@sema-agent/server 7.91.1 → 7.91.2

package/USAGE.md

@@ -1075,7 +1075,7 @@ curl -N http://<host>:8090/v1/tasks/stream -H 'content-type: application/json' \
 | `POST /v1/approvals/<sessionId>/decide` `{"decision":"approve"|"deny","reason":"…"}` | 批/否并恢复挂起任务(CAS,重复决议 409);**仅 operator**(非 operator → 403)。5.0.0 起旧轮询腿 `POST /v1/approvals/<id>` 已退役 |
 | `GET /v1/agents/roster` | 后台 agent **名册**(7.29 起,需 durable background-agent store,否则 501 `capability.background_agent_store_required`):调用方自己 scope 的 `a…` 行,新→旧。行只带 `handle`/`name`/`agentType`/`status`/`spawnedAt`/`updatedAt`/`settledAt`(content-free;子代产物正文走 `GET /v1/runs/<id>/subagents/<handle>/output`)。查询:`?limit=`(1..100,默认 20)、`?before=`(上一页的 `nextBefore` 游标)、`?status=`(running\|parked\|completed\|failed\|killed)、`?session=`(按会话树窄化)、`?scope=`(**仅** service-token/单用户形;带 principal 的调用方锁定自己)。回体 `{agents,total,nextBefore?,truncated?}`;`truncated:true` = 租户行数超过名册窗(500),`total` 此时是窗内数。非属主的行**不出现也不计数**(无存在性 oracle) |
 | `GET /v1/capabilities/scenarios/<name>` | 单个场景的只读详情:工具面、提示词概览、**本部署现在跑不跑得动**(见下) |
-| `POST /v1/admin/drain` `{"reason":"…"}` | **停机因由显式声明**(7.35.0+;operator-only —— principal 须在 `OPERATOR_PRINCIPALS` 内,空名单 = 谁都不是 operator ⇒ 恒 403)。编排壳在发 SIGTERM **之前**调它;server 记进程内 `drainState.reason`,draining 期由 `/health` 的 `drainReason` 与 503 `draining` 体的 `reason` 透出(未声明 = 两面键缺席)。声明是**覆盖式**、无 TTL、随进程重启清零 ⇒ 每次停机流程内都要重新声明。`reason` 非空、trim 后 ≤256 字符,坏值 400。🔴 **写口是特权的,读口不是**:`/health` 免鉴权(见下一行)且缺省全网卡监听 —— 任何能连到这个端口的人都读得到你写的那句话。**别在 reason 里写工单号、内部主机名或任何内部标识**。 |
+| `POST /v1/admin/drain` `{"reason":"…"}` | **停机因由显式声明**(7.35.0+;operator-only —— principal 须在 `OPERATOR_PRINCIPALS` 内,空名单 = 谁都不是 operator ⇒ 恒 403)。设计给编排层(k8s `preStop` / systemd `ExecStop` 等)在发 SIGTERM **之前**调用声明因由;⚠️ **如实**:本仓四条消费树(server/cli/sdk/web-admin)与编排层脚本树 `sema-deploy` 里对它零调用,`sema-comms audits/.md:213` N-18 已把它书面登记为 declined(cli 判定这是 operator 面,不是壳自动打的口)—— 今天它是给**运维手动 curl**(或运维自己写的编排脚本)用的口,不是任何一个内置壳自动调用的。调用后 server 记进程内 `drainState.reason`,draining 期由 `/health` 的 `drainReason` 与 503 `draining` 体的 `reason` 透出(未声明 = 两面键缺席)。声明是**覆盖式**、无 TTL、随进程重启清零 ⇒ 每次停机流程内都要重新声明。`reason` 非空、trim 后 ≤256 字符,坏值 400。无 drain 面装配(嵌入宿主 / 测试)上声明无处可落 ⇒ 501 `capability.drain_state_required`。🔴 **写口是特权的,读口不是**:`/health` 免鉴权(见下一行)且缺省全网卡监听 —— 任何能连到这个端口的人都读得到你写的那句话。**别在 reason 里写工单号、内部主机名或任何内部标识**。 |
 | `GET /v1/config/catalog` | **配置目录自描述**(operator-only —— `explicitOperatorOk`,空名单=谁都不是)。逐 env 键一行:`{name, domain, type, semantics, writeLanes, effectiveLane, envHeld, envTiming, staticDefault?/derivedDefaultNote?, effectiveValue, valueClass, danger, center?{domain,path,precedence,timing,restartSlice?,domainExists,managedNow,effectiveNow}}`;顶层带 `restartSlices`(重启片闭集)与 `centerDomains`(settings-schema 现行域表)。**两轴不混**:`writeLanes`=谁能写,`effectiveLane`=现在谁在生效(env-wins 族 env 占位 ⇒ center 腿 `effectiveNow:false`)。secret 类值**永不回传**(只回在场位;opaque 回在场位+长度;URL 剥 userinfo)。完备性由仓内 AST 双向对账门执法(分母=全 `src/` 生产 env 读取点)。旋钮 `CONFIG_CATALOG_ENABLED=false`(合规部署)⇒ 路径 404 + 能力位 `configCatalog:false`。响应 `Cache-Control: no-store`。**7.57.0 起**:`enum` 行的 `effectiveValue` **恒落在该行自己的 `enumValues` 闭集内**(仓内机器门执法)——此前 `SESSION_BACKEND` 回的是**内部标签** `tidb`(自 5.0.0 起是**退役公名**,写回去 boot 拒),现归一成公名 `mysql`;`MODEL_DEFAULT_THINKING` 补上一直被解析器接受、却漏在目录闭集外的 `xhigh`,并改为回**实算值**(`off`/未设 ⇒ `null`)而不是 env 原文。 |
