@sema-agent/server 7.150.0 → 7.151.0

package/dist/boot/stage-06-runners.js

@@ -3,11 +3,12 @@ import { Runner, InMemoryToolResultStore, TtlSessionStore, uuidv7, createAllowDe
 import { createEngineSessionRulesSeat } from "../session-rules-seat.js";
 import { outwardPlane } from "../terminal.js";
 import { createSessionTitler } from "../session-titler.js";
+import { sessionOccupantReadOf } from "../http/owner-access.js";
 import { cardRuleScopeRoot } from "../task-cwd.js";
 import { ForkRoutingSessionStore } from "../plugins/fork-routing-session-store.js";
 import { withoutHands } from "../capabilities/hands-lane.js";
 import { isBrandedDeployment } from "../capabilities/brand-identity.js";
-import { hasServiceAuth } from "../identity-source.js";
+import { DEPLOYMENT_SHAPE_PREDICATES } from "../deployment-shape.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
 import { createHookLlm, buildHookFailureText } from "../hooks/hook-llm.js";
 import { assertRetentionLaneWirable } from "./retention-lane.js";
@@ -26,16 +27,21 @@ import { createOrgMemoryAdmissionWiring } from "./org-memory.js";
 import { createGovernanceSeams } from "./governance-seams.js";
 import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-authorizer.js";
 import { mountOrgDeliveryGate } from "./org-delivery.js";
-import { parkedAskRedeem, runStore } from "./late-binds.js";
+import { parkedAskRedeem, runEndedHandoff, runStore } from "./late-binds.js";
+import { createWorkflowParkHolderPull } from "../orchestration/workflow-park-holder.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
 import { retentionSweepRuns } from "../plugins/retention-declaration.js";
 import { createOperatorFaceIncidentSink } from "../memory-incident-sink.js";
 export async function runStage06(ctx) {
     const { backend, backgroundAgentStore, brain, engineDataRoot, peerDesk, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecords, sessionPolicyStore, sessionStore, spaceReclaimer, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
-    const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, workflowParkDecisions, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
+    const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, workflowParkDecisions, heldParksHere, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore, getRunEndedHandoff: () => runEndedHandoff });
+    backend?.bindWorkflowRunReader?.(workflowRunStore ?? "none");
     const parkCommitted = backend?.checkpoint && config.durableApproval ? createParkCommitWatch(backend.checkpoint(logger)) : undefined;
     const checkpointStore = parkCommitted?.store;
     const parkCommits = parkCommitted?.watch;
+    const workflowParkHolderPull = heldParksHere !== undefined && workflowParkDecisions !== undefined && workflowAgentSessionIndex !== undefined && workflowRunStore !== undefined && checkpointStore !== undefined
+        ? createWorkflowParkHolderPull({ held: heldParksHere, decisions: workflowParkDecisions, checkpointStore, workflowAgentSessionIndex, workflowRunStore, warn: (event, fields) => logger.warn(event, fields) })
+        : undefined;
     const checkpointCtxSealing = webAdmin.checkpointCtxSealing;
     if (checkpointStore !== undefined) {
         if (checkpointCtxSealing === undefined)
@@ -115,7 +121,7 @@ export async function runStage06(ctx) {
         : undefined;
     for (const w of buildConsolidationValveAudit({
         valve: consolidationValve,
-        hasServiceAuth: hasServiceAuth(config),
+        credentialGateSource: DEPLOYMENT_SHAPE_PREDICATES.credentialGateSource.holds(config),
         allowUnauthedWrites: config.allowUnauthedWrites ?? false,
     }).warnings) {
         logger.warn(w.tag, { detail: w.detail });
@@ -186,9 +192,11 @@ export async function runStage06(ctx) {
     };
     const clipHookErr = (s) => (s ?? "").slice(0, 300);
     const titleCapable = sessionStore;
-    const sessionTitler = config.sessionAutoTitle && titleCapable.setTitleIfNull && titleCapable.probeTitle
+    const titleOccupantOf = sessionOccupantReadOf(sessionStore);
+    const sessionTitler = config.sessionAutoTitle && titleCapable.setTitleIfNull && titleCapable.probeTitle && titleOccupantOf
         ? createSessionTitler({
             setTitleIfNull: titleCapable.setTitleIfNull.bind(sessionStore),
+            occupantOf: titleOccupantOf,
             probeTitle: titleCapable.probeTitle.bind(sessionStore),
             llm: hookLlm,
             logger,
@@ -226,6 +234,7 @@ export async function runStage06(ctx) {
             sharedMemoryStores: sharedMemoryStore ? sharedMemoryStore : undefined,
             engineDataRoot,
             peerDesk,
+            runtimeCapsResolver,
         }),
         sessionStore: subRunnerSessions,
         onBackgroundChildEvent: runnerDeps.onBackgroundChildEvent ? runnerDeps.onBackgroundChildEvent : undefined,
@@ -235,6 +244,6 @@ export async function runStage06(ctx) {
     };
     const subRunner = new Runner(subRunnerDeps);
     const settleErasedSessions = createSessionEraseSettler({ attachments: taskAttachmentStore, spaceReclaimer, logger });
-    return { ...ctx, sessionEraser, settleErasedSessions, approvalAskAudit, approvalExemptionStore, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekReading, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowParkDecisions, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate };
+    return { ...ctx, sessionEraser, settleErasedSessions, approvalAskAudit, approvalExemptionStore, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, durableEnabled, elicitation, fleetBus, governanceSeams, handslessRunner, hookAgent, hookAgentRunner, hookLlm, mcpRevocations, memoryConsolidationFaces, memoryOptOutGrantStore, orgMemoryAdmission, outcomeSink, principalCaps, question, retentionExecutor, retentionLaneStore, runner, runnerDeps, runtimeCapsPeekReading, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionTitler, sharedMemoryStore, sqlWorkflowRunStore, streamApprovalGate, subRunner, subagentSteerRegistry, toolApproval, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowParkDecisions, workflowParkHolderPull, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate };
 }
 //# sourceMappingURL=stage-06-runners.js.map

