@sema-agent/server 7.130.0 → 7.131.0

package/dist/web-admin-client/apply-effective.js

@@ -1,7 +1,7 @@
 import { expandTiers, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
 import { WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
-import { readAtMention } from "../model-select.js";
+import { buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
 import { applyAutoCompactWindow, buildModelCostKey, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
 import { buildModelHeadersKey } from "../model-entry-headers.js";
@@ -40,8 +40,7 @@ function toModel(m, envDefaults = {}, logger) {
         provider: m.provider,
         api: m.api,
         baseUrl: m.baseUrl ?? "",
-        reasoning: m.reasoning !== undefined ? Boolean(m.reasoning) : (envDefaults.reasoning ?? true),
-        input: m.vision ? ["text", "image"] : ["text"],
+        ...mintCapabilityKeys({ reasoning: m.reasoning, vision: m.vision }),
         contextWindow: m.contextWindow ?? envDefaults.contextWindow ?? 262144,
         maxTokens: m.maxTokens ?? envDefaults.maxTokens ?? 4096,
         ...(charsPerTokenOf(m.charsPerToken) !== undefined || envDefaults.charsPerToken !== undefined
@@ -115,6 +114,7 @@ export function applyEffective(config, eff, logger, opts) {
             }
         }
     }
+    const servedBefore = servedModelTableLeg(config);
     commitStaged(config, staged);
     if (ordered)
         appliedGeneration.set(config, gen);
@@ -138,6 +138,11 @@ export function applyEffective(config, eff, logger, opts) {
         logger?.info("web_admin_limits", { version: staged.version, keys: staged.limits.changed });
     if (mp)
         logger?.info("web_admin_models", mp.infoLine);
+    if (servedBefore === "env") {
+        const notServed = buildEnvModelIdNotServedNotice(config);
+        if (notServed !== undefined)
+            logger?.warn(notServed.event, notServed.fields);
+    }
     if (staged.approvalGate.next !== undefined)
         logger?.info("web_admin_runtime", { version: staged.version, approvalRequire: staged.approvalGate.next });
     if (Object.keys(staged.hot.infoLine).length > 0)
@@ -248,7 +253,7 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
         const modelApiKeyEnv = {};
         const modelApiKeys = {};
         const envModel = envDerivedModel(config);
-        const envDefaults = { maxTokens: envModel.maxTokens, contextWindow: envModel.contextWindow, reasoning: envModel.reasoning, charsPerToken: envModel.charsPerToken, defaultThinking: envModel.defaultThinking, compat: envModel.compat };
+        const envDefaults = { maxTokens: envModel.maxTokens, contextWindow: envModel.contextWindow, charsPerToken: envModel.charsPerToken, defaultThinking: envModel.defaultThinking, compat: envModel.compat };
         for (const m of usable) {
             if (m.baseUrl)
                 logger?.warn("web_admin_model_base_url", { model: m.name, baseUrl: buildDisplaySafeUrl(m.baseUrl), hint: "registry-directed gateway override — this model's key authenticates AGAINST THIS URL" });
@@ -343,7 +348,7 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
         const noDefault = crossInvariant("default-model-resolvable").check({ live: config, next: nextView });
         if (noDefault !== undefined)
             return refuse(DEFAULT_MODEL_MISSING_CODE, noDefault);
-        const endpoint = judgeModelRouteEndpoint(nextView);
+        const endpoint = judgeModelRouteEndpoint(nextView, "catalog");
         if (endpoint !== undefined)
             return refuse(endpoint.code, endpoint.reason);
         const minted = crossInvariant("refused-names-not-minted").check({ live: config, next: nextView });

package/dist/web-admin-client/types.d.ts

@@ -125,7 +125,7 @@ export interface CenterMcpServer {
      * 与传输类型和地址无关(stdio 子进程可以是不可信包,loopback URL 可以是你自己的服务)——core 刻意
      * 不按拓扑推断,本层同样不推断。它是**部署面**的键(core 顶注:与 `RunnerDeps` 接线同一权威平面),
      * 所以它的家在 center 下发这条腿;请求腿那半场的门与结构性兑现见 `task-mcp.ts`
-     * 的 `assertRequestMcpContentOrigin` 顶注。
+     * 的 `assertRequestMcpEntries` 顶注。
      *
      * ✅ **两条腿已通**([ref],settings-schema 1.4.0 补键 + config-provider 映射行,2026-09-02;双绊线翻正销账)。
      * 病史([ref]③ / [ref]③ / [ref],2026-08-31 双绊线实测更正 —— 本注更旧版那句

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.130.0",
+  "version": "7.131.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -65,7 +65,7 @@
   },
   "dependencies": {
     "@sema-agent/core": "7.51.2",
-    "@sema-agent/settings-schema": "12.2.1",
+    "@sema-agent/settings-schema": "13.0.1",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",

package/scripts/drain-check-local.mjs

@@ -19,8 +19,9 @@
  *  · `skill-deny-inert`(换钉 7.117.0 前,引擎 7.42 逐字读规则条目):pending 行所在会话的续跑上下文里,提交体顶层 `skills[]` 或某只子代的 `agents[].skills[]`
  *    某只技能的 `disallowedTools` 有引擎读成空的条目(例:带首尾空白的 `"Bash "` —— 7.41 去白后是一条有效的拒,7.42 什么也不拒)—— 这样的行在 7.117.0 上续跑会被拒
  *    (行字节不动;出路 = 取消、改好条目重提,见随包 `MIGRATION.md` 7.117.0 节)。命中行点名是哪一层(`member=skills` / `member=agents.skills`)。
- *    判据**就是**服务提交与续跑两腿同经的那一只函数(`src/rule-entry-list.ts` 的 `skillDenyInertEntryOf`,它调引擎包根的 `compileAllowList`),经编译产物
- *    `dist/rule-entry-list.js` 取 —— 本脚本不写第二份;
+ *    判据**就是**服务提交与续跑两腿同经的那一只判官(`src/rule-entry-list.ts`:两腿经 `inertToolListEntryOf` 判全部工具名清单,它先调技能两层的取清单函数 `skillDenyInertEntryOf`,
+ *    后者调引擎包根的 `compileAllowList`),本脚本取的是技能两层那一只,经编译产物 `dist/rule-entry-list.js` 取 —— 不写第二份。7.131.0 起读成空即拒的清单扩到根 run 的 `allowTools` / `excludeTools` 与子代定义的 `allowTools` / `denyTools`,
+ *    本判据(窗在 7.117.0)与随包 SQL 孪生**仍只数技能两层**,不覆盖那几张清单(续跑时的 409 是它们的响亮道);
  *  · `workflow-park-holder`(换钉 7.118.0 前,引擎 7.44.0 起 workflow 子代卡交给哪条 run 只看记录 `parks[]` 条目上的持有者位 `parkedBy` / `generation`):
  *    pending 行的子会话被 workflow park 索引点名(`<数据根>/workflows/workflow-agent-sessions/index.jsonl`:一行 = 一条 workflow run 的整份指针集
  *    `{ runId, rows: [{ sessionId, runId, agentKey, scope }] }`,同一条 run 后写的一行整份覆盖先写的,空集 = 它不再点名任何子会话)= 一张待批的 workflow 子代卡。