chainlesschain 0.165.5 → 0.165.8

package/src/commands/session-location.js

@@ -61,6 +61,11 @@ import {
   verifyExecutionLocationResultApplySourceGit,
 } from "../lib/execution-location-result-apply.js";
 import { executionBroker } from "../lib/process-execution-broker/index.js";
+import {
+  projectExecutionLocationTargetSigtermProbe,
+  projectExecutionLocationTargetPreflight,
+  runExecutionLocationTargetResourceProbe,
+} from "../lib/execution-location-target-preflight.js";
 import {
   sameFileStatIdentity,
   samePathHandleFileIdentity,
@@ -1134,6 +1139,17 @@ function runPreviewAction(action, deps = {}) {
   }
 }
 
+async function runAsyncAction(action, options = {}) {
+  try {
+    const projection = await action();
+    writeProjection(projection, options);
+    return projection.allowed === false ? 2 : 0;
+  } catch (error) {
+    process.stderr.write(`Execution location failed: ${error.message}\n`);
+    return 1;
+  }
+}
+
 export function registerSessionLocationSubcommands(session, deps = {}) {
   const location = session
     .command("location")
@@ -1152,6 +1168,38 @@ export function registerSessionLocationSubcommands(session, deps = {}) {
       );
     });
 
+  location
+    .command("target-preflight", { hidden: true })
+    .description("Verify target-local runner fences and resource limits")
+    .option("--json", "Machine-readable JSON output")
+    .action((options) => {
+      process.exitCode = runAction(
+        () => projectExecutionLocationTargetPreflight({}, deps),
+        options,
+      );
+    });
+
+  location
+    .command("resource-probe <kind>", { hidden: true })
+    .description("Exercise a target-local cpu or memory enforcement boundary")
+    .action((kind) => {
+      process.exitCode = runAction(
+        () => runExecutionLocationTargetResourceProbe(kind),
+        {},
+      );
+    });
+
+  location
+    .command("sigterm-drain-probe", { hidden: true })
+    .description("Exercise the target-local SIGTERM drain transition")
+    .option("--json", "Machine-readable JSON output")
+    .action(async (options) => {
+      process.exitCode = await runAsyncAction(
+        () => projectExecutionLocationTargetSigtermProbe({}, deps),
+        options,
+      );
+    });
+
   location
     .command("show <id>")
     .description("Show the execution location anchored by session_start")

