@sema-agent/server 7.134.0 → 7.136.0

package/dist/config-lkg.js

@@ -4,7 +4,7 @@ import { formatConfigPath } from "@sema-agent/settings-schema";
 import { join, dirname, resolve } from "node:path";
 import { randomBytes } from "node:crypto";
 import { judgeConfigCandidate } from "./web-admin-client/candidate-gate.js";
-import { centerStateBin, pullTokenIdentity } from "./center-credential.js";
+import { centerStateBin } from "./center-credential.js";
 import { configRootOf } from "./sema-config-dir.js";
 export function defaultSkillCacheDir(config) {
     return join(configRootOf(config), "skill-cache");
@@ -167,86 +167,4 @@ function lkgPayloadShapeProblem(effective, etag) {
     }
     return undefined;
 }
-export function legacyV1LkgPath(config, worker) {
-    const key = (worker ?? "global").replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 64);
-    return join(configRootOf(config), `config-lkg-${key}.json`);
-}
-export async function migrateV1Lkg(o) {
-    const refuse = (why) => ({
-        outcome: "not-migrated",
-        path: o.legacyPath,
-        reason: `pre-identity LKG (formatVersion 1) at ${o.legacyPath} not migrated: ${why}. Way out: delete that file — the next clean candidate from the center writes this credential identity's own LKG (${o.binPath})`,
-    });
-    const sameFile = o.legacyPath === o.binPath;
-    if (!sameFile) {
-        try {
-            await fs.access(o.binPath);
-            return { outcome: "none" };
-        }
-        catch (err) {
-            const code = errnoOf(err);
-            if (code !== "ENOENT")
-                return refuse(`this credential identity's bin ${o.binPath} could not be checked (${code})`);
-        }
-    }
-    let text;
-    try {
-        text = await fs.readFile(o.legacyPath, "utf8");
-    }
-    catch (err) {
-        const code = errnoOf(err);
-        return code === "ENOENT" || code === "ENOTDIR" || sameFile ? { outcome: "none" } : refuse(`it could not be read (${code})`);
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(text);
-    }
-    catch (err) {
-        return sameFile ? { outcome: "none" } : refuse(`it is not valid JSON (${err instanceof Error ? err.name : "parse error"})`);
-    }
-    if (parsed === null || typeof parsed !== "object" || !("formatVersion" in parsed) || parsed.formatVersion !== 1)
-        return { outcome: "none" };
-    const v1 = parsed;
-    if (v1.worker !== (o.worker ?? "global"))
-        return refuse(`it belongs to worker ${JSON.stringify(v1.worker)}`);
-    if (o.identity !== pullTokenIdentity(o.worker)) {
-        return refuse("its envelope records only the worker, and only a pull-token credential's identity (= the worker) can be derived from that — the current credential is not this worker's pull token, so the file cannot prove whose credential fetched it");
-    }
-    if (v1.effective === null || typeof v1.effective !== "object" || Array.isArray(v1.effective))
-        return refuse("its payload is unusable (bad effective)");
-    const payload = migrateLkgPayload(v1.effective);
-    if ("refused" in payload)
-        return refuse(`its payload cannot be migrated to the current settings form (${payload.refused})`);
-    const judged = lkgPayloadJudged(payload.effective, v1.etag);
-    if ("problem" in judged)
-        return refuse(`its payload is unusable (${judged.problem})`);
