agent-tower 0.6.0-beta.2 → 0.6.0-beta.3

package/dist/services/session-manager.d.ts

@@ -2,6 +2,7 @@ import { AgentType } from '../types/index.js';
 import type { EventBus } from '../core/event-bus.js';
 import { TeamReconcilerService } from './team-reconciler.service.js';
 import { RuntimeType, type RuntimeStateDto } from '@agent-tower/shared';
+import { type RuntimeRegistry } from '../runtime/index.js';
 interface StopSessionOptions {
     skipTeamRunReconcile?: boolean;
 }
@@ -34,23 +35,24 @@ export declare class SessionManager {
     private readonly runtimeProcessIds;
     private readonly runtimePermissionStates;
     private readonly externalSessionPersistence;
+    private readonly artifactService;
     private static readonly SNAPSHOT_CHECKPOINT_MS;
     private static readonly HEARTBEAT_THROTTLE_MS;
-    constructor(eventBus: EventBus, teamReconciler?: TeamReconcilerService);
+    constructor(eventBus: EventBus, teamReconciler?: TeamReconcilerService, runtimeRegistry?: RuntimeRegistry);
     findById(id: string): Promise<({
         workspace: {
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            workingDir: string;
             status: string;
             taskId: string;
+            branchName: string;
+            worktreePath: string;
             parentWorkspaceId: string | null;
             ownerMemberId: string | null;
-            branchName: string;
             baseBranch: string | null;
-            worktreePath: string;
             workspaceKind: string;
-            workingDir: string;
             commitMessage: string | null;
             previewTarget: string | null;
             hibernatedAt: Date | null;
@@ -59,9 +61,9 @@ export declare class SessionManager {
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            workingDir: string;
             title: string;
             deletedAt: Date | null;
-            workingDir: string;
             directoryName: string;
             lastActiveAt: Date;
         } | null;
@@ -77,12 +79,12 @@ export declare class SessionManager {
         id: string;
         createdAt: Date;
         updatedAt: Date;
+        agentType: string;
+        runtimeType: string;
         status: string;
         workspaceId: string | null;
         conversationId: string | null;
         context: string;
-        agentType: string;
-        runtimeType: string;
         externalSessionId: string | null;
         variant: string;
         providerId: string | null;
@@ -97,12 +99,12 @@ export declare class SessionManager {
         id: string;
         createdAt: Date;
         updatedAt: Date;
+        agentType: string;
+        runtimeType: string;
         status: string;
         workspaceId: string | null;
         conversationId: string | null;
         context: string;
-        agentType: string;
-        runtimeType: string;
         externalSessionId: string | null;
         variant: string;
         providerId: string | null;
@@ -118,9 +120,9 @@ export declare class SessionManager {
                 description: string | null;
                 createdAt: Date;
                 updatedAt: Date;
-                title: string;
                 status: string;
                 priority: number;
+                title: string;
                 position: number;
                 projectId: string;
                 deletedAt: Date | null;
@@ -129,15 +131,15 @@ export declare class SessionManager {
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            workingDir: string;
             status: string;
             taskId: string;
+            branchName: string;
+            worktreePath: string;
             parentWorkspaceId: string | null;
             ownerMemberId: string | null;
-            branchName: string;
             baseBranch: string | null;
-            worktreePath: string;
             workspaceKind: string;
-            workingDir: string;
             commitMessage: string | null;
             previewTarget: string | null;
             hibernatedAt: Date | null;
@@ -146,9 +148,9 @@ export declare class SessionManager {
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            workingDir: string;
             title: string;
             deletedAt: Date | null;
-            workingDir: string;
             directoryName: string;
             lastActiveAt: Date;
         } | null;
@@ -156,12 +158,12 @@ export declare class SessionManager {
         id: string;
         createdAt: Date;
         updatedAt: Date;
+        agentType: string;
