@sema-agent/server 7.49.0 → 7.51.0

package/dist/execution-lane-caps.js

@@ -0,0 +1,166 @@
+const NO = "unsupported";
+const YES = "supported";
+const SU = "single-user-only";
+export function executionLaneCaps(lane) {
+    switch (lane) {
+        case "in-process":
+            return {
+                callerCwd: NO,
+                backgroundShell: NO,
+                scheduler: NO,
+                lsp: NO,
+                sandboxSendUserFile: NO,
+                isolation: NO,
+                suspendable: NO,
+                remoteScratchpad: NO,
+                sandboxPathAdjudication: NO,
+                worktreeIsolation: NO,
+                memoryPersistenceCapable: NO,
+                hostFilePlane: YES,
+                coreRemoteExecutionEnv: NO,
+            };
+        case "host":
+            return {
+                callerCwd: SU,
+                backgroundShell: SU,
+                scheduler: SU,
+                lsp: SU,
+                sandboxSendUserFile: NO,
+                isolation: NO,
+                suspendable: NO,
+                remoteScratchpad: NO,
+                sandboxPathAdjudication: NO,
+                worktreeIsolation: YES,
+                memoryPersistenceCapable: YES,
+                hostFilePlane: YES,
+                coreRemoteExecutionEnv: YES,
+            };
+        case "e2b":
+            return {
+                callerCwd: NO,
+                backgroundShell: YES,
+                scheduler: NO,
+                lsp: YES,
+                sandboxSendUserFile: YES,
+                isolation: YES,
+                suspendable: YES,
+                remoteScratchpad: YES,
+                sandboxPathAdjudication: YES,
+                worktreeIsolation: NO,
+                memoryPersistenceCapable: NO,
+                hostFilePlane: NO,
+                coreRemoteExecutionEnv: YES,
+            };
+        case "k8s":
+            return {
+                callerCwd: NO,
+                backgroundShell: YES,
+                scheduler: NO,
+                lsp: YES,
+                sandboxSendUserFile: YES,
+                isolation: YES,
+                suspendable: YES,
+                remoteScratchpad: YES,
+                sandboxPathAdjudication: YES,
+                worktreeIsolation: NO,
+                memoryPersistenceCapable: NO,
+                hostFilePlane: NO,
+                coreRemoteExecutionEnv: YES,
+            };
+        case "ssh":
+            return {
+                callerCwd: NO,
+                backgroundShell: NO,
+                scheduler: NO,
+                lsp: NO,
+                sandboxSendUserFile: SU,
+                isolation: NO,
+                suspendable: NO,
+                remoteScratchpad: YES,
+                sandboxPathAdjudication: YES,
+                worktreeIsolation: NO,
+                memoryPersistenceCapable: NO,
+                hostFilePlane: NO,
+                coreRemoteExecutionEnv: YES,
+            };
+        case "adb":
+            return {
+                callerCwd: NO,
+                backgroundShell: NO,
+                scheduler: NO,
+                lsp: NO,
+                sandboxSendUserFile: NO,
+                isolation: NO,
+                suspendable: NO,
+                remoteScratchpad: NO,
+                sandboxPathAdjudication: YES,
+                worktreeIsolation: NO,
+                memoryPersistenceCapable: NO,
+                hostFilePlane: NO,
+                coreRemoteExecutionEnv: YES,
+            };
+        case "local-docker":
+            return {
+                callerCwd: NO,
+                backgroundShell: NO,
+                scheduler: NO,
+                lsp: NO,
+                sandboxSendUserFile: NO,
+                isolation: YES,
+                suspendable: NO,
+                remoteScratchpad: YES,
+                sandboxPathAdjudication: YES,
+                worktreeIsolation: NO,
+                memoryPersistenceCapable: NO,
+                hostFilePlane: NO,
+                coreRemoteExecutionEnv: YES,
+            };
+        case "device":
+            return {
+                callerCwd: YES,
+                backgroundShell: NO,
+                scheduler: NO,
+                lsp: NO,
+                sandboxSendUserFile: NO,
+                isolation: NO,
+                suspendable: NO,
+                remoteScratchpad: YES,
+                sandboxPathAdjudication: YES,
+                worktreeIsolation: NO,
+                memoryPersistenceCapable: NO,
+                hostFilePlane: NO,
+                coreRemoteExecutionEnv: YES,
+            };
+    }
+}
+const EXECUTION_LANE_WORDS = {
+    "in-process": true,
+    host: true,
+    e2b: true,
+    k8s: true,
+    ssh: true,
+    adb: true,
+    "local-docker": true,
+    device: true,
+};
+export function isExecutionLane(word) {
+    return Object.hasOwn(EXECUTION_LANE_WORDS, word);
+}
+export const ALL_EXECUTION_LANES = Object.freeze(Object.keys(EXECUTION_LANE_WORDS).filter(isExecutionLane));
+export function executionLaneOf(provider) {
+    if (provider === undefined)
+        return "in-process";
+    return isExecutionLane(provider) ? provider : undefined;
+}
+export function laneCapabilityHolds(cap, deployment) {
+    switch (cap) {
+        case "supported":
+            return true;
+        case "unsupported":
+            return false;
+        case "single-user-only":
+            return deployment.requirePrincipal !== true;
+    }
+}
+export const PLANNED_LANE_DIVERGENCES = Object.freeze([]);
+//# sourceMappingURL=execution-lane-caps.js.map

