@sema-agent/server 7.75.2 → 7.75.4

package/dist/fleet/subagent-tail-bus.js

@@ -1,5 +1,5 @@
 import { redactSecrets } from "../trace/redact.js";
-import { taskProgressEventData, toolStartEventData, toolEndEventData } from "../trace/project.js";
+import { taskProgressEventData, toolStartEventData, toolEndEventData, textEndEventData } from "../trace/project.js";
 const TAIL_QUEUE_CAP = 512;
 export function projectTailFrame(e) {
     const t = e.type;
@@ -19,14 +19,8 @@ export function projectTailFrame(e) {
         return { type: "text_delta", delta: td.delta, ...(td.eventId ? { eventId: td.eventId } : {}), ...(td.parentToolCallId ? { parentToolCallId: td.parentToolCallId } : {}) };
     }
     if (t === "text_end") {
-        if (typeof e.content !== "string" || e.content.length === 0)
-            return null;
-        return {
-            type: "text_end",
-            content: e.content,
-            ...(typeof e.eventId === "string" ? { eventId: e.eventId } : {}),
-            ...(typeof e.parentToolCallId === "string" ? { parentToolCallId: e.parentToolCallId } : {}),
-        };
+        const f = textEndEventData(e);
+        return f === null ? null : { type: "text_end", ...f };
     }
     if (t === "reasoning_delta") {
         const rd = e;

package/dist/http/routes/tasks.js

@@ -12,7 +12,7 @@ import { clearTurnActivity, readTurnActivityMs, recordTurnActivity } from "../..
 import { mintCancelledResult } from "../../run-cancel-context.js";
 import { recordResourceWindow } from "../../resource-window.js";
 import { redactSecrets } from "../../trace/redact.js";
-import { contextUsageEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, wiringManifestOperatorEventData, toolRosterDeltaEventData, humanInputEventData, appendModelUsageDelta, attachModelUsage } from "../../trace/project.js";
+import { contextUsageEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, wiringManifestOperatorEventData, toolRosterDeltaEventData, humanInputEventData, appendModelUsageDelta, attachModelUsage, textEndEventData } from "../../trace/project.js";
 import { cascadeConfig, runMeta } from "../run-meta.js";
 import { scopedIdempotencyKey } from "../idempotency.js";
 import { sendJson, sendError, sseHeaders } from "../send.js";
@@ -347,8 +347,9 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                                         sseData(res, { type: "text_delta", delta: td.delta, ...(td.eventId ? { eventId: td.eventId } : {}), ...(td.parentToolCallId ? { parentToolCallId: td.parentToolCallId } : {}) });
                                     }
                                     else if (t === "text_end") {
-                                        const tend = e;
-                                        sseData(res, { type: "text_end", content: tend.content, ...(tend.eventId ? { eventId: tend.eventId } : {}), ...(tend.parentToolCallId ? { parentToolCallId: tend.parentToolCallId } : {}) });
+                                        const tend = textEndEventData(e);
+                                        if (tend !== null)
+                                            sseData(res, { type: "text_end", ...tend });
                                     }
                                     else if (t === "reasoning_delta") {
                                         const rd = e;
@@ -493,16 +494,19 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                                         ...(e.sourceTaskId !== undefined ? { sourceTaskId: e.sourceTaskId } : {}),
                                         ...(e.bgAgentId !== undefined ? { bgAgentId: e.bgAgentId } : {}),
                                     };
+                                    const textEnd = ev.type === "text_end" ? textEndEventData(e) : undefined;
                                     const arm = ev.type === "text_delta"
                                         ? { type: "text_delta", delta: e.delta, ...ident }
                                         : ev.type === "text_end"
-                                            ? { type: "text_end", content: e.content, ...ident }
+                                            ?
+                                                textEnd === null || textEnd === undefined ? null : { type: "text_end", ...textEnd }
                                             : ev.type === "turn_end"
                                                 ? { type: "turn_end", ...(e.usage !== undefined ? { usage: e.usage } : {}), ...(e.usageMissing !== undefined ? { usageMissing: e.usageMissing } : {}), ...(e.stopReason !== undefined ? { stopReason: e.stopReason } : {}), ...ident }
                                                 : ev.type === "message_committed"
                                                     ? { type: "message_committed", entryId: e.entryId, role: e.role, ...(e.toolCallId !== undefined ? { toolCallId: e.toolCallId } : {}), ...ident }
                                                     : { type: "context_usage", ...contextUsageEventData(ev), ...ident };
-                                    sseData(res, arm);
+                                    if (arm !== null)
+                                        sseData(res, arm);
                                 }
                                 else {
                                     sseData(res, ev);

