@sema-agent/server 7.96.0 → 7.97.0

package/USAGE.md

@@ -441,7 +441,9 @@ MODEL_CASCADE_LADDER=deepseek-flash,deepseek-pro   # 目录里的模型名,cheap
   —— 没有任何东西把 B 的路径映到 A。要么把服务(或 `run-local`)跑在放着文件的那台机器上,要么走容器车道
   (`e2b`/`k8s`/`local-docker`),那里的工作区是沙箱自己的,`cwd` 被忽略。
 - **读面(S-426 起)**:`GET /v1/capabilities` 的 `executionLane` 把本部署的车道广告成
-  `{provider:<REMOTE_EXEC 闭集词>, toolsOnThisHost:boolean}`(`REMOTE_EXEC` 未设 ⇒ `provider:"host"`)。
+  `{provider:<执行车道八词>, toolsOnThisHost:boolean}`。S-602 起 `REMOTE_EXEC` 未设 ⇒
+  `provider:"in-process"`、`toolsOnThisHost:false`(本部署没有执行车道 = 无手;改前折报 `"host"`/`true`)。
+  要本机有手,显式设 `REMOTE_EXEC=host`(sema-up 产物已显式写车道)。
   壳/客户端判「工具跑不跑在本机」**读这一位**,不要再从自己这一侧的 `REMOTE_EXEC` 猜 —— 连远端引擎时
   那个 env 说的是**壳自己这台**的事。⚠️ 它是**文件系统同一性**位,**不是**权限位:`cwd` 兑不兑现仍由
   `projectContext` / `callerCwd` 回答(那两位的判据多一条单用户约束,多租户 host 部署上两者会分叉)。
@@ -473,6 +475,7 @@ SEND_USER_FILE_SANDBOX_PUT_ENDPOINT=…         # 可选:沙箱直传 PUT 的端
 - **词表优先级**:内网端点 `MINIO_ENDPOINT` 优先,`S3_ENDPOINT` 是外接 S3 兼容位(内网/公网同址场景可只给它,同时充当公网面);公网端点 `S3_PUBLIC_ENDPOINT` 优先,缺席回落 `S3_ENDPOINT`。空串一律按未设处理。
 - **🔴 云形(`DB_BACKEND=mysql|pg`)快照 blob 强制对象存储(1.295+,clay 拍)**:缺 MinIO 三键 ⇒ **boot 拒启**——单行 SQL blob 写会撞 TiDB `txn-entry-size-limit`(默认 6MiB,真库实测矮墙)/ mysql 协议 `max_allowed_packet`,大字节归对象存储(与 D-1 附件面同裁定)。单机/测试台显式逃生:`SNAPSHOT_BLOB_ALLOW_SQL_BYTES=true`(SQL 店此时带 per-blob 帽,tidb 默认 6MiB,超限 PUT 413 `blob_too_large_for_sql`;帽可用 `SNAPSHOT_BLOB_SQL_MAX_BYTES` 按部署真实限值覆写,两方言生效;pg 默认无帽)。
 - **per-file rewind 历史的边界上限**(与 workspace 浏览面同一个整树快照纪元退役批留下的保留条款):`FILE_HISTORY_RETENTION_KEEP` —— 每个 scope(会话)存活的**最新** boundary 数,**每次 boundary 提交后自剪**(最旧者先亡,刚提交者恒存活;失引用的版本行级联删,blob 字节走异步 grace 窗 GC;v1 基线永存)。未设=core 缺省 **100**(由 core 的 `resolveFileHistoryRetention` 兑现,server 不复制那个数);`unbounded` 是**唯一**的「不剪」拼法(整店自剪关闭,GC 归部署自排 `reap`);`0`/负数/小数/非数 ⇒ **boot 拒启**(码 `config.retention_policy_invalid`,与 core 内置后端同码同判——**省略这个键不等于不剪**,它选的是缺省 100)。三条车道(TiDB / PG / local 文件店)同旋钮同判。⚠️ 升级即生效:存量超 100 boundary 的 scope 在下一次提交时被剪到 100;要保全量先写 `unbounded`。被剪 entry 的键**已花掉**(再次 snapshot 同 entry 典型拒,不复铸)。排序=DB 分配的 per-scope 发布序号 `file_history_boundary.publish_seq`(不是墙钟):**自 7.50.x 有存量 `file_history_boundary` 的部署升级本版会在 boot 期被 `assertFileHistorySchema` 拒启并指明 `DROP TABLE file_history_boundary`**(本仓无 ALTER;丢的是 per-file rewind 便利态,会话与其他持久面不动)。
+- **文件历史捕获总开关**(S-589):`FILE_HISTORY_CAPTURE`(缺省 `true`;布尔词表 true/false/1/0/yes/no/on/off,未知词 ⇒ boot 拒启;TiDB / PG / local 三条车道同义)。`false` ⇒ 不把历史店交给引擎:改动文件的首次快照**一个都不捕获**;交换是同时没有 rewind(`resumeAt`+`restoreFiles` / `rewindFilesTo` 的 run 以 `rewind.store_unconfigured` 失败,文件不动)与 2c session-sync(整族 `501 capability.snapshot_store_required`)。`GET /v1/capabilities` 的 `fileHistoryCapture` 报 `"off"`,`rewindFiles` / `restoreFiles` / `rewindFilesTo` / `sessionSync` 同源翻 `false`(缺省部署报 `"on-always"` = 捕获中且无法按会话关闭)。⚠️ **关掉 ≠ 删掉**:翻旋钮不批量删除存量历史,存量也不再被读用;它照旧随 `DELETE /v1/sessions/:id` 与留存车道清理(擦除面不受本旋钮管;留存车道只在 SQL 后端,local 车道上删会话走 `reap` —— 边界删光、v1 基线按 core 契约留存,既有残余)—— 要清存量走会话删除或留存旋钮。关着时 `FILE_HISTORY_RETENTION_KEEP` 没有效果(不再有边界提交,自剪不会触发),值仍照常校验。翻旋钮后每个进程首个带手的 run 会有一条引擎的 `runner_config_advisory` warn(「file history is not live for this run」),是预期。
 - **🔴 公桶策略必须 GetObject-only**:`mc anonymous set download` 会**连带打开 ListBucket**——匿名 `GET /<bucket>/?list-type=2` 能枚举全部不可猜 key,能力链接设计即告失效。正确姿势=`mc anonymous set-json`,policy 只含 `Action:["s3:GetObject"]` on `arn:aws:s3:::<bucket>/*`(验证:对象 GET 200、桶 LIST 403)。
 - **两条轨**:ttl=0(默认)→ 匿名 GET 公桶下 `uuidv7/<name>` 不可猜 key,链接永久、可回收(删对象);0<ttl≤7 天 → 私桶 + SigV4 限时签名链接(7 天是 SigV4 物理上限,更久用 ttl=0)。
 - **执行 lane 与租户门**:e2b/k8s 沙箱 lane 任意租户可用(沙箱文件系统=租户边界,沙箱内 `curl -T` 直传、字节不中转、凭据不进沙箱);host/ssh lane 仅单用户部署(`REQUIRE_PRINCIPAL` 未开)时挂载。

