@sema-agent/server 7.96.0 → 7.98.0

package/dist/run-local.js

@@ -24,10 +24,9 @@ import { acquireLocalBackendWithWait } from "./plugins/store-lock-wait.js";
 import { createConfigProvider } from "./config-provider.js";
 import { applyEffective, applyCenterReadFace, resolveMcpServers, mcpForScenario, resolveA2aPeers, a2aForScenario } from "./config-center/facade.js";
 import { hostExecutionEnvFactory } from "./plugins/remote-env-host.js";
-import { executionLaneHomeDir } from "./execution-lane-caps.js";
+import { executionLaneHomeDir, executionLaneOf } from "./execution-lane-caps.js";
 import { makeLoadProjectMemory, makeProbeInstructionSources } from "./project-memory.js";
-import { loadSkills } from "./capabilities/skills.js";
-import { toolsRunOnThisHost } from "./task-cwd.js";
+import { loadDeploymentSkills } from "./capabilities/skills.js";
 import { createRepoClient } from "./capabilities/repo-tools.js";
 import { webSearchConfigFromEnv, createWebSearchBackend } from "./plugins/web-search.js";
 import { buildScenarios, selectScenario, centerScenarios } from "./capabilities/scenarios.js";
@@ -35,7 +34,8 @@ import { createTaskListLane } from "./boot/task-list-lane.js";
 import { pickHandsRunner, withoutExecutionEnv } from "./capabilities/hands-lane.js";
 import { HttpError } from "./security.js";
 import { createMemoryEngineIncidentSink } from "./memory-incident-sink.js";
-import { memoryEngineBackendFor, memorySpecForRequest } from "./memory-scope.js";
+import { memoryEngineBackendFor, memoryProjectKeyFor, memorySpecForRequest } from "./memory-scope.js";
+import { modelRouteEndpointRefusal } from "./model-route-endpoint.js";
 import { createMemorySyncRunner, createMemorySyncTransport } from "./memory-sync-client.js";
 import { buildPricing, cappedCeiling, createTracer } from "./budget.js";
 import { createSharedRunnerDeps } from "./boot/runner-deps.js";
@@ -100,9 +100,8 @@ export class UsageError extends Error {
 }
 export function missingGatewayRequirements(config) {
     const missing = [];
-    if (!config.gatewayBaseUrl || !/\/v1\/?$/.test(config.gatewayBaseUrl)) {
-        missing.push("MODEL_GATEWAY_BASEURL (the OpenAI-compatible gateway URL, must end in /v1)");
-    }
+    if (config.gatewayBaseUrl === undefined)
+        return missing;
     const perModelEnvs = Object.values(config.modelApiKeyEnv ?? {});
     const haveGatewayKey = !!config.gatewayApiKey;
     const catalogModelNames = new Set(Object.values(config.models ?? {}).map((m) => m.name));
@@ -210,6 +209,9 @@ export async function runLocal(argv, deps = {}) {
     catch (err) {
         logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: String(err) });
     }
+    const endpointRefusal = modelRouteEndpointRefusal(config);
+    if (endpointRefusal !== undefined)
+        throw new Error(endpointRefusal);
     const unpricedCeiling = buildUnpricedCeilingNotice(config.models, config);
     if (unpricedCeiling)
         logger.warn(unpricedCeiling.event, unpricedCeiling.fields);
@@ -424,7 +426,7 @@ export async function runLocal(argv, deps = {}) {
     const subRunner = new Runner(subRunnerDeps);
     const handslessRunner = new Runner(withoutExecutionEnv(runnerDeps));
     const handslessSubRunner = new Runner(withoutExecutionEnv(subRunnerDeps));
-    const skills = loadSkills(config.skillsDir, { toolsShareThisFilesystem: toolsRunOnThisHost(config) });
+    const skills = loadDeploymentSkills(config);
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();
     const webSearch = webSearchCfg ? createWebSearchBackend(webSearchCfg) : undefined;
@@ -478,7 +480,7 @@ export async function runLocal(argv, deps = {}) {
         backgroundScope: "session",
         oneShot: true,
         principal: scope,
-        ...(memoryEngine ? { memory: memorySpecForRequest(scope, undefined) } : {}),
+        ...(memoryEngine ? { memory: memorySpecForRequest(scope, memoryProjectKeyFor(config, scope, workspaceDir), undefined) } : {}),
         model: mention.model ?? "default",
         getApiKeyAndHeaders: keyResolver,
         tools: cap.tools,
@@ -489,7 +491,7 @@ export async function runLocal(argv, deps = {}) {
         ...(a2a ? { a2a } : {}),
         ...(Object.keys(limits).length > 0 ? { limits } : {}),
     }, config, workspaceDir, memoryEngine?.root);
-    logger.info("run_local_start", { scenario: scenarioName, model: spec.model, sessionId, exec: config.remoteExec?.provider ?? "in-process" });
+    logger.info("run_local_start", { scenario: scenarioName, model: spec.model, sessionId, exec: executionLaneOf(config.remoteExec?.provider) });
     const settleSessionBackground = async () => {
         const reaped = defaultTaskRegistry.reapSessionBackground(sessionId, scope);
         if (reaped === 0)