package/dist/trace/project.d.ts

@@ -187,6 +187,13 @@ export declare function screenedGate(v: unknown): GateOutcome | undefined;
  * 不改原对象(调用方与账本共享引用):有变更时换一只信封,原记录一个字节不动。
  */
 export declare function screenedStoredEventData(type: string, data: unknown): unknown;
+/** `text_end` 段末帧的**唯一**铸点(三腿共用:top stream / 转发子代腿 / 子代 tail 面)。content = 段权威全文 ⇒ 与
+ *  durable 面(`result` / 账本 `text` 行)同一只 {@link redactModelText}(认出才改写、抛则占位、不设上限)。
+ *  此前三处各自逐字透传 —— 同一份文本毫秒后在 `done.result.result` 上已脱,live 面却在凭据生成瞬间明文(B-114)。
+ *  `text_delta` 仍逐字:跨 chunk 的凭据无法就地判,流式脱敏是独立设计件(S-270)。
+ *  坏形(content 非串/空串)⇒ null(丢帧,不铸「权威空段」:core 契约明言空段不发本帧,消费端收到空段会清掉已攒 delta)。
+ *  身份四键零字节变换(live 现状带全四键,消费端可能已依赖)。 */
+export declare function textEndEventData(ev: Record<string, unknown>): Record<string, unknown> | null;
 /** The durable `tool_end` payload (shared by both append sites). E1: the model-facing `output` is UNTRUSTED RAW
  *  from core (file/shell/API bodies) — core only SIZE-bounds it (`truncated`), REDACTION is ours (same contract as
  *  `tool_start.args`); never re-fed to a model. E2: identity. Absent `output` ⇒ the tool produced no content body.

package/dist/trace/project.js

@@ -1,4 +1,4 @@
-import { redactErrorMessage } from "../observability/run-terminal-log.js";
+import { redactErrorMessage, redactModelText } from "../observability/run-terminal-log.js";
 import { MCP_DELIVERY_VERDICTS, screenGateOutcome, ToolRoster, ToolRosterDelta } from "@sema-agent/core";
 import { Value } from "typebox/value";
 import { recordFailOpen } from "../observability/fail-open.js";
@@ -173,6 +173,17 @@ function projectSettlement(st) {
         ...(typeof st.note === "string" ? { note: redactSecrets(st.note).slice(0, SETTLEMENT_NOTE_MAX) } : {}),
     };
 }
+export function textEndEventData(ev) {
+    if (typeof ev.content !== "string" || ev.content.length === 0)
+        return null;
+    return {
+        content: redactModelText(ev.content),
+        ...(ev.eventId !== undefined ? { eventId: ev.eventId } : {}),
+        ...(ev.parentToolCallId !== undefined ? { parentToolCallId: ev.parentToolCallId } : {}),
+        ...(ev.sourceTaskId !== undefined ? { sourceTaskId: ev.sourceTaskId } : {}),
+        ...(ev.bgAgentId !== undefined ? { bgAgentId: ev.bgAgentId } : {}),
+    };
+}
 export function toolEndEventData(ev) {
     const gate = ev.gate === undefined ? undefined : screenedGate(ev.gate);
     return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.75.2",
+  "version": "7.75.4",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.17.5",
+    "@sema-agent/core": "7.17.6",
     "@sema-agent/settings-schema": "1.10.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",