package/dist/fleet/subagent-tail-bus.d.ts

@@ -7,7 +7,7 @@ export type SubagentTailFrame = Record<string, unknown> & {
     type: string;
 };
 /** core forward 事件 → wire 投影(sync 主流五分支同源;不认识的帧类型=null 不发——tail 面只承诺
- *  content 五类,新 core 帧类型先经这里显式收编再出 wire)。 */
+ *  content 六类,新 core 帧类型先经这里显式收编再出 wire)。 */
 export declare function projectTailFrame(e: Record<string, unknown> & {
     type?: string;
 }): SubagentTailFrame | null;

package/dist/fleet/subagent-tail-bus.js

@@ -18,6 +18,16 @@ export function projectTailFrame(e) {
         const td = e;
         return { type: "text_delta", delta: td.delta, ...(td.eventId ? { eventId: td.eventId } : {}), ...(td.parentToolCallId ? { parentToolCallId: td.parentToolCallId } : {}) };
     }
+    if (t === "text_end") {
+        if (typeof e.content !== "string" || e.content.length === 0)
+            return null;
+        return {
+            type: "text_end",
+            content: e.content,
+            ...(typeof e.eventId === "string" ? { eventId: e.eventId } : {}),
+            ...(typeof e.parentToolCallId === "string" ? { parentToolCallId: e.parentToolCallId } : {}),
+        };
+    }
     if (t === "reasoning_delta") {
         const rd = e;
         return { type: "reasoning_delta", delta: redactSecrets(rd.delta), ...(rd.eventId ? { eventId: rd.eventId } : {}), ...(rd.parentToolCallId ? { parentToolCallId: rd.parentToolCallId } : {}) };

package/dist/http/routes/approvals-assistant.js

@@ -60,7 +60,7 @@ async function decideIdempotentReplay(cs, args) {
                 return undefined;
             }
         }
-        if (row.boundInputHash !== (binding.boundInputHash ?? null))
+        if (binding.boundInputHash !== undefined && row.boundInputHash !== binding.boundInputHash)
             return undefined;
         if (row.decision !== decision)
             return undefined;