package/dist/approval.d.ts

@@ -5,6 +5,7 @@
  */
 import { type ToolPolicy } from "@sema-agent/core";
 import { type PostureSource } from "./posture-source.js";
+import { type ExecutionLane } from "./execution-lane-caps.js";
 /**
  * 运维**是否表达了门意图** —— boot 的单用户 allow-all 基线只在"零门意图"时才允许铺开,
  * 所以这个谓词漏一格 = 那一格的意图被 allow-all 静默吞掉。
@@ -39,6 +40,33 @@ export declare function assertGateIntentServiceable(config: {
     durableApproval: boolean;
     durableApprovalSource: PostureSource;
 }, checkpointStorePresent: boolean): void;
+/**
+ * S-602 C3 —— 「**无应答面**」两条 boot warn 的判据与文案(纯函数;stage-07 只负责打日志)。
+ *
+ * 两条 warn 警的是同一类失败:一个 `ask` 发生了,而这台部署既没有活体协调器(`TOOL_APPROVAL_ENABLED`)也没有
+ * durable 停车(`DURABLE_APPROVAL`)⇒ core `resolveAsk` 无 onAsk ⇒ headless 自动拒(fail-closed,写进转录)。
+ * 运维要在 **boot** 就知道,否则会把随之而来的拒绝读成故障。两条 warn 按「ask 从哪来」**划分车道**,互补不重叠:
+ *  · `fs_write_gate_no_responder` —— 写门的 Write/Edit ask。它只在**手写本机盘**时才会发生(写门挂在 host
+ *    语义上,而 ask 要有手去触发)⇒ 判据 = {@link handsOnWorkerFilePlane}(今天 = `host`)。改前写的是
+ *    `remoteExec === undefined || provider === "host"`(门 D R3 同义折):把没有手的 in-process 也算进来,
+ *    那一形上一次 Write ask 都不会发生,warn 是假话;
+ *  · `workflow_gate_no_responder` —— `run_workflow` 的 ask,**每条车道都挂**(不以挂手为前提,见
+ *    `createWorkflowAskPolicy`)⇒ 判据 = 自编排开着 ∧ **不在上一条的射程里**(上一条的文案已覆盖本机手的车道)。
+ *    改前写的是 `remoteExec !== undefined && provider !== "host"` —— 依赖上一条对 in-process 的兜底;
+ *    上一条收窄之后,in-process ∧ 自编排 ∧ 无应答面必须由这一条接住(否则整形零告警)。
+ */
+export declare function buildNoResponderBootWarns(input: {
+    /** 本部署的执行车道(归一读口 `executionLaneOf` 的答案)。 */
+    lane: ExecutionLane;
+    selfOrchestrationEnabled: boolean;
+    /** 活体协调器 ∨ durable 停车 —— 任何一面在场,ask 都有人答。 */
+    approvalFaceWired: boolean;
+}): Array<{
+    event: "fs_write_gate_no_responder" | "workflow_gate_no_responder";
+    fields: {
+        hint: string;
+    };
+}>;
 /**
  * [ref] 件⑩ —— **center 的 `forceDurableGate` 在无 checkpoint 店的部署上会静默 inert**,补一条 boot 披露。
  *

