@sema-agent/server 7.147.0 → 7.149.0

package/dist/boot/stage-10-http-server.d.ts

@@ -8,13 +8,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     leaderEndpoint: import("../leader/endpoint.js").LeaderEndpoint | undefined;
     ownerAware: import("../security.js").OwnerAwareSessionStore;
     planCacheProbe: import("../plan-cache-probe.js").PlanCacheProbe;
-    purgeSession: ((sessionId: string, owner: string | null) => Promise<{
-        deleted: boolean;
-    } | {
-        active: string;
-    } | {
-        childrenAlive: readonly string[];
-    }>) | undefined;
+    purgeSession: ((sessionId: string, owner: string | null) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
     webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<{
         projectId?: string | undefined;
@@ -40,10 +34,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     retentionLaneStarted: import("./retention-lane.js").RetentionLaneController | undefined;
     approvalExemptionStore: import("../plugins/approval-exemption-store.js").ApprovalExemptionStore | undefined;
     approvalNonceStore: import("../plugins/approval-nonce-store.js").ApprovalNonceStore | undefined;
-    authorize: (ctx: {
-        req: import("http").IncomingMessage;
-        body: import("../index.js").TaskRequestBody;
-    }) => Promise<import("../security.js").AuthContext>;
+    authorize: (ctx: import("../security.js").AuthorizeInput) => Promise<import("../security.js").AuthContext>;
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     loadedSkills: import("../index.js").LoadedSkill[];
@@ -64,6 +55,8 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     userInputLedger: import("../user-input-ledger.js").UserInputLedger | undefined;
     userInputLedgerStore: import("../user-input-ledger.js").UserInputLedgerStore | undefined;
     webSearchProvider: "brave" | "tavily" | "searxng" | undefined;
+    sessionEraser: import("../session-erase.js").SessionEraser | undefined;
+    settleErasedSessions: import("../session-erase.js").SessionEraseSettler;
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;
     checkpointStore: import("../plugins/store-backend.js").CheckpointStoreFull | undefined;
@@ -88,7 +81,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     retentionLaneStore: import("../plugins/retention-lane-store-sql.js").RetentionLaneStore | undefined;
     runner: import("@sema-agent/core").Runner;
     runnerDeps: import("@sema-agent/core").RunnerDeps;
-    runtimeCapsPeekResolver: import("../runtime-caps-resolver.js").EntitlementsResolverFn | undefined;
+    runtimeCapsPeekReading: ((principal: string | undefined) => Promise<import("../runtime-caps-resolver.js").RuntimeCapsReading>) | undefined;
     sendFileLedger: import("../plugins/send-file-ledger.js").SendFileLedger | undefined;
     sendUserFileEmitter: import("../capabilities/send-user-file-tool.js").SendUserFileEmitter | undefined;
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
@@ -114,20 +107,22 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     };
     workflowRunStore: import("../orchestration/workflow-notify-journal.js").JournalingWorkflowRunStore | undefined;
     workflowsCapable: boolean;
-    orgDeliveryGate: import("@sema-agent/core").OrgDeliveryGate | undefined;
+    orgDeliveryGate: import("../org-delivery-gate.js").ServerOrgDeliveryGate | undefined;
     deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deploymentModsLoaded: readonly import("./deployment-mods.js").LoadedModPackage[];
     belowTaskChainPatterns: readonly string[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
     peerDesk: import("../peer-seat.js").PeerDesk;
     dropSessionScoped: (sid: string) => void;
+    dropSessionScopedOf: (sid: string, incarnation: string) => boolean;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
-    fenceSessionOwner: (sid: string, owner: string | null) => void;
+    fenceSessionOwner: (sid: string, owner: string | null, incarnation?: string) => void;
     sessionResidentBackground: () => import("../session-resident-background.js").SessionResidentCounts;
-    lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
+    lspManager: import("@sema-agent/core").NodeLspManager | undefined;
     spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
-    sandboxPodReaper: import("../plugins/k8s-pod-reaper.js").SandboxPodReaper | undefined;
+    sandboxReaper: import("../plugins/sandbox-reaper.js").SandboxReaper | undefined;
     sandboxGitPlane: () => import("../sandbox-git-plane.js").SandboxGitPlane;
+    sandboxCapacity: import("../plugins/local-docker-capacity.js").LocalDockerCapacity | undefined;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
@@ -166,6 +161,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     sideQueryAccounting: import("../budget.js").SideQueryAccounting;
     toolResultStore: import("@sema-agent/core").ToolResultStore | undefined;
     tracer: import("@sema-agent/core").TracerHook;
+    adoptionWiring: import("../adoption/plan.js").AdoptionWiring;
     backend: import("../plugins/store-backend.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
@@ -192,7 +188,9 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     config: import("../config-types.js").ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
+    storeEvidence: import("../store-posture.js").StoreEvidence;
     webAdmin: import("./web-admin.js").WebAdminRuntime;
+    localAdmission: import("../plugins/local-data-root-admission.js").LocalDataRootAdmission | undefined;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;

