@sema-agent/server 7.78.0 → 7.78.1

package/dist/task-settings.js

@@ -1,6 +1,7 @@
 import { combinePolicies, createAllowDenyPolicy, createFsWriteGatePolicy, createPermissionRulePolicy, parseRuleText, tightenTaskSpec, resolveReasoningProfile, rankOf, isThinkingLevel, CYBER_RISK, URL_SAFETY, HARNESS_SECTION_ANCHOR, RUN_WORKFLOW_TOOL_NAME, ruleToolGrammarOf, } from "@sema-agent/core";
 import { findUnmatchableToolNames, formatUnmatchableToolNames } from "./config.js";
 import { CONTROL_AND_BIDI_STRIP_RE } from "./text-bidi.js";
+import { MAX_KEY_ECHO, keyClosureClause, scanKeyClosure } from "./request-key-closure.js";
 import { parseHooksConfig } from "./hooks/hook-runner.js";
 export function coercePermissionMode(raw) {
     const strict = coercePermissionModeStrict(raw);
@@ -72,49 +73,31 @@ function cleanStringArray(v) {
     const out = v.filter((x) => typeof x === "string" && x.length > 0).slice(0, MAX_SETTINGS_PERMISSION_RULES);
     return out.length > 0 ? out : undefined;
 }
-export const TASK_SETTINGS_KEYS = ["env", "hooks", "model", "outputStyle", "permissions", "ultracode", "webSearch"];
+export const TASK_SETTINGS_KEYS = ["env", "hooks", "model", "outputStyle", "permissions", "skillListingBudgetFraction", "skillListingMaxDescChars", "ultracode", "webSearch"];
 export const TASK_SETTINGS_PERMISSION_KEYS = ["allow", "ask", "defaultMode", "deny", "disableAutoMode"];
 export const TASK_SETTINGS_UNSUPPORTED_KEYS = ["apiKeyHelper", "crossSessionInbound", "dialogExpiry", "sandbox", "statusLine"];
 export const TASK_SETTINGS_UNSUPPORTED_PERMISSION_KEYS = ["additionalDirectories", "disableBypassPermissionsMode"];
-export const MAX_SETTINGS_KEY_ECHO = 20;
-const MAX_SETTINGS_KEY_ECHO_CHARS = 64;
 const ACCEPTED_TOP = new Set(TASK_SETTINGS_KEYS);
 const ACCEPTED_PERM = new Set(TASK_SETTINGS_PERMISSION_KEYS);
 const UNSUPPORTED_TOP = new Set(TASK_SETTINGS_UNSUPPORTED_KEYS);
 const UNSUPPORTED_PERM = new Set(TASK_SETTINGS_UNSUPPORTED_PERMISSION_KEYS);
-function echoSettingsKey(prefix, key) {
-    const clean = key.replace(CONTROL_AND_BIDI_STRIP_RE, "");
-    return `${prefix}${clean.length > MAX_SETTINGS_KEY_ECHO_CHARS ? `${clean.slice(0, MAX_SETTINGS_KEY_ECHO_CHARS)}…` : clean}`;
-}
 export function taskSettingsKeyIssue(raw) {
     if (raw === null || raw === undefined || typeof raw !== "object" || Array.isArray(raw))
         return null;
-    const unknown = [];
-    const unsupported = [];
-    const scan = (bag, prefix, accepted, tolerated) => {
-        for (const k of Object.keys(bag)) {
-            if (accepted.has(k))
-                continue;
-            (tolerated.has(k) ? unsupported : unknown).push(echoSettingsKey(prefix, k));
-        }
-    };
-    scan(raw, "settings.", ACCEPTED_TOP, UNSUPPORTED_TOP);
+    const buckets = { unknown: [], unsupported: [] };
+    scanKeyClosure(raw, "settings.", ACCEPTED_TOP, UNSUPPORTED_TOP, buckets);
     const perms = raw.permissions;
     if (perms !== null && typeof perms === "object" && !Array.isArray(perms)) {
-        scan(perms, "settings.permissions.", ACCEPTED_PERM, UNSUPPORTED_PERM);
+        scanKeyClosure(perms, "settings.permissions.", ACCEPTED_PERM, UNSUPPORTED_PERM, buckets);
     }
+    const { unknown, unsupported } = buckets;
     if (unknown.length === 0 && unsupported.length === 0)
         return null;
     unknown.sort();
     unsupported.sort();
-    const clause = (names, label) => {
-        const shown = names.slice(0, MAX_SETTINGS_KEY_ECHO);
-        const more = names.length - shown.length;
-        return `${label}: ${shown.join(", ")}${more > 0 ? ` (+${more} more)` : ""}`;
-    };
     const parts = [
-        ...(unknown.length > 0 ? [clause(unknown, "unknown (not a settings key here — check the spelling)")] : []),
-        ...(unsupported.length > 0 ? [clause(unsupported, "unsupported (a CC settings key this service does not wire)")] : []),
+        ...(unknown.length > 0 ? [keyClosureClause(unknown, "unknown (not a settings key here — check the spelling)")] : []),
+        ...(unsupported.length > 0 ? [keyClosureClause(unsupported, "unsupported (a CC settings key this service does not wire)")] : []),
     ];
     const dirHint = unsupported.some((n) => n.endsWith(".additionalDirectories"))
         ? " Extra directories ride the top-level body.additionalDirectories instead."
@@ -123,8 +106,8 @@ export function taskSettingsKeyIssue(raw) {
         message: `settings: unrecognized key(s) — refused rather than dropped, because a dropped key reads as "in effect" to the caller. ` +
             `${parts.join("; ")}.${dirHint} ` +
             `Accepted: settings.{${[...TASK_SETTINGS_KEYS].join(",")}} and settings.permissions.{${[...TASK_SETTINGS_PERMISSION_KEYS].join(",")}}`,
-        unknownKeys: unknown.slice(0, MAX_SETTINGS_KEY_ECHO),
-        unsupportedKeys: unsupported.slice(0, MAX_SETTINGS_KEY_ECHO),
+        unknownKeys: unknown.slice(0, MAX_KEY_ECHO),
+        unsupportedKeys: unsupported.slice(0, MAX_KEY_ECHO),
     };
 }
 export function parseTaskSettings(raw) {
@@ -178,8 +161,13 @@ export function parseTaskSettings(raw) {
         out.ultracode = true;
     if (hooksConfig)
         out.hooks = hooksConfig;
-    const hasApplied = out.permissions !== undefined || out.model !== undefined || out.outputStyle !== undefined || out.shellEnv !== undefined || out.ultracode !== undefined || out.hooks !== undefined;
-    return { settings: hasApplied ? out : undefined, deferred };
+    const fraction = s.skillListingBudgetFraction;
+    if (typeof fraction === "number" && Number.isFinite(fraction) && fraction > 0 && fraction <= 1)
+        out.skillListingBudgetFraction = fraction;
+    const maxDesc = s.skillListingMaxDescChars;
+    if (typeof maxDesc === "number" && Number.isSafeInteger(maxDesc) && maxDesc > 0)
+        out.skillListingMaxDescChars = maxDesc;
+    return { settings: Object.keys(out).length > 0 ? out : undefined, deferred };
 }
 export function hasConstitutionAnchors(text) {
     return typeof text === "string" && text.includes(CYBER_RISK) && text.includes(URL_SAFETY) && text.includes(HARNESS_SECTION_ANCHOR);

