@sema-agent/server 7.135.0 → 7.136.0

package/scripts/drain-check-local.mjs

@@ -31,7 +31,7 @@
  *    `dist/orchestration/workflow-agent-session-index.js` 取 —— 本脚本只按 runId 折叠;读不出的行计入 `corrupt`(rc 2:读不出的那一行可能正是点名某张待批卡的那一份);
  *    窗与删码:本判据是一次性迁移 M9 的读侧半场 —— 窗口与删码清单见引擎启动期一次性迁移登记表(one-time-migrations)M9 一行,随 M9 一起删;这里不写第二份窗。
  *  · `parked-tool-lists`(升级到 7.132.0 前)/ `own-tool-lists-rollback`(从 7.132.0 回滚前):停驻行记下的工具名清单 / 7.52 写下的 `ownToolLists`(判据与出路见判据表那两条的注);
- *  · `sealed-credentials-rollback`(从 7.134.0 回滚前):续跑上下文的凭据位上带封签的 pending 行(7.133.x 读不懂封签,续跑时把这些位当没有;判据与出路见判据表那一条的注);
+ *  · `sealed-credentials-rollback`(从 7.134.0 回滚前;从 7.135.0 / 7.136.0 回滚到上一版前同用):续跑上下文的凭据位上带封签的 pending 行(7.133.x 读不懂封签,续跑时把这些位当没有;判据与出路见判据表那一条的注);
  *  · `retired-mode-seed`(换钉 7.113.0 前,core 7.39.0 删掉退役 mode-seed 的一次性迁移):pending 行的 `state.inheritedGate` 仍带退役成员;
  *  · `permissions-allow-list`(换钉 7.117.0 前,本服务把 `settings.permissions.allow` 整份交给引擎的 allow 层):pending 行所在会话的续跑上下文
  *    (`checkpoint-ctx/*.json` 的信封 `{ sessionId, updatedAt, ctx }`)里,`ctx.body.settings.permissions.allow` 是非空数组,且 `ctx.permissionsAllowReading` 不是 `"allow_layer"`
@@ -466,6 +466,7 @@ export const DRAIN_CRITERIA = [
   {
     // 从 7.134.0 回滚到 7.133.x 之前:pending 行所在会话的续跑上下文里,提交体的凭据位(MCP / A2A 请求头与 env、settings.env、settings.webSearch.apiKey、http hook 请求头;7.135.0 起另有 command hook 的插件选项)
     // (从 7.135.0 回滚到 7.134.x 之前同用本判据:7.134.x 不认插件选项上的封签,续跑时那份 hooks 整只不采纳;本判据数任何凭据位上的封签,这一类在候选里)
+    // (从 7.136.0 回滚到 7.135.x 之前同用本判据:7.136.0 起子进程的命令行 —— MCP stdio 传输与 command hook 条目的 command / args —— 也封成封签,带它们的行盖第 3 代,7.135.x 整行拒续跑;这一类在候选里)
     // 上带封签 —— 7.134.0 封好才落盘,7.133.x 读不懂封签、续跑时把这些位当作没有(无凭据照跑、不报错)。出路:回滚前把它们决掉或取消(随包 `MIGRATION.md` 7.134.0 节)。
     // 判据函数是服务里那一只(`sealedCredentialFieldOf`,经编译产物 `dist/http/checkpoint-ctx.js` 取;走法与封口 / 开口 / 一次性迁移同一只),本脚本不写第二份;
     // 命中行点名第一处凭据位(`field=`,键名;值从不出来);读不懂的 ctx 档 / 索引账本行计入 `corrupt`(rc 2)。

