@sema-agent/server 5.3.0 → 5.5.0

package/dist/boot/resolve-spec.js

@@ -89,10 +89,8 @@ export function createResolveSpec(ctx) {
         // resolving here, skills/mcp would still be filtered by the raw unknown name → any skill/MCP tagged
         // ["default"] silently drops. council finding.)
         const scenarioName = scenarios[requested] ? requested : "default";
-        // [891] deprecation(一版过渡窗):"autonomous" 已改名 "code"(persona 同一,唯一差别=alias 仍
+        // [891]→[2400]:"autonomous" alias 已退役(clay 裁不留过渡)——body 显式传它走 scenario_unknown 400。
         // 定死 finalVerification:true 保存量行为)。warn 不 400——TB harness/存量部署平滑迁移。
-        if (scenarioName === "autonomous")
-            logger.warn("scenario_autonomous_deprecated", { alias: "code", note: "renamed by [891]; alias keeps finalVerification pinned — pass scenario:'code' (+ explicit finalVerification if wanted)" });
         const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal);
         // codex R3/R4 (appendSystemPrompt 案): ONE center-pack snapshot per request — the append-less gate below
         // AND the provider pick (promptProvider field) both read THIS capture, never the mutable centerPrompts ref
@@ -538,7 +536,7 @@ export function createResolveSpec(ctx) {
             // design/132 (core 1.249): one-shot end-game verification nudge ("re-run the final artifact through
             // its real entrypoint before finishing"). OPT-IN by core's own judgment (default ON lost the evidence case:
             // +1 turn on every interactive write task) — the AUTONOMY caller declares it (harness/scheduler lanes).
-            // [849] scenario-declared leg: the `autonomous` scenario pins it in its bundle (cap.finalVerification —
+            // [849]→[2400] scenario-declared leg 已无生产者(autonomous 退役后无场景定死终验);保留 OR 折入形防回归 —— (cap.finalVerification —
             // picking that scenario IS the autonomy declaration, so this is not "inferring from scenario"); OR-folded
             // with the caller's explicit flag — a scenario can only ADD the closing verification turn, never strip a
             // caller's request. Children do not inherit (core semantics).

package/dist/capabilities/scenarios.d.ts

@@ -19,7 +19,7 @@ export interface ScenarioBundle {
     skills: SkillSpec[];
     promptProvider?: PromptProvider;
     /** [849] 场景解释层定死的终验开关(core TaskSpec.finalVerification):bench 实测产品默认请求与
-     *  bench 态差距三件之一。只有 `autonomous` 置 true;spec 组装处与 caller 显式声明取 OR(场景只会
+     *  bench 态差距三件之一。[2400] 起无场景定死(autonomous 退役)——纯 caller 显式旋钮;spec 组装处 OR 折入(场景只会
      *  多加一轮收官验证,绝不收窄 caller 意图),壳/caller 不感知。 */
     finalVerification?: true;
 }
@@ -130,7 +130,6 @@ export declare function semaIdentityProvider(): PromptProvider;
  */
 export declare function codePromptProvider(brand: boolean): PromptProvider;
 /** @deprecated [891] 改名 code——一版过渡期保留旧符号(与场景名 alias 同窗退役)。 */
-export declare const autonomousPromptProvider: typeof codePromptProvider;
 export declare function buildScenarios(deps: ScenarioDeps): Record<string, Scenario>;
 /** Resolve the scenario for a request (falls back to `default`). */
 export declare function selectScenario(scenarios: Record<string, Scenario>, name: string | undefined): Scenario;
@@ -148,7 +147,7 @@ export interface ScenarioDetail {
     promptSummary: string;
     enabled: boolean;
 }
-/** 内建五场景详情。default/autonomous/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
+/** 内建五场景详情。default/code/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
  *  fail-loud 语义(缺 GIT_API 配置/principal 即 throw)→ 探针失败落静态表兜底(表↔工厂一致性由测试锁:
  *  测试喂 fake deps 真调工厂对账工具名)。enabled 对内建恒 true(约定②)。 */
 export declare function builtinScenarioDetails(scenarios: Record<string, Scenario>, deps: Pick<ScenarioDeps, "brandIdentity">): Record<string, ScenarioDetail>;