-    const retiredTo = `${o.legacyPath}.migrated-v1`;
-    let retireError;
-    if (sameFile) {
-        try {
-            await fs.copyFile(o.legacyPath, retiredTo);
-        }
-        catch (err) {
-            retireError = `the formatVersion 1 bytes could not be kept as ${retiredTo} (${errnoOf(err)})`;
-        }
-    }
-    try {
-        await saveLkg(o.binPath, o.worker, o.identity, payload.effective, undefined);
-    }
-    catch (err) {
-        return refuse(`writing it into this credential identity's bin failed (${String(err)}) — the old file is left in place and the migration retries on the next LKG read`);
-    }
-    if (!sameFile) {
-        try {
-            await fs.rename(o.legacyPath, retiredTo);
-        }
-        catch (err) {
-            retireError = `the old file could not be renamed to ${retiredTo} (${errnoOf(err)}) — harmless: the bin now exists, so the old file is never read again`;
-        }
-    }
-    return { outcome: "migrated", from: o.legacyPath, retiredTo, ...(retireError !== undefined ? { retireError } : {}) };
-}
-function errnoOf(err) {
-    return err instanceof Error && "code" in err && typeof err.code === "string" ? err.code : "unknown";
-}
 //# sourceMappingURL=config-lkg.js.map

package/dist/config-provider.d.ts

@@ -18,14 +18,14 @@ import type { ConfigProviderWord } from "./config-types.js";
  *  ——缺席/空两形并存就是又一处二义。
  *  🔐 原流的 `error` 未经 {@link redactConfigError}(那道脱敏挂在真正进日志流的 `domainErrors` 产出边界上),
  *  路由进日志/审计流的消费者必须自己先脱敏。 */
-/** `credentialIdentity`(S-651 / [ref] E-15):远程腿恒在场 = 这次拉取所用凭证的身份(分箱键来源);本地腿
+/** `credentialIdentity`([ref] / [ref] E-15):远程腿恒在场 = 这次拉取所用凭证的身份(分箱键来源);本地腿
  *  缺席(没有凭证 —— config.d 就在本机盘上)。 */
-/** `droppedEntries`(S-704 ②):schema 逐条丢掉的条目(坐标 + 字段诊断,已脱敏;S-1295 起每行带闭集词 `reasonCode`)—— **不**进候选门,
+/** `droppedEntries`([ref] ②):schema 逐条丢掉的条目(坐标 + 字段诊断,已脱敏;[ref] 起每行带闭集词 `reasonCode`)—— **不**进候选门,
  *  调用方逐条响亮点名、其余照用;缺席 = 这次读零逐条丢弃(与 `domainErrors` 同一种缺席即无的形)。其中的目录条目同一次折叠另记进
  *  `effective.models.droppedCatalogEntries`(`GET /v1/models.droppedEntries` 的源,与 `models` 同世代)。 */
 /** `unreadFiles`:`config.d` 里读腿根本不读的文件(不是域 / 不是便携域)—— **不**进候选门(不是读的域判形失败),调用方一份一行
  *  `config_unread_file` 点名、其余照用;缺席 = 没有(本地读腿才会有)。 */
-/** `retiredDomains`(S-1456):带事实的退役域文档(契约包的墓碑)—— 读腿不抛,交成发现,候选判官以成因 `retired_domain` 整拒这份候选(与域判形失败
+/** `retiredDomains`([ref]):带事实的退役域文档(契约包的墓碑)—— 读腿不抛,交成发现,候选判官以成因 `retired_domain` 整拒这份候选(与域判形失败
  *  同一条回落链、同一行拒判);缺席 = 没有。远端腿:那一键不进 effective、其余域照读;本地腿:契约读腿在读便携域之前就拒,交出的候选只有版本
  *  (这棵树的内容版本,哈希含退役文件 ⇒ 改 / 删它版本即变),内容是空的 effective(被整拒,不会被应用)。 */
 /** `unreadKeys`:本地读腿读了那份文件、却结构上不读其中一键(`prompts.json` 的 `workers`)—— 同 `unreadFiles`,不进候选门,调用方一键一行 `config_unread_key`。 */
@@ -96,13 +96,13 @@ export interface ConfigProvider {
     /**
      * Fetch one skill body by content hash (`sha256:<hex>`). Remote: GET the content endpoint + verify the
      * hash. Local: content-addressed lookup over the skills of the candidate this provider last served (the
-     * same read that produced the manifest — S-1556). Returns `undefined` when the hash
+     * same read that produced the manifest — [ref]). Returns `undefined` when the hash
      * is unknown (remote 404 / local miss) so the caller keeps its baseline; throws only on a hard error
      * (remote non-404 HTTP / hash mismatch).
