@sema-agent/server 7.111.0 → 7.113.0

package/dist/trace/project.js

@@ -1,5 +1,5 @@
 import { admitProviderEcho, redactErrorMessage, redactModelText } from "../observability/run-terminal.js";
-import { isAskClass, isAskOrigin, isModeReleaseReason, isPermissionMode, isPersistedRuleMandate, MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, TEAM_ROLES, ToolRoster, ToolRosterDelta, WRITE_PROTECTION_TARGET_VIEWS } from "@sema-agent/core";
+import { isAskClass, isAskOrigin, isModeReleaseReason, isPermissionMode, isPersistedRuleMandate, isSettlementParty, MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, TEAM_ROLES, ToolRoster, ToolRosterDelta, WRITE_PROTECTION_TARGET_VIEWS } from "@sema-agent/core";
 import { Value } from "typebox/value";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { redactSecrets, redactDeep } from "./redact.js";
@@ -221,11 +221,10 @@ export function screenedStoredEventData(type, data) {
     }
     return { ...d, gate };
 }
-const SETTLEMENT_PARTIES = new Set(["person", "engine", "host", "none"]);
 function projectSettlement(st) {
     const whoV = st.who;
     const partyV = whoV === null || typeof whoV !== "object" ? undefined : whoV.party;
-    if (typeof partyV !== "string" || !SETTLEMENT_PARTIES.has(partyV))
+    if (!isSettlementParty(partyV))
         return undefined;
     const who = whoV;
     return {

package/dist/trace/redact.d.ts

@@ -133,6 +133,24 @@ export declare function redactSecretsWithArms(text: string, opts?: {
     text: string;
     arms: ReadonlySet<RedactionArm>;
 };
+/**
+ * 🧪 **跨度出口 —— 只给测试**(车 UH 脱敏基线门 `test/redaction-baseline-gate.test.ts`:判「必隐字节**每一个**都被盖住」,
+ * 而不是「必隐串整串不在」—— 后者对截断式脱敏(值的前缀被洗、尾段留着)恒判已藏,gpt-6 腿 r1-F1 [high])。
+ *
+ * 同一只 {@link runRedaction}、同一遍扫描,原样交出池已经算好的 `kept` 跨度(S-497 那一份;坐标在**归一化视图**上),
+ * 不是第二只脱敏器、不改任何判据、不喂观察者(`observe:false`,与影子重扫同口);`opts.json` 与 {@link redactSecrets} 的同名选项
+ * 逐字同义(JSON 模式,`redactedPreview` 走的那一条)。生产代码不调用它:
+ * 问「有没有凭据形」的消费方走 {@link redactSecretsWithArms}。
+ */
+export declare function redactionSpansForTest(text: string, opts?: {
+    json?: boolean;
+}): {
+    text: string;
+    spans: ReadonlyArray<{
+        readonly start: number;
+        readonly end: number;
+    }>;
+};
 /**
  * 🔴 环 + 深度预算(2026-07-25 补)。原实现是纯递归、**既不记已访问节点也不限深度**,而它的调用位置是
  * **最不可信的边界**:`toolStart`/`toolEnd` 把工具的 `args`/`output`/`structured` 直接喂进来。后果两条:

package/dist/trace/redact.js

@@ -1791,6 +1791,10 @@ export function redactSecretsWithArms(text, opts) {
     const r = runRedaction(text, opts?.observe ?? true, opts?.json === true, true, "free-text");
     return { text: r.text, arms: new Set(r.hits.map((h) => h.arm)) };
 }
+export function redactionSpansForTest(text, opts) {
+    const r = runRedaction(text, false, opts?.json === true, false, "free-text");
+    return { text: r.text, spans: r.spans.map((sp) => ({ start: sp.start, end: sp.end })) };
+}
 const REDACT_MAX_DEPTH = 64;
 export function redactDeep(value) {
     return redactDeepInner(value, 0, new WeakSet());

