@sema-agent/client-core 0.18.0 → 0.20.0

package/dist/seatContract.js

@@ -98,6 +98,26 @@ const isObject = (v) => typeof v === "object" && v !== null;
 const isAbsent = (v) => typeof v === "undefined";
 const optionalString = (v) => isAbsent(v) || typeof v === "string";
 const inTuple = (tuple, v) => tuple.includes(v);
+/**
+ * `ToolPermissionRequest.requestId` 的**域词表**(FIX⑥,2026-08-07)—— 三端唯一真源。
+ *
+ * 🔴 前缀不是装饰:它**就是**决断的路由依据(session-host 按它挑 wire 动词)。一个域外的 requestId
+ * 意味着「这条决断无处可去」,所以校验器对它 fail-loud 而不是放行(此前门只校「是不是串」,
+ * 于是 desktop 早就在用的 `plan:` 既不在枚举里、也不会被任何一处说出来)。
+ */
+export const TOOL_PERMISSION_REQUEST_ID_DOMAINS = [
+    "live:",
+    "durable:",
+    "question:",
+    "elicit:",
+    "plan:",
+];
+/** 读口:requestId → 它的域。未登记前缀 / 非串 ⇒ `undefined`(诚实缺席,绝不猜一个域)。 */
+export function toolPermissionRequestIdDomain(requestId) {
+    if (typeof requestId !== "string")
+        return undefined;
+    return TOOL_PERMISSION_REQUEST_ID_DOMAINS.find((d) => requestId.startsWith(d));
+}
 export const TOCTOU_BINDING_KEYS = ["callId", "inputHash"];
 /**
  * 座位事件名的**闭集**(REF-CC-065):这是三端唯一的事件名真源。
@@ -227,6 +247,9 @@ const checkLocalSessionRecord = (s) => {
         if (!okQueue)
             return bad("queuedMessages must be an array of {uuid,text}", "queuedMessages");
     }
+    if (!isAbsent(s.parked) && typeof s.parked !== "boolean") {
+        return bad("parked must be a boolean when present", "parked");
+    }
     return true;
 };
 export function isLocalSessionRecord(s) {
@@ -247,6 +270,10 @@ const checkToolPermissionRequest = (r) => {
         return bad("tool permission request is not an object");
     if (typeof r.requestId !== "string")
         return bad("requestId must be a string", "requestId");
+    // FIX⑥:域(前缀)就是决断的路由依据 —— 认不出域 = 这条决断无处可去,fail-closed 而不是放行。
+    if (toolPermissionRequestIdDomain(r.requestId) === undefined) {
+        return bad(`requestId must carry a registered domain prefix (${TOOL_PERMISSION_REQUEST_ID_DOMAINS.join("|")})`, "requestId");
+    }
     if (typeof r.sessionId !== "string")
         return bad("sessionId must be a string", "sessionId");
     if (!isAbsent(r.toolName) && r.toolName !== null && typeof r.toolName !== "string") {
@@ -414,6 +441,22 @@ const checkSeatModelInfo = (m, index) => {
     }
     return true;
 };
+/** applyModelConfig ack 校验:布尔形 + reason 条件在场(ok:false ⇒ 必带非空 reason)。
+ *  🔴 错误消息零回显 req/ack 值——本 verb 载荷带 apiKey,校验层是回显面之一。 */
+const checkApplyModelConfigResult = (v) => {
+    if (!isObject(v))
+        return bad("applyModelConfig result is not an object");
+    if (typeof v.ok !== "boolean")
+        return bad("ok must be a boolean", "ok");
+    if (typeof v.requiresRestart !== "boolean")
+        return bad("requiresRestart must be a boolean", "requiresRestart");
+    if (v.ok === false && (typeof v.reason !== "string" || v.reason.length === 0)) {
+        return bad("reason must be a non-empty string when ok is false", "reason");
+    }
+    if (v.reason !== undefined && typeof v.reason !== "string")
+        return bad("reason must be a string when present", "reason");
+    return true;
+};
 const checkSeatModelCatalog = (v) => {
     if (!isObject(v))
         return bad("model catalog is not an object");
@@ -545,6 +588,7 @@ export const LOCAL_SESSIONS_SPEC = {
         searchSessions: { kind: "invoke", check: checkSessionSearchEnvelope },
         uploadAttachment: { kind: "invoke", check: checkAttachmentUploadReceipt },
         listModels: { kind: "invoke", check: checkSeatModelCatalog },
