@sema-agent/server 7.73.0 → 7.73.1

package/dist/plugins/approval-ask-store-memory.js

@@ -1,5 +1,5 @@
 import { canAskTransition } from "../approval-ask-machine.js";
-import { assertIdempotencyKeyShape, ApprovalAskReadAbortedError, projectAskTerminalClaimTruth } from "./approval-ask-store-sql.js";
+import { assertIdempotencyKeyShape, assertIntegralEpochMs, ApprovalAskReadAbortedError, projectAskTerminalClaimTruth } from "./approval-ask-store-sql.js";
 function applyPatch(row, patch) {
     if (patch.decision !== undefined)
         row.decision = patch.decision;
@@ -24,6 +24,8 @@ export class InMemoryApprovalAskStore {
     asks = new Map();
     batches = new Map();
     async ensureAsk(row) {
+        assertIntegralEpochMs("expiresAtMs", row.expiresAtMs);
+        assertIntegralEpochMs("createdAtMs", row.createdAtMs);
         if (!this.batches.has(row.batchId)) {
             this.batches.set(row.batchId, {
                 batchId: row.batchId,

package/dist/plugins/approval-ask-store-sql.d.ts

@@ -226,6 +226,11 @@ export type DecideResult = {
  * `idempotency_conflict`/回放结果。键是调用方铸的 opaque 值,首尾空白没有任何合法语义,
  * 在边界上 fail-loud 拒掉,方言分歧面整个消失(比把列改 VARBINARY 更窄、且对三形同时成立)。
  */
+/** BIGINT 毫秒列的整数守卫(两 twin 同一只):`expires_at_ms` / `created_at_ms` / `updated_at_ms` 落库前必须是
+ *  安全整数。带小数的墙钟(`Date.now() + performance.now()` 派生窗)在 PG 上被 `bigint` 拒收、在 MySQL 协议上被
+ *  隐式截断 —— 两方言不同答;这里改成两方言同一句 TypeError(响亮,点名字段与值),铸点侧(`tool-approval.ts`
+ *  的 deadline 铸点)负责给整数,本守卫只拦漏网。 */
+export declare function assertIntegralEpochMs(field: string, value: number): void;
 export declare function assertIdempotencyKeyShape(key: string): void;
 /**
  * [ref] 车3 刀 3b(§14.2 遗留记账):两条**重放读口**被调用方的 deadline 掐断时抛的具名错误。

package/dist/plugins/approval-ask-store-sql.js

@@ -1,6 +1,11 @@
 import { mysqlDriver, pgDriver, dialectJsonEncoder } from "./sql-driver.js";
 import { canAskTransition } from "../approval-ask-machine.js";
 import { isDupKeyError, isMissingColumnError } from "./sql-errors.js";
+export function assertIntegralEpochMs(field, value) {
+    if (!Number.isSafeInteger(value)) {
+        throw new TypeError(`approval-ask store: ${field} must be an integer epoch-ms (BIGINT column), got ${String(value)}`);
+    }
+}
 export function assertIdempotencyKeyShape(key) {
     if (key.length === 0 || key.length > 255 || key.trim() !== key) {
         throw new Error(`invalid idempotency key: must be 1-255 chars with no leading/trailing whitespace (got ${JSON.stringify(key.slice(0, 32))}${key.length > 32 ? "…" : ""}, length ${key.length})`);
@@ -314,6 +319,8 @@ export class SqlApprovalAskStore {
         return rows[0] ? mapBatchRow(rows[0]) : null;
     }
     async ensureAsk(row) {
+        assertIntegralEpochMs("expiresAtMs", row.expiresAtMs);
+        assertIntegralEpochMs("createdAtMs", row.createdAtMs);
         const now = row.createdAtMs;
         let insertedRows = 0;
         const conn = await this.db.connect();

package/dist/tool-approval.js

@@ -852,7 +852,7 @@ export class ToolApprovalCoordinator {
         };
         const windowBudgetMs = reachability === "unreached" ? this.unreachedTtlMs : this.ttlMs;
         const effectiveWindowMs = effectiveAskWindowMs(windowBudgetMs, this.windowMarginMs, origin.legDeadlineMonotonic, performance.now());
-        const expiresAtMs = Date.now() + effectiveWindowMs;
+        const expiresAtMs = Math.ceil(Date.now() + effectiveWindowMs);
         let askId;
         let batchId;
         const card = this.askStore ? buildApprovalCard(frame, req, req.requiresRealApproval === true) : undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.73.0",
+  "version": "7.73.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",