package/dist/http/routes/capabilities.js

@@ -2,7 +2,8 @@ import { DEFAULT_EFFORT_LEVELS, expandTiers, routePairingStatus } from "@sema-ag
 import { isModelAllowlisted } from "../../model-select.js";
 import { resolveModelApiKey } from "../../key-resolver.js";
 import { isSealedKeyPoison } from "../../sealed-key.js";
-import { cwdHonored } from "../../task-cwd.js";
+import { cwdHonored, deviceCwdHonored } from "../../task-cwd.js";
+import { DEVICE_PROTOCOL_VERSION, DEVICE_WS_PATH } from "../../device-ws-protocol.js";
 import { a2aInjectionHonored } from "../../task-a2a.js";
 import { mcpInjectionHonored } from "../../task-mcp.js";
 import { sendJson, sendError } from "../send.js";
@@ -47,6 +48,9 @@ async function handleCapabilitiesBody(req, res, url, ctx, miss) {
             artifacts: Boolean(deps.runStore),
             approvals: Boolean(deps.checkpointStore),
             sessions: Boolean(deps.sessionAudit),
+            deviceExecutor: deps.deviceHub
+                ? { enabled: true, protocolVersion: DEVICE_PROTOCOL_VERSION, maxInflightPerDevice: deps.config.remoteExec?.provider === "device" ? (deps.config.remoteExec.maxInflightPerDevice ?? 4) : 4, wsPath: DEVICE_WS_PATH }
+                : false,
             sessionEvents: Boolean(deps.sessionWatch && deps.sessionStorage?.getLeafId && deps.sessionStorage?.ownerOf),
             fleet: deps.fleetBus
                 ? { stream: true, sessionScope: true, observe: true, resume: "snapshot", bgNotifyFailClosed: true, steerPriority: "advisory", hookFailureNotice: true }
@@ -86,7 +90,7 @@ async function handleCapabilitiesBody(req, res, url, ctx, miss) {
             scratchpadDir: true,
             subagentSteer: Boolean(deps.subagentSteerRegistry) && Boolean(deps.runStore),
             subagentResume: Boolean(deps.subagentSteerRegistry) && Boolean(deps.runStore),
-            taskSettings: { permissions: true, permissionMode: true, model: true, outputStyle: true, env: cwdHonored(deps.config), hooks: deps.config.requirePrincipal !== true },
+            taskSettings: { permissions: true, permissionMode: true, model: true, outputStyle: true, env: cwdHonored(deps.config) || deviceCwdHonored(deps.config), hooks: deps.config.requirePrincipal !== true },
             modeShellGateTranslation: true,
             permissionModeAuto: {
                 accepted: true,
@@ -103,6 +107,7 @@ async function handleCapabilitiesBody(req, res, url, ctx, miss) {
             retainBackgroundProcesses: deps.config.requirePrincipal !== true,
             interactiveTools: true,
             projectContext: cwdHonored(deps.config),
+            callerCwd: cwdHonored(deps.config) || deviceCwdHonored(deps.config),
             mcpInjection: mcpInjectionHonored(deps.config),
             a2a: true,
             a2aInjection: a2aInjectionHonored(deps.config),

package/dist/http/routes/sessions.js

@@ -366,7 +366,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                     sendError(res, 503, "state.sse_probe_cap", "session-events probe cap reached — fall back to /head polling");
                     return;
                 }
-                res.writeHead(200, { "content-type": "text/event-stream", "cache-control": "no-cache, no-transform", connection: "keep-alive", "x-accel-buffering": "no" });
+                sseHeaders(res, { "cache-control": "no-cache, no-transform", "x-accel-buffering": "no" });
                 writeRaw(": connected\n\n");
                 started = true;
                 if (preVal !== undefined)

