@sema-agent/server 7.150.0 → 7.152.0

package/dist/boot/runner-deps.js

@@ -65,10 +65,6 @@ export function createEngineNoticeForwarder(logger, router = defaultEngineNotice
 export function installDefaultEngineNoticeSeat(logger, metrics) {
     setDefaultEngineNoticeSeat(createEngineNoticeForwarder(logger, defaultEngineNoticeRouter, metrics));
 }
-export function createEngineNoticeSeat(logger, router = defaultEngineNoticeRouter) {
-    const warn = logger?.warn?.bind(logger);
-    return warn ? { onNotice: createEngineNoticeForwarder({ warn }, router) } : {};
-}
 export const CROSS_BOUNDARY_POSTURE_REQUIRES_PRINCIPAL = { multi_tenant: true, single_user: false };
 export function crossBoundaryPostureOf(requirePrincipal) {
     for (const w of Object.keys(CROSS_BOUNDARY_POSTURE_REQUIRES_PRINCIPAL)) {
@@ -111,9 +107,8 @@ export function announceReadDenyRows(config, logger) {
     announcedReadDenyRows.set(config, key);
     auditReadDenyAnchoring({ rows: config.readDenyPatterns, logger });
 }
-export function createSharedRunnerDeps(ctx) {
-    announceReadDenyRows(ctx.config, ctx.logger);
-    const shared = {
+export function createDeploymentPlaneDeps(ctx, lane) {
+    const plane = {
         brain: ctx.brain,
         onNotice: createEngineNoticeForwarder(ctx.logger, defaultEngineNoticeRouter, ctx.metrics),
         tiers: ctx.config.tiers,
@@ -123,28 +118,37 @@ export function createSharedRunnerDeps(ctx) {
         tracer: ctx.tracer,
         promptSource: ctx.promptSource,
         ...buildDeploymentPostureSeats(ctx.config),
+        mods: ctx.deploymentMods,
+        hands: buildHandsBand(ctx.config, lane.commitCoAuthor),
+        usageWindows: ctx.config.usageWindows ? ctx.config.usageWindows : undefined,
+        usageWindowStore: ctx.usageWindowStore ? ctx.usageWindowStore : undefined,
+        memoryEngineDir: ctx.engineDataRoot,
+        compliancePostureResolver: ctx.governanceSeams.compliancePostureResolver,
+        lockedConfig: ctx.governanceSeams.lockedConfig,
+        retentionPolicy: ctx.governanceSeams.retentionPolicy,
+        mcpRevocations: ctx.mcpRevocations ? ctx.mcpRevocations : undefined,
+        runtimeCapsResolver: ctx.runtimeCapsResolver ? ctx.runtimeCapsResolver : undefined,
+        onError: ctx.onError,
+    };
+    return plane;
+}
+export function createSharedRunnerDeps(ctx) {
+    announceReadDenyRows(ctx.config, ctx.logger);
+    const shared = {
+        ...createDeploymentPlaneDeps(ctx, { commitCoAuthor: ctx.commitCoAuthor }),
         executionEnvFactory: ctx.executionEnvFactory ? ctx.executionEnvFactory : undefined,
         lspManager: ctx.lspManager ? ctx.lspManager : undefined,
         backgroundAgentStore: ctx.backgroundAgentStore ? ctx.backgroundAgentStore : undefined,
         mailboxStore: ctx.mailboxStore ? ctx.mailboxStore : undefined,
         rosterStore: ctx.rosterStore ? ctx.rosterStore : undefined,
-        mods: ctx.deploymentMods,
-        hands: buildHandsBand(ctx.config, ctx.commitCoAuthor),
         toolResultStore: ctx.toolResultStore,
         checkpointStore: ctx.checkpointStore ? ctx.checkpointStore : undefined,
         fileHistoryStore: ctx.fileHistoryStore ? ctx.fileHistoryStore : undefined,
-        fileHistoryCapture: coreFileHistoryCaptureSeat(ctx.fileHistoryStore, ctx.config.fileHistoryCapture),
+        fileHistoryCapture: coreFileHistoryCaptureSeat(ctx.fileHistoryStore !== undefined, ctx.config.fileHistoryCapture),
         sessionPolicyStore: ctx.sessionPolicyStore ? ctx.sessionPolicyStore : undefined,
         memoryScopeAdmission: ctx.orgMemoryAdmission.memoryScopeAdmission ? ctx.orgMemoryAdmission.memoryScopeAdmission : undefined,
         deploymentMemoryScopes: ctx.orgMemoryAdmission.deploymentMemoryScopes && ctx.orgMemoryAdmission.deploymentMemoryScopes.length > 0 ? ctx.orgMemoryAdmission.deploymentMemoryScopes : undefined,
-        usageWindows: ctx.config.usageWindows ? ctx.config.usageWindows : undefined,
-        usageWindowStore: ctx.usageWindowStore ? ctx.usageWindowStore : undefined,
         sharedMemoryStores: ctx.sharedMemoryStores ? ctx.sharedMemoryStores : undefined,
-        memoryEngineDir: ctx.engineDataRoot,
-        compliancePostureResolver: ctx.governanceSeams.compliancePostureResolver,
-        lockedConfig: ctx.governanceSeams.lockedConfig,
-        retentionPolicy: ctx.governanceSeams.retentionPolicy,
-        mcpRevocations: ctx.mcpRevocations ? ctx.mcpRevocations : undefined,
         peerSeat: ctx.peerDesk.seat,
     };
     return shared;
@@ -153,10 +157,81 @@ export function localOwnerRulesDeclared(config, permissionRuleStore) {
     return permissionRuleStore !== undefined && !DEPLOYMENT_SHAPE_PREDICATES.multiTenant.holds(config);
 }
 export function createRunnerDeps(ctx) {
