@sema-agent/server 7.146.0 → 7.147.0

package/dist/boot/session-faces.d.ts

@@ -66,6 +66,7 @@ export interface SessionFacesCtx {
 export declare function createSessionFaces(ctx: SessionFacesCtx): {
     ownerAware: OwnerAwareSessionStore;
     sessionAudit: ((sessionId: string, opts?: SessionAuditReadOpts) => Promise<{
+        projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
         sessionId: string;

package/dist/boot/session-faces.js

@@ -1,5 +1,6 @@
 import { buildRewindHandles, buildSessionAudit, buildSessionAuditLocal, buildSessionAuditPg } from "../audit.js";
 import { readSessionAgent } from "../session-agent.js";
+import { readSessionProjectId, sessionWorkspaceStoreOf } from "../session-workspace.js";
 import { makeDegenerateInstrument } from "../degenerate-instrument.js";
 import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
@@ -21,6 +22,7 @@ export function createSessionFaces(ctx) {
     const auditLocalRows = localSessionRowsOf(backend);
     const ownerAware = sessionStore;
     const headOf = headReadOf(sessionStore);
+    const workspaceStore = sessionWorkspaceStoreOf(sessionStore);
     const sessionAudit = mysqlPool || auditPgPool || auditLocalRows
         ? async (sessionId, opts) => {
             const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
@@ -31,9 +33,13 @@ export function createSessionFaces(ctx) {
                     : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
             if (!audit)
                 return undefined;
-            const [head, agent] = await Promise.all([headOf?.(sessionId), opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined]);
+            const [head, agent, projectId] = await Promise.all([
+                headOf?.(sessionId),
+                opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined,
+                opts !== undefined ? readSessionProjectId(workspaceStore, sessionId) : undefined,
+            ]);
             const owner = head?.owner;
-            return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}) };
+            return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}), ...(projectId !== undefined ? { projectId } : {}) };
         }
         : undefined;
     const sessionWatchRegistry = headOf

package/dist/boot/stage-01-config.d.ts

@@ -1,5 +1,5 @@
 export declare function runStage01(): {
-    config: import("../config-types.js").ServiceConfig;
+    config: import("../config-types.js").LoadedConfig;
     localRoot: string;
     logger: import("../observability/logger.js").Logger;
     metrics: import("../observability/metrics.js").Metrics;

package/dist/boot/stage-01-config.js

@@ -1,7 +1,7 @@
 import { homedir } from "node:os";
 import { loadConfig, logConfigDiagnostics, splitLocalRoots } from "../config.js";
 import { configLocalRoot } from "../config-provider.js";
-import { crossInvariant } from "../config-invariants.js";
+import { operatorDeclarationRefusal, runStaleHeartbeatRefusal } from "../config-invariants.js";
 import { drainNumEnvWarnings } from "../plugins/remote-shell.js";
 import { setWebSearchBadPayloadObserver } from "../plugins/web-search.js";
 import { createLogger } from "../observability/logger.js";
@@ -20,10 +20,14 @@ export function runStage01() {
     declareServerWithheldEnv();
     const config = loadConfig();
     bindOwnCredentialsConfig(config);
-    const runStaleFailure = crossInvariant("run-stale-heartbeat").check({ live: config, next: config });
+    const runStaleFailure = runStaleHeartbeatRefusal(config);
     if (runStaleFailure !== undefined) {
         throw new Error(runStaleFailure);
     }
+    const operatorDeclarationFailure = operatorDeclarationRefusal(config);
+    if (operatorDeclarationFailure !== undefined) {
+        throw new Error(operatorDeclarationFailure);
+    }
     const logger = createLogger(config.logLevel);
     const metrics = createMetrics();
     installFailOpenRecorder({ logger, metrics, redactDetail: redactSecrets });

package/dist/boot/stage-02-web-admin-pull.d.ts

@@ -1,8 +1,8 @@
 import type { runStage01 } from "./stage-01-config.js";
 export declare function runStage02(ctx: Awaited<ReturnType<typeof runStage01>>): Promise<{
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-02-web-admin-pull.js

