@sema-agent/server 7.16.0-rc.1 → 7.16.0-rc.3

package/dist/config.js

@@ -395,28 +395,33 @@ export function configKnobTable() {
 function registerKnob(rec) {
     CONFIG_KNOBS.set(rec.name, rec);
 }
+/** #241-rc2([3740]③→[3742] 裁定,双臂不留静默):布尔 env 的**闭集词表**解析。
+ *  放宽臂=收 true/false/1/0/yes/no/on/off(大小写不敏感)——`=1` 是运维直觉写法,意图明确按意图执行
+ *  (operator-knob 宪法方向);拒启臂=未知词**抛错**(boot 拒启带词表指路,照 #186 响亮拒先例)——
+ *  行为承重键(DURABLE_APPROVAL 决定 checkpointStore 存在性 ⇒ /v1/approvals 路由存在性)静默回默认的
+ *  真实后果是「审批面整条静默缺席」([3740]② cli/test 真机链)。返回 undefined = raw 未设/空串(沿用
+ *  `env()` 的空串=未设约定),由调用方走默认/legacy 分派。 */
+const BOOL_TRUE_WORDS = new Set(["true", "1", "yes", "on"]);
+const BOOL_FALSE_WORDS = new Set(["false", "0", "no", "off"]);
+function parseBoolWord(name, raw) {
+    if (raw === undefined || raw === "")
+        return undefined;
+    const w = raw.toLowerCase();
+    if (BOOL_TRUE_WORDS.has(w))
+        return true;
+    if (BOOL_FALSE_WORDS.has(w))
+        return false;
+    throw new Error(`${name}=${JSON.stringify(raw)} is not a boolean — accepted (case-insensitive): true/false/1/0/yes/no/on/off. ` +
+        `Refusing to boot: a silently defaulted behavior knob is worse than a loud one ([3742]; e.g. DURABLE_APPROVAL ` +
+        `decides whether the checkpoint store — and with it /v1/approvals — exists at all).`);
+}
 function boolEnv(name, def) {
-    const raw = process.env[name];
-    let value = def;
-    let source = "default";
-    if (raw !== undefined && raw !== "") {
-        // "" = unset, the same convention `env()`/`firstSetEnv()` use (a compose `${VAR:-}` template passes empty through).
-        if (raw === "true") {
-            value = true;
-            source = "env";
-        }
-        else if (raw === "false") {
-            value = false;
-            source = "env";
-        }
-        else if (!CONFIG_KNOBS.has(name)) {
-            // Previously a silent default at every hand-written site. Guarded on first registration: the LAZILY
-            // re-read knobs (boolEnvWithLegacyNegated's host twins, read per exec) must not grow this array for the
-            // process lifetime on one typo — one typo, one warning. (复审 2026-07-30 F6:早期理由「IMAGE_BAKES_
-            // ENABLED/DURABLE_APPROVAL 一次 load 读两次」已随九域拆分的去重失效,懒读族成为本守卫的现行理由。)
-            CONFIG_WARNINGS.push({ env: name, raw });
-        }
-    }
+    // #241-rc2:词表解析(见 parseBoolWord 顶注)。未知词在 parseBoolWord 里抛 = boot 拒启——旧形的
+    // 「CONFIG_WARNINGS 一条 warn + 回默认」臂就此退役(懒读族的防重复 push 守卫随臂一起退役:未知词
+    // 现在到不了任何 push)。
+    const parsed = parseBoolWord(name, process.env[name]);
+    const value = parsed ?? def;
+    const source = parsed !== undefined ? "env" : "default";
     registerKnob({ name, polarity: def ? "opt-out" : "opt-in", value, source });
     return value;
 }
@@ -443,20 +448,11 @@ export function boolEnvWithLegacyNegated(name, legacyNegatedName, def) {
     const legacy = process.env[legacyNegatedName];
     let value;
     let source;
-    if (raw === "true" || raw === "false") {
-        value = raw === "true";
+    const parsedCanonical = parseBoolWord(name, raw); // #241-rc2:与 boolEnv 同一词表同一拒启臂(单一属主)
+    if (parsedCanonical !== undefined) {
+        value = parsedCanonical;
         source = "env";
     }
-    else if (raw !== undefined && raw !== "") {
-        if (!CONFIG_KNOBS.has(name)) {
-            // Same first-registration guard as boolEnv — the three consumers of this helper are the LAZILY re-read
-            // ones (remote-env-host reads per exec/probe), so an unguarded push would grow CONFIG_WARNINGS for the
-            // whole process lifetime on a single operator typo (复审 2026-07-29 #1).