 | `POST /v1/admin/config/refresh` | **配置手动刷新**(operator-only,与上一行同门:空 `OPERATOR_PRINCIPALS` ⇒ 恒 403)。改完中心配置 / `config.d` 之后不想等 60s 轮询就调它:触发**一次既有**的 refresh 拍(在飞则汇入那一拍,绝不并发双拍),返回时该拍已落地。200 体 `{triggered:true,targetVersion,appliedVersion}` —— 两个世代号与 `/health` 的 `configTargetVersion`/`configAppliedVersion` 同源。本部署没有配置管道(纯 env worker:既没配 `CONFIG_CENTER`、也不是 `CONFIG_PROVIDER=local`)⇒ 409 `config.refresh_unavailable` 指路,不会回一个「触发了但什么都没发生」的 200。 |
 | `GET /health` | 健康(无需鉴权)。**7.67.0+** 恒带 `startedAt`(引擎进程起点 epoch ms,一次铸;与 `pid` 并列的换代锚——值变了就是换了一条命)。7.37.0+ 配置管道在场时带世代账键:`configTargetVersion`(本副本**最后见到**的配置版本,身份标)、`configAppliedVersion`(最后一次真落地的版本)、`configTargetOrdinal`/`configAppliedOrdinal`(7.38.0-rc.2 起,**收货序数**——`CONFIG_PROVIDER=local` 下 version 是内容哈希不承诺序,「改了没生效」看序数对不对齐)、`configApplyStaleMs`(target≠applied **持续**时长;收敛时键缺席)—— 编排器据此摘掉「配置持续落后」的副本 |

package/dist/trace/core-keyset-guard.d.ts

@@ -94,9 +94,13 @@ type _GuardWiringFleet = AssertAllKeysHandled<Exclude<keyof WiringSection<"fleet
 type _GuardWiringFleetReverse = AssertAllKeysHandled<Exclude<WiringFleetHandled, keyof WiringSection<"fleet">>>;
 type WiringMcpEntry = WiringSection<"mcp">[number];
 type WiringMcpExcluded = "error";
-type WiringMcpHandled = "name" | "source" | "status" | "errorCode" | "delivered" | "httpStatus" | "toolCount" | WiringMcpExcluded;
+type WiringMcpHandled = "name" | "source" | "status" | "errorCode" | "delivered" | "httpStatus" | "toolCount" | "liveness" | WiringMcpExcluded;
 type _GuardWiringMcp = AssertAllKeysHandled<Exclude<keyof WiringMcpEntry, WiringMcpHandled>>;
 type _GuardWiringMcpReverse = AssertAllKeysHandled<Exclude<WiringMcpHandled, keyof WiringMcpEntry>>;
+type WiringMcpLiveness = NonNullable<WiringMcpEntry["liveness"]>;
+type WiringMcpLivenessHandled = "state" | "observedAt" | "errorCode";
+type _GuardWiringMcpLiveness = AssertAllKeysHandled<Exclude<keyof WiringMcpLiveness, WiringMcpLivenessHandled>>;
+type _GuardWiringMcpLivenessReverse = AssertAllKeysHandled<Exclude<WiringMcpLivenessHandled, keyof WiringMcpLiveness>>;
 type WiringRulesHandled = "storeWired" | "syncWired" | "orgGoverned";
 type _GuardWiringRules = AssertAllKeysHandled<Exclude<keyof WiringSection<"permissionRules">, WiringRulesHandled>>;
 type _GuardWiringRulesReverse = AssertAllKeysHandled<Exclude<WiringRulesHandled, keyof WiringSection<"permissionRules">>>;
@@ -180,12 +184,12 @@ type _GuardMcpReconnect = AssertAllKeysHandled<Exclude<keyof McpReconnectResult,
 type _NoDoubleBookMcpReconnect = AssertAllKeysHandled<Extract<McpReconnectProjected, McpReconnectWithheld>>;
 type _GuardMcpReconnectReverse = AssertAllKeysHandled<Exclude<McpReconnectProjected | McpReconnectWithheld, keyof McpReconnectResult>>;
 type McpRedialStatusProjected = "name" | "status" | "errorCode" | "httpStatus" | "delivered" | "serverInfo" | "error" | "transportClosed";
-type McpRedialStatusWithheld = "toolNames";
+type McpRedialStatusWithheld = "toolNames" | "liveness";
