@sema-agent/server 7.97.0 → 7.98.0

package/dist/project-identity.d.ts

@@ -0,0 +1,29 @@
+import type { TaskSpec } from "@sema-agent/core";
+/** core 的项目身份声明席(`TaskSpec.memory.projectKey`)—— 从 core 类型派生,不另写一份。 */
+export type MemoryProjectKey = NonNullable<NonNullable<TaskSpec["memory"]>["projectKey"]>;
+/** 本仓会说的缺席词。`not_git` 刻意排除:裁 D 起非 git 目录按目录键控,不是缺席(core 闭集仍收它,本仓不铸)。 */
+export type ProjectIdentityAbsentReason = Exclude<Extract<MemoryProjectKey, {
+    absent: unknown;
+}>["absent"], "not_git">;
+/** 一个任务根的项目身份:canonical 项目根,或说得出理由的缺席。 */
+export type ProjectIdentity = {
+    readonly root: string;
+} | {
+    readonly absent: ProjectIdentityAbsentReason;
+};
+/**
+ * 任务根 → 项目身份([ref] 四例;见文件头)。纯文件系统读,零子进程。
+ * `taskRoot` 必须是**本进程读得到**的路径(调用方按车道判:根在沙箱/设备盘上就别调,直接给 `unreadable`)。
+ *
+ * 一次向上走,规则三条按优先序:最近的 `.git`(① ② ③)> 链上最近的裸仓布局(④ bare)> 非 git 按目录键控(④)。
+ */
+export declare function resolveProjectIdentity(taskRoot: string): ProjectIdentity;
+/** 本仓**唯一**的 `repo:` 键铸点([ref] ①:`repo:` + sha256 hex 前 24;`root` 为 realpath 字符串,不加尾斜杠、不折大小写)。 */
+export declare function mintRepoScopeKey(projectRoot: string): string;
+/**
+ * 任务根 → core 声明席 `TaskSpec.memory.projectKey`。
+ * `taskRoot === undefined` = 调用方**此刻不知道**任务根在本机哪里(根在沙箱/设备盘上;或 host 车道会话没登记 cwd、
+ * 手落在 factory 现铸的临时目录)⇒ `unreadable` —— 「我看不到」,不是「这里没有项目」。
+ */
+export declare function projectKeyForTaskRoot(taskRoot: string | undefined): MemoryProjectKey;
+//# sourceMappingURL=project-identity.d.ts.map

