@sema-agent/server 7.52.0 → 7.52.1

package/USAGE.md

@@ -884,6 +884,13 @@ curl -N http://<host>:8090/v1/tasks/stream -H 'content-type: application/json' \
 >     且**状态变更与审计行同一个事务**(不存在"解冻了但账上没有")。
 >   - `GET /v1/ops/retention/audit?domain=&limit=&before=` —— 审计读面(keyset 分页,游标形同名册面)。
 >   - 能力位 `capabilities.retention` = `{mode, maxAgeDays}`(lane 开着)或 `null`(关着)。
+> - **子代转录(placed 分区)的留存天数没有独立旋钮座**(S-03/#292②,设计判定 2026-08-30):placed 转录的
+>   删除权**独家**归联合 reap(`reapDurableAgents`:行赢删才 release 转录;上面这条 lane 的候选谓词显式排除
+>   placed,见 `plugins/retention-store-sql.ts` 第五腿)——生效视界 = `BG_AGENT_RETENTION_MS`(缺省 7 天,
+>   毫秒形,同时是 agent 行的留存旋钮;分区孤儿腿的 `olderThanMs` 同源)。core 的
+>   `SUBAGENT_TRANSCRIPT_RETENTION_DAYS_DEFAULT`(30 天)是共享词表常量,**本服务未按它跑**;天数形专用
+>   旋钮要等 core 在 reap policy 开出转录独立年龄座后再铸(届时名 `SUBAGENT_TRANSCRIPT_RETENTION_DAYS`)。
+>   生效值上 boot 日志:`wiring_static.subagentTranscriptRetentionMs`。
 > - `MEMORY_CONSOLIDATION_DRIVER=on|off`(默认 `off`):记忆**折叠(consolidation)阀门**。一个从未折叠过的
 >   记忆库只涨不折,检索质量随库龄衰减;开这根旋钮就给 worker 装上两个 operator 口,让人在自己选的节奏上
 >   跑折叠。⚠️ **闭集两词,别的一律拒启**——本旋钮是新的,不继承 `MEMORY_ENGINE` 的 `true/1/yes` 放宽:
@@ -1124,12 +1131,16 @@ CC 逐字节形的提醒帧:`<total_tokens>N tokens left</total_tokens>`(**缺
 - **分辨依据**(消费端/日志过滤):该帧内文**恒以 ` tokens left` 结尾**;`Infinite` 常量臂(`infinite`
   档)是唯一例外,单独放行——它不带数字、不依赖上限,且只在显式 `true` 下可达。
 
-### 9.2 部署级 token 治理窗(USAGE_WINDOWS,6.1.0 起)
+### 9.2 部署级治理窗(USAGE_WINDOWS,6.1.0 起;$ ceiling=S-18/core 7.0.0 起)
 
-跨任务的滑动 token 预算(core `usageWindows`),缺省不设=关。单键 JSON 数组:
+跨任务的滑动预算(core `usageWindows`),缺省不设=关。单键 JSON 数组;每窗两只**独立** ceiling
+(`maxTokens` token 数 / `maxCostUsd` 绝对美元)——each optional、**至少其一**(双缺拒启),
+whichever fills first 即耗尽,缺席的 ceiling 不参与(非 0、非 ∞):
 
 ```bash
 USAGE_WINDOWS='[{"windowMs":18000000,"maxTokens":5000000,"anchor":"first-use"}]'   # 5h 窗 500 万 token
+USAGE_WINDOWS='[{"windowMs":604800000,"maxCostUsd":25,"anchor":"rolling"}]'        # 7d 滑动窗 $25(纯 $ 窗合法)
+USAGE_WINDOWS='[{"windowMs":18000000,"maxTokens":5000000,"maxCostUsd":10,"anchor":"first-use"}]'  # 双 ceiling:先满者停
 # anchor:"first-use"=首次消费开桶、到期重开;"rolling"=滑动窗(最近 windowMs 内的消费之和)
 ```
 
@@ -1140,8 +1151,13 @@ USAGE_WINDOWS='[{"windowMs":18000000,"maxTokens":5000000,"anchor":"first-use"}]'
   任务撞窗时,基建合格(checkpoint+durable approval)⇒ suspend(reason `usage_window`)等窗放行,
   不合格 ⇒ 响亮失败同码落终态记录。
 - 计量覆盖:主任务、具名/委托 subagent、hook 内部任务全计(部署真花销都进窗)。
-- 坏形 `USAGE_WINDOWS` 拒启(fail-loud 点名第几项);**改窗形≈重开账**(first-use 桶按 windowMs
-  配对,改了窗长老桶下次记账即弃)。
+- **$ 窗(S-18,core 7.0.0 起)**:`maxCostUsd` 要求 run **可计价**——模型既无 pricing 条目也无
+  `Model.cost` 声明时,cost 不是 0 而是**不存在**,$ 窗对它不可求值 ⇒ 任务门口拒
+  (`config.usage_window_unpriced`),绝不记 0 让天花板静默失效。MIXED 声明(部署里同时有 $ 窗与纯
+  token 窗)下共享账本行统一携带 cost;全部署零 $ 窗时账本行与此前逐字节同形。
+- 坏形 `USAGE_WINDOWS` 拒启(fail-loud 点名第几项);窗对象是**闭集**四键 {windowMs, maxTokens?,
+  maxCostUsd?, anchor}——未知键(含拼错的 `maxCostUSD`)拒启点名,绝不静默降级成 token-only 治理;
+  **改窗形≈重开账**(first-use 桶按 windowMs 配对,改了窗长老桶下次记账即弃)。
 - 存储:SQL 后端=跨副本一致(`usage_window` 表,行锁守恒);local=文件;纯内存 dev=进程内。
 