package/src/commands/session-message.js

@@ -0,0 +1,171 @@
+import { logger } from "../lib/logger.js";
+import { SessionMessageFabric } from "../lib/session-message-fabric.js";
+
+function output(value, options = {}) {
+  if (options.json) {
+    logger.log(JSON.stringify(value, null, 2));
+    return;
+  }
+  if (Array.isArray(value)) {
+    if (value.length === 0) {
+      logger.log("No session messages.");
+      return;
+    }
+    for (const item of value) logger.log(JSON.stringify(item));
+    return;
+  }
+  logger.log(JSON.stringify(value, null, 2));
+}
+
+function numericOption(value) {
+  if (value == null) return null;
+  const number = Number(value);
+  return Number.isSafeInteger(number) && number > 0 ? number : value;
+}
+
+function fabric() {
+  return new SessionMessageFabric();
+}
+
+export function registerSessionMessageCommands(session) {
+  const message = session
+    .command("message")
+    .description(
+      "Durable cross-session inbox, addressing, policy and receipts",
+    );
+
+  message
+    .command("register <session-id>")
+    .description("Register or reconnect a uniquely named session endpoint")
+    .option("--name <name>", "Unique @name (defaults to session id)")
+    .option("--machine <id>", "Stable machine identity", "local")
+    .option(
+      "--policy <policy>",
+      "Inbound policy: accept | hold | refuse",
+      "accept",
+    )
+    .option("--busy", "Register as busy instead of idle")
+    .option("--json", "Output as JSON")
+    .action((sessionId, options) => {
+      output(
+        fabric().register({
+          sessionId,
+          name: options.name || sessionId,
+          machineId: options.machine,
+          policy: options.policy,
+          idle: options.busy !== true,
+        }),
+        options,
+      );
+    });
+
+  message
+    .command("unregister <endpoint>")
+    .description("Retire an endpoint epoch without leaking its inbox to reuse")
+    .option("--json", "Output as JSON")
+    .action((endpoint, options) => {
+      output(
+        { unregistered: fabric().unregister(endpoint), endpoint },
+        options,
+      );
+    });
+
+  message
+    .command("send <from> <to> <body...>")
+    .description("Send one bounded, idempotent message and print its receipt")
+    .option("--subject <text>", "Optional bounded subject")
+    .option("--message-id <id>", "Stable idempotency key")
+    .option("--sequence <n>", "Per sender/recipient ordering sequence")
+    .option("--ttl-ms <n>", "Message expiry in milliseconds")
+    .option(
+      "--notify-when-idle",
+      "Emit one receipt update when target becomes idle",
+    )
+    .option("--json", "Output as JSON")
+    .action((from, to, body, options) => {
+      output(
+        fabric().send({
+          from,
+          to,
+          body: body.join(" "),
+          subject: options.subject,
+          messageId: options.messageId,
+          sequence: numericOption(options.sequence),
+          ttlMs: numericOption(options.ttlMs),
+          notifyWhenIdle: options.notifyWhenIdle === true,
+        }),
+        options,
+      );
+    });
+
+  message
+    .command("inbox <endpoint>")
+    .description("Read an endpoint inbox in sender sequence order")
+    .option("--ack", "Acknowledge and release returned live message bodies")
+    .option("--json", "Output as JSON")
+    .action((endpoint, options) => {
+      output(fabric().inbox(endpoint, { acknowledge: options.ack }), options);
+    });
+
+  message
+    .command("receipts <endpoint>")
+    .description("List durable delivered/refused/full/expired receipts")
+    .option("--json", "Output as JSON")
+    .action((endpoint, options) => {
+      output(fabric().receipts(endpoint), options);
+    });
+
+  message
+    .command("policy <endpoint> <policy>")
+    .description("Set accept, hold or refuse with optional revision CAS")
+    .option("--expected-revision <n>", "Reject a stale rendered policy action")
+    .option("--json", "Output as JSON")
+    .action((endpoint, policy, options) => {
+      output(
+        fabric().setPolicy(endpoint, policy, {
+          expectedRevision: numericOption(options.expectedRevision),
+        }),
+        options,
+      );
+    });
+
+  message
+    .command("idle <endpoint> <state>")
+    .description("Set idle/busy and deliver notify_when_idle exactly once")
+    .option("--expected-revision <n>", "Reject a stale rendered idle action")
+    .option("--json", "Output as JSON")
+    .action((endpoint, state, options) => {
+      const normalized = String(state).trim().toLowerCase();
+      if (!["idle", "busy", "true", "false"].includes(normalized)) {
+        const error = new Error("state must be idle, busy, true or false");
+        error.code = "SESSION_MESSAGE_INVALID_ARGUMENT";
+        throw error;
+      }
+      output(
+        fabric().setIdle(endpoint, ["idle", "true"].includes(normalized), {
+          expectedRevision: numericOption(options.expectedRevision),
+        }),
+        options,
+      );
+    });
+
+  for (const action of ["disconnect", "reconnect"]) {
+    message
+      .command(`${action} <endpoint>`)
+      .description(
+        action === "disconnect"
+          ? "Mark transport offline while retaining its durable inbox"
+          : "Mark a durable endpoint transport online again",
+      )
+      .option("--json", "Output as JSON")
+      .action((endpoint, options) => {
+        output({ endpoint, [action]: fabric()[action](endpoint) }, options);
+      });
+  }
+
+  message
+    .command("status")
+    .description("Emit the bounded CLI-owned message projection")
+    .option("--json", "Output as JSON")
+    .action((options) => output(fabric().projection(), options));
+}

package/src/commands/session.js

@@ -68,6 +68,8 @@ import { registerSessionShowSubcommand } from "./session-show.js";
 import { registerSessionObservabilitySubcommand } from "./session-observability.js";
 import { registerSessionLocationSubcommands } from "./session-location.js";
 import { registerSessionBudgetCommands } from "./session-budget.js";
+import { registerSessionMessageCommands } from "./session-message.js";
+import { registerSessionGroupCommands } from "./session-group.js";
 
 export const _deps = {
   execFileSync: (...args) => executionBroker.execFileSync(...args),
@@ -226,6 +228,8 @@ export function registerSessionCommand(program) {
   registerSessionMcpRecoveryCommands(session);
   registerSessionLocationSubcommands(session);
   registerSessionBudgetCommands(session);
+  registerSessionMessageCommands(session);
+  registerSessionGroupCommands(session);
 