package/dist/session-sync.d.ts

@@ -140,7 +140,10 @@ export interface SessionManifest {
  * `null` ONLY for "session does not exist". (Named exportSessionManifest, NOT exportManifest, to avoid the collision
  * with the history store's own export verb.)
  */
-export declare function exportSessionManifest(sessionId: string, srcBackend: StoreBackend): Promise<{
+export declare function exportSessionManifest(sessionId: string, srcBackend: StoreBackend, 
+/** S-589:文件历史读**装配结果**(捕获脸),不直取 `srcBackend.fileHistory()` —— 「这台部署有没有文件历史店」
+ *  只在 `assembleFileHistory` 判一次。同一个后端铸的同一只店,四店同源的不变式不变。 */
+historyStore: ServiceFileHistoryStore): Promise<{
     manifest: SessionManifest;
     getBlob: BlobGetter;
 } | null>;

package/dist/session-sync.js

@@ -21,7 +21,7 @@ export async function replayFileHistory(store, scope, envelope, srcGetBlob, opts
 function ownerAware(backend) {
     return backend.session();
 }
-export async function exportSessionManifest(sessionId, srcBackend) {
+export async function exportSessionManifest(sessionId, srcBackend, historyStore) {
     const session = ownerAware(srcBackend);
     const listEntryIds = session.listEntryIds?.bind(session);
     if (!listEntryIds)
@@ -31,7 +31,7 @@ export async function exportSessionManifest(sessionId, srcBackend) {
         return null;
     const getLeafId = session.getLeafId?.bind(session);
     const leafId = getLeafId ? await getLeafId(sessionId) : null;
-    const fs = srcBackend.fileHistory();
+    const fs = historyStore;
     const fileHistory = typeof fs.exportHistory === "function" ? await fs.exportHistory(sessionId) : null;
     const policyStore = srcBackend.sessionPolicy();
     const policy = typeof policyStore.listBySession === "function"