package/scripts/drain-check.mysql.sql

@@ -17,7 +17,7 @@
 --   workflow-park-holder    换钉 7.118.0 之前 / 从 7.118.0 回滚到 7.117.x 之前:此刻待批、且子会话被 workflow park 索引点名的卡(workflow 子代卡;见该段注)。
 --   parked-tool-lists       升级到 7.132.0 之前:停驻行记着子代工具天花板 / 冻结的父约束链 / Skill 卡的清单绑定(7.52 在认领前按规范拼写读它们)的**候选**(见该段注)。
 --   own-tool-lists-rollback 从 7.132.0 回滚到 7.131.x 之前:7.132.0 停驻、带 state.ownToolLists 的行(7.131.x 读不了)。
---   sealed-credentials-rollback 从 7.134.0 回滚到 7.133.x(或从 7.135.0 回滚到 7.134.x)之前:停驻、续跑上下文里提交体的凭据位上带封签的行(7.133.x 读不懂封签,续跑时把这些位当没有)的**候选**(见该段注)。
+--   sealed-credentials-rollback 从 7.134.0 回滚到 7.133.x(或从 7.135.0 回滚到 7.134.x、从 7.136.0 回滚到 7.135.x)之前:停驻、续跑上下文里提交体的凭据位上带封签的行(7.133.x 读不懂封签,续跑时把这些位当没有)的**候选**(见该段注)。
 --   permissions-allow-list  换钉 7.117.0 之前:停驻、提交体 settings.permissions.allow 是非空数组且读法记号不是当前的 "allow_layer"(无记号 = 名单时代;"statement" = 表态时代)。
 --   retired-mode-seed       换钉 7.113.0 之前:检查点的 inheritedGate 里仍带退役 mode-seed 成员。
 
@@ -123,6 +123,8 @@ WHERE k.status = 'pending'
 -- JSON 串值恰为这个格式词即数(封签只落在凭据位上;体里别处恰好写着这个词的串值也会被数到 —— 多数,不漏)。本地脚本同名判据走服务里那一只凭据位走法(精确)。
 -- 从 7.135.0 回滚到 7.134.x 之前同用本判据:7.135.0 起 command hook 条目的插件选项(settings.hooks.<事件>[].hooks[].plugin.options)也封成封签,7.134.x 不认这一位,
 -- 续跑时那份 hooks 整只不采纳(其中的守卫不再拦)。本判据数任何凭据位上带封签的行,所以这一类也在候选里(超集)。
+-- 从 7.136.0 回滚到 7.135.x 之前同用本判据:7.136.0 起子进程的命令行(MCP stdio 传输与 command hook 条目的 command / args)也封成封签,带它们的行
+-- 盖第 3 代读法记号,7.135.x 对这样的行整行拒续跑(409 conflict.checkpoint_ctx_unsealable)。这一类同样在候选里(超集)。
 SELECT 'sealed-credentials-rollback' AS criterion, COUNT(*) AS hit_rows,
        COALESCE(GROUP_CONCAT(k.session_id ORDER BY k.created_at_ms DESC SEPARATOR ','), '') AS sessions
 FROM checkpoint k

package/scripts/drain-check.pg.sql

@@ -16,7 +16,7 @@
 --   workflow-park-holder    换钉 7.118.0 之前 / 从 7.118.0 回滚到 7.117.x 之前:此刻待批、且子会话被 workflow park 索引点名的卡(workflow 子代卡;见该段注)。
 --   parked-tool-lists       升级到 7.132.0 之前:停驻行记着子代工具天花板 / 冻结的父约束链 / Skill 卡的清单绑定(7.52 在认领前按规范拼写读它们)的**候选**(见该段注)。
 --   own-tool-lists-rollback 从 7.132.0 回滚到 7.131.x 之前:7.132.0 停驻、带 state.ownToolLists 的行(7.131.x 读不了)。
---   sealed-credentials-rollback 从 7.134.0 回滚到 7.133.x(或从 7.135.0 回滚到 7.134.x)之前:停驻、续跑上下文里提交体的凭据位上带封签的行(7.133.x 读不懂封签,续跑时把这些位当没有)的**候选**(见该段注)。
+--   sealed-credentials-rollback 从 7.134.0 回滚到 7.133.x(或从 7.135.0 回滚到 7.134.x、从 7.136.0 回滚到 7.135.x)之前:停驻、续跑上下文里提交体的凭据位上带封签的行(7.133.x 读不懂封签,续跑时把这些位当没有)的**候选**(见该段注)。
 --   permissions-allow-list  换钉 7.117.0 之前:停驻、提交体 settings.permissions.allow 是非空数组且读法记号不是当前的 "allow_layer"(无记号 = 名单时代;"statement" = 表态时代)。
 --   retired-mode-seed       换钉 7.113.0 之前:检查点的 inheritedGate 里仍带退役 mode-seed 成员。
 
