@sema-agent/server 1.311.0 → 1.312.0

package/dist/auth-keys.d.ts

@@ -0,0 +1,14 @@
+export interface ApprovalHmacKey {
+    kid: string;
+    key: string;
+    status?: "active" | "retiring";
+}
+export declare function parseApprovalHmacKeys(raw: string | undefined): ApprovalHmacKey[];
+export interface PrincipalJwtKey {
+    kid: string;
+    alg: "EdDSA" | "RS256" | "ES256";
+    key: string;
+    status?: "active" | "retiring";
+}
+export declare function parsePrincipalJwks(raw: string | undefined): PrincipalJwtKey[];
+//# sourceMappingURL=auth-keys.d.ts.map

package/dist/auth-keys.js

@@ -0,0 +1,31 @@
+export function parseApprovalHmacKeys(raw) {
+    if (!raw)
+        return [];
+    try {
+        const v = JSON.parse(raw);
+        if (!Array.isArray(v))
+            return [];
+        return v.filter((k) => !!k && typeof k.kid === "string" && typeof k.key === "string");
+    }
+    catch {
+        return [];
+    }
+}
+export function parsePrincipalJwks(raw) {
+    if (!raw)
+        return [];
+    const ALGS = new Set(["EdDSA", "RS256", "ES256"]);
+    try {
+        const v = JSON.parse(raw);
+        if (!Array.isArray(v))
+            return [];
+        return v.filter((k) => {
+            const e = k;
+            return !!e && typeof e.kid === "string" && typeof e.key === "string" && typeof e.alg === "string" && ALGS.has(e.alg);
+        });
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=auth-keys.js.map

package/dist/brain.d.ts

@@ -1,5 +1,5 @@
 import { type Brain, type BreakerState } from "@sema-agent/core";
-import type { ServiceConfig } from "./config.js";
+import type { ServiceConfig } from "./config-types.js";
 export declare function createBrain(config: ServiceConfig, deps?: {
     fetchImpl?: typeof fetch;
     breakerState?: BreakerState;

package/dist/capabilities/select-environment-tool.d.ts

@@ -1,6 +1,6 @@
 import type { ToolSpec } from "@sema-agent/core";
 import { type SandboxImageResolver } from "../per-task-image.js";
-import type { ImageViewer, ImageIndexEntry, ImageListFilter } from "../plugins/tidb-image-index.js";
+import type { ImageViewer, ImageIndexEntry, ImageListFilter } from "../plugins/store-contracts.js";
 export interface EnvironmentCatalog extends SandboxImageResolver {
     list(filter: ImageListFilter): Promise<{
         entries: ImageIndexEntry[];

