@sema-agent/settings-schema 1.7.0 → 1.7.2

package/CHANGELOG.md

@@ -6,6 +6,24 @@
 > `@sema-agent/registry-core`(更早还曾是 `@sema-ai/registry-core`)。本档 `0.19.0` 以下各节里的
 > 包名是**历史记录**,如实保留不追改。
 
+## 1.7.2 — 2026-09-06 — `source` 改**解析透明**(`z.unknown()`;patch)
+
+- 1.7.1 的 `z.string()` 对 `source: null`(或数字/数组/对象)仍在解析处拒 ⇒ 整域 all-or-nothing 下**一个**非串标签让整套
+  `mcp.servers` 默认为空——而 1.6.0 之前该键被 default-strip 剥掉、无害,故这是 1.7.x 引入的**升级回归**(消费方 codex
+  对抗复审 [high],`buildEffective` 与 `readEffectiveWire` 两腿复现)。1.7.2 起 `source: z.unknown().optional()`:
+  任何 JSON 值原样到消费方,规则(非空 ≤80 字符串)与坏形处置(丢键留 server + 留痕)**只**在消费方一处。
+- 红先:`test/mcp-source-label.test.ts` ③ 改「七形全过、原样」+ ③b「坏标签兄弟不拖累好 server」。
+- 类病(任一字段解析拒 ⇒ 整域默认)仍归消费方 S-144 另车。
+
+## 1.7.1 — 2026-09-06 — `source` 改**只管类型**(撤回 1.7.0 的 min/max 解析拒;patch)
+
+- 1.7.0 把标签规则(非空 ≤80)写进 zod ⇒ 本域整域 all-or-nothing 解析下,**一个**空/超长标签让整套 `mcp.servers`
+  在解析处整域默认(每台 server 消失),消费方 boot 期还容忍空目录——一个显示标签不该有这种爆炸半径
+  (消费方 codex 对抗复审 [high],真库复现:一坏一好两条 server 双双消失)。1.7.1 起 `source: z.string().optional()`,
+  规则单点留在消费方投影层(坏形丢键留 server、留痕)。非字符串仍在解析处拒(那是 JSON 类型错,与任何字段同类)。
+- 顺带如实记:本域 all-or-nothing 解析 + 消费方 boot 容忍空目录,对 `contentOrigin` 闭表等一切解析拒的键**早已**是
+  同一爆炸半径(类病,先于本键存在)——归消费方与本包另立单据处置(逐条目拒而不是整域拒),不在本 patch 射程。
+
 ## 1.7.0 — 2026-09-06 — `mcp.servers[].source` 分组标签(sema-server B-036 / S-143 源头修的声明面半场;新键=minor)
 
 - **`McpServerSpec.source?: string`**(非空、≤80 字;`.optional()` 无默认):声明方自述的层级标签,1:1 对应引擎