@@ -131,6 +131,8 @@ WHERE k.status = 'pending'
 -- JSON 串值恰为这个格式词即数(封签只落在凭据位上;体里别处恰好写着这个词的串值也会被数到 —— 多数,不漏)。本地脚本同名判据走服务里那一只凭据位走法(精确)。
 -- 从 7.135.0 回滚到 7.134.x 之前同用本判据:7.135.0 起 command hook 条目的插件选项(settings.hooks.<事件>[].hooks[].plugin.options)也封成封签,7.134.x 不认这一位,
 -- 续跑时那份 hooks 整只不采纳(其中的守卫不再拦)。本判据数任何凭据位上带封签的行,所以这一类也在候选里(超集)。
+-- 从 7.136.0 回滚到 7.135.x 之前同用本判据:7.136.0 起子进程的命令行(MCP stdio 传输与 command hook 条目的 command / args)也封成封签,带它们的行
+-- 盖第 3 代读法记号,7.135.x 对这样的行整行拒续跑(409 conflict.checkpoint_ctx_unsealable)。这一类同样在候选里(超集)。
 SELECT 'sealed-credentials-rollback' AS criterion, count(*) AS hit_rows,
        coalesce(string_agg(k.session_id, ',' ORDER BY k.created_at_ms DESC), '') AS sessions
 FROM checkpoint k

package/skills/schedule.md

@@ -13,7 +13,7 @@ Parameters:
 
 - `prompt` (string, required): fully self-contained instructions for the future task. It runs unattended — inline every path, id, and acceptance criterion it needs; never reference "the file we discussed".
 - `schedule` (union, required) — pick the kind by intent:
-  - Recurring: `{ "kind": "cron", "expr": "M H DoM Mon DoW" }` — standard 5-field cron in the user's LOCAL timezone (a 6-field form with leading seconds is also accepted). `"0 9 * * *"` means 9am local; no timezone conversion needed.
+  - Recurring: `{ "kind": "cron", "expr": "M H DoM Mon DoW" }` — standard 5-field cron in the user's LOCAL timezone. There is no seconds field: a 6-field expression is rejected ("its leading seconds field is not supported — the resident scheduler fires on 5-field cron, so one minute is the finest granularity available."), so drop the leading field and retry. `"0 9 * * *"` means 9am local; no timezone conversion needed.
   - One-shot at a wall-clock time: `{ "kind": "at", "atMs": <epoch ms> }`.
   - One-shot after a delay: `{ "kind": "delay", "delaySec": <seconds> }`.
 - `label` (string, optional): short name. Also the dedup key — creating again with the same schedule+label upserts (idempotent), so use a stable label when updating a task instead of piling up duplicates.