package/dist/boot/stage-10-http-server.js

@@ -1,7 +1,7 @@
 import { autoRunOnRecommendationEffective, defaultTaskRegistry } from "@sema-agent/core";
 import { posIntEnv } from "../session-watch.js";
 import { brainSummary, buildFailoverFirstByteNotice } from "../brain.js";
-import { resolveBindHost } from "../config.js";
+import { resolveBindHost } from "../bind-host.js";
 import { buildWriteProtectionPosture } from "../write-protection.js";
 import { isPricingConfigured } from "../budget.js";
 import { createHandsRunnerSelector } from "../capabilities/hands-lane.js";
@@ -32,7 +32,7 @@ import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import { seatText } from "../trace/exit-seat.js";
 export async function runStage10(ctx) {
-    const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, belowTaskChainPatterns, deploymentMods, deploymentModsLoaded, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportStores, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sessionResidentBackground, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
+    const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, belowTaskChainPatterns, deploymentMods, deploymentModsLoaded, deviceLane, drainState, dropSessionScopedOf, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, sandboxCapacity, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportStores, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekReading, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sessionResidentBackground, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -86,6 +86,7 @@ export async function runStage10(ctx) {
         routeJudgeBrain: brain,
         purgeSession: purgeSession ? purgeSession : undefined,
         bindSessionInheritEnv: config.remoteExec.provider === "host" ? setSessionInheritEnv : undefined,
+        dropSessionScopedOf,
         subagentTaskOutput: (handle, access) => backgroundAgentOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
         taskHandleOutput: (handle, access) => taskHandleOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
         taskHandleStop: (handle, access) => taskHandleStop(defaultTaskRegistry, handle, access, backgroundAgentStore),
@@ -130,7 +131,7 @@ export async function runStage10(ctx) {
         usageWindowStore: usageWindowStore ? usageWindowStore : undefined,
         autoModeFace: {
             seatMounted: runnerDeps.autoMode !== undefined,
-            resolveCaps: runtimeCapsPeekResolver,
+            resolveCaps: runtimeCapsPeekReading,
             classifierModel: () => {
                 const route = classifierRouteFor(runnerDeps);
                 if (route.fault !== undefined)
@@ -173,6 +174,7 @@ export async function runStage10(ctx) {
         webSearchProvider,
         sealedKeyPublic: webAdmin.sealedKeyPublic,
         sandboxGitPlane,
+        sandboxCapacity,
         deploymentModPackages: deploymentModsLoaded.length,
         perSessionCwd,
         instanceId,
@@ -210,7 +212,8 @@ export async function runStage10(ctx) {
         peerDesk,
         getKeyResolver: () => webAdmin.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
-        hookLlm, hookAgent, belowTaskChainPatterns, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
+        hookLlm, hookAgent, belowTaskChainPatterns, fleetBus, hookWakeBus, ownerAware, taskLimitCaps, taskTimeoutSec,
+        historyAnchors: resumeAnchorStore && runStore ? { anchors: resumeAnchorStore, runs: runStore } : undefined,
         selectEnvTool, sendUserFileToolSpec, memoryEngine, memorySyncRunner, durableEnabled, approvalExemptionStore,
         checkpointStore, imageIndex, perTaskImage,
         sessionEnvSelection,