package/dist/http/routes/tasks.js

@@ -331,6 +331,10 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                                         const td = e;
                                         sseData(res, { type: "text_delta", delta: td.delta, ...(td.eventId ? { eventId: td.eventId } : {}), ...(td.parentToolCallId ? { parentToolCallId: td.parentToolCallId } : {}) });
                                     }
+                                    else if (t === "text_end") {
+                                        const tend = e;
+                                        sseData(res, { type: "text_end", content: tend.content, ...(tend.eventId ? { eventId: tend.eventId } : {}), ...(tend.parentToolCallId ? { parentToolCallId: tend.parentToolCallId } : {}) });
+                                    }
                                     else if (t === "reasoning_delta") {
                                         const rd = e;
                                         sseData(res, { type: "reasoning_delta", delta: redactSecrets(rd.delta), ...(rd.eventId ? { eventId: rd.eventId } : {}), ...(rd.parentToolCallId ? { parentToolCallId: rd.parentToolCallId } : {}) });
@@ -459,7 +463,7 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                                 else if (ev.type === "human_input") {
                                     sseData(res, { type: "human_input", ...humanInputEventData(ev) });
                                 }
-                                else if (ev.type === "text_delta" || ev.type === "turn_end" || ev.type === "message_committed" || ev.type === "context_usage") {
+                                else if (ev.type === "text_delta" || ev.type === "text_end" || ev.type === "turn_end" || ev.type === "message_committed" || ev.type === "context_usage") {
                                     const e = ev;
                                     const ident = {
                                         ...(e.eventId !== undefined ? { eventId: e.eventId } : {}),
@@ -469,11 +473,13 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                                     };
                                     const arm = ev.type === "text_delta"
                                         ? { type: "text_delta", delta: e.delta, ...ident }
-                                        : ev.type === "turn_end"
-                                            ? { type: "turn_end", ...(e.usage !== undefined ? { usage: e.usage } : {}), ...(e.usageMissing !== undefined ? { usageMissing: e.usageMissing } : {}), ...(e.stopReason !== undefined ? { stopReason: e.stopReason } : {}), ...ident }
-                                            : ev.type === "message_committed"
-                                                ? { type: "message_committed", entryId: e.entryId, role: e.role, ...(e.toolCallId !== undefined ? { toolCallId: e.toolCallId } : {}), ...ident }
-                                                : { type: "context_usage", ...contextUsageEventData(ev), ...ident };
+                                        : ev.type === "text_end"
+                                            ? { type: "text_end", content: e.content, ...ident }
+                                            : ev.type === "turn_end"
+                                                ? { type: "turn_end", ...(e.usage !== undefined ? { usage: e.usage } : {}), ...(e.usageMissing !== undefined ? { usageMissing: e.usageMissing } : {}), ...(e.stopReason !== undefined ? { stopReason: e.stopReason } : {}), ...ident }
+                                                : ev.type === "message_committed"
+                                                    ? { type: "message_committed", entryId: e.entryId, role: e.role, ...(e.toolCallId !== undefined ? { toolCallId: e.toolCallId } : {}), ...ident }
+                                                    : { type: "context_usage", ...contextUsageEventData(ev), ...ident };
                                     sseData(res, arm);
                                 }
                                 else {

package/dist/http/send.d.ts

@@ -8,6 +8,20 @@
  * now imports them from here, so all ~500 existing `sendJson(...)` call sites are unchanged text.
  */
 import type { ServerResponse } from "node:http";
+/**
+ * #118(黑板 [5371]②)—— 一条响应「是 SSE 流」的**在场标记**。
+ *
+ * 引擎附着租约把**打开着的 SSE 流**当作壳的附着租约来数,于是 `handle()` 需要判「这条响应是不是流」。
+ * 🔴 **不能靠读回 content-type**(本机 node v24.2.0 实测):`res.writeHead(status, headersObject)` 直接
+ * 把头写进网络缓冲,`res.getHeader("content-type")` / `res.hasHeader(...)` 在那之后**仍然**回
+ * `undefined` / `false`。照那条路写会得到一个恒为 0 的附着计数 —— 而恒 0 的方向恰好是「以为没人附着」
+ * ⇒ 在一只有人用的引擎底下触发自退。所以判据必须是我们自己在开流那一刻盖的这个章。
+ *
+ * symbol 键:不上 wire、不进 `JSON.stringify`、不与任何应用属性撞名。
+ */
+export declare const SSE_RESPONSE_MARK: unique symbol;
+/** 这条响应是否已开成 SSE 流(= 走过 {@link sseHeaders})。 */
+export declare function isSseResponse(res: ServerResponse): boolean;
 export declare function sseHeaders(res: ServerResponse, extra?: Record<string, string>): void;
 /**
  * 一条 SSE 连接的墙钟上限。到点发一帧 `error`/`STREAM_MAX_DURATION`(**不是**静默关闭 —— 客户端分不出

package/dist/http/send.js

@@ -1,4 +1,9 @@
+export const SSE_RESPONSE_MARK = Symbol("sema.http.sse-response");
+export function isSseResponse(res) {
+    return res[SSE_RESPONSE_MARK] === true;
+}
 export function sseHeaders(res, extra) {
+    res[SSE_RESPONSE_MARK] = true;
     res.writeHead(200, {
         "content-type": "text/event-stream",
         "cache-control": "no-cache",

