@sema-agent/server 7.79.0 → 7.79.1

package/dist/main.js

@@ -28,6 +28,7 @@ import { createToolTracer, createPermissionDeniedMeter } from "./observability/t
 import { createRegistryJwtVerifier } from "./auth-bridge.js";
 import { createMetrics } from "./observability/metrics.js";
 import { installFailOpenRecorder } from "./observability/fail-open.js";
+import { installFileHistoryFailureRecorder } from "./file-history-disclosure.js";
 import { installSecretEnvScrubRecorder } from "./observability/secret-env-scrub.js";
 import { setRunTerminalObserver } from "./observability/run-terminal-log.js";
 import { setRedactionObserver, redactSecrets } from "./trace/redact.js";
@@ -96,6 +97,7 @@ async function main() {
     const metrics = createMetrics();
     installFailOpenRecorder({ logger, metrics });
     installSecretEnvScrubRecorder({ logger, metrics });
+    installFileHistoryFailureRecorder({ logger, metrics });
     logConfigDiagnostics(logger);
     for (const w of drainNumEnvWarnings())
         logger.warn("config_env_invalid_using_default", { env: w.env, raw: w.raw });

package/dist/observability/metrics.js

@@ -221,7 +221,7 @@ export function createMetrics() {
     m.counter("degraded_total", "Tasks degraded to a cheaper model (1.40), by reason (budget/rate_limit/breaker_open)");
     m.counter("task_model_not_allowlisted_resume_total", "Resumed legs whose model/compactionModel is outside the @-mention allowlist (allowed to keep running by design — the allowlist gates fresh picks only)");
     m.counter("prompt_constitution_total", "Prompt assembly constitution mode per task (core 1.243 提示词主权): steady state = core; provider-assembled/replaced/legacy warrant eyes");
-    m.counter("rewind_snapshot_failed_total", "Per-turn rewind file snapshots that failed, by code (too_large = big working tree, expected/benign; other codes warrant eyes)");
+    m.counter("rewind_snapshot_failed_total", "Per-turn rewind file snapshots that failed, by the engine's FileHistoryResult.error.code (snapshot_failed/aborted/…; `unknown` = the disclosure text carried no readable code). COARSE on purpose — whether a failure is permanent (the same file will fail every turn until the deployment changes) is counted by file_history_permanent_failure_total instead, from the typed error object rather than from prose");
     m.counter("verifications_total", "Tasks run through the verification gate (1.44), by final verdict");
     m.counter("cascade_total", "Tasks run through the model cascade (1.45), by outcome (passed/exhausted)");
     m.counter("degenerate_total", "Degenerate-output failures (1.59), by salvage class (a/b/unknown)");