      */
     fetchSkillContent(contentHash: string): Promise<string | undefined>;
     /**
-     * S-1556:这只配置源给技能正文留的**盘缓存目录**(content-addressed;`applySkillsManifest` 的读序 内存 → 盘 → 本配置源,读到即回写)。
+     * [ref]:这只配置源给技能正文留的**盘缓存目录**(content-addressed;`applySkillsManifest` 的读序 内存 → 盘 → 本配置源,读到即回写)。
      * 远程:开着 LKG(`CONFIG_LKG_ENABLED`)时 = 配置根下的 `skill-cache` —— 中心不可达时的 LKG 起服不卡在正文拉取上,LKG 落盘的正文完整性门
      * 也验这同一个目录;关着 = 缺席(不落盘)。本地:恒缺席 —— 正文就内联在本机盘上的 config.d 里,再拷一份是第二份真源。
      */
@@ -118,24 +118,24 @@ export interface ConfigProviderInput {
         worker?: string;
         dryRun?: boolean;
     };
-    /** `CONFIG_PROVIDER` —— 闭集 `local` | `remote` | 缺席(S-841:词表属主 `CONFIG_PROVIDER_WORDS`,认不出的词在
+    /** `CONFIG_PROVIDER` —— 闭集 `local` | `remote` | 缺席([ref]:词表属主 `CONFIG_PROVIDER_WORDS`,认不出的词在
      *  `loadConfig` 就拒启,本层**不可能**再收到第三个词 —— 修前那条「认不出 ⇒ 当 local + warn」的臂随之删除)。
      *  `local` forces the local backend; `remote` selects the center (falls through to local if no URL). */
     provider?: ConfigProviderWord;
-    /** 本地配置源的根(持有 `config.d/<domain>.json`;FileConfigStore 吃根、读 `<root>/config.d`)。🔴 S-841:**必填**,
+    /** 本地配置源的根(持有 `config.d/<domain>.json`;FileConfigStore 吃根、读 `<root>/config.d`)。🔴 [ref]:**必填**,
      *  值恒来自 {@link configLocalRoot}(入口算一次,工厂与执行车道合成步读同一个)—— 修前是可选、缺席回落
      *  `process.cwd()`,而工厂只在 `CONFIG_PROVIDER === "local"` 字面上递它 ⇒ 另一条走到 local 的路上配置源读 cwd、
      *  合成步读 localRoot,两个根分家。一个远程源也收它:`remote` 而无中心 URL 的形照样落回 local。 */
     localDir: string;
-    /** S-163:本地配置源的属主声明(`CONFIG_LOCAL_OWNER_UID`,配置席 `configLocalOwnerUid`)—— 每拍读 `config.d` 之前的目录信任判官与起服那一次判同一个值。
+    /** [ref]:本地配置源的属主声明(`CONFIG_LOCAL_OWNER_UID`,配置席 `configLocalOwnerUid`)—— 每拍读 `config.d` 之前的目录信任判官与起服那一次判同一个值。
      *  **必填**(值可以是 `undefined` = 没声明):两个生产构造点都必须递,漏递 = 起服判过、每拍却按「没声明」判 ⇒ 每一拍都拒(tsc 在这里挡)。 */
     localOwnerUid: number | undefined;
-    /** S-1556:远程配置源的技能正文盘缓存目录(见 {@link ConfigProvider.skillBodyCacheDir});本地配置源不认它(正文本就在盘上)。缺席 = 不落盘。 */
+    /** [ref]:远程配置源的技能正文盘缓存目录(见 {@link ConfigProvider.skillBodyCacheDir});本地配置源不认它(正文本就在盘上)。缺席 = 不落盘。 */
     skillBodyCacheDir?: string;
 }
 /**
  * RemoteConfigProvider — DELEGATES to the exported web-admin HTTP functions. No HTTP is reimplemented;
- * the center endpoint (baseUrl + credential SOURCE — S-651: read per request, never a bound token) and worker
+ * the center endpoint (baseUrl + credential SOURCE — [ref]: read per request, never a bound token) and worker
  * are passed through. The two delegate fns are injectable (defaulting
  * to the real web-admin exports) so a unit test can assert delegation without module-mocking.
