@sema-agent/server 7.63.0 → 7.64.0

package/dist/trace/core-keyset-guard.d.ts

@@ -17,7 +17,7 @@
  * ⑨⑩([ref],2026-08-31)把两个最大的 wire 面也纳入:TaskSpec 按「server 有无写点」记 Wired/Unwired,
  * TaskResult 按「转发/摘除」记 Forwarded/Stripped —— 谁改 resolve-spec.ts / runs.ts 的发射点谁同步本文件。
  */
-import type { TaskNotificationPayload, BackgroundChildEvent, RosterEntry, AskRequest, CheckpointSummary, TaskEvent, TraceEvent, MailboxMessage, MailboxAppendMessage, TaskSpec, TaskResult } from "@sema-agent/core";
+import type { TaskNotificationPayload, BackgroundChildEvent, RosterEntry, AskRequest, CheckpointSummary, TaskEvent, TraceEvent, MailboxMessage, MailboxAppendMessage, TaskSpec, TaskResult, GateOutcome, Settlement, PausedCause } from "@sema-agent/core";
 /** 编译期断言:T 必须收敛到 never(有残余键 = tsc 红)。 */
 type AssertAllKeysHandled<T extends never> = T;
 type NotificationProjected = "task_id" | "task_type" | "toolUseId" | "status" | "summary" | "result" | "output_file" | "usage" | "sessionId" | "seq" | "lines" | "stoppedBy" | "source" | "exitCode" | "partial" | "diagnostics" | "recentSteps" | "editedFiles" | "resumable" | "completionId" | "error" | "errorCode" | "apiFailure" | "agentMessage" | "_sema_provenance";
@@ -52,10 +52,20 @@ type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requi
 type TaskSpecUnwired = "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars";
 type _GuardTaskSpec = AssertAllKeysHandled<Exclude<keyof TaskSpec, TaskSpecWired | TaskSpecUnwired>>;
 type _GuardTaskSpecReverse = AssertAllKeysHandled<Exclude<TaskSpecWired | TaskSpecUnwired, keyof TaskSpec>>;
-type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "status" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "blockedReason" | "checkpointId" | "checkpointGate" | "workspaceRestoreMode" | "remoteEnvFailures" | "errorMessage" | "errorCode" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveMemoryScopes" | "stats" | "editedFiles";
-type TaskResultStripped = "checkpointToken";
+type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "terminal" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "remoteEnvFailures" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveMemoryScopes" | "stats" | "editedFiles";
+type TaskResultStripped = never;
 type _GuardTaskResult = AssertAllKeysHandled<Exclude<keyof TaskResult, TaskResultForwarded | TaskResultStripped>>;
 type _GuardTaskResultReverse = AssertAllKeysHandled<Exclude<TaskResultForwarded | TaskResultStripped, keyof TaskResult>>;
+type PausedCauseForwarded = "kind" | "gate" | "checkpointId" | "restoreMode";
+type PausedCauseStripped = "token";
+type _GuardPausedCause = AssertAllKeysHandled<Exclude<keyof PausedCause, PausedCauseForwarded | PausedCauseStripped>>;
+type _NoDoubleBookPausedCause = AssertAllKeysHandled<Extract<PausedCauseForwarded, PausedCauseStripped>>;
+type _GuardPausedCauseReverse = AssertAllKeysHandled<Exclude<PausedCauseForwarded | PausedCauseStripped, keyof PausedCause>>;
+type SettlementKeys = Settlement extends infer S ? (S extends object ? keyof S : never) : never;
+type SettlementWhoKeys = Settlement["who"] extends infer W ? (W extends object ? keyof W : never) : never;
+type _GuardGateOutcome = AssertAllKeysHandled<Exclude<keyof GateOutcome, "disposition" | "settlement" | "origin">>;
+type _GuardSettlement = AssertAllKeysHandled<Exclude<SettlementKeys, "kind" | "who" | "when" | "note">>;
+type _GuardSettlementWho = AssertAllKeysHandled<Exclude<SettlementWhoKeys, "party" | "approver" | "window">>;
 export type CoreKeysetGuards = [
     _GuardNotification,
     _GuardBgNotif,
@@ -71,7 +81,13 @@ export type CoreKeysetGuards = [
     _GuardTaskSpec,
     _GuardTaskSpecReverse,
     _GuardTaskResult,
-    _GuardTaskResultReverse
+    _GuardTaskResultReverse,
+    _GuardGateOutcome,
+    _GuardSettlement,
+    _GuardSettlementWho,
+    _GuardPausedCause,
+    _NoDoubleBookPausedCause,
+    _GuardPausedCauseReverse
 ];
 export {};
 //# sourceMappingURL=core-keyset-guard.d.ts.map

