@sema-agent/server 7.139.0 → 7.141.0

package/dist/web-admin-client/http-client.js

@@ -10,7 +10,7 @@ export async function fetchEffective(center, etag, fetchImpl, worker) {
     if (!res.ok)
         throw new Error(`web-admin HTTP ${res.status}`);
     const warnings = [];
-    const { body, retiredDomains } = separateRetiredDomains(await res.json());
+    const { body, refusedDocuments } = separateRetiredDomains(await res.json());
     const wire = readEffectiveWire(body, (w) => warnings.push(w));
     const { domainErrors, droppedEntries, droppedCatalogEntries, unreadFiles } = splitFoldedReadWarnings(warnings, "center");
     const effective = withDroppedCatalogEntries(wire, droppedCatalogEntries);
@@ -22,7 +22,7 @@ export async function fetchEffective(center, etag, fetchImpl, worker) {
         ...(domainErrors.length > 0 ? { domainErrors } : {}),
         ...(droppedEntries.length > 0 ? { droppedEntries } : {}),
         ...(unreadFiles.length > 0 ? { unreadFiles } : {}),
-        ...(retiredDomains.length > 0 ? { retiredDomains: [...retiredDomains] } : {}),
+        ...(refusedDocuments.length > 0 ? { refusedDocuments: [...refusedDocuments] } : {}),
     };
 }
 export async function fetchPrincipalCaps(center, principal, etag, fetchImpl, worker) {

package/dist/web-admin-client/read-warnings.d.ts

@@ -25,29 +25,19 @@
  * 留在条目上,只有颗粒更粗的失效才动候选。
  */
 import { z } from "zod";
-import { type DroppedEntryIdentity, type DroppedEntryReasonCode, type EffectiveReadWarning, type RetiredDomainName } from "@sema-agent/settings-schema";
-/**
- * 退役域的一条**发现**(两条读腿同形)。读腿只把契约包的墓碑(`RetiredDomainError`)换成数据交出去 —— 判决只在候选判官
- * (`candidate-gate.ts` 的 `judgeConfigCandidate`,成因 `retired_domain`):与域判形失败同一条回落链(候选 → 盘上 LKG → env)、同一行
- * `config_candidate_rejected`、刷新拍同形(拍跑完,候选被判拒是结论)。拉取层的抛只剩 I/O 与载荷形(不是一份 effective)两种。
- * `error` = 契约包铸的整句(墓碑表那一行:退役版本、事实今天住哪、一次性迁移 id)—— 模板句,不含任何配置值,所以不过 `redactConfigError`
- * (那道脱敏把引号段换成指纹,会把句中点名的域名换掉)。
- */
-export type RetiredDomainFinding = {
-    readonly domain: RetiredDomainName;
-    readonly error: string;
-    readonly migration: string;
-};
-/** 墓碑 → 发现;不是墓碑 ⇒ `undefined`(调用方照原样抛)。两条读腿的唯一换装点。 */
-export declare function retiredDomainFindingOf(e: unknown): RetiredDomainFinding | undefined;
+import { type ConfigDocumentRefusal, type DroppedEntryIdentity, type DroppedEntryReasonCode, type EffectiveReadWarning } from "@sema-agent/settings-schema";
 /**
  * 远端读腿在过契约读腿(`readEffectiveWire`)**之前**把退役域键分出去:wire 体上每个退役域键过契约的同一只墓碑(`refuseRetiredDomain`)——
- * 带事实 ⇒ 一条发现、这一键从体上拿掉(其余域照读、版本照读,判官整拒这份候选);缺席 / `{}` ⇒ 不理会(契约读腿自己丢 `{}`)。
+ * 带事实 ⇒ 一份被拒文档(契约的类型 `ConfigDocumentRefusal` 的墓碑臂:`document` = 退役域名,`reason: "retired_domain"`,`error` / `migration` 取
+ * `RetiredDomainError` 的同名字段)、这一键从体上拿掉(其余域照读、版本照读,判官整拒这份候选);缺席 / `{}` ⇒ 不理会(契约读腿自己丢 `{}`)。
  * 体不是对象 ⇒ 原样交回、不判(载荷形错,契约读腿抛)。墓碑判据只在契约包,这里只分键。
+ * 被拒文档是两条读腿同形的发现(判决只在候选判官 `candidate-gate.ts` 的 `judgeConfigCandidate`,成因词 = 发现自带的 `reason`):本地腿的被拒文档是契约单读口
+ * `FileConfigStore.read()` 那一读的拒单原样(`config-provider.ts`),wire 上没有文件层,只有这一种墓碑。`error` 本模块不脱敏(与折叠产物同律):各腿在自己的产出边界上过
+ * `redactSecrets` 兜底、不过 `redactConfigError`(句子不含配置值;引号段读法会把句中点名的域名换成指纹)。
  */
 export declare function separateRetiredDomains(body: unknown): {
     readonly body: unknown;
-    readonly retiredDomains: readonly RetiredDomainFinding[];
+    readonly refusedDocuments: readonly ConfigDocumentRefusal[];
 };
 /** 折叠产物:`scope` 决定消费方做什么 —— `"domain"` 进候选门(`domainErrors`),`"entry"` 进逐条丢弃面(`droppedEntries`),
  *  `"unread"` 进读腿不读的文件面(`unreadFiles`;点名不判拒)。 */

