@sema-agent/server 7.136.0 → 7.138.0

package/dist/trace/project.js

@@ -10,7 +10,10 @@ import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceOrAbsent } from "./sema-provenance.js";
 import { resupplyFields, terminalFrameFacetFields } from "./task-notification-facets.js";
 import { dropProjectedFace } from "./projection-drop.js";
+import { extensionAnswererOf, extensionRequesterOf, toolInputRewriteOf } from "./extension-call-face.js";
 import { projectByTable } from "./projection-table.js";
+import { durableRowIdentity } from "../checkpoint-identity.js";
+import { projectMcpAuthorization } from "../mcp-authorization-face.js";
 export async function appendModelUsageDelta(append, modelUsage, taskId) {
     const delta = modelUsage?.drain(taskId);
     if (delta) {
@@ -94,13 +97,18 @@ function identityKey(v) {
 export function modelTextEventData(ev) {
     return { text: ev.text, ...(ev.eventId ? { eventId: ev.eventId } : {}) };
 }
+function toolArgsOnWire(args) {
+    return redactDeep(args);
+}
 export function toolStartEventData(ev) {
+    const requestedBy = extensionRequesterOf(ev.requestedBy, "tool_start");
     return {
         toolCallId: ev.toolCallId,
         toolName: ev.toolName,
         ...(ev.label !== undefined ? { label: ev.label } : {}),
-        args: redactDeep(ev.args),
+        args: toolArgsOnWire(ev.args),
         ...(ev.recovered === true ? { recovered: true } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
         ...identityFields(ev),
     };
 }
@@ -165,6 +173,7 @@ function screenedGateOrThrow(v) {
                 ...(d.mode === undefined ? {} : { mode: d.mode }),
                 ...(d.askClass === undefined ? {} : { askClass: d.askClass }),
                 ...(d.classes === undefined ? {} : { classes: [...d.classes] }),
+                ...(d.extension === undefined ? {} : { extension: seatText("trace-frame-text", d.extension) }),
             }
             : { kind: "allowed", ...(classifier === undefined ? {} : { classifier }), ...(released === undefined ? {} : { released }), ...(clearedBy === undefined ? {} : { clearedBy }) },
         ...(settlement === undefined ? {} : { settlement }),
@@ -224,6 +233,9 @@ export function reasoningEndEventData(ev) {
 }
 export function toolEndEventData(ev) {
     const gate = ev.gate === undefined ? undefined : screenedGate(ev.gate);
+    const answeredBy = extensionAnswererOf(ev.answeredBy, "tool_end");
+    const requestedBy = extensionRequesterOf(ev.requestedBy, "tool_end");
+    const rewrite = toolInputRewriteOf(ev.rewrite, "tool_end", toolArgsOnWire);
     return {
         toolCallId: ev.toolCallId,
         toolName: ev.toolName,
@@ -239,6 +251,9 @@ export function toolEndEventData(ev) {
         ...(typeof ev.gatedCallId === "string" && ev.gatedCallId !== "" ? { gatedCallId: ev.gatedCallId } : {}),
         ...(typeof ev.wireName === "string" && ev.wireName !== "" ? { wireName: ev.wireName } : {}),
         ...(ev.notExecuted === true ? { notExecuted: true } : {}),
+        ...(answeredBy !== undefined ? { answeredBy } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
+        ...(rewrite !== undefined ? { rewrite } : {}),
         ...identityFields(ev),
     };
 }
@@ -292,6 +307,16 @@ export function taskProgressEventData(ev) {
         ...identityFields(ev),
     };
 }
+export function parkEventData(result, reopened) {