package/dist/boot/stage-07-capability-layer.d.ts

@@ -56,7 +56,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -67,6 +67,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -95,10 +96,12 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -33,6 +33,7 @@ import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
 import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 import { seatText } from "../trace/exit-seat.js";
+import { hasServiceAuth } from "../identity-source.js";
 export async function runStage07(ctx) {
     const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, peerDesk, durableEnabled, instanceId, localRoot, logger, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore, logger);
@@ -149,7 +150,7 @@ export async function runStage07(ctx) {
         if (inert)
             logger.warn(inert.event, inert.fields);
     }
-    if (config.requirePrincipal && !config.authToken && Object.keys(config.authTokens ?? {}).length === 0 && !config.traceToken)
+    if (config.requirePrincipal && !hasServiceAuth(config) && !config.traceToken)
         logger.warn("multi_tenant_no_service_token", { detail: "REQUIRE_PRINCIPAL is on but no SERVICE_AUTH_TOKEN/authTokens/TRACE_TOKEN — fleet/trace/session-list are owner-gated only (never fleet-wide, tenant-isolation safe). Set a token for cross-tenant ops visibility." });
     const rateLimiter = backend?.rateLimiter
         ? backend.rateLimiter(config.rateLimitPerMin, counterDegradeHook).startRefresh()

package/dist/boot/stage-08-reapers.d.ts

@@ -69,7 +69,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -80,6 +80,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -108,10 +109,12 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-08-reapers.js