@@ -1,7 +1,8 @@
 import { createUnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import { createWebAdminRuntime } from "./web-admin.js";
-import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
+import { composeExecutionLane, HTTP_SERVICE_LANE_ENTRY } from "./execution-lane.js";
 import { configSourceKind } from "../config-provider.js";
+import { buildCandidateRejectionNotes } from "../web-admin-client/candidate-gate.js";
 import { logConfigDirMigration, migrateLocalConfigDirectory } from "../config-d-migration.js";
 import { logEnvModelsMigration, runEnvModelsMigration } from "../config-root-migration.js";
 import { assertLocalConfigDirTrusted } from "../config-dir-trust.js";
@@ -10,18 +11,19 @@ import { isRosterGateArmed } from "../config.js";
 import { judgeServedModelRoute } from "../model-route-endpoint.js";
 import { servedModelTableLeg } from "../model-select.js";
 export async function runStage02(ctx) {
-    const { config, localRoot, logger, metrics } = ctx;
-    const configSource = configSourceKind(config);
+    const { config: loaded, localRoot, logger, metrics } = ctx;
+    const configSource = configSourceKind(loaded);
     if (configSource === "local") {
-        await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: config.configLocalOwnerUid });
-        const envModelsMigration = { root: localRoot, env: process.env, envTableIsPlaceholder: isRosterGateArmed(config.webAdmin) };
+        await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: loaded.configLocalOwnerUid });
+        const envModelsMigration = { root: localRoot, env: process.env, envTableIsPlaceholder: isRosterGateArmed(loaded.webAdmin) };
         logEnvModelsMigration(logger, envModelsMigration, await runEnvModelsMigration(envModelsMigration));
         logConfigDirMigration(logger, await migrateLocalConfigDirectory(localRoot));
     }
-    await composeExecutionLane(config, { configSource, localRoot, logger, drivesFromFile: FILE_SOURCED_LANES });
+    const config = await composeExecutionLane(loaded, { configSource, localRoot, logger, entry: HTTP_SERVICE_LANE_ENTRY });
     const webAdmin = await createWebAdminRuntime({ config, logger, metrics, localRoot });
     const servedLeg = servedModelTableLeg(config);
-    const noDefaultModel = defaultModelRefusal(config, servedLeg);
+    const rejection = webAdmin.candidateRejectionState();
+    const noDefaultModel = defaultModelRefusal({ models: config.models, modelRefusals: config.modelRefusals, candidateRejectionNotes: rejection === undefined ? undefined : buildCandidateRejectionNotes(rejection) }, servedLeg);
     if (noDefaultModel !== undefined) {
         throw new Error(noDefaultModel);
     }
@@ -35,6 +37,6 @@ export async function runStage02(ctx) {
     }
     const ceilingVerdict = createUnpricedCeilingVerdict({ config, logger });
     ceilingVerdict.judge();
-    return { ...ctx, ceilingVerdict, webAdmin };
+    return { ...ctx, config, ceilingVerdict, webAdmin };
 }
 //# sourceMappingURL=stage-02-web-admin-pull.js.map

package/dist/boot/stage-03-store-backend.d.ts

@@ -24,9 +24,9 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-04-stores.d.ts

@@ -54,9 +54,9 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-05-execution-env.d.ts

@@ -8,7 +8,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    sessionResidentBackground: () => number;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -75,9 +75,9 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-05-execution-env.js