package/dist/boot/store-evidence.d.ts

@@ -0,0 +1,20 @@
+/**
+ * 店持久性的**起服取证**(`store-posture.ts` 的 {@link captureStoreEvidence})—— 三根各由自己的属主解析路径,这里只是把三只解析交给判者:
+ *  · 数据根 = `localBackendRootOf`(local 后端开店读的那一只);
+ *  · 封签钥匙目录 = `sealedKeyDirOf`(第 2 段建保管店读的那一只);
+ *  · file 记忆根 = `fileMemoryEngineRoot(config)`(file 记忆引擎的根链),`MEMORY_ENGINE_BACKEND=file` 时取证;进不进判定由第 3 段按引擎**真接没接线**定
+ *    (`buildStorePosture` 的 `memoryRootWired`:多租户 / 关引擎 / 平面分裂车道上不接)。SQL 记忆腿的盘上只有每任务的工作副本,持久面在库里,不取证。
+ *
+ * ⚠️ 位置即契约:调用点是起服**第 2 段段首**(`stage-02-web-admin-pull.ts`,任何第 2 段写之前 —— 第 2 段会建 `<数据根>/sealed-key`)。
+ * 直接调 `openStores` 的测试也经这一只取证,不另写一份三根解析。
+ */
+import type { ServiceConfig } from "../config.js";
+import { type StoreEvidence, type StoreEvidenceHost } from "../store-posture.js";
+/** 取证只读这四格(第 2 段段首手里是装载出的配置,还没合成 `ServiceConfig`;收窄到读的那几格,两种配置形都递得进来)。 */
+export type StoreEvidenceConfig = Pick<ServiceConfig, "localDataRoot" | "sealedKeyDir" | "memoryEngineBackend" | "memoryEngineDir">;
+export declare function captureBootStoreEvidence(a: {
+    readonly config: StoreEvidenceConfig;
+    readonly localRoot: string;
+    readonly host?: Partial<StoreEvidenceHost>;
+}): Promise<StoreEvidence>;
+//# sourceMappingURL=store-evidence.d.ts.map

package/dist/boot/store-evidence.js

@@ -0,0 +1,13 @@
+import { canonicalPathOf, fileMemoryEngineRoot } from "../memory-scope.js";
+import { localBackendRootOf } from "../plugins/store-backend.js";
+import { sealedKeyDirOf } from "../sealed-key-layout.js";
+import { captureStoreEvidence } from "../store-posture.js";
+export async function captureBootStoreEvidence(a) {
+    const { config, localRoot } = a;
+    return captureStoreEvidence({
+        dataRoot: localBackendRootOf(config),
+        sealedKeyDir: sealedKeyDirOf(config, localRoot),
+        memoryRoot: config.memoryEngineBackend === "file" ? fileMemoryEngineRoot(config) : undefined,
+    }, { canonical: canonicalPathOf, ...a.host });
+}
+//# sourceMappingURL=store-evidence.js.map

package/dist/boot/stores.d.ts

@@ -6,12 +6,18 @@ import type { Metrics } from "../observability/metrics.js";
 import { type MemorySyncStore } from "../plugins/memory-sync-store-pg.js";
 import { type TaskAttachmentStore } from "../plugins/task-attachment-store.js";
 import { type StoreBackend } from "../plugins/store-backend.js";
+import type { LocalDataRootAdmission } from "../plugins/local-data-root-admission.js";
 import { type MemoryScopeStores } from "../memory-scope-stores.js";
+import { type StoreEvidence } from "../store-posture.js";
 export interface OpenStoresCtx {
     config: ServiceConfig;
     logger: Logger;
     metrics: Metrics;
     localRoot: string;
+    /** 店的持久性起服证据(起服第 2 段段首 `captureBootStoreEvidence` 取的那一份;直接调本函数的测试同一只取证)。 */
+    storeEvidence: StoreEvidence;
+    /** local 数据根准入读数(起服第 1 段在本进程第一笔写之前取的那一只;非 local = `undefined`)。直接调本函数的测试经 `test/helpers/open-stores.ts` 同一只准入取。 */
+    localAdmission: LocalDataRootAdmission | undefined;
 }
 /**
  * durable 回决腿的规则位给 `approval_ask` 加了 `rule_command`/`rule_scope_root` 两列,而 `ensureAsk` 的 INSERT 与每一条读**无条件**引用它们 ⇒ 存量表上整条流内审批协议

