@sema-agent/server 7.100.0 → 7.101.1

package/dist/trace/wire-projection-faces.d.ts

@@ -161,14 +161,14 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly wiring_manifest_tenant: {
         readonly projector: "wiringManifestEventData";
         readonly coreType: `WiringManifest & ${string}`;
-        readonly excluded: readonly ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence"];
+        readonly excluded: readonly ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "fileHistory"];
         readonly unwrapped: readonly ["manifest"];
         readonly minted: readonly [];
     };
     readonly wiring_manifest_operator: {
         readonly projector: "wiringManifestOperatorEventData";
         readonly coreType: `WiringManifest & ${string}`;
-        readonly excluded: readonly ["peerPresence"];
+        readonly excluded: readonly ["peerPresence", "fileHistory"];
         readonly unwrapped: readonly ["manifest"];
         readonly minted: readonly [];
     };

package/dist/trace/wire-projection-faces.js

@@ -36,14 +36,14 @@ export const WIRE_PROJECTION_FACES = {
     wiring_manifest_tenant: {
         projector: "wiringManifestEventData",
         coreType: `WiringManifest & ${arm("wiring_manifest")}`,
-        excluded: ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence"],
+        excluded: ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "fileHistory"],
         unwrapped: ["manifest"],
         minted: [],
     },
     wiring_manifest_operator: {
         projector: "wiringManifestOperatorEventData",
         coreType: `WiringManifest & ${arm("wiring_manifest")}`,
-        excluded: ["peerPresence"],
+        excluded: ["peerPresence", "fileHistory"],
         unwrapped: ["manifest"],
         minted: [],
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.100.0",
+  "version": "7.101.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -61,7 +61,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.30.1",
+    "@sema-agent/core": "7.31.1",
     "@sema-agent/settings-schema": "6.0.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",

package/dist/memory-layer-preflight.d.ts

@@ -1,46 +0,0 @@
-/** 一只挡路的目录。`mode` = 权限位的四位八进制(如 `"0555"`)。 */
-export interface UnwritableLayerDir {
-    readonly dir: string;
-    readonly mode: string;
-}
-/**
- * 挂载面整棵树里挡路的目录(排序后返回,空数组 = 放行)。判据见文件头「判定集合」,逐目录三步:
- *  ① 缺**搜索位**(X_OK)⇒ 挡路、不下钻 —— 经过它的任何查找都撞 EACCES(不存在的删除目标也一样,`force` 只吞
- *     ENOENT),里面空不空都一样(codex 验修轮 V2:0400 / 0600 的空目录 + 账本仍绑定 ⇒ journal 卡盘);
- *  ② 只缺**写位**(W_OK)⇒ 装着任何非目录项(文件 / 软链)或列不出内容 ⇒ 挡路;空的、只装子目录的不挡
- *     (core 锁出来的 0555 有 x,「空的锁住 local 不拒」即此臂);
- *  ③ 下钻:子目录照走;**指向挂载面内目录的软链也顺着走**(codex 验修轮 V1:删除路径可以穿过它),按目标的 `dev:ino` 去重防环;
- *     目标在挂载面外 ⇒ 不下钻、抛 {@link MemoryLayerSymlinkEscapeError}(NP-4)。
- *
- * 挂载面本身不存在 ⇒ 空(店还没建出来,没有可删的东西)。可写可搜索却列不出内容的目录、判不了的软链 ⇒ 抛原错误
- * (判不了子树 ⇒ 不放行;不借本码 —— 出路不是 `chmod u+w`)。
- */
-export declare function unwritableLayerDirs(mountRoot: string): UnwritableLayerDir[];
-/**
- * NP-4 —— 挂载面里一条指向**树外**目录的软链:预检判不了(树外那棵子树里会不会删到、删不删得掉,本层不下钻去猜),
- * 按 P 类 fail-closed 响亮拒 —— 与 ELOOP / EACCES 那一臂同形(原样抛 ⇒ 路由的未分类 500 + `memory_*_failed` warn,
- * 文案只进日志)。刻意**不**是 {@link MemoryLayerUnwritableError}:那一码的出路是 `chmod u+w <dir>`,对树外目录开这句出路
- * 等于教运维改系统目录的权限位。出路 = 把这条软链移出记忆层(日志点名软链与目标)。没有 `code` 字段:它不是 wire 码。
- */
-export declare class MemoryLayerSymlinkEscapeError extends Error {
-    readonly link: string;
-    readonly target: string;
-    constructor(link: string, target: string);
-}
-/**
- * 预检拒绝(带结构字段的错误值)。路由按 `instanceof` 判别(不嗅文案、不裸 as-cast);409 文案写在**路由**的
- * 内联模板里(文案冻结门只看得见路由站点),本类只供两串排好版的插值。
- */
-export declare class MemoryLayerUnwritableError extends Error {
-    readonly dirs: readonly UnwritableLayerDir[];
-    readonly code = "memory.layer_unwritable";
-    /** 409 文案的「哪些目录」插值:`"<dir>" (mode 0555), …`,超过上限只报余数。 */
-    readonly dirList: string;
-    /** 409 文案的出路插值:`chmod u+w` 的参数串 —— POSIX 单引号转义(照抄进 shell 不执行、不展开;codex R1-F3:
-     *  JSON 双引号挡不住 `$()` / 反引号 / `$VAR`)。目录清单那一串用 JSON 引号只作展示。 */
-    readonly chmodTargets: string;
-    constructor(dirs: readonly UnwritableLayerDir[]);
-}
-/** 两个 seam 的唯一入口:挡路 ⇒ 带码拒绝;放行 ⇒ `undefined`。 */
-export declare function memoryLayerWriteRefusal(mountRoot: string): MemoryLayerUnwritableError | undefined;
-//# sourceMappingURL=memory-layer-preflight.d.ts.map

