@sema-agent/server 3.5.0 → 3.5.1

package/dist/fleet/fleet-bus.d.ts

@@ -16,7 +16,13 @@ export type FleetTaskStatus = "queued" | "running" | "waiting" | "stopping" | "a
  *  shell-local render state the renderer composes; the wire carries the data that TRANSITIONS). */
 export interface FleetTaskRow {
     id: string;
-    name: string;
+    /** 显示名。**缺席不铸**([2070]③ cli 定谳,server 3.5.1):没有真名时本键**不发**。
+     *  ⚠️ 两代语义留档 —— 3.5.0 及以前,三处在无真名时把**行 id** 顶到本位(匿名子代 tick 铸子代 uuid、
+     *  `onChildTerminal` 合成终帧铸 a\* handle、`publishTask` 懒铸底座铸行 id),于是人眼看到一串乱码
+     *  (clay 亲报的「子代名乱码」形),消费端也**分不清**「它就叫这个」与「我们不知道它叫什么」。
+     *  3.5.1 起后者 = 键缺席,显示占位归客户端渲(cli 已收敛 `'(unnamed)'`)。同一条纪律见 [2053]
+     *  costUSD:诚实缺席 > 编造。(SDK `FleetTaskRow.name` 同步放宽 —— 见发车工单。) */
+    name?: string;
     description?: string;
     /** §K-7 (shell ASK 2026-06-28; byte-aligned to `@sema-agent/sdk` 0.0.39 `FleetTaskRow.agentType`/`agentName`) — a
      *  SHORT agent-TYPE label so the picker renders like CC 187 (`Explore`/`general-purpose`/`code-review`) instead of