package/dist/tool-approval.d.ts

@@ -1,5 +1,5 @@
 import type { IncomingMessage } from "node:http";
-import { type AskRequest, type AskOutcome, type RuleOffer } from "@sema-agent/core";
+import { type AskRequest, type AskOutcome, type ReadRootGrantCandidate, type RuleOffer } from "@sema-agent/core";
 import { type CardRulePersisted, type RuleConsentLane } from "./rules-consent.js";
 import { type DenialLimitFallback, type RuleOffersAbsence, type ApprovalRequestFrame, type ApprovalRevokeFrame, type RuleEvidenceProjection } from "./approval-card.js";
 import { type ApprovalAskStore } from "./plugins/approval-ask-store-sql.js";
@@ -169,6 +169,27 @@ export interface ToolApprovalFrame {
      * `GateDisposition.denied.cause`(`tool_end.gate` / `permissionDenied.gate`),ask 面自此没有这一位。
      */
     ruleStoreUnreadable?: string;
+    /**
+     * **[ref]**(core 7.19.0;**ADDITIVE**,`"tool_approval"` only)—— 这只**根外读** ask 的**清障目录**:
+     * 把 `dir` 加进本会话的读目录(壳侧既有的 `/add-dir` 口),同一条调用就不会再问。
+     *
+     * 🔴 **在场才读,永远不读缺席**。缺席不是「无计可施」:它同时覆盖敏感路径 deny 行(按模式判,加任何
+     * 根都不动它)、读边界压根读不懂的命令(heredoc / 换行 / 命令替换 / 参数当程序)、没展开的 glob、
+     * 递归遍历、以及每一只**不是**读边界提的 ask —— 7.18.0 及以前的**每**一只 ask 都是这一形。
+     *
+     * 🔴 **原样回传**(core 契约 `shell.read_boundary.grant_candidate_is_the_grant`):`dir` 是绝对、已做词法
+     * 折叠、用读边界自己的拼法写的串;**显示的串就是要加的串**。壳可以为了好看渲一个缩短形,回传必须是
+     * 本键里的原串。⇒ 本仓的姿势是「整只逐字带,或整只丢」,**绝不截**(见 `MAX_READ_ROOT_CANDIDATE_DIR`)。
+     *
+     * 🔴 **echo-only,零判读**:server 不从命令文本重推目录,也不复核它真不真能清掉这只 ask —— core 已经
+     * 把提议的根放回读边界又走了一遍才递出来,下游再判一遍就是同一事实的第二个判官(与 `origin` /
+     * `ruleStoreUnreadable` / `denialLimitFallback` 三条顶注的同一条禁令)。
+     *
+     * 🔴 **只此一面**:core 的负控逐字写着「the durable park row has no twin of this seat in this version」——
+     * 一只 PARKED 的根外读 ask 渲的仍是单独那张确认卡。所以 `card_json` / 耐久面**没有**这一座,本仓也不
+     * 自铸一个(自铸 = 同一事实的第二个源,而且那个源会在 park 兑现时说谎)。
+     */
+    readRootCandidate?: ReadRootGrantCandidate;
     /**
      * **E-14**([ref]② Trojan Source 族;**ADDITIVE**,`"tool_approval"` only)—— 这只 ask 的**工具输入**
      * (`AskRequest.args`)里含 bidi 控制符(LRM/RLM、嵌入/覆写、隔离符;字符类属主 `text-bidi.ts`)。
@@ -858,9 +879,20 @@ export declare class ToolApprovalCoordinator {
      * 残余 = 那类行的归因会记成 `routing_failure`(其实是政策 deny),归因精化登记为候件。
      */
     private unattendedOutcome;
+    /** 政策**读**口(不是终局铸口)—— 回答「这台部署把无人可答翻成 park 吗」。
+     *
+     *  🔴 与 {@link unattendedOutcome} 分家是 S-187 的一半:此前两件事共用一只方法,于是墓碑腿那次
+     *  纯粹的**政策查询**(`unattendedOutcome() !== false`)会和同一只 ask 的真终局各记一条遥测 ——
+     *  「一只 ask 一条线」当场不成立。读口不落日志,铸口落;谁也不兼职。 */
+    private get unattendedRoutesToPark();
     /** {@link unattendedOutcome} 的**公开**口:`windowZero` 的 immediate-unavailable 闭包长在装配层
-     *  (`http/routes/tasks.ts` 的 sync 腿),它必须与协调器内五臂读**同一个**旋钮值,而不是各算一遍。 */
-    unattendedAskOutcome(): "unavailable" | false;
+     *  (`http/routes/tasks.ts` 的 sync 腿),它必须与协调器内五臂读**同一个**旋钮值,而不是各算一遍。
+     *  出处随调用方给(那条腿知道自己是哪一只 ask)。 */
+    unattendedAskOutcome(site: {
+        taskId?: string;
+        owner?: string | null;
+        toolName?: string;
+    }): "unavailable" | false;
     /**
      * [ref] 车3 刀 3b —— [ref] §3.3 / 设计稿 §0 X-2 的**写侧准入门**。
      *