package/dist/trace/self-minted-wire.d.ts

@@ -58,6 +58,28 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * S-947(7.112.0):server 发起的中止在取消终局上留下的机读成因 —— `PersistedTaskResult.abortCause`,与 `cancelContext` 同住、同铸点、
+     * 同在场闸(在场 ⇔ 这条终局就是 server 那次中止铸出来的取消终局)。逐词站点见契约 §5.0d。键本身是 run 结果上的 server 侧记键
+     * (`store-contracts.ts` 的 `PersistedResultSideKeys`),不是事件投影面的键 ⇒ 不在 `wire-projection-faces.ts`。
+     */
+    readonly abortCause: {
+        readonly at: "run 结果 result.abortCause(GET /v1/runs/:id → result · done.result · POST /v1/tasks 200 体顶层 · 账本 done 行 result / 无 done 的取消形账本 failed 行顶层)";
+        readonly members: {
+            client_disconnected: {
+                attr: string;
+                since: string;
+            };
+            ask_park_grace_exhausted: {
+                attr: string;
+                since: string;
+            };
+            cancel_verb: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * 会话所有者自助抹除面的**已分类拒** → HTTP 状态(S-930 起与 operator 面 `POST /v1/memory/erase` 同一只映射;`since` 记的是**本面**
      * 自哪一版起这样答 —— 7.107.0 及以前本面只认前两只,其余落 500 `internal.error`)。

package/dist/trace/self-minted-wire.js

@@ -21,6 +21,14 @@ export const SELF_MINTED_WIRE = {
             ".claude/AGENTS.md": { attr: "-", since: "7.111.0" },
         },
     },
+    abortCause: {
+        at: "run 结果 result.abortCause(GET /v1/runs/:id → result · done.result · POST /v1/tasks 200 体顶层 · 账本 done 行 result / 无 done 的取消形账本 failed 行顶层)",
+        members: {
+            client_disconnected: { attr: "-", since: "7.112.0" },
+            ask_park_grace_exhausted: { attr: "-", since: "7.112.0" },
+            cancel_verb: { attr: "-", since: "7.112.0" },
+        },
+    },
     sessionMemoryEraseStatus: {
         at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
         members: {

package/dist/unattended-permission-mode.d.ts

@@ -6,7 +6,9 @@
  * 修复腿(集成沙箱修复 `mkRepair`、模块门修复 `leader.ts` `runModuleGate`、单代理修复环 `repair-wire.ts` `attachRepairLoopDeps`)、run-local
  * (`src/run-local.ts`,一次性 CLI)与这些腿的 durable 续跑重挂(`CheckpointCtx.unattendedLeg`)—— 经 {@link withUnattendedLeg} 这**一只**