package/dist/config-types.d.ts

@@ -0,0 +1,306 @@
+import type { SealedKeyPoison } from "./sealed-key.js";
+import type { McpServerSpec, Model, ModelRoles } from "@sema-agent/core";
+import type { ApprovalHmacKey, PrincipalJwtKey } from "./auth-keys.js";
+import type { ElicitationThrottle } from "./elicitation.js";
+import type { InfraCostRates } from "./finance/cost-taxonomy.js";
+import type { Autonomy, CommandRule } from "./runtime-governance.js";
+export interface ScopedMcpServer {
+    scenarios: string[];
+    spec: McpServerSpec;
+}
+export interface ImageBakeConfig {
+    enabled: boolean;
+    runnerPrincipal: string;
+    registry: string | null;
+    cacheBase: string | null;
+    defaultBaseRef: string | null;
+    leaseMs: number;
+    staleMs: number;
+    submitRateMax: number;
+    submitRateWindowSec: number;
+}
+export interface ServiceConfig {
+    port: number;
+    gatewayBaseUrl: string;
+    gatewayApiKey?: string;
+    gatewayFallbackUrls: string[];
+    anthropic?: {
+        apiKey?: string;
+        authToken?: string;
+        baseUrl?: string;
+        version?: string;
+        cacheBreakpoints: boolean;
+        maxRetries: number;
+    };
+    resilience: {
+        connectTimeoutMs: number;
+        firstTokenTimeoutMs: number;
+        idleTimeoutMs: number;
+        circuitBreaker: boolean;
+        failureThreshold: number;
+        cooldownMs: number;
+    };
+    model: Model;
+    models: Record<string, Model>;
+    modelApiKeyEnv: Record<string, string>;
+    modelApiKeys: Record<string, string | SealedKeyPoison>;
+    modelQuotaWeights: Record<string, number>;
+    tiers: Record<string, string>;
+    projects: Record<string, {
+        displayName?: string;
+        gitRemotes?: string[];
+        defaultScopes?: string[];
+    }>;
+    roles: ModelRoles;
+    sessionBackend: "memory" | "tidb" | "auto";
+    sessionCacheTtlSec: number;
+    rewindSnapshotMaxMb?: number;
+    memoryEngineEnabled: boolean;
+    memoryEngineDir?: string;
+    memoryEngineRemoteLaneAllowed: boolean;
+    memoryScope?: string;
+    memorySync?: {
+        url: string;
+        token: string;
+        scope: string;
+        maxPushEntries?: number;
+        maxPullEntries?: number;
+    };
+    remoteExec?: {
+        provider: "e2b";
+        apiKey: string;
+        template?: string;
+        timeoutMs?: number;
+        livenessMs?: number;
+        allowInternetAccess?: boolean;
+        sandboxEnv?: Record<string, string>;
+        mountPath?: string;
+    } | {
+        provider: "k8s";
+        image: string;
+        apiUrl?: string;
+        token?: string;
+        caCert?: string;
+        insecureTls?: boolean;
+        namespace?: string;
+        runtimeClass?: string;
+        mountPath?: string;
+        timeoutMs?: number;
+        memory?: string;
+        cpu?: string;
+        s3Snapshot?: {
+            endpoint: string;
+            bucket: string;
+            accessKey: string;
+            secretKey: string;
+            region?: string;
+            keyPrefix?: string;
+            presignTtlSec?: number;
+        };
+    } | {
+        provider: "ssh";
+        host: string;
+        port?: number;
+        username: string;
+        privateKey: string;
+        mountPath?: string;
+    } | {
+        provider: "adb";
+        serial: string;
+        adbPath?: string;
+        mountPath?: string;
+    } | {
+        provider: "host";
+        workspaceBase?: string;
+        commandTimeoutMs?: number;
+    } | {
+        provider: "local-docker";
+        image: string;
+        mountPath?: string;
+        dockerPath?: string;
+        dockerHost?: string;
+        memory?: string;
+        cpus?: number;
+        pidsLimit?: number;
+        dropAllCaps?: boolean;
+        network?: "none" | "bridge" | "host";
+        commandTimeoutMs?: number;
+        env?: Record<string, string>;
+    };
+    worktreeIsolation?: {
+        repoRoot: string;
+        allowedRoots?: string[];
+        commit?: string;
+    };
+    mcpServers?: ScopedMcpServer[];
+    tidb?: {
+        host: string;
+        port: number;
+        user: string;
+        password: string;
+        database: string;
+        connectionLimit?: number;
+    };
+    dbBackend: "mysql" | "pg" | "local" | "memory";
+    dbBackendExplicit: boolean;
+    localDataRoot?: string;
+    pg?: {
+        host: string;
+        port: number;
+        user: string;
+        password: string;
+        database: string;
+        connectionLimit?: number;
+    };
+    dbQueryTimeoutMs?: number;
+    snapshotBlobStore?: {
+        endpoint: string;
+        bucket: string;