package/dist/plugins/file-history-store-sql.js

@@ -4,6 +4,7 @@ import { SqlBlobBackend } from "./blob-backend.js";
 import { mysqlDriver, pgDriver } from "./sql-driver.js";
 import { isMissingColumnError } from "./sql-errors.js";
 import { recordFailOpen } from "../observability/fail-open.js";
+import { discloseCaughtFailure } from "../file-history-disclosure.js";
 export const FILE_HISTORY_BLOB_TABLE = "file_history_blob";
 export const FILE_HISTORY_BLOB_KEY_PREFIX = "file-history/";
 const sha256hex = (s) => createHash("sha256").update(s).digest("hex");
@@ -116,7 +117,7 @@ export class SqlFileHistoryStore {
             return { ok: false, error: { code: "track_failed", message: `first-touch record for ${absPath} kept racing a concurrent retraction — retry` } };
         }
         catch (err) {
-            return { ok: false, error: { code: "track_failed", message: `first-touch record for ${absPath} could not be persisted: ${err.message}` } };
+            return { ok: false, error: { code: "track_failed", message: `first-touch record for ${absPath} could not be persisted: ${discloseCaughtFailure(err)}` } };
         }
     }
     async annulIneligibleReason(scope, keyHash, absPath) {
@@ -189,7 +190,7 @@ export class SqlFileHistoryStore {
             return { ok: false, error: { code: "conflict", message: `first-touch record for ${absPath} was replaced while this retraction was being proven` } };
         }
         catch (err) {
-            return { ok: false, error: { code: "track_failed", message: `annulling the first-touch record for ${absPath} failed: ${err.message}` } };
+            return { ok: false, error: { code: "track_failed", message: `annulling the first-touch record for ${absPath} failed: ${discloseCaughtFailure(err)}` } };
         }
     }
     async loadTracked(exec, scope, forUpdate = false) {
@@ -296,7 +297,7 @@ export class SqlFileHistoryStore {
             }
         }
         catch (err) {
-            return { ok: false, error: { code: "snapshot_failed", message: err.message } };
+            return { ok: false, error: { code: "snapshot_failed", message: discloseCaughtFailure(err) } };
         }
         this.activeAttempts.add(lease);
         try {
@@ -398,7 +399,7 @@ export class SqlFileHistoryStore {
             catch (err) {
                 await conn.rollback().catch(() => undefined);
                 this.spentAttempts.add(lease);
-                return { ok: false, error: { code: "snapshot_failed", message: `boundary for entry "${entryId}" could not be committed: ${err.message}` } };
+                return { ok: false, error: { code: "snapshot_failed", message: `boundary for entry "${entryId}" could not be committed: ${discloseCaughtFailure(err)}` } };
             }
             finally {
                 conn.release();
@@ -408,7 +409,7 @@ export class SqlFileHistoryStore {
         }
         catch (err) {
             this.spentAttempts.add(lease);
-            return { ok: false, error: { code: "snapshot_failed", message: err.message } };
+            return { ok: false, error: { code: "snapshot_failed", message: discloseCaughtFailure(err) } };
         }
         finally {
             this.activeAttempts.delete(lease);
@@ -475,7 +476,7 @@ export class SqlFileHistoryStore {
                     });
                 }
                 catch (err) {
-                    applied = { outcome: "failed", reason: err.message };
+                    applied = { outcome: "failed", reason: discloseCaughtFailure(err) };
                 }
                 if (applied.outcome === "applied")
                     ledger.filesChanged.push(t.trackKey);
@@ -492,7 +493,7 @@ export class SqlFileHistoryStore {
         }
         catch (err) {
             const touched = empty.filesChanged.length > 0 || empty.identicalSkipped.length > 0 || empty.refused.length > 0 || empty.failed.length > 0;
-            return { outcome: touched ? "partial" : "failed", ...empty, error: { code: "restore_failed", message: err.message } };
+            return { outcome: touched ? "partial" : "failed", ...empty, error: { code: "restore_failed", message: discloseCaughtFailure(err) } };
         }
     }
     async restorePlan(scope, entryId) {
@@ -593,7 +594,7 @@ export class SqlFileHistoryStore {
             return { ok: true };
         }
         catch (err) {
-            return { ok: false, error: { code: "snapshot_failed", message: `putBlob ${hash} write/upload failed: ${err.message}` } };
+            return { ok: false, error: { code: "snapshot_failed", message: `putBlob ${hash} write/upload failed: ${discloseCaughtFailure(err)}` } };
         }
     }
     async getBlob(hash) {
@@ -636,7 +637,7 @@ export class SqlFileHistoryStore {
             }
         }
         catch (err) {
-            return { ok: false, error: { code: "conflict", message: `adoptScope failed: ${err.message}` } };
+            return { ok: false, error: { code: "conflict", message: `adoptScope failed: ${discloseCaughtFailure(err)}` } };
         }
     }
     async scopeEmpty(exec, scope, forUpdate = false) {
@@ -735,7 +736,7 @@ export class SqlFileHistoryStore {
                     bytes = await srcGetBlob(hash);
                 }
                 catch (err) {
-                    return { ok: false, error: { code: "unsupported_format", message: `source blob ${hash} fetch failed: ${err.message}` } };
+                    return { ok: false, error: { code: "unsupported_format", message: `source blob ${hash} fetch failed: ${discloseCaughtFailure(err)}` } };
                 }
                 if (bytes === undefined)
                     return { ok: false, error: { code: "not_found", message: `source blob ${hash} is missing — the envelope's graph cannot be completed, so nothing is published` } };
@@ -786,7 +787,7 @@ export class SqlFileHistoryStore {
             }
         }
         catch (err) {
-            return { ok: false, error: { code: "unsupported_format", message: `importHistory failed: ${err.message}` } };
+            return { ok: false, error: { code: "unsupported_format", message: `importHistory failed: ${discloseCaughtFailure(err)}` } };
         }
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.79.0",
+  "version": "7.79.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",