@@ -10,12 +10,12 @@ import { SANDBOX_GIT_PLANE_OFF_TEXT } from "../sandbox-git-plane.js";
 import { createPeerDesk } from "../peer-seat.js";
 export async function runStage05(ctx) {
     const { backend, config, instanceId, logger, metrics, sessionStore, taskAttachmentStore } = ctx;
-    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
+    const deviceLane = config.remoteExec.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
     const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, sessionResidentBackground, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxPodReaper, sandboxGitPlane: sandboxGitPlaneSeat, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
-    assertDeviceLaneWired(config.remoteExec?.provider === "device", deviceLane, executionEnvFactory !== undefined);
-    if (deviceLane !== undefined && config.remoteExec?.provider === "device")
+    assertDeviceLaneWired(config.remoteExec.provider === "device", deviceLane, executionEnvFactory !== undefined);
+    if (deviceLane !== undefined && config.remoteExec.provider === "device")
         await noteDeviceRelayBindings(config.remoteExec.relay, deviceLane.store, logger);
     assertWorkspaceSpaceReadable(facts.workspaceSpace(config), { headOf, spaceCommits }, facts.workspaceCache(config), sessionStoreLabelOf(config.sessionBackend, backend?.kind));
     if (sandboxSecretSeatGate !== undefined)

package/dist/boot/stage-06-runners.d.ts

@@ -30,7 +30,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     outcomeSink: import("../plugins/file-outcome-sink.js").OutcomeSink | undefined;
     principalCaps: import("../runtime-caps-resolver.js").PrincipalEntitlementsClient | undefined;
     question: import("../question.js").QuestionCoordinator | undefined;
-    retentionExecutor: import("../plugins/retention-store-sql.js").SqlRetentionStore | undefined;
+    retentionExecutor: import("../plugins/retention-deployment.js").RetentionExecutor | undefined;
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
@@ -69,7 +69,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    sessionResidentBackground: () => number;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -136,9 +136,9 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-06-runners.js

@@ -6,7 +6,6 @@ import { ForkRoutingSessionStore } from "../plugins/fork-routing-session-store.j
 import { withoutHands } from "../capabilities/hands-lane.js";
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
 import { hasServiceAuth } from "../http/server.js";
-import { operatorRosterPresent } from "../http/principal-gate.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { createHookLlm, buildHookFailureText } from "../hooks/hook-llm.js";
 import { assertRetentionLaneWirable } from "./retention-lane.js";
@@ -28,7 +27,7 @@ import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-author
 import { mountOrgDeliveryGate } from "./org-delivery.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
-import { retentionSweepRuns } from "../plugins/retention-store-sql.js";
+import { retentionSweepRuns } from "../plugins/retention-declaration.js";
 import { createOperatorFaceIncidentSink } from "../memory-incident-sink.js";
 export async function runStage06(ctx) {
     const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
@@ -112,7 +111,6 @@ export async function runStage06(ctx) {
         : undefined;
     for (const w of buildConsolidationValveAudit({
         valve: consolidationValve,
-        operatorRosterPresent: operatorRosterPresent(config),
         hasServiceAuth: hasServiceAuth(config),
         allowUnauthedWrites: config.allowUnauthedWrites ?? false,
     }).warnings) {

package/dist/boot/stage-07-capability-layer.d.ts

@@ -47,7 +47,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     outcomeSink: import("../plugins/file-outcome-sink.js").OutcomeSink | undefined;
     principalCaps: import("../runtime-caps-resolver.js").PrincipalEntitlementsClient | undefined;
     question: import("../question.js").QuestionCoordinator | undefined;
-    retentionExecutor: import("../plugins/retention-store-sql.js").SqlRetentionStore | undefined;
+    retentionExecutor: import("../plugins/retention-deployment.js").RetentionExecutor | undefined;
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: import("@sema-agent/core").Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
@@ -86,7 +86,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    sessionResidentBackground: () => number;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -153,9 +153,9 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-07-capability-layer.js