-    const { config, logger, metrics, localRoot, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine, sessionCaptureRecords, memorySyncRunner, runtimeCapsResolver, permissionRuleStore, fleetBus, workflowRunStore, workflowJournalStore, workflowAgentRegistry, workflowNotifyGate, deliverWorkflowCompletion, } = ctx;
+    const { config, logger, metrics, localRoot, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine, sessionCaptureRecords, memorySyncRunner, permissionRuleStore, fleetBus, workflowRunStore, workflowJournalStore, workflowAgentRegistry, workflowNotifyGate, deliverWorkflowCompletion, } = ctx;
     const peerSessionLister = sessionStore.listSessionRows?.bind(sessionStore);
     const memoryEngineIncident = createMemoryEngineIncidentSink({ logger, metrics });
-    const sharedRunnerDeps = createSharedRunnerDeps(ctx);
+    const onError = (err, ctx) => {
+        const codeField = codeFieldOf(err);
+        if (ctx.phase === "degraded") {
+            logger.warn("task_degraded", { sessionId: ctx.sessionId, ...codeField, info: seatText("operator-log-text", String(err)) });
+            return;
+        }
+        if (ctx.phase === "prompt-constitution") {
+            logger.warn("prompt_composition_warning", { sessionId: ctx.sessionId, ...codeField, info: seatText("operator-log-text", String(err)) });
+            return;
+        }
+        if (ctx.phase === "rewind") {
+            const code = rewindFailureCode(err);
+            logger.warn("rewind_snapshot_failed", { sessionId: ctx.sessionId, code, info: seatText("operator-log-text", String(err)) });
+            metrics.inc("rewind_snapshot_failed_total", { code });
+            return;
+        }
+        if (ctx.phase === "memory") {
+            memoryEngineIncident(err, ctx.sessionId !== undefined ? { sessionId: ctx.sessionId } : undefined);
+            return;
+        }
+        if (ctx.phase === "mcp") {
+            logger.warn("mcp_server_unavailable", { sessionId: ctx.sessionId, kind: errorKindOf(err), ...codeField, info: seatText("operator-log-text", buildShownUrlsInText(String(err))) });
+            metrics.inc("mcp_server_unavailable_total");
+            return;
+        }
+        if (ctx.phase === "a2a") {
+            logger.warn("a2a_peer_unavailable", { sessionId: ctx.sessionId, kind: errorKindOf(err), ...codeField, info: seatText("operator-log-text", buildShownUrlsInText(String(err))) });
+            metrics.inc("a2a_peer_unavailable_total");
+            return;
+        }
+        if (ctx.phase === "prompt-cache") {
+            const classification = ctx.classification;
+            const causeLevel = classification === undefined ? undefined : PROMPT_CACHE_BREAK_LEVELS.get(classification);
+            const level = classification === undefined ? "warn" : (causeLevel ?? "error");
+            const fields = {
+                sessionId: ctx.sessionId,
+                confirmed: classification !== undefined,
+                ...(classification !== undefined ? { classification, classificationKnown: causeLevel !== undefined } : {}),
+                ...codeField,
+                err: seatText("operator-log-text", String(err)),
+            };
+            metrics.inc("prompt_cache_low_hit_total", {
+                ...(classification !== undefined ? { classification: causeLevel !== undefined ? classification : "unknown" } : {}),
+                level,
+            });
+            if (level === "warn")
+                logger.warn("prompt_cache_break", fields);
+            else
+                logger.error("prompt_cache_break", fields);
+            return;
+        }
+        if (ctx.phase === "config") {
+            const classification = ctx.classification;
+            const classificationKnown = classification === undefined ? undefined : CONFIG_ADVISORY_CLASSIFICATIONS.has(classification);
+            const fields = {
+                sessionId: ctx.sessionId,
+                ...codeField,
+                ...(classification !== undefined ? { classification, classificationKnown } : {}),
+                info: seatText("operator-log-text", String(err)),
+            };
+            logger.warn("runner_config_advisory", fields);
+            metrics.inc("runner_config_advisory_total", {
+                ...codeField,
+                ...(classification !== undefined ? { classification: classificationKnown ? classification : "unknown" } : {}),
+                level: "warn",
+            });
+            return;
+        }
+        metrics.inc("runner_error_total", { phase: ctx.phase });
+        logger.error("runner_error", { phase: ctx.phase, sessionId: ctx.sessionId, ...codeField, err: seatText("operator-log-text", String(err)) });
+    };
+    const sharedRunnerDeps = createSharedRunnerDeps({ ...ctx, onError });
     const workflowModelAllowlist = workflowModelAllowlistFor(config);
     const selfOrchestrationDeps = config.selfOrchestrationEnabled
         ? {
@@ -237,7 +312,6 @@ export function createRunnerDeps(ctx) {