+        accessKey: string;
+        secretKey: string;
+        region?: string;
+        keyPrefix?: string;
+        presignTtlSec?: number;
+    };
+    snapshotBlobSqlMaxBytes?: number;
+    snapshotBlobAllowSql: boolean;
+    pluginsAllowHosts: string[];
+    bindHost?: string;
+    attachmentOrphanGraceMs: number;
+    workspaceFileMaxBytes: number;
+    sendUserFile?: {
+        endpoint: string;
+        publicEndpoint?: string;
+        publicBucket: string;
+        privateBucket: string;
+        privateKeyPrefix: string;
+        sandboxPutEndpoint?: string;
+        accessKey: string;
+        secretKey: string;
+        region?: string;
+        defaultTtlSec: number;
+    };
+    authToken?: string;
+    authTokens: Record<string, string>;
+    allowUnauthedWrites?: boolean;
+    metricsToken?: string;
+    traceToken?: string;
+    corsOrigins: string[];
+    attachmentMaxBytes: number;
+    attachmentMimeAllowlist?: string[];
+    attachmentUnboundTtlMs: number;
+    principalHeader: string;
+    requirePrincipal: boolean;
+    autonomy?: Autonomy;
+    commandPolicy?: CommandRule[];
+    approvalRequire: string[];
+    operatorPrincipals: string[];
+    approvalDeny: string[];
+    approvalPollMs: number;
+    durableApproval: boolean;
+    resourceSuspend: boolean;
+    resourceSuspendTtlSec: number;
+    approvalAutoBudget: number;
+    approvalNeverAuto: string[];
+    approvalHmacKeys: ApprovalHmacKey[];
+    directApprovalDoor: boolean;
+    principalJwtPubkeys: PrincipalJwtKey[];
+    principalJwtIss?: string;
+    principalJwtAud?: string;
+    principalJwtMaxTtlSec: number;
+    directDoorActive: boolean;
+    infraCostRates: InfraCostRates;
+    leaderEnabled: boolean;
+    leaderFanoutEnabled: boolean;
+    routerEnabled: boolean;
+    selfOrchestrationEnabled: boolean;
+    forkEnabled: boolean;
+    experimentalObserverAgents: boolean;
+    selfOrchestrationModels: string[];
+    selfOrchestrationWorkerIsolation: boolean;
+    workflowRunStoreBackend: "auto" | "file" | "memory";
+    workflowOrphanGraceMs: number;
+    schedulerEnabled: boolean;
+    projectMemoryDisabled: boolean;
+    schedulerStorePath?: string;
+    configBootFetchBudgetMs: number;
+    schedulerSessionWakeup: boolean;
+    planModeEnabled: boolean;
+    workflowJournalRetentionMs: number;
+    workflowRunRetentionMs: number;
+    backgroundAgentRetentionMs: number;
+    backgroundAgentStaleRunningMs: number;
+    backgroundAgentParkClaimStaleMs: number;
+    rosterRetentionMs: number;
+    scratchpadSweepTtlMs: number;
+    sandboxPkgSource?: string;
+    sessionAutoTitle: boolean;
+    selectEnvironmentTool: boolean;
+    envFactsEnabled: boolean;
+    sensitiveWritePatterns: string[];
+    manualModeShellGate?: "always" | "classify";
+    toolDeferLongtail: boolean;
+    lspEnabled: boolean;
+    lspHostEnabled: boolean;
+    drainGraceMs: number;
+    sighupIdleGraceMs: number;
+    mcpElicitation: {
+        enabled: boolean;
+        throttle: ElicitationThrottle;
+    };
+    askQuestionEnabled: boolean;
+    toolApprovalEnabled: boolean;
+    workflowAgentsReadOnly: boolean;
+    imageBakes: ImageBakeConfig;
+    toolTrace: boolean;
+    traceThinking: boolean;
+    logLevel: "debug" | "info" | "warn" | "error";
+    rateLimitPerMin: number;
+    maxTaskCostUsd: number;
+    maxTaskTokens: number;
+    maxPrincipalCostUsd: number;
+    costQuotaWindowSec: number;
+    degrade?: {
+        to: string;
+        atCostFraction: number;
+        reactive: boolean;
+        downgradeOn?: ("rate_limit" | "breaker_open")[];
+        toSupportsImages: boolean;
+    };
+    cascadeLadder: string[];
+    otel?: {
+        endpoint: string;
+        intervalMs: number;
+        serviceName: string;
+        headers: Record<string, string>;
+    };
+    approvalTimeoutSec: number;
+    reapIntervalSec: number;
+    toolResultTtlSec: number;
+    runStaleSec: number;
+    syncImportLeaseStaleSec: number;
+    gitApiBaseUrl?: string;
+    gitApiToken?: string;
+    memoryEngineBackend: "file" | "pg" | "tidb";
+    workflowSizeGuideline?: "small" | "medium" | "large" | "unrestricted";
+    defaultScenario: string;
+    skillsDir: string;
+    oaApiBaseUrl?: string;
+    oaServiceToken?: string;
+    oaIssue?: {
+        baseUrl: string;
+        owner: string;
+        repo: string;
+        token: string;
+        defaultLabels?: number[];
+    };
+    configCenter?: {
+        baseUrl: string;
+        token: string;
+        dryRun: boolean;
+        worker?: string;
+    };
+    configProvider?: string;
+    configLocalDir?: string;
+}
+//# sourceMappingURL=config-types.d.ts.map