  */
@@ -192,13 +192,13 @@ export declare function mapToServiceEffective(eff: AgentConfigEffective, version
  * `CONFIG_PROVIDER=remote` with no URL is a misconfiguration — we fall through to local rather than
  * constructing a remote provider with no endpoint (the caller would have skipped the remote pull entirely
  * under the old code path; local-with-empty-config.d degrades to env the same way). An UNRECOGNIZED value
- * never reaches this function: `loadConfig` refuses to boot on it (S-841), so a fat-fingered knob can
+ * never reaches this function: `loadConfig` refuses to boot on it ([ref]), so a fat-fingered knob can
  * neither source config from an unintended network endpoint nor be read as "local" here while the
  * execution-lane default reads it as "not local".
  */
 export declare function createConfigProvider(input: ConfigProviderInput): ConfigProvider;
 /**
- * S-841 —— **本地配置根的唯一来源**:`CONFIG_LOCAL_DIR` → `AGENT_DATA_DIR` → `~/.ai-agent`。两个入口(HTTP 服务的第 1 段、
+ * [ref] —— **本地配置根的唯一来源**:`CONFIG_LOCAL_DIR` → `AGENT_DATA_DIR` → `~/.ai-agent`。两个入口(HTTP 服务的第 1 段、
  * run-local)各调一次,算出来的那一个值同时交给 web-admin 工厂(`createConfigProvider` 的 `localDir`)与执行车道合成步
  * (`composeExecutionLane` 的 `localRoot`)—— 修前两个入口各写一份这条链(run-local 还多一个与之等价的三元),工厂又在
  * 字面 `"local"` 之外回落 `process.cwd()`。
@@ -212,7 +212,7 @@ export declare function configLocalRoot(config: {
 /**
  * {@link createConfigProvider} 会造出**哪一种**配置源 —— 判据的唯一属主(构造器与执行车道合成步读同一只:
  * local 形 `config.d/remote-exec.json` 的 file-wins 覆写只在配置源是 local 时生效,车PI 修复轮 ①)。
- * `local` 或没配中心 ⇒ local;其余 ⇒ remote。(S-841 起入参是闭集:「认不出的词 ⇒ local」那一臂随拒启删除。)
+ * `local` 或没配中心 ⇒ local;其余 ⇒ remote。([ref] 起入参是闭集:「认不出的词 ⇒ local」那一臂随拒启删除。)
  */
 export declare function configProviderKind(input: {
     readonly provider?: ConfigProviderWord | undefined;

package/dist/config-provider.js

@@ -5,7 +5,7 @@ import { FileConfigStore } from "@sema-agent/settings-schema/node";
 import { assertLocalConfigDirTrusted } from "./config-dir-trust.js";
 import { danglingRefs, emptyEffective, findSkillContent, promptArtifactFor, renderRefIssue, skillContentHash, } from "@sema-agent/settings-schema";
 import { redactSecrets } from "./trace/redact.js";
-import { fetchEffective as remoteFetchEffective, fetchSkillContent as remoteFetchSkillContent, WebAdminHttpError, } from "./web-admin-client/facade.js";
+import { fetchEffective as remoteFetchEffective, fetchSkillContent as remoteFetchSkillContent, skillToolListsOf, WebAdminHttpError, } from "./web-admin-client/facade.js";
 import { homedir } from "node:os";
 import { join } from "node:path";
 const OPERAND_FINGERPRINT_KEY = randomBytes(16);
@@ -190,6 +190,7 @@ export function mapToServiceEffective(eff, version) {
                 scenarios: s.scenarios ?? [],
                 contentHash: skillContentHash(s.content),
                 enabled: s.enabled,
+                ...skillToolListsOf(s),
             })),
         },
         mcp: {