package/dist/approval.js

@@ -2,6 +2,7 @@ import { isNamespacedCoveringRuleName, namespacedRuleNameCovers } from "@sema-ag
 import { operatorAsk } from "./operator-ask.js";
 import { ASK_USER_QUESTION_TOOL_NAME } from "./approval-content-kind.js";
 import { isExplicitPosture } from "./posture-source.js";
+import { handsOnWorkerFilePlane } from "./execution-lane-caps.js";
 export function hasOperatorGateIntent(config) {
     return (config.approvalRequire.length > 0 ||
         config.approvalDeny.length > 0 ||
@@ -16,6 +17,29 @@ export function assertGateIntentServiceable(config, checkpointStorePresent) {
     }
     throw new Error("DURABLE_APPROVAL=true but no checkpoint store is available — the configured DB backend has no checkpoint face (or no backend is configured). Wire a MySQL-protocol/PostgreSQL/file backend, or unset DURABLE_APPROVAL.");
 }
+export function buildNoResponderBootWarns(input) {
+    if (input.approvalFaceWired)
+        return [];
+    const handsOnThisDisk = handsOnWorkerFilePlane(input.lane);
+    const out = [];
+    if (handsOnThisDisk) {
+        out.push({
+            event: "fs_write_gate_no_responder",
+            fields: {
+                hint: "host-semantics lane with no approval face: permissionMode default/auto Write/Edit asks will auto-deny (fail-closed); wire TOOL_APPROVAL_ENABLED=true or DURABLE_APPROVAL=true to answer them",
+            },
+        });
+    }
+    if (input.selfOrchestrationEnabled && !handsOnThisDisk) {
+        out.push({
+            event: "workflow_gate_no_responder",
+            fields: {
+                hint: "self-orchestration with no approval face: permissionMode default/auto/acceptEdits run_workflow asks will auto-deny (fail-closed); wire TOOL_APPROVAL_ENABLED=true or DURABLE_APPROVAL=true to answer them",
+            },
+        });
+    }
+    return out;
+}
 export function buildForceDurableGateInertNotice(input) {
     if (!input.entitlementSourceWired || input.checkpointStorePresent)
         return undefined;

package/dist/boot/budget-tracing.d.ts

@@ -43,5 +43,6 @@ export declare function createBudgetAndTracing(ctx: BudgetTracingCtx): {
     toolResultStore: import("../plugins/store-backend.js").ToolResultStoreFull | undefined;
     sessionPolicyStore: import("@sema-agent/core").SessionPolicyStore | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
 };
 //# sourceMappingURL=budget-tracing.d.ts.map

package/dist/boot/budget-tracing.js

@@ -4,6 +4,7 @@ import { FleetUsageAccumulator } from "../fleet-client.js";
 import { createFleetLeaseFromEnv } from "../fleet-lease.js";
 import { CostQuota } from "../observability/cost-quota.js";
 import { buildQuotaBounds } from "./limit-sync.js";
+import { assembleFileHistory } from "../file-history-capture.js";
 export function createBudgetAndTracing(ctx) {
     const { config, logger, metrics, backend, breakerState } = ctx;
     const brain = createBrain(config, { breakerState });
@@ -29,10 +30,10 @@ export function createBudgetAndTracing(ctx) {
     const sideQueryAccounting = createSideQueryAccountant(metrics, costQuota, fleetUsage, fleetLease, (m) => config.modelQuotaWeights[m] ?? 1);
     const toolResultStore = backend?.toolResult ? backend.toolResult() : undefined;
     const sessionPolicyStore = backend ? backend.sessionPolicy() : undefined;
-    const fileHistoryStore = backend ? backend.fileHistory() : undefined;
+    const { store: fileHistoryStore, erasure: fileHistoryErasure } = assembleFileHistory(backend, config.fileHistoryCapture);
     return {
         brain, pricing, counterDegradeHook, costQuota, modelUsageTracker, promptManifestTracker,
-        fleetUsage, fleetLease, tracer, sideQueryAccounting, toolResultStore, sessionPolicyStore, fileHistoryStore,
+        fleetUsage, fleetLease, tracer, sideQueryAccounting, toolResultStore, sessionPolicyStore, fileHistoryStore, fileHistoryErasure,
     };
 }
 //# sourceMappingURL=budget-tracing.js.map

package/dist/boot/config-center.js

@@ -388,11 +388,8 @@ export async function createConfigCenterRuntime(ctx) {
                 try {
                     const fileRx = await loadRemoteExec(localRoot);
                     if (fileRx) {
-                        const preemptedLane = config.remoteExec?.provider ?? "in-process";
-                        const isolatedLane = (lane) => {
-                            const word = executionLaneOf(lane === "in-process" ? undefined : lane);
-                            return word !== undefined && executionLaneCaps(word).isolation === "supported";
-                        };
+                        const preemptedLane = executionLaneOf(config.remoteExec?.provider);
+                        const isolatedLane = (lane) => executionLaneCaps(lane).isolation === "supported";
                         const disclosePreemption = (winner) => {
                             if (winner === preemptedLane)
                                 return;

package/dist/boot/coordinators.js

@@ -7,6 +7,7 @@ import { createSandboxFileSend, TaskEnvRegistry } from "../capabilities/sandbox-
 import { createSendUserFileIssuer } from "../plugins/send-user-file.js";
 import { withLedgerRecording } from "../plugins/send-file-ledger.js";
 import { basename, resolve } from "node:path";
+import { toolsRunOnThisHost } from "../task-cwd.js";
 import { stat as fsStat, readFile as fsReadFile } from "node:fs/promises";
 export function createLiveCoordinators(ctx) {
     const { config, logger, backend, sendUserFileTaskEnvs, ruleConsent, ruleScopeRootFor, getParkedRedeem } = ctx;
@@ -75,8 +76,7 @@ export function createLiveCoordinators(ctx) {
             return undefined;
         if (sendUserFileTaskEnvs)
             return new SendUserFileEmitter();
-        const provider = config.remoteExec?.provider ?? "host";
-        if (provider === "host" && config.requirePrincipal !== true)
+        if (toolsRunOnThisHost(config) && config.requirePrincipal !== true)
             return new SendUserFileEmitter();
         return undefined;
     })();