@@ -3,10 +3,10 @@ import { startOtlpExporter } from "../observability/otel-exporter.js";
 import { startReapers } from "./reapers.js";
 import { startRetentionLane, RETENTION_LEASE_TTL_FACTOR } from "./retention-lane.js";
 import { createLimitSync } from "./limit-sync.js";
-import { runDenySweep } from "./late-binds.js";
+import { runDenySweep, sessionAgeOut } from "./late-binds.js";
 import { seatText } from "../trace/exit-seat.js";
 export function runStage08(ctx) {
-    const { approvalAskAudit, approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, settleErasedSessions, sandboxReaper, handslessRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, runStore, runner, sqlWorkflowRunStore, storeSweep, subRunner, taskAttachmentStore, toolApproval, userInputLedger, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
+    const { approvalAskAudit, approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, settleErasedSessions, sandboxReaper, handslessRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, runStore, runner, sqlWorkflowRunStore, storeSweep, subRunner, taskAttachmentStore, toolApproval, userInputLedger, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap, workflowParkHolderPull } = ctx;
     const reaper = startReapers({
         config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, parkCommits,
         rateLimiter, costQuota, storeSweep, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap,
@@ -14,6 +14,8 @@ export function runStage08(ctx) {
         backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore, userInputLedger, approvalAskAudit,
         ...(sandboxReaper !== undefined ? { sandboxReaper } : {}),
         getRunDenySweep: () => runDenySweep,
+        getSessionAgeOut: () => sessionAgeOut,
+        ...(workflowParkHolderPull !== undefined ? { workflowParkHolderPull } : {}),
     });
     const ttlMs = config.retentionSweep.intervalSec * 1000 * RETENTION_LEASE_TTL_FACTOR;
     const retentionLaneStarted = retentionExecutor !== undefined && retentionLaneStore !== undefined && config.retentionPolicy !== undefined

package/dist/boot/stage-09-leader.d.ts

@@ -9,9 +9,12 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     leaderEndpoint: import("../leader/endpoint.js").LeaderEndpoint | undefined;
     ownerAware: import("../security.js").OwnerAwareSessionStore;
     planCacheProbe: import("../plan-cache-probe.js").PlanCacheProbe;
-    purgeSession: ((sessionId: string, owner: string | null) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
+    purgeSession: ((sessionId: string, owner: string | null, opts?: {
+        readonly ageOut?: import("../session-deletion.js").SessionAgeOutExpectation;
+    }) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
     webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<{
+        sessionKind?: "sidechain" | undefined;
         projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
@@ -88,7 +91,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -99,6 +102,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -127,10 +131,12 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-09-leader.js

@@ -1,8 +1,11 @@
 import { describeStaticWiring } from "@sema-agent/core";
 import { encodeCheckpointScope } from "../security.js";
-import { createWebAdminJwtVerifier } from "../auth-bridge.js";
+import { createWebAdminJwtVerifier, ssoBoundScopeOf } from "../auth-bridge.js";
 import { authBridgeIssuerOf } from "../identity-source.js";
 import { createSessionFaces } from "./session-faces.js";
+import { createSessionAgeOut } from "./session-age-out.js";
+import { bindSessionAgeOut } from "./late-binds.js";
+import * as facts from "../capability-facts.js";
 import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { seatText } from "../trace/exit-seat.js";
@@ -24,6 +27,10 @@ export function runStage09(ctx) {
     if (recoverPendingDeletions !== undefined) {
         void recoverPendingDeletions().catch((err) => logger.warn("session_delete_recovery_unfinished", { outcome: "pending_unreadable", err: seatText("operator-log-text", String(err)), effect: "sessions left in the deleting state by an earlier process stay so (they read as gone); the next start or a repeated DELETE finishes them" }));
     }
+    const ageOutStore = ownerAware.listIdleOfKind !== undefined ? { listIdleOfKind: ownerAware.listIdleOfKind.bind(ownerAware) } : undefined;
+    bindSessionAgeOut(purgeSession !== undefined && ageOutStore !== undefined && facts.sessionKinds({ sessionStorage: ownerAware, purgeSession }).available
+        ? createSessionAgeOut({ store: ageOutStore, purge: purgeSession, retentionMs: () => config.backgroundAgentRetentionMs, logger, metrics })
+        : undefined);
     const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, checkpointCtxSealing, governanceSeams, backend, tracer, usageWindowStore, promptSource: webAdmin.promptSource, onError: runnerDeps.onError, deploymentMods });
     const drainState = { draining: false };
     const authBridgeIssuer = authBridgeIssuerOf(config)?.issuer;
@@ -36,8 +43,10 @@ export function runStage09(ctx) {
             metrics,
         })
         : undefined;
-    if (webAdminJwtVerifier)
-        logger.info("auth_bridge_enabled", { issuer: buildDisplaySafeUrl(authBridgeIssuer ?? "") });
+    if (webAdminJwtVerifier) {
+        const boundScope = ssoBoundScopeOf(config);
+        logger.info("auth_bridge_enabled", { issuer: buildDisplaySafeUrl(authBridgeIssuer ?? ""), scopeAdmission: boundScope === undefined ? { judged: false } : { judged: true, scope: boundScope } });
+    }
     const hookWakeBus = {};
     const wiringSpecTemplate = durableEnabled
         ? { checkpointStore, durableApproval: { scope: encodeCheckpointScope(undefined) } }