 ### 9.3 沙箱寿命声明(6.1.0 起)

package/dist/boot/device-lane.js

@@ -34,11 +34,13 @@ export function createDeviceLane(ctx) {
         ...(knobs?.deliveryTimeoutMs != null ? { dispatchTimeoutMs: knobs.deliveryTimeoutMs } : {}),
         ...(knobs?.reconnectGraceMs != null ? { reconnectGraceMs: knobs.reconnectGraceMs } : {}),
         ...(knobs?.maxInflightPerDevice != null ? { maxInflightPerDevice: knobs.maxInflightPerDevice } : {}),
+        ...(knobs?.maxPreAuthPerRemote !== undefined ? { maxPreAuthConnectionsPerRemote: knobs.maxPreAuthPerRemote } : {}),
         ...(knobs?.supersede ? { supersede: knobs.supersede } : {}),
     });
     logger.info("device_lane_enabled", {
         replicaId,
         maxInflightPerDevice: knobs?.maxInflightPerDevice ?? 4,
+        maxPreAuthPerRemote: knobs?.maxPreAuthPerRemote ?? 8,
         crossReplicaEnrollRateLimit: ctx.rateGate !== undefined,
     });
     return { store, enrollment, hub };

package/dist/config-types.d.ts

@@ -625,6 +625,11 @@ export interface ServiceConfigFlat {
         execTimeoutMs?: number;
         /** `DEVICE_MAX_INFLIGHT_PER_DEVICE`(§11-O3 clay 已裁 = 4)。 */
         maxInflightPerDevice?: number;
+        /** `DEVICE_MAX_PREAUTH_PER_REMOTE`(默认 8;字面 `off` = 显式停用 per-remote 层)= 未鉴权
+         *  握手的 per-remote 并发帽(S-04/A-075.52:帽键是裸 remoteAddress——XFF 反代 / 公司 NAT 部署
+         *  形会把全员折叠成单键,per-remote 层退化成共享预算而非公平层,`off` + 全局帽 64 是诚实形)。
+         *  坏值拒启(#210 A 档),词表与拒因见 config.ts `parseDevicePreAuthPerRemoteEnv`。 */
+        maxPreAuthPerRemote?: number | "off";
         /** `DEVICE_SUPERSEDE`(默认 `stale_only`)= 同 deviceId 二连的顶替策略(§5.2)。 */
         supersede?: "stale_only" | "deny";
     } | {
@@ -1141,20 +1146,30 @@ export interface ServiceConfigFlat {
      *  Running rows are never reaped (that is the orphan-grace sweep's job). Default 30 days, floor 1m.
      *  `WORKFLOW_RUN_RETENTION_MS`. */
     workflowRunRetentionMs: number;
-    /** design/166-T1 — core 5.8.0 部署级 token 治理窗(`RunnerDeps.usageWindows`):滑动窗内跨任务
-     *  token 预算,key=principal(缺席=GLOBAL 一口锅,per-key 各一份额度——混流部署语义见 USAGE.md)。
-     *  `USAGE_WINDOWS` 单键 JSON 数组(每项 {windowMs,maxTokens,anchor:"first-use"|"rolling"});
-     *  缺省未设=关(零行为变化)。fail-loud:坏 JSON/空数组/非正整数/未知 anchor → boot throw
-     *  (parseUsageWindows)。窗形变更≈重开账(first-use 桶按 windowMs 配对,老桶下次 charge 即弃)。 */
+    /** design/166-T1 — core 5.8.0 部署级治理窗(`RunnerDeps.usageWindows`):滑动窗内跨任务预算,
+     *  key=principal(缺席=GLOBAL 一口锅,per-key 各一份额度——混流部署语义见 USAGE.md)。
+     *  `USAGE_WINDOWS` 单键 JSON 数组(每项 {windowMs, maxTokens?, maxCostUsd?, anchor});
+     *  缺省未设=关(零行为变化)。S-18(core 7.0.0):`maxCostUsd` 是与 maxTokens **对等**的第二只
+     *  ceiling(绝对美元;whichever fills first 即耗尽;缺席的 ceiling 不参与——非 0、非 ∞)——两者
+     *  each optional on its own、**at least one required**(双缺=parseUsageWindows 响亮拒)。fail-loud:
+     *  坏 JSON/空数组/坏值/未知 anchor → boot throw(parseUsageWindows)。窗形变更≈重开账(first-use
+     *  桶按 windowMs 配对,老桶下次 charge 即弃)。$ 窗要求 run 可计价:无价目模型撞 $ 窗=core 门口拒
+     *  (`config.usage_window_unpriced`),USAGE.md §9.2。 */
     usageWindows?: readonly {
         windowMs: number;
-        maxTokens: number;
+        maxTokens?: number;
+        maxCostUsd?: number;
         anchor: "first-use" | "rolling";
     }[];
     /** core 1.364 durable background agents([1503] 提货单③):reaper 经 `TaskRegistry.reapDurableAgents`
      *  (联合 reap——条件删赢了才 release 转录 session;裸 store.reap 会 strand 转录)按 scope 清 TERMINAL
      *  `a*` 行,老于此值的删。SQL twins 走 DISTINCT-scope 枚举;local FileBackgroundAgentStore 单租户
-     *  scope="default"。Default 7 days, floor 1m。`BG_AGENT_RETENTION_MS`。 */
+     *  scope="default"。Default 7 days, floor 1m。`BG_AGENT_RETENTION_MS`。
+     *  🔴 S-03(#292②,设计判定 2026-08-30):这根旋钮**同时是子代转录(placed 分区)的生效留存视界**——
+     *  联合 reap 行赢删才 release 转录,分区孤儿腿 `olderThanMs` 同源(core `reapDurableAgentsLane` 亲核),
+     *  retention lane 对 placed 显式让权(retention-store-sql.ts 第五腿)。core 词表常量
+     *  `SUBAGENT_TRANSCRIPT_RETENTION_DAYS_DEFAULT`(30d)在 core dist 零消费,本服务未按它跑;天数形
+     *  专用旋钮无 core policy 座,候 core 扩座后再铸(生效值已投 wiring_static 日志)。 */
     backgroundAgentRetentionMs: number;
     /** 同批:stale-running 翻转窗——running 行的写者心跳(core 60s)断更超过此值 = 宿主进程死,行翻
      *  failed/stoppedBy=system(诚实终态,跨实例读面永不虚构存活)。core 契约要求 ≥10min(60s 心跳的