                     memorySyncRunner.trigger("harvest");
             }
             : undefined,
-        runtimeCapsResolver: runtimeCapsResolver ? runtimeCapsResolver : undefined,
         permissionRuleStore: permissionRuleStore ? permissionRuleStore : undefined,
         localOwnerRules: localOwnerRulesDeclared(config, permissionRuleStore),
         onBackgroundChildEvent: fleetBackgroundChildPublisher(fleetBus, (msg, fields) => logger.info(msg, fields)),
@@ -248,77 +322,6 @@ export function createRunnerDeps(ctx) {
             ? makeProbeInstructionSources()
             : undefined,
         ...selfOrchestrationDeps,
-        onError: (err, ctx) => {
-            const codeField = codeFieldOf(err);
-            if (ctx.phase === "degraded") {
-                logger.warn("task_degraded", { sessionId: ctx.sessionId, ...codeField, info: seatText("operator-log-text", String(err)) });
-                return;
-            }
-            if (ctx.phase === "prompt-constitution") {
-                logger.warn("prompt_composition_warning", { sessionId: ctx.sessionId, ...codeField, info: seatText("operator-log-text", String(err)) });
-                return;
-            }
-            if (ctx.phase === "rewind") {
-                const code = rewindFailureCode(err);
-                logger.warn("rewind_snapshot_failed", { sessionId: ctx.sessionId, code, info: seatText("operator-log-text", String(err)) });
-                metrics.inc("rewind_snapshot_failed_total", { code });
-                return;
-            }
-            if (ctx.phase === "memory") {
-                memoryEngineIncident(err, ctx.sessionId !== undefined ? { sessionId: ctx.sessionId } : undefined);
-                return;
-            }
-            if (ctx.phase === "mcp") {
-                logger.warn("mcp_server_unavailable", { sessionId: ctx.sessionId, kind: errorKindOf(err), ...codeField, info: seatText("operator-log-text", buildShownUrlsInText(String(err))) });
-                metrics.inc("mcp_server_unavailable_total");
-                return;
-            }
-            if (ctx.phase === "a2a") {
-                logger.warn("a2a_peer_unavailable", { sessionId: ctx.sessionId, kind: errorKindOf(err), ...codeField, info: seatText("operator-log-text", buildShownUrlsInText(String(err))) });
-                metrics.inc("a2a_peer_unavailable_total");
-                return;
-            }
-            if (ctx.phase === "prompt-cache") {
-                const classification = ctx.classification;
-                const causeLevel = classification === undefined ? undefined : PROMPT_CACHE_BREAK_LEVELS.get(classification);
-                const level = classification === undefined ? "warn" : (causeLevel ?? "error");
-                const fields = {
-                    sessionId: ctx.sessionId,
-                    confirmed: classification !== undefined,
-                    ...(classification !== undefined ? { classification, classificationKnown: causeLevel !== undefined } : {}),
-                    ...codeField,
-                    err: seatText("operator-log-text", String(err)),
-                };
-                metrics.inc("prompt_cache_low_hit_total", {
-                    ...(classification !== undefined ? { classification: causeLevel !== undefined ? classification : "unknown" } : {}),
-                    level,
-                });
-                if (level === "warn")
-                    logger.warn("prompt_cache_break", fields);
-                else
-                    logger.error("prompt_cache_break", fields);
-                return;
-            }
-            if (ctx.phase === "config") {
-                const classification = ctx.classification;
-                const classificationKnown = classification === undefined ? undefined : CONFIG_ADVISORY_CLASSIFICATIONS.has(classification);
-                const fields = {
-                    sessionId: ctx.sessionId,
-                    ...codeField,
-                    ...(classification !== undefined ? { classification, classificationKnown } : {}),
-                    info: seatText("operator-log-text", String(err)),
-                };
-                logger.warn("runner_config_advisory", fields);
-                metrics.inc("runner_config_advisory_total", {
-                    ...codeField,
-                    ...(classification !== undefined ? { classification: classificationKnown ? classification : "unknown" } : {}),
-                    level: "warn",
-                });
-                return;
-            }
-            metrics.inc("runner_error_total", { phase: ctx.phase });
-            logger.error("runner_error", { phase: ctx.phase, sessionId: ctx.sessionId, ...codeField, err: seatText("operator-log-text", String(err)) });
-        },
         ...(ctx.consolidationSeat !== undefined
             ? {
                 memoryConsolidation: {},