 type _GuardMcpRedialStatus = AssertAllKeysHandled<Exclude<keyof McpServerStatus, McpRedialStatusProjected | McpRedialStatusWithheld>>;
 type _NoDoubleBookMcpRedialStatus = AssertAllKeysHandled<Extract<McpRedialStatusProjected, McpRedialStatusWithheld>>;
 type _GuardMcpRedialStatusReverse = AssertAllKeysHandled<Exclude<McpRedialStatusProjected | McpRedialStatusWithheld, keyof McpServerStatus>>;
 type McpPanelStatusProjected = "name" | "status" | "serverInfo" | "toolNames" | "error";
-type McpPanelStatusWithheld = "errorCode" | "httpStatus" | "delivered" | "transportClosed";
+type McpPanelStatusWithheld = "errorCode" | "httpStatus" | "delivered" | "transportClosed" | "liveness";
 type _GuardMcpPanelStatus = AssertAllKeysHandled<Exclude<keyof McpServerStatus, McpPanelStatusProjected | McpPanelStatusWithheld>>;
 type _NoDoubleBookMcpPanelStatus = AssertAllKeysHandled<Extract<McpPanelStatusProjected, McpPanelStatusWithheld>>;
 type _GuardMcpPanelStatusReverse = AssertAllKeysHandled<Exclude<McpPanelStatusProjected | McpPanelStatusWithheld, keyof McpServerStatus>>;
@@ -288,7 +292,9 @@ export type CoreKeysetGuards = [
     _NoDoubleBookMcpPanelStatus,
     _GuardMcpPanelStatusReverse,
     _GuardMcpListingIncomplete,
-    _GuardMcpListingIncompleteReverse
+    _GuardMcpListingIncompleteReverse,
+    _GuardWiringMcpLiveness,
+    _GuardWiringMcpLivenessReverse
 ];
 export {};
 //# sourceMappingURL=core-keyset-guard.d.ts.map

package/dist/trace/project.d.ts

@@ -585,6 +585,22 @@ export declare function workspaceChangedEventData(ev: {
  *       (「connection state is a fact about this leg's attempt, not about the assembly」)。
  *    ⚠️ 空数组 ≠ 缺席:core 顶注逐字「an empty array is "this leg declared no servers", absence is an older
  *       mint or an external derivation」⇒ 空数组照铸,别折成缺席。
+ *    🔴 **⑤ `liveness`(core 7.24.3 [ref] / S-402 提货件)—— 裁:租户可见,整条记录投,逐键挑**。
+ *       `{state, observedAt, errorCode?}` = 引擎**最后一次观察**到的「这台还够得着吗」。受众判据与同行
+ *       其余键**同一条**(同主体同受众、引擎派生的闭形值、非 governance 侧信道 —— 它同样不进
+ *       `configFingerprint`),所以这一格不需要新的裁定,只需要新的**读法**。
+ *       🔴 **契约一行(client-core CC-36 的那句话):活性位独立于名册申报与 re-dial 结果。**
+ *       `status` 是拨号那一刻的判决且 core **有意冻结**(服务器中途死了仍读 `connected`);re-dial 回执的
+ *       `outcome` 是一次动作的判词;这一格是连接层最后学到的事,自带时戳。三者**合法地可以不一致** ——
+ *       `status:"failed"` 与 `liveness.state:"reachable"` 同行是真行(服务器答了握手、答的是协议错:
+ *       活着,且配错了)。⇒ 本仓**不合并、不互相校验、不据一个推另一个**(与 ① 里「两条 MCP 读面同名
+ *       不同源、合并只会造出『哪个才算数』」逐字同源)。
+ *       ⚠️ **缺席是第四读数,不是一个词**:core 顶注逐字「a consumer must not fold absence into
+ *       `unknown`」——`unknown` 是**更强**的断言(引擎看了、看不出来)。
+ *       🔴 **但本仓出口上的「缺席」比 core 源端的更宽**(codex r1 [medium] 采纳):core 那边是
+ *       压根没有观察(`skipped` 的行没走到 transport / `invalid_config` 的声明从没被拨过 / 老 mint),
+ *       而经过本投影后**判形没过也落缺席**(词出闭集 / `observedAt` 非有限数 / 整只不是对象)。
+ *       ⇒ 对消费端,缺席只能读成「**没有可用的观察记录**」,**不许**据它反推这条腿拨没拨过号。
  *  · `writeProtection`(`{ targetView: "spelling-only" | "target" }`;core 7.20.1 [ref] / clay [ref] 丙,
  *    S-361 提货件)—— **裁:租户可见,逐字透传**。它是 per-leg 的读面:「这条腿的写保护判官,拿到的是
  *    哪一种目标读法」——`"target"` = 判官握着执行环境,拼法没命中时会在**解析后的真目标**上再判一次;

package/dist/trace/project.js

@@ -1,5 +1,5 @@