package/dist/web-admin-client/read-warnings.js

@@ -1,26 +1,22 @@
 import { z } from "zod";
 import { DROPPED_ENTRY_REASON_CODES, ModelRole, RETIRED_DOMAINS, RetiredDomainError, formatConfigPath, isDisclosableIdentity, isRetiredDomainName, refuseRetiredDomain, renderQuotedSentence, } from "@sema-agent/settings-schema";
-export function retiredDomainFindingOf(e) {
-    return e instanceof RetiredDomainError ? { domain: e.domain, error: e.message, migration: e.migration } : undefined;
-}
 export function separateRetiredDomains(body) {
     if (body === null || typeof body !== "object" || Array.isArray(body))
-        return { body, retiredDomains: [] };
-    const findings = [];
+        return { body, refusedDocuments: [] };
+    const refused = [];
     const rest = { ...body };
     for (const domain of Object.keys(RETIRED_DOMAINS).filter(isRetiredDomainName)) {
         try {
             refuseRetiredDomain(domain, rest[domain]);
         }
         catch (e) {
-            const finding = retiredDomainFindingOf(e);
-            if (finding === undefined)
+            if (!(e instanceof RetiredDomainError))
                 throw e;
-            findings.push(finding);
+            refused.push({ document: e.domain, reason: "retired_domain", error: e.message, migration: e.migration });
             delete rest[domain];
         }
     }
-    return findings.length === 0 ? { body, retiredDomains: [] } : { body: rest, retiredDomains: findings };
+    return refused.length === 0 ? { body, refusedDocuments: [] } : { body: rest, refusedDocuments: refused };
 }
 export function buildUnreadConfigKeyFields(k, dir) {
     return {

package/docs/DEVICE-EXECUTOR-PROTOCOL.md

@@ -20,9 +20,10 @@ dials the device, so the device needs no inbound port, no public address and no
 (this deployment has no device lane) or an object `{ enabled: true, protocolVersion, maxInflightPerDevice,
 wsPath, management, relayUrl? }`. Read `wsPath` from there rather than hardcoding it: the path is part of the wire
 contract and reading it means a future path change is not a cross-repo break. `relayUrl` (server 7.137.0+) is present
-only when the operator declared one (`DEVICE_RELAY_URL`): the engine sits behind a relay or gateway and the device
+only when the operator declared a relay URL (`DEVICE_RELAY_URL`): the engine sits behind a relay or gateway and the device
 must dial that absolute `ws://` / `wss://` URL verbatim instead of the engine's own address — do not rebuild it from
-the engine address and `wsPath`. Absent ⇒ dial the engine's own address at `wsPath`, as before. `protocolVersion` tells you
+the engine address and `wsPath`. Absent ⇒ dial the engine's own address at `wsPath`, as before (the operator declared
+`DEVICE_RELAY_URL=none`; a device-lane server does not start without one of the two declarations). `protocolVersion` tells you
 which protocol **revision** the server speaks before you spend a handshake finding out (§2.1: the revision decides
 which `errorCode` words the server accepts from you).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.139.0",
+  "version": "7.141.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -70,7 +70,7 @@
   },
   "dependencies": {
     "@sema-agent/core": "7.60.0",
-    "@sema-agent/settings-schema": "15.1.0",
+    "@sema-agent/settings-schema": "16.0.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",