package/dist/boot/session-age-out.d.ts

@@ -0,0 +1,36 @@
+import type { SessionAgeOutExpectation, SessionPurgeOutcome } from "../session-deletion.js";
+import type { OwnerAwareSessionStore } from "../security.js";
+import type { Logger } from "../observability/logger.js";
+import type { Metrics } from "../observability/metrics.js";
+/** 每拍至多碰这么多只(一拍的删除量有上界:维护拍上其余各腿不被本腿拖住)。 */
+export declare const SESSION_AGE_OUT_CAP = 64;
+/** 每拍的时间预算(同上一句的理由)。 */
+export declare const SESSION_AGE_OUT_BUDGET_MS = 5000;
+/** 跳过的理由(闭集;计数的标签):条件在锁里不再成立 / 围栏判到认领 / 子代预检拒 / 另一次删除持有它 / 抛。 */
+export type SessionAgeOutSkip = "changed" | "active" | "children_alive" | "in_progress" | "failed";
+/** 一拍的读数(调用方记日志;钉读它)。 */
+export interface SessionAgeOutReading {
+    readonly deleted: number;
+    readonly skipped: Readonly<Record<SessionAgeOutSkip, number>>;
+    /** 本拍因帽或预算停下而候选还没看完。 */
+    readonly truncated: boolean;
+}
+export interface SessionAgeOutDeps {
+    readonly store: Required<Pick<OwnerAwareSessionStore, "listIdleOfKind">>;
+    readonly purge: (sessionId: string, owner: string | null, opts: {
+        readonly ageOut: SessionAgeOutExpectation;
+    }) => Promise<SessionPurgeOutcome>;
+    /** 视界(`BG_AGENT_RETENTION_MS`;每拍现读 —— 热改下一拍生效)。 */
+    readonly retentionMs: () => number;
+    readonly logger: Pick<Logger, "info" | "warn">;
+    readonly metrics: Pick<Metrics, "inc">;
+    readonly now?: () => number;
+    readonly cap?: number;
+    readonly budgetMs?: number;
+}
+/**
+ * 铸老化腿(一只闭包,带进程内的跨拍轮转起点与在飞守卫):每次调用跑一拍,交回读数;在飞时再调 ⇒ 立刻交回空读数(不叠拍)。
+ * 候选读抛 ⇒ 本拍停在那里(读数照交,下拍从同一起点再来);单行删除抛 ⇒ 计 `failed`、节流 warn,本拍继续下一行。
+ */
+export declare function createSessionAgeOut(deps: SessionAgeOutDeps): () => Promise<SessionAgeOutReading>;
+//# sourceMappingURL=session-age-out.d.ts.map

package/dist/boot/session-age-out.js

@@ -0,0 +1,101 @@
+import { SESSION_KINDS, idleSessionAfter } from "../session-kind.js";
+import { seatText } from "../trace/exit-seat.js";
+export const SESSION_AGE_OUT_CAP = 64;
+export const SESSION_AGE_OUT_BUDGET_MS = 5_000;
+function outcomeOf(outcome) {
+    if ("deleted" in outcome)
+        return outcome.deleted ? "deleted" : "changed";
+    if ("active" in outcome)
+        return "active";
+    if ("childrenAlive" in outcome)
+        return "children_alive";
+    if ("inProgress" in outcome)
+        return "in_progress";
+    const unknownOutcome = outcome;
+    throw new Error(`session age-out: no arm for purge outcome ${JSON.stringify(unknownOutcome)}`);
+}
+export function createSessionAgeOut(deps) {
+    const cap = deps.cap ?? SESSION_AGE_OUT_CAP;
+    const budgetMs = deps.budgetMs ?? SESSION_AGE_OUT_BUDGET_MS;
+    const now = deps.now ?? Date.now;
+    const resumeAfter = new Map();
+    let inFlight = false;
+    const empty = () => ({ changed: 0, active: 0, children_alive: 0, in_progress: 0, failed: 0 });
+    return async () => {
+        if (inFlight)
+            return { deleted: 0, skipped: empty(), truncated: false };
+        inFlight = true;
+        const started = now();
+        const skipped = empty();
+        let deleted = 0;
+        let touched = 0;
+        let truncated = false;
+        try {
+            for (const kind of SESSION_KINDS) {
+                const idleBefore = new Date(now() - deps.retentionMs());
+                const origin = resumeAfter.get(kind);
+                let after = origin;
+                let wrapped = origin === undefined;
+                let circled = false;
+                for (;;) {
+                    if (touched >= cap || (touched > 0 && now() - started >= budgetMs)) {
+                        truncated = true;
+                        break;
+                    }
+                    const page = await deps.store.listIdleOfKind(kind, idleBefore, { ...(after !== undefined ? { after } : {}), limit: cap - touched });
+                    if (page.length === 0) {
+                        if (wrapped) {
+                            resumeAfter.delete(kind);
+                            break;
+                        }
+                        wrapped = true;
+                        after = undefined;
+                        continue;
+                    }
+                    for (const row of page) {
+                        if (wrapped && origin !== undefined && !idleSessionAfter(origin, row)) {
+                            circled = true;
+                            break;
+                        }
+                        if (touched >= cap || (touched > 0 && now() - started >= budgetMs)) {
+                            truncated = true;
+                            break;
+                        }
+                        touched++;
+                        after = { lastActivityAt: row.lastActivityAt, sessionId: row.sessionId };
+                        resumeAfter.set(kind, after);
+                        let verdict;
+                        try {
+                            verdict = outcomeOf(await deps.purge(row.sessionId, row.owner, { ageOut: { incarnation: row.incarnation, kind, idleBefore } }));
+                        }
+                        catch (err) {
+                            verdict = "failed";
+                            deps.logger.warn("session_age_out_failed", { sessionId: row.sessionId, err: seatText("operator-log-text", String(err)), effect: "the session stays; the next maintenance tick judges it again" });
+                        }
+                        if (verdict === "deleted") {
+                            deleted++;
+                            deps.metrics.inc("sidechain_sessions_aged_out_total", {}, 1);
+                            deps.logger.info("session_aged_out", { sessionId: row.sessionId, sessionKind: kind, lastActivityAt: row.lastActivityAt });
+                        }
+                        else {
+                            skipped[verdict]++;
+                            deps.metrics.inc("sidechain_age_out_skipped_total", { reason: verdict }, 1);
+                        }
+                    }
+                    if (truncated || circled)
+                        break;
+                }
+                if (truncated)
+                    break;
+            }
+        }
+        finally {
+            inFlight = false;
+        }
+        if (deleted > 0 || truncated || Object.values(skipped).some((n) => n > 0)) {
+            deps.logger.info("reaper_swept", { metric: "sidechain_sessions_aged_out_total", count: deleted, skipped, truncated });
+        }
+        return { deleted, skipped, truncated };
+    };
+}
+//# sourceMappingURL=session-age-out.js.map