package/dist/types.d.ts

@@ -7322,12 +7322,18 @@ export declare const McpServerSpec: z.ZodObject<{
      *  consumer can group servers by where they were declared). An OPEN set: CC's `plugin` / `user` /
      *  `project` / `local` are conventions, not a vocabulary — a deployment's own word is equally legal, so
      *  no closed table here (a closed table would reject the operator's grouping word at parse). ABSENT =
-     *  no label (`.optional()`, no default — a label has no default tier). Empty / over-cap / non-string is
-     *  REJECTED at parse: a malformed label must not enter the ledger silently. Display-only: no gate /
-     *  policy / trust effect (the trust axis is `contentOrigin` above, which stays a closed table).
-     *  Before this key existed both legs stripped it (default-strip object); this is the declaration half of
-     *  the consumer-side fix (ticket B-036 / S-143), the projection half lives in the consumer. */
-    source: z.ZodOptional<z.ZodString>;
+     *  no label (`.optional()`, no default — a label has no default tier). 🔴 ZERO rules here (`z.unknown()`):
+     *  the label RULE (string, non-empty, ≤80 chars) lives in ONE place — the consumer's projection helper,
+     *  which drops a malformed label's KEY, keeps the server and records the drop. Nothing may live here:
+     *  this domain parses all-or-nothing, so ANY rejection at parse (1.7.0 `min/max`, 1.7.1 `z.string()`
+     *  against a `null`) lets one bad label default the ENTIRE mcp domain — every server gone, silently when
+     *  no onWarning is wired — a blast radius a display label must never have. 1.7.2 makes the key
+     *  parse-transparent: whatever JSON value the file carries reaches the consumer verbatim. Display-only:
+     *  no gate / policy / trust
+     *  effect (the trust axis is `contentOrigin` above, which stays a closed table). Before this key existed
+     *  both legs stripped it (default-strip object); this is the declaration half of the consumer-side fix
+     *  (ticket B-036 / S-143), the projection half lives in the consumer. */
+    source: z.ZodOptional<z.ZodUnknown>;
     notes: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     name: string;
@@ -7349,7 +7355,7 @@ export declare const McpServerSpec: z.ZodObject<{
     notes?: string | undefined;
     allowTools?: string[] | undefined;
     contentOrigin?: "local" | "execution" | "external" | undefined;
-    source?: string | undefined;
+    source?: unknown;
 }, {
     name: string;
     transport: {
@@ -7370,7 +7376,7 @@ export declare const McpServerSpec: z.ZodObject<{
     allowTools?: string[] | undefined;
     elicitation?: boolean | undefined;
     contentOrigin?: "local" | "execution" | "external" | undefined;
-    source?: string | undefined;
+    source?: unknown;
 }>;
 export type McpServerSpec = z.infer<typeof McpServerSpec>;
 export declare const McpConfig: z.ZodEffects<z.ZodObject<{
@@ -7447,12 +7453,18 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
          *  consumer can group servers by where they were declared). An OPEN set: CC's `plugin` / `user` /
          *  `project` / `local` are conventions, not a vocabulary — a deployment's own word is equally legal, so
          *  no closed table here (a closed table would reject the operator's grouping word at parse). ABSENT =
-         *  no label (`.optional()`, no default — a label has no default tier). Empty / over-cap / non-string is
-         *  REJECTED at parse: a malformed label must not enter the ledger silently. Display-only: no gate /
-         *  policy / trust effect (the trust axis is `contentOrigin` above, which stays a closed table).
-         *  Before this key existed both legs stripped it (default-strip object); this is the declaration half of
-         *  the consumer-side fix (ticket B-036 / S-143), the projection half lives in the consumer. */
-        source: z.ZodOptional<z.ZodString>;
+         *  no label (`.optional()`, no default — a label has no default tier). 🔴 ZERO rules here (`z.unknown()`):
+         *  the label RULE (string, non-empty, ≤80 chars) lives in ONE place — the consumer's projection helper,
+         *  which drops a malformed label's KEY, keeps the server and records the drop. Nothing may live here:
+         *  this domain parses all-or-nothing, so ANY rejection at parse (1.7.0 `min/max`, 1.7.1 `z.string()`
+         *  against a `null`) lets one bad label default the ENTIRE mcp domain — every server gone, silently when
+         *  no onWarning is wired — a blast radius a display label must never have. 1.7.2 makes the key
+         *  parse-transparent: whatever JSON value the file carries reaches the consumer verbatim. Display-only:
+         *  no gate / policy / trust
+         *  effect (the trust axis is `contentOrigin` above, which stays a closed table). Before this key existed
+         *  both legs stripped it (default-strip object); this is the declaration half of the consumer-side fix
+         *  (ticket B-036 / S-143), the projection half lives in the consumer. */
+        source: z.ZodOptional<z.ZodUnknown>;
         notes: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         name: string;
@@ -7474,7 +7486,7 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
         notes?: string | undefined;
         allowTools?: string[] | undefined;
         contentOrigin?: "local" | "execution" | "external" | undefined;
-        source?: string | undefined;
+        source?: unknown;
     }, {
         name: string;
         transport: {
@@ -7495,7 +7507,7 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
         allowTools?: string[] | undefined;
         elicitation?: boolean | undefined;
         contentOrigin?: "local" | "execution" | "external" | undefined;
-        source?: string | undefined;
+        source?: unknown;
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     servers: {