-            CONFIG_WARNINGS.push({ env: name, raw });
-        }
-        value = def;
-        source = "default";
-    }
     else if (legacy !== undefined && legacy !== "") {
         // server 3.0.0([1989],clay 令「不做兼容」):负名旧 env = fail-loud 墓碑。设了(任何值,含
         // "false"——设它的人同样以为它还生效)即拒启并指路新名。选拒启不选静默忽略:静默会让升级部署的
@@ -2105,8 +2101,10 @@ export function loadConfig() {
     // self-report would omit the worst offenders. Its tri-state semantics are unchanged: an explicit literal wins,
     // anything else (including a typo — deliberately NOT warned here, unlike boolEnv) falls to the posture default.
     const postureOn = (name, infraReady = true) => {
-        const envVal = process.env[name];
-        const explicit = envVal === "true" ? true : envVal === "false" ? false : undefined;
+        // #241-rc2:显式臂与 boolEnv 同词表同拒启(parseBoolWord 单一属主)——三态语义不变
+        // (显式 true/显式 false/未设 ⇒ posture 默认),变的只是「显式」的判读:`=1` 是显式 true,
+        // 未知词拒启而不是静默滑进 posture 默认。
+        const explicit = parseBoolWord(name, process.env[name]);
         const value = explicit ?? (singleUserTurnkey && infraReady);
         registerKnob({ name, polarity: "posture", value, source: explicit === undefined ? "posture" : "env" });
         return value;

package/dist/http/server.js

@@ -1,7 +1,7 @@
 import http from "node:http";
 import { once } from "node:events";
 import { createHash } from "node:crypto";
-import { uuidv7, isThinkingLevel, expandTiers, resumeWithVerification, CheckpointError, HAND_TOOL_EFFECTS, RETIRED_TOOL_NAMES, defaultTaskRegistry, validatePendingSteer, subscribeWorkflow, GLOBAL_USAGE_KEY, usageRetryAfterMs } from "@sema-agent/core";
+import { uuidv7, isThinkingLevel, expandTiers, resumeWithVerification, CheckpointError, defaultTaskRegistry, validatePendingSteer, subscribeWorkflow, GLOBAL_USAGE_KEY, usageRetryAfterMs } from "@sema-agent/core";
 import { decideParkedAgent, findParkedAgentForCheckpoint } from "../parked-decide.js";
 import { isModelAllowlisted, matchCatalogModel } from "../model-select.js";
 import {} from "../config-center/facade.js";
@@ -16,6 +16,7 @@ import { runInBackground, evictIfConflict, stripCheckpointToken, TurnAnchorCaptu
 import { looksLikeJwt } from "@sema-agent/registry-core/api/auth-bridge";
 import {} from "../orchestration/workflow-agent-steer.js";
 import { emitPendingWorkflowCompletions, taskNotificationInboxEntry, taskNotificationStreamKey, NotifiedKeys } from "../orchestration/workflow-completion-inbox.js";
+import { HANDS_BAND_TOOL_NAMES } from "../capabilities/hands-lane.js";
 import { fleetRunPublisher, fleetRunLabels, fleetRunResiduals, isFleetAgentTerminalNotification } from "../fleet/fleet-bus.js";
 import { defaultSubagentTailBus, projectTailFrame } from "../fleet/subagent-tail-bus.js";
 import { createApprovalCardEmitter, isApprovalGateKind, resolveApprovalLeg, resolveStreamApprovalGate } from "../tool-approval.js";
@@ -110,13 +111,14 @@ const MAX_IMAGES_PER_REQUEST = 20;
 const MAX_IMAGE_BASE64_BYTES = 6 * 1024 * 1024; // a single inline image's base64 ≤ 6 MiB (< MAX_BODY, so REACHABLE — one image can't hog the whole 8 MiB budget); ~4.5 MiB decoded, generous for a screenshot/photo
 // Task Trace API (S1): GET /v1/tasks (list) | /v1/tasks/:id/turns | /v1/tasks/:id/stream. The `:id` group +
 // sub-route are both-or-neither, so a GET /v1/tasks/stream (no :id) does NOT match — the POST sync stream is unshadowed.
