@sema-agent/server 7.149.0 → 7.151.0

package/dist/boot/session-faces.js

@@ -1,5 +1,6 @@
+import { sessionKindFaceOf } from "../session-kind.js";
 import { buildRewindHandles, buildSessionAudit, buildSessionAuditLocal, buildSessionAuditPg } from "../audit.js";
-import { readSessionAgent } from "../session-agent.js";
+import { readSessionAgent } from "../http/owner-access.js";
 import { readSessionProjectId, sessionWorkspaceStoreOf } from "../session-workspace.js";
 import { makeDegenerateInstrument } from "../degenerate-instrument.js";
 import { PlanCacheProbe } from "../plan-cache-probe.js";
@@ -24,27 +25,30 @@ export function createSessionFaces(ctx) {
     const ownerAware = sessionStore;
     const headOf = headReadOf(sessionStore);
     const workspaceStore = sessionWorkspaceStoreOf(sessionStore);
-    const sessionAudit = mysqlPool || auditPgPool || auditLocalRows
-        ? async (sessionId, opts) => {
-            const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
-            const audit = mysqlPool
-                ? await buildSessionAudit(mysqlPool, sessionId, handles)
-                : auditPgPool
-                    ? await buildSessionAuditPg(auditPgPool, sessionId, handles)
-                    : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
-            if (!audit)
-                return undefined;
-            const [head, agent, projectId] = await Promise.all([
-                headOf?.(sessionId),
-                opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined,
-                opts !== undefined ? readSessionProjectId(workspaceStore, sessionId) : undefined,
-            ]);
-            const owner = head?.owner;
-            return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}), ...(projectId !== undefined ? { projectId } : {}) };
-        }
-        : undefined;
+    const kindFace = sessionKindFaceOf(sessionStore);
+    const readSessionView = async (sessionId, opts) => {
+        const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
+        const audit = mysqlPool
+            ? await buildSessionAudit(mysqlPool, sessionId, handles)
+            : auditPgPool
+                ? await buildSessionAuditPg(auditPgPool, sessionId, handles)
+                : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
+        if (!audit)
+            return undefined;
+        const [head, agent, projectId, kindRead] = await Promise.all([
+            headOf?.(sessionId),
+            opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined,
+            opts !== undefined ? readSessionProjectId(workspaceStore, sessionId) : undefined,
+            opts !== undefined ? kindFace?.sessionKindOf(sessionId) : undefined,
+        ]);
+        const owner = head?.owner;
+        const sessionKind = kindRead !== undefined && head !== undefined && kindRead.incarnation === head.incarnation ? kindRead.kind : undefined;
+        return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}), ...(projectId !== undefined ? { projectId } : {}), ...(sessionKind !== undefined ? { sessionKind } : {}) };
+    };
+    const sessionAudit = mysqlPool || auditPgPool || auditLocalRows ? readSessionView : undefined;
+    const probeWatchedHead = async (sid) => (headOf === undefined ? { owner: undefined, leafId: null } : ((await headOf(sid)) ?? { owner: undefined, leafId: null }));
     const sessionWatchRegistry = headOf
-        ? new SessionWatchRegistry(async (sid) => (await headOf(sid)) ?? { owner: undefined, leafId: null }, {
+        ? new SessionWatchRegistry(probeWatchedHead, {
             hotMs: posIntEnv(process.env.SESSION_EVENTS_HOT_MS, 200),
             warmMs: posIntEnv(process.env.SESSION_EVENTS_WARM_MS, 2000),
             maxWatchedSessions: posIntEnv(process.env.SESSION_EVENTS_MAX_PROBES, 512, 100_000),
@@ -64,7 +68,7 @@ export function createSessionFaces(ctx) {
     const attempts = new Map();
     const holder = (token) => attempts.get(token) ?? "elsewhere";
     const purge = eraser !== undefined && deletion !== undefined
-        ? async (sessionId, owner, expect) => {
+        ? async (sessionId, owner, expect, ageOut) => {
             const tenantScope = sessionTenantScope(owner);
             const reach = await probeSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, tenantScope);
             if (!reach.reachable) {
@@ -73,7 +77,7 @@ export function createSessionFaces(ctx) {
             }
             let fence;
             try {
-                fence = await deletion.fence(sessionId, owner, expect === undefined ? { holder } : { holder, expect });
+                fence = await deletion.fence(sessionId, owner, { holder, ...(expect !== undefined ? { expect } : {}), ...(ageOut !== undefined ? { ageOut } : {}) });
             }
             catch (err) {
                 if (err instanceof SessionActiveRunError)
@@ -143,7 +147,7 @@ export function createSessionFaces(ctx) {
             return { deleted: true };
         }
         : undefined;
-    const purgeSession = purge !== undefined ? (sessionId, owner) => purge(sessionId, owner) : undefined;
+    const purgeSession = purge !== undefined ? (sessionId, owner, opts) => purge(sessionId, owner, undefined, opts?.ageOut) : undefined;
     const recoverOne = async (sessionId, owner, token) => {
         const unfinished = "the session stays in the deleting state (it reads as gone everywhere); the next start or a repeated DELETE by its owner finishes it";
         try {