package/dist/capabilities/scenarios.js

@@ -86,12 +86,12 @@ export function codePromptProvider(brand) {
     };
 }
 /** @deprecated [891] 改名 code——一版过渡期保留旧符号(与场景名 alias 同窗退役)。 */
-export const autonomousPromptProvider = codePromptProvider;
+// [2400] CAPS-OPS-11:autonomousPromptProvider 别名导出已随场景退役删除(真身=codePromptProvider)。
 export function buildScenarios(deps) {
     // The default scenario filters skills by "default" — NOT by req.scenario (which may be an unknown name
     // that fell back here): the bundle must be a coherent "default" set, matching how main.ts resolves an
     // unknown scenario to "default" for tools/prompt/mcp too (council finding — else default-tagged drop).
-    // 抽成具名工厂:`autonomous` 直接复用它取 bundle(工具/技能面与 default 恒等由构造保证,不靠两处
+    // 抽成具名工厂:`code` 直接复用它取 bundle(工具/技能面与 default 恒等由构造保证,不靠两处
     // 各写一份 assembleCodeTools 参数再祈祷不漂移)。
     const defaultScenario = (req) => {
         // gap-audit rank-1 BLOCKER: the default agent is the CC agent loop — it MUST have the
@@ -176,14 +176,9 @@ export function buildScenarios(deps) {
             ...defaultScenario(req, principal),
             promptProvider: codePromptProvider(deps.brandIdentity === true),
         }),
-        // [891] 兼容 alias(一版过渡,deprecation warn 在 main.ts 解析处):旧语义逐字保留 —— code persona
-        // + finalVerification 场景层定死 true(存量 TB harness/部署传 "autonomous" 的行为一根毛不变;
-        // 新调用方要终验请显式传 body.finalVerification)。
-        autonomous: (req, principal) => ({
-            ...defaultScenario(req, principal),
-            promptProvider: codePromptProvider(deps.brandIdentity === true),
-            finalVerification: true,
-        }),
+        // [891]→[2400] CAPS-OPS-11(clay 裁 2026-08-03,不留任何过渡):`autonomous` 过渡 alias 已退役。
+        // body 显式传它 ⇒ 5.1.0 起的 scenario_unknown 400 响亮拒(附现役词表);旧语义迁移形=
+        // scenario:"code" + body.finalVerification:true(终验自此=纯 caller 显式旋钮,场景层无定死)。
         "code-review": (req) => codeReview(deps, req),
         // Neutral repo-readonly scenario (OA ask): the SAME clone-free read-only repo tools as code-review
         // (repo_tree / repo_read_file / repo_pull_diff over GIT_API_TOKEN) with NO promptProvider — the
@@ -228,7 +223,7 @@ export function buildScenarios(deps) {
 export function selectScenario(scenarios, name) {
     return (name && scenarios[name]) || scenarios.default;
 }
-/** 内建五场景详情。default/autonomous/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
+/** 内建五场景详情。default/code/team 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
  *  fail-loud 语义(缺 GIT_API 配置/principal 即 throw)→ 探针失败落静态表兜底(表↔工厂一致性由测试锁:
  *  测试喂 fake deps 真调工厂对账工具名)。enabled 对内建恒 true(约定②)。 */
 export function builtinScenarioDetails(scenarios, deps) {
@@ -247,9 +242,6 @@ export function builtinScenarioDetails(scenarios, deps) {
             ? "Sema 产品身份 + core 编码完全体提示词(CODE_AGENT persona+自治自检;CC 血统对表)"
             : "core 编码完全体提示词(CODE_AGENT persona+自治自检;CC 血统对表)"),
         default: mk("default", "通用/助理场景(域中性 persona,CC agent loop 全量工具面;[891] 起非出厂缺省,显式可选)", "full-body", probe("default", {}, undefined, ["Now"]), deps.brandIdentity ? "Sema 产品身份 + core 默认宪法(结构层由引擎合成)" : "core 默认宪法(中性,无场景附加 persona)"),
-        autonomous: mk("autonomous", "⚠️ deprecated([891] 改名 code,一版过渡 alias):code persona + finalVerification 固定开(旧语义逐字保留)", "full-body", probe("autonomous", {}, undefined, ["Now"]), deps.brandIdentity
-            ? "Sema 产品身份 + core 编码完全体提示词(= code 场景;finalVerification 固定开)"
-            : "core 编码完全体提示词(= code 场景;finalVerification 固定开)"),
         "code-review": mk("code-review", "代码评审(clone-free 只读仓库工具;council=true 升多镜头评审团)", "repo-readonly", probe("code-review", { repo: "probe/probe" }, undefined, REPO_TOOLS), "评审员/评审团协调提示词(镜头分工+产出契约)"),
         scan: mk("scan", "中性只读仓库扫描(输出契约由 objective+skills 决定)", "repo-readonly", probe("scan", { repo: "probe/probe" }, undefined, REPO_TOOLS), "无场景附加提示词(objective+center skills 拥有输出契约)"),
         team: mk("team", "多智能体团队圆桌(模板成员+synthesizer,模板可由 registry 配置)", "team", probe("team", {}, undefined, ["run_team"]), "团队协调者提示词(圆桌纪律+合成流程)"),