-// Hand (executionEnv) tool names core mounts at the runner when an executionEnvFactory is configured — the
-// authoritative set is core `HAND_TOOL_EFFECTS` (root-exported since 1.70). These are NEVER in spec.tools, so
-// the durable-resume satisfiability pre-check must union them when remote exec is on.
-// [3248]: filter RETIRED_TOOL_NAMES — core 5.21.0 left retired "MultiEdit" in HAND_TOOL_EFFECTS; a retired
-// name is never mounted, so keeping it here would let the pre-check claim satisfiability for a tool that
-// cannot exist (same derivation hygiene as hands-lane.ts HANDS_BAND_TOOL_NAMES).
-const HAND_TOOL_NAMES = Object.keys(HAND_TOOL_EFFECTS).filter((n) => !RETIRED_TOOL_NAMES.has(n));
+// Hand (executionEnv) tool names core mounts at the runner when an executionEnvFactory is configured. These are
+// NEVER in spec.tools, so the durable-resume satisfiability pre-check must union them when remote exec is on.
+// #244([3751]): the authoritative set is the FULL band `HANDS_BAND_TOOL_NAMES` (capabilities/hands-lane.ts —
+// effects table + the mounted complement Monitor/EnterWorktree/ExitWorktree/SendMessage/AgentTranscript, retired
+// names filtered at the single owner). The old effects-only derivation left the complement out, so approving a
+// parked complement-tool ask (the disconnect force-park population, e.g. Monitor on the cli host lane) was a
+// permanent 422 conflict.pending_action_unsatisfiable — the re-presented card's answer could never propagate.
+const HAND_TOOL_NAMES = HANDS_BAND_TOOL_NAMES;
 /** #233 / A-002.8 —— 未知模型 400 里 `available` 列表的**名单过滤**:不给用户广告他点不了的模型。
  *  名单缺席/空 ⇒ 与本件之前逐字同集(全目录去 `default` 别名);名单在场 ⇒ 只留名单准的那些。
  *  判定单源 `isModelAllowlisted`(与三个执法点同一只),所以"列出来的"与"点了不被拒的"恒为同一批。 */
@@ -1527,12 +1529,13 @@ export function createHttpServer(rawDeps) {
         // Typed pre-check: the pending tool must still exist in the rebuilt config; a scenario
         // redeploy that removed it means the approval can no longer be applied — fail clearly, never a 500/silent.
         // The "hand" tools are NOT in spec.tools — core mounts them at the runner from the executionEnvFactory
-        // (`HAND_TOOL_NAMES` above derives from core's root-exported `HAND_TOOL_EFFECTS`; nothing is mirrored here).
+        // (`HAND_TOOL_NAMES` above = hands-lane.ts `HANDS_BAND_TOOL_NAMES`, the single owner; nothing is mirrored here).
         // When this deployment has remote exec configured the rebuilt task WILL expose them, so union them in; else
         // gating a hand tool (the common code-agent case) would always 422 on resume.
         // #196 旁注:本 union 只看部署有没有 remoteExec,不看本任务的 hands lane —— 对 hands=none 的任务这是
-        // **过近似**(那些工具根本没 mount,也就不可能有它们的 park 行),只影响 422 的 UX 宽严,不放大任何权限;
-        // band 的**完整**名单(含 Monitor/EnterWorktree/… 这些不在 effects 表里的)在 capabilities/hands-lane.ts。
+        // **过近似**(那些工具根本没 mount,也就不可能有它们的 park 行),只影响 422 的 UX 宽严,不放大任何权限。
+        // #244:union 必须是 band **全**名单——effects 表外的挂载补集(Monitor/EnterWorktree/…)当年漏了,
+        // 断连 force-park 人群第一个踩中(approve 恒 422,重呈卡回答永不传导;test legB1-durable 实测指纹)。
         // [2380] RB-476(5.0.0):Q6 折叠预检退役——满足性匹配按 RAW 名。pre-floor 旧名 checkpoint
         // (`bash`/`run_workflow` 等)在此 422 诚实拒,与 core 自己的 resume.tool_unavailable 同方向
         // ([2364] 令:耐久面响亮牺牲 + P-7 重开,不静默兜)。现役名恒自映射。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.16.0-rc.1",
+  "version": "7.16.0-rc.3",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",