function installShutdownHandlers(ctx) {
     let parentWatch;
     let engineLease;
     let leaseFactsReader;
+    let handoverDoor;
     const hardShutdown = () => {
         if (closing)
             return;
@@ -191,14 +202,14 @@ export function installShutdownHandlers(ctx) {
         drainState.endSubscriptions?.();
         toolApproval?.beginDrain();
         void fleetClient?.announceNow();
-        const inflight = drainState.inflight?.() ?? 0;
+        const inflight = drainState.blockingInflight?.() ?? 0;
         logger.info("draining_started", { actionId: entry.actionId, inflight, deadlineAt: entry.deadlineAt, windowMs });
         if (inflight === 0) {
             hardShutdown();
             return { ...current, state: "draining" };
         }
         const tick = setInterval(() => {
-            const n = drainState.inflight?.() ?? 0;
+            const n = drainState.blockingInflight?.() ?? 0;
             const now = performance.now();
             if (n === 0 || now >= deadlineMono) {
                 clearInterval(tick);
@@ -254,9 +265,9 @@ export function installShutdownHandlers(ctx) {
     const onSigint = () => onStopSignal("SIGINT");
     process.on("SIGTERM", onSigterm);
     process.on("SIGINT", onSigint);
+    const handoverLane = !config.requirePrincipal ? { lingerMs: config.engineHandoverLingerMs, backgroundShells: exitBoundary.shellsExitWouldKill } : undefined;
     const onSighup = createSighupIdleHandler({
-        inflight: () => drainState.inflight?.() ?? 0,
-        attached: () => drainState.attachedStreams?.() ?? 0,
+        work: () => laneWork(engineLease?.lane(), { attached: drainState.attachedStreams?.() ?? 0, inflight: drainState.blockingInflight?.() ?? 0, backgroundShells: handoverLane?.backgroundShells ?? backgroundShellsUnreachable }, "sighup"),
         lastActivityAt: () => drainState.lastActivityAt?.() ?? 0,
         isStopped: () => closing || draining,
         escalate: () => drainOnCause("signal:SIGHUP"),
@@ -283,7 +294,7 @@ export function installShutdownHandlers(ctx) {
     if (config.parentPid !== undefined || config.engineAutoExit) {
         engineLease = createEngineLeaseTracker({
             attachedStreams: () => drainState.attachedStreams?.() ?? 0,
-            inflight: () => drainState.inflight?.() ?? 0,
+            inflight: () => drainState.blockingInflight?.() ?? 0,
             lastActivityAt: () => drainState.lastActivityAt?.() ?? 0,
             lastAttachEndedAt: () => drainState.lastAttachEndedAt?.() ?? 0,
             isStopped: () => closing || draining,
@@ -296,10 +307,15 @@ export function installShutdownHandlers(ctx) {
             ...(config.parentPid !== undefined
                 ? { orphan: { lingerMs: config.engineOrphanLingerMs, read: () => orphanState } }
                 : {}),
+            firstAttach: { windowMs: config.engineFirstAttachMs, firstTouchAt: () => drainState.firstActivityAt?.() ?? null },
+            ...(handoverLane !== undefined ? { handover: handoverLane } : {}),
             log: (event, fields) => logger.info(event, fields),
         });
         leaseFactsReader = () => engineLease?.facts;
         drainState.engineLease = leaseFactsReader;
+        handoverDoor = engineLease.handover;
+        if (handoverDoor !== undefined)
+            drainState.engineHandover = handoverDoor;
     }
     let disposed = false;
     return {
@@ -324,6 +340,8 @@ export function installShutdownHandlers(ctx) {
                 drainState.enter = undefined;
             if (leaseFactsReader !== undefined && drainState.engineLease === leaseFactsReader)
                 drainState.engineLease = undefined;
+            if (handoverDoor !== undefined && drainState.engineHandover === handoverDoor)
+                drainState.engineHandover = undefined;
         },
     };
 }

