@sema-agent/settings-schema 1.10.0 → 2.1.0

package/dist/remote-exec.d.ts

@@ -61,7 +61,7 @@ export declare const RemoteExecSpec: z.ZodDiscriminatedUnion<"provider", [z.ZodO
     memory?: string | undefined;
     workdir?: string | undefined;
     cpus?: number | undefined;
-    network?: "host" | "none" | "bridge" | undefined;
+    network?: "none" | "host" | "bridge" | undefined;
     mountPath?: string | undefined;
 }, {
     provider: "local-docker";
@@ -69,7 +69,7 @@ export declare const RemoteExecSpec: z.ZodDiscriminatedUnion<"provider", [z.ZodO
     memory?: string | undefined;
     workdir?: string | undefined;
     cpus?: number | undefined;
-    network?: "host" | "none" | "bridge" | undefined;
+    network?: "none" | "host" | "bridge" | undefined;
     mountPath?: string | undefined;
 }>, z.ZodObject<{
     /** The remote docker endpoint — a DOCKER_HOST url: `ssh://user@host` or `tcp://host:2376`. A `user@` is OK
@@ -96,7 +96,7 @@ export declare const RemoteExecSpec: z.ZodDiscriminatedUnion<"provider", [z.ZodO
     memory?: string | undefined;
     workdir?: string | undefined;
     cpus?: number | undefined;
-    network?: "host" | "none" | "bridge" | undefined;
+    network?: "none" | "host" | "bridge" | undefined;
     mountPath?: string | undefined;
     tlsCertEnv?: string | undefined;
     tlsKeyEnv?: string | undefined;
@@ -109,7 +109,7 @@ export declare const RemoteExecSpec: z.ZodDiscriminatedUnion<"provider", [z.ZodO
     memory?: string | undefined;
     workdir?: string | undefined;
     cpus?: number | undefined;
-    network?: "host" | "none" | "bridge" | undefined;
+    network?: "none" | "host" | "bridge" | undefined;
     mountPath?: string | undefined;
     tlsCertEnv?: string | undefined;
     tlsKeyEnv?: string | undefined;

package/dist/remote-exec.js

@@ -28,7 +28,7 @@ import { ENV_NAME, K8S_QUANTITY, NON_SECRET_URL, TCP_PORT, containsSecretToken,
  *  byte uniformly — a NUL validates here but makes Node throw at spawn/boot (fail-OPEN → runtime crash). R20. */
 const execStr = z.string().min(1).refine((s) => !hasNul(s), "must not contain a NUL byte");
 /** Container knobs shared by the two docker lanes (local-docker / remote-docker). `network` defaults to
- *  `none` at the adapter (the safe posture for untrusted code — see DUAL-MODE-DESIGN.md). */
+ *  `none` at the adapter (the safe posture for untrusted code — see the dual-mode design note). */
 const DOCKER_FIELDS = {
     /** Sandbox image (required — a run must be reproducible). */
     image: execStr,

package/dist/resolve-roster.d.ts

@@ -1,5 +1,5 @@
 /**
- * Per-worker roster resolution (docs/MULTI-ROSTER.md). Turns the GLOBAL effective config + a worker name
+ * Per-worker roster resolution (the multi-roster design note). Turns the GLOBAL effective config + a worker name
  * into THAT worker's effective config: its `models` domain is the roster's view (model subset + role-map +
  * @-allowlist override), everything else stays global. The `rosters` domain is control-plane-only and is
  * always stripped from the wire payload (no /effective consumer reads it).

package/dist/scheduler-store.d.ts

@@ -54,13 +54,23 @@ export interface SchedulerStore {
 }
 /** Structural validation of one record (required fields + a well-formed `when`). Unknown fields are allowed. */
 export declare function isSchedulerRecord(v: unknown): v is SchedulerRecord;
-/** One record dropped by {@link parseSchedulerStore} for failing {@link isSchedulerRecord} (malformed shape).
- *  `index` = its position in the parsed array (for correlating with the source file); `record` = the raw
- *  (unvalidated) value, for diagnostics. Additive — passing `onWarning` is optional. */
+/** Something {@link parseSchedulerStore} DID to the data it read, rather than reading it verbatim. `index` =
+ *  the record's position in the parsed array (for correlating with the source file). Additive — passing
+ *  `onWarning` is optional, and a new `kind` is an additive union member (a consumer with an exhaustive
+ *  `switch` gains an arm to write).
+ *   - `malformed-record`      — the record failed {@link isSchedulerRecord} and was dropped; `record` = the
+ *                               raw (unvalidated) value, for diagnostics.
+ *   - `durable-scope-rekeyed` — the durable-scope compat arm rewrote this row's `scope` (1.11.0; before that
+ *                               the rewrite happened silently every parse). */
 export type SchedulerParseWarning = {
     index: number;
     kind: 'malformed-record';
     record: unknown;
+} | {
+    index: number;
+    kind: 'durable-scope-rekeyed';
+    from: string;
+    to: string;
 };
 export declare function parseSchedulerStore(text: string, onWarning?: (w: SchedulerParseWarning) => void): SchedulerRecord[];
 /** Serialize the store to its canonical on-disk form (stable, pretty JSON). The WRITE half of the format contract. */

package/dist/scheduler-store.js

@@ -55,6 +55,11 @@ export function isSchedulerRecord(v) {
  *
  * 窄读判据:`lifetime` 不在本契约的显式键上(server 写侧作为 forward-compat 字段随行),按未知
  * 字段窄读——`"session"` 行是会话链键,零触碰;其余(缺席=durable 默认)按 durable 归一。
+ *
+ * 落日(1.11.0):删除它 = **持久数据**面的破坏(仍按旧键存着的 durable 行会就此找不回),所以不能在
+ * minor 上一删了事 —— 归下一个 MAJOR,按持久数据的规矩办(响亮拒收 + 一次性迁移)。在那之前,本版把
+ * 这次重写从**静默**改成**出声**(`durable-scope-rekeyed`,带改写前后):关窗的前提是有人能证明它
+ * 已经不再触发,而不是有人记得它还在。
  */
 function normalizeDurableScope(r) {
     if (r.lifetime === 'session')
@@ -76,10 +81,15 @@ export function parseSchedulerStore(text, onWarning) {
         return parsed.filter(isSchedulerRecord).map(normalizeDurableScope);
     const out = [];
     parsed.forEach((record, index) => {
-        if (isSchedulerRecord(record))
-            out.push(normalizeDurableScope(record));
-        else
+        if (!isSchedulerRecord(record)) {
             onWarning({ index, kind: 'malformed-record', record });
+            return;
+        }
+        const normalized = normalizeDurableScope(record);
+        // 兼容臂真改写了这一行才出声(未改写时 normalizeDurableScope 返回同一个引用)。
+        if (normalized !== record)
+            onWarning({ index, kind: 'durable-scope-rekeyed', from: record.scope, to: normalized.scope });
+        out.push(normalized);
     });
     return out;
 }

package/dist/skills-manifest.js

@@ -1,5 +1,5 @@
 /**
- * Skills content-addressing (docs/MCP-SKILLS.md §3.1, slice 2). The /effective payload ships skills as a
+ * Skills content-addressing (the mcp/skills design note §3.1, slice 2). The /effective payload ships skills as a
  * MANIFEST — each skill's markdown `content` replaced by a `contentHash` — so the frequent 60s refresh stays
  * small; the service pulls each body ONCE (at boot) via GET /api/config/skills/content/<hash>, caches it by
  * hash, and re-pulls only when the hash changes (skills rarely change → big win). Bodies are immutable +