package/dist/http/server.d.ts

@@ -242,6 +242,20 @@ export interface ServiceCoordinatorDeps {
  *  重组零件——见 backend 的同款论证)。parked-revive 三件是同族的构件缝(boot 期从生产装配取的裸
  *  ToolSpec + 成员集 + 父约束重建器),与 backgroundAgentStore 齐备才构成赎回腿。 */
 export interface ServiceSeamDeps {
+    /**
+     * device lane 的 WS 汇聚端(design/device-executor-lane-v2 §5,车A-3)—— 本仓**首个** WS 服务端。
+     * 给了就把 `GET /v1/device/ws` 的 upgrade 处理器挂到这台 `http.Server` 上;缺席 = 本部署没有 device
+     * 车道 ⇒ 该路径连 upgrade 都不认(与 `REMOTE_EXEC=device` 的拒启门同一条诚实线)。
+     *
+     * ⚠️ 排空联动由**装配层**驱动:`drainState.draining` 翻真时,main.ts 须同时调 `deviceHub.beginDrain()`
+     * ——两者刻意不在这里自动耦合,因为 §8-R7 的顺序(新提交 503 → 新 upgrade 拒 → 停发新指令 →
+     * 在途结果照收 → 才断连)是**部署编排**的语义,不是 HTTP 层能自作主张的。
+     *
+     * 🔴 **当前生产装配恒缺席,这是有意的**(`parkedKnownAgentTypes` 同族形):车A-3 只交汇聚端与这条
+     * 挂载缝;`main.ts` 侧的真装配(建店 → 建 hub → 传这个键 → 与 `drainState` 联动 → 与
+     * `REMOTE_EXEC=device` 拒启门对齐)属**车A-4/端点车**。在那之前本键只有测试口消费,不是死枝。
+     */
+    deviceHub?: import("../device-ws-hub.js").DeviceWsHub;
     /** Audit回溯: current context (+ summary) for a session, plus its owner. Enables GET /v1/sessions/:id. */
     sessionAudit?: (sessionId: string) => Promise<({
         owner: string | null;
@@ -513,6 +527,9 @@ export interface ServiceDeploymentDeps {
      *  • `inflight` is ASSIGNED BY createServer (a live union of this replica's in-flight legs: durable bg/resume
      *    `inflightRuns` + live sync/resume streams `steerableRuns`) — main.ts polls it to know when drain is done.
      *  • /health carries `draining:true` (k8s readiness 摘流信号) + `version` (build self-description).
+     *  • #118:`attachedStreams` 同样 ASSIGNED BY createServer —— 本副本当前打开着的 SSE 流条数
+     *    (= 引擎附着租约集的大小)。消费方是 `boot/engine-lease.ts` 的自退判据;与 `inflight` 同族,
+     *    同一个共享盒子,不另开第二条 main↔server 的通道。
      */
     drainState?: {
         draining: boolean;
@@ -520,6 +537,8 @@ export interface ServiceDeploymentDeps {
         reason?: string;
         inflight?: () => number;
         lastActivityAt?: () => number;
+        attachedStreams?: () => number;
+        lastAttachEndedAt?: () => number;
     };
     /** boot ready 门(b):false = registry 部署无显式 env 模型且首次 effective pull 尚未落 roster
      *  (worker 只有占位模型)。计费提交 503 + /health 加性 `ready:false`。absent = 恒 ready(env 模型在/非

