@sema-agent/server 7.101.1 → 7.103.0

package/dist/trace/engine-notice-wire.d.ts

@@ -16,7 +16,7 @@
  * 同文件 G1 e2e 的全码扇出夹具、以及契约文档附录 D.3 那张表(含**小节标题里的码数** —— 那道门本批
  * 刚立,立完就在下一次加码时自己咬住了)。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "instructions.source_changed"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
 /**
  * S-690 —— **本仓自铸**的通告码与它们的受众(码 / 铸点 / 受众三者的属主都是本仓)。

package/dist/trace/engine-notice-wire.js

@@ -23,6 +23,8 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     "mcp.injection_dropped",
     "delegation.ask_unresolvable",
     "task.interrupt_unconsumed",
+    "approval.read_root_granted",
+    "approval.read_root_grant_rejected",
     "instructions.source_changed",
 ];
 export const SERVER_NOTICE_AUDIENCE = {

package/dist/trace/project.js

@@ -521,6 +521,18 @@ export function wiringManifestEventData(ev) {
         const lane = str(lspIn.lane);
         return { mounted, ...(lane === undefined ? {} : { lane }) };
     })();
+    const handsIn = sec(m.hands);
+    const hands = (() => {
+        if (m.hands === undefined)
+            return undefined;
+        if (handsIn === undefined)
+            return dropProjectedFace("wiring_manifest.hands is not an object");
+        const mounted = bool(handsIn.mounted);
+        if (mounted === undefined)
+            return dropProjectedFace("wiring_manifest.hands.mounted is not a boolean");
+        const reason = str(handsIn.reason);
+        return { mounted, ...(reason === undefined ? {} : { reason }) };
+    })();
     const wpIn = sec(m.writeProtection);
     const writeProtection = (() => {
         if (m.writeProtection === undefined)
@@ -560,6 +572,7 @@ export function wiringManifestEventData(ev) {
         ...(mcp !== undefined ? { mcp } : {}),
         ...(hooks !== undefined ? { hooks } : {}),
         ...(lsp !== undefined ? { lsp } : {}),
+        ...(hands !== undefined ? { hands } : {}),
         ...(writeProtection !== undefined ? { writeProtection } : {}),
         ...identityFields(ev),
     };

package/dist/trace/redact.d.ts

@@ -61,6 +61,17 @@ export declare function armPoolBudgetForTest(): {
     ssh2ScanBytes: number;
 };
 export declare function resetArmPoolBudgetForTest(): void;
+/** 本模块会写进文本的全部替换 token(`«…»` 字面),从三张表现算 —— 表改这里自动跟,不另抄一份。
+ *  🔴 **S-223 v2 修复轮起它只剩一个语义:闭形闭集的加载期校验**。运行期「这一段是不是一枚记号」已经由
+ *  {@link credentialSpans} 的闭**形**那一支一处答完({@link opaqueUnitEnd}),按闭**集**再认一遍的
+ *  `redactionTokenEndAt` 与它同义而更窄,已删 —— 两只「什么算记号」的判别器就是两个定义。 */
+/** {@link buildDisplaySafeUrl} 解析不动一个配置型 URL 时的**占位**(S-475 件B)——fail-closed:输出**不含原串的
+ *  任何字节**(连 host 都不留),不许回落成原值。它不是任何一条臂的产物,所以要在这里**显式**进闭集
+ *  {@link REDACTION_TOKENS}(闭形的加载期校验对它同样成立),消费端按契约 §5.1 的闭形逐枚解析时认得它。 */
+declare const DISPLAY_SAFE_URL_TOKEN = "\u00ABredacted:url\u00BB";
+/** S-776:出网代理 URL 的回显尺(`outbound-dispatcher.ts` `displayProxyUrl`)形不干净时整只用**同一枚**占位 —— 单独一行导出,
+ *  上面那行字面量保持 `const NAME = "…";` 形(`test/api-notice-text-freeze.test.ts` §6 的冻结扫描按这一形认替换 token)。 */
+export { DISPLAY_SAFE_URL_TOKEN };
 /** 测试可见:扫描器 indexOf 实际扫过的字节数(摊还线性 ⇒ ≤ 常数 × 输入长)。 */
 export declare function ppkScanBytesForTest(): number;
 export declare function resetPpkScanBytesForTest(): void;

package/dist/trace/redact.js

@@ -1091,6 +1091,7 @@ const FRAGMENT_SECRET_PATTERNS = [
     [valueArm("xapp-\\d-", "[A-Za-z0-9-]", 4, "needs-left-boundary"), "«redacted:slack-token:partial»"],
 ];
 const DISPLAY_SAFE_URL_TOKEN = "«redacted:url»";
+export { DISPLAY_SAFE_URL_TOKEN };
 const WITHHELD_VALUE_TOKEN = "«redacted»";
 const REDACTION_TOKENS = new Set([...FULL_ARM_PATTERNS.map(([, r]) => r), PEM_FRAGMENT_TOKEN, DISPLAY_SAFE_URL_TOKEN, ...FRAGMENT_SECRET_PATTERNS.map(([, r]) => r)]
     .flatMap((r) => r.match(/«[^»]*»/g) ?? []));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.101.1",
+  "version": "7.103.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -61,14 +61,15 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.31.1",
-    "@sema-agent/settings-schema": "6.0.0",
+    "@sema-agent/core": "7.33.4",
+    "@sema-agent/settings-schema": "6.2.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",
     "pg": "^8.22.0",
     "ssh2": "^1.17.0",
     "typebox": "1.1.39",
+    "undici": "7.30.0",
     "ws": "^8.21.0",
     "zod": "^4.4.3"
   },