@sema-agent/server 7.150.0 → 7.152.0

package/dist/trace/core-keyset-guard.d.ts

@@ -50,7 +50,7 @@ type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceSess
 type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "hasBidiControls" | "previewWithheld" | "execCwd" | "authoredBy" | "editRewritten";
 type _GuardAsk = AssertAllKeysHandled<Exclude<keyof AskRequest, AskProjected | AskExcluded>>;
 type _GuardAskReverse = AssertAllKeysHandled<Exclude<AskProjected | AskExcluded, keyof AskRequest>>;
-type AskFrameServerMinted = "type" | "approvalId" | "argsOmitted" | "outcome" | "governanceForced" | "expiresAtMs" | "expiresInMs" | "serverNowMs" | "parked" | "cause" | "inputHasBidi" | "rememberRefused";
+type AskFrameServerMinted = "approvalId" | "argsOmitted" | "governanceForced" | "expiresAtMs" | "expiresInMs" | "serverNowMs" | "inputHasBidi" | "rememberRefused";
 type _GuardAskFrame = AssertAllKeysHandled<Exclude<keyof ToolApprovalFrame, AskProjected | AskFrameServerMinted>>;
 type _GuardAskFrameReverse = AssertAllKeysHandled<Exclude<AskProjected | AskFrameServerMinted, keyof ToolApprovalFrame>>;
 type TaskEventHandled = "text_delta" | "reasoning_delta" | "tool_start" | "tool_end" | "turn_end" | "compacted" | "diagnostics" | "message_committed" | "status" | "task_notification" | "task_progress" | "steering_injected" | "workspace_changed" | "done" | "context_usage" | "compaction_outcome" | "human_input" | "wiring_manifest" | "text_end" | "tool_roster_delta" | "tool_progress" | "tool_disclosure" | "task_started" | "compaction_started";

package/dist/trace/ledger-events.d.ts

@@ -56,9 +56,9 @@ export type LedgerEventType = "reasoning" | "text" | "tool_start" | "tool_end" |
 /** core 7.54.0 [ref] O9b S1:`permission.cross_boundary_taint` 帧的耐久行(伴随记录,与 `config_assembled` 同一只队列、同一批 drain 点;只在执行于目标设备的树上有)。 */
  | "cross_boundary_taint" | "file_link"
 /** 人在环三族的 open/close 帧对(投递 = 本腿那一只人在环传输,先落本账本再写直写面;`hitl-delivery.ts`)。 */
- | "elicitation" | "elicitation_complete" | "question" | "question_complete" | "tool_approval" | "tool_approval_complete"
-/** [ref] §4.3 呈卡族的开卡帧与单卡消卡帧(与上面两只 tool_approval 帧同一条投递面;一条腿只发其中一族,
- *  bg / resume 两条 durable 腿恒是呈卡腿 ⇒ 它们的账本自 7.133.0 起只有本族)。 */
+ | "elicitation" | "elicitation_complete" | "question" | "question_complete"
+/** [ref] §4.3 审批的开卡帧与单卡消卡帧(审批只有这一个帧族;更早版本的账本里可能还躺着旧族 `tool_approval` / `tool_approval_complete`
+ *  的历史行 —— 回放按行原样交出,本仓不再写那两个词)。 */
  | "approval_request" | "approval_complete"
 /**
  * 批级撤卡帧:与呈卡帧同一只腿传输(`hitl-delivery.ts`:先本 run 账本、再直写),seq 由腿自己的账本链步分配 ——

package/dist/trace/project.d.ts

@@ -1265,7 +1265,6 @@ export declare function lastStep(latestEventType: string | undefined, status: st
 export interface TaskSummary {
     id: string;
     status: string;
-    scenario?: string;
     /** Work-view correlation id (optional) — lets the client group a list into logical tasks. */
     jobId?: string;
     /** Credential-derived submitting system (oa/cc-mcp/portal…) — per-door attribution. */
@@ -1284,8 +1283,8 @@ export interface TaskSummary {
         label?: string;
     };
 }
-/** A run record → the cheap list summary (contract 2.1). Token/cost/turns come from the terminal result.stats;
- *  scenario isn't denormalized on the run row (omitted — a later push-index/column refinement). */
+/** A run record → the cheap list summary (contract 2.1). Token/cost/turns come from the terminal result.stats.
+ *  场景名不在本行:run 行不记它(没有列),一个从不铸的键不在型上占位。「这次请求会生效哪只场景」的读法是提交之前的 `GET /v1/capabilities/scenario`(门的答)。 */
 export declare function taskSummary(run: RunRecord, latestEventType?: string): TaskSummary;
 /** [ref] B2(lens4 N8)—— 重放边界的**读旧**归一:把历史账本里的 `brain_status` 行改叫 `status`。
  *

