@sema-agent/server 7.47.0-rc.1 → 7.47.0

package/dist/approval.js

@@ -1,4 +1,4 @@
-import {} from "@sema-agent/core";
+import { isNamespacedCoveringRuleName, namespacedRuleNameCovers } from "@sema-agent/core";
 export function hasOperatorGateIntent(config) {
     return (config.approvalRequire.length > 0 ||
         config.approvalDeny.length > 0 ||
@@ -13,20 +13,27 @@ export function assertGateIntentServiceable(config, checkpointStorePresent) {
     }
     throw new Error("DURABLE_APPROVAL=true but no checkpoint store is available — the configured DB backend has no checkpoint face (or no backend is configured). Wire a MySQL-protocol/PostgreSQL/file backend, or unset DURABLE_APPROVAL.");
 }
+function createNameSetMatcher(names) {
+    const exact = new Set(names);
+    const covering = names.filter(isNamespacedCoveringRuleName);
+    if (covering.length === 0)
+        return (toolName) => exact.has(toolName);
+    return (toolName) => exact.has(toolName) || covering.some((rule) => namespacedRuleNameCovers(rule, toolName));
+}
 export function createDurableAskPolicy(opts) {
-    const require = new Set(opts.requireApproval);
-    const deny = new Set(opts.deny ?? []);
-    const neverAuto = new Set(opts.neverAuto ?? []);
+    const require = createNameSetMatcher(opts.requireApproval);
+    const deny = createNameSetMatcher(opts.deny ?? []);
+    const neverAuto = createNameSetMatcher(opts.neverAuto ?? []);
     const budget = Math.max(0, Math.floor(opts.autoBudget ?? 0));
     let autoApproved = 0;
     return {
         check: (req) => {
             const toolName = req.toolName;
-            if (deny.has(toolName))
+            if (deny(toolName))
                 return { action: "deny", message: `tool "${req.toolName}" is denied by policy` };
-            if (neverAuto.has(toolName))
+            if (neverAuto(toolName))
                 return { action: "ask", message: `human approval required to run "${req.toolName}"` };
-            if (require.has(toolName)) {
+            if (require(toolName)) {
                 const remEarly = req.budget?.resourceRemainingMicroUsd;
                 if (remEarly !== undefined && remEarly <= 0) {
                     return { action: "ask", message: `durable resource budget exhausted — human approval required to run "${req.toolName}"` };

package/dist/config.d.ts

@@ -185,6 +185,21 @@ export declare function applyAutoCompactWindow(m: Model, explicit?: number): "ex
  *
  * 已接受的权衡(与退役表墓碑同一条):部署自有工具真叫 `figma__x` 的极端形会被误拒——boot 期无 roster 可
  * 豁免,且失败响亮、指引明确,好过静默失守。
+ *
+ * 🔴 **三条腿的消费者现已全部认 covering**(#450 孪生修,[5246];此前本段记的「分家」已作废):
+ * core 的每一只 name-keyed policy(`createAllowDenyPolicy` / `createPermissionRulePolicy` /
+ * `createApprovalPolicy`)都解 covering 拼法,而 operator 腿的消费者 `createDurableAskPolicy`
+ * (`src/approval.ts`)自 core 5.60.1 的谓词根导出到货后,deny/neverAuto/require 三集合也改成
+ * 「精确 ∪ covering」(同一只 `namespacedRuleNameCovers`)。于是本函数放行的
+ * `<ns>__<server>__*` / `<ns>__<server>__<glob>` 在**每一条**腿上都是**真判**,不再是
+ * 「放行进 no-op」—— 而那正是 #450 病形(`APPROVAL_DENY=mcp__figma__*` 判 allow)的根。
+ *
+ * ⚠️ 仍然拒的那一格,理由**换了**(别再照旧引「approval.ts 还不认」):`<ns>__<peer>` **两段形**
+ * (`mcp__figma`)core 全家解成 covering,本函数判它「缺段」拒。挡它的不再是消费腿的能力,而是
+ * **一名两义**:同一个 `mcp__figma` 既可能是运维想写的「整台服务器」,也可能是他把三段名写漏了一段
+ * (`mcp__figma__get_file` 少打一截),两者在 boot 期无 roster 可判——所以三条腿一律响亮拒,并在
+ * 指引里直接给出**无歧义**的等价写法 `mcp__figma__*`(见下方 guidance)。放宽两段形是一次
+ * behavior-facing 的放宽(三条腿同时变宽,且方向是「更少拒绝」),要走独立批的三问,不是本函数的补丁。
  */
 export interface UnmatchableToolName {
     name: string;

package/dist/config.js

@@ -773,7 +773,7 @@ export function findUnmatchableToolNames(names) {
             continue;
         }
         if (ns.parse(name) === undefined) {
-            out.push({ name, guidance: `incomplete ${ns.id} name — the live form is ${ns.prefix}<server>__<tool>` });
+            out.push({ name, guidance: `incomplete ${ns.id} name — the live form is ${ns.prefix}<server>__<tool>, or ${ns.prefix}<server>__* to cover every tool on that server` });
         }
     }
     return out;

