@sema-agent/core 5.56.0 → 5.57.0

package/dist/scenarios/scenario-registry.js

@@ -61,7 +61,7 @@ export async function runScenario(opts) {
     switch (profile.orchestrator) {
         case "solo": {
             const model = requireModel(opts.models, "default", opts.scenario);
-            const spec = { objective: opts.objective, model, signal: opts.signal };
+            const spec = { objective: opts.objective, model, signal: opts.signal, ...(opts.getApiKeyAndHeaders !== undefined ? { getApiKeyAndHeaders: opts.getApiKeyAndHeaders } : {}) };
             return { scenario: "solo", result: await opts.runner.runTask(spec) };
         }
         case "team": {
@@ -81,6 +81,7 @@ export async function runScenario(opts) {
                     ],
                     synthesizer: { model: synthModel },
                     signal: opts.signal,
+                    ...(opts.getApiKeyAndHeaders !== undefined ? { getApiKeyAndHeaders: opts.getApiKeyAndHeaders } : {}),
                 });
                 return { scenario: "design-review", result };
             }
@@ -95,6 +96,7 @@ export async function runScenario(opts) {
                 members: codeReviewMembers(opts.reviewerCount ?? 2, teamModel),
                 synthesizer: { model: synthModel },
                 signal: opts.signal,
+                ...(opts.getApiKeyAndHeaders !== undefined ? { getApiKeyAndHeaders: opts.getApiKeyAndHeaders } : {}),
             });
             return { scenario: "code-review", mode: "team", result };
         }
@@ -127,7 +129,7 @@ async function runCodeReviewVerify(opts) {
         result: opts.objective,
         stats: { turns: 0, tokens: 0 },
     };
-    const specBase = { signal: opts.signal };
+    const specBase = { signal: opts.signal, ...(opts.getApiKeyAndHeaders !== undefined ? { getApiKeyAndHeaders: opts.getApiKeyAndHeaders } : {}) };
     const result = await verifyCompleted(opts.runner, reviewed, specBase, opts.objective, {
         verifierModel,
         verifierPrompt: STATIC_VERIFICATION_PROMPT,

package/dist/tools/fs/index.js

@@ -79,7 +79,14 @@ export function createHandsToolkit(env, readFileState, rootCanonical, opts = {})
         if (!readOnly && mountBackgroundTaskTools && hasBackgroundShell(env)) {
             const sessionAxis = opts.sessionId !== undefined ? { sessionId: opts.sessionId } : {};
             tools.push(opts.taskRegistry
-                ? createTaskOutputTool({ registry: opts.taskRegistry, owner: opts.taskOwner, scope: opts.taskScope, ...sessionAxis, ...(opts.oneShot !== undefined ? { oneShot: opts.oneShot } : {}) })
+                ? createTaskOutputTool({
+                    registry: opts.taskRegistry,
+                    owner: opts.taskOwner,
+                    scope: opts.taskScope,
+                    ...sessionAxis,
+                    ...(opts.oneShot !== undefined ? { oneShot: opts.oneShot } : {}),
+                    notificationWired: opts.taskNotification !== undefined,
+                })
                 : createEnvTaskOutputTool(env), opts.taskRegistry
                 ? createTaskStopTool({ registry: opts.taskRegistry, owner: opts.taskOwner, scope: opts.taskScope, ...sessionAxis })
                 : createEnvTaskStopTool(env));