package/dist/trace/ledger-sink.d.ts

@@ -1,3 +1,4 @@
+import { type TerminalCause } from "@sema-agent/core";
 import { brainStatusEventData } from "./project.js";
 import { NotifiedKeys } from "../orchestration/workflow-completion-inbox.js";
 import type { LedgerEventType } from "./ledger-events.js";
@@ -73,7 +74,7 @@ export interface LedgerSink {
     /** Convenience for the sync detach lane (no model-usage interleave there): flush, then project the result
      *  to its park/terminal event exactly like the bg leg's done case. `result` must already be stripped. */
     onDone(result: {
-        status?: string;
+        terminal: TerminalCause;
     }): Promise<void>;
 }
 /**

package/dist/trace/ledger-sink.js

@@ -1,3 +1,4 @@
+import { terminalProjection } from "@sema-agent/core";
 import { redactSecrets } from "./redact.js";
 import { toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
 import { NotifiedKeys, taskNotificationStreamKey } from "../orchestration/workflow-completion-inbox.js";
@@ -143,16 +144,22 @@ export function createLedgerSink(opts) {
         beat("status", statusData);
         return append("status", statusData);
     };
-    const appendParked = (kind, result) => append(kind, {
-        gate: result?.checkpointGate ?? null,
-        ...(typeof result?.toolCallId === "string" ? { toolCallId: result.toolCallId } : {}),
-    });
+    const appendParked = (kind, result) => {
+        const t = result?.terminal;
+        return append(kind, {
+            gate: t?.kind === "paused" ? t.gate : null,
+            ...(typeof result?.toolCallId === "string" ? { toolCallId: result.toolCallId } : {}),
+        });
+    };
     const appendDone = (result) => append("done", { result });
     const onDone = async (result) => {
         await flush();
-        if (result.status === "suspended" || result.status === "needs_review") {
-            await appendParked(result.status, result);
-            return;
+        if (result.terminal.kind === "paused") {
+            const parkKind = terminalProjection(result.terminal).status;
+            if (parkKind === "suspended" || parkKind === "needs_review") {
+                await appendParked(parkKind, result);
+                return;
+            }
         }
         await appendDone(result);
     };