package/dist/boot/session-faces.d.ts

@@ -1,15 +1,3 @@
-/**
- * [ref] A10:composition root 分段 —— session 只读/删除面(审计、watch 注册表、E21 purge 协调器、
- * degenerate 仪表、plan-cache 探针)。
- *
- * 纯搬运:函数体逐字来自 `main.ts`(原 2967-3092 行),缩进不变;新增的只有 import 与包壳。
- *
- * ⚠️ **位置即契约**:
- *  1. `sessionWatchRegistry` 必须在 `purgeSession` **之前**构造 —— purge 尾部的 `dropSession` 是
- *     同副本租户轮转围栏(delete 即终结旧 owner 的 SSE 订阅),两者是一对;空间回收座在它**之后**起、且不在应答路径里。
- *  2. `setLeafAdvanceListener(...)` 是**进程级单点**装载(leaf-bus 只有一个监听位),必须与
- *     registry 的构造同段发生,晚于它、早于任何会 append 的路由。
- */
 import { type SessionAuditReadOpts } from "../audit.js";
 import type { ServiceConfig } from "../config.js";
 import type { Logger } from "../observability/logger.js";
@@ -25,7 +13,7 @@ import { SessionWatchRegistry } from "../session-watch.js";
 import type { TaskListLane } from "./task-list-lane.js";
 import { type RunnerDeps } from "@sema-agent/core";
 import type { MailboxRecipientLifecycle } from "../plugins/mailbox-recipient-lifecycle.js";
-import { type SessionPurgeOutcome } from "../session-deletion.js";
+import { type SessionAgeOutExpectation, type SessionPurgeOutcome } from "../session-deletion.js";
 import { type SessionEraser, type SessionEraseSettler } from "../session-erase.js";
 import type { UserInputLedgerStore } from "../user-input-ledger.js";
 import type { SpaceReclaimer } from "../workspace-space.js";
@@ -75,6 +63,7 @@ export interface SessionFacesCtx {
 export declare function createSessionFaces(ctx: SessionFacesCtx): {
     ownerAware: OwnerAwareSessionStore;
     sessionAudit: ((sessionId: string, opts?: SessionAuditReadOpts) => Promise<{
+        sessionKind?: "sidechain" | undefined;
         projectId?: string | undefined;
         agent?: import("../session-agent.js").SessionAgent | undefined;
         owner: string | null;
@@ -90,7 +79,9 @@ export declare function createSessionFaces(ctx: SessionFacesCtx): {
         promptEpoch?: import("@sema-agent/core").StoredPromptEpoch;
     } | undefined>) | undefined;
     sessionWatchRegistry: SessionWatchRegistry | undefined;
-    purgeSession: ((sessionId: string, owner: string | null) => Promise<SessionPurgeOutcome>) | undefined;
+    purgeSession: ((sessionId: string, owner: string | null, opts?: {
+        readonly ageOut?: SessionAgeOutExpectation;
+    }) => Promise<SessionPurgeOutcome>) | undefined;
     recoverPendingDeletions: (() => Promise<ReadonlyArray<{
         readonly sessionId: string;
         readonly outcome: SessionPurgeOutcome | {