package/dist/config-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config-types.js.map

package/dist/config.d.ts

@@ -1,308 +1,7 @@
-import type { SealedKeyPoison } from "./sealed-key.js";
-import { type McpServerSpec, type Model, type ModelRoles } from "@sema-agent/core";
-import { type ApprovalHmacKey, type PrincipalJwtKey } from "./security.js";
-import { type ElicitationThrottle } from "./elicitation.js";
-import type { InfraCostRates } from "./finance/cost-taxonomy.js";
-import type { Autonomy, CommandRule } from "./runtime-governance.js";
-export interface ScopedMcpServer {
-    scenarios: string[];
-    spec: McpServerSpec;
-}
-export interface ImageBakeConfig {
-    enabled: boolean;
-    runnerPrincipal: string;
-    registry: string | null;
-    cacheBase: string | null;
-    defaultBaseRef: string | null;
-    leaseMs: number;
-    staleMs: number;
-    submitRateMax: number;
-    submitRateWindowSec: number;
-}
-export interface ServiceConfig {
-    port: number;
-    gatewayBaseUrl: string;
-    gatewayApiKey?: string;
-    gatewayFallbackUrls: string[];
-    anthropic?: {
-        apiKey?: string;
-        authToken?: string;
-        baseUrl?: string;
-        version?: string;
-        cacheBreakpoints: boolean;
-        maxRetries: number;
-    };
-    resilience: {
-        connectTimeoutMs: number;
-        firstTokenTimeoutMs: number;
-        idleTimeoutMs: number;
-        circuitBreaker: boolean;
-        failureThreshold: number;
-        cooldownMs: number;
-    };
-    model: Model;
-    models: Record<string, Model>;
-    modelApiKeyEnv: Record<string, string>;
-    modelApiKeys: Record<string, string | SealedKeyPoison>;
-    modelQuotaWeights: Record<string, number>;
-    tiers: Record<string, string>;
-    projects: Record<string, {
-        displayName?: string;
-        gitRemotes?: string[];
-        defaultScopes?: string[];
-    }>;
-    roles: ModelRoles;
-    sessionBackend: "memory" | "tidb" | "auto";
-    sessionCacheTtlSec: number;
-    rewindSnapshotMaxMb?: number;
-    memoryEngineEnabled: boolean;
-    memoryEngineDir?: string;
-    memoryEngineRemoteLaneAllowed: boolean;
-    memoryScope?: string;
-    memorySync?: {
-        url: string;
-        token: string;
-        scope: string;
-        maxPushEntries?: number;
-        maxPullEntries?: number;
-    };
-    remoteExec?: {
-        provider: "e2b";
-        apiKey: string;
-        template?: string;
-        timeoutMs?: number;
-        livenessMs?: number;
-        allowInternetAccess?: boolean;
-        sandboxEnv?: Record<string, string>;
-        mountPath?: string;
-    } | {
-        provider: "k8s";
-        image: string;
-        apiUrl?: string;
-        token?: string;
-        caCert?: string;
-        insecureTls?: boolean;
-        namespace?: string;
-        runtimeClass?: string;
-        mountPath?: string;
-        timeoutMs?: number;
-        memory?: string;
-        cpu?: string;
-        s3Snapshot?: {
-            endpoint: string;
-            bucket: string;
-            accessKey: string;
-            secretKey: string;
-            region?: string;
-            keyPrefix?: string;
-            presignTtlSec?: number;
-        };
-    } | {
-        provider: "ssh";
-        host: string;
-        port?: number;
-        username: string;
-        privateKey: string;
-        mountPath?: string;
-    } | {
-        provider: "adb";
-        serial: string;
-        adbPath?: string;
-        mountPath?: string;
-    } | {
-        provider: "host";