+    const r = (result ?? {});
+    const paused = r.terminal?.kind === "paused" ? r.terminal : undefined;
+    return {
+        gate: paused !== undefined ? paused.gate : null,
+        ...(typeof r.toolCallId === "string" ? { toolCallId: r.toolCallId } : {}),
+        ...(paused !== undefined ? durableRowIdentity("run-events-park", paused.checkpointId, paused.token) : {}),
+        ...(reopened !== undefined ? { reopened } : {}),
+    };
+}
 export function taskStartedEventData(ev) {
     return {
         taskId: ev.taskId,
@@ -445,6 +470,7 @@ export function projectWiringManifestMcpRows(mcpIn) {
             ...(str(e.errorCode) !== undefined ? { errorCode: e.errorCode } : {}),
             ...(typeof e.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(e.delivered) ? { delivered: e.delivered } : {}),
             ...(num(e.httpStatus) !== undefined ? { httpStatus: e.httpStatus } : {}),
+            ...((a) => (a !== undefined ? { authorization: a } : {}))(projectMcpAuthorization(e.authorization)),
             ...(liveness !== undefined ? { liveness } : {}),
         });
     }
@@ -460,7 +486,7 @@ export function toolRosterDeltaEventData(ev) {
 export const WIRING_SESSION_RULES_DISPOSITIONS = {
     childrenReadLive: { forward: (raw) => typeof raw === "boolean" },
 };
-export function wiringManifestEventData(ev, instructions) {
+export function wiringManifestEventData(ev, minted) {
     const str = (v) => (typeof v === "string" && v.length > 0 ? v : undefined);
     const bool = (v) => (typeof v === "boolean" ? v : undefined);
     const num = (v) => (typeof v === "number" && Number.isFinite(v) ? v : undefined);
@@ -559,10 +585,11 @@ export function wiringManifestEventData(ev, instructions) {
                 dropProjectedFace("wiring_manifest.mods[] row is missing name/seat/tier");
                 continue;
             }
+            const provenance = e.provenance === undefined ? undefined : (registrantText(e.provenance) ?? dropProjectedFace("wiring_manifest.mods[].provenance is not a string"));
             const refusedBy = registrantText(e.refusedBy);
             const reason = registrantText(e.reason);
             if (refusedBy !== undefined && reason !== undefined) {
-                rows.push({ name, seat, tier, refusedBy, reason });
+                rows.push({ name, seat, tier, ...(provenance !== undefined ? { provenance } : {}), refusedBy, reason });
                 continue;
             }
             const events = strList(e.events);
@@ -586,7 +613,7 @@ export function wiringManifestEventData(ev, instructions) {
                         return [{ registration, cause, reason: why }];
                     })
                     : dropProjectedFace("wiring_manifest.mods[].skipped is not an array");
-            rows.push({ name, seat, tier, events, ...(observe !== undefined ? { observe } : {}), ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}) });
+            rows.push({ name, seat, tier, ...(provenance !== undefined ? { provenance } : {}), events, ...(observe !== undefined ? { observe } : {}), ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}) });
         }
         return rows.length > 0 ? rows : undefined;
     })();
@@ -695,12 +722,15 @@ export function wiringManifestEventData(ev, instructions) {
         ...(lsp !== undefined ? { lsp } : {}),
         ...(hands !== undefined ? { hands } : {}),
