@sema-agent/server 1.283.0 → 1.284.0

package/dist/http/server.js

@@ -5,7 +5,7 @@ import { sessionLogDigest, sessionLogDigestsComparable, uuidv7, callKeyOrdinal,
 import { decideParkedAgent, findParkedAgentForCheckpoint } from "../parked-decide.js";
 import { matchCatalogModel } from "../model-select.js";
 import { mcpForScenario } from "../sema-registry.js";
-import { HttpError, principalFrom, verifiedPrincipal, setSsoPrincipal, ssoVerifiedPrincipal, setSsoScope, isUuidV7, isUuidShape, verifyDirectDoorProof } from "../security.js";
+import { HttpError, principalFrom, verifiedPrincipal, setSsoPrincipal, ssoVerifiedPrincipal, setSsoScope, isUuidV7, isUuidShape, verifyDirectDoorProof, MAX_APPROVAL_REASON_CHARS } from "../security.js";
 import { exportSession, exportSessionManifest, importSession, classifySyncRelationshipByIds, SyncConflictError, stagingIdFor } from "../session-sync.js";
 import { windowMessages, truncateMessageBlobs } from "../audit.js";
 import { parseMemorySyncRequest } from "../memory-sync.js";
@@ -2898,6 +2898,10 @@ export function createHttpServer(deps) {
                     sendJson(res, 400, { error: "reason must be a string" });
                     return;
                 }
+                if (typeof body.reason === "string" && body.reason.length > MAX_APPROVAL_REASON_CHARS) {
+                    sendJson(res, 413, { error: `reason too large (max ${MAX_APPROVAL_REASON_CHARS} chars)`, errorCode: "reason_too_large" });
+                    return;
+                }
                 const run = await deps.runStore.getRun(taskId);
                 if (!run) {
                     if (deps.config.directDoorActive) {
@@ -2910,7 +2914,7 @@ export function createHttpServer(deps) {
                 let deciderPrincipal = principal;
                 if (deps.config.directDoorActive) {
                     const hdr = (n) => { const h = req.headers[n]; return Array.isArray(h) ? h[0] : h; };
-                    const proof = verifyDirectDoorProof({ jwt: hdr("x-approval-principal-token"), mac: hdr("x-approval-mac"), kid: hdr("x-approval-mac-kid") }, { sessionId: run.sessionId, decision }, deps.config, { actionBinding: false });
+                    const proof = verifyDirectDoorProof({ jwt: hdr("x-approval-principal-token"), mac: hdr("x-approval-mac"), kid: hdr("x-approval-mac-kid") }, { sessionId: run.sessionId, decision, reason: typeof body.reason === "string" ? body.reason : null }, deps.config, { actionBinding: false });
                     if (!proof.ok) {
                         sendJson(res, proof.status, { error: proof.error, errorCode: proof.errorCode });
                         return;
@@ -2945,6 +2949,14 @@ export function createHttpServer(deps) {
                     sendJson(res, 400, { error: "body must be { decision: 'approve' | 'deny', reason?, answer?, checkpointToken?, boundCallId?, boundInputHash?, updatedInput?, remember? }" });
                     return;
                 }
+                if (body.reason !== undefined && typeof body.reason !== "string") {
+                    sendJson(res, 400, { error: "reason must be a string" });
+                    return;
+                }
+                if (typeof body.reason === "string" && body.reason.length > MAX_APPROVAL_REASON_CHARS) {
+                    sendJson(res, 413, { error: `reason too large (max ${MAX_APPROVAL_REASON_CHARS} chars)`, errorCode: "reason_too_large" });
+                    return;
+                }
                 let remember = false;
                 if (body.remember !== undefined) {
                     if (body.remember !== "session") {
@@ -3002,7 +3014,7 @@ export function createHttpServer(deps) {
                         const h = req.headers[n];
                         return Array.isArray(h) ? h[0] : h;
                     };
-                    const proof = verifyDirectDoorProof({ jwt: hdr("x-approval-principal-token"), mac: hdr("x-approval-mac"), kid: hdr("x-approval-mac-kid") }, { sessionId, boundCallId: binding.boundCallId, boundInputHash: binding.boundInputHash, decision }, deps.config);
+                    const proof = verifyDirectDoorProof({ jwt: hdr("x-approval-principal-token"), mac: hdr("x-approval-mac"), kid: hdr("x-approval-mac-kid") }, { sessionId, boundCallId: binding.boundCallId, boundInputHash: binding.boundInputHash, decision, reason: typeof body.reason === "string" ? body.reason : null }, deps.config);
                     if (!proof.ok) {
                         sendJson(res, proof.status, { error: proof.error, errorCode: proof.errorCode });
                         return;

package/dist/security.d.ts

@@ -103,12 +103,15 @@ export declare function approvalHmacMessage(env: {
     boundCallId?: string | null;
     boundInputHash?: string | null;
     decision: string;
+    reason?: string | null;
 }): string;
+export declare const MAX_APPROVAL_REASON_CHARS = 4096;
 export declare function verifyApprovalHmac(env: {
     sessionId: string;
     boundCallId?: string | null;
     boundInputHash?: string | null;
     decision: string;
+    reason?: string | null;
 }, mac: string, kid: string | undefined, keys: ApprovalHmacKey[]): boolean;
 export interface PrincipalJwtKey {
     kid: string;
@@ -141,6 +144,7 @@ export declare function verifyDirectDoorProof(proof: {
     boundCallId?: string | null;
     boundInputHash?: string | null;
     decision: string;
+    reason?: string | null;
 }, config: {
     principalJwtPubkeys: PrincipalJwtKey[];
     principalJwtIss?: string;

package/dist/security.js

@@ -176,8 +176,9 @@ export function parseApprovalHmacKeys(raw) {
     }
 }
 export function approvalHmacMessage(env) {
-    return JSON.stringify([env.sessionId, env.boundCallId ?? null, env.boundInputHash ?? null, env.decision]);
+    return JSON.stringify([env.sessionId, env.boundCallId ?? null, env.boundInputHash ?? null, env.decision, env.reason ?? null]);
 }
+export const MAX_APPROVAL_REASON_CHARS = 4_096;
 export function verifyApprovalHmac(env, mac, kid, keys) {
     if (keys.length === 0)
         return false;
@@ -303,7 +304,7 @@ export function verifyDirectDoorProof(proof, envelope, config, opts) {
         return { ok: false, status: 401, errorCode: "principal_unbound", error: "principal token is not bound to this decision (cnf.bnd mismatch)" };
     if (!proof.mac)
         return { ok: false, status: 401, errorCode: "approval_mac_required", error: "direct door requires an approval MAC (X-Approval-Mac)" };
-    const ok = verifyApprovalHmac({ sessionId: envelope.sessionId, boundCallId: envelope.boundCallId ?? null, boundInputHash: envelope.boundInputHash ?? null, decision: envelope.decision }, proof.mac, proof.kid, config.approvalHmacKeys);
+    const ok = verifyApprovalHmac({ sessionId: envelope.sessionId, boundCallId: envelope.boundCallId ?? null, boundInputHash: envelope.boundInputHash ?? null, decision: envelope.decision, reason: envelope.reason ?? null }, proof.mac, proof.kid, config.approvalHmacKeys);
     if (!ok)
         return { ok: false, status: 401, errorCode: "approval_mac_invalid", error: "approval envelope MAC invalid" };
     return { ok: true, principal: verified.sub };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "1.283.0",
+  "version": "1.284.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",