package/dist/http/server.js

@@ -70,7 +70,7 @@ import { cascadeConfig } from "./run-meta.js";
 export { cascadeConfig };
 import { handleImages, createImagesLocal, coarseStatusForState, errorCodeForExit } from "./routes/images.js";
 export { coarseStatusForState, errorCodeForExit };
-import { sendJson, sendError, httpErrorCode, msg } from "./send.js";
+import { sendJson, sendError, httpErrorCode, msg, isSseResponse } from "./send.js";
 import { authorized, systemFor, gatedPrincipal, explicitOperatorOk, isOperator } from "./principal-gate.js";
 import { buildActiveRunConflict, resumeEntryForGate } from "./active-run-conflict.js";
 export { explicitOperatorOk, isOperator };
@@ -179,6 +179,18 @@ export function createHttpServer(rawDeps) {
     };
     if (deps.drainState)
         deps.drainState.lastActivityAt = () => lastBillableActivityAt;
+    const openResponses = new Set();
+    let lastAttachEndedAt = 0;
+    if (deps.drainState) {
+        deps.drainState.attachedStreams = () => {
+            let n = 0;
+            for (const r of openResponses)
+                if (isSseResponse(r))
+                    n++;
+            return n;
+        };
+        deps.drainState.lastAttachEndedAt = () => lastAttachEndedAt;
+    }
     if (deps.hookWakeBus) {
         deps.hookWakeBus.deliver = async (sessionId, text) => {
             try {
@@ -232,6 +244,7 @@ export function createHttpServer(rawDeps) {
                 res.end();
         });
     });
+    deps.deviceHub?.attach(server);
     const routeCtxBase = {
         deps,
         registry: { idemCache, inflightRuns, preemptableRuns, cancelledViaVerb, steerableRuns, wakeParkMints, counters },
@@ -247,6 +260,8 @@ export function createHttpServer(rawDeps) {
         const admitted = method !== "OPTIONS" && url !== "/health" && !url.startsWith("/metrics");
         if (admitted)
             counters.admittedInflight++;
+        if (admitted)
+            openResponses.add(res);
         let logged = false;
         const reqState = { streamTaskId: undefined, streamDetached: false, source: null };
         const ctx = { deps: routeCtxBase.deps, registry: routeCtxBase.registry, helpers: routeCtxBase.helpers, local: routeCtxBase.local, legs: routeCtxBase.legs, req: reqState };
@@ -256,6 +271,8 @@ export function createHttpServer(rawDeps) {
             logged = true;
             if (admitted)
                 counters.admittedInflight--;
+            if (openResponses.delete(res) && isSseResponse(res))
+                lastAttachEndedAt = performance.now();
             const route = routeLabel(method, url);
             const seconds = (Date.now() - startedAt) / 1000;
             const aborted = viaClose && !res.writableEnded;
@@ -1588,6 +1605,8 @@ export function createHttpServer(rawDeps) {
                     e.code === "resume.constraint_unprojectable" ||
                     e.code === "resume.usage_window_exhausted" ||
                     e.code === "resume.principal_mismatch" ||
+                    e.code === "resume.placement_mismatch" ||
+                    e.code === "resume.preflight_rejected" ||
                     e.code.startsWith("wake.") ||
                     (e.code === "checkpoint.unsupported_version" && checkpointRowRedeemableElsewhere(e.detail?.reason));
                 if (claimedRow && taskId && deps.runStore) {
@@ -1617,7 +1636,7 @@ export function createHttpServer(rawDeps) {
                             ? (outcome.gate === "policy_ask" ? "approval_binding_mismatch" : "resume_outcome_invalid")
                             : e.code,
                         ...(e.detail?.field ? { field: e.detail.field } : {}),
-                        ...(e.code === "resume.usage_window_exhausted" && typeof e.detail?.retryAfterMs === "number" && Number.isFinite(e.detail.retryAfterMs) && e.detail.retryAfterMs > 0
+                        ...((e.code === "resume.usage_window_exhausted" || e.code === "resume.preflight_rejected") && typeof e.detail?.retryAfterMs === "number" && Number.isFinite(e.detail.retryAfterMs) && e.detail.retryAfterMs > 0
                             ? { retryAfterSec: Math.max(1, Math.ceil(e.detail.retryAfterMs / 1000)) }
                             : {}),
                         ...(retriable ? { retriable: true } : {}),

package/dist/http/wire-types.d.ts

@@ -216,7 +216,7 @@ export interface TaskRequestBody {
         skillsListing?: boolean;
     };
     /** C1 (core 1.219, subagent viewing pane): opt-in — forward a delegated child's live CONTENT events
-     *  (text_delta/reasoning_delta/tool_start/tool_end, each stamped `parentToolCallId`) onto this run's stream/durable
+     *  (text_delta/text_end/reasoning_delta/tool_start/tool_end, each stamped `parentToolCallId`) onto this run's stream/durable
      *  log, so a shell can render the child's transcript live ("enter 看详情"). Default OFF = progress-only (prior
      *  behavior). Purely a render channel — core never merges the child stream into the parent's model context. */
     forwardSubagentEvents?: boolean;