         ...(writeProtection !== undefined ? { writeProtection } : {}),
-        ...(instructions !== undefined ? { instructions: { selected: [...instructions.selected] } } : {}),
+        ...(minted.instructions !== undefined ? { instructions: { selected: [...minted.instructions.selected] } } : {}),
+        ...(minted.skills !== undefined && typeof ev.parentToolCallId !== "string"
+            ? { skills: minted.skills.map((e) => ({ name: e.name, description: sanitizeWireText(e.description), source: e.source })) }
+            : {}),
         ...identityFields(ev),
     };
 }
-export function wiringManifestOperatorEventData(ev, instructions) {
-    const tenant = wiringManifestEventData(ev, instructions);
+export function wiringManifestOperatorEventData(ev, minted) {
+    const tenant = wiringManifestEventData(ev, minted);
     const str = (v) => (typeof v === "string" && v.length > 0 ? v : undefined);
     const bool = (v) => (typeof v === "boolean" ? v : undefined);
     const sec = (v) => (typeof v === "object" && v !== null && !Array.isArray(v) ? { ...v } : undefined);
@@ -744,8 +774,8 @@ export function wiringManifestOperatorEventData(ev, instructions) {
         ...(str(m.configFingerprint) !== undefined ? { configFingerprint: m.configFingerprint } : {}),
     };
 }
-export function wiringManifestFaceEventData(ev, operatorFace, instructions) {
-    return operatorFace ? wiringManifestOperatorEventData(ev, instructions) : wiringManifestEventData(ev, instructions);
+export function wiringManifestFaceEventData(ev, operatorFace, minted) {
+    return operatorFace ? wiringManifestOperatorEventData(ev, minted) : wiringManifestEventData(ev, minted);
 }
 export function humanInputEventData(ev) {
     const str = (v) => (typeof v === "string" && v.length > 0 ? v : undefined);
@@ -790,6 +820,8 @@ export function brainStatusEventData(ev) {
         ...(num(ev.retryAtMs) ? { retryAtMs: ev.retryAtMs } : {}),
         ...(num(ev.elapsedMs) ? { elapsedMs: ev.elapsedMs } : {}),
         ...(num(ev.timeoutMs) ? { timeoutMs: ev.timeoutMs } : {}),
+        ...(typeof ev.waitSegment === "string" && ev.waitSegment.length > 0 ? { waitSegment: ev.waitSegment } : {}),
+        ...(num(ev.sleptMs) ? { sleptMs: ev.sleptMs } : {}),
         ...(num(ev.errorStatus) ? { errorStatus: ev.errorStatus } : {}),
         ...(typeof ev.errClass === "string" && ev.errClass.length > 0 ? { errClass: ev.errClass } : {}),
         ...(typeof ev.providerCondition === "string" && ev.providerCondition.length > 0 ? { providerCondition: ev.providerCondition } : {}),
@@ -915,17 +947,22 @@ export function toContractTokens(usage, usageMissing) {
     };
 }
 export function toolCallFieldsOf(d) {
+    const requestedBy = extensionRequesterOf(d.requestedBy, "tool_start row");
     return {
         id: String(d.toolCallId ?? ""),
         name: String(d.toolName ?? ""),
         ...(typeof d.label === "string" ? { label: d.label } : {}),
         input: d.args,
         ...(d.recovered === true ? { recovered: true } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
         ...identityFields(d),
     };
 }
 export function toolResultFieldsOf(d) {
     const gate = d.gate === undefined ? undefined : screenedGate(d.gate);
+    const answeredBy = extensionAnswererOf(d.answeredBy, "tool_end row");
+    const requestedBy = extensionRequesterOf(d.requestedBy, "tool_end row");
