@sema-agent/server 7.136.0 → 7.138.0

package/dist/http/routes/runs.js

@@ -22,7 +22,7 @@ import { invalidJsonError, sendJson, sendError, sendHttpError, sseHeaders } from
 import { mintCancelledResult } from "../../run-cancel-context.js";
 import { acceptedInputKindOf } from "../../user-input-ledger.js";
 import { INJECTION_TIERS } from "../../trace/injection-tier.js";
-import { headerStr, gatedPrincipal, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
+import { headerStr, gatedPrincipal, explicitOperatorOk, sendPrincipalRefusal, runIdentityOf } from "../principal-gate.js";
 import { ActorAssertionWire } from "@sema-agent/settings-schema";
 import * as facts from "../../capability-facts.js";
 import { assertNever } from "../route-ctx.js";
@@ -222,11 +222,16 @@ export async function handleRuns(req, res, match, ctx) {
         const prepared = await prepareSpec(req, res, keyedBody);
         if (!prepared)
             return;
-        const resp = await createDurableRun(req, res, ctx, prepared, idem);
-        if (!resp)
+        try {
+            const resp = await createDurableRun(req, res, ctx, prepared, idem);
+            if (!resp)
+                return;
+            sendJson(res, resp.status, resp.body);
             return;
-        sendJson(res, resp.status, resp.body);
-        return;
+        }
+        finally {
+            prepared.peerLease.release();
+        }
     }
     if (match.decl.id === "run-detail" || match.decl.id === "run-events" || match.decl.id === "runs-by-idem") {
         const runs = facts.durableRuns(deps);
@@ -433,13 +438,12 @@ export async function handleRuns(req, res, match, ctx) {
         const text = body.text;
         const priority = body.priority;
         const steerIdemRaw = headerStr(req.headers["idempotency-key"]);
-        const steerInputId = steerIdemRaw ? `idem-${idemKeyOf(steerIdemRaw, idemCallerOf(req, ctx), "run").slice(0, 32)}` : undefined;
-        const messageId = steerInputId ?? uuidv7();
+        const messageId = steerIdemRaw ? `idem-${idemKeyOf(steerIdemRaw, idemCallerOf(req, ctx), "run").slice(0, 32)}` : uuidv7();
         const trusted = explicitOperatorOk(principal, deps.config);
         const steerInput = () => ({
             text,
             trusted,
-            ...(steerInputId !== undefined ? { inputId: steerInputId } : {}),
+            inputId: messageId,
             ...(priority !== undefined ? { priority } : {}),
         });
         try {
@@ -1603,6 +1607,7 @@ export async function createDurableRun(req, res, ctx, prepared, idem) {
             fleetScope: submitter ?? "default",
             elicitOwner: submitter ?? null,
             source,
+            identity: runIdentityOf(req, deps.config, prepared.auth?.principal ?? null),
         });
         return out.existing ? await replayOfExistingRun(out.existing, caller, "durable", deps, runStore) : out;
     });

package/dist/http/routes/session-sync.js

@@ -61,7 +61,15 @@ export async function handleSessionSync(req, res, match, ctx) {
                 const mayTouch = face !== undefined && (scope.fleetWide || face.owner === scope.gateOwner || legacyUnownedSessionOk(deps.config, sessionCallerOf(req, deps), await sessionOwnerCellOf(sessionStorage, sessionId, face.owner)));
                 return { face, mayPull: mayTouch, mayPush: face === undefined || mayTouch };
             };
-            const gate = await judgeSessionGate();
+            let gate;
+            try {
+                gate = await judgeSessionGate();
+            }
+            catch (e) {
+                if (isPullPort(match.decl.id) && sendPullUnreadable(req, res, deps.logger, e))
+                    return;
+                throw e;
+            }
             const gateFace = gate.face;
             const owner = gateFace === undefined ? undefined : gateFace.owner;
             const sendSessionAbsent = () => sendError(res, 404, "not_found.session", SESSION_NOT_FOUND_MESSAGE);
@@ -586,6 +594,21 @@ export async function handleSessionSync(req, res, match, ctx) {
         }
     }
 }
+function isPullPort(id) {
+    switch (id) {
+        case "session-sync-manifest":
+        case "session-sync-entries":
+        case "session-sync-history-blob":
+            return true;
+        case "session-sync-plan":
+        case "session-sync-import":
+        case "session-sync-import-entries":
+        case "session-sync-blob-put":
+            return false;
+        default:
+            return assertNever(id);
+    }
+}
 function sendPullUnreadable(req, res, logger, e) {
     if (e instanceof FileHistoryUnreadableError) {
         const permanence = e.failure.permanence;
@@ -593,11 +616,24 @@ function sendPullUnreadable(req, res, logger, e) {
         sendError(res, 503, "state.file_history_unreadable", `this session's file history cannot be read whole (${e.failure.code}), so nothing was exported — ${advice}`, permanence === undefined ? undefined : { permanence });
         return true;
     }
-    if (storeFaultClassOf(e) !== "connection")
-        return false;
-    logRequestError(logger, req, e);
-    sendError(res, 503, "state.file_history_unreadable", "this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later", { permanence: "transient" });
-    return true;
+    const fault = storeFaultClassOf(e);
+    switch (fault) {
+        case "connection":
+            logRequestError(logger, req, e);
+            sendError(res, 503, "state.file_history_unreadable", "this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later", { permanence: "transient" });
+            return true;
+        case "deployment":
+            logRequestError(logger, req, e);
+            sendError(res, 503, "state.file_history_unreadable", "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store", { permanence: "terminal" });
+            return true;
+        case "corrupt":
+        case "unclassified":
+            return false;
+        default: {
+            const unhandled = fault;
+            throw new Error(`store fault class without a session-sync pull-port answer: ${String(unhandled)}`);
+        }
+    }
 }
 function sendMissingBlob(res) {
     sendError(res, 422, "missing_blob", "missing blob; PUT all referenced blobs before import");