 import { redactErrorMessage, redactModelText } from "../observability/run-terminal.js";
-import { MCP_DELIVERY_VERDICTS, screenGateOutcome, ToolRoster, ToolRosterDelta, WRITE_PROTECTION_TARGET_VIEWS } from "@sema-agent/core";
+import { MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, ToolRoster, ToolRosterDelta, WRITE_PROTECTION_TARGET_VIEWS } from "@sema-agent/core";
 import { Value } from "typebox/value";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { redactSecrets, redactDeep } from "./redact.js";
@@ -507,6 +507,17 @@ export function wiringManifestEventData(ev) {
             const status = str(e.status);
             if (name === undefined || status === undefined)
                 continue;
+            const liveness = (() => {
+                const rec = sec(e.liveness);
+                if (rec === undefined)
+                    return undefined;
+                const state = str(rec.state);
+                const observedAt = num(rec.observedAt);
+                if (state === undefined || !MCP_LIVENESS_STATES.includes(state) || observedAt === undefined)
+                    return undefined;
+                const errorCode = str(rec.errorCode);
+                return { state, observedAt, ...(errorCode === undefined ? {} : { errorCode }) };
+            })();
             rows.push({
                 name,
                 status,
@@ -515,6 +526,7 @@ export function wiringManifestEventData(ev) {
                 ...(str(e.errorCode) !== undefined ? { errorCode: e.errorCode } : {}),
                 ...(typeof e.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(e.delivered) ? { delivered: e.delivered } : {}),
                 ...(num(e.httpStatus) !== undefined ? { httpStatus: e.httpStatus } : {}),
+                ...(liveness !== undefined ? { liveness } : {}),
             });
         }
         return rows;

package/dist/trace/redact.js

@@ -590,9 +590,11 @@ function collectStickySpans(a, text, at, out) {
     }
 }
 const WORD_SEGMENT_CLASS = "[A-Za-z0-9._~+/-]";
+const LEXICAL_KEYWORD_ARMS = new Set();
 const keywordArm = (keywordSrc, valueClass, min, tailSrc = "") => {
     const re = new RegExp(`(?:${keywordSrc}\\s+${atLeast(valueClass, min)}${tailSrc}` +
         `|(?<!${WORD_SEGMENT_CLASS})${keywordSrc}(?:${twoStrongAhead(valueClass)}|${noConnectorAhead(valueClass)})${atLeast(valueClass, min)}${tailSrc})`, "g");
+    LEXICAL_KEYWORD_ARMS.add(re);
     return re;
 };
 const CREDENTIAL_NAME_WORDS = [
@@ -1515,6 +1517,7 @@ const armPool = (() => {
             rank,
             order,
             phase: 1,
+            lexical: LEXICAL_KEYWORD_ARMS.has(re),
             collect: boundary === undefined
                 ? (text, _json, _observe, out) => collectRegexSpans(arm, text, out)
                 : (text, _json, _observe, out) => collectValueArmSpans(boundary, text, out),
@@ -1530,6 +1533,7 @@ const armPool = (() => {
             rank: ARM_RANK.structural,
             order,
             phase,
+            lexical: false,
             collect: (text, json, observe, out) => scan(text, json, observe, (start, end) => out.push({ start, end, repl, rank: ARM_RANK.structural, order })),