package/dist/leader/wire.js

@@ -366,7 +366,8 @@ export function createLeaderRunner(cfg) {
         };
         const provisionIntegrationSandbox = async () => {
             if (cfg.envFactory) {
-                const env = cfg.envFactory({ sessionId: `leader-integ-${Date.now()}` });
+                const integSessionId = `leader-integ-${Date.now()}`;
+                const env = cfg.envFactory({ sessionId: integSessionId, placementRootSessionId: integSessionId });
                 try {
                     await sh(env)(body.seedCmd);
                     await injectOracles(env);
@@ -412,7 +413,8 @@ export function createLeaderRunner(cfg) {
         const resolveRepair = async (solo, _sub) => {
             let env;
             if (cfg.envFactory) {
-                env = cfg.envFactory({ sessionId: `leader-grader-${Date.now()}` });
+                const graderSessionId = `leader-grader-${Date.now()}`;
+                env = cfg.envFactory({ sessionId: graderSessionId, placementRootSessionId: graderSessionId });
             }
             else {
                 if (!cfg.e2bApiKey)

package/dist/main.js

@@ -50,6 +50,7 @@ import { assertRetentionLaneWirable, startRetentionLane, RETENTION_LEASE_TTL_FAC
 import { assertConsolidationDriverWirable, buildConsolidationValveAudit, createMemoryConsolidationFaces, resolveConsolidationDriverSeat } from "./boot/memory-consolidation.js";
 import { startFleetReconciler } from "./fleet/fleet-reconciler.js";
 import { openStores } from "./boot/stores.js";
+import { assertDeviceLaneWired, createDeviceLane } from "./boot/device-lane.js";
 import { runAdoptionBootScan } from "./boot/adoption.js";
 import { auditDormantPermissionRules } from "./boot/permission-rules-audit.js";
 import { createBudgetAndTracing } from "./boot/budget-tracing.js";
@@ -117,6 +118,7 @@ async function main() {
     const configCenter = await createConfigCenterRuntime({ config, logger, metrics, localRoot });
     await configCenter.applyLocalRemoteExec();
     const { backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, memoryExportBackend, memorySyncRunner, sessionStore, breakerState, usageWindowStore, memoryPosture, taskListLane, } = await openStores({ config, logger, metrics, localRoot });
+    const instanceId = uuidv7();
     const memoryBundleFaces = memoryEngine ? createMemoryBundleFaces(memoryEngine) : undefined;
     const memoryComplianceFaces = memoryEngine
         ? createMemoryComplianceFaces(memoryEngine, {
@@ -144,7 +146,9 @@ async function main() {
         });
     }
     await auditDormantPermissionRules({ stores: permissionRuleStores, logger, explicit: config.permissionRulesEnabledExplicit });
-    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore });
+    const deviceLane = config.remoteExec?.provider === "device" ? createDeviceLane({ config, logger, metrics, backend, replicaId: instanceId, rateGate: () => rateLimiter }) : undefined;
+    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner, dropSessionScoped, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore, ...(deviceLane ? { deviceLane } : {}) });
+    assertDeviceLaneWired(config.remoteExec?.provider === "device", deviceLane, executionEnvFactory !== undefined);
     const toolTracer = config.toolTrace ? createToolTracer(logger) : undefined;
     if (toolTracer)
         logger.info("tool_trace_enabled", {});
@@ -328,7 +332,6 @@ async function main() {
     const runStore = backend ? backend.run() : undefined;
     const resumeAnchorStore = backend ? backend.resumeAnchor() : undefined;
     const approvalExemptionStore = backend ? backend.approvalExemption() : undefined;
-    const instanceId = uuidv7();
     const taskTimeoutSec = Math.max(0, Math.floor(numEnv("TASK_TIMEOUT_SEC", "0")));
     const capEnv = (name) => {
         const r = parseCapEnv(name, process.env[name]);
@@ -515,6 +518,8 @@ async function main() {
     configCenter.startRefreshLoop({ runnerTierFrozen, pricing, limitSync, swapRunnerModels });
     configCenter.initKeyResolver();
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
+        deviceStore: deviceLane?.store,
+        dropSessionScoped,
         config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
         resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileSnapshotStore,
         workflowCompletionInbox, taskListLane,
@@ -585,6 +590,7 @@ async function main() {
         sessionTitler: sessionTitler ? sessionTitler : undefined,
     };
     const seams = {
+        deviceHub: deviceLane?.hub,
         sessionAudit,
         routeJudgeBrain: brain,
         purgeSession: purgeSession ? purgeSession : undefined,
@@ -665,7 +671,7 @@ async function main() {
         config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver,
         getCenterPrompts: () => configCenter.getCenterPrompts(),
         getKeyResolver: () => configCenter.getKeyResolver(),
-        taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv,
+        taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
         selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore,
         singleUserAutoAcceptBaseline, checkpointStore, deploymentHooks, imageIndex, perTaskImage,
@@ -785,6 +791,7 @@ async function main() {
         version: serviceVersion(),
         runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState,
         storeLiveProbe, configCenter,
+        deviceHub: deviceLane?.hub,
         retentionLane: retentionLaneStarted,
         releaseRetentionLease: retentionLaneStore !== undefined ? () => retentionLaneStore.release(instanceId) : undefined,
     });