package/dist/project-identity.js

@@ -0,0 +1,120 @@
+import { createHash } from "node:crypto";
+import { readFileSync, realpathSync, statSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+const UNREADABLE = { absent: "unreadable" };
+const BARE = { absent: "bare" };
+function isMissing(err) {
+    const code = err?.code;
+    return code === "ENOENT" || code === "ENOTDIR";
+}
+function statFact(p) {
+    try {
+        const st = statSync(p);
+        return { ok: st.isDirectory() ? "dir" : st.isFile() ? "file" : "other" };
+    }
+    catch (err) {
+        return isMissing(err) ? "missing" : "unreadable";
+    }
+}
+function readTextFact(p) {
+    try {
+        return { ok: readFileSync(p, "utf8").trim() };
+    }
+    catch (err) {
+        return isMissing(err) ? "missing" : "unreadable";
+    }
+}
+function realpathFact(p) {
+    try {
+        return { ok: realpathSync.native(p) };
+    }
+    catch (err) {
+        return isMissing(err) ? "missing" : "unreadable";
+    }
+}
+function isBareRepoLayout(dir) {
+    if (basename(dir) === ".git")
+        return false;
+    const head = statFact(join(dir, "HEAD"));
+    const objects = statFact(join(dir, "objects"));
+    const refs = statFact(join(dir, "refs"));
+    return typeof head === "object" && head.ok === "file" && typeof objects === "object" && objects.ok === "dir" && typeof refs === "object" && refs.ok === "dir";
+}
+function identityOfGitFile(dir) {
+    const pointer = readTextFact(join(dir, ".git"));
+    if (typeof pointer !== "object" || !pointer.ok.startsWith("gitdir:"))
+        return UNREADABLE;
+    const raw = pointer.ok.slice("gitdir:".length).trim();
+    if (raw === "")
+        return UNREADABLE;
+    const gitDirFact = realpathFact(resolve(dir, raw));
+    if (typeof gitDirFact !== "object")
+        return UNREADABLE;
+    const gitDir = gitDirFact.ok;
+    const commonText = readTextFact(join(gitDir, "commondir"));
+    if (commonText === "missing")
+        return { root: dir };
+    if (commonText === "unreadable")
+        return UNREADABLE;
+    const commonFact = realpathFact(resolve(gitDir, commonText.ok));
+    if (typeof commonFact !== "object")
+        return UNREADABLE;
+    const common = commonFact.ok;
+    if (dirname(gitDir) !== join(common, "worktrees"))
+        return UNREADABLE;
+    const back = readTextFact(join(gitDir, "gitdir"));
+    if (typeof back !== "object")
+        return UNREADABLE;
+    const backFact = realpathFact(resolve(gitDir, back.ok));
+    if (typeof backFact !== "object" || backFact.ok !== join(dir, ".git"))
+        return UNREADABLE;
+    return { root: basename(common) !== ".git" ? common : dirname(common) };
+}
+function canonicalTaskRoot(taskRoot) {
+    const rest = [];
+    for (let p = resolve(taskRoot);;) {
+        const fact = realpathFact(p);
+        if (typeof fact === "object")
+            return { canonical: rest.length > 0 ? join(fact.ok, ...rest) : fact.ok, existing: fact.ok };
+        if (fact === "unreadable")
+            return "unreadable";
+        const parent = dirname(p);
+        if (parent === p)
+            return "unreadable";
+        rest.unshift(basename(p));
+        p = parent;
+    }
+}
+export function resolveProjectIdentity(taskRoot) {
+    const root = canonicalTaskRoot(taskRoot);
+    if (root === "unreadable")
+        return UNREADABLE;
+    let sawBareLayout = false;
+    for (let dir = root.existing;;) {
+        const dotGit = statFact(join(dir, ".git"));
+        if (dotGit === "unreadable")
+            return UNREADABLE;
+        if (typeof dotGit === "object") {
+            if (dotGit.ok === "dir")
+                return { root: dir };
+            if (dotGit.ok === "file")
+                return identityOfGitFile(dir);
+        }
+        if (!sawBareLayout && isBareRepoLayout(dir))
+            sawBareLayout = true;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return sawBareLayout ? BARE : { root: root.canonical };
+        dir = parent;
+    }
+}
+export function mintRepoScopeKey(projectRoot) {
+    return `repo:${createHash("sha256").update(projectRoot, "utf8").digest("hex").slice(0, 24)}`;
+}
+export function projectKeyForTaskRoot(taskRoot) {
+    if (taskRoot === undefined)
+        return { absent: "unreadable" };
+    const id = resolveProjectIdentity(taskRoot);
+    return "root" in id ? { scope: mintRepoScopeKey(id.root) } : { absent: id.absent };
+}
+//# sourceMappingURL=project-identity.js.map

package/dist/run-local.d.ts

@@ -47,10 +47,20 @@ export declare function parseArgs(argv: string[]): RunLocalArgs;
 export declare class UsageError extends Error {
 }
 /**
- * The model GATEWAY pre-flight (mirrors the doctor message): the engine cannot run a real
- * task without (a) a gateway base URL that ends in `/v1` and (b) the gateway/model API key resolvable from
- * env. We surface a "you still need to set: …" list rather than letting the first brain call crash with a
- * cryptic auth/connect error. Returns a list of missing items (empty = OK).
+ * The model GATEWAY pre-flight (mirrors the doctor message): the engine cannot run a real task through a
+ * declared gateway without the gateway/model API key resolvable from env. We surface a "you still need to
+ * set: …" list rather than letting the first brain call crash with a cryptic auth error. Returns a list of
+ * missing items (empty = OK).
+ *
+ * 🔴 S-623:这里**不再**判网关 base URL。「配置能派发到的每一条 openai 路由都解析到显式端点」是 `loadConfig()`
+ * 那一层的拒启判据(`model-route-endpoint.ts`,本入口在预检之前就调 `loadConfig()` —— 没设网关的配置根本走不到
+ * 这里),原来那条臂(a)是它的一份更弱的手抄:注释要求「本机用户必须指向自己的网关」,判据却只查 `/v1` 后缀,
+ * 旧的出厂缺省值恰好以 `/v1` 结尾 ⇒ 缺省值照样过(本仓自己也被骗)。`/v1` 后缀本身也一并删,理由三条:
+ *  ① 同一个问题两个判官 —— `serve` 从不要求 `/v1`,同一份 .env 在 `serve` 起得来、在 `run-local` 被拒;
+ *  ② 它会误拒真实存在的 OpenAI 兼容端点(DeepSeek 根路径直接服务 `/chat/completions`,本仓
+ *     `src/bench/s1/live-deps.ts` 用的正是 `https://api.deepseek.com`;Gemini 的兼容面 `…/v1beta/openai`、Azure 的
+ *     `…/openai/deployments/<name>` 也都不以 `/v1` 结尾);
+ *  ③ 规则集只许变小:端点判据只有 loadConfig 那一只。
  *
  * NOTE: with an injected mock `brain` the gateway is irrelevant (no real call is made), so the caller skips
  * this check in that case — the check is about a REAL run, not the assembly.

