@sema-agent/server 7.37.0 → 7.38.0-rc.1

package/dist/runs.d.ts

@@ -277,6 +277,8 @@ approval?: {
     windowMarginMs: number;
 }): Promise<void>;
 /** How often a running instance refreshes its run's updated_at (liveness, independent of events).
- *  Must stay strictly below `runStaleSec` (asserted at startup) or the reaper would race live runs. */
+ *  Must stay strictly below `runStaleSec` (asserted at startup AND on every hot config candidate) or the
+ *  reaper would race live runs. #322:数值的单源是 `config-invariants.ts`(那条不变量的属主),两个消费面
+ *  ——心跳环与 run-stale 判据——因此不可能各读各的。 */
 export declare const HEARTBEAT_MS = 30000;
 //# sourceMappingURL=runs.d.ts.map

package/dist/runs.js

@@ -10,6 +10,7 @@ import { fleetRunResiduals, isFleetAgentTerminalNotification } from "./fleet/fle
 import { defaultSubagentTailBus, projectTailFrame } from "./fleet/subagent-tail-bus.js";
 import { emitPendingWorkflowCompletions, taskNotificationInboxEntry, taskNotificationStreamKey, NotifiedKeys } from "./orchestration/workflow-completion-inbox.js";
 import { recordFailOpen } from "./observability/fail-open.js"; // #310:通告 durable 写失败的留痕口
+import { LIVENESS_HEARTBEAT_MS } from "./config-invariants.js"; // #322:心跳周期的单源 = 它服务的那条不变量
 /**
  * stoppedBy (core 1.252): a service cancel is a USER stop — mark the run's still-running background
  * children BEFORE core's teardown reaps them (bare abort = attribution falls back to "system"; core's own
@@ -1012,6 +1013,8 @@ approval) {
     }
 }
 /** How often a running instance refreshes its run's updated_at (liveness, independent of events).
- *  Must stay strictly below `runStaleSec` (asserted at startup) or the reaper would race live runs. */
-export const HEARTBEAT_MS = 30_000;
+ *  Must stay strictly below `runStaleSec` (asserted at startup AND on every hot config candidate) or the
+ *  reaper would race live runs. #322:数值的单源是 `config-invariants.ts`(那条不变量的属主),两个消费面
+ *  ——心跳环与 run-stale 判据——因此不可能各读各的。 */
+export const HEARTBEAT_MS = LIVENESS_HEARTBEAT_MS;
 //# sourceMappingURL=runs.js.map

package/dist/trace/engine-notice-wire.d.ts

@@ -4,7 +4,7 @@
  * 三码同族:都是「这条 session 的记忆姿态」的披露,resume 之后仍然相关 ⇒ 也进 durable 账本
  * (cli 断连补看走既有 events 重放腿,[4634](ii))。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
 /** 白名单谓词(单点):路由与门都读这一个,不许第二处手抄码串。 */
 export declare function isEngineNoticeWireCode(code: string): code is EngineNoticeWireCode;