package/dist/config.d.ts

@@ -15,11 +15,19 @@ export { RETENTION_MODES, MEMORY_CONSOLIDATION_MIN_INTERVAL_SEC } from "./config
 export declare function parseAutonomy(raw: string | undefined): Autonomy | undefined;
 /** design/166-T1 — parse `USAGE_WINDOWS`(单键 JSON 数组;逐窗散键在窗数可变时组合爆炸,JSON 是唯一
  *  封闭形)。unset/空串 → undefined(关)。fail-loud 族(numEnv 同纪律):坏 JSON/非数组/空数组/
- *  非正有限整数/未知 anchor 全部 boot throw 点名——「设了但无意义」静默关掉=部署方以为有治理实际没有。
- *  server 严于 core(core 允 maxTokens=0=恒拒锅;这里要求正整数,0 配置显然是笔误不是意图)。 */
+ *  坏值/未知 anchor 全部 boot throw 点名——「设了但无意义」静默关掉=部署方以为有治理实际没有。
+ *  S-18(core 7.0.0 `UsageWindow.maxCostUsd`,dist/core/usage-window-store.d.ts:44-68 亲读):
+ *  `maxTokens` 与 `maxCostUsd` 是两只**独立** ceiling——each optional on its own、**at least one
+ *  required**(双缺=拒:a window with neither admits nothing it can govern),whichever fills first
+ *  即耗尽;缺席的 ceiling 不参与(非 0、非 ∞)。修前这里的白名单重铸只认三键,$ 键配了也被静默
+ *  剥掉——正是本函数要消灭的那族病自己。
+ *  server 严于 core(core 允两 ceiling 取 0=恒满锁死窗;这里都要求正数,0 配置显然是笔误不是意图);
+ *  `maxCostUsd` 另提前执行 core 的 micro-USD 门(×1e6 仍有限——超界 ceiling 在账本单位里读作 ∞,
+ *  「看起来被治理、实际什么都不拦」,core 在门口拒,这里拒在 boot)。 */
 export declare function parseUsageWindows(raw: string | undefined): readonly {
     windowMs: number;
-    maxTokens: number;
+    maxTokens?: number;
+    maxCostUsd?: number;
     anchor: "first-use" | "rolling";
 }[] | undefined;
 /** Numeric env with validation: a non-numeric value FAILS at startup instead of silently becoming `NaN`

package/dist/config.js

@@ -38,18 +38,38 @@ export function parseUsageWindows(raw) {
         parsed = JSON.parse(v);
     }
     catch (e) {
-        throw new Error(`env USAGE_WINDOWS is not valid JSON: ${String(e)} — expected e.g. [{"windowMs":18000000,"maxTokens":5000000,"anchor":"first-use"}]`);
+        throw new Error(`env USAGE_WINDOWS is not valid JSON: ${String(e)} — expected e.g. [{"windowMs":18000000,"maxTokens":5000000,"anchor":"first-use"}] or [{"windowMs":604800000,"maxCostUsd":25,"anchor":"rolling"}]`);
     }
     if (!Array.isArray(parsed) || parsed.length === 0) {
-        throw new Error(`env USAGE_WINDOWS must be a NON-EMPTY JSON array of {windowMs,maxTokens,anchor} (an empty array is a governance no-op nobody chose — unset the env to turn windows off)`);
+        throw new Error(`env USAGE_WINDOWS must be a NON-EMPTY JSON array of {windowMs, maxTokens?, maxCostUsd?, anchor} (an empty array is a governance no-op nobody chose — unset the env to turn windows off)`);
     }
     const out = parsed.map((w, i) => {
         const o = w;
         const posInt = (n) => typeof n === "number" && Number.isInteger(n) && n > 0;
-        if (typeof w !== "object" || w === null || !posInt(o.windowMs) || !posInt(o.maxTokens) || (o.anchor !== "first-use" && o.anchor !== "rolling")) {
-            throw new Error(`env USAGE_WINDOWS[${i}] is invalid: expected {windowMs: positive int ms, maxTokens: positive int, anchor: "first-use"|"rolling"} (got ${JSON.stringify(w)})`);
+        const posUsd = (n) => typeof n === "number" && Number.isFinite(n) && n > 0 && Number.isFinite(n * 1e6);
+        if (typeof w !== "object" || w === null || !posInt(o.windowMs) || (o.anchor !== "first-use" && o.anchor !== "rolling")) {
+            throw new Error(`env USAGE_WINDOWS[${i}] is invalid: expected {windowMs: positive int ms, maxTokens?: positive int, maxCostUsd?: positive USD, anchor: "first-use"|"rolling"} (got ${JSON.stringify(w)})`);
         }
-        return Object.freeze({ windowMs: o.windowMs, maxTokens: o.maxTokens, anchor: o.anchor });
+        for (const k of Object.keys(w)) {
+            if (k !== "windowMs" && k !== "maxTokens" && k !== "maxCostUsd" && k !== "anchor") {
+                throw new Error(`env USAGE_WINDOWS[${i}] is invalid: unknown key \`${k}\` — the window shape is the CLOSED set {windowMs, maxTokens?, maxCostUsd?, anchor}; a misspelled ceiling (e.g. \`maxCostUSD\`) must not silently leave the deployment ungoverned (got ${JSON.stringify(w)})`);
+            }
+        }
+        if (o.maxTokens === undefined && o.maxCostUsd === undefined) {
+            throw new Error(`env USAGE_WINDOWS[${i}] is invalid: at least one ceiling is required — \`maxTokens\` (tokens) and/or \`maxCostUsd\` (absolute USD); a window with neither admits nothing it can govern (got ${JSON.stringify(w)})`);
+        }
+        if (o.maxTokens !== undefined && !posInt(o.maxTokens)) {
+            throw new Error(`env USAGE_WINDOWS[${i}] is invalid: \`maxTokens\` (when present) must be a positive integer (got ${JSON.stringify(w)})`);
+        }
+        if (o.maxCostUsd !== undefined && !posUsd(o.maxCostUsd)) {
+            throw new Error(`env USAGE_WINDOWS[${i}] is invalid: \`maxCostUsd\` (when present) must be a positive finite USD amount that stays finite in micro-USD (× 1e6) (got ${JSON.stringify(w)})`);
+        }
+        return Object.freeze({
+            windowMs: o.windowMs,
+            ...(o.maxTokens !== undefined ? { maxTokens: o.maxTokens } : {}),
+            ...(o.maxCostUsd !== undefined ? { maxCostUsd: o.maxCostUsd } : {}),
+            anchor: o.anchor,
+        });
     });
     return Object.freeze(out);
 }
@@ -252,6 +272,26 @@ function optNumEnvStrict(name) {
         return undefined;
     return parseNumOrFail(name, raw);
 }
+function parseDevicePreAuthPerRemoteEnv() {
+    const raw = process.env.DEVICE_MAX_PREAUTH_PER_REMOTE;
+    if (raw === undefined || raw === "")
+        return undefined;
+    if (raw === "off")
+        return "off";
+    if (!/^[1-9]\d*$/.test(raw)) {
+        throw new Error(`env DEVICE_MAX_PREAUTH_PER_REMOTE=${JSON.stringify(raw)} must be a positive integer or the literal "off" — ` +
+            `a malformed cap would otherwise run as the default (8) while the operator believes their value is in force ` +
+            `(#210: deployment knobs never fall back silently). "0" is not a valid cap (it would refuse every device handshake); ` +
+            `use "off" to disable the per-remote layer explicitly (reverse-proxy / NAT deployments collapse source IPs, A-075.52).`);
+    }
+    const n = Number(raw);
+    if (!Number.isSafeInteger(n)) {
+        throw new Error(`env DEVICE_MAX_PREAUTH_PER_REMOTE=${raw.length > 24 ? `${raw.slice(0, 24)}…(${raw.length} digits)` : raw} overflows the safe-integer range — ` +
+            `Number() would read it as ${n}, and a cap of Infinity silently disables the per-remote layer without taking the explicit "off" arm. ` +
+            `Use a value within Number.MAX_SAFE_INTEGER, or the literal "off".`);
+    }
+    return n;
+}
 function parseFileHistoryRetention() {
     const raw = process.env.FILE_HISTORY_RETENTION_KEEP;
     if (raw === undefined || raw === "")
@@ -1434,6 +1474,7 @@ function parseOrchestrationDomain(ctx) {
                                                                 ...((n) => (n !== undefined ? { reconnectGraceMs: n } : {}))(optNumEnvStrict("DEVICE_RECONNECT_GRACE_MS")),
                                                                 ...((n) => (n !== undefined ? { execTimeoutMs: n } : {}))(optNumEnvStrict("DEVICE_EXEC_TIMEOUT_MS")),
                                                                 ...((n) => (n !== undefined ? { maxInflightPerDevice: n } : {}))(optNumEnvStrict("DEVICE_MAX_INFLIGHT_PER_DEVICE")),
+                                                                ...((n) => (n !== undefined ? { maxPreAuthPerRemote: n } : {}))(parseDevicePreAuthPerRemoteEnv()),
                                                                 ...(process.env.DEVICE_SUPERSEDE ? { supersede: enumEnv("DEVICE_SUPERSEDE", "stale_only", ["stale_only", "deny"]) } : {}),
                                                             }
                                                             :