package/dist/http/server.js

@@ -1583,10 +1583,19 @@ export function createHttpServer(rawDeps) {
                     e.code === "resume.parent_constraint_mismatch" ||
                     e.code === "resume.constraint_rejected" ||
                     e.code === "resume.constraint_unprojectable" ||
+                    e.code === "resume.usage_window_exhausted" ||
+                    e.code === "resume.principal_mismatch" ||
                     e.code.startsWith("wake.") ||
                     (e.code === "checkpoint.unsupported_version" && checkpointRowRedeemableElsewhere(e.detail?.reason));
                 if (claimedRow && taskId && deps.runStore) {
-                    if (retriable) {
+                    if (retriable && freshRunClaimed) {
+                        const c = { taskId, sessionId, status: "failed", errorCode: e.code, errorMessage: e.message, stats: { turns: 0, tokens: 0 } };
+                        await deps.runStore.setTerminal(taskId, "failed", c, c.errorMessage ?? null).catch((err) => {
+                            deps.logger?.warn?.("wake_synthetic_run_release_failed", { taskId, sessionId, errorCode: e.code, error: err instanceof Error ? err.message : String(err), note: "the synthetic run row for this refused fresh-run resume could not be settled — its task_active claim is still held and the next attempt on this session will 409 conflict.session_active_run until reapStale collects it (runStaleSec)" });
+                        });
+                        settleFleet("failed");
+                    }
+                    else if (retriable) {
                         await (outcome.gate === "plan_review" ? deps.runStore.setNeedsReview(taskId) : deps.runStore.setSuspended(taskId)).catch(() => undefined);
                         settleFleet(outcome.gate === "plan_review" ? "needs_review" : "suspended");
                     }
@@ -1604,6 +1613,9 @@ export function createHttpServer(rawDeps) {
                             ? (outcome.gate === "policy_ask" ? "approval_binding_mismatch" : "resume_outcome_invalid")
                             : e.code,
                         ...(e.detail?.field ? { field: e.detail.field } : {}),
+                        ...(e.code === "resume.usage_window_exhausted" && typeof e.detail?.retryAfterMs === "number" && Number.isFinite(e.detail.retryAfterMs) && e.detail.retryAfterMs > 0
+                            ? { retryAfterSec: Math.max(1, Math.ceil(e.detail.retryAfterMs / 1000)) }
+                            : {}),
                         ...(retriable ? { retriable: true } : {}),
                     },
                 };

package/dist/task-settings.js

@@ -1,4 +1,4 @@
-import { combinePolicies, createAllowDenyPolicy, createFsWriteGatePolicy, tightenTaskSpec, resolveReasoningProfile, rankOf, isThinkingLevel, CYBER_RISK, URL_SAFETY, HARNESS_SECTION_ANCHOR, RUN_WORKFLOW_TOOL_NAME, } from "@sema-agent/core";
+import { combinePolicies, createAllowDenyPolicy, createFsWriteGatePolicy, createPermissionRulePolicy, tightenTaskSpec, resolveReasoningProfile, rankOf, isThinkingLevel, CYBER_RISK, URL_SAFETY, HARNESS_SECTION_ANCHOR, RUN_WORKFLOW_TOOL_NAME, } from "@sema-agent/core";
 import { findCcRuleFormNames, findUnmatchableToolNames, formatUnmatchableToolNames } from "./config.js";
 import { parseHooksConfig } from "./hooks/hook-runner.js";
 export function coercePermissionMode(raw) {
@@ -151,16 +151,17 @@ export function acceptAppendSystemPrompt(v, warn, packDropsAppend) {
     }
     return v;
 }
+const ASK_RULE_SOURCE = "settings.permissions.ask";
 function createAskListPolicy(askNames) {
-    const askSet = new Set(askNames);
-    return {
-        check(req) {
-            return askSet.has(req.toolName)
-                ? { action: "ask", message: `tool "${req.toolName}" requires approval by your settings`, decisionReason: "rule" }
-                : { action: "allow" };
-        },
-        nameSets: [{ ask: askNames }],
-    };
+    try {
+        return createPermissionRulePolicy(askNames.map((name) => ({ rule: name, behavior: "ask", source: ASK_RULE_SOURCE })), {
+            defaultAction: "allow",
+            caps: { maxRules: MAX_SETTINGS_PERMISSION_RULES },
+        });
+    }
+    catch (e) {
+        throw new Error(`permissions.ask has rule(s) core cannot compile — ${e instanceof Error ? e.message : String(e)}`, { cause: e });
+    }
 }
 const WORKFLOW_ASK_NAMES = [RUN_WORKFLOW_TOOL_NAME];
 function createWorkflowAskPolicy(isExempt) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.47.0-rc.1",
+  "version": "7.47.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.60.0",
+    "@sema-agent/core": "^5.60.1",
     "@sema-agent/registry-core": "^0.19.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",