+    const rewrite = toolInputRewriteOf(d.rewrite, "tool_end row", toolArgsOnWire);
     return {
         callId: String(d.toolCallId ?? ""),
         ...(typeof d.label === "string" ? { label: d.label } : {}),
@@ -938,6 +975,9 @@ export function toolResultFieldsOf(d) {
         ...(typeof d.gatedCallId === "string" && d.gatedCallId !== "" ? { gatedCallId: d.gatedCallId } : {}),
         ...(typeof d.wireName === "string" && d.wireName !== "" ? { wireName: d.wireName } : {}),
         ...(d.notExecuted === true ? { notExecuted: true } : {}),
+        ...(answeredBy !== undefined ? { answeredBy } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
+        ...(rewrite !== undefined ? { rewrite } : {}),
         ...identityFields(d),
     };
 }

package/dist/trace/redact.d.ts

@@ -126,19 +126,31 @@ export declare function setRedactionObserver(fn: ((patternLabel: string, count:
  */
 export type RedactionLayout = "multi-line" | "single-line";
 /**
- * 一段文本相对「它所在的那一整段」的**范围**(闭集两词;调用方对自己交来的文本的陈述,不是旋钮):
+ * 一段文本相对「它所在的那一整段」的**范围**(闭集两形;调用方对自己交来的文本的陈述,不是旋钮):
  *  · `whole`:这就是全部。所有「见收尾才认」的结构臂走到末尾仍没见收尾 ⇒ 这一起点不成 —— 判据 = 声明正则(`test/trace-redact.test.ts` 的真值表钉着扫描器与声明正则逐跨度等价);
- *  · `head`:这只是更长文本的头一段(出口座对有界行只扫一段头,见 `trace/exit-seat.ts` 的扫描窗)。**一条律:结构的判定走到这一段末尾还没走完 ⇒ 判定在更远处(未决)⇒ 从结构起点遮到这一段的末尾**
- *    (fail-closed:起点在、判定要看窗外,明文不许出门)。未决只有两种,同读一条臂:
+ *  · `head`:这只是更长文本的头一段(出口座对有界行只扫一段头,见 `trace/exit-seat.ts` 的扫描窗),并带 **`emitEnd`** —— 调用方真会往外交的那一段的终点(**原文下标**;出口座的出门区终点,
+ *    其后的窗内余量只喂脱敏器、不出门)。窗几何只有调用方知道,脱敏器不猜、不抄第二份。**一条律,所有臂同读:结构的判定走到这一段末尾还没走完 ⇒ 判定在更远处(未决)⇒ 从结构起点遮到这一段的末尾
+ *    (fail-closed:起点在、判定要看窗外,明文不许出门);而未决尾只在它的起点 `< emitEnd` 时才算** —— 起点在余量里的,对出门字节零作用(出门的至多到 `emitEnd`;余量只喂脱敏器、不出门,
+ *    其后的原文也不再被扫):不产跨度、不记 `redactions_applied_total`、不参与解重叠、也不参与档位盖章(候选不存在,所以不盖住也不截断别的候选)。取舍在池收尾的一处({@link armPool}:收集之后、解重叠之前;读的是臂收上来的原始起点,经 {@link StartReach} 问回原文下标),
+ *    臂自己只管把未决那一支标出来({@link SecretSpan.undecided})。
+ *    未决只有两种,同读一条臂:
  *    ① **收尾没见到** —— JSON 串值(要收尾引号)· URL authority(要 `@`;authority 一路走到末尾没有 `/` / 空白,里面有没有 `@` 都读成还在 userinfo 里)·
  *    SSH2 / PEM 栅栏(要收尾栅栏)· 带引号的强锚值(要收尾引号)· PuTTY 容器(终止符之后到末尾没见下一个版本头);
  *    ② **起头没读完**(起头本身不设长度上界,起点可以离末尾很远)—— PEM 起始栅栏行(标签之后到末尾一枚 `-----` 都没有,已读到的部分也还可能是合法栅栏行的前缀)· PuTTY 版本头(`<数字串>: ` 没写完)·
- *    无头 .ppk 字段(`Private-Lines: <数字串>` 之后下一个体行的判定没走完)。
+ *    无头 .ppk 字段(`Private-Lines: <数字串>` 之后下一个体行的判定没走完)· 词法关键字臂(`Bearer` / `Basic` / `token`)的起头(完整关键字之后跟着不设长度上界的分隔段、值被窗尾切在窗外,见 {@link undecidedKeywordStart};
+ *    关键字写了一半 / 关键字紧贴值的起点离窗尾至多几十个字符,不另立一支)。
  *    PuTTY 容器臂的「无合格终止 ⇒ 吃到输入末尾」本来就是这一律在整段文本上的形,两种范围都吃到末尾;区别只在留痕 —— 整段读法上它是兜底(记 `server.redact.ppk-eat-to-end`),
  *    head 读法上终止可能在更远处,是未决(不记)。**未决一律不记 fail-open**:它是这一律的正常读数,不是回退;
- *    由裸形 / 关键字 / 查询参数 / 环境变量赋值等**不靠收尾**的臂认出的凭据(值到字符类的自然右界)两种范围读法逐字相同。
+ *    由裸形 / 关键字 / 查询参数 / 环境变量赋值等**不靠收尾**的臂认出的凭据(值到字符类的自然右界)两种范围读法逐字相同;关键字臂只多上面 ② 里那一条未决尾。
  */
-export type RedactionExtent = "whole" | "head";
+export type RedactionExtent = {
+    readonly kind: "whole";
+} | {
+    readonly kind: "head";
+    readonly emitEnd: number;
+};
+/** 整段读法(`RedactionExtent` 的 `whole` 形;不带数据,一个值)。 */
+export declare const WHOLE_EXTENT: RedactionExtent;
 /**
  * 🔴 **出口座扫描窗的单位 = 读法单元,不是原始码元**(修复验证腿 high ①):从 `from`(缺省 0)起数 `units` 个**读法单元**(各读法里最少的那一读 —— 删得最多的 —— 剩下的码元),
  * 返回原文里的终点(含 `≥ units` 个读法单元的前缀,至多是最短那一个的两倍;文本不够长 ⇒ `text.length`)。格式字符 / 控制字符 / 转义写法的不可见字符不计数:它们在读法格里被删,