package/dist/boot/session-faces.js

@@ -1,3 +1,4 @@
+import { sessionKindFaceOf } from "../session-kind.js";
 import { buildRewindHandles, buildSessionAudit, buildSessionAuditLocal, buildSessionAuditPg } from "../audit.js";
 import { readSessionAgent } from "../http/owner-access.js";
 import { readSessionProjectId, sessionWorkspaceStoreOf } from "../session-workspace.js";
@@ -24,6 +25,7 @@ export function createSessionFaces(ctx) {
     const ownerAware = sessionStore;
     const headOf = headReadOf(sessionStore);
     const workspaceStore = sessionWorkspaceStoreOf(sessionStore);
+    const kindFace = sessionKindFaceOf(sessionStore);
     const readSessionView = async (sessionId, opts) => {
         const handles = opts !== undefined && resumeAnchorStore !== undefined ? buildRewindHandles(await resumeAnchorStore.listBySession(sessionId), opts.reader) : undefined;
         const audit = mysqlPool
@@ -33,13 +35,15 @@ export function createSessionFaces(ctx) {
                 : await buildSessionAuditLocal(auditLocalRows, sessionId, handles);
         if (!audit)
             return undefined;
-        const [head, agent, projectId] = await Promise.all([
+        const [head, agent, projectId, kindRead] = await Promise.all([
             headOf?.(sessionId),
             opts !== undefined ? readSessionAgent(ownerAware, sessionId) : undefined,
             opts !== undefined ? readSessionProjectId(workspaceStore, sessionId) : undefined,
+            opts !== undefined ? kindFace?.sessionKindOf(sessionId) : undefined,
         ]);
         const owner = head?.owner;
-        return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}), ...(projectId !== undefined ? { projectId } : {}) };
+        const sessionKind = kindRead !== undefined && head !== undefined && kindRead.incarnation === head.incarnation ? kindRead.kind : undefined;
+        return { ...audit, owner: owner ?? null, ...(agent !== undefined ? { agent } : {}), ...(projectId !== undefined ? { projectId } : {}), ...(sessionKind !== undefined ? { sessionKind } : {}) };
     };
     const sessionAudit = mysqlPool || auditPgPool || auditLocalRows ? readSessionView : undefined;
     const probeWatchedHead = async (sid) => (headOf === undefined ? { owner: undefined, leafId: null } : ((await headOf(sid)) ?? { owner: undefined, leafId: null }));
@@ -64,7 +68,7 @@ export function createSessionFaces(ctx) {
     const attempts = new Map();
     const holder = (token) => attempts.get(token) ?? "elsewhere";
     const purge = eraser !== undefined && deletion !== undefined
-        ? async (sessionId, owner, expect) => {
+        ? async (sessionId, owner, expect, ageOut) => {
             const tenantScope = sessionTenantScope(owner);
             const reach = await probeSessionChildren({ agentStore: backgroundAgentStore, checkpointStore, registry: defaultTaskRegistry }, sessionId, tenantScope);
             if (!reach.reachable) {
@@ -73,7 +77,7 @@ export function createSessionFaces(ctx) {
             }
             let fence;
             try {
-                fence = await deletion.fence(sessionId, owner, expect === undefined ? { holder } : { holder, expect });
+                fence = await deletion.fence(sessionId, owner, { holder, ...(expect !== undefined ? { expect } : {}), ...(ageOut !== undefined ? { ageOut } : {}) });
             }
             catch (err) {
                 if (err instanceof SessionActiveRunError)
@@ -143,7 +147,7 @@ export function createSessionFaces(ctx) {
             return { deleted: true };
         }
         : undefined;
-    const purgeSession = purge !== undefined ? (sessionId, owner) => purge(sessionId, owner) : undefined;
+    const purgeSession = purge !== undefined ? (sessionId, owner, opts) => purge(sessionId, owner, undefined, opts?.ageOut) : undefined;
     const recoverOne = async (sessionId, owner, token) => {
         const unfinished = "the session stays in the deleting state (it reads as gone everywhere); the next start or a repeated DELETE by its owner finishes it";
         try {

package/dist/boot/shutdown.d.ts

@@ -39,6 +39,12 @@ export interface ShutdownCtx {
     version: string;
     logger: Logger;
     server: ReturnType<typeof createHttpServer>;
+    /**
+     * 本机控制 socket 那只 `http.Server`(`server.controlSocketServer`)—— present-iff 它在听(起服第 10 段 `openControlSocket` 的结局)。
+     * 🔴 收尾序承重:两只 server **都**关完(close 回调落地)才 `backend.close()`(数据根锁在那条链里放)。运行时关 unix socket 监听口时按路径名 unlink;
+     * 锁若先放、控制口还在听,接班的引擎可在此刻替换路径,随后这边关口就删掉接班者的 socket(`control-socket.ts` 头注前提律)。
+     */
+    controlSocket?: import("node:http").Server | undefined;
     reaper: NodeJS.Timeout;
     /** [ref]:fleet 存活对账腿(60s 定时器 + 总线订阅)。与 `reaper` 同列文件头契约 3 —— 收尾期不该再有
      *  对账 tick 打向正在关闭的池,订阅也要摘(否则 bus 的扇出还在往一个已停的观察者写)。 */