package/dist/boot/stage-01-config.js

@@ -12,6 +12,7 @@ import { installFileHistoryFailureRecorder } from "../file-history-disclosure.js
 import { installSecretEnvScrubRecorder } from "../observability/secret-env-scrub.js";
 import { setRunTerminalLogObserver } from "../observability/run-terminal.js";
 import { setRedactionObserver } from "../trace/redact.js";
+import { setStoreBoundaryObserver } from "../terminal.js";
 import { installOutboundDispatcher } from "../outbound-dispatcher.js";
 import { bindOwnCredentialsConfig, declareServerWithheldEnv } from "../server-secret-env.js";
 import { admitLocalDataRoot } from "../plugins/local-data-root-admission.js";
@@ -53,6 +54,7 @@ export function runStage01() {
         });
     }
     setRedactionObserver((pattern, n, meta) => metrics.inc("redactions_applied_total", { pattern, arm: meta.arm }, n));
+    setStoreBoundaryObserver((site, faultClass) => metrics.inc("store_boundary_fault_total", { site, class: faultClass }));
     setWebSearchBadPayloadObserver((provider) => {
         metrics.inc("web_search_bad_payload_total", { provider });
         logger.warn("web_search_non_array_payload", { provider });

package/dist/boot/stage-03-store-backend.js

@@ -1,10 +1,10 @@
-import { uuidv7 } from "@sema-agent/core";
+import { processInstanceId } from "../process-instance.js";
 import { openStores } from "./stores.js";
 export async function runStage03(ctx) {
     const { config, localAdmission, localRoot, logger, metrics, storeEvidence } = ctx;
     const { backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, sessionCaptureRecords, taskAttachmentStore, mailboxStore, mailboxRecipientLifecycle, memoryExportStores, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, sqlEngine, storeSweep, } = await openStores({ config, logger, metrics, localRoot, storeEvidence, localAdmission });
     const adoptionWiring = { memoryEngine: memoryExportStores !== undefined, taskAttachment: taskAttachmentStore !== undefined };
-    const instanceId = uuidv7();
+    const instanceId = processInstanceId();
     return { ...ctx, adoptionWiring, backend, backgroundAgentStore, breakerState, engineDataRoot, instanceId, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memoryExportStores, memoryPosture, memorySyncCursors, memorySyncRunner, rosterStore, sessionCaptureRecords, sessionStore, sqlEngine, storePosture, storeSweep, taskAttachmentStore, taskListLane, usageWindowStore };
 }
 //# sourceMappingURL=stage-03-store-backend.js.map

package/dist/boot/stage-05-execution-env.d.ts

@@ -18,10 +18,12 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-05-execution-env.js