package/dist/boot/stage-01-config.d.ts

@@ -1,5 +1,5 @@
 export declare function runStage01(): {
-    config: import("../config-types.js").ServiceConfig;
+    config: import("../config-types.js").LoadedConfig;
     localRoot: string;
     logger: import("../observability/logger.js").Logger;
     metrics: import("../observability/metrics.js").Metrics;

package/dist/boot/stage-01-config.js

@@ -1,7 +1,7 @@
 import { homedir } from "node:os";
 import { loadConfig, logConfigDiagnostics, splitLocalRoots } from "../config.js";
 import { configLocalRoot } from "../config-provider.js";
-import { crossInvariant } from "../config-invariants.js";
+import { operatorDeclarationRefusal, runStaleHeartbeatRefusal } from "../config-invariants.js";
 import { drainNumEnvWarnings } from "../plugins/remote-shell.js";
 import { setWebSearchBadPayloadObserver } from "../plugins/web-search.js";
 import { createLogger } from "../observability/logger.js";
@@ -20,10 +20,14 @@ export function runStage01() {
     declareServerWithheldEnv();
     const config = loadConfig();
     bindOwnCredentialsConfig(config);
-    const runStaleFailure = crossInvariant("run-stale-heartbeat").check({ live: config, next: config });
+    const runStaleFailure = runStaleHeartbeatRefusal(config);
     if (runStaleFailure !== undefined) {
         throw new Error(runStaleFailure);
     }
+    const operatorDeclarationFailure = operatorDeclarationRefusal(config);
+    if (operatorDeclarationFailure !== undefined) {
+        throw new Error(operatorDeclarationFailure);
+    }
     const logger = createLogger(config.logLevel);
     const metrics = createMetrics();
     installFailOpenRecorder({ logger, metrics, redactDetail: redactSecrets });
@@ -61,7 +65,7 @@ export function runStage01() {
     if (rootsSplit) {
         logger.warn("local_roots_split", {
             ...rootsSplit,
-            note: "LOCAL_DATA_ROOT moved the local backend's DATA root, but config.d / remote-exec.json are still read from the config root (LOCAL_DATA_ROOT is not consulted there). If you meant to move both, set CONFIG_LOCAL_DIR to the same directory.",
+            note: "The local backend's DATA root and the config root differ, and CONFIG_LOCAL_DIR is not set: config.d / remote-exec.json are read from the derived config root (AGENT_DATA_DIR or ~/.ai-agent; LOCAL_DATA_ROOT is not consulted there), while data lives under the data root (LOCAL_DATA_ROOT, else CONFIG_LOCAL_DIR, AGENT_DATA_DIR, ~/.ai-agent). If you meant to move both, set CONFIG_LOCAL_DIR to the same directory; if the split is intended, set CONFIG_LOCAL_DIR to the config directory explicitly — any explicit CONFIG_LOCAL_DIR silences this line.",
         });
     }
     installOutboundDispatcher(logger);

package/dist/boot/stage-02-web-admin-pull.d.ts

@@ -1,8 +1,8 @@
 import type { runStage01 } from "./stage-01-config.js";
 export declare function runStage02(ctx: Awaited<ReturnType<typeof runStage01>>): Promise<{
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-02-web-admin-pull.js