package/dist/boot/stores.js

@@ -12,6 +12,7 @@ import { TiDBMemoryHistoryStore, TiDBMemorySyncStore, ensureTiDBMemoryHistorySch
 import { MinioBlobBackend } from "../plugins/blob-backend.js";
 import { ensureSnapshotBuckets } from "../plugins/snapshot-bucket-presence.js";
 import { PgBackgroundAgentStore, TiDBBackgroundAgentStore, ensurePgBackgroundAgentSchema, ensureTiDBBackgroundAgentSchema } from "../stores-sql/background-agent-store-sql.js";
+import { recordFailOpen } from "../observability/fail-open.js";
 import { PgMailboxStore, TiDBMailboxStore, ensurePgMailboxSchema, ensureTiDBMailboxSchema } from "../stores-sql/mailbox-store-sql.js";
 import { recipientLifecycleOf } from "../plugins/mailbox-recipient-lifecycle.js";
 import { PgUsageWindowStore, TiDBUsageWindowStore, ensurePgUsageWindowSchema, ensureTiDBUsageWindowSchema } from "../stores-sql/usage-window-store-sql.js";
@@ -20,16 +21,16 @@ import { LocalTaskAttachmentStore } from "../plugins/local-task-attachment-store
 import { PgTaskAttachmentStore, TiDBTaskAttachmentStore, ensurePgTaskAttachmentSchema, ensureTiDBTaskAttachmentSchema } from "../plugins/task-attachment-store.js";
 import { createSessionStore } from "../plugins/session-store.js";
 import { buildSqlPoolMissingRefusal, missingSqlCoordinateKeys } from "../sql-engine-coordinates.js";
-import { runAndLogOneTimeMigrations } from "../plugins/one-time-migrations.js";
+import { ONE_TIME_MIGRATIONS, runAndLogOneTimeMigrations } from "../plugins/one-time-migrations.js";
 import { createTaskListLane } from "./task-list-lane.js";
 import { ensurePgTaskListSchema, ensureTiDBTaskListSchema } from "../plugins/task-list-store-sql.js";
 import { assertDeviceAuditRebindEventSchema, ensurePgDeviceSchema, ensureTiDBDeviceSchema } from "../plugins/device-store-sql.js";
 import { mysqlDriver, pgDriver } from "../plugins/sql-driver.js";
-import { assertCloudSnapshotBlobPosture, openStoreBackendWithFallback, workflowJournalOf } from "../plugins/store-backend.js";
+import { assertCloudSnapshotBlobPosture, localClientWritesOf, openStoreBackendWithFallback, workflowJournalOf } from "../plugins/store-backend.js";
 import { createMemoryEngineIncidentSink } from "../memory-incident-sink.js";
 import { announceLockedLegacyMemoryLayers } from "../memory-layer-legacy-lock.js";
 import { createEngineNoticeForwarder } from "./runner-deps.js";
-import { buildMemoryRemoteLaneWarn, canonicalPathOf, judgeMemoryRootOutsideDataRoot, memoryEngineBackendFor, memoryEngineRemoteLanePosture, memoryEngineRootFor, memoryMountRootOf } from "../memory-scope.js";
+import { announceMemoryLedgerForm, buildMemoryRemoteLaneWarn, canonicalPathOf, judgeMemoryRootOutsideDataRoot, memoryEngineBackendFor, memoryEngineRemoteLanePosture, memoryEngineRootFor, memoryMountRootOf } from "../memory-scope.js";
 import { createMemoryScopeStores } from "../memory-scope-stores.js";
 import { assertToolResultProvenanceSchema } from "../stores-sql/tool-result-store-sql.js";
 import { assertPermissionRuleApprovalSchema, assertPermissionRuleTicketSchema } from "../plugins/permission-rule-store-sql.js";
@@ -42,7 +43,7 @@ import { buildMemoryBoundaryLaneFacts, buildMemoryWriteBoundaryAudit } from "./m
 import { buildMemoryPosture } from "../memory-posture.js";
 import { headReadOf } from "../session-incarnation.js";
 import { establishSqlEnginePosture, sqlPoolsOf } from "../sql-engine-posture.js";
-import { buildStorePosture } from "../store-posture.js";
+import { buildStoreFreshStartLine, buildStorePosture } from "../store-posture.js";
 import { seatText } from "../trace/exit-seat.js";
 import { buildStoreSweepBounds, createJournalSweepLeg, createStoreSweep } from "../plugins/store-sweep.js";
 const DARK_REASON_PROSE = {
@@ -64,21 +65,29 @@ export function buildSessionBoxMountLine(verdict) {
         : { level: "warn", fields: { peerLaneMountable: false, peerLaneRefusal: verdict.code, reason: verdict.reason } };