package/dist/device-ws-hub.d.ts

@@ -151,8 +151,10 @@ export interface DeviceWsHubOptions {
     chunkBufferMaxBytes?: number;
     /** codex R1-F3:本副本**未鉴权**连接的并发帽(超额在 upgrade 阶段就 503 拒)。 */
     maxPreAuthConnections?: number;
-    /** codex R1-F3:单来源地址的未鉴权连接并发帽。 */
-    maxPreAuthConnectionsPerRemote?: number;
+    /** codex R1-F3:单来源地址的未鉴权连接并发帽。S-04(A-075.52):字面 `off` = 显式停用该层——
+     *  帽键是裸 remoteAddress,XFF 反代 / 公司 NAT 部署形把全员折叠成单键,这层从公平层退化成
+     *  「全员共享一份预算」;停层后全局帽(`maxPreAuthConnections`)照常兜底。 */
+    maxPreAuthConnectionsPerRemote?: number | "off";
 }
 export interface DeviceWsHub {
     /** 把 `GET /v1/device/ws` 的 upgrade 处理器挂到裸 `http.Server` 上。 */

package/dist/device-ws-hub.js

@@ -735,9 +735,15 @@ export function createDeviceWsHub(options) {
             if (draining || closed)
                 return refuseUpgrade(socket, 503);
             const remoteKey = req.socket.remoteAddress ?? "unknown";
-            if (preAuthCount >= maxPreAuthConnections || (preAuthByRemote.get(remoteKey) ?? 0) >= maxPreAuthConnectionsPerRemote) {
-                metrics?.inc("device_preauth_refused_total");
-                logger?.warn("device_preauth_cap_hit", { remoteKey, preAuthCount, cap: maxPreAuthConnections });
+            const perRemoteCount = preAuthByRemote.get(remoteKey) ?? 0;
+            const globalHit = preAuthCount >= maxPreAuthConnections;
+            const perRemoteHit = maxPreAuthConnectionsPerRemote !== "off" && perRemoteCount >= maxPreAuthConnectionsPerRemote;
+            if (globalHit || perRemoteHit) {
+                const arm = globalHit ? (perRemoteHit ? "both" : "global") : "per_remote";
+                metrics?.inc("device_preauth_refused_total", { arm });
+                logger?.warn("device_preauth_cap_hit", {
+                    remoteKey, arm, preAuthCount, cap: maxPreAuthConnections, perRemoteCount, perRemoteCap: maxPreAuthConnectionsPerRemote,
+                });
                 return refuseUpgrade(socket, 503);
             }
             preAuthCount += 1;

package/dist/fleet/fleet-bus.d.ts

@@ -180,7 +180,10 @@ export interface FleetWorkflowRow {
     /** MF-Fleet additive(cli [1726] 二①):**已启动**(非排队中)的 agent 数 —— CC 2.1.220 `⚠ Large workflow`
      *  规模告警的分母。判别用 core 导出的 `deriveAgentDisplayStatus`(`startedAt` 未置 ⇒ 显示态 `queued`),
      *  **不自己重写谓词**:两端各写一遍必然漂移(本仓刚在治理面镜像上吃过同款)。
-     *  ADDITIVE / tolerate-absent:缺席时消费方可退回 `doneCount + failedCount` 这个**诚实下界**(告警偏早)。 */
+     *  ADDITIVE / tolerate-absent:缺席时消费方可退回 `doneCount + failedCount` 这个**诚实下界**(告警偏早)。
+     *  2.1.250 复核(S-11,语料=cc-decoded/cli250.js):告警函数 220↔250 逐字同形——agents 轴比的是
+     *  `scheduledAgents`,`started` 是 token/agent **投影的分母**(`started>0 ? totalTokens/started : 70k`);
+     *  阈值 25/1.5e6/70k 与 `CLAUDE_CODE_WORKFLOW_SIZE_WARNING_*` 覆盖名两版一致。 */
     startedCount?: number;
     elapsedMs?: number;
     tokens?: number;