@@ -1,7 +1,8 @@
 import { createUnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import { createWebAdminRuntime } from "./web-admin.js";
-import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
+import { composeExecutionLane, HTTP_SERVICE_LANE_ENTRY } from "./execution-lane.js";
 import { configSourceKind } from "../config-provider.js";
+import { buildCandidateRejectionNotes } from "../web-admin-client/candidate-gate.js";
 import { logConfigDirMigration, migrateLocalConfigDirectory } from "../config-d-migration.js";
 import { logEnvModelsMigration, runEnvModelsMigration } from "../config-root-migration.js";
 import { assertLocalConfigDirTrusted } from "../config-dir-trust.js";
@@ -10,18 +11,19 @@ import { isRosterGateArmed } from "../config.js";
 import { judgeServedModelRoute } from "../model-route-endpoint.js";
 import { servedModelTableLeg } from "../model-select.js";
 export async function runStage02(ctx) {
-    const { config, localRoot, logger, metrics } = ctx;
-    const configSource = configSourceKind(config);
+    const { config: loaded, localRoot, logger, metrics } = ctx;
+    const configSource = configSourceKind(loaded);
     if (configSource === "local") {
-        await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: config.configLocalOwnerUid });
-        const envModelsMigration = { root: localRoot, env: process.env, envTableIsPlaceholder: isRosterGateArmed(config.webAdmin) };
+        await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: loaded.configLocalOwnerUid });
+        const envModelsMigration = { root: localRoot, env: process.env, envTableIsPlaceholder: isRosterGateArmed(loaded.webAdmin) };
         logEnvModelsMigration(logger, envModelsMigration, await runEnvModelsMigration(envModelsMigration));
         logConfigDirMigration(logger, await migrateLocalConfigDirectory(localRoot));
     }
-    await composeExecutionLane(config, { configSource, localRoot, logger, drivesFromFile: FILE_SOURCED_LANES });
+    const config = await composeExecutionLane(loaded, { configSource, localRoot, logger, entry: HTTP_SERVICE_LANE_ENTRY });
     const webAdmin = await createWebAdminRuntime({ config, logger, metrics, localRoot });
     const servedLeg = servedModelTableLeg(config);
-    const noDefaultModel = defaultModelRefusal(config, servedLeg);
+    const rejection = webAdmin.candidateRejectionState();
+    const noDefaultModel = defaultModelRefusal({ models: config.models, modelRefusals: config.modelRefusals, candidateRejectionNotes: rejection === undefined ? undefined : buildCandidateRejectionNotes(rejection) }, servedLeg);
     if (noDefaultModel !== undefined) {
         throw new Error(noDefaultModel);
     }
@@ -35,6 +37,6 @@ export async function runStage02(ctx) {
     }
     const ceilingVerdict = createUnpricedCeilingVerdict({ config, logger });
     ceilingVerdict.judge();
-    return { ...ctx, ceilingVerdict, webAdmin };
+    return { ...ctx, config, ceilingVerdict, webAdmin };
 }
 //# sourceMappingURL=stage-02-web-admin-pull.js.map

package/dist/boot/stage-03-store-backend.d.ts

@@ -20,12 +20,13 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
+    storeSweep: import("../plugins/store-sweep.js").StoreSweep;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-03-store-backend.js

@@ -2,8 +2,8 @@ import { uuidv7 } from "@sema-agent/core";
 import { openStores } from "./stores.js";
 export async function runStage03(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
-    const { backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, sessionCaptureRecords, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportStores, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngine, } = await openStores({ config, logger, metrics, localRoot });
+    const { backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, sessionCaptureRecords, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportStores, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngine, storeSweep, } = await openStores({ config, logger, metrics, localRoot });
     const instanceId = uuidv7();
-    return { ...ctx, backend, backgroundAgentStore, breakerState, engineDataRoot, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportStores, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecords, sessionStore, sqlEngine, storePosture, taskAttachmentStore, taskListLane, usageWindowStore };
+    return { ...ctx, backend, backgroundAgentStore, breakerState, engineDataRoot, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportStores, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecords, sessionStore, sqlEngine, storePosture, storeSweep, taskAttachmentStore, taskListLane, usageWindowStore };
 }
 //# sourceMappingURL=stage-03-store-backend.js.map

package/dist/boot/stage-04-stores.d.ts

@@ -50,12 +50,13 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
+    storeSweep: import("../plugins/store-sweep.js").StoreSweep;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-05-execution-env.d.ts

@@ -2,11 +2,13 @@ import type { runStage04 } from "./stage-04-stores.js";
 export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>): Promise<{
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
+    belowTaskChainPatterns: readonly string[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
     peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -69,12 +71,13 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
+    storeSweep: import("../plugins/store-sweep.js").StoreSweep;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-05-execution-env.js