package/dist/boot/stage-10-http-server.d.ts

@@ -40,9 +40,12 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     leaderEndpoint: import("../leader/endpoint.js").LeaderEndpoint | undefined;
     ownerAware: import("../security.js").OwnerAwareSessionStore;
     planCacheProbe: import("../plan-cache-probe.js").PlanCacheProbe;
-    purgeSession: ((sessionId: string, owner: string | null) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
+    purgeSession: ((sessionId: string, owner: string | null, opts?: {
+        readonly ageOut?: import("../session-deletion.js").SessionAgeOutExpectation;
+    }) => Promise<import("../session-deletion.js").SessionPurgeOutcome>) | undefined;
     webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string, opts?: import("../audit.js").SessionAuditReadOpts) => Promise<{
+        sessionKind?: "sidechain" | undefined;
         projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
@@ -119,7 +122,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     sendUserFileToolSpec: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
     sessionTitler: import("../session-titler.js").SessionTitler | undefined;
     sharedMemoryStore: import("../plugins/shared-memory-store-sql.js").SqlSharedMemoryStore | undefined;
-    sqlWorkflowRunStore: import("@sema-agent/core").WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     streamApprovalGate: import("../tool-approval.js").StreamApprovalGate<import("../approval-gate-currency.js").GateCurrencyStore>;
     subRunner: import("@sema-agent/core").Runner;
     subagentSteerRegistry: import("../orchestration/subagent-steer.js").SubagentSteerRegistry;
@@ -130,6 +133,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     workflowJournalStore: import("../plugins/store-backend.js").ServiceWorkflowJournalStore | undefined;
     workflowModelAllowlistSnapshot: readonly string[];
     workflowParkDecisions: import("../orchestration/workflow-park-decision.js").WorkflowParkDecisionStore | undefined;
+    workflowParkHolderPull: (() => Promise<import("../orchestration/workflow-park-holder.js").HolderPullTally>) | undefined;
     workflowNotifyGate: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyGate | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowRecoverOpts: {
@@ -158,10 +162,12 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-10-http-server.js