@@ -14,7 +14,7 @@ import { buildScenarios, builtinScenarioDetails, danglingScenarioRefusal } from
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
 import { RateLimiter } from "../observability/rate-limit.js";
 import { explicitOperatorOk } from "../http/server.js";
-import { buildOperatorUndeclaredNotice, buildServiceTokenPostureNotice } from "../http/principal-gate.js";
+import { buildServiceTokenPostureNotice } from "../http/principal-gate.js";
 import { selfOrchestrationDenial } from "../task-workflow.js";
 import { centerEntitlementSourceWired } from "../runtime-caps-resolver.js";
 import { reclaimOrphansAtBoot } from "../boot-reclaim.js";
@@ -87,7 +87,7 @@ export async function runStage07(ctx) {
         })()
         : undefined;
     const imageIndex = backend?.imageIndex ? backend.imageIndex() : undefined;
-    const selectEnvTool = config.selectEnvironmentTool && config.remoteExec?.provider === "k8s" && imageIndex
+    const selectEnvTool = config.selectEnvironmentTool && config.remoteExec.provider === "k8s" && imageIndex
         ? selectEnvironmentTool({
             catalog: imageIndex,
             selection: sessionEnvSelection,
@@ -99,11 +99,6 @@ export async function runStage07(ctx) {
         logger.info("image_bakes_enabled", { operators: config.operatorPrincipals.length, runner: config.imageBakes.runnerPrincipal });
     if (durableEnabled)
         logger.info("durable_approval_enabled", { toolApprovalGate: config.approvalRequire.length });
-    {
-        const undeclared = buildOperatorUndeclaredNotice(config);
-        if (undeclared)
-            logger.warn(undeclared.event, undeclared.fields);
-    }
     {
         const posture = buildServiceTokenPostureNotice(config);
         if (posture)
@@ -128,7 +123,7 @@ export async function runStage07(ctx) {
         }
     }
     for (const w of buildNoResponderBootWarns({
-        lane: executionLaneOf(config.remoteExec?.provider),
+        lane: config.remoteExec.provider,
         selfOrchestrationEnabled: config.selfOrchestrationEnabled,
         approvalFaceWired: toolApproval !== undefined || durableEnabled,
     }))
@@ -182,7 +177,7 @@ export async function runStage07(ctx) {
     const webFetchSummarize = createWebFetchSummarizeLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver(), logger });
     const scenarioDeps = {
         runner, subRunner, model: DEFAULT_MODEL_REF, skills, repoClient, requirePrincipal: config.requirePrincipal,
-        handsLane: laneWiresExecutionEnv(executionLaneOf(config.remoteExec?.provider)),
+        handsLane: laneWiresExecutionEnv(config.remoteExec.provider),
         webSearch: webSearch ? webSearch : undefined, logger, webFetchSummarize,
         backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
         checkpointStore: checkpointStore ? checkpointStore : undefined,

package/dist/boot/stage-08-reapers.d.ts

@@ -60,7 +60,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     outcomeSink: import("../plugins/file-outcome-sink.js").OutcomeSink | undefined;
     principalCaps: import("../runtime-caps-resolver.js").PrincipalEntitlementsClient | undefined;
     question: import("../question.js").QuestionCoordinator | undefined;
-    retentionExecutor: import("../plugins/retention-store-sql.js").SqlRetentionStore | undefined;
+    retentionExecutor: import("../plugins/retention-deployment.js").RetentionExecutor | undefined;
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
@@ -99,7 +99,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    sessionResidentBackground: () => number;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -166,9 +166,9 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-09-leader.d.ts

@@ -18,6 +18,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     }>) | undefined;
     webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<{
+        projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
         sessionId: string;
@@ -84,7 +85,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     outcomeSink: import("../plugins/file-outcome-sink.js").OutcomeSink | undefined;
     principalCaps: import("../runtime-caps-resolver.js").PrincipalEntitlementsClient | undefined;
     question: import("../question.js").QuestionCoordinator | undefined;
-    retentionExecutor: import("../plugins/retention-store-sql.js").SqlRetentionStore | undefined;
+    retentionExecutor: import("../plugins/retention-deployment.js").RetentionExecutor | undefined;
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: import("@sema-agent/core").Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
@@ -123,7 +124,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    sessionResidentBackground: () => number;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -190,9 +191,9 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-10-http-server.d.ts

