@sema-agent/server 5.0.1 → 5.1.1

package/dist/boot/resolve-spec.js

@@ -77,7 +77,7 @@ export function createResolveSpec(ctx) {
         // body.scenario is bounded to the allowlist — outside ⇒ typed 400 `scenario_not_allowed`). The ruling
         // {scenario, allowlist} is center-RESOLVED and rides the caps view (TTL-cached, same fetch as runtimeCaps);
         // no center / dry-run / anonymous / older center / caps blip ⇒ undefined ⇒ legacy body-or-default chain.
-        const requested = gateScenarioRequest(await principalCaps?.scenarioRuling(auth?.principal), body.scenario, config.defaultScenario);
+        const requested = gateScenarioRequest(await principalCaps?.scenarioRuling(auth?.principal), body.scenario, config.defaultScenario, Object.keys(scenarios));
         // per-principal execution-lane policy — this worker's lane is a
         // PROCESS identity (REMOTE_EXEC boot wiring, no per-task switch), so admission is the gate: lane ∉
         // allowedLanes ⇒ typed 403 `execution_lane_not_allowed`. Same caps car as the scenario ruling (zero extra

package/dist/boot/stores.js

@@ -156,7 +156,11 @@ export async function openStores(ctx) {
             rosterStore = new TiDBRosterStore(mysqlPool);
         }
         else if (backend?.kind === "local") {
-            rosterStore = new FileRosterStore(join(config.localDataRoot ?? localRoot, "roster.json"));
+            // #109([2392] 提货):onCorruptRead 披露座接线——腐读响亮 warn([2195] 族:不静默折空)。
+            // 三挂点里 server 真用的只有这一个(session-policy=自家 SQL 双店;mailbox 用的 FileMailboxStore 无此座)。
+            rosterStore = new FileRosterStore(join(config.localDataRoot ?? localRoot, "roster.json"), {
+                onCorruptRead: (info) => logger.warn("roster_corrupt_read", { path: info.path, reason: info.reason }),
+            });
         }
         if (rosterStore)
             logger.info("roster_store_enabled", { backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file" });

package/dist/capabilities/scenarios.d.ts

@@ -196,5 +196,5 @@ export interface ScenarioRuling {
  *     到现状,与 workflows 面的 fail-closed 是刻意的 posture 差异,见 runtime-caps-resolver)。
  *   - body.scenario 未给:ruling 胜者 ⇒ 指派为默认;无胜者 ⇒ defaultScenario 现状链。
  */
-export declare function gateScenarioRequest(ruling: ScenarioRuling | undefined, bodyScenario: unknown, defaultScenario: string): string;
+export declare function gateScenarioRequest(ruling: ScenarioRuling | undefined, bodyScenario: unknown, defaultScenario: string, known: readonly string[]): string;
 //# sourceMappingURL=scenarios.d.ts.map

package/dist/capabilities/scenarios.js

@@ -417,8 +417,18 @@ export function mergeUserSkills(scenarioSkills, userSkills, logger) {
  *     到现状,与 workflows 面的 fail-closed 是刻意的 posture 差异,见 runtime-caps-resolver)。
  *   - body.scenario 未给:ruling 胜者 ⇒ 指派为默认;无胜者 ⇒ defaultScenario 现状链。
  */
-export function gateScenarioRequest(ruling, bodyScenario, defaultScenario) {
+export function gateScenarioRequest(ruling, bodyScenario, defaultScenario, known) {
     if (typeof bodyScenario === "string") {
+        // [2395]D③(5.1.0):body 显式给出的**未知名**响亮 400——此前静默折 default(oa 退役后老调用方
+        // 无声换了场景=更宽工具面,与零兼容纲领相反)。词表面先于治理面:名字都不存在时谈不上 allowlist。
+        // 指派链(ruling/default)不在此验——悬空指派名仍走 resolveSpec 既有 unknown→default(runtime-caps
+        // 面的误配另案,不该让一次中心误配把每个请求 400 死)。
+        if (!known.includes(bodyScenario)) {
+            throw new HttpError(400, `unknown scenario "${bodyScenario}" — this deployment's scenarios are: ${known.join(", ")}`, {
+                code: "scenario_unknown",
+                extra: { known: [...known] },
+            });
+        }
         const allowed = ruling?.allowlist ?? [];
         if (allowed.length > 0 && !allowed.includes(bodyScenario)) {
             throw new HttpError(400, `scenario "${bodyScenario}" is not in this principal's assigned allowlist`, {

package/dist/fleet/fleet-bus.d.ts

@@ -123,7 +123,9 @@ export interface FleetTaskRow {
 /** One workflow row (wire subset of contract `FleetWorkflow`). */
 export interface FleetWorkflowRow {
     id: string;
-    name: string;
+    /** [2400] FLEET-WORKFLOWS-1([2070]③ 同款,workflow 行此前漏网):缺席=诚实缺席,**不铸 id 冒充名**。
+     *  现役唯一发布者(workflow-notify-journal)恒带 redact 后的真名;此可选位只为乱序/部分 delta 诚实。 */
+    name?: string;
     description?: string;
     /** Owning principal (= the workflow run's scope). Same owner-gate as FleetTaskRow. NOT rendered. */
     scope?: string;

package/dist/fleet/fleet-bus.js

@@ -92,7 +92,7 @@ export class FleetEventBus {
     // └────────────────────────────────────────────────────────────────────────────────────────────────┘
     /** Upsert a workflow row (MERGE by `id`) + fan out. */
     publishWorkflow(delta) {
-        const merged = { ...(this.workflows.get(delta.id) ?? { id: delta.id, name: delta.id, status: "running" }), ...delta };
+        const merged = { ...(this.workflows.get(delta.id) ?? { id: delta.id, status: "running" }), ...delta };
         this.workflows.set(delta.id, merged);
         this.emit({ type: "workflow", row: merged, ts: this.now() });
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "5.0.1",
+  "version": "5.1.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -68,7 +68,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "^4.0.0",
+    "@sema-agent/sdk": "^4.1.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",