+        applyModelConfig: { kind: "invoke", check: checkApplyModelConfigResult },
         onEvent: { kind: "event", check: checkLocalSessionEvent },
         onToolPermissionRequest: { kind: "event", check: checkToolPermissionRequest },
     },
@@ -570,6 +614,7 @@ export const SEAT_METHOD_NAMES = [
     "searchSessions",
     "uploadAttachment",
     "listModels",
+    "applyModelConfig",
     "onEvent",
     "onToolPermissionRequest",
 ];
@@ -622,6 +667,7 @@ export const LOCAL_SESSION_RECORD_KEYS = [
     "createdAt",
     "lastActivityAt",
     "queuedMessages",
+    "parked",
 ];
 export const SEND_MESSAGE_REQUEST_KEYS = [
     "sessionId",
@@ -672,7 +718,7 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
     LocalSessionRecord: {
         guard: "isLocalSessionRecord",
         check: checkLocalSessionRecord,
-        validated: ["sessionId", "engineSessionId", "model", "title", "isRunning", "createdAt", "lastActivityAt", "queuedMessages"],
+        validated: ["sessionId", "engineSessionId", "model", "title", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"],
         unchecked: [],
     },
     ToolPermissionRequest: {
@@ -726,6 +772,11 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
         validated: ["models", "defaultId"],
         unchecked: [],
     },
+    ApplyModelConfigResult: {
+        check: checkApplyModelConfigResult,
+        validated: ["ok", "requiresRestart", "reason"],
+        unchecked: [],
+    },
     SendMessageAck: {
         guard: "isSendMessageAck",
         check: checkSendMessageAck,
@@ -811,7 +862,11 @@ export const SEAT_VALIDATOR_COVERAGE_EXEMPT = [
     {
         label: "LaneProof",
         check: (v) => checkLaneProof(v, "laneProof"),
-        why: "判别式联合:必填键面随 `lane` 臂而变(subagent 要 parentToolCallId、workflow 要 via+key),而覆盖表的方法是「一个最小合法体 + 逐键投毒」—— 那套方法在它身上没有判别力(main 臂对另外两臂的伴随位本来就不该拒,投毒过了不代表漏校)。判别力由 `LANE_PROOF_LANE_TUPLE` ⇄ seam.ts 车道联合的双向 `Covers` + F 段逐臂投毒(空对象 / 非对象 / 未登记车道词)承担。",
+        why: "判别式联合:必填键面随 `lane` 臂而变(subagent 要 parentToolCallId、workflow 要 via+key),而覆盖表的方法是「一个最小合法体 + 逐键投毒」—— 那套方法在它身上没有判别力(main 臂对另外两臂的伴随位本来就不该拒,投毒过了不代表漏校)。" +
+            "🔴 FIX④(2026-08-07 订正):本条此前自称判别力由「F 段**逐臂**投毒(空对象 / 非对象 / **未登记车道词**)」承担 —— 全树实扫,那三样里只有**空对象**与**非对象**真的存在(run-seat-contract-keys-test.mjs F 段)," +
+            "「未登记车道词」实际只钉了 `lane: 7`(非串,证明不了闭集成员判定在场),「逐臂」(subagent 缺 parentToolCallId / workflow 缺 via+key)则是**零覆盖**。也就是说这条豁免曾经拿三件不存在的判据给自己背书。" +
+            "现势(判据锚在真存在的东西上):① `LANE_PROOF_LANE_TUPLE` ⇄ seam.ts 车道联合的双向 `Covers`(本文件 `_seatContractPins`,加车道不跟 ⇒ 编译红);" +
+            "② run-client-core-pure-test.mjs **FIX7 段 ④** —— 未登记车道词 / subagent 缺伴随位 / workflow 缺 via 或 key 三条投毒 + 两条逐臂正控 + 一条「main 臂不被过紧误拒」负控,全部直接喂本条的 `check`。",
     },
 ];
 /** 双向覆盖钉:`Exclude` 两个方向都必须塌成 `never`,少一个键红、多一个键也红。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/client-core",
-  "version": "0.18.0",
+  "version": "0.20.0",
   "description": "Client-side session runtime shared by every sema human client (TUI / web / desktop): sema wire frames (AgentEvent) -> CC session vocabulary (SDKMessage) with dual-plane output (transcript/chrome), deterministic transcript ids, lane discipline as a type, and the notification/dedup ledgers. Every CC-skin shape is collected here so the wire itself stays neutral. Blackboard [1832] design axioms; [1651]/[1652]/[1653] signed seam design. Renamed from @sema-agent/wire-cc-adapter (0.1.x).",
   "license": "MIT",
   "type": "module",