+        runtimeType: string;
         status: string;
         workspaceId: string | null;
         conversationId: string | null;
         context: string;
-        agentType: string;
-        runtimeType: string;
         externalSessionId: string | null;
         variant: string;
         providerId: string | null;
@@ -177,9 +179,9 @@ export declare class SessionManager {
                 description: string | null;
                 createdAt: Date;
                 updatedAt: Date;
-                title: string;
                 status: string;
                 priority: number;
+                title: string;
                 position: number;
                 projectId: string;
                 deletedAt: Date | null;
@@ -188,15 +190,15 @@ export declare class SessionManager {
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            workingDir: string;
             status: string;
             taskId: string;
+            branchName: string;
+            worktreePath: string;
             parentWorkspaceId: string | null;
             ownerMemberId: string | null;
-            branchName: string;
             baseBranch: string | null;
-            worktreePath: string;
             workspaceKind: string;
-            workingDir: string;
             commitMessage: string | null;
             previewTarget: string | null;
             hibernatedAt: Date | null;
@@ -205,9 +207,9 @@ export declare class SessionManager {
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            workingDir: string;
             title: string;
             deletedAt: Date | null;
-            workingDir: string;
             directoryName: string;
             lastActiveAt: Date;
         } | null;
@@ -215,12 +217,12 @@ export declare class SessionManager {
         id: string;
         createdAt: Date;
         updatedAt: Date;
+        agentType: string;
+        runtimeType: string;
         status: string;
         workspaceId: string | null;
         conversationId: string | null;
         context: string;
-        agentType: string;
-        runtimeType: string;
         externalSessionId: string | null;
         variant: string;
         providerId: string | null;
@@ -236,9 +238,9 @@ export declare class SessionManager {
                 description: string | null;
                 createdAt: Date;
                 updatedAt: Date;
-                title: string;
                 status: string;
                 priority: number;
+                title: string;
                 position: number;
                 projectId: string;
                 deletedAt: Date | null;
@@ -247,15 +249,15 @@ export declare class SessionManager {
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            workingDir: string;
             status: string;
             taskId: string;
+            branchName: string;
+            worktreePath: string;
             parentWorkspaceId: string | null;
             ownerMemberId: string | null;
-            branchName: string;
             baseBranch: string | null;
-            worktreePath: string;
             workspaceKind: string;
-            workingDir: string;
             commitMessage: string | null;
             previewTarget: string | null;
             hibernatedAt: Date | null;
@@ -264,9 +266,9 @@ export declare class SessionManager {
             id: string;
             createdAt: Date;
             updatedAt: Date;
+            workingDir: string;
             title: string;
             deletedAt: Date | null;
-            workingDir: string;
             directoryName: string;
             lastActiveAt: Date;
         } | null;
@@ -274,12 +276,12 @@ export declare class SessionManager {
         id: string;
         createdAt: Date;
         updatedAt: Date;
+        agentType: string;
+        runtimeType: string;
         status: string;
         workspaceId: string | null;
         conversationId: string | null;
         context: string;
-        agentType: string;
-        runtimeType: string;
         externalSessionId: string | null;
         variant: string;
         providerId: string | null;
@@ -292,12 +294,12 @@ export declare class SessionManager {
         id: string;
         createdAt: Date;
         updatedAt: Date;
+        agentType: string;
+        runtimeType: string;
         status: string;
         workspaceId: string | null;
         conversationId: string | null;
         context: string;
-        agentType: string;
-        runtimeType: string;