@@ -17,6 +17,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     }>) | undefined;
     webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<{
+        projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
         sessionId: string;
@@ -83,7 +84,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     outcomeSink: import("../plugins/file-outcome-sink.js").OutcomeSink | undefined;
     principalCaps: import("../runtime-caps-resolver.js").PrincipalEntitlementsClient | undefined;
     question: import("../question.js").QuestionCoordinator | undefined;
-    retentionExecutor: import("../plugins/retention-store-sql.js").SqlRetentionStore | undefined;
+    retentionExecutor: import("../plugins/retention-deployment.js").RetentionExecutor | undefined;
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: import("@sema-agent/core").Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
@@ -122,7 +123,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
-    sessionResidentBackground: () => number;
+    sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
@@ -189,9 +190,9 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
+    config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
-    config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-10-http-server.js

@@ -85,7 +85,7 @@ export async function runStage10(ctx) {
         sessionAudit,
         routeJudgeBrain: brain,
         purgeSession: purgeSession ? purgeSession : undefined,
-        bindSessionInheritEnv: executionLaneOf(config.remoteExec?.provider) === "host" ? setSessionInheritEnv : undefined,
+        bindSessionInheritEnv: config.remoteExec.provider === "host" ? setSessionInheritEnv : undefined,
         subagentTaskOutput: (handle, access) => backgroundAgentOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
         taskHandleOutput: (handle, access) => taskHandleOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
         taskHandleStop: (handle, access) => taskHandleStop(defaultTaskRegistry, handle, access, backgroundAgentStore),
@@ -174,6 +174,7 @@ export async function runStage10(ctx) {
         sealedKeyPublic: webAdmin.sealedKeyPublic,
         sandboxGitPlane,
         deploymentModPackages: deploymentModsLoaded.length,
+        perSessionCwd,
         instanceId,
         capabilities: {
             version: serviceVersion(),

package/dist/boot/stores.d.ts

@@ -1,3 +1,4 @@
+import { sessionBoxMountVerdict } from "@sema-agent/core";
 import type { ServiceConfig } from "../config.js";
 import { type MemorySyncRunner } from "../memory-sync-client.js";
 import type { Logger } from "../observability/logger.js";
@@ -20,6 +21,14 @@ export interface OpenStoresCtx {
  * 不在这里手抄一份,也不在别处再求一遍(手抄的判据会漂,漂的方向要么是拒启误伤、要么是该拒不拒;再求一遍的 park 设施位手上没有那只店)。本函数只做探:有 SQL 池就探,local 后端无池则无事。
  */
 export declare function assertApprovalAskRuleMaterialOnBackend(backend: StoreBackend | undefined): Promise<void>;
+/**
+ * 起服报告 `session_box_mount` 那一行(纯数据):引擎会话盒挂载判官的判决 → 级别与键集,唯一一处。挂得上 ⇒ info `{ peerLaneMountable: true }`;
+ * 挂不上 ⇒ warn `{ peerLaneMountable: false, peerLaneRefusal: <引擎的码>, reason: <引擎的句> }`。{@link openStores} 对本部署装的那一对店问一次、按它落行。
+ */
+export declare function buildSessionBoxMountLine(verdict: ReturnType<typeof sessionBoxMountVerdict>): {
+    readonly level: "info" | "warn";
+    readonly fields: Readonly<Record<string, unknown>>;
+};
 export declare function openStores(ctx: OpenStoresCtx): Promise<{
     backend: StoreBackend | undefined;
     storePosture: import("../store-posture.js").StorePosture;