@@ -10,12 +10,12 @@ import { SANDBOX_GIT_PLANE_OFF_TEXT } from "../sandbox-git-plane.js";
 import { createPeerDesk } from "../peer-seat.js";
 export async function runStage05(ctx) {
     const { backend, config, instanceId, logger, metrics, sessionStore, taskAttachmentStore } = ctx;
-    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
+    const deviceLane = config.remoteExec.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
-    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, sandboxGitPlane: sandboxGitPlaneSeat, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
-    assertDeviceLaneWired(config.remoteExec?.provider === "device", deviceLane, executionEnvFactory !== undefined);
-    if (deviceLane !== undefined && config.remoteExec?.provider === "device")
+    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, sessionResidentBackground, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, sandboxGitPlane: sandboxGitPlaneSeat, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
+    assertDeviceLaneWired(config.remoteExec.provider === "device", deviceLane, executionEnvFactory !== undefined);
+    if (deviceLane !== undefined && config.remoteExec.provider === "device")
         await noteDeviceRelayBindings(config.remoteExec.relay, deviceLane.store, logger);
     assertWorkspaceSpaceReadable(facts.workspaceSpace(config), { headOf, spaceCommits }, facts.workspaceCache(config), sessionStoreLabelOf(config.sessionBackend, backend?.kind));
     if (sandboxSecretSeatGate !== undefined)
@@ -30,10 +30,10 @@ export async function runStage05(ctx) {
     }
     if (config.toolTrace)
         logger.info("tool_trace_enabled", {});
-    const { registrations: deploymentMods, loaded: deploymentModsLoaded } = await assembleDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config), declaration: config.modsDeclaration, logger });
+    const { registrations: deploymentMods, loaded: deploymentModsLoaded, belowTaskChainPatterns } = await assembleDeploymentMods({ metrics, ...(config.toolTrace ? { traceLogger: logger } : {}), brandIdentity: isBrandedDeployment(config), declaration: config.modsDeclaration, logger });
     const peerDesk = createPeerDesk({ log: logger });
     metrics.dynamicGauge("peer_registry_entries", "Peer desk entries (declared peer credentials registered for in-flight legs and the roster)", () => peerDesk.size().entries);
     metrics.dynamicGauge("peer_registry_holders", "Peer desk holders of entries (host leases and engine holds), summed across entries", () => peerDesk.size().holders);
-    return { ...ctx, deploymentMods, deploymentModsLoaded, deviceLane, peerDesk, dropSessionScoped, executionEnvFactory, fenceSessionOwner, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
+    return { ...ctx, deploymentMods, deploymentModsLoaded, belowTaskChainPatterns, deviceLane, peerDesk, dropSessionScoped, executionEnvFactory, fenceSessionOwner, sessionResidentBackground, lspManager, spaceReclaimer, sandboxPodReaper, sandboxGitPlane, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map

package/dist/boot/stage-06-runners.d.ts

@@ -30,7 +30,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     outcomeSink: import("../plugins/file-outcome-sink.js").OutcomeSink | undefined;
     principalCaps: import("../runtime-caps-resolver.js").PrincipalEntitlementsClient | undefined;
     question: import("../question.js").QuestionCoordinator | undefined;
-    retentionExecutor: import("../plugins/retention-store-sql.js").SqlRetentionStore | undefined;
+    retentionExecutor: import("../plugins/retention-deployment.js").RetentionExecutor | undefined;
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
@@ -63,11 +63,13 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
+    belowTaskChainPatterns: readonly string[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
     peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -130,12 +132,13 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
+    storeSweep: import("../plugins/store-sweep.js").StoreSweep;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-06-runners.js