package/dist/trace/redact.js

@@ -1426,10 +1426,11 @@ const KEYWORD_SECRET_PATTERNS = [
     [keywordArm("[Tt]oken", "[A-Za-z0-9._~+/-]", 20), "token «redacted»"],
 ];
 const SK_FULL_ARM_MIN = 20;
+const SLACK_TOKEN_PREFIX = String.raw `xox(?:e\.xox)?[baeprs]-`;
 const SHAPE_SECRET_PATTERNS = [
     [new RegExp(String.raw `(?:ghp|gho|ghu|ghs|ghr)_${atLeast("[A-Za-z0-9]", 20)}`, "g"), "«redacted:gh-token»"],
     [new RegExp(String.raw `github_pat_[A-Za-z0-9]{22}_${atLeast("[A-Za-z0-9]", 59)}`, "g"), "«redacted:gh-token»"],
-    [new RegExp(String.raw `xox[baprs]-${atLeast("[A-Za-z0-9-]", 10)}`, "g"), "«redacted:slack-token»"],
+    [new RegExp(`${SLACK_TOKEN_PREFIX}${atLeast("[A-Za-z0-9-]", 10)}`, "g"), "«redacted:slack-token»"],
     [new RegExp(String.raw `AKIA${atLeast("[0-9A-Z]", 16)}`, "g"), "«redacted:aws-key»"],
     [new RegExp(String.raw `ASIA${atLeast("[0-9A-Z]", 16)}`, "g"), "«redacted:aws-key»"],
     [new RegExp(String.raw `(?:gl(?:pat|dt|rt|rtr|cbt|ptt|oas|ft|imt|agent|wt|soat|ffct)-${atLeast("[A-Za-z0-9_-]", 20)}|(?:sk|rk)_(?:live|test|org)_${atLeast("[A-Za-z0-9]", 24)}|pypi-${atLeast("[A-Za-z0-9_-]", 85)}|(?<![A-Za-z0-9])(?:npm_${atLeast("[A-Za-z0-9]", 36)}|hf_${atLeast("[A-Za-z0-9]", 34)}|ya29\.${atLeast("[A-Za-z0-9._-]", 30)}))`, "g"), "«redacted:key»"],
@@ -2095,7 +2096,7 @@ const FRAGMENT_SECRET_PATTERNS = [
     [valueArm("sk-", "[A-Za-z0-9_-]", 6, "needs-left-boundary"), "«redacted:key:partial»"],
     [valueArm("(?:ghp|gho|ghu|ghs|ghr)_", "[A-Za-z0-9]", 8, "needs-left-boundary"), "«redacted:gh-token:partial»"],
     [new RegExp(String.raw `github_pat_${atLeast("[A-Za-z0-9_]", 8)}`, "g"), "«redacted:gh-token:partial»"],
-    [valueArm("xox[baprs]-", "[A-Za-z0-9-]", 4, "needs-left-boundary"), "«redacted:slack-token:partial»"],
+    [valueArm(SLACK_TOKEN_PREFIX, "[A-Za-z0-9-]", 4, "needs-left-boundary"), "«redacted:slack-token:partial»"],
     [valueArm("AKIA", "[0-9A-Z]", 6, "needs-left-boundary"), "«redacted:aws-key:partial»"],
     [valueArm("ASIA", "[0-9A-Z]", 8, "needs-left-boundary"), "«redacted:aws-key:partial»"],
     [valueArm("(?:gl(?:pat|dt|rt|rtr|cbt|ptt|oas|ft|imt|agent|wt|soat|ffct)-|(?:sk|rk)_(?:live|test|org)_|pypi-|npm_|hf_|ya29\\.)", "[A-Za-z0-9_-]", 8, "needs-left-boundary"), "«redacted:key:partial»"],