package/dist/config.js

@@ -1,7 +1,7 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { CODE_AGENT_PROMPT, formatUserScope, isThinkingLevel, protocolOf, RECOMMENDED_SENSITIVE_PATTERNS, RETIRED_TOOL_NAMES } from "@sema-agent/core";
+import { CODE_AGENT_PROMPT, formatUserScope, isThinkingLevel, PROTOCOL_TABLE, protocolOf, RECOMMENDED_SENSITIVE_PATTERNS, RETIRED_TOOL_NAMES } from "@sema-agent/core";
 import { ROSTER_PRIMARY_ROLES, ROSTER_CHEAP_ROLES } from "@sema-agent/registry-core";
 import { parseApprovalHmacKeys, parsePrincipalJwks } from "./auth-keys.js"; // design/158 A4: the parser leaf — NOT security.js (base config layer must not value-import the 55KiB auth module)
 import { DEFAULT_ELICITATION_THROTTLE } from "./elicitation.js";
@@ -820,8 +820,10 @@ export function findUnmatchableToolNames(names) {
         }
         const ns = protocolOf(name);
         if (ns === undefined) {
+            // 5.3.0 协议表两行起,短名归属不再唯一(figma__x 可能是 mcp 短形或 a2a 短形)——指引枚举全表
+            // 前缀(与 core 5.3.0 自侧同族修同口径),不再手写死 mcp__。
             if (name.includes("__"))
-                out.push({ name, guidance: `pre-prefix MCP short form — the live name is mcp__${name}` });
+                out.push({ name, guidance: `pre-prefix short form — the live name carries a protocol prefix: ${PROTOCOL_TABLE.map((e) => `${e.prefix}${name}`).join(" or ")}` });
             continue;
         }
         if (ns.parse(name) === undefined) {

package/dist/http/routes/sessions.js

@@ -718,7 +718,15 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                     return;
                 }
                 const lim = limRaw === null ? 20 : Number(limRaw);
-                const page = keys.slice(0, lim);
+                // [2400] CAPS-OPS-6(clay 裁 2026-08-03,最优设计不留旧语义):
+                //   · `?before=<key>`(exclusive)游标——keys 是 uuidv7 字典序 desc(新→旧),before 取更旧段;
+                //   · `total` = listKeys 口径的**快照总数**(与 tree 腿的 total 同名同义;此前=页内行数,同名反义
+                //     且超过 limit 的快照永远取不到)。竞态窗口内正被 reap 的 ghost 键会短暂多计 1,下一拍自愈;
+                //   · `nextBefore` 仅在还有更旧的 key 时给(=本页最后一个 key);
+                //   · 复审 A-MED 的保护不变:latest 与**展示行**同源(ghost 不当 latest)、页行掉 ghost 不空报。
+                const beforeRaw = q.get("before");
+                const scoped = beforeRaw !== null ? keys.filter((k) => k < beforeRaw) : keys;
+                const page = scoped.slice(0, lim);
                 const snapshots = [];
                 for (const k of page) {
                     const m = await fs.exportManifest(wsSession, k);
@@ -733,14 +741,14 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                     }
                     snapshots.push({ key: k, files: m.size, ...(bytes !== undefined ? { bytes } : {}) });
                 }
-                // 🔴 复审 A-MED:`latest` 与 `total` 必须与**展示行**同源——listKeys 与 exportManifest 之间
-                // 被 reap 的键(ghost)若恰是字典序最大者,原写法会让 latest 指向已消失的快照(latest 别名的
-                // tree/file/archive 全 404,尽管有有效的次新快照),且 total 计入 ghost 与 snapshots[] 不一致。
+                const lastPageKey = page.length > 0 ? page[page.length - 1] : undefined;
+                const hasMore = lastPageKey !== undefined && scoped.length > page.length;
                 sendJson(res, 200, {
                     sessionId: wsSession,
                     snapshots,
                     ...(snapshots.length > 0 ? { latest: snapshots[0].key } : {}),
-                    total: snapshots.length,
+                    total: keys.length,
+                    ...(hasMore ? { nextBefore: lastPageKey } : {}),
                 });
                 return;
             }

