@sema-agent/server 3.8.0 → 3.9.0

package/dist/http/routes/tasks.js

@@ -649,6 +649,12 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                                     // 提示行。cwd 与已展示的工具 args 同信任级 → 共享白名单构造器(redactSecrets + bound)。
                                     res.write(`data: ${JSON.stringify({ type: "workspace_changed", ...workspaceChangedEventData(ev) })}\n\n`);
                                 }
+                                else if (ev.type === "compaction_outcome") {
+                                    // core 2.5.0([2105]② 披露修):压缩非 compacted 结局上流帧——白名单投影:outcome/trigger
+                                    // 闭枚举 verbatim;reason 是引擎说明文本(可能引用配置值)→ redactSecrets;identity 两键同款。
+                                    const e = ev;
+                                    res.write(`data: ${JSON.stringify({ type: "compaction_outcome", outcome: e.outcome, trigger: e.trigger, ...(e.reason !== undefined ? { reason: redactSecrets(e.reason) } : {}), ...(e.eventId !== undefined ? { eventId: e.eventId } : {}), ...(e.parentToolCallId !== undefined ? { parentToolCallId: e.parentToolCallId } : {}) })}\n\n`);
+                                }
                                 else if (ev.type === "text_delta" || ev.type === "turn_end" || ev.type === "message_committed" || ev.type === "context_usage") {
                                     // 裸 catch-all 白名单化收官(probe-wire-1 表征钉的根治半场):最后四个已知臂离开
                                     // `JSON.stringify(ev)`。**零字节变化**白名单——已知键(含 E2 四 identity 键:live 现状

package/dist/plugins/worktree-isolation.js

@@ -109,12 +109,46 @@ export function withWorktreeIsolation(baseFactory, opts) {
             // down (core's hasDestroy() returns false for a plain base env). Behaviour identical to no wrapper.
             return baseFactory(ctx);
         }
+        // S3([2113] core 裁定的 server 半场):keep-if-changed 需要在保留分支跑 inner teardown(LSP evict
+        // 链等)而不跑 `git worktree remove` —— core addWorktree 把两者焊成一个复合 destroy 拆不开,所以在
+        // rootEnvAt 铸造点捕获 inner env 的**原** destroy 引用(per-mint 变量;core 稍后才把复合 destroy
+        // 装回同一对象上)。
+        let innerDestroy;
         const { env, worktreeDir } = await serialize(() => addWorktree(opts.baseEnvForGit, {
             repoRoot,
             sessionId: ctx.sessionId, // core sanitizes this into the worktree dir name (human-readable orphan diag)
-            rootEnvAt: opts.rootEnvAt,
+            rootEnvAt: async (dir) => {
+                const inner = await opts.rootEnvAt(dir);
+                const d = inner.destroy;
+                if (typeof d === "function")
+                    innerDestroy = d.bind(inner);
+                return inner;
+            },
             ...(opts.commit ? { commit: opts.commit } : {}),
         }));
+        // keep-if-changed 判定基点:mint 后立刻解析 worktree 的 HEAD(=detach 基点)。判定轴与 core Agent
+        // 车道逐字同款(subagent.js finish):dirty 文件 >0 ∥ base..HEAD commits >0 ⇒ changed。
+        let baseSha;
+        {
+            const r = await opts.baseEnvForGit.exec("git rev-parse HEAD", { cwd: worktreeDir });
+            if (r.ok && r.value.exitCode === 0)
+                baseSha = r.value.stdout.trim();
+        }
+        const isChanged = async () => {
+            // 判定失败 ⇒ 保守保留(Agent 车道 changed=true 缺省同款:删错=用户产出蒸发,留错=一个目录)。
+            const status = await opts.baseEnvForGit.exec("git status --porcelain", { cwd: worktreeDir });
+            if (!status.ok || status.value.exitCode !== 0)
+                return true;
+            const dirtyFiles = status.value.stdout.split("\n").filter((l) => l.trim() !== "").length;
+            if (dirtyFiles > 0)
+                return true;
+            if (baseSha === undefined)
+                return true;
+            const ahead = await opts.baseEnvForGit.exec(`git rev-list --count ${baseSha}..HEAD`, { cwd: worktreeDir });
+            if (!ahead.ok || ahead.value.exitCode !== 0)
+                return true;
+            return (parseInt(ahead.value.stdout.trim(), 10) || 0) > 0;
+        };
         opts.logger?.info?.("worktree_isolation_minted", {
             sessionId: ctx.sessionId,
             ...(ctx.taskId ? { taskId: ctx.taskId } : {}),
@@ -142,9 +176,30 @@ export function withWorktreeIsolation(baseFactory, opts) {
         // already reached; double/concurrent destroy is a legal Runner shape). The first call always goes through
         // coreDestroy (the inner env's own teardown must run).
         let destroyedOnce = false;
+        let keptOnce = false;
         env.destroy = () => serialize(async () => {
+            if (keptOnce)
+                return; // kept 是终态:二次 destroy 不得把保留的产出删掉
             if (destroyedOnce && !(await residue()))
-                return; // idempotent repeat — done is done
+                return; // idempotent repeat — done is done(原语义:残留时放行重试)
+            // S3 keep-if-changed:有改动(或判不出来)⇒ 保留目录+registration 给 userland verify+merge,
+            // 只跑 inner teardown(LSP evict/host 收尾;rootEnvAt 铸的是 persistent 形,不 rm 目录),
+            // 并披露坐标 —— 不披露的保留=只是换了个姿势的蒸发。残留检查在本分支让位:目录在=目的。
+            if (await isChanged()) {
+                keptOnce = true;
+                try {
+                    await innerDestroy?.();
+                }
+                finally {
+                    opts.logger?.info?.("worktree_kept", {
+                        worktreeDir,
+                        sessionId: ctx.sessionId,
+                        ...(ctx.taskId ? { taskId: ctx.taskId } : {}),
+                        note: "changes present — kept for verify/merge; remove with `git worktree remove` when done",
+                    });
+                }
+                return;
+            }
             await coreDestroy();
             destroyedOnce = true;
             if (!(await residue()))