package/dist/tool-approval.js

@@ -8,7 +8,7 @@ import { approvalPayloadFingerprint } from "./plugins/approval-payload-fingerpri
 import { createLogger } from "./observability/logger.js";
 import { recordFailOpen } from "./observability/fail-open.js";
 import { deriveAskId, deriveBatchId, MAX_DECISION_NOTE_CHARS } from "./approval-ask-machine.js";
-import { ApprovalCardEnvelopeSchema, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readRuleEvidence, readRuleOffersAbsence, RuleOfferRawSchema, backfillLegacyBatchMemberKind, screenUncoveredDetailSeat, } from "./approval-card.js";
+import { ApprovalCardEnvelopeSchema, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readReadRootCandidate, readRuleEvidence, readRuleOffersAbsence, RuleOfferRawSchema, backfillLegacyBatchMemberKind, screenUncoveredDetailSeat, } from "./approval-card.js";
 import { projectAskTerminalClaimTruth } from "./plugins/approval-ask-store-sql.js";
 import { governanceAskMarksFor, runWithGovernanceAskScope } from "./governance-ask-marks.js";
 const defaultLogger = createLogger();
@@ -300,11 +300,29 @@ export class ToolApprovalCoordinator {
         this.parkTombstonePerPrincipalMax = opts?.parkTombstonePerPrincipalMax ?? DEFAULT_PARK_TOMBSTONE_PER_PRINCIPAL_MAX;
         this.askAudit = opts?.askAudit;
     }
-    unattendedOutcome() {
-        return this.unattendedPolicy === "deny" ? false : "unavailable";
+    unattendedOutcome(site) {
+        const outcome = this.unattendedPolicy === "deny" ? false : "unavailable";
+        defaultLogger.warn("approver_unavailable", {
+            arm: site.arm,
+            policy: this.unattendedPolicy,
+            outcome: outcome === false ? "deny" : "unavailable",
+            owner: site.owner ?? null,
+            taskId: site.taskId ?? null,
+            toolName: site.toolName ?? null,
+            reachability: site.reachability ?? null,
+        });
+        return outcome;
+    }
+    get unattendedRoutesToPark() {
+        return this.unattendedPolicy !== "deny";
     }
-    unattendedAskOutcome() {
-        return this.unattendedOutcome();
+    unattendedAskOutcome(site) {
+        return this.unattendedOutcome({
+            arm: "window_zero",
+            ...(site.taskId !== undefined ? { taskId: site.taskId } : {}),
+            ...(site.owner !== undefined && site.owner !== null ? { owner: site.owner } : {}),
+            ...(site.toolName !== undefined ? { toolName: site.toolName } : {}),
+        });
     }
     admit(taskId, owner) {
         if (!this.askStore)
@@ -758,7 +776,7 @@ export class ToolApprovalCoordinator {
     ask = async (req, signal) => {
         const ctx = this.als.getStore();
         if (!ctx)
-            return this.unattendedOutcome();
+            return this.unattendedOutcome({ arm: "no_run_context", toolName: req.toolName });
         return this.askBroadcast({
             taskId: ctx.taskId,
             owner: ctx.owner,
@@ -786,11 +804,9 @@ export class ToolApprovalCoordinator {
         const aliveCtxs = ctxs.filter((c) => !c.abortSignal?.aborted);
         const reachability = aliveCtxs.length === 0 ? "unreached" : "reachable";
         if (reachability === "unreached") {
-            const unattended = this.unattendedOutcome();
-            if (unattended === false)
-                return unattended;
-            if (!this.askStore)
-                return unattended;
+            if (!this.unattendedRoutesToPark || !this.askStore) {
+                return this.unattendedOutcome({ arm: "no_live_target", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
+            }
         }
         const primary = aliveCtxs[0];
         const governanceForced = (this.governanceAskMarks ?? governanceAskMarksFor(this.streamKey(origin.owner, origin.sessionId, origin.taskId))).isMarked(req.toolCallId);
@@ -809,7 +825,7 @@ export class ToolApprovalCoordinator {
                 admitMaxPerTask: this.admitMaxPerTask,
                 admitMaxPerOwner: this.admitMaxPerOwner,
             });
-            return this.unattendedOutcome();
+            return this.unattendedOutcome({ arm: "admission_exhausted", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
         }