package/dist/trace/project.d.ts

@@ -12,8 +12,7 @@
  * old session-join `toolOutput` hook is gone, there's a real source now); `eventId`/`parentToolCallId` (§E2) ride
  * each content event, additive / tolerate-absent.
  */
-import type { ApprovalSettledBy, TaskResult, SystemInjectionPriority } from "@sema-agent/core";
-import { type AskDenyResolution } from "@sema-agent/core";
+import type { GateOutcome, McpDelivered, TaskResult, SystemInjectionPriority } from "@sema-agent/core";
 import type { RunEvent, RunRecord } from "../plugins/store-contracts.js";
 import type { ModelUsageDelta, ModelUsageTracker, PromptManifestRecord } from "../budget.js";
 import { type SemaProvenanceInput } from "./sema-provenance.js";
@@ -95,10 +94,8 @@ export type TraceBlock = {
     totalChars?: number;
     structured?: unknown;
     errorCode?: string;
-    settledBy?: ApprovalSettledBy;
-    resolution?: AskDenyResolution;
-    autoDenied?: true;
-    approver?: string;
+    delivered?: McpDelivered;
+    gate?: GateOutcome;
     gatedCallId?: string;
     eventId?: string;
     parentToolCallId?: string;
@@ -122,6 +119,7 @@ export declare function toolStartEventData(ev: {
     eventId?: string;
     parentToolCallId?: string;
 }): Record<string, unknown>;
+export declare function screenedGate(v: unknown): GateOutcome | undefined;
 /** The durable `tool_end` payload (shared by both append sites). E1: the model-facing `output` is UNTRUSTED RAW
  *  from core (file/shell/API bodies) — core only SIZE-bounds it (`truncated`), REDACTION is ours (same contract as
  *  `tool_start.args`); never re-fed to a model. E2: identity. Absent `output` ⇒ the tool produced no content body.
@@ -141,10 +139,8 @@ export declare function toolEndEventData(ev: {
     totalChars?: number;
     structured?: unknown;
     errorCode?: string;
-    settledBy?: ApprovalSettledBy;
-    resolution?: AskDenyResolution;
-    autoDenied?: true;
-    approver?: string;
+    delivered?: McpDelivered;
+    gate?: GateOutcome;
     gatedCallId?: string;
     eventId?: string;
     parentToolCallId?: string;
@@ -389,8 +385,9 @@ export declare function workspaceChangedEventData(ev: {
  *       那条端点的真源是 server 自己的部署面台账(server 自铸的二态),本段的真源是 core 这条腿
  *       materialize 的连接时快照;同名不同源,合并只会造出一个「哪个才算数」的新问题。
  *    ② **值的形**:`name`(spec 声明名)/ `source`(声明方自述的层级标签,core 已 single-line + 长度封顶
- *       逐字回显)/ `status`(三词闭集)/ `errorCode`(core `MCP_FAILURE_CODES` 十词闭集 + `http_<status>`)/
- *       `toolCount`(有限数)—— 全是引擎或**声明方**产的闭形值,非用户内容 ⇒ 不脱敏、逐字。
+ *       逐字回显)/ `status`(三词闭集)/ `errorCode`(core 7.6.0 起 `McpFailureKind` 十词闭集)/
+ *       `delivered`(投递判词三词闭集)/ `httpStatus`(有限数)/ `toolCount`(有限数)—— 全是引擎或
+ *       **声明方**产的闭形值,非用户内容 ⇒ 不脱敏、逐字。
  *       ⚠️ `errorCode` **不是纯闭集**:十个具名词之外还有 `http_<status>` 形(core 自陈)⇒ 本仓既不枚举
  *       那十个词、也不给它套形正则(词的单一属主在 core;抄一份会把 core 加的新词与新形一起吞成缺席),
  *       只判非空串,消费端按具名词写的 switch 必须带 default 臂。