package/dist/tools/scheduler-tools.js

@@ -396,10 +396,19 @@ Only use minute 0 or 30 when the user names that exact time and clearly means it
         wakeupChain = next.then(() => undefined, () => undefined);
         return next;
     };
+    const wakeupMountNote = sched.schedulerCapabilities.supportsSessionWakeup === false
+        ? `
+
+MOUNT NOTE: this host has no resident wakeup leg, so ${SCHEDULE_WAKEUP_TOOL_NAME} refuses every scheduling call here — do not plan a self-paced loop around it (\`stop: true\` still works).`
+        : sched.schedulerCapabilities.supportsSessionLifetime === true
+            ? ""
+            : `
+
+MOUNT NOTE: this host does not vouch for session-scoped scheduling, so a wakeup scheduled here is PERSISTENT — contrary to the paragraph above, it can outlive this session instead of ending with it. End the loop explicitly with \`stop: true\` when the work is done; do not rely on the session ending to cancel it.`;
     const scheduleWakeup = defineTool({
         name: SCHEDULE_WAKEUP_TOOL_NAME,
         contract: { contractId: "core.schedule_wakeup@1", implementationRevision: "1" },
-        description: SCHEDULE_WAKEUP_PROMPT,
+        description: `${SCHEDULE_WAKEUP_PROMPT}${wakeupMountNote}`,
         parameters: Type.Object({
             delaySeconds: Type.Optional(Type.Number({
                 description: "Seconds from now to wake up. Clamped to [60, 3600] by the runtime. Required unless `stop` is true.",
@@ -433,20 +442,33 @@ Only use minute 0 or 30 when the user names that exact time and clearly means it
             if (sched.schedulerCapabilities.supportsSessionWakeup === false) {
                 return errorResult(`Error (${SCHEDULE_WAKEUP_TOOL_NAME}): this environment has no resident scheduler that can honor a session wakeup — the wakeup would never fire. Wait in the foreground instead, or start the work in a self-detaching form.`);
             }
+            const sessionReapVouched = sched.schedulerCapabilities.supportsSessionLifetime === true;
             const clampedDelaySeconds = Math.min(3600, Math.max(60, Math.round(a.delaySeconds)));
             const wasClamped = clampedDelaySeconds !== a.delaySeconds;
             const pending = await listPendingWakeups();
-            if (!("err" in pending))
-                await cancelWakeups(pending.ids);
-            const r = await sched.schedule({ prompt: a.prompt, when: { kind: "delay", delaySec: clampedDelaySeconds }, label: WAKEUP_LABEL, mode: "session-wakeup" }, sessionCtx);
+            const cancelledCount = "err" in pending ? 0 : await cancelWakeups(pending.ids);
+            const cleanupIncomplete = "err" in pending || cancelledCount < pending.ids.length;
+            const r = await sched.schedule({
+                prompt: a.prompt,
+                when: { kind: "delay", delaySec: clampedDelaySeconds },
+                label: WAKEUP_LABEL,
+                mode: "session-wakeup",
+                ...(sessionReapVouched ? { lifetime: "session" } : {}),
+            }, sessionCtx);
             if (!r.ok)
                 return errorResult(`Error (${SCHEDULE_WAKEUP_TOOL_NAME}): ${r.error.message}`);
             const scheduledFor = Date.now() + clampedDelaySeconds * 1000;
             const hhmmss = new Date(scheduledFor).toTimeString().slice(0, 8);
             const clampNote = wasClamped ? ` (clamped to ${clampedDelaySeconds}s from your requested value)` : "";
+            const cleanupNote = cleanupIncomplete
+                ? " Warning: the previously pending wakeup(s) for this session could not all be listed or cancelled, so MORE THAN ONE wakeup may now be armed (you would be re-invoked twice). Call this tool with `stop: true` and then re-schedule to get back to a single one."
+                : "";
+            const reapNote = sessionReapVouched
+                ? ""
+                : " Note: this scheduler does not vouch for session-lifetime reap, so this wakeup is scheduled as a persistent one and may outlive the session — end the loop explicitly with `stop: true` rather than relying on the session ending.";
             return {
-                content: `Next wakeup scheduled for ${hhmmss} (in ${clampedDelaySeconds}s)${clampNote}. Nothing more to do this turn — the harness re-invokes you when the wakeup fires or a task-notification arrives.`,
-                details: { type: "schedule-wakeup", stopped: false, scheduledFor, clampedDelaySeconds, wasClamped },
+                content: `Next wakeup scheduled for ${hhmmss} (in ${clampedDelaySeconds}s)${clampNote}. Nothing more to do this turn — the harness re-invokes you when the wakeup fires or a task-notification arrives.${reapNote}${cleanupNote}`,
+                details: { type: "schedule-wakeup", stopped: false, scheduledFor, clampedDelaySeconds, wasClamped, reason: a.reason },
             };
         }),
     });

