Start, resume, ensure, and snapshot calls for a session that holds a host lease join that lease, and helpers inherit their own active token, so a waiting install cannot deadlock against them while unrelated new turns still queue behind it. An acquired gate is released when the follow-up liveness check or lease removal fails, and a pinned npm install never gets an installation key.