-        workspaceBase?: string;
-        commandTimeoutMs?: number;
-    } | {
-        provider: "local-docker";
-        image: string;
-        mountPath?: string;
-        dockerPath?: string;
-        dockerHost?: string;
-        memory?: string;
-        cpus?: number;
-        pidsLimit?: number;
-        dropAllCaps?: boolean;
-        network?: "none" | "bridge" | "host";
-        commandTimeoutMs?: number;
-        env?: Record<string, string>;
-    };
-    worktreeIsolation?: {
-        repoRoot: string;
-        allowedRoots?: string[];
-        commit?: string;
-    };
-    mcpServers?: ScopedMcpServer[];
-    tidb?: {
-        host: string;
-        port: number;
-        user: string;
-        password: string;
-        database: string;
-        connectionLimit?: number;
-    };
-    dbBackend: "mysql" | "pg" | "local" | "memory";
-    dbBackendExplicit: boolean;
-    localDataRoot?: string;
-    pg?: {
-        host: string;
-        port: number;
-        user: string;
-        password: string;
-        database: string;
-        connectionLimit?: number;
-    };
-    dbQueryTimeoutMs?: number;
-    snapshotBlobStore?: {
-        endpoint: string;
-        bucket: string;
-        accessKey: string;
-        secretKey: string;
-        region?: string;
-        keyPrefix?: string;
-        presignTtlSec?: number;
-    };
-    snapshotBlobSqlMaxBytes?: number;
-    snapshotBlobAllowSql: boolean;
-    pluginsAllowHosts: string[];
-    bindHost?: string;
-    attachmentOrphanGraceMs: number;
-    workspaceFileMaxBytes: number;
-    sendUserFile?: {
-        endpoint: string;
-        publicEndpoint?: string;
-        publicBucket: string;
-        privateBucket: string;
-        privateKeyPrefix: string;
-        sandboxPutEndpoint?: string;
-        accessKey: string;
-        secretKey: string;
-        region?: string;
-        defaultTtlSec: number;
-    };
-    authToken?: string;
-    authTokens: Record<string, string>;
-    allowUnauthedWrites?: boolean;
-    metricsToken?: string;
-    traceToken?: string;
-    corsOrigins: string[];
-    attachmentMaxBytes: number;
-    attachmentMimeAllowlist?: string[];
-    attachmentUnboundTtlMs: number;
-    principalHeader: string;
-    requirePrincipal: boolean;
-    autonomy?: Autonomy;
-    commandPolicy?: CommandRule[];
-    approvalRequire: string[];
-    operatorPrincipals: string[];
-    approvalDeny: string[];
-    approvalPollMs: number;
-    durableApproval: boolean;
-    resourceSuspend: boolean;
-    resourceSuspendTtlSec: number;
-    approvalAutoBudget: number;
-    approvalNeverAuto: string[];
-    approvalHmacKeys: ApprovalHmacKey[];
-    directApprovalDoor: boolean;
-    principalJwtPubkeys: PrincipalJwtKey[];
-    principalJwtIss?: string;
-    principalJwtAud?: string;
-    principalJwtMaxTtlSec: number;
-    directDoorActive: boolean;
-    infraCostRates: InfraCostRates;
-    leaderEnabled: boolean;
-    leaderFanoutEnabled: boolean;
-    routerEnabled: boolean;
-    selfOrchestrationEnabled: boolean;
-    forkEnabled: boolean;
-    experimentalObserverAgents: boolean;
-    selfOrchestrationModels: string[];
-    selfOrchestrationWorkerIsolation: boolean;
-    workflowRunStoreBackend: "auto" | "file" | "memory";
-    workflowOrphanGraceMs: number;
-    schedulerEnabled: boolean;
-    projectMemoryDisabled: boolean;
-    schedulerStorePath?: string;
-    configBootFetchBudgetMs: number;
-    schedulerSessionWakeup: boolean;
-    planModeEnabled: boolean;
-    workflowJournalRetentionMs: number;