             retry: undefined,
             headSrc: undefined,
@@ -1554,14 +1558,32 @@ const armPool = (() => {
         members.push(regexMember(row, ARM_RANK.shape, members.length, false));
     for (const row of FRAGMENT_SECRET_PATTERNS)
         members.push(regexMember(row, ARM_RANK.fragment, members.length, false));
+    for (const [re] of KEYWORD_SECRET_PATTERNS) {
+        if (!LEXICAL_KEYWORD_ARMS.has(re))
+            throw new Error(`redact: keyword arm /${re.source}/ is not registered as lexical — build it with keywordArm() so the bounded-unit scope can exclude it`);
+    }
     const retryMembers = members.filter((m) => m.retry !== undefined);
     const phase1 = members.filter((m) => m.phase === 1);
     const phase2 = members.filter((m) => m.phase === 2);
+    const laneOf = (scope) => {
+        const inScope = (m) => {
+            switch (scope) {
+                case "free-text": return true;
+                case "bounded-unit": return !m.lexical;
+            }
+        };
+        return { phase1: phase1.filter(inScope), phase2: phase2.filter(inScope), retry: retryMembers.filter(inScope) };
+    };
+    const LANES = {
+        "free-text": laneOf("free-text"),
+        "bounded-unit": laneOf("bounded-unit"),
+    };
     const headScreen = new RegExp(`(?:${retryMembers.map((m) => m.headSrc).join("|")})`, "y");
     const headFirstUnit = unionMembers(retryMembers.map((m) => m.headFirst)) ?? new Uint32Array(0x10000 >>> 5).fill(0xffffffff);
     poolArmCount = members.length;
     poolBoundaryArmCount = retryMembers.length;
-    return (text, wantCount, json, observe) => {
+    return (text, wantCount, json, observe, scope) => {
+        const lane = LANES[scope];
         const spans = [];
         let tried;
         const freshCovered = (from) => {
@@ -1586,25 +1608,25 @@ const armPool = (() => {
             return at.sort((x, y) => x - y);
         };
         const closeCoveragePositions = (from) => {
-            if (retryMembers.length === 0 || spans.length === from)
+            if (lane.retry.length === 0 || spans.length === from)
                 return;
             for (let at = freshCovered(from); at.length > 0;) {
                 const before = spans.length;
-                for (const m of retryMembers)
+                for (const m of lane.retry)
                     m.retry(text, at, spans);
                 at = freshCovered(before);
             }
         };
         setScanEvidence(NO_CREDENTIAL_SPANS);
-        for (const m of phase1)
+        for (const m of lane.phase1)
             m.collect(text, json, observe, spans);
         closeCoveragePositions(0);
-        if (phase2.length > 0) {
+        if (lane.phase2.length > 0) {
             let evidence = credentialSpans(text, spans, false);
             for (let level = 0;; level += 1) {
                 const before = spans.length;
                 setScanEvidence(evidence);
-                for (const m of phase2)
+                for (const m of lane.phase2)
                     m.collect(text, json, observe && level === 0, spans);