         externalSessionId: string | null;
         variant: string;
         providerId: string | null;

package/dist/services/session-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/services/session-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAA6D,MAAM,mBAAmB,CAAC;AAczG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAUrE,OAAO,EAAE,WAAW,EAAwB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAgD9F,UAAU,kBAAkB;IAC1B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AASD,qBAAa,cAAc;IAgCb,OAAO,CAAC,QAAQ,CAAC,QAAQ;IA/BrC,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,mBAAmB,CAAoC;IAC/D,OAAO,CAAC,6BAA6B,CAAoC;IACzE,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,uBAAuB,CAA6B;IAC5D,OAAO,CAAC,qBAAqB,CAAoC;IACjE,4EAA4E;IAC5E,OAAO,CAAC,gBAAgB,CAAoC;IAC5D,OAAO,CAAC,oBAAoB,CAAoC;IAChE,2GAA2G;IAC3G,OAAO,CAAC,kBAAkB,CAAoC;IAC9D,OAAO,CAAC,0BAA0B,CAAiC;IACnE;;;;OAIG;IACH,OAAO,CAAC,oBAAoB,CAAoC;IAChE,OAAO,CAAC,2BAA2B,CAAyB;IAC5D,+FAA+F;IAC/F,OAAO,CAAC,kBAAkB,CAA6B;IAEvD,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA8B;IACtE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAoC;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAU;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAU;gBAE1B,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,qBAAqB;IA4DjF,QAAQ,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAOzB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,GAAE,WAA6B,GAAG,eAAe;IAIzF,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/F,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,MAAkB,EAAE,UAAU,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;IAsClH,KAAK,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyBhB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAoCrD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6H5D,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB;;;;;;;;;;;;;;;;;;IA6EvD,uCAAuC;IACvC,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI7C,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIzC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIhD;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAmBnC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAIjD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAI3D,yEAAyE;IACnE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAajC,OAAO,CAAC,qBAAqB;YAkBf,gBAAgB;IA6E9B,OAAO,CAAC,sBAAsB;IA8D9B,OAAO,CAAC,kBAAkB;YAkBZ,6BAA6B;YAkB7B,yBAAyB;IAiCvC,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,6BAA6B;YAiBvB,0BAA0B;IAuCxC;;;;OAIG;YACW,iBAAiB;IAmC/B,OAAO,CAAC,uBAAuB;YAiCjB,oBAAoB;YA2BpB,8BAA8B;YAiB9B,eAAe;IAmE7B,OAAO,CAAC,+BAA+B;IAWvC,OAAO,CAAC,6BAA6B;YAUvB,0BAA0B;IAUxC,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,2BAA2B;IAcnC,OAAO,CAAC,sBAAsB;IAc9B;;;;;;;OAOG;YACW,oBAAoB;IA4ClC;;OAEG;IACH,OAAO,CAAC,8BAA8B;IAUtC;;;;;;;OAOG;YACW,mBAAmB;IAwCjC;;;;OAIG;YACW,iBAAiB;IAsI/B,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,wBAAwB;IA+BhC,OAAO,CAAC,uBAAuB;IAK/B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,qBAAqB;YAOf,wBAAwB;IAItC,OAAO,CAAC,eAAe;YAwBT,0BAA0B;IAWxC,OAAO,CAAC,eAAe;CASxB"}
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/services/session-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAA6D,MAAM,mBAAmB,CAAC;AAczG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAerE,OAAO,EAAE,WAAW,EAAwB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAI9F,OAAO,EAKL,KAAK,eAAe,EAKrB,MAAM,qBAAqB,CAAC;AAsC7B,UAAU,kBAAkB;IAC1B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AASD,qBAAa,cAAc;IAkCvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAjC3B,OAAO,CAAC,mBAAmB,CAAoD;IAC/E,OAAO,CAAC,mBAAmB,CAAoC;IAC/D,OAAO,CAAC,6BAA6B,CAAoC;IACzE,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,uBAAuB,CAA6B;IAC5D,OAAO,CAAC,qBAAqB,CAAoC;IACjE,4EAA4E;IAC5E,OAAO,CAAC,gBAAgB,CAAoC;IAC5D,OAAO,CAAC,oBAAoB,CAAoC;IAChE,2GAA2G;IAC3G,OAAO,CAAC,kBAAkB,CAAoC;IAC9D,OAAO,CAAC,0BAA0B,CAAiC;IACnE;;;;OAIG;IACH,OAAO,CAAC,oBAAoB,CAAoC;IAChE,OAAO,CAAC,2BAA2B,CAAyB;IAC5D,+FAA+F;IAC/F,OAAO,CAAC,kBAAkB,CAA6B;IAEvD,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA8B;IACtE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAoC;IAC/E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA8B;IAC9D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAU;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAU;gBAGpC,QAAQ,EAAE,QAAQ,EACnC,cAAc,CAAC,EAAE,qBAAqB,EACtC,eAAe,CAAC,EAAE,eAAe;IA8D7B,QAAQ,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAOzB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,GAAE,WAA6B,GAAG,eAAe;IAIzF,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/F,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,MAAkB,EAAE,UAAU,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;IAsClH,KAAK,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyBhB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAoCrD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6H5D,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB;;;;;;;;;;;;;;;;;;IA2EvD,uCAAuC;IACvC,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI7C,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIzC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIhD;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAmBnC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAIjD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAI3D,yEAAyE;IACnE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAcjC,OAAO,CAAC,qBAAqB;YAkBf,gBAAgB;IAiF9B,OAAO,CAAC,sBAAsB;IA8D9B,OAAO,CAAC,kBAAkB;YAkBZ,6BAA6B;YAkB7B,yBAAyB;IAiCvC,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,6BAA6B;YAmBvB,0BAA0B;IAsCxC;;;;OAIG;YACW,iBAAiB;IAmC/B,OAAO,CAAC,uBAAuB;YAiCjB,oBAAoB;YA2BpB,8BAA8B;YAiB9B,eAAe;IAmE7B,OAAO,CAAC,+BAA+B;IAWvC,OAAO,CAAC,6BAA6B;YAUvB,0BAA0B;IAUxC,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,2BAA2B;IAcnC,OAAO,CAAC,sBAAsB;IAc9B;;;;;;;OAOG;YACW,oBAAoB;IA4ClC;;OAEG;IACH,OAAO,CAAC,8BAA8B;IAUtC;;;;;;;OAOG;YACW,mBAAmB;IAwCjC;;;;OAIG;YACW,iBAAiB;IAsJ/B,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,wBAAwB;IA+BhC,OAAO,CAAC,uBAAuB;IAK/B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,qBAAqB;YAOf,wBAAwB;IAItC,OAAO,CAAC,eAAe;YAwBT,0BAA0B;IAWxC,OAAO,CAAC,eAAe;CASxB"}

package/dist/services/session-manager.js

@@ -10,11 +10,14 @@ import { NotFoundError, ValidationError } from '../errors.js';
 import { ensureTaskNotDeleted } from './deleted-task-guard.js';
 import { getWorkspaceWorkingDir, isMainDirectoryWorkspace, } from './workspace-kind.js';
 import { writeErrorLog } from '../utils/error-log.js';
-import { INTERNAL_API_TOKEN_ENV, readInternalApiTokenFromEnv } from '../utils/internal-api-token.js';
+import { AGENT_API_CREDENTIAL_ENV, clearAgentApiCredentials, createAgentApiCredential, revokeAgentApiCredential, } from '../utils/agent-api-credential.js';
 import { createHash } from 'node:crypto';
 import { RuntimeType, supportsAgentRuntime } from '@agent-tower/shared';
 import { getProviderRuntimeType } from '../executors/providers.js';
+import { appendAgentOutputIntentInstructions } from '../prompts/agent-output-intents.js';
+import { AgentArtifactService } from './agent-artifact.service.js';
 import { CliRuntimeDriver, AcpRuntimeDriver, RuntimeCoordinator, StaticRuntimeRegistry, setRuntimeStateSnapshot, } from '../runtime/index.js';
+import { buildWorkspaceRuntimePrompt } from '../prompts/workspace-background-service-policy.js';
 const DEBUG_SNAPSHOT = process.env.DEBUG_SNAPSHOT === 'true';
 function hashForLog(value) {
     return createHash('sha256').update(value).digest('hex').slice(0, 12);
@@ -76,9 +79,10 @@ export class SessionManager {
     runtimeProcessIds = new Map();
     runtimePermissionStates = new Map();
     externalSessionPersistence = new Map();
+    artifactService = new AgentArtifactService();
     static SNAPSHOT_CHECKPOINT_MS = 15_000;
     static HEARTBEAT_THROTTLE_MS = 30_000;
-    constructor(eventBus, teamReconciler) {
+    constructor(eventBus, teamReconciler, runtimeRegistry) {
         this.eventBus = eventBus;
         this.teamReconciler = teamReconciler ?? new TeamReconcilerService({
             eventBus,
@@ -87,13 +91,14 @@ export class SessionManager {
             // session 退出时的首次 reconcile（COMPLETED 判定 / 首次补催）仍即时执行，不依赖该定时器。
             scheduleReminders: false,
         });
-        this.runtimeCoordinator = new RuntimeCoordinator(new StaticRuntimeRegistry([
+        this.runtimeCoordinator = new RuntimeCoordinator(runtimeRegistry ?? new StaticRuntimeRegistry([
             new CliRuntimeDriver(),
             new AcpRuntimeDriver(),
         ]), {
             onTurnEvent: (event) => this.handleRuntimeTurnEvent(event),
             onRuntimeState: (state) => this.handleRuntimeState(state),
             onProcessEvent: (event) => this.handleRuntimeProcessEvent(event),
+            onDriverSessionDisposed: (sessionId) => revokeAgentApiCredential(sessionId),
         });
         // Patches only mark the snapshot dirty. A low-frequency checkpoint keeps the
         // hot stream away from SQLite while terminal paths still force a final flush.