@@ -13,7 +13,7 @@ export async function runStage05(ctx) {
     const deviceLane = config.remoteExec.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
-    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, sessionResidentBackground, dropSessionScopedOf, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxReaper, sandboxGitPlane: sandboxGitPlaneSeat, sandboxCapacity, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
+    const { perTaskImage, sessionEnvSelection, perSessionCwd, sessionBindings, fenceSessionOwner, dropSessionScoped, sessionResidentBackground, dropSessionScopedOf, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxReaper, sandboxGitPlane: sandboxGitPlaneSeat, sandboxCapacity, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
     assertDeviceLaneWired(config.remoteExec.provider === "device", deviceLane, executionEnvFactory !== undefined);
     if (deviceLane !== undefined && config.remoteExec.provider === "device")
         await noteDeviceRelayBindings(config.remoteExec.relay, deviceLane.store, logger);
@@ -34,6 +34,6 @@ export async function runStage05(ctx) {
     const peerDesk = createPeerDesk({ log: logger });
     metrics.dynamicGauge("peer_registry_entries", "Peer desk entries (declared peer credentials registered for in-flight legs and the roster)", () => peerDesk.size().entries);
     metrics.dynamicGauge("peer_registry_holders", "Peer desk holders of entries (host leases and engine holds), summed across entries", () => peerDesk.size().holders);
-    return { ...ctx, deploymentMods, deploymentModsLoaded, belowTaskChainPatterns, deviceLane, peerDesk, dropSessionScoped, dropSessionScopedOf, executionEnvFactory, fenceSessionOwner, sessionResidentBackground, lspManager, spaceReclaimer, sandboxReaper, sandboxGitPlane, sandboxCapacity, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
+    return { ...ctx, deploymentMods, deploymentModsLoaded, belowTaskChainPatterns, deviceLane, peerDesk, dropSessionScoped, dropSessionScopedOf, executionEnvFactory, fenceSessionOwner, sessionResidentBackground, lspManager, spaceReclaimer, sandboxReaper, sandboxGitPlane, sandboxCapacity, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionBindings, sessionEnvSelection, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map

package/dist/boot/stage-06-runners.d.ts

@@ -34,7 +34,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -45,6 +45,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -73,10 +74,12 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-06-runners.js