 }
 export async function openStores(ctx) {
-    const { config, logger, metrics, localRoot } = ctx;
+    const { config, logger, metrics, localRoot, storeEvidence, localAdmission } = ctx;
     let backend;
     let storeDegradedReason;
+    if (config.requirePrincipal && config.dbBackend === "local") {
+        throw new Error("REQUIRE_PRINCIPAL=true is not supported on the local file backend (DB_BACKEND=local): the lane is single-user " +
+            "by construction — a session created before owners were recorded is claimed by the FIRST principal that submits " +
+            "to it during the upgrade window, and the lane's mutual-recognition arms assume one user — so it cannot enforce " +
+            "a multi-tenant session boundary. Use a SQL backend (DB_BACKEND=mysql|pg) for multi-tenant, or run local " +
+            "single-user with REQUIRE_PRINCIPAL=false (a BFF may still inject x-agent-principal per request for memory " +
+            "scoping and audit attribution).");
+    }
     const dsnConfigured = !!(config.tidb || config.pg);
     await ensureSnapshotBuckets(config, logger);
     const wantDb = config.sessionBackend === "tidb" ||
         config.dbBackend === "local" ||
         (config.sessionBackend === "auto" && dsnConfigured);
     if (wantDb) {
-        const opened = await openStoreBackendWithFallback(config, logger);
+        const opened = await openStoreBackendWithFallback(config, logger, { runStallVerdicts: (landed) => metrics.inc("runs_reaped_total", { kind: "stale" }, landed) }, localAdmission, { dataRootMedium: storeEvidence.dataRoot.verdict });
         backend = opened.backend;
         storeDegradedReason = opened.degradedReason;
     }
-    const storePosture = buildStorePosture({ declared: config.dbBackend, assembled: backend?.kind, degradedReason: storeDegradedReason });
-    metrics.setGauge("store_backend_degraded", storePosture.degradedReason !== undefined ? 1 : 0);
+    if (backend)
+        assertCloudSnapshotBlobPosture(backend.kind, config);
     {
         const mysqlPool = backend?.mysqlPool?.();
         const pgPool = backend?.pgPool?.();
@@ -109,8 +118,6 @@ export async function openStores(ctx) {
         else if (mysqlPool)
             await assertSessionExtCascadeOn(mysqlDriver(mysqlPool));
     }
-    if (backend)
-        await runAndLogOneTimeMigrations(logger, backend);
     if ((process.env.REWIND_SNAPSHOT_MAX_MB ?? "") !== "") {
         logger.warn("rewind_snapshot_max_mb_retired", {
             note: "REWIND_SNAPSHOT_MAX_MB no longer has an effect: the whole-tree snapshot epoch is retired (S-15); per-edited-file history captures only files the agent touches, with no tree walk and no size gate. Remove the env var. Per-blob SQL sizing is governed by SNAPSHOT_BLOB_SQL_MAX_BYTES / object storage as before.",
@@ -207,6 +214,7 @@ export async function openStores(ctx) {
         });
     }
     else {
+        await announceMemoryLedgerForm(config, undefined, logger);
         const fileEngine = memoryEngineBackendFor(config, undefined, memoryEngineIncident);
         memoryEngine = fileEngine !== undefined ? scopeStoresOver(fileEngine.backend) : undefined;
         if (memoryEngine)
@@ -222,6 +230,18 @@ export async function openStores(ctx) {
             }
         }
     }
+    const storePosture = buildStorePosture({
+        declared: config.dbBackend,
+        assembled: backend?.kind,
+        degradedReason: storeDegradedReason,
+        evidence: storeEvidence,
+        memoryRootWired: config.memoryEngineBackend === "file" && memoryEngine !== undefined,
+        localDeclaration: backend?.localStoreDeclaration?.(),
+    });
+    metrics.setGauge("store_backend_degraded", storePosture.degradedReason !== undefined ? 1 : 0);
+    const freshStart = buildStoreFreshStartLine(storePosture, storeEvidence);
+    if (freshStart !== undefined)
+        logger.info("store_fresh_start", freshStart);
