@sema-agent/server 7.39.0-rc.1 → 7.39.0

package/dist/question.d.ts

@@ -14,6 +14,14 @@ export interface QuestionFrame {
     /** Server-signed emit timestamp (additive, [2805]§五→[2806]). Server-minted side-frame ⇒ no core-stream
      *  `eventId` to carry (absence is honest); this is the frame's own time coordinate. */
     serverNowMs?: number;
+    /** "question" only ([4851]③, additive, the `tool_approval` window-trio precedent from #288): the
+     *  coordinator's OWN answer window (`QUESTION_TTL_MS`, default 5min) — at expiry the ask releases
+     *  UNAVAILABLE ("unanswered") and core adjudicates park-vs-continue. Minted from the SAME `ttlMs` the
+     *  `setTimeout` below actually arms (single source; a shell countdown rendered from these can never
+     *  disagree with the release). Relative + absolute + `serverNowMs` above = clock-skew-proof trio. */
+    expiresInMs?: number;
+    /** "question" only: `serverNowMs + expiresInMs` — absolute deadline on the server's clock. */
+    expiresAtMs?: number;
 }
 /** The per-run context `onQuestion` recovers via ALS. `emit` delivers a frame to the run's live stream; `abortSignal`
  *  (the run's own cancel signal) releases a question parked awaiting a human when the run aborts. */

package/dist/question.js

@@ -180,7 +180,11 @@ export class QuestionCoordinator {
         // (the settlement is still pending there, so the emit is still fully awaited).
         // The loser of the race keeps its own handlers — an emit that rejects AFTER the race must not surface as an
         // unhandled rejection.
-        const emitted = (async () => ctx.emit({ type: "question", questionId: id, questions, serverNowMs: Date.now() }))()
+        const emitted = (async () => {
+            // [4851]③ 窗三键与上面 setTimeout 用同一个 ttlMs 铸(单源;壳倒计时永不与真释放口径分歧)。
+            const now = Date.now();
+            return ctx.emit({ type: "question", questionId: id, questions, serverNowMs: now, expiresInMs: this.throttle.ttlMs, expiresAtMs: now + this.throttle.ttlMs });
+        })()
             .then(() => "ok", () => "failed");
         const delivery = await Promise.race([emitted, answerP.then(() => "stalled")]);
         if (delivery === "ok") {

package/dist/trace/project.d.ts

@@ -12,13 +12,8 @@
  * old session-join `toolOutput` hook is gone, there's a real source now); `eventId`/`parentToolCallId` (§E2) ride
  * each content event, additive / tolerate-absent.
  */
-import type { ApprovalSettledBy, TaskEvent, TaskResult } from "@sema-agent/core";
-/** core 5.51.0 #127 的 ask 拒绝臂九码分类。类型别名 `AskDenyResolution` 与谓词 `isAskDenyResolution`
- *  在 core tool-policy.d.ts 有声明但 5.51.0 均未入公面导出(已上板点名)——这里从已导出的
- *  `TaskEvent` tool_end 分支**结构性提取**(单源,不抄词表;core 补导出后换直接 import)。 */
-type AskDenyResolution = NonNullable<Extract<TaskEvent, {
-    type: "tool_end";
-}>["resolution"]>;
+import type { ApprovalSettledBy, TaskResult } from "@sema-agent/core";
+import { type AskDenyResolution } from "@sema-agent/core";
 import type { RunEvent, RunRecord } from "../plugins/store-contracts.js";
 import type { ModelUsageDelta, ModelUsageTracker, PromptManifestRecord } from "../budget.js";
 import type { LedgerEventType } from "./ledger-events.js";

package/dist/trace/project.js

@@ -1,6 +1,7 @@
-// 值导入(非 `import type`):`settledBy` 的闭集判据必须**复用 core 的谓词**——本仓抄一份三元词表
-// 就是值拷贝漂移源(上游加员时两处静默不同步)。core 5.18.1 #187 导出的单一属主。
-import { isApprovalSettledBy } from "@sema-agent/core";
+// 值导入(非 `import type`):`settledBy`/`resolution` 的闭集判据必须**复用 core 的谓词**——本仓抄
+// 一份词表就是值拷贝漂移源(上游加员时两处静默不同步)。settledBy=core 5.18.1 #187;
+// resolution 三席=core 5.52.0 根导出([4819] 应诺兑现,[4820] 预挂的闭集换装即此)。
+import { isApprovalSettledBy, isAskDenyResolution } from "@sema-agent/core";
 import { redactSecrets, redactDeep } from "./redact.js";
 /** E8 (shell-host): drain the per-task model-usage accumulator into an append-only `model_usage` DELTA event.
  *  Shared by BOTH durable-write legs (runInBackground + the resume leg) so the persisted shape never drifts; the
@@ -180,11 +181,10 @@ export function toolEndEventData(ev) {
         // `AskDenyResolution`)——比 settledBy 更细(那个只说结算是什么种类,这个说拒绝走了哪条臂),
         // 铸点在 resolveAsk 的组臂处、经引擎结算 sideband 逐字携带,**不可由 tool/policy 自declare**——
         // core 契约逐字:「an out-of-vocabulary or self-declared word is dropped at the screens」,即
-        // **筛点单点在 core**。判据姿势照 `approver` 行(core 单点筛,server 形判透传不重筛):string
-        // 非空+长度上限 64(九码最长 21,上限防非契约长串;闭集谓词 `isAskDenyResolution` 在 core
-        // tool-policy.d.ts 有声明但 5.51.0 未入公面导出——已上板点名,到货后本行换闭集判据+名册行升
-        // closed,单一属主纪律不抄词表)。缺席不是语义(执行了的调用/policy 直拒/durable 腿都不带)。
-        ...(typeof ev.resolution === "string" && ev.resolution.length > 0 && ev.resolution.length <= 64 ? { resolution: ev.resolution } : {}),
+        // **筛点单点在 core**。判据=闭集谓词 `isAskDenyResolution`(core 5.52.0 三席根导出到货,
+        // [4819]/[4820] 过渡形〔string 非空+≤64〕退役,单一属主纪律不抄词表)。
+        // 缺席不是语义(执行了的调用/policy 直拒/durable 腿都不带)。
+        ...(isAskDenyResolution(ev.resolution) ? { resolution: ev.resolution } : {}),
         // core 5.35.0 design/252 G-7(#263 提货批,[4022] G3):`approver` = 这次结算**是谁的**——审批通道
         // 自报的结算方标识串,core `screenApproverAttribution` 筛形后逐字转录在 `settledBy` 旁,两键**合读**
         // (`settledBy:"timeout"` + approver = 超时的那条队列名,不是拒绝的人)。与 settledBy 同族三条纪律:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.39.0-rc.1",
+  "version": "7.39.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.51.0",
+    "@sema-agent/core": "^5.52.0",
     "@sema-agent/registry-core": "^0.19.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",