@@ -1,14 +1,14 @@
 import { createSessionEraseSettler } from "../session-erase.js";
 import { Runner, InMemoryToolResultStore, TtlSessionStore, uuidv7, createAllowDenyPolicy, workflowsCapability } from "@sema-agent/core";
 import { createEngineSessionRulesSeat } from "../session-rules-seat.js";
-import { headReadOf } from "../session-incarnation.js";
 import { outwardPlane } from "../terminal.js";
 import { createSessionTitler } from "../session-titler.js";
+import { sessionOccupantReadOf } from "../http/owner-access.js";
 import { cardRuleScopeRoot } from "../task-cwd.js";
 import { ForkRoutingSessionStore } from "../plugins/fork-routing-session-store.js";
 import { withoutHands } from "../capabilities/hands-lane.js";
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
-import { hasServiceAuth } from "../identity-source.js";
+import { DEPLOYMENT_SHAPE_PREDICATES } from "../deployment-shape.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { createHookLlm, buildHookFailureText } from "../hooks/hook-llm.js";
 import { assertRetentionLaneWirable } from "./retention-lane.js";
@@ -27,16 +27,21 @@ import { createOrgMemoryAdmissionWiring } from "./org-memory.js";
 import { createGovernanceSeams } from "./governance-seams.js";
 import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-authorizer.js";
 import { mountOrgDeliveryGate } from "./org-delivery.js";
-import { parkedAskRedeem, runStore } from "./late-binds.js";
+import { parkedAskRedeem, runEndedHandoff, runStore } from "./late-binds.js";
+import { createWorkflowParkHolderPull } from "../orchestration/workflow-park-holder.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
 import { retentionSweepRuns } from "../plugins/retention-declaration.js";
 import { createOperatorFaceIncidentSink } from "../memory-incident-sink.js";
 export async function runStage06(ctx) {
     const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecords, sessionPolicyStore, sessionStore, spaceReclaimer, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
-    const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, workflowParkDecisions, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
+    const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, workflowParkDecisions, heldParksHere, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore, getRunEndedHandoff: () => runEndedHandoff });
+    backend?.bindWorkflowRunReader?.(workflowRunStore ?? "none");
     const parkCommitted = backend?.checkpoint && config.durableApproval ? createParkCommitWatch(backend.checkpoint(logger)) : undefined;
     const checkpointStore = parkCommitted?.store;
     const parkCommits = parkCommitted?.watch;
+    const workflowParkHolderPull = heldParksHere !== undefined && workflowParkDecisions !== undefined && workflowAgentSessionIndex !== undefined && workflowRunStore !== undefined && checkpointStore !== undefined
+        ? createWorkflowParkHolderPull({ held: heldParksHere, decisions: workflowParkDecisions, checkpointStore, workflowAgentSessionIndex, workflowRunStore, warn: (event, fields) => logger.warn(event, fields) })
+        : undefined;
     const checkpointCtxSealing = webAdmin.checkpointCtxSealing;
     if (checkpointStore !== undefined) {
         if (checkpointCtxSealing === undefined)
@@ -116,7 +121,7 @@ export async function runStage06(ctx) {
         : undefined;
     for (const w of buildConsolidationValveAudit({
         valve: consolidationValve,
-        hasServiceAuth: hasServiceAuth(config),
+        credentialGateSource: DEPLOYMENT_SHAPE_PREDICATES.credentialGateSource.holds(config),
         allowUnauthedWrites: config.allowUnauthedWrites ?? false,
     }).warnings) {
         logger.warn(w.tag, { detail: w.detail });
@@ -133,7 +138,7 @@ export async function runStage06(ctx) {
     }
     const mcpRevocations = webAdmin.takeMcpRevocations();
     const workflowModelAllowlistSnapshot = workflowModelAllowlistFor(config) ?? [];
-    const engineSessionRules = sessionPolicyStore ? createEngineSessionRulesSeat(sessionPolicyStore, headReadOf(sessionStore)) : undefined;
+    const engineSessionRules = sessionPolicyStore ? createEngineSessionRulesSeat(sessionPolicyStore, sessionStore) : undefined;
     const runnerDeps = createRunnerDeps({
         consolidationSeat,
         commitCoAuthor,
@@ -187,9 +192,11 @@ export async function runStage06(ctx) {
     };
     const clipHookErr = (s) => (s ?? "").slice(0, 300);
     const titleCapable = sessionStore;
-    const sessionTitler = config.sessionAutoTitle && titleCapable.setTitleIfNull && titleCapable.probeTitle
+    const titleOccupantOf = sessionOccupantReadOf(sessionStore);
+    const sessionTitler = config.sessionAutoTitle && titleCapable.setTitleIfNull && titleCapable.probeTitle && titleOccupantOf
         ? createSessionTitler({
             setTitleIfNull: titleCapable.setTitleIfNull.bind(sessionStore),
+            occupantOf: titleOccupantOf,
             probeTitle: titleCapable.probeTitle.bind(sessionStore),
             llm: hookLlm,
             logger,
@@ -227,6 +234,7 @@ export async function runStage06(ctx) {
             sharedMemoryStores: sharedMemoryStore ? sharedMemoryStore : undefined,
             engineDataRoot,
             peerDesk,
+            runtimeCapsResolver,
         }),
         sessionStore: subRunnerSessions,
         onBackgroundChildEvent: runnerDeps.onBackgroundChildEvent ? runnerDeps.onBackgroundChildEvent : undefined,
@@ -236,6 +244,6 @@ export async function runStage06(ctx) {
     };
     const subRunner = new Runner(subRunnerDeps);
     const settleErasedSessions = createSessionEraseSettler({ attachments: taskAttachmentStore, spaceReclaimer, logger });
-    return { ...ctx, sessionEraser, settleErasedSessions, approvalAskAudit, approvalExemptionStore, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekReading, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowParkDecisions, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate };
+    return { ...ctx, sessionEraser, settleErasedSessions, approvalAskAudit, approvalExemptionStore, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekReading, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowParkDecisions, workflowParkHolderPull, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate };
 }
 //# sourceMappingURL=stage-06-runners.js.map