     {
         const laneFacts = buildMemoryBoundaryLaneFacts(config, process.cwd());
         const memoryMountRoot = memoryEngine ? memoryMountRootOf(memoryEngine.backend, memoryEngine.root) : undefined;
@@ -267,11 +287,11 @@ export async function openStores(ctx) {
         if (pgPool) {
             const q = async (text, params) => { const r = await pgPool.query(text, params); return { rows: r.rows }; };
             await ensurePgBackgroundAgentSchema(q);
-            backgroundAgentStore = new PgBackgroundAgentStore(q);
+            backgroundAgentStore = new PgBackgroundAgentStore(q, recordFailOpen);
         }
         else if (mysqlPool) {
             await ensureTiDBBackgroundAgentSchema(mysqlPool);
-            backgroundAgentStore = new TiDBBackgroundAgentStore(mysqlPool);
+            backgroundAgentStore = new TiDBBackgroundAgentStore(mysqlPool, recordFailOpen);
         }
         else if (backend?.kind === "local") {
             backgroundAgentStore = new FileBackgroundAgentStore(config.localDataRoot ?? localRoot);
@@ -304,7 +324,7 @@ export async function openStores(ctx) {
             }
         }
         else if (backend?.kind === "local") {
-            taskAttachmentStore = new LocalTaskAttachmentStore(config.localDataRoot ?? localRoot);
+            taskAttachmentStore = new LocalTaskAttachmentStore(config.localDataRoot ?? localRoot, { clientWrites: localClientWritesOf(backend) });
         }
         if (taskAttachmentStore)
             logger.info("task_attachment_store_enabled", { backend: pgPool ? "pg+minio" : mysqlPool ? "mysql+minio" : "file", maxBytes: config.attachmentMaxBytes });
@@ -411,25 +431,19 @@ export async function openStores(ctx) {
                 await assertDeviceAuditRebindEventSchema(mysqlDriver(mysqlPool));
         }
     }
-    {
+    const reconcileSchema = async (pending) => {
         const mysqlPool = backend?.mysqlPool?.();
         const pgPool = backend?.pgPool?.();
         if (pgPool)
-            await assertSchemaMatchesCode(async (sql) => (await pgPool.query(sql)).rows, "pg");
+            await assertSchemaMatchesCode(async (sql) => (await pgPool.query(sql)).rows, "pg", pending);
         else if (mysqlPool)
-            await assertSchemaMatchesCode(async (sql) => (await mysqlPool.query(sql))[0], "mysql");
-    }
-    const sessionStore = createSessionStore(config, backend, metrics);
-    if (config.requirePrincipal && backend?.kind === "local") {
-        throw new Error("REQUIRE_PRINCIPAL=true is not supported on the local file backend (DB_BACKEND=local): the lane is single-user " +
-            "by construction — a session created before owners were recorded is claimed by the FIRST principal that submits " +
-            "to it during the upgrade window, and the lane's mutual-recognition arms assume one user — so it cannot enforce " +
-            "a multi-tenant session boundary. Use a SQL backend (DB_BACKEND=mysql|pg) for multi-tenant, or run local " +
-            "single-user with REQUIRE_PRINCIPAL=false (a BFF may still inject x-agent-principal per request for memory " +
-            "scoping and audit attribution).");
-    }
+            await assertSchemaMatchesCode(async (sql) => (await mysqlPool.query(sql))[0], "mysql", pending);
+    };
+    await reconcileSchema(ONE_TIME_MIGRATIONS);
     if (backend)
-        assertCloudSnapshotBlobPosture(backend.kind, config);
+        await runAndLogOneTimeMigrations(logger, backend);
+    await reconcileSchema([]);
+    const sessionStore = createSessionStore(config, backend, metrics);
     if (!config.requirePrincipal && headReadOf(sessionStore) !== undefined) {
         logger.warn("principal_optional", {
             note: "owner-aware session store with REQUIRE_PRINCIPAL=false — owned sessions are protected, but headerless callers can create/share anonymous sessions; set REQUIRE_PRINCIPAL=true for multi-tenant",