package/dist/http/routes/sessions.js

@@ -3,6 +3,7 @@ import { a2aForScenario, mcpForScenario } from "../../web-admin-client/facade.js
 import { HttpError, isUuidShape, legacyUnownedSessionOk, sessionOwnerCellOf } from "../../security.js";
 import { windowMessages, truncateMessageBlobs, redactSessionViewForRead } from "../../audit.js";
 import { redactSecrets } from "../../trace/redact.js";
+import { seatText } from "../../trace/exit-seat.js";
 import { recordFailOpen } from "../../observability/fail-open.js";
 import { MCP_DIAL_DEADLINE_MS, raceDeadline } from "../mcp-dial-deadline.js";
 import { sentMemoryComplianceFailure } from "../memory-compliance-failure-reply.js";
@@ -18,6 +19,7 @@ import { rosterAgentId } from "./agents-roster.js";
 import { projectSessionListRow } from "./sessions-list.js";
 import { readSessionRowPatch } from "../../session-row.js";
 import { buildBoundedToolNames } from "../../panel-tool-names.js";
+import { projectMcpAuthorization } from "../../mcp-authorization-face.js";
 const MCP_STATUS_TTL_MS = 5_000;
 const A2A_STATUS_TTL_MS = 5_000;
 const A2A_MATERIALIZE_TIMEOUT_MS = 10_000;
@@ -170,7 +172,7 @@ export async function handleSessions(req, res, match, ctx) {
                     mcpStatusCache.clear();
                 const panel = (async () => {
                     const stopDial = new AbortController();
-                    const matP = materializeMcpTools(specs, principal, undefined, undefined, undefined, deps.mcpRevocations, undefined, undefined, undefined, stopDial.signal);
+                    const matP = materializeMcpTools(specs, principal, undefined, undefined, undefined, deps.mcpRevocations, undefined, undefined, undefined, stopDial.signal, undefined, deps.peerDesk.seat.answer);
                     const mat = await raceDeadline(matP, MCP_DIAL_DEADLINE_MS).catch(() => null);
                     if (!mat) {
                         stopDial.abort();
@@ -185,7 +187,8 @@ export async function handleSessions(req, res, match, ctx) {
                                 status: s.status,
                                 ...(s.serverInfo ? { serverInfo: s.serverInfo } : {}),
                                 ...(s.toolNames ? { toolNames: s.toolNames } : {}),
-                                ...(s.error ? { error: redactSecrets(String(s.error)).slice(0, 200) } : {}),
+                                ...((a) => (a !== undefined ? { authorization: a } : {}))(projectMcpAuthorization(s.authorization)),
+                                ...(s.error ? { error: seatText("mcp-remote-text", String(s.error)) } : {}),
                             })),
                         };
                     }
@@ -218,7 +221,7 @@ export async function handleSessions(req, res, match, ctx) {
                 if (a2aStatusCache.size > 1024)
                     a2aStatusCache.clear();
                 const panel = (async () => {
-                    const matP = materializeA2aTools(specs, principal);
+                    const matP = materializeA2aTools(specs, principal, undefined, undefined, deps.peerDesk.seat.answer);
                     let timer;
                     const mat = await Promise.race([matP.catch(() => null), new Promise((r) => { timer = setTimeout(() => r(null), A2A_MATERIALIZE_TIMEOUT_MS); })]);
                     if (timer)

package/dist/http/routes/side-query.js

@@ -95,9 +95,8 @@ export async function handleSideQuery(req, res, match, ctx) {
                 };
                 try {
                     const result = await deps.sideQuery(spec);
-                    const rr = result;
-                    const modelId = typeof rr.model === "string" ? rr.model : "unknown";
-                    deps.sideQueryAccounting?.(principal, { model: modelId, usage: rr.usage });
+                    const modelId = typeof result.model === "string" ? result.model : "unknown";
+                    deps.sideQueryAccounting?.(principal, { model: modelId, usage: result.usage, account: result.account });
                     deps.metrics?.inc?.("side_query_total", { result: "ok" });
                     if (!res.writableEnded)
                         sendJson(res, 200, projectSideQueryResult(result));