package/dist/hooks/hook-runner.d.ts

@@ -48,7 +48,14 @@ export declare function hookMatcherMatches(matcher: string | undefined, value: s
  *  求值:名部走 permission matcher(交替/正则同 matcher 字段),括号内 arg-模式(`*` 通配)匹配工具输入的
  *  主字符串(Bash=command,文件工具=file_path/path)。CC 行为逐条目:不匹配 → 跳过该条目(记日志);
  *  非工具事件(payload 无 tool_name)→ "cannot be evaluated" 跳过;解析失败 → 跳过。返回:
- *  true=跑 / "not_matched" / "unevaluable"(调用方分别记账;跳过永不静默)。 */
+ *  true=跑 / "not_matched" / "unevaluable"(调用方分别记账;跳过永不静默)。
+ *
+ *  2.1.250 复核(S-11,2026-08-30;语料=sema-internal `blueprints/cc-decoded/cli250.js`):求值器与 220
+ *  逐字同构——五种工具事件之外「cannot be evaluated for non-tool event」跳过、「Skipping hook due to if
+ *  condition … not matching」跳过,两串日志逐字在场;括号内容经工具 `preparePermissionMatcher` 求值,与
+ *  本实现同向。差异登记(不改行为):①250 证据里名部=**规范化后等值比对**(`vd(toolName)!==o`),
+ *  「交替/正则」是 matcher 字段的文法——本实现名部走 hookMatcherMatches 属**超集**(alternation 也认),
+ *  如实登记不收窄;②250 的 `if` 已扩到 prompt/agent/http/mcp_tool 条目(本 runner 只翻 command,不涉)。 */
 export declare function hookIfMatches(cond: string, payload: unknown): true | "not_matched" | "unevaluable";
 /** createTaskHooks 的装配上下文(payload 的 CC-verbatim 字段来源)。 */
 export interface HookRunnerContext {

package/dist/http/route-ctx.d.ts

@@ -51,7 +51,9 @@ export interface RouteHelpers {
     usageWindowDenied(req: IncomingMessage, res: ServerResponse): Promise<boolean>;
     safeDecode(seg: string): string | null;
     isFleetWide(req: IncomingMessage): boolean;
-    runOwnerOk(req: IncomingMessage, res: ServerResponse, owner: string | null): boolean;
+    /** 属主门。`notFoundForm` 选 not-yours 臂的 404 拼法:缺省 `"run"`(not_found.run 长文,#262);session
+     *  资源面传 `"session"`(not_found.session + "session not found")与其 unknown 臂同码同串(G52 [5778])。 */
+    runOwnerOk(req: IncomingMessage, res: ServerResponse, owner: string | null, notFoundForm?: "run" | "session"): boolean;
     sessionOwnerScope(req: IncomingMessage): {
         fleetWide: boolean;
         gateOwner: string | null;

package/dist/http/routes/memory-bundle.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import { sendJson, sendError } from "../send.js";
-import { buildOriginFence, readOriginAware } from "../../memory-origin-fence.js";
+import { buildOriginFencedBundle, readOriginAware } from "../../memory-origin-fence.js";
 import { gatedPrincipal, explicitOperatorOk } from "../principal-gate.js";
 export const MEMORY_BUNDLE_EXPORT_PATH = "/v1/memory/export";
 export const MEMORY_BUNDLE_IMPORT_PATH = "/v1/memory/import";
@@ -94,8 +94,7 @@ async function handleMemoryBundleBody(req, res, url, ctx, miss) {
         }
         try {
             const bundle = await engineExport(parsed.data.scopes);
-            const fence = buildOriginFence(bundle.entries, readOriginAware(new URL(req.url ?? "", "http://x").searchParams));
-            sendJson(res, 200, fence.withheldOriginTagged !== undefined ? { ...bundle, entries: fence.entries, withheldOriginTagged: fence.withheldOriginTagged } : bundle);
+            sendJson(res, 200, buildOriginFencedBundle(bundle, readOriginAware(new URL(req.url ?? "", "http://x").searchParams)));
         }
         catch (err) {
             if (!sentClassifiedFailure(res, ctx, "export", err))

package/dist/http/routes/sessions.js

@@ -430,7 +430,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                 sendError(res, 404, "not_found.session", "session not found");
                 return;
             }
-            if (!runOwnerOk(req, res, audit.owner))
+            if (!runOwnerOk(req, res, audit.owner, "session"))
                 return;
             const faces = deps.memoryCompliance;
             if (faces === undefined) {

package/dist/http/server.js

@@ -2027,7 +2027,7 @@ export function createHttpServer(rawDeps) {
         const gateOwner = fleetWide ? null : (gatedPrincipal(req, deps.config) || null);
         return { fleetWide, gateOwner };
     }
-    function runOwnerOk(req, res, owner) {
+    function runOwnerOk(req, res, owner, notFoundForm = "run") {
         const principal = gatedPrincipal(req, deps.config);
         if (deps.config.requirePrincipal && !principal) {
             sendError(res, 401, "auth.principal_required", `missing principal header '${deps.config.principalHeader}'`);
@@ -2035,7 +2035,10 @@ export function createHttpServer(rawDeps) {
         }
         const legacyShellOwner = !deps.config.requirePrincipal && owner === "anon:shell-live" && (principal === undefined || principal === null);
         if (!legacyShellOwner && owner !== null && principal !== owner) {
-            sendError(res, 404, "not_found.run", RUN_NOT_FOUND_MESSAGE);
+            if (notFoundForm === "session")
+                sendError(res, 404, "not_found.session", "session not found");
+            else
+                sendError(res, 404, "not_found.run", RUN_NOT_FOUND_MESSAGE);
             return false;
         }
         return true;

package/dist/main.js

@@ -555,6 +555,7 @@ async function main() {
         posture: staticWiring.interaction.posture,
         streamApproval: streamApprovalGate.active ? "active" : streamApprovalGate.reason,
         subagentTranscripts: staticWiring.fleet.subagentTranscripts,
+        subagentTranscriptRetentionMs: config.backgroundAgentRetentionMs,
     });
     const stores = {
         runStore,