@@ -35,17 +35,14 @@ function exactListeningLine(line) {
     return line;
 }
 export async function runStage10(ctx) {
-    const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, belowTaskChainPatterns, deploymentMods, deploymentModsLoaded, deviceLane, drainState, dropSessionScopedOf, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, sandboxCapacity, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportStores, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekReading, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sessionResidentBackground, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
+    const { peerDesk, approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, checkpointCtxSealing, parkCommits, config, webAdmin, consolidationValve, costQuota, belowTaskChainPatterns, deploymentMods, deploymentModsLoaded, deviceLane, drainState, dropSessionScopedOf, durableEnabled, elicitation, fenceSessionOwner, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, loadedSkills, localRoot, logger, lspManager, mcpRevocations, sandboxCapacity, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportStores, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, memorySyncRunner, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekReading, sandboxGitPlane, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionTitler, sessionWatchRegistry, sessionBindings, sessionResidentBackground, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowParkDecisions, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable, orgDeliveryGate } = ctx;
     const stores = {
         runStore,
-        resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
         approvalExemptionStore: approvalExemptionStore ? approvalExemptionStore : undefined,
         approvalNonceStore: approvalNonceStore ? approvalNonceStore : undefined,
         checkpointStore,
         checkpointCtxSealing,
-        sessionPolicyStore: sessionPolicyStore ? sessionPolicyStore : undefined,
         ruleConsent,
-        fileHistoryStore: fileHistoryStore ? fileHistoryStore : undefined,
         toolResultStore,
         taskAttachmentStore: taskAttachmentStore ? taskAttachmentStore : undefined,
         backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
@@ -88,7 +85,7 @@ export async function runStage10(ctx) {
         sessionAudit,
         routeJudgeBrain: brain,
         purgeSession: purgeSession ? purgeSession : undefined,
-        bindSessionInheritEnv: config.remoteExec.provider === "host" ? setSessionInheritEnv : undefined,
+        sessionBindings,
         dropSessionScopedOf,
         subagentTaskOutput: (handle, access) => backgroundAgentOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
         taskHandleOutput: (handle, access) => taskHandleOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
@@ -214,7 +211,7 @@ export async function runStage10(ctx) {
         config, logger, metrics, localRoot, scenarios, loadedSkills, principalCaps, centerRuntimeCapsResolver,
         peerDesk,
         getKeyResolver: () => webAdmin.getKeyResolver(),
-        taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
+        taskAttachmentStore, perSessionCwd, fenceSessionOwner,
         hookLlm, hookAgent, belowTaskChainPatterns, fleetBus, hookWakeBus, ownerAware, taskLimitCaps, taskTimeoutSec,
         historyAnchors: resumeAnchorStore && runStore ? { anchors: resumeAnchorStore, runs: runStore } : undefined,
         selectEnvTool, sendUserFileToolSpec, memoryEngine, memorySyncRunner, durableEnabled, approvalExemptionStore,

package/dist/boot/web-admin.js

@@ -13,7 +13,7 @@ import { centerScenarios, centerScenarioDetails } from "../capabilities/scenario
 import { isRosterGateArmed } from "../config.js";
 import { DEPLOYMENT_SHAPE_PREDICATES } from "../deployment-shape.js";
 import { defaultLkgPath, defaultSkillCacheDir, saveLkg, loadLkg, preIdentityLkgLeftover, PRE_IDENTITY_LKG_REASON } from "../config-lkg.js";
-import { answerStillCurrent, centerStateBin, credentialIdentityNow, judgeCenterCredentialAtBoot } from "../center-credential.js";
+import { answerStillCurrent, buildAssertionTokenBootFields, centerStateBin, credentialIdentityNow, judgeCenterCredentialAtBoot } from "../center-credential.js";
 import { createCenterConfigTier } from "../center-config-tier.js";
 import { buildCenterCredentialHealthView, createCenterCredentialRenewer } from "../center-credential-renewer.js";
 import { centerManagedConfigKeys } from "../web-admin-client/apply-effective.js";
@@ -103,6 +103,8 @@ export async function createWebAdminRuntime(ctx) {
     if (bootVerdict?.verdict === "loud") {
         logger.error("center_credential_unreadable", { key: WEB_ADMIN_ENV.tokenFile, failure: bootVerdict.failure, reason: bootVerdict.reason, effect: bootVerdict.effect });
     }
+    if (cc !== undefined)
+        logger.info("center_assertion_token", buildAssertionTokenBootFields(cc.assertionToken));
     const credentialRenewer = cc !== undefined && cc.credential.origin.from === "file"
         ? createCenterCredentialRenewer({ source: cc.credential, centerUrl: cc.baseUrl, leadMs: config.centerCredentialRenewLeadMs, logger })
         : undefined;