  * 合并口铸两键:`permissionMode: "default"`(显式:续跑时盖过 checkpoint 记下的旧模式)与 `onAsk` = {@link createUnattendedOnAsk}。
- * 那只 onAsk 读 `AskRequest.classes` **整体**:集非空且每一类都在 {@link UNATTENDED_ANSWERED_CLASSES}(= `{ordinary}`,常量,不是旋钮)⇒ 答 yes;
+ * 那只 onAsk 读 `AskRequest.classes` **整体**:集非空且每一类都在 {@link UNATTENDED_ANSWERED_CLASSES}(= `{ordinary}`,常量,不是旋钮)⇒ 答 yes
+ * —— **以策略的名义**(S-953 / core 7.39.0 #1265:`{allow:true, settledBy:"policy", approver:"unattended_class_answer"}` ⇒ core 结算 `policy_allowed` /
+ * `who.party:"policy"`;修前是裸 `true`,core 把机器的放行记成**人**批 `human_allowed` / `person`);
  * 否则不答 —— 本腿**有席**(run-local 的 `createLocalApprover`:有 TTY 问人、无 TTY 当场拒;续跑腿的协调器席)⇒ 交给席;**无席** ⇒ 答
  * `"unavailable"` = 交回 core 的缺席路(本腿武装了 durable park ⇒ park,等人经 `/decide` 答;否则 headless 拒 —— fail-closed)。
  *
@@ -47,12 +49,17 @@ import type { AskClass, AskRequest, OnAsk, TaskSpec } from "@sema-agent/core";
  * 不变量(测试钉):答集 ⊆ core `RELEASABLE_ASK_CLASSES`,且与带 `requiresRealApproval` 的类(core `RRA_EXPLAINERS` ∪ `policy_rra`)不交;`mode` 不在其中。
  */
 export declare const UNATTENDED_ANSWERED_CLASSES: ReadonlySet<AskClass>;
+/**
+ * S-953(core 7.39.0 #1265):按类作答层这只席的**名字** —— 本仓自己的闭词(core 只把它转录到结算记录的 `who.approver`,不认证、不回读;
+ * `AskOutcome.approver` 契约逐字「a closed word the host owns, never a person」)。审计读者按它认出「这一次放行是无人值守腿按类答的」。
+ */
+export declare const UNATTENDED_POLICY_APPROVER = "unattended_class_answer";
 /** onAsk 的函数臂(`"allow"` / `"deny"` 两个字面臂是姿态设置,不是席)—— 本腿的活审批席与本层自己都是这一形。 */
 export type UnattendedSeat = Extract<OnAsk, (req: AskRequest, signal?: AbortSignal) => unknown>;
 /** 这一问是不是机器答得了的:读 `classes` **整体** —— 在场、非空、且每一类都在答集;缺席 / 空 / 任一类在答集外 ⇒ 否。 */
 export declare function unattendedAnswers(req: Pick<AskRequest, "classes">): boolean;
 /**
- * 按类作答的 onAsk(活对象 ⇒ `create*`)。答得了 ⇒ `true`(这一次调用的答);答不了 ⇒ 有席交席(席的答原样返回,席自己的
+ * 按类作答的 onAsk(活对象 ⇒ `create*`)。答得了 ⇒ 策略的 yes(这一次调用的答,记在策略名下 —— S-953);答不了 ⇒ 有席交席(席的答原样返回,席自己的
  * fail-closed 语义不动),无席 ⇒ `"unavailable"`(core G1:这一问此刻没有人够得着 ⇒ 改道 durable park;本腿没武装 park ⇒ headless 拒)。
  * 不答的臂**从不**自己拒成 `false`:那会把「交给 park 的人」折成「机器拒了」,durable 审批块的 leader worker 就再也 park 不下来。
  */