package/dist/memory-origin-fence.d.ts

@@ -1,42 +1,14 @@
-/**
- * design/383 S-6 / S-50 §三(S-49 F3)—— 带 `origin` 标的记忆条目在 wire 读口上的 **fence-or-refuse**。
- *
- * ## 病(S-6 禁形)
- * 记忆条目的 `origin` 标(design/336 provenance 标记族)是 additive 键。旧 SDK / 旧壳的 strict/strip parse 会
- * **静默剥掉**它 ⇒ 一条「外源已标」的条目摊平成无标文本,消费端再把它当洁净内容引用/回写 = 出处被洗掉。
- * core 无法在 wire 上强制(它不认识客户端),383 §3.4 显式授权 server 裁三点,S-50 §三裁定如下。
- *
- * ## 三点裁定(逐字)
- *  1. **判定点 = 端点级能力位,不猜客户端版本**:server 无 per-client 版本可见性。凡投影带标条目的读口,
- *     **缺省不投带标条目**;消费方以查询参数 `originAware=1` 声明「我认识 origin 键族」后才放行。参数缺席 =
- *     老客户端假定成立 ⇒ fence。
- *  2. **粒度 = 整条目扣留,不做字段降级**:字段级(剥 origin 只给文本)恰是被禁的摊平。整条目扣留 + 计数披露
- *     (`refusedUntrusted` 计数拒的既有先例形):响应带 `withheldOriginTagged: <n>`(additive,**只在 n>0 时铸**——
- *     只记真),消费端机读得出「有 n 条因我没声明能力而被围栏」。
- *  3. **能力位形 = 每请求查询参数,不是每客户端注册**:注册制引入一张会陈旧的表;查询参数让「谁认识键族」由
- *     当次调用自证,零状态。SDK 新版缺省带 `originAware=1`;旧 SDK 不带 ⇒ 结构性 fence。
- *
- * ## 判「带标」的谓词
- * 条目对象上 **own** `origin` 键且值非 `undefined`。不读 `origin` 的内部形(那是 core 的开放判别式),只判在场。
- *
- * ## 射程(S-50 §三.1 点名的读口,本仓现状三处)
- *  · `GET /v1/memory/export?scope=`(memory-policy.ts,属主自助条目读,分页/全量两腿)
- *  · `GET /v1/memory/origin/external?scopes=`(memory-origin.ts,外源标记人面 —— 它的每条都带标,缺省下
- *    全部扣留 + 计数:operator 的工具必须声明能力位才看得见,这正是「围栏」的意思,不是 bug)
- *  · `POST /v1/memory/export`(memory-bundle.ts,治理携出包 —— 包经 SDK 落盘再 import,旧 SDK 剥标后 import
- *    会把无标条目当洁净内容收进另一台 = 跨库洗出处;所以包也围栏,计数键落在包顶层)
- * 不围栏的:`GET /v1/memory/entries/:id/provenance`(单条出处账,消费它的人就是来读 origin 的,且响应根不是
- * 条目)、`GET /v1/memory/origin/clearances`(`buildClearanceRowWire` 深白名单投影,已是显式形)。
- *
- * ## 读面行为收窄 = L3(S-50 §三.3 成文)
- * 存量消费者若依赖读到带标条目(现状 = origin 键族尚未在这些读口上稳定出现;真实射程 = 蒸馏产物到货后的新条目),
- * 从本版起须带 `originAware=1`。判据入 383 片3 判据面。
- */
+import { type MemoryExportBundle } from "@sema-agent/core";
 /** 查询参数名与合法值(闭集:只认字面 `1`;`true`/`yes` 不认 —— 能力位不做宽松解析)。 */
 export declare const ORIGIN_AWARE_QUERY = "originAware";
 /** 从 `URLSearchParams` 读能力位:`originAware=1` ⇒ true;缺席/其它值 ⇒ false(老客户端假定)。 */
 export declare function readOriginAware(params: URLSearchParams): boolean;
-/** 「这条条目带 origin 标吗」—— own 键在场且非 undefined。纯谓词,不读 origin 的形。 */
+/** 「这条条目带 origin 标吗」—— 载体三形(G53 [5778] + codex R1-high 后齐):
+ *  ① 顶层 `origin`(listExternal 投影行)—— own 键在场且非 undefined 即带标(不读形;typed null/坏形也算:
+ *    core 读取器对 null 会抛,围栏对读不出的载体只许扣留不许放行);
+ *  ② `frontmatter.origin`(core `MemoryEntry`,138 S3)—— 同 own 键判;
+ *  ③ `frontmatter.extra` 的 origin 悬置形块 —— 单源直调 core 出口的 `committedOriginOf`(typed 缺席时读
+ *    extraOriginCarriers[0];退化形记 at:0 也算载体,过近似=安全方向),server 不自铸解析。 */
 export declare function isOriginTagged(entry: unknown): boolean;
 /**
  * 围栏(`build*`:纯数据)。`originAware=true` ⇒ 原数组同一引用、无计数键(零行为差);否则扣留带标条目,
@@ -47,4 +19,17 @@ export declare function buildOriginFence<T>(entries: readonly T[], originAware:
     entries: readonly T[];
     withheldOriginTagged?: number;
 };
+/**
+ * 治理携出包的围栏(`build*`:纯数据)。`originAware=true` ∨ 零扣留 ⇒ **原对象同一引用**(逐字节旧形,
+ * integrity 一个字不动);否则:扣留带标条目 + 顶层 `withheldOriginTagged`(只记真),并按扣留后内容重铸
+ * integrity —— `entryCount`=kept 数、`revs`=kept 的 id→rev(core 校验器要求 revs 基数≡条目 id 集,
+ * 只重算 entryCount/sectionHashes 而留旧 revs 同样过不了自校验)、`sectionHashes.entries`=kept 的
+ * canonical 哈希;meta/governance/residuals 三段内容未动 ⇒ 三段哈希原样。
+ * governance 行(challenges/lineage)**不**随条目扣留:它们不携 origin 键(无标可剥,S-6 的摊平病对它们
+ * 不成立),扣了反而是静默改写治理史;import 侧对超出 entries 的引用按 referentialOrphans 具名报告,
+ * 诚实方向一致。
+ */
+export declare function buildOriginFencedBundle(bundle: MemoryExportBundle, originAware: boolean): MemoryExportBundle & {
+    withheldOriginTagged?: number;
+};
 //# sourceMappingURL=memory-origin-fence.d.ts.map