package/dist/tools/web.d.ts

@@ -160,6 +160,21 @@ export declare function resolveSummaryInputChars(model: Model, override?: number
 export interface WebFetchSummarizerOptions {
     /** Override the derived page-content budget (see {@link resolveSummaryInputChars}). */
     maxContentChars?: number;
+    /**
+     * Per-model auth — MIRRORS {@link TaskSpec.getApiKeyAndHeaders} (same signature, resolved per
+     * call against the summarizer's model, the side-query seat's form). Without this seat the
+     * summarizer called the brain with `{ signal }` only, so a summarizer model on a
+     * per-model-credential route fell to the brain's construction-time credential — which the
+     * key↔URL pairing gate refuses off the deployment root. Absent ⇒ the options object is
+     * byte-identical to the pre-seat shape (no keys added).
+     */
+    getApiKeyAndHeaders?: (model: Model) => Promise<{
+        apiKey?: string;
+        headers?: Record<string, string>;
+    } | undefined> | {
+        apiKey?: string;
+        headers?: Record<string, string>;
+    } | undefined;
 }
 /**
  * 黑板 [1870] L1 / [1900] — a reference {@link WebFetchConfig.summarize} implementation: reuses a

package/dist/tools/web.js

@@ -725,9 +725,15 @@ export function createWebFetchSummarizer(brain, model, options = {}) {
         const truncated = inputTruncated ? content.slice(0, budget) + "\n\n[Content truncated due to length...]" : content;
         const userPrompt = `\nWeb page content:\n---\n${truncated}\n---\n\n${prompt}\n\n` + WEBFETCH_SUMMARY_GROUNDING_CLAUSE + "\n" + WEBFETCH_SUMMARY_GUIDELINES;
         const context = { messages: [{ role: "user", content: userPrompt, timestamp: Date.now() }] };
+        const auth = await options.getApiKeyAndHeaders?.(model);
+        const callOptions = {
+            signal,
+            ...(auth?.apiKey !== undefined ? { apiKey: auth.apiKey } : {}),
+            ...(auth?.headers !== undefined ? { headers: auth.headers } : {}),
+        };
         const msg = brain.complete
-            ? await brain.complete(model, context, { signal })
-            : await (await Promise.resolve(brain.stream(model, context, { signal }))).result();
+            ? await brain.complete(model, context, callOptions)
+            : await (await Promise.resolve(brain.stream(model, context, callOptions))).result();
         if (msg.stopReason === "error" || msg.stopReason === "aborted") {
             throw new Error(msg.errorMessage ?? `summarizer stopped with ${msg.stopReason}`);
         }