         const id = uuidv7();
         const child = isChildAsk(req);
@@ -848,6 +864,7 @@ export class ToolApprovalCoordinator {
             ...((a) => (a !== undefined ? { ruleOffersAbsence: a } : {}))(readRuleOffersAbsence(req)),
             ...((f) => (f !== undefined ? { denialLimitFallback: f } : {}))(readDenialLimitFallback(req)),
             ...(typeof req.ruleStoreUnreadable === "string" && req.ruleStoreUnreadable.length > 0 ? { ruleStoreUnreadable: req.ruleStoreUnreadable } : {}),
+            ...((g) => (g !== undefined ? { readRootCandidate: g } : {}))(readReadRootCandidate(req)),
             ...((c) => (c !== undefined ? { probeCause: c } : {}))(readProbeCause(req)),
             ...((c) => (c !== undefined ? { ruleEvidence: c } : {}))(readRuleEvidence(req)),
             ...(bounded.omitted ? { argsOmitted: true } : { args: bounded.args }),
@@ -904,7 +921,9 @@ export class ToolApprovalCoordinator {
                 if (existingOrCreated.row.state !== "STREAM_PENDING") {
                     releaseAdmission();
                     const replayed = replayTerminalAskRow(existingOrCreated.row);
-                    return replayed === "unavailable" ? this.unattendedOutcome() : replayed;
+                    return replayed === "unavailable"
+                        ? this.unattendedOutcome({ arm: "replayed_parked", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability })
+                        : replayed;
                 }
                 const persistedEnvelope = ApprovalCardEnvelopeSchema.safeParse(existingOrCreated.row.cardJson);
                 const maxMintableWindowMs = Math.max(effectiveWindowMs, this.unreachedTtlMs);
@@ -985,7 +1004,7 @@ export class ToolApprovalCoordinator {
                         voidAbandonedRow(lateEnsuredAskId);
                     if (reachability === "unreached") {
                         releaseAdmission();
-                        return this.unattendedOutcome();
+                        return this.unattendedOutcome({ arm: "unreached_no_row", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
                     }
                 }
             }
@@ -1014,8 +1033,11 @@ export class ToolApprovalCoordinator {
             return false;
         };
         const shapeOutcome = (settled) => {
-            if (windowRouteUnavailable)
-                return this.unattendedOutcome() === false ? shapeDeny() : "unavailable";
+            if (windowRouteUnavailable) {
+                return this.unattendedOutcome({ arm: "window_expired", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability }) === false
+                    ? shapeDeny()
+                    : "unavailable";
+            }
             if (settled.allowed) {
                 return settled.updatedInput !== undefined ? { allow: true, updatedInput: settled.updatedInput } : true;
             }
@@ -1032,7 +1054,7 @@ export class ToolApprovalCoordinator {
             for (const [sig, fn] of abortListeners)
                 sig.removeEventListener("abort", fn);
             this.pending.delete(id);
-            if (windowRouteUnavailable && askId !== undefined && batchId !== undefined && this.unattendedOutcome() !== false) {
+            if (windowRouteUnavailable && askId !== undefined && batchId !== undefined && this.unattendedRoutesToPark) {
                 this.recordParkTombstone(wireApprovalId, { kind: "park", askId, batchId, owner: origin.owner, parkedAtMs: Date.now() });
                 parkRouted = true;
             }
@@ -1456,11 +1478,11 @@ export class ToolApprovalCoordinator {
                 .catch(() => undefined);
         }
         if (emitFailed)
-            return this.unattendedOutcome();
+            return this.unattendedOutcome({ arm: "emit_failed", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
         if (windowRouteUnavailable)
             return shapeOutcome(settled);
         if (!emitSettled && lastOutcome === "expired")
-            return this.unattendedOutcome();
+            return this.unattendedOutcome({ arm: "emit_unsettled", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
         return shapeOutcome(settled);
     }
     respond(id, principal, body, httpReq) {

