@sema-agent/server 7.88.1 → 7.88.2

package/dist/brain.js

@@ -3,7 +3,7 @@ import { normalizeBaseUrl } from "@sema-agent/core";
 import { buildDefaultResilience } from "./config-types.js";
 import { resolveModelApiKey } from "./key-resolver.js";
 import { catalogBrainLane } from "./model-provider.js";
-import { buildDisplaySafeUrl } from "./trace/redact.js";
+import { buildDisplaySafeUrl, redactSecrets } from "./trace/redact.js";
 function isOffDeploymentRoot(baseUrl, config) {
     if (!baseUrl)
         return false;
@@ -158,7 +158,7 @@ export function brainSummary(config) {
             const verdict = adjudicateModelRoute({ id: target.id, baseUrl: target.baseUrl }, resolveRouteCredential({ ...(config.gatewayApiKey ? { configApiKey: config.gatewayApiKey } : {}) }), { baseUrl: degradeDeclaredRoot(target.baseUrl, config) });
             return verdict.ok
                 ? { reactiveDegradeRoutePairing: `ok:${verdict.posture}`, reactiveDegradeRouteRefusal: null }
-                : { reactiveDegradeRoutePairing: `broken:${verdict.code}`, reactiveDegradeRouteRefusal: routeRefusalText(verdict) };
+                : { reactiveDegradeRoutePairing: `broken:${verdict.code}`, reactiveDegradeRouteRefusal: redactSecrets(routeRefusalText(verdict)) };
         })()),
     };
 }

package/docs/DEVICE-EXECUTOR-PROTOCOL.md

@@ -166,6 +166,29 @@ Sign with the device private key over exactly these bytes:
 Any deviation — a different tag, a missing length prefix, a differently-encoded epoch — makes **every**
 handshake fail with `auth_failed`, with no hint as to which half is wrong. Get this right first.
 
+#### `epoch` is a byte-exact key: exactly which strings are accepted
+
+`epoch` is a 26-character **upper-case** Crockford base32 ULID whose first character is `0`–`7`. Crockford's
+alphabet is case-insensitive on paper; this protocol is **not**, on purpose: the same `epoch` string is also the
+key the server compares when fencing connection generations and leases, so two spellings of one ULID would let
+one connection be counted as two. That is worse than a failed handshake, so the decoder stays strict.
+
+The two entry points reject differently — if you call the low-level decoder yourself, check for `null`:
+
+| Input | `decodeUlid16(...)` | `buildHelloSignaturePayload({ epoch })` |
+|---|---|---|
+| valid, e.g. `01J8ZQ4T9X7M3K5N6P8R0S2V4W` | 16 bytes | payload |
+| lower-case, e.g. `01j8zq4t9x…` | `null` | throws `Error: device-ws: epoch must be a 26-char Crockford ULID (got "…")` |
+| first character `8`, `9`, `A` … `Z` (128-bit overflow) | `null` | throws |
+| 25 characters (or 27) | `null` | throws |
+| contains an excluded letter `I`, `L`, `O`, `U` | `null` | throws |
+
+The discriminating case, if you want to prove your own decoder judges the right thing: a `Z` as the **last**
+character is accepted (it is just the value 31), while a `Z` as the **first** character is rejected (overflow).
+A decoder that rejects "any Z" is wrong. Remember that a bad signature is answered with `auth_failed` and nothing
+else — the server does not say which half was wrong — so run the vector below and these rejection cases against
+your implementation before the first live handshake.
+
 #### Importable source of truth and a fixed test vector
 
 You do not have to transcribe the byte layout. From `@sema-agent/server` 7.88.0 the executor-facing part of the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.88.1",
+  "version": "7.88.2",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -59,7 +59,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.23.4",
+    "@sema-agent/core": "7.23.5",
     "@sema-agent/settings-schema": "3.0.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",