package/dist/boot/deferred-sandbox-path-env.d.ts

@@ -46,8 +46,11 @@
  * 该面由 test/task-settings.test.ts 的「真身胜过名字」特征化钉机器可见。
  */
 import { FileError, StubExecutionEnv, type ExecutionEnv, type ExecutionEnvFactory, type FileInfo, type Result } from "@sema-agent/core";
-/** 哪些 lane 用本模块的代理裁决写门 —— `REMOTE_EXEC` 未设(进程内 host)与显式 `host` 之外的全部。
- *  与 resolve-spec 的 `hostSemanticsLane` 是同一判别式的两面,取值处**只此一个**(两处各写一份正是漂移的成因)。 */
+/** 哪些 lane 用本模块的代理裁决写门 —— 文件平面**不在** worker 本机的全部(= 能力表 `hostFilePlane` 答否)。
+ *  与 resolve-spec 的 `hostSemanticsLane` 是同一判别式的两面,取值处**只此一个**(两处各写一份正是漂移的成因)。
+ *  🔴 S-602:改前写的是 `provider !== undefined && provider !== "host"` —— 把缺席并进 host 的同义折(门 D R3),
+ *  今天改读表那一位(`in-process` / `host` 答 YES,其余答 NO;读数逐格不变)。认不出的词 ⇒ 走代理裁决:
+ *  代理 slot 空 ⇒ 写门 fail-closed(本模块头注裁定 2),与改前同向。 */
 export declare function isSandboxPathAdjudicationLane(provider: string | undefined): boolean;
 /** slot 取值的三态。`ok:false` 的两支都是 fail-closed,分开只为让留痕说得出**哪一种**缺席。 */
 export type SandboxPathEnvLookup = {

package/dist/boot/deferred-sandbox-path-env.js

@@ -1,7 +1,9 @@
 import { FileError, StubExecutionEnv, err, ok } from "@sema-agent/core";
 import { normalizeAbsolutePathLexically } from "../task-cwd.js";
+import { executionLaneCaps, executionLaneOf } from "../execution-lane-caps.js";
 export function isSandboxPathAdjudicationLane(provider) {
-    return provider !== undefined && provider !== "host";
+    const lane = executionLaneOf(provider);
+    return lane === undefined || executionLaneCaps(lane).hostFilePlane !== "supported";
 }
 const MAX_BOUND_SESSIONS = 4096;
 export class SandboxPathEnvSlots {

package/dist/boot/memory-boundary.d.ts

@@ -54,6 +54,7 @@
  * `TaskSpec.memoryPersistenceCapable` 一条路进去(`boot/resolve-spec.ts` 直通),我方显式**不铸**受限会话、
  * 也**不投**这个读面(硬造一个消费点 = 造给自己看的 wire 键)。哪天真要在诊断面露它,先有消费方需求。
  */
+import { type ExecutionLane, type RemoteExecProvider } from "../execution-lane-caps.js";
 /**
  * [ref] A3 源头修(黑板 [ref]/[ref]/[ref],[ref])—— `memoryPersistenceCapable` 的**装配层有效值**:
  * operator 显式 env 恒赢;env 缺席时,`REMOTE_EXEC=host` 腿自动补 `true`;其余一律缺席(现行为)。
@@ -93,8 +94,8 @@ export interface MemoryWriteBoundaryFacts {
      *  core 7.16.0([ref])之后写家还要再深一层(`<平面>/<label>`),但 label 归引擎注册簿,boot 期说不出口;
      *  平面是**包含关系上等价**的那一只(家恒为平面的直接子目录),所以判据停在平面,不猜 label。 */
     memoryRoot: string | undefined;
-    /** 执行车道名,只进文案(`config.remoteExec?.provider ?? "in-process"`)。 */
-    lane: string;
+    /** 执行车道名,只进文案(归一读口 `executionLaneOf` 的答案;S-602 起不在调用点手写 `?? "in-process"`)。 */
+    lane: ExecutionLane;
     /** 该车道的文件工具是否跑在**本机** fs 上(in-process / `REMOTE_EXEC=host`)。false = 沙箱盘,与记忆根分平面。
      *  ⚠️ 这一位管的是**文件平面**,与下面的 `coreRemoteExecutionEnv` 是**两根轴**,别合并(codex round2
      *  [medium] 就是把它们当成一根轴的后果):`host` 车道的文件平面就是本机(这一位 true),但 core 眼里它
@@ -116,6 +117,20 @@ export interface MemoryWriteBoundaryFacts {
     /** boot 期算得出的文件工具围栏根。空数组 = 算不出(每任务临时目录 / 未配 workspace)⇒ 不判。 */
     containmentRoots: readonly string[];
 }
+/**
+ * S-602 —— 审计的**车道那四位**由本函数从能力表派生(boot/stores.ts 的装配点只调它,不再就地手写):
+ * 改前 stores 里是 `lane === undefined || lane === "host"`(同义折,门 D R3)+ `config.remoteExec !== undefined`
+ * (座位上的裸缺席判,R4)+ `lane ?? "in-process"` ×3(R2)。两根轴各读表里各自那一位,不合并:
+ *  · `hostSemanticsLane` ⇐ `hostFilePlane`(文件平面在不在本机);
+ *  · `coreRemoteExecutionEnv` ⇐ 同名位(core 拿没拿到执行环境)。
+ * 读数逐车道不变(对账:`test/execution-lane-caps.test.ts` 的真装配点联合覆盖格)。`processCwd` 由调用点传
+ * (stores 传 `process.cwd()`),本函数保持纯。
+ */
+export declare function buildMemoryBoundaryLaneFacts(config: {
+    readonly remoteExec?: {
+        readonly provider: RemoteExecProvider;
+    } | undefined;
+}, processCwd: string): Pick<MemoryWriteBoundaryFacts, "lane" | "hostSemanticsLane" | "coreRemoteExecutionEnv" | "containmentRoots">;
 /** 一条启动告警:`tag` 进日志事件名(可被运维按名过滤/告警),`detail` 是给人读的整句(含恢复路径)。 */
 export interface MemoryWriteBoundaryWarning {
     tag: "memory_root_outside_write_boundary" | "memory_remote_lane_write_instruction_dropped";