package/dist/boot/workflow-orchestration.d.ts

@@ -11,11 +11,12 @@
  *     → `workflowRunStore`(包装体)的顺序是数据依赖链,不可重排。
  *  3. `getRunStore()` 是晚绑取值(runStore 在本段之后构造),原文靠同作用域前向引用。
  */
-import { type WorkflowRun, type WorkflowRunStore } from "@sema-agent/core";
+import { type WorkflowRun } from "@sema-agent/core";
 import type { ServiceConfig } from "../config.js";
 import { FleetEventBus } from "../fleet/fleet-bus.js";
 import { type WorkflowAgentSessionIndex } from "../orchestration/workflow-agent-session-index.js";
 import type { WorkflowParkDecisionStore } from "../orchestration/workflow-park-decision.js";
+import { HeldParksHere } from "../orchestration/workflow-park-holder.js";
 import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import { type WorkflowCompletionInbox } from "../orchestration/workflow-completion-inbox.js";
@@ -31,9 +32,12 @@ export interface WorkflowOrchestrationCtx {
     backend: StoreBackend | undefined;
     /** 晚绑(runStore 在本段之后构造)——见文件头「位置即契约」③。 */
     getRunStore: () => ReturnType<StoreBackend["run"]> | undefined;
+    /** 晚绑(HTTP 服务的产物,第 10 段之后才有):run 收场送达里把「带着已受理、未交付的决定收场」的那条 run 的行交给续跑车道的那一手。
+     *  抛 = 需要重投(会话正忙 / 店瞬态 / 收编弧在跑 / 本座还没绑)⇒ 不 ack、`recover` 在维护拍上重投。契约属主 = `http/resume-legs.ts` 的 `handOverRunEndedDecisions`。 */
+    getRunEndedHandoff: () => ((runId: string) => Promise<void>) | undefined;
 }
 export declare function createWorkflowOrchestration(ctx: WorkflowOrchestrationCtx): {
-    sqlWorkflowRunStore: WorkflowRunStore | undefined;
+    sqlWorkflowRunStore: import("../plugins/workflow-run-store-sql.js").SqlWorkflowRunStore | undefined;
     workflowNotifyJournal: import("../orchestration/workflow-notify-journal.js").WorkflowNotifyJournalStore | undefined;
     workflowCompletionInbox: WorkflowCompletionInbox | undefined;
     deliverWorkflowCompletion: (p: WorkflowCompletionPayload) => Promise<void>;
@@ -51,5 +55,6 @@ export declare function createWorkflowOrchestration(ctx: WorkflowOrchestrationCt
     };
     workflowAgentSessionIndex: WorkflowAgentSessionIndex | undefined;
     workflowParkDecisions: WorkflowParkDecisionStore | undefined;
+    heldParksHere: HeldParksHere | undefined;
 };
 //# sourceMappingURL=workflow-orchestration.d.ts.map