package/dist/trace/core-keyset-guard.d.ts

@@ -43,7 +43,7 @@ type _GuardBgNotifReverse = AssertAllKeysHandled<Exclude<BgNotifProjected | BgNo
 type RosterProjected = "name" | "agentId" | "sessionId" | "toolUseId" | "owner" | "scope" | "sessionScoped" | "rootSessionId" | "model" | "modelFallback" | "createdAt";
 type _GuardRoster = AssertAllKeysHandled<Exclude<keyof RosterEntry, RosterProjected>>;
 type _GuardRosterReverse = AssertAllKeysHandled<Exclude<RosterProjected, keyof RosterEntry>>;
-type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "persistedRuleShadowed" | "probeCause" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "ruleStoreUnreadable";
+type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "persistedRuleShadowed" | "probeCause" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "ruleStoreUnreadable" | "readRootCandidate";
 type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "probeReason" | "hasBidiControls" | "previewWithheld" | "execCwd";
 type _GuardAsk = AssertAllKeysHandled<Exclude<keyof AskRequest, AskProjected | AskExcluded>>;
 type _GuardAskReverse = AssertAllKeysHandled<Exclude<AskProjected | AskExcluded, keyof AskRequest>>;
@@ -121,8 +121,8 @@ type SummaryProjected = "sessionId" | "scope" | "createdAt" | "gateKind" | "seve
 type SummaryExcluded = "token" | "toolInput" | "toolName" | "toolCallId" | "preview" | "principal" | "sourceTaskId" | "contentKind" | "restoreMode" | "checkpointId" | "previewWithheld";
 type _GuardInboxSummary = AssertAllKeysHandled<Exclude<keyof CheckpointSummary, SummaryProjected | SummaryExcluded>>;
 type _GuardInboxSummaryReverse = AssertAllKeysHandled<Exclude<SummaryProjected | SummaryExcluded, keyof CheckpointSummary>>;
-type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requireExistingSession" | "oneShot" | "clientContext" | "resumeAt" | "resumeAtMode" | "model" | "compactionModel" | "thinking" | "systemPrompt" | "appendSystemPrompt" | "promptProvider" | "memory" | "suggestNextPrompts" | "restoreFiles" | "acceptPartialRestore" | "rewindFilesTo" | "tools" | "excludeTools" | "deferTools" | "toolMaterializeStrategy" | "promptProfile" | "toolPolicy" | "onAsk" | "onQuestion" | "hooks" | "durableApproval" | "resourceSuspend" | "resilience" | "finalVerification" | "checkpointStore" | "handsReadOnly" | "memoryPersistenceCapable" | "additionalDirectories" | "additionalReadDirectories" | "enablePlanMode" | "interactiveTools" | "enableFork" | "shellGate" | "mcp" | "a2a" | "skills" | "backgroundScope" | "envFacts" | "limits" | "configOverrides" | "forwardSubagentEvents" | "retainSubagentSessions" | "retainBackgroundProcesses" | "outputSchema" | "outputRetries" | "compaction" | "attachments" | "selfOrchestration" | "getApiKeyAndHeaders" | "interactionPosture" | "agents" | "taskId" | "signal" | "preemptSignal" | "modelRole" | "enableBlockedReport" | "maxSuspends" | "autoModeRequested";
-type TaskSpecUnwired = "excludeAllTools" | "writeFace" | "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars";
+type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requireExistingSession" | "oneShot" | "clientContext" | "resumeAt" | "resumeAtMode" | "model" | "compactionModel" | "thinking" | "systemPrompt" | "appendSystemPrompt" | "promptProvider" | "memory" | "suggestNextPrompts" | "restoreFiles" | "acceptPartialRestore" | "rewindFilesTo" | "tools" | "excludeTools" | "deferTools" | "toolMaterializeStrategy" | "promptProfile" | "toolPolicy" | "onAsk" | "onQuestion" | "hooks" | "durableApproval" | "resourceSuspend" | "resilience" | "finalVerification" | "checkpointStore" | "handsReadOnly" | "memoryPersistenceCapable" | "additionalDirectories" | "additionalReadDirectories" | "enablePlanMode" | "interactiveTools" | "enableFork" | "shellGate" | "writeFace" | "mcp" | "a2a" | "skills" | "backgroundScope" | "envFacts" | "limits" | "configOverrides" | "forwardSubagentEvents" | "retainSubagentSessions" | "retainBackgroundProcesses" | "outputSchema" | "outputRetries" | "compaction" | "attachments" | "selfOrchestration" | "getApiKeyAndHeaders" | "interactionPosture" | "agents" | "taskId" | "signal" | "preemptSignal" | "modelRole" | "enableBlockedReport" | "maxSuspends" | "autoModeRequested" | "skillListingBudgetFraction" | "skillListingMaxDescChars";
+type TaskSpecUnwired = "excludeAllTools" | "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars";
 type _GuardTaskSpec = AssertAllKeysHandled<Exclude<keyof TaskSpec, TaskSpecWired | TaskSpecUnwired>>;
 type _GuardTaskSpecReverse = AssertAllKeysHandled<Exclude<TaskSpecWired | TaskSpecUnwired, keyof TaskSpec>>;
 type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "terminal" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "remoteEnvFailures" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveWriteFace" | "effectiveMemoryScopes" | "stats" | "editedFiles";

package/dist/trace/ledger-sink.js

@@ -2,7 +2,7 @@ import { terminalProjection } from "@sema-agent/core";
 import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
 import { NotifiedKeys, taskNotificationStreamKey } from "../orchestration/workflow-completion-inbox.js";
 import { isParkLedgerEventType } from "./ledger-events.js";
-import { isModelSegmentBoundary } from "./model-segment.js";
+import { isModelSegmentBoundary, reasoningDeltaBytes, reasoningSegmentEventId } from "./model-segment.js";
 export function createSerialLedgerAppend(appendEvent, startSeq) {
     let seq = startSeq;
     let chain = Promise.resolve();
@@ -19,6 +19,7 @@ export function createLedgerSink(opts) {
     let text = "";
     let reasoning = "";
     let textEventId;
+    let reasoningEventId;
     const beat = (kind, statusData) => {
         try {
             opts.onActivity?.(kind, statusData);
@@ -34,8 +35,9 @@ export function createLedgerSink(opts) {
     };
     const flush = async () => {
         if (reasoning) {
-            await append("reasoning", modelTextEventData({ text: reasoning }));
+            await append("reasoning", modelTextEventData({ text: reasoning, eventId: reasoningEventId }));
             reasoning = "";
+            reasoningEventId = undefined;
         }
         if (text) {
             await append("text", modelTextEventData({ text, eventId: textEventId }));
@@ -53,10 +55,15 @@ export function createLedgerSink(opts) {
                 textEventId ??= td.eventId;
                 break;
             }
-            case "reasoning_delta":
-                if (opts.persistThinking)
-                    reasoning += ev.delta;
+            case "reasoning_delta": {
+                const rd = ev;
+                const bytes = reasoningDeltaBytes(rd);
+                if (opts.persistThinking && bytes !== undefined) {
+                    reasoning += bytes;
+                    reasoningEventId ??= reasoningSegmentEventId(rd.eventId);
+                }
                 break;
+            }
             case "tool_start":
                 await append("tool_start", toolStartEventData(ev));
                 break;