package/dist/fleet/fleet-bus.js

@@ -41,7 +41,9 @@ export class FleetEventBus {
     /** Upsert a task row (MERGE onto any existing row by `id`) + fan out the merged row. Publishers may send a
      *  partial `{ id, tokens }` etc.; the row keeps its other fields. */
     publishTask(delta) {
-        const merged = { ...(this.tasks.get(delta.id) ?? { id: delta.id, name: delta.id, status: "running" }), ...delta };
+        // [2070]③:懒铸底座**不带 name** —— 一条只有 `{id,…}` 的首帧此前会把行 id 铸成显示名,而这里
+        // 恰恰是「谁都没给过名字」的位置。真名后到时照常 MERGE 上行(见本文件末的 [2070]③ 第 4 条钉)。
+        const merged = { ...(this.tasks.get(delta.id) ?? { id: delta.id, status: "running" }), ...delta };
         this.tasks.set(delta.id, merged);
         this.emit({ type: "task", row: merged, ts: this.now() });
     }
@@ -157,16 +159,16 @@ export function fleetRunPublisher(bus, run) {
                 // core 1.147 subagent usage tick (per-turn, cumulative) → a CHILD fleet row nested under the run.
                 const cid = childId(ev.taskId);
                 children.add(cid);
-                // BC-2 (core 1.151): use the subagent's sanitized display `name` (taskName/agent-type) for the child row;
-                // fall back to the taskId when absent (an anonymous subagent — core deliberately omits name rather than leak
-                // the delegated objective). The row IDENTITY stays `cid` (runId+taskId); only the display label improves.
+                // BC-2 (core 1.151): use the subagent's sanitized display `name` (taskName/agent-type) for the child row.
+                // [2070]③:name 缺席时**不铸**(此前回落 taskId=子代 uuid,人眼乱码)——行 IDENTITY 一直是 `cid`
+                // (runId+taskId),显示名与身份是两件事,没有显示名就让客户端渲占位。
                 // [WF2-A] redact the subagent display name for PARITY with the top-level run name (fleetRunLabels): core
                 // sanitizes it for RENDERING (ANSI/NUL strip + truncate) but does NOT secret-redact, so a secret-shaped
                 // taskName would leak verbatim on the child row without this.
                 // §K-7: `ev.name` IS the subagent TYPE (BC-2: taskName / selected agent-type) → ALSO surface it as
                 // `agentType` (the picker's short-label field), not only the display `name`. Absent name (anonymous
-                // subagent) → no agentType (the row falls back to name=taskId). One redacted value (name === agentType).
-                const childName = redactSecrets(ev.name ?? ev.taskId);
+                // subagent) → 两位一起缺席(name/agentType 同源同命)。One redacted value (name === agentType).
+                const childName = ev.name !== undefined ? redactSecrets(ev.name) : undefined;
                 if (!childStartedAt.has(cid))
                     childStartedAt.set(cid, Date.now());
                 if (ev.parentToolCallId)
@@ -174,7 +176,7 @@ export function fleetRunPublisher(bus, run) {
                 // [1415]③ 点亮半场:core 1.354 起 settle 时补终态 tick(status 值域 additive 扩 completed|failed;
                 // 此前恒 "running"=行为逐位不变)——workflow 子的 uuid 行终于有完成态可见(running→removed 的
                 // [1414]#3 形就此闭)。
-                bus.publishTask({ id: cid, name: childName, ...(ev.name ? { agentType: childName } : {}), parentId: run.runId, scope: run.scope, ...sessionField, status: tickStatus(ev.status), tokens: sumTokens(ev.usage), ...(() => { const t = toolUsesOf(ev.usage); return t !== undefined ? { toolUses: t } : {}; })(), elapsedMs: Date.now() - childStartedAt.get(cid) });
+                bus.publishTask({ id: cid, ...(childName !== undefined ? { name: childName, agentType: childName } : {}), parentId: run.runId, scope: run.scope, ...sessionField, status: tickStatus(ev.status), tokens: sumTokens(ev.usage), ...(() => { const t = toolUsesOf(ev.usage); return t !== undefined ? { toolUses: t } : {}; })(), elapsedMs: Date.now() - childStartedAt.get(cid) });
             }
             else if (ev.type === "tool_start" && ev.toolName) {
                 // BC-1 (clay 2026-06-27): the top-level run row's `description` = LIVE ACTIVITY (the tool now running), NOT
@@ -212,12 +214,13 @@ export function fleetRunPublisher(bus, run) {
             const parentId = ev.parentTaskId && ev.parentTaskId !== run.rootTaskId ? childId(ev.parentTaskId) : run.runId;
             // [WF2-A] redact the forwarded subagent name for parity with the top-level run name (see onEvent above).
             // §K-7: ev.name IS the subagent type → also surface it as `agentType` (picker short label). Reuse the value.
-            const fwdName = redactSecrets(ev.name ?? ev.taskId);
+            // [2070]③ 同 onEvent 臂:无 name ⇒ name/agentType 两位一起缺席(不拿 taskId 冒充显示名)。
+            const fwdName = ev.name !== undefined ? redactSecrets(ev.name) : undefined;
             if (!childStartedAt.has(cid))
                 childStartedAt.set(cid, Date.now());
             if (ev.parentToolCallId)
                 childByToolCall.set(ev.parentToolCallId, cid);
-            bus.publishTask({ id: cid, name: fwdName, ...(ev.name ? { agentType: fwdName } : {}), parentId, scope: run.scope, ...sessionField, status: tickStatus(ev.status), tokens: sumTokens(ev.usage), ...(() => { const t = toolUsesOf(ev.usage); return t !== undefined ? { toolUses: t } : {}; })(), elapsedMs: Date.now() - childStartedAt.get(cid) }); // [1415]③ 同上;[1748] toolUses 同 bg lane 口径
+            bus.publishTask({ id: cid, ...(fwdName !== undefined ? { name: fwdName, agentType: fwdName } : {}), parentId, scope: run.scope, ...sessionField, status: tickStatus(ev.status), tokens: sumTokens(ev.usage), ...(() => { const t = toolUsesOf(ev.usage); return t !== undefined ? { toolUses: t } : {}; })(), elapsedMs: Date.now() - childStartedAt.get(cid) }); // [1415]③ 同上;[1748] toolUses 同 bg lane 口径
         },
         onChildTerminal(taskId, status, altId, toolUseId) {
             // A background subagent/bash CHILD settles — task_progress never emits a terminal tick,
@@ -251,9 +254,11 @@ export function fleetRunPublisher(bus, run) {
             const liveCids = candidateCids.filter((c) => children.has(c));
             const hadRow = liveCids.length > 0;
             // 都没活行 = bash 无 tick 形:按首候选合成瞬态终帧(建即离,诚实且无害)。
+            // [2070]③:合成帧**不铸 name** —— 这条「瞬态」帧会被壳的终态留存池渲 60s,顶上去的 a\* handle
+            // 在那 60s 里就是用户看到的名字。父链接/租户/会话三位照发(它们是归属事实,不是显示名)。
             for (const cid of hadRow ? liveCids : [childId(taskId)]) {
                 const startedAtChild = childStartedAt.get(cid);
-                bus.publishTask({ id: cid, ...(children.has(cid) ? {} : { name: taskId, parentId: run.runId, scope: run.scope, ...sessionField }), status: fleetStatus, ...(startedAtChild !== undefined ? { elapsedMs: Date.now() - startedAtChild } : {}) });
+                bus.publishTask({ id: cid, ...(children.has(cid) ? {} : { parentId: run.runId, scope: run.scope, ...sessionField }), status: fleetStatus, ...(startedAtChild !== undefined ? { elapsedMs: Date.now() - startedAtChild } : {}) });
                 bus.removeTask(cid);
                 children.delete(cid);
                 childStartedAt.delete(cid);