package/dist/boot/workflow-orchestration.js

@@ -2,6 +2,8 @@ import { FileWorkflowRunStore, InMemoryWorkflowRunStore } from "@sema-agent/core
 import { join } from "node:path";
 import { FleetEventBus } from "../fleet/fleet-bus.js";
 import { LocalWorkflowAgentSessionIndex } from "../orchestration/workflow-agent-session-index.js";
+import { FencedWorkflowRecordStore } from "../orchestration/workflow-record-fence.js";
+import { HeldParksHere } from "../orchestration/workflow-park-holder.js";
 import { createCorruptReadFailOpenSeat } from "../observability/corrupt-read-seat.js";
 import { FileWorkflowCompletionInbox, InMemoryWorkflowCompletionInbox, buildWorkflowCompleteInboxEntry, resolveCompletionRoute } from "../orchestration/workflow-completion-inbox.js";
 import { FileWorkflowNotifyJournalStore, JournalingWorkflowRunStore, WorkflowNotifyGate } from "../orchestration/workflow-notify-journal.js";
@@ -10,16 +12,16 @@ import { WorkflowAgentRegistry } from "../orchestration/workflow-agent-steer.js"
 import { workflowJournalOf } from "../plugins/store-backend.js";
 import { seatText } from "../trace/exit-seat.js";
 export function createWorkflowOrchestration(ctx) {
-    const { config, logger, metrics, localRoot, backend, getRunStore } = ctx;
+    const { config, logger, metrics, localRoot, backend, getRunStore, getRunEndedHandoff } = ctx;
     const workflowBootAtMs = Date.now();
     const sqlWorkflowRunStore = config.workflowRunStoreBackend === "auto" ? backend?.workflowRun?.((msg, meta) => logger.warn(msg, meta)) : undefined;
     const baseWorkflowRunStore = config.selfOrchestrationEnabled
         ? config.workflowRunStoreBackend === "memory"
-            ? new InMemoryWorkflowRunStore()
+            ? new FencedWorkflowRecordStore(new InMemoryWorkflowRunStore())
             : (sqlWorkflowRunStore ??
-                new FileWorkflowRunStore(join(config.localDataRoot ?? localRoot, "workflows"), {
+                new FencedWorkflowRecordStore(new FileWorkflowRunStore(join(config.localDataRoot ?? localRoot, "workflows"), {
                     onCorruptRead: createCorruptReadFailOpenSeat("server.workflow-run.corrupt-record-skipped"),
-                }))
+                })))
         : undefined;
     const workflowNotifyJournal = config.selfOrchestrationEnabled && config.workflowRunStoreBackend !== "memory"
         ? (sqlWorkflowRunStore ? backend.notifyJournal() : new FileWorkflowNotifyJournalStore(join(config.localDataRoot ?? localRoot, "workflows"), undefined))
@@ -36,6 +38,20 @@ export function createWorkflowOrchestration(ctx) {
             ...(p.sourceTaskId ? { sourceTaskId: p.sourceTaskId } : {}),
         });
         metrics.inc("workflow_runs_total", { status: p.status });
+        if (workflowParkDecisions !== undefined) {
+            const handOver = getRunEndedHandoff();
+            try {
+                if (handOver === undefined)
+                    throw new Error(`workflow run ${p.runId}: the run-ended decision handoff is not bound yet (the HTTP server is not up) — leaving the completion pending for the next recovery sweep`);
+                await handOver(p.runId);
+            }
+            catch (err) {
+                if (workflowNotifyGate !== undefined)
+                    throw err;
+                metrics.inc("workflow_park_handoff_total", { result: "not_redelivered" });
+                logger.warn("workflow_park_handoff_not_redelivered", { runId: p.runId, err: seatText("operator-log-text", String(err)) });
+            }
+        }
         if (!workflowCompletionInbox)
             return;
         try {
@@ -61,9 +77,10 @@ export function createWorkflowOrchestration(ctx) {
                 ? backend.workflowAgentSessionIndex()
                 : new LocalWorkflowAgentSessionIndex(join(config.localDataRoot ?? localRoot, "workflows"), undefined))
         : undefined;
-    const workflowParkDecisions = config.selfOrchestrationEnabled && backend !== undefined && (sqlWorkflowRunStore !== undefined || backend.kind === "local") ? backend.workflowParkDecisions?.() : undefined;
+    const workflowParkDecisions = config.selfOrchestrationEnabled && backend !== undefined && baseWorkflowRunStore !== undefined && (sqlWorkflowRunStore !== undefined || backend.kind === "local") ? backend.workflowParkDecisions?.(baseWorkflowRunStore) : undefined;
+    const heldParksHere = workflowParkDecisions !== undefined ? new HeldParksHere() : undefined;
     const workflowRunStore = baseWorkflowRunStore
-        ? new JournalingWorkflowRunStore(baseWorkflowRunStore, workflowNotifyGate, fleetBus, workflowAgentSessionIndex)
+        ? new JournalingWorkflowRunStore(baseWorkflowRunStore, workflowNotifyGate, fleetBus, workflowAgentSessionIndex, heldParksHere)
         : undefined;
     const replicaLocalNotifyJournal = workflowNotifyJournal instanceof FileWorkflowNotifyJournalStore;
     const workflowRecoverOpts = {
@@ -78,7 +95,7 @@ export function createWorkflowOrchestration(ctx) {
     return {
         sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion,
         workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink,
-        workflowAgentRegistry, subagentSteerRegistry, workflowRecoverOpts, workflowAgentSessionIndex, workflowParkDecisions,
+        workflowAgentRegistry, subagentSteerRegistry, workflowRecoverOpts, workflowAgentSessionIndex, workflowParkDecisions, heldParksHere,
     };
 }
 //# sourceMappingURL=workflow-orchestration.js.map