package/dist/run-local.js

@@ -34,7 +34,8 @@ import { createTaskListLane } from "./boot/task-list-lane.js";
 import { pickHandsRunner, withoutExecutionEnv } from "./capabilities/hands-lane.js";
 import { HttpError } from "./security.js";
 import { createMemoryEngineIncidentSink } from "./memory-incident-sink.js";
-import { memoryEngineBackendFor, memorySpecForRequest } from "./memory-scope.js";
+import { memoryEngineBackendFor, memoryProjectKeyFor, memorySpecForRequest } from "./memory-scope.js";
+import { modelRouteEndpointRefusal } from "./model-route-endpoint.js";
 import { createMemorySyncRunner, createMemorySyncTransport } from "./memory-sync-client.js";
 import { buildPricing, cappedCeiling, createTracer } from "./budget.js";
 import { createSharedRunnerDeps } from "./boot/runner-deps.js";
@@ -99,9 +100,8 @@ export class UsageError extends Error {
 }
 export function missingGatewayRequirements(config) {
     const missing = [];
-    if (!config.gatewayBaseUrl || !/\/v1\/?$/.test(config.gatewayBaseUrl)) {
-        missing.push("MODEL_GATEWAY_BASEURL (the OpenAI-compatible gateway URL, must end in /v1)");
-    }
+    if (config.gatewayBaseUrl === undefined)
+        return missing;
     const perModelEnvs = Object.values(config.modelApiKeyEnv ?? {});
     const haveGatewayKey = !!config.gatewayApiKey;
     const catalogModelNames = new Set(Object.values(config.models ?? {}).map((m) => m.name));
@@ -209,6 +209,9 @@ export async function runLocal(argv, deps = {}) {
     catch (err) {
         logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: String(err) });
     }
+    const endpointRefusal = modelRouteEndpointRefusal(config);
+    if (endpointRefusal !== undefined)
+        throw new Error(endpointRefusal);
     const unpricedCeiling = buildUnpricedCeilingNotice(config.models, config);
     if (unpricedCeiling)
         logger.warn(unpricedCeiling.event, unpricedCeiling.fields);
@@ -477,7 +480,7 @@ export async function runLocal(argv, deps = {}) {
         backgroundScope: "session",
         oneShot: true,
         principal: scope,
-        ...(memoryEngine ? { memory: memorySpecForRequest(scope, undefined) } : {}),
+        ...(memoryEngine ? { memory: memorySpecForRequest(scope, memoryProjectKeyFor(config, scope, workspaceDir), undefined) } : {}),
         model: mention.model ?? "default",
         getApiKeyAndHeaders: keyResolver,
         tools: cap.tools,

package/dist/trace/redact.d.ts

@@ -190,7 +190,7 @@ export declare function isHierarchicalUrl(raw: string): boolean;
  *  ① **有效性闸**:配置里的那一位应当是一个**绝对 URL**。`new URL(raw)` 解析不动 ⇒ 这一位根本不是 URL
  *     (裸 `host:port`、相对路径、手滑的散文),自由文本的 URL 律对它没有定界依据 ⇒ 返回**占位**
  *     {@link DISPLAY_SAFE_URL_TOKEN},**不回落原值**([ref]:安全轴上的兜底必须 fail-closed 或响亮)。
- *     成文代价:`MODEL_GATEWAY_BASEURL=127.0.0.1:8000` 这种缺 scheme 的配置在日志上变成 `«redacted:url»`
+ *     成文代价:`MODEL_GATEWAY_BASEURL=gw.internal:8000` 这种缺 scheme 的配置在日志上变成 `«redacted:url»`
  *     —— 而它在 `fetch` 那一侧本来就是必然失败的形(WHATWG 要求绝对 URL),日志上响亮一点方向一致。
  *  ② **空串 = 未设**:里面没有凭据,原样回空串(不铸占位 —— 占位会让「没配」读成「配了但看不见」)。
  * ⚠️ **保形只到 host / port / path 这一层**(S-483 起如实改口;`test/config-url-display-safe.test.ts`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.97.0",
+  "version": "7.98.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",