-    workflowRunRetentionMs: number;
-    backgroundAgentRetentionMs: number;
-    backgroundAgentStaleRunningMs: number;
-    backgroundAgentParkClaimStaleMs: number;
-    rosterRetentionMs: number;
-    scratchpadSweepTtlMs: number;
-    sandboxPkgSource?: string;
-    sessionAutoTitle: boolean;
-    selectEnvironmentTool: boolean;
-    envFactsEnabled: boolean;
-    sensitiveWritePatterns: string[];
-    manualModeShellGate?: "always" | "classify";
-    toolDeferLongtail: boolean;
-    lspEnabled: boolean;
-    lspHostEnabled: boolean;
-    drainGraceMs: number;
-    sighupIdleGraceMs: number;
-    mcpElicitation: {
-        enabled: boolean;
-        throttle: ElicitationThrottle;
-    };
-    askQuestionEnabled: boolean;
-    toolApprovalEnabled: boolean;
-    workflowAgentsReadOnly: boolean;
-    imageBakes: ImageBakeConfig;
-    toolTrace: boolean;
-    traceThinking: boolean;
-    logLevel: "debug" | "info" | "warn" | "error";
-    rateLimitPerMin: number;
-    maxTaskCostUsd: number;
-    maxTaskTokens: number;
-    maxPrincipalCostUsd: number;
-    costQuotaWindowSec: number;
-    degrade?: {
-        to: string;
-        atCostFraction: number;
-        reactive: boolean;
-        downgradeOn?: ("rate_limit" | "breaker_open")[];
-        toSupportsImages: boolean;
-    };
-    cascadeLadder: string[];
-    otel?: {
-        endpoint: string;
-        intervalMs: number;
-        serviceName: string;
-        headers: Record<string, string>;
-    };
-    approvalTimeoutSec: number;
-    reapIntervalSec: number;
-    toolResultTtlSec: number;
-    runStaleSec: number;
-    syncImportLeaseStaleSec: number;
-    gitApiBaseUrl?: string;
-    gitApiToken?: string;
-    memoryEngineBackend: "file" | "pg" | "tidb";
-    workflowSizeGuideline?: "small" | "medium" | "large" | "unrestricted";
-    defaultScenario: string;
-    skillsDir: string;
-    oaApiBaseUrl?: string;
-    oaServiceToken?: string;
-    oaIssue?: {
-        baseUrl: string;
-        owner: string;
-        repo: string;
-        token: string;
-        defaultLabels?: number[];
-    };
-    configCenter?: {
-        baseUrl: string;
-        token: string;
-        dryRun: boolean;
-        worker?: string;
-    };
-    configProvider?: string;
-    configLocalDir?: string;
-}
+import { type Model } from "@sema-agent/core";
+import type { Autonomy } from "./runtime-governance.js";
+import type { ServiceConfig } from "./config-types.js";
+export type { ServiceConfig, ScopedMcpServer, ImageBakeConfig } from "./config-types.js";
 export declare function parseAutonomy(raw: string | undefined): Autonomy | undefined;
 export declare function drainConfigWarnings(): Array<{
     env: string;

package/dist/config.js

@@ -3,7 +3,7 @@ import { join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { CODE_AGENT_PROMPT, formatUserScope, isThinkingLevel, RECOMMENDED_SENSITIVE_PATTERNS } from "@sema-agent/core";
 import { ROSTER_PRIMARY_ROLES, ROSTER_CHEAP_ROLES } from "@sema-agent/registry-core";
-import { parseApprovalHmacKeys, parsePrincipalJwks } from "./security.js";
+import { parseApprovalHmacKeys, parsePrincipalJwks } from "./auth-keys.js";
 import { DEFAULT_ELICITATION_THROTTLE } from "./elicitation.js";
 function csv(name) {
     return (process.env[name] ?? "")

package/dist/env-facts.d.ts

@@ -1,4 +1,4 @@
-import type { ImageCapabilities } from "./plugins/tidb-image-index.js";
+import type { ImageCapabilities } from "./plugins/store-contracts.js";
 export interface SandboxEnvFacts {
     profile?: string;
     capabilities?: string[];