@sema-agent/server 5.2.0 → 5.4.0

package/dist/boot/resolve-spec.js

@@ -89,10 +89,8 @@ export function createResolveSpec(ctx) {
         // resolving here, skills/mcp would still be filtered by the raw unknown name → any skill/MCP tagged
         // ["default"] silently drops. council finding.)
         const scenarioName = scenarios[requested] ? requested : "default";
-        // [891] deprecation(一版过渡窗):"autonomous" 已改名 "code"(persona 同一,唯一差别=alias 仍
+        // [891]→[2400]:"autonomous" alias 已退役(clay 裁不留过渡)——body 显式传它走 scenario_unknown 400。
         // 定死 finalVerification:true 保存量行为)。warn 不 400——TB harness/存量部署平滑迁移。
-        if (scenarioName === "autonomous")
-            logger.warn("scenario_autonomous_deprecated", { alias: "code", note: "renamed by [891]; alias keeps finalVerification pinned — pass scenario:'code' (+ explicit finalVerification if wanted)" });
         const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal);
         // codex R3/R4 (appendSystemPrompt 案): ONE center-pack snapshot per request — the append-less gate below
         // AND the provider pick (promptProvider field) both read THIS capture, never the mutable centerPrompts ref
@@ -538,7 +536,7 @@ export function createResolveSpec(ctx) {
             // design/132 (core 1.249): one-shot end-game verification nudge ("re-run the final artifact through
             // its real entrypoint before finishing"). OPT-IN by core's own judgment (default ON lost the evidence case:
             // +1 turn on every interactive write task) — the AUTONOMY caller declares it (harness/scheduler lanes).
-            // [849] scenario-declared leg: the `autonomous` scenario pins it in its bundle (cap.finalVerification —
+            // [849]→[2400] scenario-declared leg 已无生产者(autonomous 退役后无场景定死终验);保留 OR 折入形防回归 —— (cap.finalVerification —
             // picking that scenario IS the autonomy declaration, so this is not "inferring from scenario"); OR-folded
             // with the caller's explicit flag — a scenario can only ADD the closing verification turn, never strip a
             // caller's request. Children do not inherit (core semantics).

package/dist/boot/stores.js

@@ -253,7 +253,10 @@ export async function openStores(ctx) {
             mailboxStore = new TiDBMailboxStore(mysqlPool);
         }
         else if (backend?.kind === "local") {
-            mailboxStore = new FileMailboxStore(config.localDataRoot ?? localRoot);
+            // #113([2399]③→[2408] core 5.2.0 补座):腐读披露——照 roster 同形;torn-tail 静默=core 有意边界。
+            mailboxStore = new FileMailboxStore(config.localDataRoot ?? localRoot, {
+                onCorruptRead: (info) => logger.warn("mailbox_corrupt_read", { path: info.path, reason: info.reason }),
+            });
         }
         if (mailboxStore)
             logger.info("mailbox_store_enabled", { backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file" });

package/dist/capabilities/scenarios.d.ts

@@ -19,7 +19,7 @@ export interface ScenarioBundle {
     skills: SkillSpec[];
     promptProvider?: PromptProvider;
     /** [849] 场景解释层定死的终验开关(core TaskSpec.finalVerification):bench 实测产品默认请求与
-     *  bench 态差距三件之一。只有 `autonomous` 置 true;spec 组装处与 caller 显式声明取 OR(场景只会
+     *  bench 态差距三件之一。[2400] 起无场景定死(autonomous 退役)——纯 caller 显式旋钮;spec 组装处 OR 折入(场景只会
      *  多加一轮收官验证,绝不收窄 caller 意图),壳/caller 不感知。 */
     finalVerification?: true;
 }
@@ -130,7 +130,6 @@ export declare function semaIdentityProvider(): PromptProvider;
  */
 export declare function codePromptProvider(brand: boolean): PromptProvider;
 /** @deprecated [891] 改名 code——一版过渡期保留旧符号(与场景名 alias 同窗退役)。 */
-export declare const autonomousPromptProvider: typeof codePromptProvider;
 export declare function buildScenarios(deps: ScenarioDeps): Record<string, Scenario>;
 /** Resolve the scenario for a request (falls back to `default`). */
 export declare function selectScenario(scenarios: Record<string, Scenario>, name: string | undefined): Scenario;
@@ -148,7 +147,7 @@ export interface ScenarioDetail {
     promptSummary: string;
     enabled: boolean;
 }
-/** 内建五场景详情。default/autonomous/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
+/** 内建五场景详情。default/code/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
  *  fail-loud 语义(缺 GIT_API 配置/principal 即 throw)→ 探针失败落静态表兜底(表↔工厂一致性由测试锁:
  *  测试喂 fake deps 真调工厂对账工具名)。enabled 对内建恒 true(约定②)。 */
 export declare function builtinScenarioDetails(scenarios: Record<string, Scenario>, deps: Pick<ScenarioDeps, "brandIdentity">): Record<string, ScenarioDetail>;

