@sema-agent/server 7.79.1 → 7.79.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/dist/boot/late-binds.d.ts +35 -0
  2. package/dist/boot/late-binds.js +20 -0
  3. package/dist/boot/stage-01-config.d.ts +7 -0
  4. package/dist/boot/stage-01-config.js +60 -0
  5. package/dist/boot/stage-02-registry-pull.d.ts +10 -0
  6. package/dist/boot/stage-02-registry-pull.js +11 -0
  7. package/dist/boot/stage-03-store-backend.d.ts +32 -0
  8. package/dist/boot/stage-03-store-backend.js +11 -0
  9. package/dist/boot/stage-04-stores.d.ts +69 -0
  10. package/dist/boot/stage-04-stores.js +49 -0
  11. package/dist/boot/stage-05-execution-env.d.ts +82 -0
  12. package/dist/boot/stage-05-execution-env.js +20 -0
  13. package/dist/boot/stage-06-runners.d.ts +143 -0
  14. package/dist/boot/stage-06-runners.js +207 -0
  15. package/dist/boot/stage-07-capability-layer.d.ts +157 -0
  16. package/dist/boot/stage-07-capability-layer.js +162 -0
  17. package/dist/boot/stage-08-reapers.d.ts +172 -0
  18. package/dist/boot/stage-08-reapers.js +78 -0
  19. package/dist/boot/stage-09-leader.d.ts +204 -0
  20. package/dist/boot/stage-09-leader.js +47 -0
  21. package/dist/boot/stage-10-http-server.d.ts +204 -0
  22. package/dist/boot/stage-10-http-server.js +289 -0
  23. package/dist/config-invariants.d.ts +9 -0
  24. package/dist/config-invariants.js +7 -1
  25. package/dist/config-types.d.ts +1 -1
  26. package/dist/http/dispatch.d.ts +9 -73
  27. package/dist/http/dispatch.js +12 -281
  28. package/dist/http/route-table.d.ts +113 -0
  29. package/dist/http/route-table.js +235 -0
  30. package/dist/http/routes/admin-memory-optout.d.ts +1 -1
  31. package/dist/http/routes/memory-compliance.d.ts +1 -1
  32. package/dist/http/routes/memory-origin.d.ts +1 -1
  33. package/dist/http/routes/rules.js +4 -4
  34. package/dist/http/server.d.ts +2 -1
  35. package/dist/http/server.js +2 -1
  36. package/dist/main.js +20 -870
  37. package/dist/service-version.d.ts +5 -0
  38. package/dist/service-version.js +12 -0
  39. package/dist/trace/redact.d.ts +16 -6
  40. package/dist/trace/redact.js +568 -246
  41. package/package.json +1 -1
@@ -0,0 +1,5 @@
1
+ /** Service version for GET /v1/capabilities — read from the package.json shipped next to src/ in the
2
+ * image (Dockerfile COPYs it). Best-effort: an unreadable file reports "unknown", never crashes boot. */
3
+ declare function serviceVersion(): string;
4
+ export { serviceVersion };
5
+ //# sourceMappingURL=service-version.d.ts.map
@@ -0,0 +1,12 @@
1
+ import { readFileSync } from "node:fs";
2
+ function serviceVersion() {
3
+ try {
4
+ const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
5
+ return pkg.version ?? "unknown";
6
+ }
7
+ catch {
8
+ return "unknown";
9
+ }
10
+ }
11
+ export { serviceVersion };
12
+ //# sourceMappingURL=service-version.js.map
@@ -28,12 +28,11 @@
28
28
  * `redactModelText`(四座同调:结果两叶经 `redactTerminalResult`,账本两行经 `redactLedgerEventData`);
29
29
  * 它定的是**写回**判据(认出凭据形才改字节、抛则占位),不是第二张规则表。
30
30
  *
31
- * 臂分**三段 + 一个候选池**,段之间的先后是契约(上下文越多越靠前):结构段(PEM/URL/JSON + 三条体扫描器)
32
- * → 词法关键字段(`Bearer`/`Basic`/`token`)→ **候选池** → URL 收尾归一化。
33
- * ⚠️ **池内没有优先序,自 7.76.0**:{@link SHAPE_SECRET_PATTERNS}(裸形八条)与 {@link FRAGMENT_SECRET_PATTERNS}
34
- * ([ref] 前缀残片八条,上游先截后脱的产物 ⇒ 带 `:partial` 后缀的 token)并进**同一个**候选池
35
- * ({@link armPoolRule}):全臂看同一份未改写文本收候选跨度 → 不动点 → 并集律解重叠 → 一次替换,
36
- * **池内臂序对输出无语义**(7.75.2 只做到裸形一段,残片段仍逐臂改写 ⇒ S-282 的两条漏形)。
31
+ * 🔴 **只有一条施加路径:候选池**(S-223 v2 起;此前是「结构段 → 词法关键字段 → 池 → URL 收尾归一化」四步,
32
+ * 每一步都把**上一步改写过的文本**喂给下一步)。四张臂表({@link STRUCTURAL_SECRET_PATTERNS} /
33
+ * {@link KEYWORD_SECRET_PATTERNS} / {@link SHAPE_SECRET_PATTERNS} / {@link FRAGMENT_SECRET_PATTERNS})
34
+ * 加三条体扫描器全是 {@link armPool} 的成员:全臂看**同一份未改写文本**收候选跨度 → 不动点 → 并集律解重叠
35
+ * → **一次**替换,**臂序对输出无语义**(次序只定 `order` = 同起点同长时的稳定裁决)。
37
36
  * 左边界律因此有**三种**边界:非词内字符 ∨ 转义分隔单元尾 ∨ **一枚已收候选跨度的尾**(= 凭据尾)。
38
37
  */
39
38
  /** 本模块替换 token 的**闭形**正则源(`«redacted»` / `«redacted:aws-key»` / `«redacted:gh-token:partial»` …):
@@ -51,6 +50,17 @@ import { stripFormatCharacters } from "@sema-agent/core";
51
50
  * 现役消费方:`src/tool-approval.ts` 的 `durableRuleMaterial`(规则车道素材闸)与语料的 FP=0 格。
52
51
  */
53
52
  export declare const normalizeForRedaction: typeof stripFormatCharacters;
53
+ export declare function armPoolBudgetForTest(): {
54
+ spanCount: number;
55
+ coveredPositions: number;
56
+ headScreenHits: number;
57
+ fullYCalls: number;
58
+ armCount: number;
59
+ boundaryArmCount: number;
60
+ forensicLevels: number;
61
+ ssh2ScanBytes: number;
62
+ };
63
+ export declare function resetArmPoolBudgetForTest(): void;
54
64
  /** 测试可见:扫描器 indexOf 实际扫过的字节数(摊还线性 ⇒ ≤ 常数 × 输入长)。 */
55
65
  export declare function ppkScanBytesForTest(): number;
56
66
  export declare function resetPpkScanBytesForTest(): void;