package/dist/unattended-permission-mode.js

@@ -1,10 +1,14 @@
 export const UNATTENDED_ANSWERED_CLASSES = new Set(["ordinary"]);
+export const UNATTENDED_POLICY_APPROVER = "unattended_class_answer";
+function unattendedPolicyYes() {
+    return { allow: true, settledBy: "policy", approver: UNATTENDED_POLICY_APPROVER };
+}
 export function unattendedAnswers(req) {
     const classes = req.classes;
     return classes !== undefined && classes.length > 0 && classes.every((c) => UNATTENDED_ANSWERED_CLASSES.has(c));
 }
 export function createUnattendedOnAsk(seat) {
-    return (req, signal) => (unattendedAnswers(req) ? true : seat !== undefined ? seat(req, signal) : "unavailable");
+    return (req, signal) => (unattendedAnswers(req) ? unattendedPolicyYes() : seat !== undefined ? seat(req, signal) : "unavailable");
 }
 export function withUnattendedLeg(spec, seat) {
     return { ...spec, permissionMode: "default", onAsk: createUnattendedOnAsk(seat) };

package/dist/user-input-ledger.d.ts

@@ -27,10 +27,14 @@
  *  · `accepted`  —— 受理点(`routes/runs.ts` 的 live 腿,**调 `TaskStream.steer` 之前**、回 200 之前)写;写不进 ⇒ 503
  *                   `steering.ledger_unavailable`,引擎一个字节都没收到(fail-closed:没账的 200 是空头承诺)。身份 = `acceptId`
  *                   (每次受理一枚;同 Idempotency-Key 的重放共享 `messageId`,但各是一次受理)。`writer` = 受理进程的 `instanceId`。
- *  · `settled`   —— 本进程对这次受理的守护**正常结束**:`leg_end`(承载它的腿在本进程收场 —— done / suspended / needs_review / failed
+ *  · `settled`   —— 本进程对这次受理的守护**正常结束**:`consumed`(S-968 / core 7.39.0 #1273:引擎在承载它的腿上铸了
+ *                   `human_input{delivery:"applied"}`、`inputId` = 本受理的 `messageId` —— 引擎确认把它消费进了转录;腿的事件环把每一帧交
+ *                   {@link UserInputLedger.observeLegEvent},认哪一帧只在本文件判;且引擎收下了**这次受理的调用** —— 路由报 {@link UserInputLedger.confirm},
+ *                   [ref] 7.113.0 opus 腿 L4:同 key 异正文的那次受理会被引擎拒,不能凭同名消费证据先结清)、`leg_end`(承载它的腿在本进程收场 —— done / suspended / needs_review / failed
  *                   一律,未消费的那一半 core 已用 `leg_end` 自己告知,本仓不重算「消费了没有」)或 `not_applied`(`TaskStream.steer`
- *                   抛了,这次受理没有变成 200;路由随即落这一行)。⚠️ 子代腿的 `leg_end` 由 core 铸在**子代自己的**会话上(`taskId` / `sessionId` /
- *                   `runId` 全是子代的),本服务没有那只会话的口 ⇒ 今天到不了人(S-966 core 请托;🚧 钉在 `test/engine-notice-wire.test.ts`)。
+ *                   抛了,这次受理没有变成 200;路由随即落这一行)。子代腿的 `leg_end`:core 铸在子代自己的会话上,core 7.39.0 #1279(S-980)起同一次收场
+ *                   **再铸一条到父腿**(`detail.sessionId` = 父会话、`taskId` = 父 run、带 `childSessionId`)⇒ 经分流器到人;本账对子代受理落的
+ *                   `settled{leg_end}`(行记父 run,S-966)与那条父口帧说的是同一件事(钉在 `test/engine-notice-wire.test.ts` S-980 两格)。
  *  · `converged` —— 收敛器判「受理它的进程已经不在、而它从没 settle」⇒ `cause:"crashed"`(core 闭集里服务层那一臂)。
  *  · `announced` —— 通告**落进新 run 的事件账之后**写(`taskId` = 告知它的那条**新** run;`EngineNoticeRouter.routeConfirmed` 等口的落账结果,