package/dist/boot/shutdown.js

@@ -19,7 +19,8 @@ export function backgroundGraceRemainingMs(a) {
     return Math.max(0, Math.min(a.softStoppedAt + a.graceMs, a.deadlineMs) - a.now);
 }
 export function installShutdownHandlers(ctx) {
-    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, webAdmin, version, deviceHub, toolApproval, parkCommits, servingLease, peerInbound, } = ctx;
+    const { config, logger, server, controlSocket, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, webAdmin, version, deviceHub, toolApproval, parkCommits, servingLease, peerInbound, } = ctx;
+    const httpListeners = controlSocket === undefined ? [server] : [server, controlSocket];
     const dataRoot = config.localDataRoot;
     if (dataRoot) {
         const prior = readCrashLast(dataRoot);
@@ -161,7 +162,8 @@ export function installShutdownHandlers(ctx) {
                 rateLimiter.stop();
             await fleetClient?.flushFinalUsage();
         });
-        server.close(() => {
+        const listenersClosed = Promise.all(httpListeners.map((s) => new Promise((resolve) => s.close(() => resolve())))).then(() => undefined);
+        void listenersClosed.then(() => {
             void Promise.all([retentionTeardown, ledgerStopped])
                 .then(() => (backend ? backend.close() : Promise.resolve()))
                 .then(() => routingStopped)
@@ -172,8 +174,12 @@ export function installShutdownHandlers(ctx) {
         const finalExit = setTimeout(() => { logger.warn("hard_shutdown_final_deadline", { afterMs: FINAL_EXIT_MS }); process.exit(0); }, FINAL_EXIT_MS);
         finalExit.unref?.();
         drainState.endSubscriptions?.();
-        server.closeIdleConnections?.();
-        const forceClose = setTimeout(() => server.closeAllConnections?.(), HARD_STOP_GRACE_MS);
+        for (const s of httpListeners)
+            s.closeIdleConnections?.();
+        const forceClose = setTimeout(() => {
+            for (const s of httpListeners)
+                s.closeAllConnections?.();
+        }, HARD_STOP_GRACE_MS);
         forceClose.unref?.();
     };
     let draining = false;

package/dist/boot/stage-01-config.js

@@ -12,6 +12,7 @@ import { installFileHistoryFailureRecorder } from "../file-history-disclosure.js
 import { installSecretEnvScrubRecorder } from "../observability/secret-env-scrub.js";
 import { setRunTerminalLogObserver } from "../observability/run-terminal.js";
 import { setRedactionObserver } from "../trace/redact.js";
+import { setStoreBoundaryObserver } from "../terminal.js";
 import { installOutboundDispatcher } from "../outbound-dispatcher.js";
 import { bindOwnCredentialsConfig, declareServerWithheldEnv } from "../server-secret-env.js";
 import { admitLocalDataRoot } from "../plugins/local-data-root-admission.js";
@@ -53,6 +54,7 @@ export function runStage01() {
         });
     }
     setRedactionObserver((pattern, n, meta) => metrics.inc("redactions_applied_total", { pattern, arm: meta.arm }, n));
+    setStoreBoundaryObserver((site, faultClass) => metrics.inc("store_boundary_fault_total", { site, class: faultClass }));
     setWebSearchBadPayloadObserver((provider) => {
         metrics.inc("web_search_bad_payload_total", { provider });
         logger.warn("web_search_non_array_payload", { provider });

package/dist/boot/stage-02-web-admin-pull.js

@@ -5,13 +5,12 @@ import { configSourceKind } from "../config-provider.js";
 import { announceConfigRootEnclosingWorkspace } from "../sema-config-dir.js";
 import { launchWorkspaceOf } from "../task-cwd.js";
 import { buildCandidateRejectionNotes } from "../web-admin-client/candidate-gate.js";
-import { logConfigDirMigration, migrateLocalConfigDirectory } from "../config-d-migration.js";
 import { logEnvModelsMigration, runEnvModelsMigration } from "../config-root-migration.js";
 import { assertLocalConfigDirTrusted } from "../config-dir-trust.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "../model-entry-refusal.js";
 import { isRosterGateArmed } from "../config.js";
 import { judgeServedModelRoute } from "../model-route-endpoint.js";
-import { servedModelTableLeg } from "../model-select.js";
+import { modelRefusalLegOf, servedModelTableLeg } from "../model-select.js";
 import { warnAssumedContextWindows } from "../context-window-notice.js";
 import { captureBootStoreEvidence } from "./store-evidence.js";
 import { admitStoreDurability } from "../store-admission.js";
@@ -22,7 +21,6 @@ export async function runStage02(ctx) {
     const configSource = configSourceKind(loaded);
     if (configSource === "local") {
         await assertLocalConfigDirTrusted({ root: localRoot, declaredOwnerUid: loaded.configLocalOwnerUid });
-        logConfigDirMigration(logger, await migrateLocalConfigDirectory(localRoot));
     }
     const config = await composeExecutionLane(loaded, { configSource, localRoot, logger, entry: HTTP_SERVICE_LANE_ENTRY });
     admitStoreDurability(config, storeEvidence);
@@ -35,11 +33,12 @@ export async function runStage02(ctx) {
     const webAdmin = await createWebAdminRuntime({ config, logger, metrics, localRoot });
     const servedLeg = servedModelTableLeg(config);
     const rejection = webAdmin.candidateRejectionState();
-    const noDefaultModel = defaultModelRefusal({ models: config.models, modelRefusals: config.modelRefusals, candidateRejectionNotes: rejection === undefined ? undefined : buildCandidateRejectionNotes(rejection) }, servedLeg);
+    const webAdminIsConfigSource = configSource === "remote";
+    const noDefaultModel = defaultModelRefusal({ models: config.models, modelRefusals: config.modelRefusals, candidateRejectionNotes: rejection === undefined ? undefined : buildCandidateRejectionNotes(rejection) }, modelRefusalLegOf(servedLeg, webAdminIsConfigSource));
     if (noDefaultModel !== undefined) {
         throw new Error(noDefaultModel);
     }
-    const routeVerdict = judgeServedModelRoute(config, { envTableIsPlaceholder: isRosterGateArmed(config.webAdmin) });
+    const routeVerdict = judgeServedModelRoute(config, { envTableIsPlaceholder: isRosterGateArmed(config.webAdmin), webAdminIsConfigSource });
     if (routeVerdict !== undefined) {
         throw new Error(routeVerdict.reason);
     }