package/dist/capabilities/scenarios.js

@@ -86,12 +86,12 @@ export function codePromptProvider(brand) {
     };
 }
 /** @deprecated [891] 改名 code——一版过渡期保留旧符号(与场景名 alias 同窗退役)。 */
-export const autonomousPromptProvider = codePromptProvider;
+// [2400] CAPS-OPS-11:autonomousPromptProvider 别名导出已随场景退役删除(真身=codePromptProvider)。
 export function buildScenarios(deps) {
     // The default scenario filters skills by "default" — NOT by req.scenario (which may be an unknown name
     // that fell back here): the bundle must be a coherent "default" set, matching how main.ts resolves an
     // unknown scenario to "default" for tools/prompt/mcp too (council finding — else default-tagged drop).
-    // 抽成具名工厂:`autonomous` 直接复用它取 bundle(工具/技能面与 default 恒等由构造保证,不靠两处
+    // 抽成具名工厂:`code` 直接复用它取 bundle(工具/技能面与 default 恒等由构造保证,不靠两处
     // 各写一份 assembleCodeTools 参数再祈祷不漂移)。
     const defaultScenario = (req) => {
         // gap-audit rank-1 BLOCKER: the default agent is the CC agent loop — it MUST have the
@@ -176,14 +176,9 @@ export function buildScenarios(deps) {
             ...defaultScenario(req, principal),
             promptProvider: codePromptProvider(deps.brandIdentity === true),
         }),
-        // [891] 兼容 alias(一版过渡,deprecation warn 在 main.ts 解析处):旧语义逐字保留 —— code persona
-        // + finalVerification 场景层定死 true(存量 TB harness/部署传 "autonomous" 的行为一根毛不变;
-        // 新调用方要终验请显式传 body.finalVerification)。
-        autonomous: (req, principal) => ({
-            ...defaultScenario(req, principal),
-            promptProvider: codePromptProvider(deps.brandIdentity === true),
-            finalVerification: true,
-        }),
+        // [891]→[2400] CAPS-OPS-11(clay 裁 2026-08-03,不留任何过渡):`autonomous` 过渡 alias 已退役。
+        // body 显式传它 ⇒ 5.1.0 起的 scenario_unknown 400 响亮拒(附现役词表);旧语义迁移形=
+        // scenario:"code" + body.finalVerification:true(终验自此=纯 caller 显式旋钮,场景层无定死)。
         "code-review": (req) => codeReview(deps, req),
         // Neutral repo-readonly scenario (OA ask): the SAME clone-free read-only repo tools as code-review
         // (repo_tree / repo_read_file / repo_pull_diff over GIT_API_TOKEN) with NO promptProvider — the
@@ -228,7 +223,7 @@ export function buildScenarios(deps) {
 export function selectScenario(scenarios, name) {
     return (name && scenarios[name]) || scenarios.default;
 }
-/** 内建五场景详情。default/autonomous/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
+/** 内建五场景详情。default/code/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
  *  fail-loud 语义(缺 GIT_API 配置/principal 即 throw)→ 探针失败落静态表兜底(表↔工厂一致性由测试锁:
  *  测试喂 fake deps 真调工厂对账工具名)。enabled 对内建恒 true(约定②)。 */
 export function builtinScenarioDetails(scenarios, deps) {
@@ -247,9 +242,6 @@ export function builtinScenarioDetails(scenarios, deps) {
             ? "Sema 产品身份 + core 编码完全体提示词(CODE_AGENT persona+自治自检;CC 血统对表)"
             : "core 编码完全体提示词(CODE_AGENT persona+自治自检;CC 血统对表)"),
         default: mk("default", "通用/助理场景(域中性 persona,CC agent loop 全量工具面;[891] 起非出厂缺省,显式可选)", "full-body", probe("default", {}, undefined, ["Now"]), deps.brandIdentity ? "Sema 产品身份 + core 默认宪法(结构层由引擎合成)" : "core 默认宪法(中性,无场景附加 persona)"),
-        autonomous: mk("autonomous", "⚠️ deprecated([891] 改名 code,一版过渡 alias):code persona + finalVerification 固定开(旧语义逐字保留)", "full-body", probe("autonomous", {}, undefined, ["Now"]), deps.brandIdentity
-            ? "Sema 产品身份 + core 编码完全体提示词(= code 场景;finalVerification 固定开)"
-            : "core 编码完全体提示词(= code 场景;finalVerification 固定开)"),
         "code-review": mk("code-review", "代码评审(clone-free 只读仓库工具;council=true 升多镜头评审团)", "repo-readonly", probe("code-review", { repo: "probe/probe" }, undefined, REPO_TOOLS), "评审员/评审团协调提示词(镜头分工+产出契约)"),
         scan: mk("scan", "中性只读仓库扫描(输出契约由 objective+skills 决定)", "repo-readonly", probe("scan", { repo: "probe/probe" }, undefined, REPO_TOOLS), "无场景附加提示词(objective+center skills 拥有输出契约)"),
         team: mk("team", "多智能体团队圆桌(模板成员+synthesizer,模板可由 registry 配置)", "team", probe("team", {}, undefined, ["run_team"]), "团队协调者提示词(圆桌纪律+合成流程)"),