@@ -7518,7 +7530,7 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
         notes?: string | undefined;
         allowTools?: string[] | undefined;
         contentOrigin?: "local" | "execution" | "external" | undefined;
-        source?: string | undefined;
+        source?: unknown;
     }[];
 }, {
     servers?: {
@@ -7541,7 +7553,7 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
         allowTools?: string[] | undefined;
         elicitation?: boolean | undefined;
         contentOrigin?: "local" | "execution" | "external" | undefined;
-        source?: string | undefined;
+        source?: unknown;
     }[] | undefined;
 }>, {
     servers: {
@@ -7564,7 +7576,7 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
         notes?: string | undefined;
         allowTools?: string[] | undefined;
         contentOrigin?: "local" | "execution" | "external" | undefined;
-        source?: string | undefined;
+        source?: unknown;
     }[];
 }, {
     servers?: {
@@ -7587,7 +7599,7 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
         allowTools?: string[] | undefined;
         elicitation?: boolean | undefined;
         contentOrigin?: "local" | "execution" | "external" | undefined;
-        source?: string | undefined;
+        source?: unknown;
     }[] | undefined;
 }>;
 export type McpConfig = z.infer<typeof McpConfig>;
@@ -10114,12 +10126,18 @@ export declare const DOMAIN_SCHEMAS: {
              *  consumer can group servers by where they were declared). An OPEN set: CC's `plugin` / `user` /
              *  `project` / `local` are conventions, not a vocabulary — a deployment's own word is equally legal, so
              *  no closed table here (a closed table would reject the operator's grouping word at parse). ABSENT =
-             *  no label (`.optional()`, no default — a label has no default tier). Empty / over-cap / non-string is
-             *  REJECTED at parse: a malformed label must not enter the ledger silently. Display-only: no gate /
-             *  policy / trust effect (the trust axis is `contentOrigin` above, which stays a closed table).
-             *  Before this key existed both legs stripped it (default-strip object); this is the declaration half of
-             *  the consumer-side fix (ticket B-036 / S-143), the projection half lives in the consumer. */
-            source: z.ZodOptional<z.ZodString>;
+             *  no label (`.optional()`, no default — a label has no default tier). 🔴 ZERO rules here (`z.unknown()`):
+             *  the label RULE (string, non-empty, ≤80 chars) lives in ONE place — the consumer's projection helper,
+             *  which drops a malformed label's KEY, keeps the server and records the drop. Nothing may live here:
+             *  this domain parses all-or-nothing, so ANY rejection at parse (1.7.0 `min/max`, 1.7.1 `z.string()`
+             *  against a `null`) lets one bad label default the ENTIRE mcp domain — every server gone, silently when
+             *  no onWarning is wired — a blast radius a display label must never have. 1.7.2 makes the key
+             *  parse-transparent: whatever JSON value the file carries reaches the consumer verbatim. Display-only:
+             *  no gate / policy / trust
+             *  effect (the trust axis is `contentOrigin` above, which stays a closed table). Before this key existed
+             *  both legs stripped it (default-strip object); this is the declaration half of the consumer-side fix
+             *  (ticket B-036 / S-143), the projection half lives in the consumer. */
+            source: z.ZodOptional<z.ZodUnknown>;
             notes: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
             name: string;
@@ -10141,7 +10159,7 @@ export declare const DOMAIN_SCHEMAS: {
             notes?: string | undefined;
             allowTools?: string[] | undefined;
             contentOrigin?: "local" | "execution" | "external" | undefined;
-            source?: string | undefined;
+            source?: unknown;
         }, {
             name: string;
             transport: {
@@ -10162,7 +10180,7 @@ export declare const DOMAIN_SCHEMAS: {
             allowTools?: string[] | undefined;
             elicitation?: boolean | undefined;
             contentOrigin?: "local" | "execution" | "external" | undefined;
-            source?: string | undefined;
+            source?: unknown;
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         servers: {
@@ -10185,7 +10203,7 @@ export declare const DOMAIN_SCHEMAS: {
             notes?: string | undefined;
             allowTools?: string[] | undefined;
             contentOrigin?: "local" | "execution" | "external" | undefined;
-            source?: string | undefined;
+            source?: unknown;
         }[];
     }, {
         servers?: {
@@ -10208,7 +10226,7 @@ export declare const DOMAIN_SCHEMAS: {
             allowTools?: string[] | undefined;
             elicitation?: boolean | undefined;
             contentOrigin?: "local" | "execution" | "external" | undefined;
-            source?: string | undefined;
+            source?: unknown;
         }[] | undefined;
     }>, {
         servers: {
@@ -10231,7 +10249,7 @@ export declare const DOMAIN_SCHEMAS: {
             notes?: string | undefined;
             allowTools?: string[] | undefined;
             contentOrigin?: "local" | "execution" | "external" | undefined;
-            source?: string | undefined;
+            source?: unknown;
         }[];
     }, {
         servers?: {
@@ -10254,7 +10272,7 @@ export declare const DOMAIN_SCHEMAS: {
             allowTools?: string[] | undefined;
             elicitation?: boolean | undefined;
             contentOrigin?: "local" | "execution" | "external" | undefined;
-            source?: string | undefined;
+            source?: unknown;
         }[] | undefined;
     }>;
     readonly plugins: z.ZodEffects<z.ZodObject<{

