@sema-agent/server 7.124.1 → 7.125.1

package/dist/web-admin-client/stage-limits.js

@@ -1,5 +1,6 @@
 import { LIMITS_HTTP_FLOORS } from "../config.js";
 import { checkCrossInvariants } from "../config-invariants.js";
+import { COST_QUOTA_WINDOW_SEC_RANGE, costQuotaWindowSecInRange } from "../observability/cost-quota.js";
 import { BATCH1_LIMIT_KEYS, DEFERRED_LIMIT_KEYS } from "./hot-keys-registry.js";
 const INFRA_RATE_KEYS = ["toolCallMicroUsd", "sandboxSecMicroUsd", "egressGbMicroUsd"];
 const okNum = (v) => typeof v === "number" && Number.isFinite(v);
@@ -8,7 +9,9 @@ const positive = (key, v) => okNum(v) && v > 0 ? { ok: true, value: v } : { ok:
 const VALIDATORS = {
     rateLimitPerMin: (v) => atLeast("rateLimitPerMin", v, 0),
     maxPrincipalCostUsd: (v) => atLeast("maxPrincipalCostUsd", v, 0),
-    costQuotaWindowSec: (v) => positive("costQuotaWindowSec", v),
+    costQuotaWindowSec: (v) => okNum(v) && costQuotaWindowSecInRange(v)
+        ? { ok: true, value: v }
+        : { ok: false, reason: `costQuotaWindowSec must be a finite number in [${COST_QUOTA_WINDOW_SEC_RANGE.min}, ${COST_QUOTA_WINDOW_SEC_RANGE.max}] (seconds)` },
     maxTaskCostUsd: (v) => atLeast("maxTaskCostUsd", v, 0),
     maxTaskTokens: (v) => atLeast("maxTaskTokens", v, 0),
     infraCostRates: (v, baseline) => {

package/dist/workspace-space.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Workspace persistence by **space** (k8s lane) — the closed word set, the defaults, the retention domain and
+ * the policy shape (pure leaf: no value imports, so `config.ts`, the capability fact and the adapter in `plugins/` can
+ * all import it without a load cycle). The effective policy has ONE reading: the capability fact `workspaceSpace`
+ * (`src/capability-facts.ts`).
+ *
+ * The law (one fact, one seat): a k8s pod's `/workspace` is durable across runs as an object-store "space" owned by the
+ * session's OCCUPANT (its incarnation, `session-incarnation.ts`) — `<keyPrefix>/<incarnation>/space/<snapshotId>.tar.gz`
+ * plus one small `<keyPrefix>/<incarnation>/space/latest` pointer whose body is the newest snapshotId (the durable-suspend
+ * archives of parked runs stay flat under `<keyPrefix>/<sessionId>/` and are never pruned; why each lane has the partition
+ * it has: `plugins/remote-env-k8s.ts`, `K8sEnvConfig`). `connect()` restores the pointer's snapshot through the adapter's one
+ * tar download (shared with `resumeVM`); `destroy()` snapshots through its one tar upload (shared with `suspendVM`),
+ * moves the pointer, then keeps the newest `keep` snapshots inside `space/`. No index table: the bucket is the only record.
+ *
+ * Facility dependence: without a snapshot store (`s3Snapshot`) there is nothing to persist into — the fact is
+ * unavailable and the lane behaves exactly as before (fresh pod, empty `/workspace` every run).
+ */
+/** `WORKSPACE_PERSIST` closed set. `space` = the k8s workspace persists per space (the session occupant); `off` = a fresh
+ *  workspace every run. */
+export declare const WORKSPACE_PERSIST_WORDS: readonly ["space", "off"];
+export type WorkspacePersist = (typeof WORKSPACE_PERSIST_WORDS)[number];
+/**
+ * Default `off` — persistence is opt-in. Why: the run-end commit's ordering against the NEXT run rests on an object-store
+ * marker the commit itself writes, and that PUT can land after the engine's teardown bound; then the next run restores the
+ * previous-but-one snapshot and its own commit later overwrites the late one (the preceding run's changes are lost). That
+ * window closes only with a commit fence held in server-side durable state, written before the session's active-run slot
+ * is released; until then a deployment turns persistence on knowing the window (USAGE §9.3b).
+ */
+export declare const WORKSPACE_PERSIST_DEFAULT: WorkspacePersist;
+/** `WORKSPACE_SNAPSHOT_KEEP` — snapshots kept per space key (closed integer domain; out of domain refuses boot). */
+export declare const WORKSPACE_SNAPSHOT_KEEP_DEFAULT = 3;
+export declare const WORKSPACE_SNAPSHOT_KEEP_RANGE: {
+    readonly min: 1;
+    readonly max: 50;
+};
+/** The effective space policy — the `workspaceSpace` fact's witness and the value of `GET /v1/capabilities.workspaceSync`. */
+export interface WorkspaceSyncCapability {
+    persist: WorkspacePersist;
+    keep: number;
+}
+//# sourceMappingURL=workspace-space.d.ts.map

package/dist/workspace-space.js

@@ -0,0 +1,5 @@
+export const WORKSPACE_PERSIST_WORDS = ["space", "off"];
+export const WORKSPACE_PERSIST_DEFAULT = "off";
+export const WORKSPACE_SNAPSHOT_KEEP_DEFAULT = 3;
+export const WORKSPACE_SNAPSHOT_KEEP_RANGE = { min: 1, max: 50 };
+//# sourceMappingURL=workspace-space.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.124.1",
+  "version": "7.125.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -65,7 +65,7 @@
   },
   "dependencies": {
     "@sema-agent/core": "7.48.0",
-    "@sema-agent/settings-schema": "11.2.0",
+    "@sema-agent/settings-schema": "11.3.1",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",
@@ -80,7 +80,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "15.3.0",
+    "@sema-agent/sdk": "20.0.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",