package/dist/boot/memory-boundary.js

@@ -1,9 +1,20 @@
 import { resolve } from "node:path";
+import { executionLaneCaps, executionLaneOf } from "../execution-lane-caps.js";
 export function effectiveMemoryPersistenceCapable(config) {
     if (config.memoryPersistenceCapable !== undefined)
         return config.memoryPersistenceCapable;
     return config.remoteExec?.provider === "host" ? true : undefined;
 }
+export function buildMemoryBoundaryLaneFacts(config, processCwd) {
+    const lane = executionLaneOf(config.remoteExec?.provider);
+    const caps = executionLaneCaps(lane);
+    return {
+        lane,
+        hostSemanticsLane: caps.hostFilePlane === "supported",
+        coreRemoteExecutionEnv: caps.coreRemoteExecutionEnv === "supported",
+        containmentRoots: lane === "in-process" ? [processCwd] : [],
+    };
+}
 function isInside(child, root) {
     const c = resolve(child);
     const r = resolve(root);

package/dist/boot/reapers.d.ts

@@ -20,6 +20,7 @@ import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import type { WorkflowNotifyGate, WorkflowNotifyJournalStore } from "../orchestration/workflow-notify-journal.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
+import type { FileHistoryErasureFace } from "../file-history-capture.js";
 import type { ApprovalNonceStore, CheckpointStoreFull, CostQuotaStore, ImageBake, RateLimiterStore, ServiceWorkflowJournalStore, StoreBackend, ToolResultStoreFull } from "../plugins/store-backend.js";
 import type { ToolApprovalCoordinator } from "../tool-approval.js";
 /** [ref] / [ref]§五(sema-comms `audits/failopen-governance-176.md` §7 "Z 类 1 条"):default consecutive-failure
@@ -69,7 +70,8 @@ export interface ReapersCtx {
     rateLimiter: RateLimiter | RateLimiterStore | undefined;
     costQuota: CostQuota | CostQuotaStore | undefined;
     toolResultStore: ToolResultStoreFull | undefined;
-    fileHistoryStore: ReturnType<StoreBackend["fileHistory"]> | undefined;
+    /** S-589:文件历史的**擦除脸**(后端在即在,与 `FILE_HISTORY_CAPTURE` 无关)—— 本段只用它的孤儿 blob GC。 */
+    fileHistoryErasure: FileHistoryErasureFace | undefined;
     taskAttachmentStore: TaskAttachmentStore | undefined;
     imageBakes: ImageBake | undefined;
     worktreeReap: (() => Promise<void>) | undefined;

package/dist/boot/reapers.js

@@ -56,7 +56,7 @@ export function createPlacementAwareReapSessions(deps) {
     };
 }
 export function startReapers(ctx) {
-    const { config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, rateLimiter, costQuota, toolResultStore, fileHistoryStore, taskAttachmentStore, imageBakes, worktreeReap, workflowNotifyGate, workflowRecoverOpts, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore, backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore, getRunDenySweep, } = ctx;
+    const { config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, rateLimiter, costQuota, toolResultStore, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap, workflowNotifyGate, workflowRecoverOpts, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore, backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore, getRunDenySweep, } = ctx;
     const leg = (p) => {
         if (p !== undefined)
             trackMaintenanceLeg(p);
@@ -227,7 +227,7 @@ export function startReapers(ctx) {
         leg(toolResultStore
             ?.reapOlderThan?.(Date.now() - config.toolResultTtlSec * 1000)
             ?.then(() => toolResultReapOlderThanGuard.onSuccess(), toolResultReapOlderThanGuard.onError));
-        leg(fileHistoryStore
+        leg(fileHistoryErasure
             ?.sweepOrphanBlobs?.()
             .then(() => fileHistorySweepOrphanBlobsGuard.onSuccess(), fileHistorySweepOrphanBlobsGuard.onError));
         leg(backend?.legacySnapshotBlobSweep?.()