package/wire-changes/server@7.140.0.json

@@ -0,0 +1,184 @@
+{
+  "repo": "server",
+  "version": "7.140.0",
+  "from": "v7.139.0",
+  "fromCommit": "c00fd6fb591f29cbd4435b9d0af52b4a952dfb95",
+  "to": "v7.140.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts",
+    "src/trace/self-minted-wire.ts",
+    "node_modules/@sema-agent/core/wire-changes"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "errorCode",
+      "member": "config.read_deny_floor_unkept",
+      "text": "附录 A.1 / A.1b 错误码新增 `config.read_deny_floor_unkept`(状态码 409)"
+    },
+    {
+      "id": "A2",
+      "source": "errorCode",
+      "member": "memory.erasure_store_unjudged",
+      "text": "附录 A.1 / A.1b 错误码新增 `memory.erasure_store_unjudged`(状态码 409)"
+    },
+    {
+      "id": "A3",
+      "source": "errorCode",
+      "member": "request.memory_layer",
+      "text": "附录 A.1 / A.1b 错误码新增 `request.memory_layer`(状态码 400)"
+    },
+    {
+      "id": "A4",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/memory/entries/:entryId/provenance|POST /v1/memory/erase|GET /v1/memory/origin/clearances|POST /v1/memory/origin/entries/:entryId/clear#layer_unaddressed_two_stores(不点名层的条目 id / 店级账本请求,本部署点名的层分住两只店;体 request.memory_layer)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/memory/entries/:entryId/provenance|POST /v1/memory/erase|GET /v1/memory/origin/clearances|POST /v1/memory/origin/entries/:entryId/clear#layer_unaddressed_two_stores(不点名层的条目 id / 店级账本请求,本部署点名的层分住两只店;体 request.memory_layer)`(属性 400;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A5",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#erasure_store_unjudged(抹除落到部署的店之外的那只店:点名的层住在个人挂载上,或按会话抹除而这只会话在另一只店有贡献 / 那只店的账读不出;体 memory.erasure_store_unjudged,什么都没删)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#erasure_store_unjudged(抹除落到部署的店之外的那只店:点名的层住在个人挂载上,或按会话抹除而这只会话在另一只店有贡献 / 那只店的账读不出;体 memory.erasure_store_unjudged,什么都没删)`(属性 409;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A6",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external|POST /v1/memory/erase#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external|POST /v1/memory/erase#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)`(属性 400;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A7",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export|POST /v1/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export|POST /v1/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)`(属性 400;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A8",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "GET /v1/memory/entries/:entryId/provenance#query.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `GET /v1/memory/entries/:entryId/provenance#query.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A9",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "GET /v1/memory/origin/clearances#query.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `GET /v1/memory/origin/clearances#query.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A10",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "GET /v1/sessions/:id/memory-status#query.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `GET /v1/sessions/:id/memory-status#query.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;absent ⇒ every store of this deployment, folded;cache keyed by (session, store control plane);since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A11",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "POST /v1/memory/origin/entries/:entryId/clear#body.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `POST /v1/memory/origin/entries/:entryId/clear#body.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;not passed to the engine;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A12",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "POST /v1/sessions/:id/memory/erase#body.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `POST /v1/sessions/:id/memory/erase#body.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;absent ⇒ the deployment's store;selector still minted from the path;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A13",
+      "source": "selfMinted.sessionMemoryEraseStatus",
+      "member": "memory.erasure_store_unjudged",
+      "text": "自铸 POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态) 新增 `memory.erasure_store_unjudged`(属性 409;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A14",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)`(属性 fold-across-deployment-stores(sum|max|any-record|absent-if-any-unreadable);one-store⇒identity;since 7.140.0 = 本版新上 wire)"
+    }
+  ],
+  "registered": [],
+  "excluded": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "errorCode",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
+      ],
+      "added": [
+        "config.read_deny_floor_unkept",
+        "memory.erasure_store_unjudged",
+        "request.memory_layer"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.endpointFaceStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#endpointFaceStatus"
+      ],
+      "added": [
+        "GET /v1/memory/entries/:entryId/provenance|POST /v1/memory/erase|GET /v1/memory/origin/clearances|POST /v1/memory/origin/entries/:entryId/clear#layer_unaddressed_two_stores(不点名层的条目 id / 店级账本请求,本部署点名的层分住两只店;体 request.memory_layer)",
+        "POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#erasure_store_unjudged(抹除落到部署的店之外的那只店:点名的层住在个人挂载上,或按会话抹除而这只会话在另一只店有贡献 / 那只店的账读不出;体 memory.erasure_store_unjudged,什么都没删)",
+        "POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external|POST /v1/memory/erase#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)",
+        "记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export|POST /v1/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.memoryLayerSeatKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#memoryLayerSeatKey"
+      ],
+      "added": [
+        "GET /v1/memory/entries/:entryId/provenance#query.scope",
+        "GET /v1/memory/origin/clearances#query.scope",
+        "GET /v1/sessions/:id/memory-status#query.scope",
+        "POST /v1/memory/origin/entries/:entryId/clear#body.scope",
+        "POST /v1/sessions/:id/memory/erase#body.scope"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionMemoryEraseStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionMemoryEraseStatus"
+      ],
+      "added": [
+        "memory.erasure_store_unjudged"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.wireValueRule",
+      "at": [
+        "src/trace/self-minted-wire.ts#wireValueRule"
+      ],
+      "added": [
+        "GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    }
+  ],
+  "breaking": 0
+}