package/dist/orchestration/hardened-vm-runner.d.ts

@@ -62,6 +62,13 @@ export interface HardenedVmLimits {
      *  A script exceeding it OOMs the WORKER (killed), never the shared main process. Default 128. */
     maxHeapMb?: number;
 }
+/** [5434]①(clay 亲机四 run 三次恰在 600s 整点全灭):workflow 总超时默认与旋钮的**单点**。
+ *  旧默认 600_000(10 分钟)对真实 workflow(验证 agent 逐条重跑清单/任何带审批等待的车)结构性不够——
+ *  默认抬到 **1 小时**;部署经 `WORKFLOW_TOTAL_TIMEOUT_MS` 显式配,域 [60_000, 86_400_000](1 分钟..24h),
+ *  坏值**响亮拒**(#210 立律:旋钮坏值禁静默回默认)。0/负数不是「禁用」:无界 runaway 脚本会吞掉共享
+ *  副本的事件循环/堆,禁用臂刻意不提供——要更久就把值配大。模块加载时读一次(坏 env = boot fail-loud)。
+ *  超时终态分型(partial vs failed,[5434]① 后半)涉 wire status 语义,与 core workflow 终态形另批对表。 */
+export declare function workflowTotalTimeoutMsDefault(): number;
 /**
  * The realm test itself, exported so there is exactly ONE ruler for "did this rejection come from an untrusted
  * script?" in the process. A promise minted INSIDE a vm context fails `instanceof` against the HOST `Promise`

package/dist/orchestration/hardened-vm-runner.js

@@ -1,7 +1,17 @@
 import vm from "node:vm";
 import { splitWorkflowMeta, WorkflowScriptError, } from "@sema-agent/core";
+export function workflowTotalTimeoutMsDefault() {
+    const raw = process.env.WORKFLOW_TOTAL_TIMEOUT_MS;
+    if (raw === undefined || raw === "")
+        return 3_600_000;
+    const n = Number(raw);
+    if (!Number.isSafeInteger(n) || n < 60_000 || n > 86_400_000) {
+        throw new Error(`env WORKFLOW_TOTAL_TIMEOUT_MS must be an integer in [60000, 86400000] ms (got ${JSON.stringify(raw)}) — unset it for the 3600000 default`);
+    }
+    return n;
+}
 const DEFAULTS = {
-    totalTimeoutMs: 600_000,
+    totalTimeoutMs: workflowTotalTimeoutMsDefault(),
     syncTimeoutMs: 5_000,
     maxAgents: 1000,
     concurrency: 12,

package/dist/orchestration/hardened-vm-worker-runner.js

@@ -1,7 +1,7 @@
 import { Worker } from "node:worker_threads";
 import { WorkflowScriptError } from "@sema-agent/core";
-import { scopedPhaseGate } from "./hardened-vm-runner.js";
-const DEFAULTS = { totalTimeoutMs: 600_000, syncTimeoutMs: 5_000, maxAgents: 1000, concurrency: 12, maxHeapMb: 128 };
+import { scopedPhaseGate, workflowTotalTimeoutMsDefault } from "./hardened-vm-runner.js";
+const DEFAULTS = { totalTimeoutMs: workflowTotalTimeoutMsDefault(), syncTimeoutMs: 5_000, maxAgents: 1000, concurrency: 12, maxHeapMb: 128 };
 const IS_TS = import.meta.url.endsWith(".ts");
 const WORKER_URL = new URL(IS_TS ? "./hardened-vm-worker.ts" : "./hardened-vm-worker.js", import.meta.url);
 const WORKER_EXEC_ARGV = IS_TS ? ["--import", "tsx/esm"] : undefined;