package/dist/boot/task-list-lane.d.ts

@@ -55,14 +55,14 @@ export interface TaskListLane {
      * 所有权,故按 sessionId 单键删。
      *
      * 幂等(没写过任何任务的会话删 0 行);错误如实上抛 —— E21 的次序契约要求子腿失败就中止,让
-     * session_meta 留着、幂等重试收敛(session-faces.ts 顶注)。
+     * session_meta 留着、幂等重试收敛(删净执行体 `session-erase.ts` 头注:行最后删)。
      *
      * 📌 **残余,如实登记**(codex R2-[high] 判真、**射程外**):删除进行中若有一次并发 `storeFor`,
      * 它会拿到一只新铸的可写店,写入可能落在 purge 事务提交**之后** ⇒ 行被重建、留给下一个化身。
      * 这不是本腿独有的窗口,而是**整条 E21 级联共有的**残余(anchors / exemption / policy / attachment /
-     * snapshot / task_list 全是按 session_id 单键删、且各自开始时刻不同),`session-faces.ts` 的 purge
-     * 协调器里那段「残余,如实登记」逐字记着它与它的两条收口候选。真正消灭它要么让整条级联化身原子
-     * (单事务横跨十余张表 + 对象存储),要么引入**跨副本 durable 的会话化身号**并让每次写校验它 ——
+     * snapshot / task_list 全是按 session_id 单键删)。删净执行体(`session-erase.ts`)让 SQL 上的整条级联落进一个事务、
+     * local 上落进会话店的一节写锁,但并发 `storeFor` 铸的可写店不读那只锁 / 不看那一事务 —— 写仍可能落在删净之后。真正消灭它
+     * 要么让每次写在会话行锁下校验住客,要么引入**跨副本 durable 的会话化身号**并让每次写校验它 ——
      * 两者都是设计级改动(属主裁决 + 三问),给 task-list 单独发明一套围栏只会在同一语义面上多一个
      * 写者。⇒ 归入既有的那条后续件,不在本批自作主张。
      */

package/dist/boot/web-admin.d.ts

@@ -89,8 +89,10 @@ export interface WebAdminRuntime {
         degradeRoute: DegradeRouteWatch;
         checkpointStorePresent: boolean;
     }): void;
-    /** [ref]-2:停刷新环(hardShutdown 收尾链;幂等,未起环时 no-op)。[ref]:中心凭证续签器的定时器同停(同一条收尾链)。 */
-    stopRefreshLoop(): void;
+    /** [ref]-2:停刷新环(hardShutdown 收尾链;幂等,未起环时 no-op)。[ref]:中心凭证续签器的定时器同停(同一条收尾链)。
+     *  返回的 promise = 续签器 `stop()` 的那一只:已经发出的那一次续签落定(新信封落盘或按失败落定)之后 settle,从不 reject —— 进程出口
+     *  (停机的退出链、起服前探针)等它再退,中心已答应的轮换不被进程退出腰斩。 */
+    stopRefreshLoop(): Promise<void>;
     /** [ref]:`/health.centerCredential` 的取值口 —— 凭证来源的健康态 + 续签器状态;都健康 / 没有中心 ⇒ `undefined`(键缺席)。 */
     centerCredentialState(): CenterCredentialHealthView | undefined;
     /** [ref]:`/health.centerIdentityNotice` 的取值口 —— 中心凭证换人后的**最近一条**通告(`center_identity_demoted` 已降到无中心配置档 / `center_identity_landed`