package/dist/http/routes/sessions.js

@@ -718,7 +718,15 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                     return;
                 }
                 const lim = limRaw === null ? 20 : Number(limRaw);
-                const page = keys.slice(0, lim);
+                // [2400] CAPS-OPS-6(clay 裁 2026-08-03,最优设计不留旧语义):
+                //   · `?before=<key>`(exclusive)游标——keys 是 uuidv7 字典序 desc(新→旧),before 取更旧段;
+                //   · `total` = listKeys 口径的**快照总数**(与 tree 腿的 total 同名同义;此前=页内行数,同名反义
+                //     且超过 limit 的快照永远取不到)。竞态窗口内正被 reap 的 ghost 键会短暂多计 1,下一拍自愈;
+                //   · `nextBefore` 仅在还有更旧的 key 时给(=本页最后一个 key);
+                //   · 复审 A-MED 的保护不变:latest 与**展示行**同源(ghost 不当 latest)、页行掉 ghost 不空报。
+                const beforeRaw = q.get("before");
+                const scoped = beforeRaw !== null ? keys.filter((k) => k < beforeRaw) : keys;
+                const page = scoped.slice(0, lim);
                 const snapshots = [];
                 for (const k of page) {
                     const m = await fs.exportManifest(wsSession, k);
@@ -733,14 +741,14 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                     }
                     snapshots.push({ key: k, files: m.size, ...(bytes !== undefined ? { bytes } : {}) });
                 }
-                // 🔴 复审 A-MED:`latest` 与 `total` 必须与**展示行**同源——listKeys 与 exportManifest 之间
-                // 被 reap 的键(ghost)若恰是字典序最大者,原写法会让 latest 指向已消失的快照(latest 别名的
-                // tree/file/archive 全 404,尽管有有效的次新快照),且 total 计入 ghost 与 snapshots[] 不一致。
+                const lastPageKey = page.length > 0 ? page[page.length - 1] : undefined;
+                const hasMore = lastPageKey !== undefined && scoped.length > page.length;
                 sendJson(res, 200, {
                     sessionId: wsSession,
                     snapshots,
                     ...(snapshots.length > 0 ? { latest: snapshots[0].key } : {}),
-                    total: snapshots.length,
+                    total: keys.length,
+                    ...(hasMore ? { nextBefore: lastPageKey } : {}),
                 });
                 return;
             }