package/dist/trace/core-keyset-guard.d.ts

@@ -18,7 +18,7 @@
 import type { TaskNotificationPayload, BackgroundChildEvent, RosterEntry, AskRequest, TaskEvent } from "@sema-agent/core";
 /** 编译期断言:T 必须收敛到 never(有残余键 = tsc 红)。 */
 type AssertAllKeysHandled<T extends never> = T;
-type NotificationProjected = "task_id" | "task_type" | "toolUseId" | "status" | "summary" | "result" | "output_file" | "usage" | "sessionId" | "seq" | "lines" | "stoppedBy" | "source" | "exitCode" | "partial" | "diagnostics" | "recentSteps" | "editedFiles" | "resumable" | "completionId";
+type NotificationProjected = "task_id" | "task_type" | "toolUseId" | "status" | "summary" | "result" | "output_file" | "usage" | "sessionId" | "seq" | "lines" | "stoppedBy" | "source" | "exitCode" | "partial" | "diagnostics" | "recentSteps" | "editedFiles" | "resumable" | "completionId" | "error" | "errorCode";
 type _GuardNotification = AssertAllKeysHandled<Exclude<keyof TaskNotificationPayload, NotificationProjected>>;
 type BgNotifProjected = "taskId" | "sessionId" | "seq" | "status" | "summary" | "stoppedBy" | "resumable" | "recentSteps" | "editedFiles" | "usage" | "transcriptId" | "rootSessionId" | "parentTaskId" | "parentToolCallId" | "completionId";
 type BgNotifExcluded = "kind" | "sessionScoped" | "owner" | "scope" | "description" | "agentType" | "name" | "currentAction" | "currentTool" | "parentSessionId" | "startedAt" | "workflowRunId" | "progressTaskId" | "progressParentTaskId";
@@ -28,7 +28,7 @@ type _GuardRoster = AssertAllKeysHandled<Exclude<keyof RosterEntry, RosterProjec
 type AskProjected = "toolName" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName";
 type AskExcluded = "toolCallId" | "preview" | "principal" | "requiresRealApproval";
 type _GuardAsk = AssertAllKeysHandled<Exclude<keyof AskRequest, AskProjected | AskExcluded>>;
-type TaskEventHandled = "text_delta" | "reasoning_delta" | "tool_start" | "tool_end" | "turn_end" | "compacted" | "diagnostics" | "message_committed" | "status" | "task_notification" | "task_progress" | "steering_injected" | "workspace_changed" | "done" | "context_usage";
+type TaskEventHandled = "text_delta" | "reasoning_delta" | "tool_start" | "tool_end" | "turn_end" | "compacted" | "diagnostics" | "message_committed" | "status" | "task_notification" | "task_progress" | "steering_injected" | "workspace_changed" | "done" | "context_usage" | "compaction_outcome";
 type _GuardTaskEvent = AssertAllKeysHandled<Exclude<TaskEvent["type"], TaskEventHandled>>;
 export type CoreKeysetGuards = [_GuardNotification, _GuardBgNotif, _GuardRoster, _GuardAsk, _GuardTaskEvent];
 export {};