package/dist/trace/engine-notice-wire.js

@@ -18,12 +18,17 @@
  * **不投**(fail-closed 方向 = 宁缺席不串台;猜一个"当前活跃会话"就是串台的定义)。日志终点仍逐字
  * 保留 ⇒ 运维观察面零回退,事实一条不丢。
  *
- * ## 白名单的演化机制(设计稿 ④)
- * 本表是**过渡形**。core [4631] 已认领 `NOTICE_AUDIENCE` **码级注册表**(code → "user"|"operator",
- * 闭集映射,随 5.46 / 最迟 5.47)+ `EngineNotice.sessionId` 顶层可选。到货后本表**退役为消费该表**,
- * 不在本仓自造第二份「哪类码该上 wire」的判定语义。
- * 🔴 在此之前的固定动作:**每一次 core 提货批**,LEDGER 对表 core `EngineNotice` 码册的新增码,
- * 三选一登记(入册 / 明拒 + 理由 / 申裁),登记在 `docs/CORE-CONSUMPTION-LEDGER.md` 的该批行里。
+ * ## 白名单的演化机制(设计稿 ④)—— **注册表已到货(core 5.47/5.48)**
+ * core [4631] 认领的 `NOTICE_AUDIENCE` **码级注册表**(code → "user"|"operator";缺席读 `"operator"`,
+ * 保守默认)已随 5.47/5.48 到货,`EngineNotice.sessionId` 顶层键亦然。#292 提货批的处置是
+ * **消费它当上界,而不是当场把本表整只退役**:
+ *  · 本表是**投递可行性**的判定(有没有 sessionId 归属键、core 侧的去重单位是不是 sink),
+ *    `NOTICE_AUDIENCE` 是**受众**的判定(这条码是给谁看的)——两者是合取,不是同一件事;
+ *  · 于是机器门(`test/engine-notice-wire.test.ts` ⑥)现在**双向**咬:白名单里出现一个 core 判
+ *    `"operator"` 的码 ⇒ 红(本仓不许自造第二份受众语义);core 判 `"user"` 的码没入册也没明拒 ⇒ 红。
+ *  · 真正的整表退役条件 = 上游把「归属键在不在」也纳入注册表(那时本表退化成一次查表),届时删。
+ * 🔴 固定动作不变:**每一次 core 提货批**对表 core `EngineNotice` 码册的新增码,三选一登记
+ * (入册 / 明拒 + 理由 / 申裁),并在 `docs/core-consumption/LEDGER.json` 的该批行里留痕。
  * 漏对表的后果不是报错而是**静默缺席**:新码永远不上 wire,消费端(cli)无从知道该码存在。
  */
 import { redactSecrets } from "./redact.js";
@@ -44,6 +49,19 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     /** design/324 #324①:`memoryDelegationEvidence:"attested-only"` 下,一次静态面本会打的污染标记被豁免。
      *  core 去重单位 = **prepared leg**。`detail: { reason, subagentType?, sessionId? }` */
     "memory.delegation_static_mark_waived",
+    /** design/336 §4/§6.3(core 5.47/5.48 到货,#292 提货批对表入册):**instruction-hold 生命周期**三码。
+     *  同族三条都是「这条 session 的记忆此刻处在什么姿态」的披露,与既有三码同一条判据:
+     *   · core `NOTICE_AUDIENCE` 明列 **"user"**(到货的码级注册表,见本文件顶注的演化机制);
+     *   · 铸点在 `memoryHoldNotices(report, sessionId)`,`detail.sessionId` 随 harvest 报告一起给 ⇒ 投得出去;
+     *   · core 去重单位 = **harvest**(检查点收与终局收是两件事),不是 sink ⇒ 上 per-session 流不翻面。
+     *  `detail: { count, paths, sessionId? }`(paths 已 neutralize + 截 20 条)。 */
+    "memory.hold_opened",
+    /** 同族:被扣住的 instruction 条目在写者会话干净结算(或宿主阀门放行)后重走全套门并提交。
+     *  `detail: { count, paths, sessionId? }` */
+    "memory.hold_released",
+    /** 同族:被扣住的条目移交控制面隔离区。`detail: { count, disposed: [{ path, terminal }], sessionId? }`
+     *  —— 🔴 `terminal:"expired"` 是**超时不是定罪**(core 铸文逐字如此),消费端不得渲染成裁决语气。 */
+    "memory.hold_disposed",
 ];
 const WIRE_CODES = new Set(ENGINE_NOTICE_WIRE_CODES);
 /** 白名单谓词(单点):路由与门都读这一个,不许第二处手抄码串。 */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.37.0",
+  "version": "7.38.0-rc.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,8 +54,8 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.46.0",
-    "@sema-agent/registry-core": "^0.18.0",
+    "@sema-agent/core": "^5.49.0",
+    "@sema-agent/registry-core": "^0.19.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",