@sema-agent/server 7.121.0 → 7.123.0

package/dist/url-shape.js

@@ -0,0 +1,41 @@
+import { DISPLAY_SAFE_URL_TOKEN, buildDisplaySafeUrl, isHierarchicalUrl } from "./trace/redact.js";
+export const HTTP_URL_PARTS = ["userinfo", "query", "fragment"];
+export const HTTP_URL_SHAPE_RULE = "is not a parseable http(s) URL (scheme must be http or https; it must look like http(s)://host[:port][/path])";
+export function httpUrlFlaws(raw, forbid) {
+    if (!isHierarchicalUrl(raw))
+        return ["not-http-url"];
+    const u = new URL(raw);
+    const hashAt = u.href.indexOf("#");
+    const present = {
+        userinfo: u.username !== "" || u.password !== "",
+        query: (hashAt < 0 ? u.href : u.href.slice(0, hashAt)).includes("?"),
+        fragment: hashAt >= 0,
+    };
+    const shape = u.protocol === "http:" || u.protocol === "https:" ? [] : ["not-http-url"];
+    return [...shape, ...HTTP_URL_PARTS.filter((p) => forbid.includes(p) && present[p])];
+}
+export function httpUrlRule(flaw) {
+    switch (flaw) {
+        case "not-http-url":
+            return HTTP_URL_SHAPE_RULE;
+        case "userinfo":
+            return "must not carry userinfo (credentials in the URL are logged, reported and handed to fetch; they belong in a credential setting)";
+        case "query":
+            return "must not carry a query (request paths are appended to this base)";
+        case "fragment":
+            return "must not carry a fragment (it is never sent, and anything appended after it is dropped with it)";
+    }
+}
+export function buildRefusalShownUrl(raw) {
+    if (!isHierarchicalUrl(raw))
+        return DISPLAY_SAFE_URL_TOKEN;
+    const u = new URL(raw);
+    if (u.protocol !== "http:" && u.protocol !== "https:")
+        return DISPLAY_SAFE_URL_TOKEN;
+    const origin = `${u.protocol}//${u.host}`;
+    return `${buildDisplaySafeUrl(origin)}${u.href === `${origin}/` ? "" : "/…"}`;
+}
+export function buildHttpUrlRefusal(subject, raw, flaws) {
+    return `${subject} ${flaws.map(httpUrlRule).join("; ")}; got ${JSON.stringify(buildRefusalShownUrl(raw))}`;
+}
+//# sourceMappingURL=url-shape.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.121.0",
+  "version": "7.123.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -64,8 +64,8 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.46.0",
-    "@sema-agent/settings-schema": "9.0.0",
+    "@sema-agent/core": "7.48.0",
+    "@sema-agent/settings-schema": "10.1.1",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",

package/scripts/drain-check-local.mjs

@@ -33,7 +33,7 @@
  *  · `permissions-allow-list`(换钉 7.117.0 前,本服务把 `settings.permissions.allow` 整份交给引擎的 allow 层):pending 行所在会话的续跑上下文
  *    (`checkpoint-ctx/*.json` 的信封 `{ sessionId, updatedAt, ctx }`)里,`ctx.body.settings.permissions.allow` 是非空数组,且 `ctx.permissionsAllowReading` 不是 `"allow_layer"`
  *    (无记号 = 名单时代写下的;`"statement"` = 表态时代写下的)—— 这样的行在 7.117.0 上续跑会被拒(行字节不动;出路按停驻种类分,见随包 `MIGRATION.md` 7.117.0 节)。判据**就是**服务续跑腿拒臂的那一只函数(`src/http/checkpoint-ctx.ts` 的 `allowListReadingUnstated`),
- *    经包里脚本隔壁的编译产物 `dist/http/checkpoint-ctx.js` 取(与缺省数据根经 `dist/local-data-root.js` 取同一姿势;7.117.0 起该模块经 `dist/rule-entry-list.js` 依赖引擎包根 `@sema-agent/core` —— 随包安装时它就是包的依赖,解开的 tarball 没装依赖时本判据与 `skill-deny-inert` 同读成 criterion-unavailable、rc 2)—— 本脚本不写第二份。
+ *    经包里脚本隔壁的编译产物 `dist/http/checkpoint-ctx.js` 取(与缺省数据根经 `dist/local-data-root.js` 取同一姿势;7.122.0 起该模块零值依赖 —— 存量体能否重放的整只判据移到了 `dist/http/stored-body-replay.js`,本脚本不读它;7.117.0–7.121.x 该模块经 `dist/rule-entry-list.js` 依赖引擎包根)—— 本脚本不写第二份。
  * 扫描骨架(快照 + 账本折成当前行、一致性重读、数据根判定)各条判据共用;判据只回答「这一条 pending 行算不算命中」。
  *
  * ## 为什么是一只脚本,不是一行 grep