   // session list
   session
@@ -321,6 +325,8 @@ export function registerSessionCommand(program) {
         let team = [];
         let workflow = [];
         let dynamicWorkflow = [];
+        let sessionMessageFabric = null;
+        let sessionWorkbench = null;
         let artifacts = [];
         let prLinks = {};
 
@@ -462,6 +468,20 @@ export function registerSessionCommand(program) {
         } catch {
           // Summaries are optional; absence never removes a session.
         }
+        try {
+          const { SessionMessageFabric } =
+            await import("../lib/session-message-fabric.js");
+          sessionMessageFabric = new SessionMessageFabric().projection();
+        } catch (error) {
+          sourceErrors.sessionMessageFabric = error?.message || String(error);
+        }
+        try {
+          const { SessionWorkbenchStore } =
+            await import("../lib/session-workbench-store.js");
+          sessionWorkbench = new SessionWorkbenchStore().projection();
+        } catch (error) {
+          sourceErrors.sessionWorkbench = error?.message || String(error);
+        }
 
         const { buildSessionProjection } =
           await import("../lib/session-projection.js");
@@ -474,6 +494,8 @@ export function registerSessionCommand(program) {
           dynamicWorkflow,
           artifacts,
           prLinks,
+          sessionMessageFabric,
+          sessionWorkbench,
           sourceErrors,
         });
         if (options.json) {

package/src/commands/sync-providers.js

@@ -188,7 +188,10 @@ async function _runProvider(providerId, opts = {}) {
   try {
     vault = await openCliVault();
   } catch (err) {
-    if (err.code === "BETTER_SQLITE3_MISSING") {
+    if (
+      err?.code === "BETTER_SQLITE3_MISSING" ||
+      String(err?.code || "").startsWith("CLI_VAULT_")
+    ) {
       console.error(chalk.red(`✗ ${err.message}`));
       process.exitCode = 2;
       return;

package/src/commands/update.js

@@ -91,6 +91,7 @@ export async function selfUpdateCli(targetVersion) {
         ...invocations.npm.prefixArgs,
         "install",
         "-g",
+        "--include=optional",
         `chainlesschain@${targetVersion}`,
       ],
       "update:npm-install",