                 closeCoveragePositions(before);
                 forensicLevels += 1;
@@ -1646,8 +1668,8 @@ let onRedaction;
 export function setRedactionObserver(fn) {
     onRedaction = fn;
 }
-function applyRules(text, wantCount, json, observe) {
-    return armPool(text, wantCount, json, observe);
+function applyRules(text, wantCount, json, observe, scope) {
+    return armPool(text, wantCount, json, observe, scope);
 }
 function reportHits(hits) {
     if (onRedaction === undefined)
@@ -1660,20 +1682,20 @@ function reportHits(hits) {
         }
     }
 }
-function runRedaction(text, observe, json, wantHits) {
+function runRedaction(text, observe, json, wantHits, scope) {
     const wantCount = wantHits || (onRedaction !== undefined && observe);
     const normalized = normalizeForRedaction(text);
-    const r = applyRules(normalized, wantCount, json, observe);
+    const r = applyRules(normalized, wantCount, json, observe, scope);
     forgetEscapedSeparatorTails();
     if (observe)
         reportHits(r.hits);
     return { text: r.out, hits: r.hits, spans: r.kept };
 }
 export function redactSecrets(text, opts) {
-    return runRedaction(text, opts?.observe ?? true, opts?.json === true, false).text;
+    return runRedaction(text, opts?.observe ?? true, opts?.json === true, false, "free-text").text;
 }
 export function redactSecretsWithArms(text, opts) {
-    const r = runRedaction(text, opts?.observe ?? true, opts?.json === true, true);
+    const r = runRedaction(text, opts?.observe ?? true, opts?.json === true, true, "free-text");
     return { text: r.text, arms: new Set(r.hits.map((h) => h.arm)) };
 }
 const REDACT_MAX_DEPTH = 64;
@@ -1777,7 +1799,7 @@ function unitCarriesCredential(unit) {
         for (const v of armValueClassViews())
             views.add(boundedUnitView(spelling, v.inClass, v.filler));
     views.delete("");
-    const hit = [...views].some((view) => redactSecrets(view) !== view);
+    const hit = [...views].some((view) => runRedaction(view, true, false, false, "bounded-unit").text !== view);
     return { hit, residue: decoded.residue };
 }
 function displaySafePathname(pathname) {
@@ -1808,7 +1830,7 @@ function shapeLawCredentialInQueryOrFragment(canonical) {
     const boundary = normalized.indexOf("?");
     if (boundary < 0)
         return false;
-    if (runRedaction(canonical, false, false, false).spans.some((sp) => sp.end > boundary))
+    if (runRedaction(canonical, false, false, false, "free-text").spans.some((sp) => sp.end > boundary))
         return true;
     for (const unit of normalized.slice(boundary + 1).split("&").flatMap((sg) => {
         const eq = sg.indexOf("=");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.91.1",
+  "version": "7.91.2",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -59,7 +59,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.24.2",
+    "@sema-agent/core": "7.24.4",
     "@sema-agent/settings-schema": "3.0.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -74,7 +74,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "9.10.0",
+    "@sema-agent/sdk": "9.11.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",