package/dist/memory-layer-preflight.js

@@ -1,121 +0,0 @@
-import { accessSync, constants as fsConstants, readdirSync, realpathSync, statSync } from "node:fs";
-import { isAbsolute, join, relative, sep } from "node:path";
-const NAMED_DIRS_MAX = 8;
-function errnoOf(err) {
-    return err.code;
-}
-function accessState(dir, bit) {
-    try {
-        accessSync(dir, bit);
-        return "granted";
-    }
-    catch (err) {
-        return errnoOf(err) === "ENOENT" ? "gone" : "denied";
-    }
-}
-function symlinkTarget(path) {
-    let st;
-    try {
-        st = statSync(path);
-    }
-    catch (err) {
-        if (errnoOf(err) === "ENOENT")
-            return "dangling";
-        throw err;
-    }
-    return st.isDirectory() ? "directory" : "other";
-}
-export function unwritableLayerDirs(mountRoot) {
-    const out = [];
-    const seen = new Set();
-    const stack = [mountRoot];
-    let mountReal;
-    const mountRealOnce = () => (mountReal ??= realpathSync(mountRoot));
-    for (let dir = stack.pop(); dir !== undefined; dir = stack.pop()) {
-        const search = accessState(dir, fsConstants.X_OK);
-        if (search === "gone")
-            continue;
-        if (search === "denied") {
-            out.push(...blocker(dir));
-            continue;
-        }
-        const id = statSync(dir, { throwIfNoEntry: false });
-        if (id === undefined)
-            continue;
-        const key = `${id.dev}:${id.ino}`;
-        if (seen.has(key))
-            continue;
-        seen.add(key);
-        const write = accessState(dir, fsConstants.W_OK);
-        if (write === "gone")
-            continue;
-        let children;
-        try {
-            children = readdirSync(dir, { withFileTypes: true });
-        }
-        catch (err) {
-            if (errnoOf(err) === "ENOENT")
-                continue;
-            if (write === "granted")
-                throw err;
-            out.push(...blocker(dir));
-            continue;
-        }
-        if (write === "denied" && children.some((c) => !c.isDirectory()))
-            out.push(...blocker(dir));
-        for (const c of children) {
-            const child = join(dir, c.name);
-            if (c.isDirectory())
-                stack.push(child);
-            else if (c.isSymbolicLink() && symlinkTarget(child) === "directory") {
-                assertInsideMount(child, mountRealOnce());
-                stack.push(child);
-            }
-        }
-    }
-    return out.sort((a, b) => (a.dir < b.dir ? -1 : a.dir > b.dir ? 1 : 0));
-}
-function assertInsideMount(link, mountReal) {
-    const target = realpathSync(link);
-    const rel = relative(mountReal, target);
-    if (rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute(rel))
-        throw new MemoryLayerSymlinkEscapeError(link, target);
-}
-export class MemoryLayerSymlinkEscapeError extends Error {
-    link;
-    target;
-    constructor(link, target) {
-        super(`memory layer preflight cannot judge the mount: ${JSON.stringify(link)} is a symlink to ${JSON.stringify(target)}, outside the memory mount — not followed; move the symlink out of the memory layer and retry`);
-        this.link = link;
-        this.target = target;
-        this.name = "MemoryLayerSymlinkEscapeError";
-    }
-}
-function blocker(dir) {
-    const st = statSync(dir, { throwIfNoEntry: false });
-    return st === undefined ? [] : [{ dir, mode: (st.mode & 0o7777).toString(8).padStart(4, "0") }];
-}
-function shellQuote(s) {
-    return `'${s.replace(/'/g, "'\\''")}'`;
-}
-export class MemoryLayerUnwritableError extends Error {
-    dirs;
-    code = "memory.layer_unwritable";
-    dirList;
-    chmodTargets;
-    constructor(dirs) {
-        const named = dirs.slice(0, NAMED_DIRS_MAX);
-        const rest = dirs.length - named.length;
-        const dirList = named.map((d) => `${JSON.stringify(d.dir)} (mode ${d.mode})`).join(", ") + (rest > 0 ? `, and ${rest} more` : "");
-        super(`memory layer directories are not writable on disk: ${dirList}`);
-        this.dirs = dirs;
-        this.name = "MemoryLayerUnwritableError";
-        this.dirList = dirList;
-        this.chmodTargets = named.map((d) => shellQuote(d.dir)).join(" ");
-    }
-}
-export function memoryLayerWriteRefusal(mountRoot) {
-    const dirs = unwritableLayerDirs(mountRoot);
-    return dirs.length > 0 ? new MemoryLayerUnwritableError(dirs) : undefined;
-}
-//# sourceMappingURL=memory-layer-preflight.js.map