package/src/data/changelog.json

@@ -1,16 +1,55 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.165.8",
+      "cliVersions": ["0.165.7", "0.165.8"],
+      "date": "2026-08-23",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.165.8: release-gate home isolation",
+          "body": "> `chainlesschain` **0.165.7 -> 0.165.8** (source candidate; not yet\n> published, 2026-08-23).\n> CLI-only candidate; `@chainlesschain/personal-data-hub` remains **0.4.59**\n> and `@chainlesschain/agent-sdk` remains **0.1.7**.\n\n- **Agent SDK release-gate isolation**: the real-CLI SDK test now keeps its\n  simulated operating-system home separate from `CHAINLESSCHAIN_HOME`, while\n  retaining separate workspace and rollback-resistant security-anchor roots.\n  This exercises the production fail-closed layout without asking the CLI to\n  repair owner-only permissions on a broad user-home directory.\n- **Candidate continuity**: exact SHA `350fb4ce71` passed the complete Linux,\n  Windows, and macOS `CLI CI` (`32612516841`) and `CLI Strict Sandbox`\n  (`32612516696`) matrices. Its immutable `v-npm-0-165-7` release run\n  (`32613795671`) stopped in the Agent SDK test before package, dry-run, or npm\n  publish jobs; `0.165.7` was therefore never published and the fix advances\n  to a new immutable version/tag rather than moving the existing tag.\n- **Release status**: publication requires this candidate's exact commit to\n  pass the complete Linux, Windows, and macOS `CLI CI` and `CLI Strict Sandbox`\n  matrices. Tag, provenance, registry readback, and publication evidence must\n  be recorded only after those exact-SHA gates succeed."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.165.7",
+      "cliVersions": ["0.165.6", "0.165.7"],
+      "date": "2026-08-23",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.165.7: merged-session and evidence stability",
+          "body": "> `chainlesschain` **0.165.6 -> 0.165.7** (unpublished immutable-tag candidate,\n> 2026-08-23; superseded by `0.165.8` after a pre-package release-gate failure).\n> CLI-only candidate; `@chainlesschain/personal-data-hub` remains **0.4.59**\n> and `@chainlesschain/agent-sdk` remains **0.1.7**.\n\n- **Durable session stability**: bound headless event backlogs, scoped session\n  sidecars, routed Claude project storage through canonical path authority,\n  and prevented Windows append-writer starvation under concurrent session\n  activity.\n- **Execution-location convergence**: local and remote replicas now bootstrap\n  isolated target state, preserve replica identity and witnesses, forward\n  staged input through the target supervisor, and retain CPU-limit evidence.\n- **Browser evidence reliability**: two-origin browser evidence installs its\n  complete driver and aggregate dependency closure, preserves detached\n  baselines, stabilizes Windows tabs, and retries bounded profile cleanup.\n- **Merged test-contract repair**: real-spawn fixtures keep workspace and\n  application data as siblings, while path-module mocks inherit the production\n  API before overriding isolated test roots. The bundled offline changelog is\n  regenerated from this canonical record.\n- **Release status**: publication requires this candidate's exact commit to\n  pass the complete Linux, Windows, and macOS `CLI CI` and `CLI Strict Sandbox`\n  matrices. Tag, provenance, registry readback, and publication evidence must\n  be recorded only after those exact-SHA gates succeed."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.165.6",
+      "cliVersions": ["0.165.5", "0.165.6"],
+      "date": "2026-08-21",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.165.6: safer remote sessions and governed plugin sources",
+          "body": "> `chainlesschain` **0.165.5 -> 0.165.6** (published from exact SHA\n> `ef4324349f272f5ec6af9a6ab80110e814122dae`, 2026-08-21).\n> CLI-only release; `@chainlesschain/personal-data-hub` remains **0.4.59**\n> and `@chainlesschain/agent-sdk` remains **0.1.7**.\n\n- **Remote Control safe defaults**: direct sessions bind to loopback by\n  default. Trusted-LAN exposure requires explicit command authority, preserves\n  the selected bind address, fails closed on relay/direct fallback, and keeps\n  IDE pairing surfaces from presenting loopback endpoints as phone-ready QR\n  links.\n- **Governed plugin source identity**: managed Marketplace policy now evaluates\n  canonical Git, registry, file, alias, ref, path, host, port, principal, and\n  registry-resolution identities before target I/O or process spawn. Clone\n  execution is isolated from ambient Git/SSH configuration, and cache\n  provenance remains bound to the approved source and registry document.