package/dist/boot/resolve-spec.js

@@ -7,7 +7,7 @@ import { SessionEnvironmentSelection, selectEnvironmentTool } from "../capabilit
 import { sendUserFileTool } from "../capabilities/send-user-file-tool.js";
 import { gateScenarioRequest, mergeUserSkills, selectScenario } from "../capabilities/scenarios.js";
 import { stampHandsLane, toolPolicyForHands } from "../capabilities/hands-lane.js";
-import { shouldDiscloseNoPersistentMemory, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
+import { buildNoticeLaneFacts, shouldDiscloseNoPersistentMemory, withNoPersistentMemoryNotice } from "../capabilities/memory-notice.js";
 import { applyLongtailDefer } from "../capabilities/tool-defer.js";
 import { assertGuardPatternsUsable, buildOnlySensitiveBaselineWarning, createApprovalBaselinePolicy, createDeploymentGovernanceInputs } from "../deployment-governance.js";
 import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScratchpadDir, resumeFactsForLane, scratchpadCoveringTaskRoot } from "../env-facts.js";
@@ -36,7 +36,7 @@ import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, acceptAppendSystemPrompt, applyTaskSet
 import { enableForkFromBody, normalizeRetainSubagentSessions, selfOrchestrationFromBody } from "../task-workflow.js";
 import { redactSecrets } from "../trace/redact.js";
 import { DeferredSandboxPathEnv, isSandboxPathAdjudicationLane, sandboxPathEnvSlots } from "./deferred-sandbox-path-env.js";
-import { executionLaneHomeDir } from "../execution-lane-caps.js";
+import { executionLaneCaps, executionLaneHomeDir, executionLaneOf } from "../execution-lane-caps.js";
 import { effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { memoryFaceMounted } from "../memory-scope.js";
 export function createResolveSpec(ctx) {
@@ -88,7 +88,7 @@ export function createResolveSpec(ctx) {
     };
     const gateScenarioAndAppend = async (body, auth, opts) => {
         const requested = gateScenarioRequest(await principalCaps?.scenarioRuling(auth?.principal), body.scenario, config.defaultScenario, Object.keys(scenarios), logger);
-        gateExecutionLane(await principalCaps?.executionRuling(auth?.principal), config.remoteExec?.provider ?? "in-process", logger);
+        gateExecutionLane(await principalCaps?.executionRuling(auth?.principal), executionLaneOf(config.remoteExec?.provider), logger);
         const scenarioName = scenarios[requested] ? requested : "default";
         const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal, auth?.sessionId !== undefined ? { sessionId: auth.sessionId } : {});
         const centerDecls = getCenterPrompts()?.declarations;
@@ -144,7 +144,7 @@ export function createResolveSpec(ctx) {
     const bindSettingsCwdEnvAndModel = (body, auth, gated, effMode, opts) => {
         const { objective, parsedSettings } = gated;
         const cwdWriteGate = cwdHonored(config) || deviceCwdHonored(config);
-        const execLane = config.remoteExec?.provider ?? "in-process";
+        const execLane = executionLaneOf(config.remoteExec?.provider);
         if (auth?.sessionId)
             fenceSessionOwner(auth.sessionId, auth.principal ?? null);
         if (typeof body.cwd === "string" && body.cwd.length > 0 && auth?.sessionId) {
@@ -558,7 +558,7 @@ export function createResolveSpec(ctx) {
             handsReadOnly: governed.handsReadOnly === true,
             excludeAllTools: governed.excludeAllTools === true,
             excludeTools: governed.excludeTools,
-            remoteExecutionEnv: config.remoteExec !== undefined,
+            ...buildNoticeLaneFacts(executionLaneOf(config.remoteExec?.provider)),
         })) {
             governed = { ...governed, promptProvider: withNoPersistentMemoryNotice(governed.promptProvider) };
         }
@@ -619,7 +619,7 @@ export function createResolveSpec(ctx) {
             const isolatedExecEnv = isIsolatedExecEnv(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? config.remoteExec.runtimeClass : undefined);
             const decision = routeServiceTask({
                 isolatedExecEnv,
-                hasExecutionEnv: config.remoteExec != null,
+                hasExecutionEnv: executionLaneCaps(executionLaneOf(config.remoteExec?.provider)).coreRemoteExecutionEnv === "supported",
                 ...(config.autonomy ? { autonomy: config.autonomy } : {}),
                 explicitTeam: body.council === true || body.debate === true || scenarioName === "discuss",
             });

package/dist/boot/runner-deps.d.ts

@@ -191,7 +191,8 @@ export interface RunnerDepsCtx {
     sessionPolicyStore: ReturnType<StoreBackend["sessionPolicy"]> | undefined;
     runtimeCapsResolver: RunnerDeps["runtimeCapsResolver"];
     /** [ref] per-edited-file rewind history (core `RunnerDeps.fileHistoryStore`; replaces the retired E19
-     *  whole-tree snapshot seat — core 94632197 renamed the seat, not a coexistence). WIRING IS THE OPT-IN. */
+     *  whole-tree snapshot seat — core 94632197 renamed the seat, not a coexistence). WIRING IS THE OPT-IN.
+     *  S-589:值 = `assembleFileHistory` 的捕获脸(后端 ∧ `FILE_HISTORY_CAPTURE`)。 */
     fileHistoryStore: ReturnType<StoreBackend["fileHistory"]> | undefined;
     /** [ref] 车二:持久化权限规则店 provider(core `RunnerDeps.permissionRuleStore`)。缺席 ⇒ 引擎的
      *  `permissionRules.storeWired` 如实报 false、`AskRequest.ruleOffers` 不铸(诚实缺席)。 */