package/dist/trace/project.js

@@ -1,5 +1,6 @@
 import { redactErrorMessage } from "../observability/run-terminal-log.js";
-import { isApprovalSettledBy, isAskDenyResolution } from "@sema-agent/core";
+import { MCP_DELIVERY_VERDICTS, screenGateOutcome } from "@sema-agent/core";
+import { recordFailOpen } from "../observability/fail-open.js";
 import { redactSecrets, redactDeep } from "./redact.js";
 import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceOrAbsent } from "./sema-provenance.js";
@@ -83,7 +84,52 @@ function identityFields(src) {
 export function toolStartEventData(ev) {
     return { toolCallId: ev.toolCallId, toolName: ev.toolName, ...(ev.label !== undefined ? { label: ev.label } : {}), args: redactDeep(ev.args), ...identityFields(ev) };
 }
+const SETTLEMENT_NOTE_MAX = 500;
+export function screenedGate(v) {
+    if (v === null || typeof v !== "object")
+        return undefined;
+    const g = v;
+    const d = g.disposition;
+    if (d === null || typeof d !== "object" || (d.kind !== "allowed" && d.kind !== "denied")) {
+        recordFailOpen("server.trace.gate-outcome-defective", "disposition is not one of the two arms");
+        return undefined;
+    }
+    const defects = screenGateOutcome(g);
+    if (defects.length > 0) {
+        recordFailOpen("server.trace.gate-outcome-defective", defects.join("; "));
+        return undefined;
+    }
+    const settlement = g.settlement === undefined ? undefined : projectSettlement(g.settlement);
+    if (g.settlement !== undefined && settlement === undefined) {
+        recordFailOpen("server.trace.gate-outcome-defective", "settlement.who is not an object with a party in the closed set");
+        return undefined;
+    }
+    return {
+        disposition: d.kind === "denied" ? { kind: "denied", deniedBy: d.deniedBy } : { kind: "allowed" },
+        ...(settlement === undefined ? {} : { settlement }),
+        ...(g.origin === undefined ? {} : { origin: g.origin }),
+    };
+}
+const SETTLEMENT_PARTIES = new Set(["person", "engine", "host", "none"]);
+function projectSettlement(st) {
+    const whoV = st.who;
+    const partyV = whoV === null || typeof whoV !== "object" ? undefined : whoV.party;
+    if (typeof partyV !== "string" || !SETTLEMENT_PARTIES.has(partyV))
+        return undefined;
+    const who = whoV;
+    return {
+        kind: st.kind,
+        when: st.when,
+        who: {
+            party: who.party,
+            ...(typeof who.approver === "string" && who.approver !== "" ? { approver: redactSecrets(who.approver) } : {}),
+            ...(typeof who.window === "string" ? { window: who.window } : {}),
+        },
+        ...(typeof st.note === "string" ? { note: redactSecrets(st.note).slice(0, SETTLEMENT_NOTE_MAX) } : {}),
+    };
+}
 export function toolEndEventData(ev) {
+    const gate = ev.gate === undefined ? undefined : screenedGate(ev.gate);
     return {
         toolCallId: ev.toolCallId,
         toolName: ev.toolName,
@@ -94,10 +140,8 @@ export function toolEndEventData(ev) {
         ...(Number.isFinite(ev.totalChars) ? { totalChars: ev.totalChars } : {}),
         ...(ev.structured !== undefined ? { structured: redactDeep(ev.structured) } : {}),
         ...(typeof ev.errorCode === "string" && ev.errorCode.length <= 128 ? { errorCode: ev.errorCode } : {}),
-        ...(isApprovalSettledBy(ev.settledBy) ? { settledBy: ev.settledBy } : {}),
-        ...(isAskDenyResolution(ev.resolution) ? { resolution: ev.resolution } : {}),
-        ...(ev.autoDenied === true ? { autoDenied: true } : {}),
-        ...(typeof ev.approver === "string" && ev.approver !== "" ? { approver: redactSecrets(ev.approver) } : {}),
+        ...(typeof ev.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(ev.delivered) ? { delivered: ev.delivered } : {}),
+        ...(gate !== undefined ? { gate } : {}),
         ...(typeof ev.gatedCallId === "string" && ev.gatedCallId !== "" ? { gatedCallId: ev.gatedCallId } : {}),
         ...identityFields(ev),
     };
@@ -289,6 +333,8 @@ export function wiringManifestEventData(ev) {
                 ...(num(e.toolCount) !== undefined ? { toolCount: e.toolCount } : {}),
                 ...(str(e.source) !== undefined ? { source: e.source } : {}),
                 ...(str(e.errorCode) !== undefined ? { errorCode: e.errorCode } : {}),
+                ...(typeof e.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(e.delivered) ? { delivered: e.delivered } : {}),
+                ...(num(e.httpStatus) !== undefined ? { httpStatus: e.httpStatus } : {}),
             });
         }
         return rows;
@@ -447,6 +493,7 @@ export function toolCallFieldsOf(d) {
     };
 }
 export function toolResultFieldsOf(d) {
+    const gate = d.gate === undefined ? undefined : screenedGate(d.gate);
     return {
         callId: String(d.toolCallId ?? ""),
         ...(typeof d.label === "string" ? { label: d.label } : {}),
@@ -454,10 +501,8 @@ export function toolResultFieldsOf(d) {
         ...(Number.isFinite(d.totalChars) ? { totalChars: d.totalChars } : {}),
         ...(d.structured !== undefined ? { structured: d.structured } : {}),
         ...(typeof d.errorCode === "string" ? { errorCode: d.errorCode } : {}),
-        ...(isApprovalSettledBy(d.settledBy) ? { settledBy: d.settledBy } : {}),
-        ...(typeof d.approver === "string" && d.approver !== "" ? { approver: d.approver } : {}),
-        ...(isAskDenyResolution(d.resolution) ? { resolution: d.resolution } : {}),
-        ...(d.autoDenied === true ? { autoDenied: true } : {}),
+        ...(typeof d.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(d.delivered) ? { delivered: d.delivered } : {}),
+        ...(gate !== undefined ? { gate } : {}),
         ...(typeof d.gatedCallId === "string" && d.gatedCallId !== "" ? { gatedCallId: d.gatedCallId } : {}),
         ...identityFields(d),
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.63.0",
+  "version": "7.64.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,8 +54,8 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.5.2",
-    "@sema-agent/settings-schema": "1.7.2",
+    "@sema-agent/core": "7.6.2",
+    "@sema-agent/settings-schema": "1.8.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",
@@ -69,7 +69,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "8.3.0",
+    "@sema-agent/sdk": "8.4.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",