package/dist/trace/model-segment.d.ts

@@ -1,3 +1,4 @@
+import { type SegmentEndFields } from "./project.js";
 /**
  * 本帧是不是模型文本的段界。**四条消费腿共用这一只**:账本投影 switch(`trace/ledger-sink.ts`)、
  * 顶层 live 流与转发子代腿(`http/routes/tasks.ts`)、子代 tail 面(`fleet/subagent-tail-bus.ts`)。
@@ -5,8 +6,10 @@
  * (第三方 Runner 塞进来的野帧不该切走宿主的权威段)。
  */
 export declare function isModelSegmentBoundary(type: string): boolean;
-/** live 面的段末帧(`type` 即事件名;其余键由 `reasoningEndEventData` 白名单铸出)。 */
-export type ReasoningEndFrame = Record<string, unknown> & {
+/** live 面的段末帧(`type` 即事件名;其余键由 `reasoningEndEventData` 白名单铸出)。
+ *  形是**声明**出来的、不是 `Record<string, unknown>`(S-334 门①):`eventId` 是本帧的续流游标,
+ *  型必须说得出口 —— live 腿的 `id:` 行取的正是它。 */
+export type ReasoningEndFrame = SegmentEndFields & {
     type: "reasoning_end";
 };
 /** 登记册**读到的全部字段**,逐个写出来(不是 `Record<string, unknown>`):`TaskEvent` 与转发腿的原始帧
@@ -48,6 +51,33 @@ export interface ReasoningSegments {
      *  与账本腿 `LedgerSink.onDone → flush()` 同位同义 —— 段界表里没有终局词,终局走这扇门。 */
     cut(match?: (ident: ReasoningStreamIdent) => boolean): ReasoningEndFrame[];
 }
+/**
+ * 一段推理的**段末事件 id** —— 唯一铸点,live 段末帧与账本 `reasoning` 行共用这一只。
+ *
+ * 🔴 **为什么段末帧不能沿用任何一块 delta 的 `eventId`**(S-334):SSE 的 `id:` 行是**续流游标**,
+ * 「每帧唯一」就是它的定义(消费端据它做**整帧幂等**:见过的 id 整帧丢);而本仓 live 腿的 `id:` 行
+ * 恰恰取自载荷的 `eventId`(`http/routes/tasks.ts` 的 `sseData`)。沿用段内某一块的锚 ⇒ 段末帧与那一块
+ * delta 顶着同一枚游标,消费端把**权威段**当重放帧丢弃 —— 本帧存在的唯一理由(整段脱敏后的权威副本)
+ * 当场结构性失效。「这段是从哪一帧开始攒的」不是游标要回答的问题,而「整段替换」这条消费律本来就
+ * 不需要段首锚:重连从**帧**续,不从段续。
+ *
+ * 形 = 那一枚锚 + 一个派生记号,**确定性**是它的全部要点:live 腿与账本腿各自看着同一条流、在同一个
+ * 段界上算出**同一枚**字符串,于是「同一份权威副本」在身份面也成立,而两条腿之间不需要任何传值通道
+ * ——bg / resume 两条账本腿上根本没有 live 登记册可问,靠传值就只能做成「detach 车道有、别的腿没有」
+ * 的两种账本行形。
+ *
+ * 输入 = 本段**第一块带锚**的 delta 的 `eventId`(不是「第一块」的:首块无锚不等于整段无锚,三条腿
+ * 统一用 `??=` 闩第一枚**有定义**的锚 —— 与 E18 的 `textEventId ??=` 逐字同律)。整段一块带锚的都没有
+ * ⇒ 段末 id 缺席(诚实的「无锚」,绝不合成占位 —— 与 `sseData` 的既有纪律同源:不可锚的位置不许
+ * 伪装成可锚)。
+ */
+export declare function reasoningSegmentEventId(anchor: unknown): string | undefined;
+/** 一块 `reasoning_delta` 对段的**贡献字节** —— 非空串才算。账本腿与三条 live 腿共用这一只:空/坏形
+ *  增量一个字节都不贡献,既不开段也不参与闩锚 ⇒ 两面结构上不可能把锚闩在不同的帧上(`reasoning_end`
+ *  与账本 `reasoning` 行的正文早就逐字节相等,身份面随 S-334 收进同一条规则)。 */
+export declare function reasoningDeltaBytes(ev: {
+    delta?: unknown;
+}): string | undefined;
 /** 「这条流属于这些子代 id 之一」—— 子代终态收段的匹配器(`task_id` 与 `sessionId` 是同一个子代的两个
  *  id 域,取并集;`undefined` 成员自动忽略)。腿上共用这一只,免得各写一遍 id 域的并集。 */
 export declare function reasoningStreamOfTask(...ids: ReadonlyArray<string | undefined>): (ident: ReasoningStreamIdent) => boolean;