package/dist/http/routes/approvals-assistant.js

@@ -1,6 +1,7 @@
 import { canonicalToolName } from "@sema-agent/core";
 import { principalFrom, verifyDirectDoorProof, MAX_APPROVAL_REASON_CHARS } from "../../security.js";
 import { redactedPreview } from "../../trace/redact.js";
+import { fleetRunLabels } from "../../fleet/fleet-bus.js"; // [2069]④ §3 行展示名与 fleet 行同源(见用处的注)
 import { sleep } from "../sse-log.js";
 import { sendJson, sendError, sseHeaders } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, isOperator } from "../principal-gate.js";
@@ -227,7 +228,24 @@ async function handleApprovalsAssistantBody(req, res, url, ctx, miss) {
                 // ③ 补偿=(a) 行**不消失**——它仍在本列表里带真实 `status`,「所有还停着的任务」由 status 回答;
                 //    (b) failSuspendedWithExpiredCheckpoint 三个 run store 全实装、每 tick 无条件跑(不受
                 //    APPROVAL_TIMEOUT_SEC 开关),窗口由 REAP_INTERVAL_SEC 封顶后收敛成 failed。
-                return { taskId: r.taskId, sessionId: r.sessionId, status: r.status, needsAttention: !!gate, gate, createdAt: r.createdAt, updatedAt: r.updatedAt };
+                // [2069]④(cli 2026-07-30):additive 展示位。行此前只有 taskId/status/needsAttention,面板
+                // 渲不出「这是哪个任务」。源 = run 行自己的 `objectivePreview`(写入时已脱敏 + ~120 截断)——
+                // **不**走 §2 inbox 那套 per-row `getCtx`:本视图头注逐字承诺「ONE query, no N+1」,为两个
+                // 展示位把它变成 N+1 是拿契约换排版。
+                // · `name` 经 `fleetRunLabels()`,与 fleet 行**同一个函数** ⇒ 同一个 run 在两个面板里名字一致
+                //   (两处各写一遍必然漂),顺带白拿 [1414]④ 的控制帧形保护(`<task-notification…>` 给中性名)。
+                // · `description` = 未截断原值,**仅在与 name 不同时才发** —— 相同就是同一句话印两遍
+                //   (BC-1 在 fleet 行上杀掉的 objective-shown-twice)。
+                // · 两键 OMIT-when-absent(无 preview ⇒ 都不发,占位归客户端),同批 [2070]③ 同一条纪律。
+                //   钉:test/assistant-tasks-display-keys.test.ts。
+                const preview = r.objectivePreview?.trim() ? r.objectivePreview : undefined;
+                const label = preview !== undefined ? fleetRunLabels(preview).name : undefined;
+                return {
+                    taskId: r.taskId, sessionId: r.sessionId, status: r.status, needsAttention: !!gate, gate,
+                    ...(label !== undefined ? { name: label } : {}),
+                    ...(preview !== undefined && label !== preview ? { description: preview } : {}),
+                    createdAt: r.createdAt, updatedAt: r.updatedAt,
+                };
             })
                 .sort((a, b) => Number(b.needsAttention) - Number(a.needsAttention) || (b.gate?.severity ?? 0) - (a.gate?.severity ?? 0) || (b.gate?.spentMicroUsd ?? 0) - (a.gate?.spentMicroUsd ?? 0));
             sendJson(res, 200, { tasks });