package/dist/types.js

@@ -1893,12 +1893,18 @@ export const McpServerSpec = z.object({
      *  consumer can group servers by where they were declared). An OPEN set: CC's `plugin` / `user` /
      *  `project` / `local` are conventions, not a vocabulary — a deployment's own word is equally legal, so
      *  no closed table here (a closed table would reject the operator's grouping word at parse). ABSENT =
-     *  no label (`.optional()`, no default — a label has no default tier). Empty / over-cap / non-string is
-     *  REJECTED at parse: a malformed label must not enter the ledger silently. Display-only: no gate /
-     *  policy / trust effect (the trust axis is `contentOrigin` above, which stays a closed table).
-     *  Before this key existed both legs stripped it (default-strip object); this is the declaration half of
-     *  the consumer-side fix (ticket B-036 / S-143), the projection half lives in the consumer. */
-    source: z.string().min(1).max(80).optional(),
+     *  no label (`.optional()`, no default — a label has no default tier). 🔴 ZERO rules here (`z.unknown()`):
+     *  the label RULE (string, non-empty, ≤80 chars) lives in ONE place — the consumer's projection helper,
+     *  which drops a malformed label's KEY, keeps the server and records the drop. Nothing may live here:
+     *  this domain parses all-or-nothing, so ANY rejection at parse (1.7.0 `min/max`, 1.7.1 `z.string()`
+     *  against a `null`) lets one bad label default the ENTIRE mcp domain — every server gone, silently when
+     *  no onWarning is wired — a blast radius a display label must never have. 1.7.2 makes the key
+     *  parse-transparent: whatever JSON value the file carries reaches the consumer verbatim. Display-only:
+     *  no gate / policy / trust
+     *  effect (the trust axis is `contentOrigin` above, which stays a closed table). Before this key existed
+     *  both legs stripped it (default-strip object); this is the declaration half of the consumer-side fix
+     *  (ticket B-036 / S-143), the projection half lives in the consumer. */
+    source: z.unknown().optional(),
     notes: z.string().optional(),
 });
 export const McpConfig = z

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/settings-schema",
-  "version": "1.7.0",
+  "version": "1.7.2",
   "description": "Sema settings schema — pure config contract (zod domains + effective-config + roster resolution + ref-integrity + remoteExec) shared by sema-registry, sema-server, and the TOC desktop/CLI. One source of truth. (Renamed at 1.0.0 from @sema-agent/registry-core — name and docs only, no behavior change; note the range moves 0.19.0 -> 1.0.0, so a dependency must become ^1.0.0. The old names @sema-agent/registry-core <=0.19.0 and @sema-ai/registry-core remain published, frozen, for migration.)",
   "type": "module",
   "license": "BUSL-1.1",