package/dist/boot/stores.js

@@ -1,5 +1,5 @@
 import { join } from "node:path";
-import { FileBackgroundAgentStore, FileMailboxStore, FileRosterStore, InMemoryUsageWindowStore, mailboxCrossProcessMountVerdict } from "@sema-agent/core";
+import { FileBackgroundAgentStore, FileMailboxStore, FileRosterStore, InMemoryUsageWindowStore, sessionBoxMountVerdict } from "@sema-agent/core";
 import { createCorruptReadFailOpenSeat } from "../observability/corrupt-read-seat.js";
 import { startMemorySyncRunner } from "../memory-sync-client.js";
 import { errorCodeOf, errorKindOf } from "../observability/err-text.js";
@@ -35,8 +35,9 @@ import { assertToolResultProvenanceSchema } from "../stores-sql/tool-result-stor
 import { assertPermissionRuleApprovalSchema, assertPermissionRuleTicketSchema } from "../plugins/permission-rule-store-sql.js";
 import { assertApprovalAskRuleMaterialSchema } from "../plugins/approval-ask-store-sql.js";
 import { assertSchemaMatchesCode } from "../plugins/schema-consistency.js";
+import { assertSessionExtCascadeOn } from "../plugins/session-ext-table.js";
 import { SqlCheckpointStore, assertCheckpointColumnSchema } from "../stores-sql/checkpoint-store-sql.js";
-import { assertFileHistorySchema } from "../plugins/file-history-store-sql.js";
+import { assertFileHistorySchema } from "../stores-sql/file-history-store-sql.js";
 import { buildMemoryBoundaryLaneFacts, buildMemoryWriteBoundaryAudit } from "./memory-boundary.js";
 import { buildMemoryPosture } from "../memory-posture.js";
 import { headReadOf } from "../session-incarnation.js";
@@ -57,6 +58,11 @@ export async function assertApprovalAskRuleMaterialOnBackend(backend) {
     else if (mysqlPool)
         await assertApprovalAskRuleMaterialSchema(async (sql) => ({ rows: (await mysqlPool.query(sql))[0] }), "mysql");
 }
+export function buildSessionBoxMountLine(verdict) {
+    return verdict.ok
+        ? { level: "info", fields: { peerLaneMountable: true } }
+        : { level: "warn", fields: { peerLaneMountable: false, peerLaneRefusal: verdict.code, reason: verdict.reason } };
+}
 export async function openStores(ctx) {
     const { config, logger, metrics, localRoot } = ctx;
     let backend;
@@ -98,6 +104,10 @@ export async function openStores(ctx) {
             await assertFileHistorySchema(async (sql) => ({ rows: (await pgPool.query(sql)).rows }), "pg");
         else if (mysqlPool)
             await assertFileHistorySchema(async (sql) => ({ rows: (await mysqlPool.query(sql))[0] }), "mysql");
+        if (pgPool)
+            await assertSessionExtCascadeOn(pgDriver(pgPool));
+        else if (mysqlPool)
+            await assertSessionExtCascadeOn(mysqlDriver(mysqlPool));
     }
     if (backend)
         await runAndLogOneTimeMigrations(logger, backend);
@@ -159,7 +169,7 @@ export async function openStores(ctx) {
             });
             if (embedder !== undefined && config.memoryEmbedder !== undefined) {
                 await ensurePgMemoryEmbedderMetaSchema(q);
-                await reconcileEmbedderFingerprint(q, { model: config.memoryEmbedder.model, dimensions: config.memoryEmbedder.dimensions }, { log: logger });
+                await reconcileEmbedderFingerprint(q, { model: config.memoryEmbedder.model, dimensions: config.memoryEmbedder.dimensions }, { log: logger, reembedConfirmed: config.memoryEmbedder.reembedConfirmed === true });
             }
             else {
                 logger.info("memory_embedder_identity_absent", {
@@ -322,13 +332,10 @@ export async function openStores(ctx) {
         if (mailboxStore)
             mailboxRecipientLifecycle = recipientLifecycleOf(mailboxStore);
         if (mailboxStore) {
-            const laneVerdict = mailboxCrossProcessMountVerdict(mailboxStore);
             logger.info("mailbox_store_enabled", {
                 backend: pgPool ? "pg" : mysqlPool ? "mysql" : "file",
                 crossProcessSafe: mailboxStore.crossProcessSafe,
                 recipientTombstones: pgPool !== undefined || mysqlPool !== undefined,
-                peerLaneMountable: laneVerdict.ok,
-                ...(laneVerdict.ok ? {} : { peerLaneRefusal: laneVerdict.code }),
             });
         }
     }
@@ -397,7 +404,7 @@ export async function openStores(ctx) {
             await ensurePgDeviceSchema(async (text, params) => pgPool.query(text, params));
         if (mysqlPool)
             await ensureTiDBDeviceSchema(mysqlPool);
-        if (config.remoteExec?.provider === "device") {
+        if (config.remoteExec.provider === "device") {
             if (pgPool)
                 await assertDeviceAuditRebindEventSchema(pgDriver(pgPool));
             else if (mysqlPool)
@@ -429,6 +436,10 @@ export async function openStores(ctx) {
         });
     }
     metrics.dynamicGauge("sessions_warm", "Sessions held in the warm cache", () => sessionStore.size);
+    if (mailboxStore !== undefined) {
+        const line = buildSessionBoxMountLine(sessionBoxMountVerdict(mailboxStore, sessionStore));
+        logger[line.level]("session_box_mount", line.fields);
+    }
     const breakerState = backend?.breaker && config.resilience.circuitBreaker
         ? backend
             .breaker((streak) => {