@@ -358,29 +363,26 @@ export class SessionManager {
             if (!options.skipTeamRunReconcile && !this.isConversationSession(session)) {
                 await this.teamReconciler.handleSessionStopped(id);
             }
+            revokeAgentApiCredential(id);
             return session;
         }
         this.terminalSessions.set(id, SessionStatus.CANCELLED);
-        const runtimeType = this.normalizeRuntimeType(session.runtimeType);
-        if (runtimeType === RuntimeType.ACP && hasActiveTurn) {
-            const canReuseDriverSession = await this.runtimeCoordinator.abandonTurn(id).catch((error) => {
+        if (this.normalizeRuntimeType(session.runtimeType) === RuntimeType.ACP && hasActiveTurn) {
+            await this.runtimeCoordinator.abandonTurn(id).catch((error) => {
                 this.logSessionError('session.runtimeCancel', error, { sessionId: id });
                 return false;
             });
-            if (!canReuseDriverSession) {
-                await this.runtimeCoordinator.disposeSession(id).catch((error) => {
-                    this.logSessionError('session.runtimeDispose', error, { sessionId: id });
-                });
-            }
         }
         else {
             await this.runtimeCoordinator.cancelTurn(id).catch((error) => {
                 this.logSessionError('session.runtimeCancel', error, { sessionId: id });
             });
-            await this.runtimeCoordinator.disposeSession(id).catch((error) => {
-                this.logSessionError('session.runtimeDispose', error, { sessionId: id });
-            });
         }
+        // Explicit stop revokes the DriverSession-bound workspace-service credential.
+        // A later follow-up reopens from the persisted external session id with a new credential.
+        await this.runtimeCoordinator.disposeSession(id).catch((error) => {
+            this.logSessionError('session.runtimeDispose', error, { sessionId: id });
+        });
         const msgStore = sessionMsgStoreManager.get(id);
         if (msgStore) {
             msgStore.pushFinished();
@@ -409,6 +411,7 @@ export class SessionManager {
         // store after the CANCELLED snapshot has been persisted above.