package/dist/main.js

@@ -808,22 +808,41 @@ async function main() {
     runDenySweep = server.denyExpiredApprovals;
     // [1934]:绑址旋钮 + 无鉴权自收窄(理由见 resolveBindHost 顶注)。undefined = Node 默认全接口。
     const bindHost = resolveBindHost(config);
-    await new Promise((resolve) => (bindHost ? server.listen(config.port, bindHost, resolve) : server.listen(config.port, resolve)));
-    logger.info("listening", {
-        port: config.port,
-        bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",
-        ...(bindHost === "127.0.0.1" && !config.bindHost
-            ? { note: "auto-narrowed to loopback: write face is unauthenticated (ALLOW_UNAUTHED_WRITES with no service token). Set BIND_HOST explicitly to override." }
-            : {}),
-    });
     // [2062]③ HOST 继承暗通道告警:zsh 常把 HOST 设成机器名,`{...process.env}` 起底的壳会静默继承给
     // 引擎——bind 面被 shell 环境暗配而部署者不知情(HOST=机器名解析到 LAN 口时=静默扩暴露面)。
+    // 🔴 [2067]③ 次序承重:必须在 listen **之前**打——HOST=不可解析名时 listen 直接 ENOTFOUND 崩溃,
+    // 恰是「继承 HOST 把 boot 弄崩」这个最需要解释的场景;warn 在 listen 后=诊断在崩溃里缺席,用户只见
+    // 裸 getaddrinfo 栈(cli 真机取证)。
     if (config.bindHostSource === "HOST") {
         logger.warn("bind_host_from_HOST_env", {
             bindHost,
             note: "the bind address came from the HOST env var (not BIND_HOST). Shells like zsh commonly set HOST to the machine name — if you did not set it yourself, this may be an inherited shell variable silently configuring the bind face. Set BIND_HOST explicitly to silence this warning.",
         });
     }
+    try {
+        await new Promise((resolve, reject) => {
+            server.once("error", reject); // listen 失败(ENOTFOUND/EADDRINUSE…)不吊死这个 Promise
+            bindHost ? server.listen(config.port, bindHost, resolve) : server.listen(config.port, resolve);
+        });
+    }
+    catch (e) {
+        // [2067]③:崩溃路径自带来源诊断——不可解析的 HOST 继承名在这里最常见。
+        logger.error("listen_failed", {
+            port: config.port,
+            bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",
+            ...(config.bindHostSource ? { bindHostSource: config.bindHostSource } : {}),
+            ...(config.bindHostSource === "HOST" ? { note: "bind failed for a host inherited from the HOST env var — set BIND_HOST explicitly (e.g. BIND_HOST=127.0.0.1)." } : {}),
+            error: e instanceof Error ? e.message : String(e),
+        });
+        throw e;
+    }
+    logger.info("listening", {
+        port: config.port,
+        bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",
+        ...(bindHost === "127.0.0.1" && !config.bindHost
+            ? { note: "auto-narrowed to loopback: write face is unauthenticated (ALLOW_UNAUTHED_WRITES with no service token). Set BIND_HOST explicitly to override." }
+            : {}),
+    });
     // fleet worker 接线(announce/heartbeat + usage 批报;lease 消费后一拍):boot 完成后
     // 注册(=首次心跳)。门 = center lane 配置 ∧ FLEET_ADVERTISE_ADDRESS 显式声明(不自猜可达地址);任一缺 → undefined
     // = 非 fleet 部署零行为。draining 翻转的即刻 announce 在 drainThenShutdown;退出 DELETE 在 hardShutdown。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "3.5.0",
+  "version": "3.5.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -67,7 +67,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "^1.1.0",
+    "@sema-agent/sdk": "^2.1.1",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",