package/dist/memory-origin-fence.js

@@ -1,9 +1,27 @@
+import { createHash } from "node:crypto";
+import { committedOriginOf } from "@sema-agent/core";
 export const ORIGIN_AWARE_QUERY = "originAware";
 export function readOriginAware(params) {
     return params.get(ORIGIN_AWARE_QUERY) === "1";
 }
 export function isOriginTagged(entry) {
-    return typeof entry === "object" && entry !== null && Object.prototype.hasOwnProperty.call(entry, "origin") && entry.origin !== undefined;
+    if (typeof entry !== "object" || entry === null)
+        return false;
+    if (Object.prototype.hasOwnProperty.call(entry, "origin") && entry.origin !== undefined)
+        return true;
+    const fm = entry.frontmatter;
+    if (typeof fm !== "object" || fm === null)
+        return false;
+    if (Object.prototype.hasOwnProperty.call(fm, "origin") && fm.origin !== undefined)
+        return true;
+    const extra = fm.extra;
+    if (extra === undefined)
+        return false;
+    if (!Array.isArray(extra))
+        return true;
+    if (!extra.every((l) => typeof l === "string"))
+        return true;
+    return committedOriginOf({ extra }) !== undefined;
 }
 export function buildOriginFence(entries, originAware) {
     if (originAware)
@@ -12,4 +30,37 @@ export function buildOriginFence(entries, originAware) {
     const withheld = entries.length - kept.length;
     return withheld > 0 ? { entries: kept, withheldOriginTagged: withheld } : { entries: kept };
 }
+function sha256Line(text) {
+    return createHash("sha256").update(`${text}\n`, "utf8").digest("hex");
+}
+function canonicalJsonStringify(value) {
+    if (Array.isArray(value))
+        return `[${value.map((v) => (v === undefined || typeof v === "function" || typeof v === "symbol" ? "null" : canonicalJsonStringify(v))).join(",")}]`;
+    if (value !== null && typeof value === "object") {
+        const rec = value;
+        const keys = Object.keys(rec)
+            .filter((k) => rec[k] !== undefined)
+            .sort();
+        return `{${keys.map((k) => `${JSON.stringify(k)}:${canonicalJsonStringify(rec[k])}`).join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+export function buildOriginFencedBundle(bundle, originAware) {
+    if (originAware)
+        return bundle;
+    const kept = bundle.entries.filter((e) => !isOriginTagged(e));
+    const withheld = bundle.entries.length - kept.length;
+    if (withheld === 0)
+        return bundle;
+    return {
+        ...bundle,
+        entries: kept,
+        integrity: {
+            entryCount: kept.length,
+            revs: Object.fromEntries(kept.map((e) => [e.id, e.rev])),
+            sectionHashes: { ...bundle.integrity.sectionHashes, entries: sha256Line(canonicalJsonStringify(kept)) },
+        },
+        withheldOriginTagged: withheld,
+    };
+}
 //# sourceMappingURL=memory-origin-fence.js.map

package/dist/run-local.js

@@ -5,7 +5,7 @@ import { realpathSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { fileURLToPath } from "node:url";
 import { loadRemoteExec } from "@sema-agent/settings-schema/node";
-import { Runner, uuidv7, parseModelMention, AdoptionError, FileStorageBackend, NodeExecutionEnv, NodeLspManager, TtlSessionStore, CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore } from "@sema-agent/core";
+import { Runner, uuidv7, parseModelMention, AdoptionError, FileStorageBackend, NodeExecutionEnv, NodeLspManager, TtlSessionStore, CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore, defaultTaskRegistry } from "@sema-agent/core";
 import { hasOperatorGateIntent } from "./approval.js";
 import { createBrain } from "./brain.js";
 import { assertGuardPatternsUsable, buildOnlySensitiveBaselineWarning, createApprovalBaselinePolicy, createDeploymentGovernanceInputs, } from "./deployment-governance.js";
@@ -378,9 +378,9 @@ export async function runLocal(argv, deps = {}) {
         promptSource,
         executionEnvFactory,
         lspManager,
-        backgroundAgentStore: undefined,
-        mailboxStore: undefined,
-        rosterStore: undefined,
+        backgroundAgentStore: fileBackend.backgroundAgentStore,
+        mailboxStore: fileBackend.mailboxStore,
+        rosterStore: fileBackend.rosterStore,
         deploymentHooks: {
             ...createPermissionDeniedMeter(metrics),
             ...(config.hooksTimeoutMs !== undefined ? { timeoutMs: config.hooksTimeoutMs } : {}),
@@ -416,6 +416,7 @@ export async function runLocal(argv, deps = {}) {
     const scenarioDeps = {
         runner, subRunner, handslessSubRunner, model: "default", skills, repoClient, metrics, logger,
         ...(webSearch ? { webSearch } : {}),
+        backgroundAgentStore: fileBackend.backgroundAgentStore,
         taskListStoreFor: taskListLane.storeFor,
         brandIdentity: true,
     };
@@ -473,6 +474,27 @@ export async function runLocal(argv, deps = {}) {
         ...(Object.keys(limits).length > 0 ? { limits } : {}),
     }, config, workspaceDir);
     logger.info("run_local_start", { scenario: scenarioName, model: spec.model, sessionId, exec: config.remoteExec?.provider ?? "in-process" });
+    const settleSessionBackground = async () => {
+        const reaped = defaultTaskRegistry.reapSessionBackground(sessionId, scope);
+        if (reaped === 0)
+            return;
+        const deadline = Date.now() + 5_000;
+        try {
+            for (;;) {
+                const running = (await fileBackend.backgroundAgentStore.listByScope(scope, { status: "running" })).length;
+                if (running === 0)
+                    return;
+                if (Date.now() >= deadline) {
+                    logger.warn("run_local_bg_settle_timeout", { reaped, stillRunning: running });
+                    return;
+                }
+                await new Promise((r) => setTimeout(r, 25));
+            }
+        }
+        catch (err) {
+            logger.warn("run_local_bg_settle_readback_failed", { reaped, err: err instanceof Error ? err.message : String(err) });
+        }
+    };
     let result;
     let exitCode = 0;
     const taskRunner = pickHandsRunner(cap.hands, { full: runner, handsless: handslessRunner });
@@ -481,6 +503,7 @@ export async function runLocal(argv, deps = {}) {
     }
     catch (err) {
         printErr(`task crashed: ${err instanceof Error ? err.message : String(err)}`);
+        await settleSessionBackground();
         runner.sessions.dispose();
         subRunner.sessions.dispose();
         void lspManager?.dispose();
@@ -509,6 +532,7 @@ export async function runLocal(argv, deps = {}) {
             logger.warn("memory_sync_failed", { reason: "post-task", err: String(err) });
         }
     }
+    await settleSessionBackground();
     runner.sessions.dispose();
     subRunner.sessions.dispose();
     void lspManager?.dispose();