package/dist/boot/stage-07-capability-layer.d.ts

@@ -56,7 +56,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -67,6 +67,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -95,10 +96,12 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -33,6 +33,7 @@ import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
 import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 import { seatText } from "../trace/exit-seat.js";
+import { hasServiceAuth } from "../identity-source.js";
 export async function runStage07(ctx) {
     const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, peerDesk, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore, logger);
@@ -149,7 +150,7 @@ export async function runStage07(ctx) {
         if (inert)
             logger.warn(inert.event, inert.fields);
     }
-    if (config.requirePrincipal && !config.authToken && Object.keys(config.authTokens ?? {}).length === 0 && !config.traceToken)
+    if (config.requirePrincipal && !hasServiceAuth(config) && !config.traceToken)
         logger.warn("multi_tenant_no_service_token", { detail: "REQUIRE_PRINCIPAL is on but no SERVICE_AUTH_TOKEN/authTokens/TRACE_TOKEN — fleet/trace/session-list are owner-gated only (never fleet-wide, tenant-isolation safe). Set a token for cross-tenant ops visibility." });
     const rateLimiter = backend?.rateLimiter
         ? backend.rateLimiter(config.rateLimitPerMin, counterDegradeHook).startRefresh()
@@ -193,7 +194,7 @@ export async function runStage07(ctx) {
     const parkedReviveSurface = checkpointStore && backgroundAgentStore && builtinDefaultScenario ? createParkedReviveSurface(builtinDefaultScenario, { onBackgroundChildEvent: runnerDeps.onBackgroundChildEvent }) : undefined;
     const parkedReviveInheritedGate = parkedReviveSurface && config.durableApproval
         ? createParkedReviveInheritedGate({
-            config, question, logger, localRoot,
+            config, questionSeat: question !== undefined, logger, localRoot,
             approverSeat: createRunnerDepsOnAsk(toolApproval),
             approvalExemptionStore,
             ...(runnerDeps.runtimeCapsResolver ? { resolveRuntimeCaps: runnerDeps.runtimeCapsResolver } : {}),

package/dist/boot/stage-08-reapers.d.ts

@@ -69,7 +69,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -80,6 +80,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -108,10 +109,12 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-08-reapers.js

@@ -3,10 +3,10 @@ import { startOtlpExporter } from "../observability/otel-exporter.js";
 import { startReapers } from "./reapers.js";
 import { startRetentionLane, RETENTION_LEASE_TTL_FACTOR } from "./retention-lane.js";
 import { createLimitSync } from "./limit-sync.js";
-import { runDenySweep } from "./late-binds.js";
+import { runDenySweep, sessionAgeOut } from "./late-binds.js";
 import { seatText } from "../trace/exit-seat.js";
 export function runStage08(ctx) {
-    const { approvalAskAudit, approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, settleErasedSessions, sandboxReaper, handslessRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, runStore, runner, sqlWorkflowRunStore, storeSweep, subRunner, taskAttachmentStore, toolApproval, userInputLedger, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
+    const { approvalAskAudit, approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, settleErasedSessions, sandboxReaper, handslessRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, runStore, runner, sqlWorkflowRunStore, storeSweep, subRunner, taskAttachmentStore, toolApproval, userInputLedger, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap, workflowParkHolderPull } = ctx;
     const reaper = startReapers({
         config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, parkCommits,
         rateLimiter, costQuota, storeSweep, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap,
@@ -14,6 +14,8 @@ export function runStage08(ctx) {
         backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore, userInputLedger, approvalAskAudit,
         ...(sandboxReaper !== undefined ? { sandboxReaper } : {}),
         getRunDenySweep: () => runDenySweep,
+        getSessionAgeOut: () => sessionAgeOut,
+        ...(workflowParkHolderPull !== undefined ? { workflowParkHolderPull } : {}),
     });
     const ttlMs = config.retentionSweep.intervalSec * 1000 * RETENTION_LEASE_TTL_FACTOR;
     const retentionLaneStarted = retentionExecutor !== undefined && retentionLaneStore !== undefined && config.retentionPolicy !== undefined