package/dist/boot/web-admin.js

@@ -7,7 +7,7 @@ import { stableStringify } from "@sema-agent/settings-schema/hash";
 import { buildModelRefusalsSignal } from "../model-entry-refusal.js";
 import { CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore, } from "@sema-agent/core";
 import { buildPricing } from "../budget.js";
-import { applyCenterPlugins } from "../capabilities/center-plugins.js";
+import { applyCenterPlugins, pluginCacheRootFor } from "../capabilities/center-plugins.js";
 import { applyCenterArtifact, centerSourceOnError, withPromptArtifactBackfill } from "../capabilities/center-prompts.js";
 import { centerScenarios, centerScenarioDetails } from "../capabilities/scenarios.js";
 import { isRosterGateArmed } from "../config.js";
@@ -213,7 +213,7 @@ export async function createWebAdminRuntime(ctx) {
         const domains = verdict.domains.join(",");
         if (candidateRejection?.version === r.effective.version && candidateRejection.domains.join(",") === domains)
             return;
-        admitArrival(ordinal, candidateRejectionOf(r, verdict, candidateSource().kind, Date.now()));
+        admitArrival(ordinal, candidateRejectionOf(r, verdict, candidateSource().kind, Date.now(), localDirField.dir));
         logger.warn("config_candidate_rejected", buildCandidateRejectedFields(r, verdict, leg, { lkgVersion: latestEffective?.version ?? "(env)", ...localDirField }));
     };
     const noteSourceAtApplied = () => {
@@ -776,7 +776,7 @@ export async function createWebAdminRuntime(ctx) {
                 skills = await applySkillsManifest(skills, effective.skills, candidateSource(), logger);
             if (effective?.plugins !== undefined) {
                 const pluginOut = await applyCenterPlugins(skills, effective, {
-                    cacheRoot: join(config.localDataRoot ?? join(homedir(), ".ai-agent"), "plugin-cache"),
+                    cacheRoot: pluginCacheRootFor(config.localDataRoot ?? join(homedir(), ".ai-agent")),
                     allowHosts: config.pluginsAllowHosts,
                     toolsShareThisFilesystem: DEPLOYMENT_SHAPE_PREDICATES.toolsOnThisHost.holds(config),
                     logger,

package/dist/capabilities/center-plugins.d.ts

@@ -97,6 +97,8 @@ export declare function materializablePlugins(eff: {
     url: string;
     sha?: string;
 }>;
+/** 中心 plugin 缓存根 `<数据根>/plugin-cache`(组合根传给 {@link applyCenterPlugins} 的 `cacheRoot` 与一次性迁移 M39 的名册同读这一只)。 */
+export declare function pluginCacheRootFor(dataRoot: string): string;
 /** 总入口(条款 3/7/8):逐条物化 + 装载 + 让位合并。materialize 盘位 = `<cacheRoot>/<name>/live`
  *  (成功后原子 rename 替换,失败保留旧盘位 = LKG)。 */
 export declare function applyCenterPlugins(baseline: LoadedSkill[], eff: {