package/dist/http/server.js

@@ -51,6 +51,7 @@ export { coarseStatusForState, errorCodeForExit };
 // (routes/* 绝不可值 import server.ts:那条边会闭合运行时环,见 test/module-cycle-gate.test.ts)。
 import { sendJson, sendError, httpErrorCode, msg } from "./send.js";
 import { authorized, systemFor, gatedPrincipal, explicitOperatorOk, isOperator } from "./principal-gate.js";
+import { resumeEntryForGate } from "./active-run-conflict.js";
 export { explicitOperatorOk, isOperator };
 /** 分组入参 → 平铺视图(createHttpServer 的第一件事)。一组都没给 ⇒ 原样返回(存量调用零开销、零形变)。 */
 export function flattenServiceDeps(deps) {
@@ -1194,11 +1195,32 @@ export function createHttpServer(rawDeps) {
         // D-D SLA deny-sweep 不受影响:它的取行查询本就只选 gate_kind IN ('human','irreversible_ask')。
         const decideGateKind = cp.gate?.kind;
         if (decideGateKind !== "human" && decideGateKind !== "irreversible_ask") {
+            // [2400] HITL-6(clay 裁 2026-08-03,不做兼容):补机读指路——与 [2255]① 的 409 材料同形
+            // (pendingGate{kind, decidePath},resumeEntryForGate 单源表),客户端凭 decidePath 直达对的
+            // resume 入口,不再解析人话文案。taskId 源=cp.sourceTaskId;缺席 ⇒ 只带 kind,诚实不铸假路径。
+            const gnPath = decideGateKind && cp.sourceTaskId
+                ? resumeEntryForGate(decideGateKind, { sessionId, taskId: cp.sourceTaskId })
+                : null;
             return {
                 status: 409,
                 body: {
                     error: `task is suspended on a '${decideGateKind ?? "unknown"}' gate, not a tool approval — a plan_review gate is resolved via POST /v1/assistant/tasks/:id/plan_review, a resource_limit suspension via POST /v1/assistant/tasks/:id/resume`,
                     errorCode: "gate_not_tool_approval",
+                    ...(decideGateKind ? { pendingGate: { kind: decideGateKind, ...(gnPath ? { decidePath: gnPath } : {}) } } : {}),
+                },
+            };
+        }
+        // [2400] HITL-12(clay 裁 2026-08-03:不兼容老客户端):HTTP 腿强制决策-动作绑定——无 checkpointToken
+        // 且无 boundCallId 的 decide 拒收(此前静默回落 current-pending:并发窗口下 A 想批的门刚被 B 的新门顶掉
+        // 就裁错对象)。内部 D-D SLA deny-sweep(req 缺席)豁免:系统腿 deny 过期行,无并发歧义。位置刻意在
+        // gate-kind 守卫**之后**:错门型先得 409+pendingGate 指路(HITL-6),而不是被本门的 400 遮蔽。
+        if (req !== undefined && !binding?.checkpointToken && !binding?.boundCallId) {
+            return {
+                status: 400,
+                body: {
+                    error: "decide requires the decision-action binding — echo checkpointToken and/or boundCallId from the pending approval (GET /v1/approvals)",
+                    errorCode: "decide_requires_binding",
+                    bindingEnforced: true,
                 },
             };
         }
@@ -1903,6 +1925,10 @@ export function createHttpServer(rawDeps) {
                         errorCode: e.code === "checkpoint.invalid_outcome"
                             ? (outcome.gate === "policy_ask" ? "approval_binding_mismatch" : "resume_outcome_invalid")
                             : e.code,
+                        // [2422] HITL-2 裁 (a),core 5.3.0:invalid_outcome 同码两义(动作被换 vs 输入被换)——
+                        // detail.field 是唯一机读判别式,透传给 UI 路由恢复动作(boundCallId=重取 pending 列表,
+                        // boundInputHash=重审同动作的新输入)。缺席=core 未铸(非绑定类 invalid_outcome),不造键。
+                        ...(e.detail?.field ? { field: e.detail.field } : {}),
                         ...(retriable ? { retriable: true } : {}),
                     },
                 };
@@ -1979,6 +2005,9 @@ export function createHttpServer(rawDeps) {
             status: 200,
             body: {
                 taskId, sessionId, status: result.status,
+                // [2400] HITL-12:世代探测位——本 server 强制决策-动作绑定(无绑定 decide 已在上方 400 拒),
+                // 客户端凭它机器确认「我裁的就是我看到的那个动作」,不再有静默回落窗口。
+                bindingEnforced: true,
                 ...(result.errorCode ? { errorCode: result.errorCode } : {}),
                 ...(result.errorMessage ? { errorMessage: redactSecrets(result.errorMessage) } : {}),
                 ...(checkpointReopened ? { retriable: true } : {}), // the park is still pending — re-fetch + re-decide