package/dist/boot/stage-09-leader.d.ts

@@ -9,9 +9,12 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     leaderEndpoint: import("../leader/endpoint.js").LeaderEndpoint | undefined;
     ownerAware: import("../security.js").OwnerAwareSessionStore;
     planCacheProbe: import("../plan-cache-probe.js").PlanCacheProbe;
-    purgeSession: ((sessionId: string, owner: string | null) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
+    purgeSession: ((sessionId: string, owner: string | null, opts?: {
+        readonly ageOut?: import("../session-deletion.js").SessionAgeOutExpectation;
+    }) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
     webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<{
+        sessionKind?: "sidechain" | undefined;
         projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
@@ -88,7 +91,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -99,6 +102,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -127,10 +131,12 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-09-leader.js

@@ -1,8 +1,11 @@
 import { describeStaticWiring } from "@sema-agent/core";
 import { encodeCheckpointScope } from "../security.js";
-import { createWebAdminJwtVerifier } from "../auth-bridge.js";
+import { createWebAdminJwtVerifier, ssoBoundScopeOf } from "../auth-bridge.js";
 import { authBridgeIssuerOf } from "../identity-source.js";
 import { createSessionFaces } from "./session-faces.js";
+import { createSessionAgeOut } from "./session-age-out.js";
+import { bindSessionAgeOut } from "./late-binds.js";
+import * as facts from "../capability-facts.js";
 import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { seatText } from "../trace/exit-seat.js";
@@ -24,6 +27,10 @@ export function runStage09(ctx) {
     if (recoverPendingDeletions !== undefined) {
         void recoverPendingDeletions().catch((err) => logger.warn("session_delete_recovery_unfinished", { outcome: "pending_unreadable", err: seatText("operator-log-text", String(err)), effect: "sessions left in the deleting state by an earlier process stay so (they read as gone); the next start or a repeated DELETE finishes them" }));
     }
+    const ageOutStore = ownerAware.listIdleOfKind !== undefined ? { listIdleOfKind: ownerAware.listIdleOfKind.bind(ownerAware) } : undefined;
+    bindSessionAgeOut(purgeSession !== undefined && ageOutStore !== undefined && facts.sessionKinds({ sessionStorage: ownerAware, purgeSession }).available
+        ? createSessionAgeOut({ store: ageOutStore, purge: purgeSession, retentionMs: () => config.backgroundAgentRetentionMs, logger, metrics })
+        : undefined);
     const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, checkpointCtxSealing, governanceSeams, backend, tracer, usageWindowStore, promptSource: webAdmin.promptSource, onError: runnerDeps.onError, deploymentMods });
     const drainState = { draining: false };
     const authBridgeIssuer = authBridgeIssuerOf(config)?.issuer;
@@ -36,8 +43,10 @@ export function runStage09(ctx) {
             metrics,
         })
         : undefined;
-    if (webAdminJwtVerifier)
-        logger.info("auth_bridge_enabled", { issuer: buildDisplaySafeUrl(authBridgeIssuer ?? "") });
+    if (webAdminJwtVerifier) {
+        const boundScope = ssoBoundScopeOf(config);
+        logger.info("auth_bridge_enabled", { issuer: buildDisplaySafeUrl(authBridgeIssuer ?? ""), scopeAdmission: boundScope === undefined ? { judged: false } : { judged: true, scope: boundScope } });
+    }
     const hookWakeBus = {};
     const wiringSpecTemplate = durableEnabled
         ? { checkpointStore, durableApproval: { scope: encodeCheckpointScope(undefined) } }