\n- **Digest-pinned Marketplace archives**: registry install and update can\n  materialize same-origin, catalog-bound `tgz`/`tar.gz` sources only after\n  candidate preflight. SHA-256 verification and bounded extraction reject\n  traversal, links, special entries, case collisions, and expansion bombs;\n  archive and extracted-payload digest authority are revalidated for offline\n  cache replay. Dynamic command and headers-helper sources remain disabled by\n  product policy.\n- **Cross-platform policy enforcement**: Windows runner temporary roots are\n  canonicalized without probing caller-controlled targets. Other existing 8.3\n  spellings resolve to their long-path authority, while unresolved or forged\n  aliases remain rejected. Linux, Windows, and macOS Marketplace campaigns\n  exercise air-gapped cache, proxy, PAC, and private-registry boundaries.\n- **Durable session and MCP lifecycle**: cross-session messaging, bounded\n  long-running live state, MCP reconnect subscription recovery, lifecycle\n  compatibility, and structured headless observability now share explicit\n  identity, cleanup, and backpressure contracts.\n- **Focused terminal ergonomics**: the `concise` output style and persisted\n  `classic`/`readline` keybinding flavor extend interactive use without\n  changing existing default behavior.\n- **Published release evidence**: immutable tag `v-npm-0-165-6`, three-OS\n  `CLI CI` (`32483224738`), `CLI Strict Sandbox` (`32483224517`), npm release\n  (`32486454203`), and independent registry/provenance readback\n  (`32488130856`) all bind exact SHA `ef4324349f`. npm reports\n  `latest=0.165.6`; the public tarball SHA-1 is\n  `d0dc65bdf34d0afe8e8db4492a1ddc72d63ee260`."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.165.5",
       "cliVersions": ["0.165.4", "0.165.5"],
-      "date": "2026-08-20",
+      "date": "2026-08-21",
       "title": "",
       "sections": [
         {
           "heading": "Added - cc CLI 0.165.5: governed recovery and native add-on policy",
-          "body": "> `chainlesschain` **0.165.4 -> 0.165.5** (candidate; not yet published,\n> 2026-08-20).\n> CLI-only release; `@chainlesschain/personal-data-hub` remains **0.4.59**\n> and `@chainlesschain/agent-sdk` remains **0.1.7**.\n\n- **Recoverable Artifact workflows**: inspect and settle orphaned Artifact\n  writes through a bounded CLI-owned recovery projection, retain exact\n  access/deletion evidence, and surface workbench state without letting IDE\n  clients derive storage mutations.\n- **Durable workflow recovery**: plan and resume interrupted workflow stages\n  through persisted authority and checkpoint evidence, with tighter session\n  and execution-location projections for CLI, WebSocket, and IDE consumers.\n- **Native MCP add-on policy**: admit only supported native loader shapes and\n  validated executable/package identities. Unsupported or ambiguous native\n  add-ons now return typed fail-closed rejections instead of crossing the\n  strict process boundary.\n- **Release-candidate gates**: add cross-host Marketplace, accessibility,\n  execution-location, context/permission, and live-provider campaigns while\n  keeping CI dependency installation clean and deterministic.\n- **Release status**: publication requires this exact candidate commit to pass\n  the complete Linux, Windows, and macOS `CLI CI` and `CLI Strict Sandbox`\n  matrices. The immutable npm tag and registry readback will be recorded only\n  after those gates succeed."
+          "body": "> `chainlesschain` **0.165.4 -> 0.165.5** (published from exact SHA\n> `11aef634aa3ab88994698eca0ce2f5cfa65faf48`, 2026-08-21).\n> CLI-only release; `@chainlesschain/personal-data-hub` remains **0.4.59**\n> and `@chainlesschain/agent-sdk` remains **0.1.7**.\n\n- **Recoverable Artifact workflows**: inspect and settle orphaned Artifact\n  writes through a bounded CLI-owned recovery projection, retain exact\n  access/deletion evidence, and surface workbench state without letting IDE\n  clients derive storage mutations.\n- **Durable workflow recovery**: plan and resume interrupted workflow stages\n  through persisted authority and checkpoint evidence, with tighter session\n  and execution-location projections for CLI, WebSocket, and IDE consumers.\n- **Native MCP add-on policy**: admit only supported native loader shapes and\n  validated executable/package identities. Unsupported or ambiguous native\n  add-ons now return typed fail-closed rejections instead of crossing the\n  strict process boundary.\n- **Release gates**: add cross-host Marketplace, accessibility,\n  execution-location, context/permission, and live-provider campaigns while\n  keeping CI dependency installation clean and deterministic.\n- **Published release evidence**: immutable tag `v-npm-0-165-5`, three-OS\n  `CLI CI` (`32413582642`), `CLI Strict Sandbox` (`32413582490`), npm release\n  (`32428314006`), and independent registry/provenance readback\n  (`32429710720`) all bind exact SHA `11aef634aa`. npm reports\n  `latest=0.165.5`; the public tarball SHA-1 is\n  `c2cc7fb18ea572749d747de02355c6a0a5aef357`."
         }
       ]
     },

