@sema-agent/server 3.3.0 → 3.4.0

package/dist/http/routes/approvals-assistant.js

@@ -155,12 +155,25 @@ async function handleApprovalsAssistantBody(req, res, url, ctx, miss) {
                 // 🔴 STRIP the resume `token` (the unexposed secret capability — resume is by sessionId, never the
                 // token) AND the RAW `toolInput` (core bounds but does NOT redact it — redaction is
                 // the consumer's job). Re-emit the REDACTED `input` instead.
-                const { token: _token, toolInput: _rawToolInput, ...safe } = s;
-                // `input` = a REDACTED preview of the projected (bounded, RAW) tool_input. Only `tool_approval` gates
-                // carry it (resource_limit / plan_review have none ⇒ toolInput undefined ⇒ input null). NOT the old
-                // bug (raw rich row + decide-binding); the decide-binding still lives only on /v1/approvals.
+                // 🔴 EXPLICIT projection([2029] cli 批准的收窄,辖域=仅本 inbox 面)—— 此前是「剥 token/toolInput、
+                // 其余整行展开」,于是 core summarizeCheckpoint 在 tool_approval 门上填的 toolName/toolCallId/preview/
+                // principal/sourceTaskId/contentKind 全部漏上 wire(其中 preview 还没过脱敏,而它同源的 toolInput 是
+                // 显式脱敏的)。四客户端仓结构性零消费(inbox verb 无调用点,[2029] 取证),按 §2 原意收成显式白名单:
+                // §1 镜像键(OMIT-when-absent)+ 两个显式 nullable 的 enrichment(objective/input)。富行
+                // (toolName/toolCallId/decide 绑定)只住 /v1/approvals —— 那面有具名消费者(desktop session-host
+                // 冷恢复),不在本刀辖域。`input` = REDACTED preview,只有 tool_approval 门携带(其余 ⇒ null)。
                 const input = s.toolInput != null ? redactedPreview(s.toolInput) : null;
-                return { ...safe, objective: ctx?.body?.objective ?? null, input };
+                return {
+                    sessionId: s.sessionId,
+                    scope: s.scope,
+                    createdAt: s.createdAt,
+                    ...(s.gateKind !== undefined ? { gateKind: s.gateKind } : {}),
+                    ...(s.severity !== undefined ? { severity: s.severity } : {}),
+                    ...(s.spentMicroUsd !== undefined ? { spentMicroUsd: s.spentMicroUsd } : {}),
+                    ...(s.deadline !== undefined ? { deadline: s.deadline } : {}),
+                    objective: ctx?.body?.objective ?? null,
+                    input,
+                };
             }))).sort((a, b) => (b.severity ?? 0) - (a.severity ?? 0)); // severity DESC (listByScope is created_at ASC; stable → oldest-first within a tier)
             sendJson(res, 200, { inbox }); // CheckpointSummary (token-stripped) + objective, severity-prioritized — the assistant single inbox
             return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -53,7 +53,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^2.1.0",
+    "@sema-agent/core": "^2.2.0",
     "@sema-agent/registry-core": "^0.10.24",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",