  *                   codex r1-F2):落账失败 ⇒ 不写,下一条 run 再说;重启再重启不重复。唯一的重复形 = 帧已落账而这一行没写成(写失败 / 进程死在两步之间)
@@ -78,7 +82,7 @@
  * 不开旋钮(没有「关掉告知」的正当需求)· 不改 steer 的 200 体(回执仍是「已交付」,账本是它的影子)· 不重放丢失的输入(core 明写
  * NOT redelivered;本账只告知,不替人决定重发)· 不存输入正文(行里只有身份与时刻)。
  */
-import { type EngineNoticeCode, type UserSteerUndrainedCause } from "@sema-agent/core";
+import { type EngineNoticeCode, type TaskEvent, type UserSteerUndrainedCause } from "@sema-agent/core";
 import { type RunRecord } from "./plugins/store-contracts.js";
 import { type EngineNoticeRouter } from "./trace/engine-notice-wire.js";
 /** local 数据根下的子目录(File 孪生;与 `approval-ask-audit/` 同层同形)。 */
@@ -90,10 +94,12 @@ export declare const USER_INPUT_KIND_WORDS: {
     readonly steer: true;
 };
 /** `settled` 的两种收场(闭集,见顶注)。 */
-export type SettleHow = "leg_end" | "not_applied";
+export type SettleHow = "leg_end" | "not_applied" | "consumed";
+/** 读盘词表(File 孪生的折叠守卫 / SQL 孪生的 `settle_how` 列读腿同读这一张;`consumed` 自 7.113.0 起,≤7.112.x 的读腿不认它 —— 回滚须知在 MIGRATION)。 */
 export declare const SETTLE_HOW_WORDS: {
     readonly leg_end: true;
     readonly not_applied: true;
+    readonly consumed: true;
 };
 /** 本服务铸的那一臂(core 删掉这个词 ⇒ `Extract` 得 `never` ⇒ 下面的常量编译红)。 */
 export type CrashedCause = Extract<UserSteerUndrainedCause, "crashed">;
@@ -293,8 +299,21 @@ export interface UserInputLedger {
     }): Promise<UserInputAcceptReceipt>;
     /** 引擎没收下(`TaskStream.steer` 抛)⇒ 落 `settled{not_applied}`。不抛(失败留痕,受理仍挂在腿上,腿收场时照常 settle)。 */
     withdraw(receipt: UserInputAcceptReceipt): Promise<void>;
+    /**
+     * 引擎收下了这次受理的那一次调用(`TaskStream.steer` / 子代句柄 `steer` resolve)—— {@link withdraw} 的对偶,路由对每次受理恰报其一(经 `routes/runs.ts`
+     * 的 `relayAcceptedInput`)。收下之后这次受理才可被消费证据结清([ref] 7.113.0 opus 腿 L4,见 {@link observeLegEvent});消费证据此刻已在这条腿上
+     * (消费帧先于本调用到达 / 同 Idempotency-Key 的重放在消费之后才来)⇒ 当场落 `settled{consumed}`。不抛(结清写失败留在腿上,收场照常 `leg_end`)。
+     */
+    confirm(receipt: UserInputAcceptReceipt): Promise<void>;
     /** 腿在本进程收场 ⇒ 这条腿上的每一次受理落 `settled{leg_end}`。不抛。 */
     settleLeg(leg: object): Promise<void>;
+    /**
+     * S-968(core 7.39.0 #1273):腿的事件环把**每一帧**引擎事件交进来(三条腿同一只口;不认的帧零成本返回)。唯一认的一形 =
+     * `human_input{delivery:"applied"}`:引擎确认把那条输入消费进了转录 ⇒ 这条腿上 `messageId` = 帧 `inputId`、**且引擎已收下其调用**({@link confirm})的受理
+     * (同 Idempotency-Key 的幂等重放一并)落 `settled{consumed}`,离开 open 集 —— 之后写者死也不再按崩溃告知。结清写失败 ⇒ 留在腿上(收场照常落 `leg_end`),不抛。
+     * 引擎还没判的受理不结清:messageId 只由 key 派生、账本看不见正文,同 key 异正文的那一次会被引擎拒(`steering.duplicate_input_id`)、走 {@link withdraw}。
+     */
+    observeLegEvent(leg: object, ev: TaskEvent): Promise<void>;
     /** 收敛扫描(boot 一次 + 每个维护 tick;判据见顶注)。不抛;返回本次收敛条数。 */
     converge(): Promise<number>;
     /** 新 run 首拍:把本会话已收敛、未告知的受理按旧 run 分组铸通告、投出后落 `announced`。不抛。 */