package/dist/task-cwd.d.ts

@@ -56,12 +56,18 @@ export declare function cwdHonored(config: {
  * S-377 —— 「**工具跑的那台机器**就是本进程这台吗」。回答的是一个**文件系统同一性**问题,不是权限问题:
  * server 盘上的一条绝对路径(出厂 `SKILLS_DIR` 下某个技能自己的目录)对模型的工具**有没有意义**。
  *
+ * 判据 = 能力表两位的合取 {@link handsOnWorkerFilePlane}(`coreRemoteExecutionEnv ∧ hostFilePlane`,都读表,
+ * 本函数不手写任何车道词):
  * · `host`(run-on-this-machine,无容器)⇒ 真;
- * · `undefined`(in-process 单用户 lane)⇒ 真 —— 该 lane 根本没挂手(core 落 `StubExecutionEnv`),
- *   路径对谁都不可达,但它在**文件系统同一性**这条轴上确实是同一台机器,判真让规则只剩一条;
+ * · `in-process`(`REMOTE_EXEC` 未设)⇒ **假**(S-602,clay 裁 [ref] A 翻面;改前判真)—— 该 lane 根本
+ *   没挂手(core 落 `StubExecutionEnv`),「工具的盘」这句话在这里没有指称对象。改前的理由「文件系统同一性
+ *   这条轴上确实是同一台机器,判真让规则只剩一条」把**缺席折成了邻居**:wire 上的 `toolsOnThisHost` 因此
+ *   对无手部署说真,消费端的 doctor 据此说「工具在本机」。代价如实记:出厂目录形技能在 in-process 上不再带
+ *   `baseDir` —— core 律:缺席 ⇒ 结果逐字节同 baseDir 到货之前,而那条 lane 上本来也没有能读它的工具;
  * · 其余每一条(`k8s` / `e2b` / `ssh` / `adb` / `device` / `local-docker`)⇒ 假:工具的盘在别处,
  *   server 自己的路径在那边**不存在**,声明它等于给模型一条指向不存在文件的线索,还顺带把本机目录
- *   布局说了出去。
+ *   布局说了出去;
+ * · 认不出的词 ⇒ 假(fail-closed:没认出来的车道不许被当成「本机」)。
  *
  * 🔴 **为什么不复用 {@link cwdHonored}**:那一只是**权限**判据(单用户 ∧ host),它的 `requirePrincipal`
  * 那一半防的是「一个租户的输入把 agent 指向另一个租户的文件」。本谓词判的路径不是调用方给的,是**运维

package/dist/task-cwd.js

@@ -1,4 +1,5 @@
 import path from "node:path";
+import { executionLaneOf, handsOnWorkerFilePlane } from "./execution-lane-caps.js";
 export const MAX_CWD_CHARS = 4_096;
 export function isValidCwd(cwd) {
     return (typeof cwd === "string" &&
@@ -21,7 +22,8 @@ export function cwdHonored(config) {
     return config.remoteExec?.provider === "host" && config.requirePrincipal !== true;
 }
 export function toolsRunOnThisHost(config) {
-    return config.remoteExec === undefined || config.remoteExec.provider === undefined || config.remoteExec.provider === "host";
+    const lane = executionLaneOf(config.remoteExec?.provider);
+    return lane !== undefined && handsOnWorkerFilePlane(lane);
 }
 export function deviceCwdHonored(config) {
     return config.remoteExec?.provider === "device";

package/dist/trace/redact.d.ts

@@ -190,7 +190,7 @@ export declare function isHierarchicalUrl(raw: string): boolean;
  *  ① **有效性闸**:配置里的那一位应当是一个**绝对 URL**。`new URL(raw)` 解析不动 ⇒ 这一位根本不是 URL
  *     (裸 `host:port`、相对路径、手滑的散文),自由文本的 URL 律对它没有定界依据 ⇒ 返回**占位**
  *     {@link DISPLAY_SAFE_URL_TOKEN},**不回落原值**([ref]:安全轴上的兜底必须 fail-closed 或响亮)。
- *     成文代价:`MODEL_GATEWAY_BASEURL=127.0.0.1:8000` 这种缺 scheme 的配置在日志上变成 `«redacted:url»`
+ *     成文代价:`MODEL_GATEWAY_BASEURL=gw.internal:8000` 这种缺 scheme 的配置在日志上变成 `«redacted:url»`
  *     —— 而它在 `fetch` 那一侧本来就是必然失败的形(WHATWG 要求绝对 URL),日志上响亮一点方向一致。
  *  ② **空串 = 未设**:里面没有凭据,原样回空串(不铸占位 —— 占位会让「没配」读成「配了但看不见」)。
  * ⚠️ **保形只到 host / port / path 这一层**(S-483 起如实改口;`test/config-url-display-safe.test.ts`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.96.0",
+  "version": "7.98.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",