package/dist/tools/worktree.js

@@ -248,10 +248,10 @@ export function createWorktreeTools(env, opts) {
                 description: "true = remove the worktree even when it has uncommitted files or new commits, permanently discarding them. Default false: a changed worktree is kept and its changes listed. Cannot be combined with `keep: true`.",
             })),
             action: Type.Optional(Type.Union([Type.Literal("keep"), Type.Literal("remove")], {
-                description: '"keep" leaves the worktree and branch on disk; "remove" deletes both.',
+                description: '"keep" leaves the worktree on disk. "remove" takes the default removal path: an unchanged worktree is removed, a changed one is still KEPT unless `discard_changes: true`. The worktree is detached — no branch is created or deleted either way.',
             })),
             discard_changes: Type.Optional(Type.Boolean({
-                description: 'Required true when action is "remove" and the worktree has uncommitted files or unmerged commits. The tool will refuse and list them otherwise.',
+                description: 'Set true to remove the worktree even when it has uncommitted files or unmerged commits — they are permanently discarded. Without it a changed worktree is KEPT (the exit still completes and the reply lists the changes plus this escape), never refused.',
             })),
         }),
         effect: "write",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "5.56.0",
+  "version": "5.57.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,6 +1,6 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
-  "count": 1678,
+  "count": 1696,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -269,6 +269,7 @@
     "EXPLORE_SYSTEM_PROMPT": "variable",
     "EXPLORE_WHEN_TO_USE": "variable",
     "EXPLORE_WHEN_TO_USE_LEAN": "variable",
+    "EditedRuleTextPrecheck": "type",
     "EffectiveConfigField": "interface",
     "EffectiveMemoryScopes": "type",
     "EffectivePermissionRule": "interface",
@@ -729,6 +730,7 @@
     "RETRYABLE_REMOTE_ERROR_CODES": "variable",
     "ROLE_TIER_DEFAULTS": "variable",
     "ROOT_ADOPTION_FILE": "variable",
+    "ROUTE_ADJUDICATION_CONFORMANCE_CORPUS": "variable",
     "RULE_SYNC_DROP_CODES": "variable",
     "RUN_WORKFLOW_TOOL_NAME": "variable",
     "RawPrefixInputs": "interface",
@@ -801,6 +803,15 @@
     "RosterEntry": "interface",
     "RosterGcOptions": "interface",
     "RosterStore": "interface",
+    "RouteAdjudication": "type",
+    "RouteAdjudicationVector": "interface",
+    "RouteCredential": "interface",
+    "RouteCredentialSource": "type",
+    "RoutePairingConfig": "interface",
+    "RoutePairingPosture": "type",
+    "RoutePairingStatus": "type",
+    "RouteRefusalCode": "type",
+    "RouteRefusalDetail": "interface",
     "RoutingBrainOptions": "interface",
     "RuleAdd": "interface",
     "RuleAddDelta": "interface",
@@ -1142,6 +1153,7 @@
     "acquireCcLock": "function",
     "addDotsOf": "function",
     "addWorktree": "function",
+    "adjudicateModelRoute": "function",
     "admitMemoryScopes": "function",
     "adoptFilePermissionRuleStore": "function",
     "adoptLocalDataRoot": "function",
@@ -1386,6 +1398,7 @@
     "guardedMemoryStore": "function",
     "harnessContext": "function",
     "harvestFilesToPatches": "function",
+    "hasAuthCarrier": "function",
     "hasBackgroundShell": "function",
     "hasDestroy": "function",
     "hasScheduler": "function",
@@ -1461,6 +1474,7 @@
     "mysqlQuery": "function",
     "nextSyncBaseline": "function",
     "normalizeAgentName": "function",
+    "normalizeBaseUrl": "function",
     "normalizeForExactMatch": "function",
     "normalizeMemorySpec": "function",
     "normalizePersistedRuleHit": "function",
@@ -1494,6 +1508,7 @@
     "peerAxisToken": "function",
     "permissionRuleSyncContract": "function",
     "pgQuery": "function",
+    "precheckEditedRuleText": "function",
     "prepareCardApproval": "function",
     "prepareCcImport": "function",
     "prepareStarterBatch": "function",
@@ -1563,6 +1578,7 @@
     "resolveReadFace": "function",
     "resolveReasoning": "function",
     "resolveReasoningProfile": "function",
+    "resolveRouteCredential": "function",
     "resolveSubagentTranscriptTier": "function",
     "resolveTaskLimits": "function",
     "resolveTaskModel": "function",
@@ -1573,6 +1589,8 @@
     "retiredWorkflowNameAliases": "function",
     "retryBackoffMs": "function",
     "riskSeverity": "function",
+    "routePairingStatus": "function",
+    "routeRefusalText": "function",
     "ruleAdmitsCommand": "function",
     "ruleSyncVector": "function",
     "runCascade": "function",