package/src/gateways/ws/ws-agent-handler.js

@@ -69,6 +69,7 @@ import {
   recordSessionBudgetUsage,
   rejectSessionBudgetUsageUnknown,
 } from "../../lib/session-budget-usage.js";
+import { HostResourceBudget } from "../../lib/host-resource-budget.js";
 
 const CANONICAL_WS_TURN_QUEUES = new Map();
 const CANONICAL_WS_CLAIM_CAS_ATTEMPTS = 4;
@@ -163,6 +164,7 @@ export class WSAgentHandler {
     canonicalSessionStore,
     sessionHostLease = null,
     sessionBudgetRoot = null,
+    hostResourceBudget = null,
   }) {
     this.session = session;
     this.interaction = interaction;
@@ -173,6 +175,9 @@ export class WSAgentHandler {
     this._sessionHostLease = sessionHostLease;
     this._sessionBudgetRoot = sessionBudgetRoot;
     this._sessionBudget = sessionBudgetRoot?.budget || null;
+    // session-protocol keeps one handler alive across reconnects and incoming
+    // requests, making this authority session-scoped rather than turn-scoped.
+    this._hostResourceBudget = hostResourceBudget || new HostResourceBudget();
     this._onSessionHostLeaseAbort = null;
     if (sessionHostLease?.signal) {
       this._onSessionHostLeaseAbort = () => {
@@ -642,7 +647,8 @@ export class WSAgentHandler {
         model: session.model,
         baseUrl: session.baseUrl,
         apiKey: session.apiKey,
-        signal: signal || this._sessionBudgetSignal || this._sessionHostLease?.signal,
+        signal:
+          signal || this._sessionBudgetSignal || this._sessionHostLease?.signal,
         onlyIfNeeded: true,
         preserveCompletedExchange: true,
         llmQuery: this._compactionLlmQuery,
@@ -1152,11 +1158,10 @@ export class WSAgentHandler {
           strictUsageTelemetry =
             this._resolveCanonicalUsageProtocol() === "call-ledger";
           if (strictUsageTelemetry) this._assertUsageLedgerWritable();
-          const compacted =
-            await this._compactCanonicalHistoryBeforeClaim(
-              requestId,
-              turnSignal,
-            );
+          const compacted = await this._compactCanonicalHistoryBeforeClaim(
+            requestId,
+            turnSignal,
+          );
           if (!compacted) return;
         }
         canonicalTurn ||= this._claimCanonicalTurn(userMessage, requestId);
@@ -1240,6 +1245,7 @@ export class WSAgentHandler {
         cwd: session.projectRoot,
         sessionId: session.id,
         planManager: session.planManager,
+        hostResourceBudget: this._hostResourceBudget,
         enabledToolNames: session.enabledToolNames || null,
         hostManagedToolPolicy: session.hostManagedToolPolicy || null,
         extraToolDefinitions: session.externalToolDefinitions || [],
@@ -1507,7 +1513,10 @@ export class WSAgentHandler {
                 this._persistCanonicalUsageBoundary(event, "unknown");
               }
               if (this._markSessionBudgetUsageUnknown(event)) {
-                rejectSessionBudgetUsageUnknown(event, "WebSocket provider call");
+                rejectSessionBudgetUsageUnknown(
+                  event,
+                  "WebSocket provider call",
+                );
               }
               break;
 
@@ -1624,9 +1633,9 @@ export class WSAgentHandler {
           ? surfacedError?.code || "CC_SESSION_BUDGET_EXHAUSTED"
           : isAbortError(err)
             ? "CC_WS_TURN_INTERRUPTED"
-          : err?.code === "CC_WS_EMPTY_ASSISTANT_RESPONSE"
-            ? "CC_WS_EMPTY_ASSISTANT_RESPONSE"
-            : "CC_WS_TURN_FAILED";
+            : err?.code === "CC_WS_EMPTY_ASSISTANT_RESPONSE"
+              ? "CC_WS_EMPTY_ASSISTANT_RESPONSE"
+              : "CC_WS_TURN_FAILED";
         try {
           this._settleCanonicalFailure(canonicalTurn, failureCode);
         } catch (settlementError) {
@@ -1917,8 +1926,7 @@ export class WSAgentHandler {
             model: session.model,
             baseUrl: session.baseUrl,
             apiKey: session.apiKey,
-            signal:
-              this._sessionBudgetSignal || this._sessionHostLease?.signal,
+            signal: this._sessionBudgetSignal || this._sessionHostLease?.signal,
             force: true,
             preserveCompletedExchange: true,
             llmQuery: this._compactionLlmQuery,