package/dist/trace/model-segment.js

@@ -7,6 +7,13 @@ const BOUNDARY = new Set([
 export function isModelSegmentBoundary(type) {
     return BOUNDARY.has(type);
 }
+const REASONING_SEGMENT_ID_MARK = "~reasoning_end";
+export function reasoningSegmentEventId(anchor) {
+    return typeof anchor === "string" && anchor.length > 0 ? `${anchor}${REASONING_SEGMENT_ID_MARK}` : undefined;
+}
+export function reasoningDeltaBytes(ev) {
+    return typeof ev.delta === "string" && ev.delta !== "" ? ev.delta : undefined;
+}
 export function reasoningStreamOfTask(...ids) {
     const set = new Set(ids.filter((v) => typeof v === "string" && v !== ""));
     return (ident) => (ident.sourceTaskId !== undefined && set.has(ident.sourceTaskId)) || (ident.bgAgentId !== undefined && set.has(ident.bgAgentId));
@@ -25,21 +32,24 @@ export function createReasoningSegments() {
         if (seg === undefined)
             return [];
         open.delete(key);
-        const data = reasoningEndEventData({ ...seg.ident, eventId: seg.eventId, content: seg.buf });
+        const data = reasoningEndEventData({ ...seg.ident, eventId: seg.segmentEventId, content: seg.buf });
         return data === null ? [] : [{ type: "reasoning_end", ...data }];
     };
     return {
         onEvent: (ev) => {
             if (ev.type === "reasoning_delta") {
-                if (typeof ev.delta !== "string" || ev.delta === "")
+                const bytes = reasoningDeltaBytes(ev);
+                if (bytes === undefined)
                     return [];
                 const ident = identOf(ev);
                 const key = streamKeyOf(ident);
                 const seg = open.get(key);
                 if (seg === undefined)
-                    open.set(key, { ident, eventId: ev.eventId, buf: ev.delta });
-                else
-                    seg.buf += ev.delta;
+                    open.set(key, { ident, segmentEventId: reasoningSegmentEventId(ev.eventId), buf: bytes });
+                else {
+                    seg.buf += bytes;
+                    seg.segmentEventId ??= reasoningSegmentEventId(ev.eventId);
+                }
                 return [];
             }
             return isModelSegmentBoundary(ev.type ?? "") ? cutKey(streamKeyOf(identOf(ev))) : [];

package/dist/trace/project.d.ts

@@ -192,8 +192,42 @@ export declare function screenedStoredEventData(type: string, data: unknown): un
  *  此前三处各自逐字透传 —— 同一份文本毫秒后在 `done.result.result` 上已脱,live 面却在凭据生成瞬间明文(B-114)。
  *  `text_delta` 仍逐字:跨 chunk 的凭据无法就地判,流式脱敏是独立设计件(S-270)。
  *  坏形(content 非串/空串)⇒ null(丢帧,不铸「权威空段」:core 契约明言空段不发本帧,消费端收到空段会清掉已攒 delta)。
- *  身份四键零字节变换(live 现状带全四键,消费端可能已依赖)。 */
-export declare function textEndEventData(ev: Record<string, unknown>): Record<string, unknown> | null;
+ *  身份**四键**随行(live 现状带全四键,消费端可能已依赖);值经 {@link identityKey} —— 非空 string 才上 wire
+ *  (S-334 起不再逐字透传:坏形身份键会在 live 写口上铸出假游标)。 */
+export declare function textEndEventData(ev: Record<string, unknown>): SegmentEndFields | null;
+/**
+ * live 面的**身份四键**(core `TaskEventIdentity` 全集)—— 一个属主,两处共用({@link segmentEndFields}
+ * 与 sync 腿白名单 catch-all 的 `ident`;此前是两份手抄)。与 durable 面的 {@link identityFields} 的差别
+ * **只剩键集**:那边两键(durable builder 对另两键的既定排除),这边四键(live 现状,消费端已依赖);
+ * **值判据是同一条** —— 两只都问 {@link identityKey}(非空 `string` 才上 wire,绝不强转)。
+ *
+ * 🔴 **型必须说得出口**(S-334):`eventId` 是 live 腿 SSE `id:` 行的**唯一**来源,而 `id:` 行是续流游标
+ * ——一个连值的型都说不出的键不许铸成游标。非串/空串 ⇒ 键缺席(与「无锚不发 `id:` 行」同一条纪律:
+ * 不可锚的位置绝不伪装成可锚)。转发子代腿的帧是 UNTRUSTED RAW(§E1),这一道同时是它的形判门。
+ *
+ * 🔴 **`type` 而不是 `interface`**(它与 {@link SegmentEndFields} 两处都是,别改回去):TS 只给**类型别名**
+ * 隐式索引签名,interface 没有 ⇒ 写成 interface 的话,每一个把本形交给 `Record<string, unknown>` 形参
+ * (tail 总线帧、live 帧写口)的调用点都得手抄一次 `{ ...frame }` 展开。别名让「声明出来的形」原样流经
+ * 既有写口,零调用点噪声。
+ */
+export type LiveEventIdentity = {
+    eventId?: string;
+    parentToolCallId?: string;
+    sourceTaskId?: string;
+    bgAgentId?: string;
+};
+/** 段末帧(`text_end` / `reasoning_end`)的载荷**形**(两只帧一个字节不差 —— 一个 wire 概念一份形,
+ *  消费端的读法只学一次;差别只有各自铸点的空段判据)。 */
+export type SegmentEndFields = LiveEventIdentity & {
+    content: string;
+};
+/** {@link LiveEventIdentity} 的铸点。[ref] 门①:条件展开的臂逐条是直写字面量(键名对扫描器可见)。 */
+export declare function liveIdentityFields(ev: {
+    eventId?: unknown;
+    parentToolCallId?: unknown;
+    sourceTaskId?: unknown;
+    bgAgentId?: unknown;
+}): LiveEventIdentity;
 /**
  * `reasoning_end` 段末帧的**唯一**铸点(三条 live 腿共用:top stream / 转发子代腿 / 子代 tail 面)——
  * `text_end` 的推理面孪生({@link textEndEventData}),形逐字同(共用 {@link segmentEndFields})。
@@ -210,7 +244,7 @@ export declare function textEndEventData(ev: Record<string, unknown>): Record<st
  * 「整段替换已攒的 delta」—— 发一枚空白权威段 = 让消费端把已渲染的思考清成空白。坏形(`content` 非串)
  * 同样丢帧,理由与 `text_end` 逐字同源。
  */
-export declare function reasoningEndEventData(ev: Record<string, unknown>): Record<string, unknown> | null;
+export declare function reasoningEndEventData(ev: Record<string, unknown>): SegmentEndFields | null;
 /** The durable `tool_end` payload (shared by both append sites). E1: the model-facing `output` is UNTRUSTED RAW
  *  from core (file/shell/API bodies) — core only SIZE-bounds it (`truncated`), REDACTION is ours (same contract as
  *  `tool_start.args`); never re-fed to a model. E2: identity. Absent `output` ⇒ the tool produced no content body.