package/dist/boot/stage-10-http-server.d.ts

@@ -1,4 +1,36 @@
+import { brainSummary } from "../brain.js";
+import { type ServiceConfig } from "../config.js";
 import type { runStage09 } from "./stage-09-leader.js";
+/**
+ * 启动协议行 `listening` 的字段(行本身是 `observability/logger.ts` 的 {@link import("../observability/logger.js").STARTUP_PROTOCOL_EVENTS} 一员:不随 `LOG_LEVEL`)。
+ * 铸点 = 本文件 listen 之后那一行(全仓唯一,`test/source-hygiene-gate.test.ts` M7),字面量过 {@link exactListeningLine}(键集恰等于本型,可选键与条件展开同算);
+ * 键集登记在自铸登记表 `listeningLineKey`(`satisfies Record<keyof ListeningLine, …>`:键加一个而登记表没跟 / 多一个 ⇒ tsc 红)。只登顶层键;`brain` 段里的键随 `brainSummary` 走,不在本型。
+ *
+ * 绑址两格,一格一个事实:`bindHost` = 本进程**请求**绑的地址(`resolveBindHost` 的答案 —— `BIND_HOST` 经无鉴权自收窄之后的那一只;答案缺席 = 全接口时是说明串);`boundAddress` = 内核**实际**绑上的地址
+ * (`server.address().address` 原样:`::` / `0.0.0.0` / `127.0.0.1` / `::1` …;配置写 `localhost` 时它是解析出的那一只)。口同理:`port` 读的也是绑定者自己的答案。
+ */
+export interface ListeningLine {
+    readonly port: number;
+    readonly bindHost: string;
+    readonly bindHostNote?: string;
+    readonly boundAddress: string;
+    readonly model: ServiceConfig["model"]["id"];
+    readonly brain: ReturnType<typeof brainSummary>;
+    readonly breakerState: string;
+    readonly session: string;
+    readonly memory: string;
+    readonly instanceId: string;
+    readonly rateLimitPerMin: number;
+    readonly rateLimit: string;
+    readonly maxPrincipalCostUsd: number | null;
+    readonly costQuota: string;
+    readonly toolResultStore: string;
+    readonly otel: string | null;
+    readonly perModelKeys: number;
+    readonly sealedModelKeys: number;
+    readonly sealedPoisonedModels: number;
+    readonly workflowRunStore: string;
+}
 export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>): Promise<{
     drainState: import("../fleet/drain-entry.js").DrainState;
     hookWakeBus: {
@@ -8,9 +40,12 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     leaderEndpoint: import("../leader/endpoint.js").LeaderEndpoint | undefined;
     ownerAware: import("../security.js").OwnerAwareSessionStore;
     planCacheProbe: import("../plan-cache-probe.js").PlanCacheProbe;
-    purgeSession: ((sessionId: string, owner: string | null) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
+    purgeSession: ((sessionId: string, owner: string | null, opts?: {
+        readonly ageOut?: import("../session-deletion.js").SessionAgeOutExpectation;
+    }) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
     webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<{
+        sessionKind?: "sidechain" | undefined;
         projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
@@ -87,7 +122,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -98,6 +133,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -126,10 +162,12 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
@@ -186,7 +224,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
-    config: import("../config-types.js").ServiceConfig;
+    config: ServiceConfig;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
     storeEvidence: import("../store-posture.js").StoreEvidence;
     webAdmin: import("./web-admin.js").WebAdminRuntime;