package/dist/trace/core-keyset-guard.d.ts

@@ -18,11 +18,11 @@
 import type { TaskNotificationPayload, BackgroundChildEvent, RosterEntry, AskRequest, CheckpointSummary, TaskEvent, TraceEvent, MailboxMessage, MailboxStore } from "@sema-agent/core";
 /** 编译期断言:T 必须收敛到 never(有残余键 = tsc 红)。 */
 type AssertAllKeysHandled<T extends never> = T;
-type NotificationProjected = "task_id" | "task_type" | "toolUseId" | "status" | "summary" | "result" | "output_file" | "usage" | "sessionId" | "seq" | "lines" | "stoppedBy" | "source" | "exitCode" | "partial" | "diagnostics" | "recentSteps" | "editedFiles" | "resumable" | "completionId" | "error" | "errorCode";
+type NotificationProjected = "task_id" | "task_type" | "toolUseId" | "status" | "summary" | "result" | "output_file" | "usage" | "sessionId" | "seq" | "lines" | "stoppedBy" | "source" | "exitCode" | "partial" | "diagnostics" | "recentSteps" | "editedFiles" | "resumable" | "completionId" | "error" | "errorCode" | "apiFailure";
 type NotificationExcluded = "peer";
 type _GuardNotification = AssertAllKeysHandled<Exclude<keyof TaskNotificationPayload, NotificationProjected | NotificationExcluded>>;
 type BgNotifProjected = "taskId" | "sessionId" | "seq" | "status" | "summary" | "stoppedBy" | "resumable" | "recentSteps" | "editedFiles" | "usage" | "transcriptId" | "rootSessionId" | "parentTaskId" | "parentToolCallId" | "completionId";
-type BgNotifExcluded = "kind" | "sessionScoped" | "owner" | "scope" | "description" | "agentType" | "name" | "currentAction" | "currentTool" | "parentSessionId" | "startedAt" | "workflowRunId" | "progressTaskId" | "progressParentTaskId";
+type BgNotifExcluded = "kind" | "sessionScoped" | "owner" | "scope" | "description" | "agentType" | "name" | "currentAction" | "currentTool" | "parentSessionId" | "startedAt" | "workflowRunId" | "progressTaskId" | "progressParentTaskId" | "model";
 type _GuardBgNotif = AssertAllKeysHandled<Exclude<keyof BackgroundChildEvent, BgNotifProjected | BgNotifExcluded>>;
 type RosterProjected = "name" | "agentId" | "sessionId" | "toolUseId" | "owner" | "scope" | "sessionScoped" | "rootSessionId" | "model" | "modelFallback" | "createdAt";
 type _GuardRoster = AssertAllKeysHandled<Exclude<keyof RosterEntry, RosterProjected>>;

package/dist/trace/project.d.ts

@@ -165,6 +165,7 @@ export declare function taskProgressEventData(ev: {
     workflowRunId?: string;
     workflowAgentLabel?: string;
     seq?: number;
+    model?: string;
 }): Record<string, unknown>;
 /** The `task_notification` payload (core 1.202 design/115 P2: a background task finished — this event is the
  *  LEDGER/display projection of the OBSERVED terminal state, emitted the moment core observes it. It does NOT
@@ -209,6 +210,10 @@ export declare function taskNotificationEventData(ev: {
         completionId?: string;
         error?: string;
         errorCode?: string;
+        apiFailure?: {
+            status?: number;
+            requestId?: string;
+        };
     };
     eventId?: string;
     parentToolCallId?: string;

package/dist/trace/project.js

@@ -106,6 +106,7 @@ export function taskProgressEventData(ev) {
         ...(typeof ev.taskType === "string" && ev.taskType.length > 0 ? { taskType: ev.taskType } : {}),
         ...(ev.parentTaskId ? { parentTaskId: ev.parentTaskId } : {}),
         ...(ev.name ? { name: redactSecrets(ev.name) } : {}),
+        ...(typeof ev.model === "string" && ev.model.length > 0 ? { model: ev.model } : {}),
         ...(ev.status !== undefined ? { status: ev.status } : {}),
         ...(ev.usage ? { usage: ev.usage } : {}),
         ...(ev.currentAction ? { currentAction: redactSecrets(ev.currentAction) } : {}),
@@ -129,6 +130,14 @@ export function taskNotificationEventData(ev) {
         ...(n.completionId !== undefined ? { completionId: n.completionId } : {}),
         ...(n.error !== undefined ? { error: redactSecrets(n.error) } : {}),
         ...(n.errorCode !== undefined ? { errorCode: n.errorCode } : {}),
+        ...(n.apiFailure !== undefined
+            ? {
+                apiFailure: {
+                    ...(typeof n.apiFailure.status === "number" ? { status: n.apiFailure.status } : {}),
+                    ...(typeof n.apiFailure.requestId === "string" ? { requestId: n.apiFailure.requestId } : {}),
+                },
+            }
+            : {}),
         ...(n.source !== undefined ? { source: redactSecrets(n.source) } : {}),
         ...(n.exitCode !== undefined ? { exitCode: n.exitCode } : {}),
         ...(n.partial !== undefined ? { partial: n.partial } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.52.0",
+  "version": "7.52.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.0.0",
+    "@sema-agent/core": "7.0.1",
     "@sema-agent/settings-schema": "1.0.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -69,7 +69,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "7.2.0",
+    "@sema-agent/sdk": "7.3.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",