package/dist/boot/session-faces.d.ts

@@ -5,6 +5,7 @@ import type { WorkflowCompletionInbox } from "../orchestration/workflow-completi
 import { PlanCacheProbe } from "../plan-cache-probe.js";
 import type { CheckpointStoreFull, StoreBackend, ToolResultStoreFull } from "../plugins/store-backend.js";
 import type { TaskAttachmentStore } from "../plugins/task-attachment-store.js";
+import type { FileHistoryErasureFace } from "../file-history-capture.js";
 import type { OwnerAwareSessionStore } from "../security.js";
 import type { DeviceStore } from "../device-store.js";
 import { SessionWatchRegistry } from "../session-watch.js";
@@ -25,7 +26,9 @@ export interface SessionFacesCtx {
     approvalExemptionStore: ReturnType<StoreBackend["approvalExemption"]> | undefined;
     sessionPolicyStore: ReturnType<StoreBackend["sessionPolicy"]> | undefined;
     taskAttachmentStore: TaskAttachmentStore | undefined;
-    fileHistoryStore: ReturnType<StoreBackend["fileHistory"]> | undefined;
+    /** S-589:文件历史的**擦除脸**(后端在即在,与 `FILE_HISTORY_CAPTURE` 无关;只有删除类动词)。E21 删除读它,
+     *  不读捕获脸 —— 关掉捕获的部署照样要删得掉已捕获的文件字节(旋钮只管写入,从不管擦除)。 */
+    fileHistoryErasure: FileHistoryErasureFace | undefined;
     workflowCompletionInbox: WorkflowCompletionInbox | undefined;
     /** [ref]:会话级任务清单车道(E21 级联的一条腿)。缺席 = 装配未接本车道 ⇒ 无清单可删。 */
     taskListLane: TaskListLane | undefined;

package/dist/boot/session-faces.js

@@ -6,7 +6,7 @@ import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
 import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
 export function createSessionFaces(ctx) {
-    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
+    const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
     const mysqlPool = backend?.mysqlPool();
     const auditPgPool = backend?.pgPool();
     const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
@@ -66,11 +66,11 @@ export function createSessionFaces(ctx) {
             if (deviceStore)
                 await deviceStore.deleteByRootSession(sessionId);
             dropSessionScoped?.(sessionId);
-            if (fileHistoryStore) {
-                if (typeof fileHistoryStore.deleteBySession === "function")
-                    await fileHistoryStore.deleteBySession(sessionId);
+            if (fileHistoryErasure) {
+                if (typeof fileHistoryErasure.deleteBySession === "function")
+                    await fileHistoryErasure.deleteBySession(sessionId);
                 else {
-                    await fileHistoryStore.reap(sessionId, []);
+                    await fileHistoryErasure.reap(sessionId, []);
                     logger.warn("session_file_history_baselines_retained", {
                         sessionId,
                         note: "the local file-history store has no whole-scope purge verb; boundaries were reaped but v1 baselines (original file bytes) remain under the data root until the upstream purge seam lands — recorded as an open deletion-rights gap, not silent",

package/dist/boot/stage-04-stores.d.ts

@@ -9,6 +9,7 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-04-stores.js

@@ -27,7 +27,7 @@ export async function runStage04(ctx) {
     if (adoptionBoot.scanned > 0 || adoptionBoot.error !== undefined) {
         logger.info("adoption_boot_scan", { ...adoptionBoot });
     }
-    const { brain, pricing, counterDegradeHook, costQuota, modelUsageTracker, promptManifestTracker, fleetUsage, fleetLease, tracer, sideQueryAccounting, toolResultStore, sessionPolicyStore, fileHistoryStore, } = createBudgetAndTracing({ config, logger, metrics, backend, breakerState });
+    const { brain, pricing, counterDegradeHook, costQuota, modelUsageTracker, promptManifestTracker, fleetUsage, fleetLease, tracer, sideQueryAccounting, toolResultStore, sessionPolicyStore, fileHistoryStore, fileHistoryErasure, } = createBudgetAndTracing({ config, logger, metrics, backend, breakerState });
     const permissionRuleStores = config.permissionRulesEnabled && backend ? backend.permissionRule() : undefined;
     const permissionRuleProvider = permissionRuleStores
         ? createPermissionRuleStoreProvider({ durable: permissionRuleStores.durable })
@@ -44,6 +44,6 @@ export async function runStage04(ctx) {
         });
     }
     await auditDormantPermissionRules({ stores: permissionRuleStores, logger, explicit: config.permissionRulesEnabledExplicit });
-    return { ...ctx, brain, costQuota, counterDegradeHook, fileHistoryStore, fleetLease, fleetUsage, memoryBundleFaces, memoryComplianceFaces, memoryOriginFaces, modelUsageTracker, permissionRuleProvider, permissionRuleStores, pricing, promptManifestTracker, ruleConsent, sessionMemoryStatusFace, sessionPolicyStore, sideQueryAccounting, toolResultStore, tracer };
+    return { ...ctx, brain, costQuota, counterDegradeHook, fileHistoryErasure, fileHistoryStore, fleetLease, fleetUsage, memoryBundleFaces, memoryComplianceFaces, memoryOriginFaces, modelUsageTracker, permissionRuleProvider, permissionRuleStores, pricing, promptManifestTracker, ruleConsent, sessionMemoryStatusFace, sessionPolicyStore, sideQueryAccounting, toolResultStore, tracer };
 }
 //# sourceMappingURL=stage-04-stores.js.map

package/dist/boot/stage-05-execution-env.d.ts

@@ -22,6 +22,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-06-runners.d.ts

@@ -83,6 +83,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-07-capability-layer.d.ts