package/dist/boot/stage-05-execution-env.d.ts

@@ -18,10 +18,12 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
+    sessionBindings: {
+        commitSessionBindings: (sessionId: string, bindings: import("../session-bindings.js").SessionBindings) => import("../session-bindings.js").SessionBindingReceipt;
+        withdrawSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+        settleSessionBindings: (receipt: import("../session-bindings.js").SessionBindingReceipt) => boolean;
+    };
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    setSessionCwd: (sid: string, cwd: string) => void;
-    setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
-    setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
     consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;

package/dist/boot/stage-05-execution-env.js

@@ -13,11 +13,12 @@ export async function runStage05(ctx) {
     const deviceLane = config.remoteExec.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, seat: sessionStore.executionPlacement, replicaId: instanceId }) : undefined;
     const headOf = headReadOf(sessionStore);
     const spaceCommits = backend !== undefined ? () => runStore : undefined;
-    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, setSessionInheritEnv, fenceSessionOwner, dropSessionScoped, sessionResidentBackground, dropSessionScopedOf, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxSecretSeatGate, sandboxReaper, sandboxGitPlane: sandboxGitPlaneSeat, sandboxCapacity, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
+    const { perTaskImage, sessionEnvSelection, perSessionCwd, sessionBindings, fenceSessionOwner, dropSessionScoped, sessionResidentBackground, dropSessionScopedOf, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, spaceReclaimer, sandboxApiCredentialsGate, sandboxSecretSeatGate, sandboxReaper, sandboxGitPlane: sandboxGitPlaneSeat, sandboxCapacity, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}), ...(spaceCommits !== undefined ? { spaceCommits } : {}), ...(headOf !== undefined ? { headOf } : {}), ...(backend !== undefined ? { runRows: () => runStore } : {}) });
     assertDeviceLaneWired(config.remoteExec.provider === "device", deviceLane, executionEnvFactory !== undefined);
     if (deviceLane !== undefined && config.remoteExec.provider === "device")
         await noteDeviceRelayBindings(config.remoteExec.relay, deviceLane.store, logger);
     assertWorkspaceSpaceReadable(facts.workspaceSpace(config), { headOf, spaceCommits }, facts.workspaceCache(config), sessionStoreLabelOf(config.sessionBackend, backend?.kind));
+    sandboxApiCredentialsGate?.();
     if (sandboxSecretSeatGate !== undefined)
         await sandboxSecretSeatGate();
     await sandboxGitPlaneSeat.settle();
@@ -34,6 +35,6 @@ export async function runStage05(ctx) {
     const peerDesk = createPeerDesk({ log: logger });
     metrics.dynamicGauge("peer_registry_entries", "Peer desk entries (declared peer credentials registered for in-flight legs and the roster)", () => peerDesk.size().entries);
     metrics.dynamicGauge("peer_registry_holders", "Peer desk holders of entries (host leases and engine holds), summed across entries", () => peerDesk.size().holders);
-    return { ...ctx, deploymentMods, deploymentModsLoaded, belowTaskChainPatterns, deviceLane, peerDesk, dropSessionScoped, dropSessionScopedOf, executionEnvFactory, fenceSessionOwner, sessionResidentBackground, lspManager, spaceReclaimer, sandboxReaper, sandboxGitPlane, sandboxCapacity, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionEnvSelection, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, worktreeReap };
+    return { ...ctx, deploymentMods, deploymentModsLoaded, belowTaskChainPatterns, deviceLane, peerDesk, dropSessionScoped, dropSessionScopedOf, executionEnvFactory, fenceSessionOwner, sessionResidentBackground, lspManager, spaceReclaimer, sandboxReaper, sandboxGitPlane, sandboxCapacity, perSessionCwd, perTaskImage, sendUserFileTaskEnvs, sessionBindings, sessionEnvSelection, worktreeReap };
 }
 //# sourceMappingURL=stage-05-execution-env.js.map