package/wire-changes/server@7.104.0.json

@@ -0,0 +1,134 @@
+{
+  "repo": "server",
+  "version": "7.104.0",
+  "from": "v7.103.2",
+  "fromCommit": "ed4de0dbd34447a9f40b3ea8933982e222e845b8",
+  "to": "v7.104.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "capability",
+      "member": "sealedKey",
+      "text": "附录 B.1 能力位新增 `sealedKey`(谓词类 设施依赖)"
+    },
+    {
+      "id": "A2",
+      "source": "engineNotice",
+      "member": "session.records_skipped",
+      "text": "附录 D.3 engine_notice 码新增 `session.records_skipped`(detail `{ dropped, entriesKept, sessionId }` —— `dropped` = 这次回放 core 报的跳过条数;`entriesKept` = 打开成功后数出的幸存条目数(core 的**全部**条目型都算,会话头不算)。两个都是直接观察到的数,**不做算术**(不存在「总数」这个键);`entriesKept === 0` = 会话头在、条目一条没剩(上下文为空,这一轮照跑)。不带路径、行号、坏体形词(那些只进运维日志)。⚠️ **无 `runId`**(铸在会话店的打开函数里;归属看它落在哪条 run 的流 / 账本上))"
+    },
+    {
+      "id": "A3",
+      "source": "errorCode",
+      "member": "config.tool_contract_too_long",
+      "text": "附录 A.1 / A.1b 错误码新增 `config.tool_contract_too_long`(状态码 503)"
+    },
+    {
+      "id": "A4",
+      "source": "errorCode",
+      "member": "config.tool_name_too_long",
+      "text": "附录 A.1 / A.1b 错误码新增 `config.tool_name_too_long`(状态码 503)"
+    },
+    {
+      "id": "A5",
+      "source": "errorCode",
+      "member": "config.tool_roster_bound",
+      "text": "附录 A.1 / A.1b 错误码新增 `config.tool_roster_bound`(状态码 503)"
+    },
+    {
+      "id": "A6",
+      "source": "errorCode",
+      "member": "conflict.session_children_alive",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.session_children_alive`(状态码 409)"
+    },
+    {
+      "id": "A7",
+      "source": "errorCode",
+      "member": "corrupt_session",
+      "text": "附录 A.1 / A.1b 错误码新增 `corrupt_session`(状态码 500)"
+    },
+    {
+      "id": "A8",
+      "source": "errorCode",
+      "member": "rewind.capture_disabled",
+      "text": "附录 A.1 / A.1b 错误码新增 `rewind.capture_disabled`(状态码 422)"
+    },
+    {
+      "id": "A9",
+      "source": "errorCode",
+      "member": "rewind.store_unconfigured",
+      "text": "附录 A.1 / A.1b 错误码新增 `rewind.store_unconfigured`(状态码 409)"
+    },
+    {
+      "id": "A10",
+      "source": "wireFace.excluded",
+      "member": "wiring_manifest_operator.fileHistory",
+      "text": "投影面 wiring_manifest_operator 起投 core 键 fileHistory(从 excluded 撤出)"
+    },
+    {
+      "id": "A11",
+      "source": "wireFace.excluded",
+      "member": "wiring_manifest_tenant.fileHistory",
+      "text": "投影面 wiring_manifest_tenant 起投 core 键 fileHistory(从 excluded 撤出)"
+    }
+  ],
+  "registered": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "errorCode",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
+      ],
+      "added": [
+        "config.tool_contract_too_long",
+        "config.tool_name_too_long",
+        "config.tool_roster_bound",
+        "conflict.session_children_alive",
+        "corrupt_session",
+        "rewind.capture_disabled",
+        "rewind.store_unconfigured"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "capability",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#B.1"
+      ],
+      "added": [
+        "sealedKey"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "engineNotice",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#D.3"
+      ],
+      "added": [
+        "session.records_skipped"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    }
+  ],
+  "breaking": 0
+}

package/wire-changes/server@7.105.0.json

@@ -0,0 +1,53 @@
+{
+  "repo": "server",
+  "version": "7.105.0",
+  "from": "v7.104.0",
+  "fromCommit": "a99e8fb3006b80f447e1c8bf4874d66b609fb1bb",
+  "to": "v7.105.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "errorCode",
+      "member": "rules.legacy_tool_name",
+      "text": "附录 A.1 / A.1b 错误码新增 `rules.legacy_tool_name`(状态码 400)"
+    }
+  ],
+  "registered": [],
+  "removed": [
+    {
+      "id": "R1",
+      "source": "errorCode",
+      "member": "limit.retention_evicted",
+      "text": "附录 A.1 / A.1b 错误码删除 `limit.retention_evicted`(原状态码 416)"
+    }
+  ],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "errorCode",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
+      ],
+      "added": [
+        "rules.legacy_tool_name"
+      ],
+      "registered": [],
+      "removed": [
+        "limit.retention_evicted"
+      ],
+      "breaking": true
+    }
+  ],
+  "breaking": 1
+}