@sema-agent/client-core 0.26.0 → 0.27.0

package/README.md

@@ -23,7 +23,7 @@ Renamed from **`@sema-agent/wire-cc-adapter`** (0.1.x, deprecated — see *Migra
 
 ## Scope
 
-**Version:** 0.26.0
+**Version:** 0.27.0
 
 - **Today** — the adapter seam, the whole `adapt()` pipeline (all 14 A-layer arms plus the
   B/D/E tool-card layers), the notification/caps/model families, the adapter kernel (stream driver

package/dist/headlessPermissionModeWire.d.ts

@@ -60,7 +60,7 @@ export declare function normalizeShellPermissionModeForWire(mode: string | undef
 export type HeadlessPermissionResolution = {
     /** 直接展开进 TaskRequest 的字段({} = 不 stamp,现状 absent-mode)。 */
     fields: PermissionModeField;
-    source: 'flag' | 'env' | 'absent';
+    source: 'flag' | 'env' | 'default' | 'absent';
     /** 非法 env 值的告警文案(调用层一次性打 stderr)。 */
     warning?: string;
 };

package/dist/headlessPermissionModeWire.js

@@ -180,7 +180,15 @@ export function resolveHeadlessPermissionMode(argv, env = hostEnv()) {
     // 2) env 垫层。
     const raw = env[HEADLESS_PERMISSION_MODE_ENV]?.trim();
     if (raw === undefined || raw === '') {
-        return { fields: {}, source: 'absent' };
+        // 3) 缺省垫(2026-08-11 裁定,headless 权限缺省收窄):flag/env 双缺席不再走 absent-mode
+        //    (server 7.12.0 起模式翻译表对缺席=键不写=无门,headless 缺省会**无门直落**——与
+        //    对标实现「headless 门照挂照报」相反)。缺省显式 stamp "default" ⇒ 翻译表挂 classify 档,
+        //    写形过分类器、读形白名单放行。旧 server(≤7.11.0)对显式 default 走 manual ask 门解释,
+        //    同向收紧,version-safe。要旧「无门」行为的部署用显式
+        //    `SEMA_HEADLESS_PERMISSION_MODE=bypassPermissions` 表态(缺省绝不宽)。
+        //    source='default' 与 'absent' 分词:absent 只剩「wire 词表外值回落」一支已不存在——保留
+        //    枚举员是为了消费端(日志/围栏)对旧值的开集容纳,本函数不再产它。
+        return { fields: permissionModeField('default', { stampDefault: true }), source: 'default' };
     }
     if (HEADLESS_PERMISSION_WIRE_MODES.includes(raw)) {
         // env 是显式垫层:五词全 stamp(含 default——stampDefault 显式垫,不依赖 absent-mode 缺省解释)。
@@ -189,8 +197,11 @@ export function resolveHeadlessPermissionMode(argv, env = hostEnv()) {
             source: 'env',
         };
     }
-    // 3) 非法 env 值:一次性 warn + 回落现状(绝不 fail)。
-    const resolution = { fields: {}, source: 'absent' };
+    // 4) 非法 env 值:一次性 warn + 回落缺省垫(绝不 fail,也绝不因坏值放宽成无门)。
+    const resolution = {
+        fields: permissionModeField('default', { stampDefault: true }),
+        source: 'default',
+    };
     if (!warnedInvalidEnv) {
         warnedInvalidEnv = true;
         resolution.warning = `sema: ${HEADLESS_PERMISSION_MODE_ENV}="${raw}" is not a recognized permission mode (expected one of: ${HEADLESS_PERMISSION_WIRE_MODES.join(', ')}) — ignoring it, this run keeps the default permission behavior`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/client-core",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Client-side session runtime shared by every sema human client (TUI / web / desktop): sema wire frames (AgentEvent) -> CC session vocabulary (SDKMessage) with dual-plane output (transcript/chrome), deterministic transcript ids, lane discipline as a type, and the notification/dedup ledgers. Every CC-skin shape is collected here so the wire itself stays neutral. Blackboard [1832] design axioms; [1651]/[1652]/[1653] signed seam design. Renamed from @sema-agent/wire-cc-adapter (0.1.x).",
   "license": "MIT",
   "type": "module",