package/dist/user-input-ledger.js

@@ -4,7 +4,7 @@ import { isHolderDeathVerdict } from "./plugins/store-contracts.js";
 import { defaultEngineNoticeRouter } from "./trace/engine-notice-wire.js";
 export const USER_INPUT_LEDGER_DIR = "user-input-ledger";
 export const USER_INPUT_KIND_WORDS = { steer: true };
-export const SETTLE_HOW_WORDS = { leg_end: true, not_applied: true };
+export const SETTLE_HOW_WORDS = { leg_end: true, not_applied: true, consumed: true };
 const UNDRAINED_CAUSE_MINTER = { leg_end: "engine", crashed: "server" };
 export const CRASHED_CAUSE = "crashed";
 export function isServingLayerUndrainedCause(v) {
@@ -128,7 +128,7 @@ const USER_STEER_UNDRAINED = "task.user_steer_undrained";
 export function buildCrashedSteerNotice(input) {
     return {
         code: USER_STEER_UNDRAINED,
-        message: `Check the earlier run's transcript and results before re-sending any of these steers to a live run. The server accepted ${input.steer} user steer(s) for run ${input.taskId} (each answered 200 applied or 202 queued-immediate), but the process running that run ended before the run settled; whether the run consumed them is not known. They are NOT redelivered.`,
+        message: `Check the earlier run's transcript and results before re-sending any of these steers to a live run. The server accepted ${input.steer} user steer(s) for run ${input.taskId} (each answered 200 applied or 202 queued-immediate), but the process running that run ended before the engine confirmed consuming them. They are NOT redelivered.`,
         detail: { steer: input.steer, cause: CRASHED_CAUSE, taskId: input.taskId, sessionId: input.sessionId },
         sessionId: input.sessionId,
     };
@@ -157,13 +157,25 @@ export function createUserInputLedger(opts) {
     const { store, writer, evidence } = opts;
     const now = opts.now ?? Date.now;
     const legs = new WeakMap();
+    const consumedOnLeg = new WeakMap();
+    const settleConsumed = async (leg, acceptId) => {
+        try {
+            await store.settle(acceptId, "consumed", now());
+            legs.get(leg)?.delete(acceptId);
+            liveHere.delete(acceptId);
+        }
+        catch (e) {
+            recordFailOpen("server.user-input-ledger.append-failed", `op=consumed ${errText(e)}`);
+        }
+    };
     const liveHere = new Set();
-    const track = (leg, acceptId) => {
-        const set = legs.get(leg);
-        if (set)
-            set.add(acceptId);
+    const track = (leg, acceptId, messageId) => {
+        const entry = { messageId, taken: false };
+        const onLeg = legs.get(leg);
+        if (onLeg)
+            onLeg.set(acceptId, entry);
         else
-            legs.set(leg, new Set([acceptId]));
+            legs.set(leg, new Map([[acceptId, entry]]));
     };
     const pageSize = opts.scanBudget?.pageSize ?? USER_INPUT_OPEN_SCAN_MAX;
     const maxPages = opts.scanBudget?.maxPages ?? USER_INPUT_OPEN_SCAN_PAGES;
@@ -239,9 +251,17 @@ export function createUserInputLedger(opts) {
                 liveHere.delete(acceptId);
                 throw e;
             }
-            track(input.leg, acceptId);
+            track(input.leg, acceptId, input.messageId);
             return { acceptId, leg: input.leg };
         },
+        async confirm(receipt) {
+            const entry = legs.get(receipt.leg)?.get(receipt.acceptId);
+            if (entry === undefined)
+                return;
+            entry.taken = true;
+            if (consumedOnLeg.get(receipt.leg)?.has(entry.messageId) === true)
+                await settleConsumed(receipt.leg, receipt.acceptId);
+        },
         async withdraw(receipt) {
             legs.get(receipt.leg)?.delete(receipt.acceptId);
             try {
@@ -255,11 +275,11 @@ export function createUserInputLedger(opts) {
             }
         },
         async settleLeg(leg) {
-            const ids = legs.get(leg);
-            if (!ids)
+            const onLeg = legs.get(leg);
+            if (!onLeg)
                 return;
             legs.delete(leg);
-            for (const acceptId of ids) {
+            for (const acceptId of onLeg.keys()) {
                 try {
                     await store.settle(acceptId, "leg_end", now());
                 }
@@ -271,6 +291,21 @@ export function createUserInputLedger(opts) {
                 }
             }
         },
+        async observeLegEvent(leg, ev) {
+            if (ev.type !== "human_input" || ev.delivery !== "applied")
+                return;
+            const seen = consumedOnLeg.get(leg);
+            if (seen)
+                seen.add(ev.inputId);
+            else
+                consumedOnLeg.set(leg, new Set([ev.inputId]));
+            const onLeg = legs.get(leg);
+            if (!onLeg)
+                return;
+            const due = [...onLeg].flatMap(([acceptId, entry]) => (entry.messageId === ev.inputId && entry.taken ? [acceptId] : []));
+            for (const acceptId of due)
+                await settleConsumed(leg, acceptId);
+        },
         converge() {
             inFlight ??= convergePass().finally(() => {
                 inFlight = undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.111.0",
+  "version": "7.113.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -28,6 +28,7 @@
     "!dist/run-local-linux-x64",
     "!dist/run-local-darwin-arm64",
     "skills",
+    "scripts/retired-mode-seed-drain-local.mjs",
     "deploy/sema-up",
     "docs/DEVICE-EXECUTOR-PROTOCOL.md",
     "USAGE.md",
@@ -61,7 +62,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.38.2",
+    "@sema-agent/core": "7.39.1",
     "@sema-agent/settings-schema": "6.4.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -77,7 +78,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "15.1.1",
+    "@sema-agent/sdk": "15.3.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",