@@ -6,7 +6,6 @@ import { ForkRoutingSessionStore } from "../plugins/fork-routing-session-store.j
 import { withoutHands } from "../capabilities/hands-lane.js";
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
 import { hasServiceAuth } from "../http/server.js";
-import { operatorRosterPresent } from "../http/principal-gate.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { createHookLlm, buildHookFailureText } from "../hooks/hook-llm.js";
 import { assertRetentionLaneWirable } from "./retention-lane.js";
@@ -28,7 +27,7 @@ import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-author
 import { mountOrgDeliveryGate } from "./org-delivery.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
-import { retentionSweepRuns } from "../plugins/retention-store-sql.js";
+import { retentionSweepRuns } from "../plugins/retention-declaration.js";
 import { createOperatorFaceIncidentSink } from "../memory-incident-sink.js";
 export async function runStage06(ctx) {
     const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
@@ -79,6 +78,16 @@ export async function runStage06(ctx) {
         ],
         locked: (config.lockedConfigKeys ?? []).includes("retentionPolicy"),
     });
+    const governanceSeams = createGovernanceSeams({
+        config,
+        logger,
+        retentionStores: [
+            { name: "sessionStore", store: sessionStore },
+            { name: "checkpointStore", store: checkpointStore },
+            { name: "toolResultStore", store: runnerOffloadStore },
+        ],
+        retentionExecutor: retentionSweepRuns(config.retentionSweep) ? (retentionExecutor ?? null) : null,
+    });
     const consolidationSeat = consolidationValve.enabled && memoryEngine
         ? resolveConsolidationDriverSeat({
             brain,
@@ -97,11 +106,11 @@ export async function runStage06(ctx) {
             onStopDetail: (audit) => logger.warn("memory_consolidation_stop_detail", audit),
             writeJudge: createOperatorValveWriteJudge({ ruleStoreProvider: permissionRuleProvider, config }),
             onNotice: createEngineNoticeForwarder(logger, defaultEngineNoticeRouter, metrics),
+            postureOf: governanceSeams.compliancePostureResolver,
         })
         : undefined;
     for (const w of buildConsolidationValveAudit({
         valve: consolidationValve,
-        operatorRosterPresent: operatorRosterPresent(config),
         hasServiceAuth: hasServiceAuth(config),
         allowUnauthedWrites: config.allowUnauthedWrites ?? false,
     }).warnings) {
@@ -117,16 +126,6 @@ export async function runStage06(ctx) {
             autoRunOnRecommendation: config.memoryConsolidationDriver.autoRunOnRecommendation ?? "engine-default(on)",
         });
     }
-    const governanceSeams = createGovernanceSeams({
-        config,
-        logger,
-        retentionStores: [
-            { name: "sessionStore", store: sessionStore },
-            { name: "checkpointStore", store: checkpointStore },
-            { name: "toolResultStore", store: runnerOffloadStore },
-        ],
-        retentionExecutor: retentionSweepRuns(config.retentionSweep) ? (retentionExecutor ?? null) : null,
-    });
     const mcpRevocations = webAdmin.takeMcpRevocations();
     const workflowModelAllowlistSnapshot = workflowModelAllowlistFor(config) ?? [];
     const runnerDeps = createRunnerDeps({

package/dist/boot/stage-07-capability-layer.d.ts

@@ -47,7 +47,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     outcomeSink: import("../plugins/file-outcome-sink.js").OutcomeSink | undefined;
     principalCaps: import("../runtime-caps-resolver.js").PrincipalEntitlementsClient | undefined;
     question: import("../question.js").QuestionCoordinator | undefined;
-    retentionExecutor: import("../plugins/retention-store-sql.js").SqlRetentionStore | undefined;
+    retentionExecutor: import("../plugins/retention-deployment.js").RetentionExecutor | undefined;
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: import("@sema-agent/core").Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
@@ -80,11 +80,13 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
+    belowTaskChainPatterns: readonly string[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
     peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -147,12 +149,13 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     sessionStore: import("@sema-agent/core").SessionStore<import("@sema-agent/core").SessionStoreSummary, import("@sema-agent/core").SessionListQuery>;
     sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
+    storeSweep: import("../plugins/store-sweep.js").StoreSweep;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;