package/dist/trace/project.js

@@ -78,10 +78,13 @@ export function aggregateModelUsage(events) {
 }
 function identityFields(src) {
     return {
-        ...(src.eventId ? { eventId: String(src.eventId) } : {}),
-        ...(src.parentToolCallId ? { parentToolCallId: String(src.parentToolCallId) } : {}),
+        ...(identityKey(src.eventId) !== undefined ? { eventId: identityKey(src.eventId) } : {}),
+        ...(identityKey(src.parentToolCallId) !== undefined ? { parentToolCallId: identityKey(src.parentToolCallId) } : {}),
     };
 }
+function identityKey(v) {
+    return typeof v === "string" && v !== "" ? v : undefined;
+}
 export function modelTextEventData(ev) {
     return { text: ev.text, ...(ev.eventId ? { eventId: ev.eventId } : {}) };
 }
@@ -192,15 +195,17 @@ export function textEndEventData(ev) {
         return null;
     return segmentEndFields(ev.content, ev);
 }
-function segmentEndFields(content, ev) {
+export function liveIdentityFields(ev) {
     return {
-        content: redactModelText(content),
-        ...(ev.eventId !== undefined ? { eventId: ev.eventId } : {}),
-        ...(ev.parentToolCallId !== undefined ? { parentToolCallId: ev.parentToolCallId } : {}),
-        ...(ev.sourceTaskId !== undefined ? { sourceTaskId: ev.sourceTaskId } : {}),
-        ...(ev.bgAgentId !== undefined ? { bgAgentId: ev.bgAgentId } : {}),
+        ...(identityKey(ev.eventId) !== undefined ? { eventId: identityKey(ev.eventId) } : {}),
+        ...(identityKey(ev.parentToolCallId) !== undefined ? { parentToolCallId: identityKey(ev.parentToolCallId) } : {}),
+        ...(identityKey(ev.sourceTaskId) !== undefined ? { sourceTaskId: identityKey(ev.sourceTaskId) } : {}),
+        ...(identityKey(ev.bgAgentId) !== undefined ? { bgAgentId: identityKey(ev.bgAgentId) } : {}),
     };
 }
+function segmentEndFields(content, ev) {
+    return { content: redactModelText(content), ...liveIdentityFields(ev) };
+}
 export function reasoningEndEventData(ev) {
     if (typeof ev.content !== "string" || ev.content.trim().length === 0)
         return null;
@@ -593,8 +598,7 @@ export function compactedEventData(ev) {
         return Object.keys(out).length > 0 ? out : undefined;
     })();
     return {
-        ...(ev.eventId !== undefined ? { eventId: ev.eventId } : {}),
-        ...(ev.parentToolCallId !== undefined ? { parentToolCallId: ev.parentToolCallId } : {}),
+        ...identityFields(ev),
         ...(typeof ev.trigger === "string" ? { trigger: ev.trigger } : {}),
         ...(num(ev.tokensBefore) !== undefined ? { tokensBefore: num(ev.tokensBefore) } : {}),
         ...(ev.preserved_segment?.firstKeptEntryId ? { preserved_segment: { firstKeptEntryId: ev.preserved_segment.firstKeptEntryId } } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.78.0",
+  "version": "7.78.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.18.0",
+    "@sema-agent/core": "7.19.0",
     "@sema-agent/settings-schema": "2.1.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -69,7 +69,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "9.4.0",
+    "@sema-agent/sdk": "9.5.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",