package/dist/http/server.js

@@ -51,6 +51,7 @@ export { coarseStatusForState, errorCodeForExit };
 // (routes/* 绝不可值 import server.ts:那条边会闭合运行时环,见 test/module-cycle-gate.test.ts)。
 import { sendJson, sendError, httpErrorCode, msg } from "./send.js";
 import { authorized, systemFor, gatedPrincipal, explicitOperatorOk, isOperator } from "./principal-gate.js";
+import { resumeEntryForGate } from "./active-run-conflict.js";
 export { explicitOperatorOk, isOperator };
 /** 分组入参 → 平铺视图(createHttpServer 的第一件事)。一组都没给 ⇒ 原样返回(存量调用零开销、零形变)。 */
 export function flattenServiceDeps(deps) {
@@ -1194,11 +1195,32 @@ export function createHttpServer(rawDeps) {
         // D-D SLA deny-sweep 不受影响:它的取行查询本就只选 gate_kind IN ('human','irreversible_ask')。
         const decideGateKind = cp.gate?.kind;
         if (decideGateKind !== "human" && decideGateKind !== "irreversible_ask") {
+            // [2400] HITL-6(clay 裁 2026-08-03,不做兼容):补机读指路——与 [2255]① 的 409 材料同形
+            // (pendingGate{kind, decidePath},resumeEntryForGate 单源表),客户端凭 decidePath 直达对的
+            // resume 入口,不再解析人话文案。taskId 源=cp.sourceTaskId;缺席 ⇒ 只带 kind,诚实不铸假路径。
+            const gnPath = decideGateKind && cp.sourceTaskId
+                ? resumeEntryForGate(decideGateKind, { sessionId, taskId: cp.sourceTaskId })
+                : null;
             return {
                 status: 409,
                 body: {
                     error: `task is suspended on a '${decideGateKind ?? "unknown"}' gate, not a tool approval — a plan_review gate is resolved via POST /v1/assistant/tasks/:id/plan_review, a resource_limit suspension via POST /v1/assistant/tasks/:id/resume`,
                     errorCode: "gate_not_tool_approval",
+                    ...(decideGateKind ? { pendingGate: { kind: decideGateKind, ...(gnPath ? { decidePath: gnPath } : {}) } } : {}),
+                },
+            };
+        }
+        // [2400] HITL-12(clay 裁 2026-08-03:不兼容老客户端):HTTP 腿强制决策-动作绑定——无 checkpointToken
+        // 且无 boundCallId 的 decide 拒收(此前静默回落 current-pending:并发窗口下 A 想批的门刚被 B 的新门顶掉
+        // 就裁错对象)。内部 D-D SLA deny-sweep(req 缺席)豁免:系统腿 deny 过期行,无并发歧义。位置刻意在
+        // gate-kind 守卫**之后**:错门型先得 409+pendingGate 指路(HITL-6),而不是被本门的 400 遮蔽。
+        if (req !== undefined && !binding?.checkpointToken && !binding?.boundCallId) {
+            return {
+                status: 400,
+                body: {
+                    error: "decide requires the decision-action binding — echo checkpointToken and/or boundCallId from the pending approval (GET /v1/approvals)",
+                    errorCode: "decide_requires_binding",
+                    bindingEnforced: true,
                 },
             };
         }
@@ -1979,6 +2001,9 @@ export function createHttpServer(rawDeps) {
             status: 200,
             body: {
                 taskId, sessionId, status: result.status,
+                // [2400] HITL-12:世代探测位——本 server 强制决策-动作绑定(无绑定 decide 已在上方 400 拒),
+                // 客户端凭它机器确认「我裁的就是我看到的那个动作」,不再有静默回落窗口。
+                bindingEnforced: true,
                 ...(result.errorCode ? { errorCode: result.errorCode } : {}),
                 ...(result.errorMessage ? { errorMessage: redactSecrets(result.errorMessage) } : {}),
                 ...(checkpointReopened ? { retriable: true } : {}), // the park is still pending — re-fetch + re-decide

package/dist/http/wire-types.d.ts

@@ -10,6 +10,10 @@ import type { AgentDefinition, McpServerSpec } from "@sema-agent/core";
 export interface TaskRequestBody {
     objective: string;
     sessionId?: string;
+    /** dispatch-gateway failover 幂等第二级:caller-minted 任务 id(uuidv7)。同 owner 重放同 id ⇒ 幂等重放;
+     *  异 owner ⇒ 409 `conflict.run_exists`;非 uuidv7 ⇒ 400 `request.id_invalid`(routes/runs.ts:192-208 真验收)。
+     *  [2400] TR-16 连带:此键此前只活在 runs.ts 读点,导出类型漏declared——CAPS-OPS-13 同族第 9 键。 */
+    taskId?: string;
     images?: Array<{
         data: string;
         mimeType: string;

package/dist/run-local.js

@@ -466,7 +466,7 @@ export async function runLocal(argv, deps = {}) {
         tools: cap.tools,
         skills: cap.skills,
         ...(cap.promptProvider ? { promptProvider: cap.promptProvider } : {}),
-        // [849] 场景层定死的终验(autonomous 场景)——与 main.ts resolveSpec 同语义,CLI 路径不漂移。
+        // [849]→[2400] 场景层定死终验已无生产者(autonomous 退役);OR 折入形保留,与 resolveSpec 同语义。
         ...(cap.finalVerification === true ? { finalVerification: true } : {}),
         ...(mcp ? { mcp } : {}),
         ...(timeoutSec !== undefined ? { limits: { timeoutSec } } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "5.2.0",
+  "version": "5.4.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.1.0",
+    "@sema-agent/core": "^5.2.0",
     "@sema-agent/registry-core": "^0.13.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -68,7 +68,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "^4.1.0",
+    "@sema-agent/sdk": "^5.1.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",