package/dist/trace/project.d.ts

@@ -185,6 +185,8 @@ export declare function taskNotificationEventData(ev: {
         }>;
         resumable?: boolean;
         completionId?: string;
+        error?: string;
+        errorCode?: string;
     };
     eventId?: string;
     parentToolCallId?: string;
@@ -250,6 +252,8 @@ export declare function brainStatusEventData(ev: {
     parentToolCallId?: string;
 }): Record<string, unknown>;
 export declare function compactedEventData(ev: {
+    eventId?: string;
+    parentToolCallId?: string;
     trigger?: string;
     tokensBefore?: number;
     preserved_segment?: {

package/dist/trace/project.js

@@ -198,6 +198,10 @@ export function taskNotificationEventData(ev) {
         ...(n.stoppedBy !== undefined ? { stoppedBy: n.stoppedBy } : {}),
         // P1-3(core 1.452):完成幂等锚 verbatim(消费端跨通路去重;[1925] 一轮批)。
         ...(n.completionId !== undefined ? { completionId: n.completionId } : {}),
+        // RB-386(core 2.4.0 wire note,2.5.0 提货收编):bg agent 失败面归因两键——error 是引擎侧
+        // 失败说明(可能含网络地址等)→ redactSecrets;errorCode 是机器码 verbatim。缺席=非失败帧。
+        ...(n.error !== undefined ? { error: redactSecrets(n.error) } : {}),
+        ...(n.errorCode !== undefined ? { errorCode: n.errorCode } : {}),
         // [1543]§二 server①:白名单滞后 core payload 四键补齐——
         //   source:external 通知来源标(caller 供 = UNTRUSTED)→ redactSecrets;
         //   exitCode:数值 verbatim(bash 腿);
@@ -312,6 +316,8 @@ export function compactedEventData(ev) {
         return Object.keys(out).length > 0 ? out : undefined;
     })();
     return {
+        ...(ev.eventId !== undefined ? { eventId: ev.eventId } : {}),
+        ...(ev.parentToolCallId !== undefined ? { parentToolCallId: ev.parentToolCallId } : {}),
         // 🔴 2026-07-25:这三处此前**违反本函数注释自己写的那条不变量**(「畸形字段不得上线,与 1.72 同类」)——
         //   ① `trigger`/`tokensBefore` 是**裸赋值**:`tokensBefore` 为 `NaN` 时 `JSON.stringify` 把它变成 **`null`**,
         //      于是压缩面板渲染成「压缩前 0 tokens」而不是「未知」;裸赋值还会留下 present-with-undefined 的键

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "3.8.0",
+  "version": "3.9.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^2.3.0",
+    "@sema-agent/core": "^2.5.0",
     "@sema-agent/registry-core": "^0.11.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",