package/dist/plugins/background-agent-store-sql.js

@@ -66,13 +66,21 @@ function rowToSummary(r) {
             : {}),
     };
 }
-/** core reap 的 staleRunning 翻转形(逐字段照抄 InMemory:summary 只在缺席时补默认句)。 */
+/** core 的共享归因句(`STALE_RUNNING_REAP_ATTRIBUTION`,dist/core/background-agent-store.js:44)——
+ *  **值拷贝**:core 5.3.0 未把它放上包根(exports 只有 ./bench 与 ./fixtures 两条子路,deep import 会被
+ *  exports 图拒绝),已在提货回执里请 core 上包根,到货后换 import。漂移钉=backgroundAgentStoreContract
+ *  的 stale-running 条目逐字断言这句(store-contract-kit-db-integration §4.5,真双库)——core 改句必红。 */
+const STALE_RUNNING_REAP_ATTRIBUTION = "the host process was interrupted while this agent was running — its in-process state was lost. Check its worktree / output file for partial work before assuming the task landed (stale running row reaped).";
+/** core reap 的 staleRunning 翻转形(逐字段照抄 InMemory,background-agent-store.js:266-272):
+ *  summary **和 error** 都只在缺席时补共享归因句——error 半边 5.2.0 起就该有,双生此前只写 summary
+ *  且是手写旧句(core 5.3.0 新试剂盒首跑两方言一致揪红,[2425] bg-agent B 族同源),真失败文本永不覆写。 */
 function flippedForm(live, now) {
     return {
         ...live,
         status: "failed",
         stoppedBy: "system",
-        summary: live.summary ?? "host process interrupted (stale running row reaped)",
+        summary: live.summary ?? STALE_RUNNING_REAP_ATTRIBUTION,
+        error: live.error ?? STALE_RUNNING_REAP_ATTRIBUTION,
         settledAt: now,
         updatedAt: now,
     };

package/dist/run-local.js

@@ -466,7 +466,7 @@ export async function runLocal(argv, deps = {}) {
         tools: cap.tools,
         skills: cap.skills,
         ...(cap.promptProvider ? { promptProvider: cap.promptProvider } : {}),
-        // [849] 场景层定死的终验(autonomous 场景)——与 main.ts resolveSpec 同语义,CLI 路径不漂移。
+        // [849]→[2400] 场景层定死终验已无生产者(autonomous 退役);OR 折入形保留,与 resolveSpec 同语义。
         ...(cap.finalVerification === true ? { finalVerification: true } : {}),
         ...(mcp ? { mcp } : {}),
         ...(timeoutSec !== undefined ? { limits: { timeoutSec } } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "5.3.0",
+  "version": "5.5.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.2.0",
+    "@sema-agent/core": "^5.3.0",
     "@sema-agent/registry-core": "^0.13.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -68,7 +68,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "^4.2.0",
+    "@sema-agent/sdk": "^5.1.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",