package/dist/bounded-rotation.d.ts

@@ -0,0 +1,29 @@
+/**
+ * **维护拍上有界轮转扫一组候选**的唯一实现(两个调用方:审批族悬挂 ask 的跨副本执行通知 `ToolApprovalCoordinator.pollSuspendedDecisions`、
+ * workflow 停驻卡持有进程的拉取腿 `orchestration/workflow-park-holder.ts`)。
+ *
+ * 判据(审批族 codex R3 / R5 的两条修,原样搬来):
+ *  · **帽**:每拍最多 `maxPerTick` 条;**预算**:每拍最多 `budgetMs` 墙钟,超了当场停(剩下的下拍接着扫)—— 串行点读在慢店上不许把「一拍的延迟」变成分钟级;
+ *  · **轮转**:起点是「上一拍扫到第几个」的下一位 —— 没有它,帽把同样的前 N 条锁成永久前缀,后面的永远轮不到;
+ *  · 游标是**整数偏移**,不是条目身份:上一拍最后碰的那条恰好消失时,按身份找位置会塌回队首(永久饥饿);偏移只回答「扫到第几个」,集合变了也只是近似。
+ * 多层(`tiers`):按层序扫,每层各一只游标;前一层吃满帽 / 预算,后一层这一拍轮不到。截断的那一拍由调用方响亮报(`truncated` / `backlog`)。
+ */
+/** 一层候选的轮转游标(调用方持有,跨拍存活)。 */
+export interface RotationCursor {
+    offset: number;
+}
+export interface RotationLimits {
+    readonly maxPerTick: number;
+    readonly budgetMs: number;
+}
+/** 一拍的读数:`visited` = 本拍真处理的条数;`backlog` = 还没轮到的(下界 0);`truncated` = 帽 / 预算截断位。 */
+export interface RotationTally {
+    readonly visited: number;
+    readonly backlog: number;
+    readonly truncated: boolean;
+}
+export declare function boundedRotation<T>(tiers: ReadonlyArray<{
+    readonly items: readonly T[];
+    readonly cursor: RotationCursor;
+}>, limits: RotationLimits, visit: (item: T) => Promise<void>, now?: () => number): Promise<RotationTally>;
+//# sourceMappingURL=bounded-rotation.d.ts.map

package/dist/bounded-rotation.js

@@ -0,0 +1,24 @@
+export async function boundedRotation(tiers, limits, visit, now = Date.now) {
+    const ordered = [];
+    tiers.forEach(({ items, cursor }, tier) => {
+        const start = items.length > 0 ? cursor.offset % items.length : 0;
+        for (const item of [...items.slice(start), ...items.slice(0, start)])
+            ordered.push({ item, tier, start });
+    });
+    const deadlineMs = now() + limits.budgetMs;
+    const visitedPerTier = tiers.map(() => 0);
+    let visited = 0;
+    let truncated = false;
+    for (const { item, tier, start } of ordered) {
+        if (visited >= limits.maxPerTick || now() >= deadlineMs) {
+            truncated = true;
+            break;
+        }
+        visited++;
+        tiers[tier].cursor.offset = start + ++visitedPerTier[tier];
+        await visit(item);
+    }
+    const total = tiers.reduce((n, t) => n + t.items.length, 0);
+    return { visited, backlog: Math.max(0, total - visited), truncated };
+}
+//# sourceMappingURL=bounded-rotation.js.map