@@ -98,6 +98,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -6,9 +6,9 @@ import { parseCapEnv, parseNumOrFailNonNegative } from "../config.js";
 import { ensureChildSessionDurableWithPromotion } from "../plugins/session-store.js";
 import { webSearchConfigFromEnv, createWebSearchBackend, shouldProbeWebSearchOnBoot } from "../plugins/web-search.js";
 import { createAuthorizer } from "../security.js";
-import { assertGateIntentServiceable, buildForceDurableGateInertNotice, hasOperatorGateIntent } from "../approval.js";
-import { loadSkills } from "../capabilities/skills.js";
-import { toolsRunOnThisHost } from "../task-cwd.js";
+import { assertGateIntentServiceable, buildForceDurableGateInertNotice, buildNoResponderBootWarns, hasOperatorGateIntent } from "../approval.js";
+import { executionLaneOf } from "../execution-lane-caps.js";
+import { loadDeploymentSkills } from "../capabilities/skills.js";
 import { createRepoClient } from "../capabilities/repo-tools.js";
 import { buildScenarios, builtinScenarioDetails } from "../capabilities/scenarios.js";
 import { RateLimiter } from "../observability/rate-limit.js";
@@ -73,16 +73,12 @@ export async function runStage07(ctx) {
             tasksUsable: runStore !== undefined,
         });
     }
-    if ((config.remoteExec === undefined || config.remoteExec.provider === "host") && !toolApproval && !durableEnabled) {
-        logger.warn("fs_write_gate_no_responder", {
-            hint: "host-semantics lane with no approval face: permissionMode default/auto Write/Edit asks will auto-deny (fail-closed); wire TOOL_APPROVAL_ENABLED=true or DURABLE_APPROVAL=true to answer them",
-        });
-    }
-    if (config.selfOrchestrationEnabled && config.remoteExec !== undefined && config.remoteExec.provider !== "host" && !toolApproval && !durableEnabled) {
-        logger.warn("workflow_gate_no_responder", {
-            hint: "self-orchestration with no approval face: permissionMode default/auto/acceptEdits run_workflow asks will auto-deny (fail-closed); wire TOOL_APPROVAL_ENABLED=true or DURABLE_APPROVAL=true to answer them",
-        });
-    }
+    for (const w of buildNoResponderBootWarns({
+        lane: executionLaneOf(config.remoteExec?.provider),
+        selfOrchestrationEnabled: config.selfOrchestrationEnabled,
+        approvalFaceWired: toolApproval !== undefined || durableEnabled,
+    }))
+        logger.warn(w.event, w.fields);
     if (singleUserAutoAcceptBaseline) {
         logger.info("tool_policy_single_user_default", {
             posture: "adjudicated auto-accept — ALL write/hand/MCP tool surfaces auto-allowed (core per-surface UNGATED enumeration suppressed for single-user turnkey)",
@@ -110,7 +106,7 @@ export async function runStage07(ctx) {
         ? backend.rateLimiter(config.rateLimitPerMin, counterDegradeHook).startRefresh()
         : new RateLimiter(config.rateLimitPerMin);
     bindRateLimiter(rateLimiter);
-    let skills = loadSkills(config.skillsDir, { toolsShareThisFilesystem: toolsRunOnThisHost(config) });
+    let skills = loadDeploymentSkills(config);
     skills = await configCenter.applyCenterCapabilities(skills);
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();

package/dist/boot/stage-08-reapers.d.ts

@@ -109,10 +109,9 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
         kind: string;
         streak: number;
         prevStreak: number;
-        error
-        /** 租约 TTL = 2× sweep 间隔(§3)。抢租与每 domain 的续租共用同一个值 —— 两处手抄迟早只改一处。 */
-        ?: string;
+        error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-08-reapers.js

@@ -5,10 +5,10 @@ import { startRetentionLane, RETENTION_LEASE_TTL_FACTOR } from "./retention-lane
 import { createLimitSync } from "./limit-sync.js";
 import { runDenySweep } from "./late-binds.js";
 export function runStage08(ctx) {
-    const { approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, config, configCenter, costQuota, fileHistoryStore, handslessRunner, handslessSubRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, runnerTierFrozen, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
+    const { approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, config, configCenter, costQuota, fileHistoryErasure, handslessRunner, handslessSubRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, runnerTierFrozen, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
     const reaper = startReapers({
         config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore,
-        rateLimiter, costQuota, toolResultStore, fileHistoryStore, taskAttachmentStore, imageBakes, worktreeReap,
+        rateLimiter, costQuota, toolResultStore, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap,
         workflowNotifyGate, workflowRecoverOpts, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore,
         backgroundAgentStore, mailboxStore, toolApproval, permissionRuleStores, approvalNonceStore,
         getRunDenySweep: () => runDenySweep,

package/dist/boot/stage-09-leader.d.ts

@@ -145,6 +145,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;

package/dist/boot/stage-09-leader.js

@@ -6,12 +6,12 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryStore, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
         config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
-        resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryStore,
+        resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure,
         workflowCompletionInbox, taskListLane, mailboxStore, mailboxRecipientLifecycle,
     });
     const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });

package/dist/boot/stage-10-http-server.d.ts

@@ -145,6 +145,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
         prevStreak: number;
         error?: string;
     }) => void;
+    fileHistoryErasure: import("../file-history-capture.js").FileHistoryErasureFace | undefined;
     fileHistoryStore: import("../plugins/store-backend.js").ServiceFileHistoryStore | undefined;
     fleetLease: import("../fleet-lease.js").FleetLeaseManager | undefined;
     fleetUsage: import("../fleet-client.js").FleetUsageAccumulator | undefined;