         sessionMsgStoreManager.delete(id);
         this.releaseSnapshotPersistenceState(id);
+        revokeAgentApiCredential(id);
         return session;
     }
     /** @deprecated Use hasActiveTurn(). */
@@ -459,6 +462,7 @@ export class SessionManager {
             release();
         this.followUpReservationReleases.clear();
         this.followUpReservations.clear();
+        clearAgentApiCredentials();
     }
     resolveAgentSessionId(sessionId, logSnapshot) {
         const msgStore = sessionMsgStoreManager.get(sessionId);
@@ -488,10 +492,10 @@ export class SessionManager {
                 env.merge(filterAgentSubprocessExternalEnv(provider.env));
             }
         }
-        this.injectAgentTowerMcpServiceEnv(env);
         if (!this.isConversationSession(session)) {
             await this.injectTeamRunInvocationEnv(session.id, env);
         }
+        this.injectAgentTowerMcpServiceEnv(session.id, env);
         const isNewStore = !sessionMsgStoreManager.has(session.id);
         const msgStore = sessionMsgStoreManager.getOrCreate(session.id);
         if (isNewStore && session.logSnapshot) {
@@ -510,6 +514,7 @@ export class SessionManager {
                 where: { id: session.id },
                 data: { status: SessionStatus.RUNNING },
             });
+            const runtimePrompt = buildWorkspaceRuntimePrompt(session, prompt);
             const handle = await this.runtimeCoordinator.startTurn({
                 towerSessionId: session.id,
                 agentType: session.agentType,
@@ -520,7 +525,9 @@ export class SessionManager {
                 env,
                 externalSessionId: session.externalSessionId,
                 msgStore,
-                prompt,
+                prompt: session.purpose === SessionPurpose.CHAT
+                    ? appendAgentOutputIntentInstructions(runtimePrompt)
+                    : runtimePrompt,
                 resumeExternalSessionId,
                 resumeMode,
             });
@@ -533,6 +540,7 @@ export class SessionManager {
         }
         catch (error) {
             await this.runtimeCoordinator.disposeSession(session.id).catch(() => undefined);
+            revokeAgentApiCredential(session.id);
             await prisma.session.update({
                 where: { id: session.id },
                 data: { status: SessionStatus.CANCELLED },
@@ -682,18 +690,20 @@ export class SessionManager {
     normalizeRuntimeType(value) {
         return value === RuntimeType.ACP ? RuntimeType.ACP : RuntimeType.CLI;
     }
-    injectAgentTowerMcpServiceEnv(env) {
-        const serviceEnv = {};
+    injectAgentTowerMcpServiceEnv(sessionId, env) {
+        const serviceEnv = {
+            AGENT_TOWER_SESSION_ID: sessionId,
+        };
+        serviceEnv[AGENT_API_CREDENTIAL_ENV] = createAgentApiCredential({
+            sessionId,
+            invocationId: env.get('AGENT_TOWER_INVOCATION_ID') ?? null,
+        });
         if (process.env.AGENT_TOWER_URL) {
             serviceEnv.AGENT_TOWER_URL = process.env.AGENT_TOWER_URL;
         }
         if (process.env.AGENT_TOWER_PORT) {
             serviceEnv.AGENT_TOWER_PORT = process.env.AGENT_TOWER_PORT;
         }
-        const internalToken = readInternalApiTokenFromEnv();
-        if (internalToken) {
-            serviceEnv[INTERNAL_API_TOKEN_ENV] = internalToken;
-        }
         if (Object.keys(serviceEnv).length > 0) {
             env.merge(serviceEnv);
         }
@@ -714,7 +724,6 @@ export class SessionManager {
             return;
         }
         env.merge({
-            AGENT_TOWER_SESSION_ID: sessionId,
             AGENT_TOWER_INVOCATION_ID: invocation.id,
             AGENT_TOWER_TEAM_RUN_ID: invocation.teamRunId,
             AGENT_TOWER_MEMBER_ID: invocation.memberId,
@@ -1092,6 +1101,17 @@ export class SessionManager {
                 metadata: { sessionId, exitCode },
             });
         }
+        if (!isFailed && session?.purpose === SessionPurpose.CHAT && this.isCurrentGeneration(sessionId, generation)) {
+            try {
+                const result = await this.artifactService.publishDeclaredArtifacts(sessionId);
+                if (result.failed > 0) {
+                    console.warn(`[SessionManager] Failed to publish ${result.failed} declared artifact(s) for session ${sessionId}`);
+                }
+            }
+            catch (error) {
+                console.warn(`[SessionManager] Failed to publish declared artifacts for session ${sessionId}:`, error instanceof Error ? error.message : error);
+            }
+        }
         if (session?.context === SessionContext.CONVERSATION || session?.conversationId) {
             this.releaseAutoCommitGate(sessionId);
             if (!options.logicalCompletion) {