npm - @sema-agent/settings-schema - Versions diffs - 10.1.0 → 11.0.0 - Mend

@sema-agent/settings-schema 10.1.0 → 11.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (235) hide show

package/conformance/cases/c71-one-scanner-write-reads-display-forms/expected.json ADDED Viewed

@@ -0,0 +1,119 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": [
+          {
+            "elicitation": false,
+            "enabled": true,
+            "name": "triple-encoded-benign",
+            "rosters": [],
+            "scenarios": [],
+            "transport": {
+              "args": [
+                "--label=%252541"
+              ],
+              "command": "npx",
+              "kind": "stdio"
+            }
+          }
+        ]
+      },
+      "models": {
+        "atMention": {
+          "mode": "all"
+        },
+        "models": [],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "mcp",
+        "identity": {
+          "name": "plus-spelled-pem-header"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "servers",
+          1
+        ],
+        "reasonCode": "entry-schema-invalid"
+      },
+      {
+        "domain": "mcp",
+        "identity": {
+          "name": "encoded-space-short-basic"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "servers",
+          2
+        ],
+        "reasonCode": "entry-schema-invalid"
+      }
+    ],
+    "metadata": {
+      "version": 18,
+      "updatedAt": "2026-10-10T00:00:00.000Z"
+    }
+  },
+  "strictWrite": {
+    "outcome": "rejected",
+    "stage": "validate",
+    "why": "拒:mcp 里两条参数是秘密形(`+` 读法下的私钥头、编码空格后的短凭据),读腿逐条丢;严写 ⇒ 整次不受理。"
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 3222223104537766
+  }
+}

package/conformance/cases/c71-one-scanner-write-reads-display-forms/input.json ADDED Viewed

@@ -0,0 +1,24 @@
+{
+  "meta": {
+    "version": 18,
+    "updatedAt": "2026-10-10T00:00:00.000Z"
+  },
+  "domains": {
+    "mcp": {
+      "servers": [
+        {
+          "name": "triple-encoded-benign",
+          "transport": { "kind": "stdio", "command": "npx", "args": ["--label=%252541"] }
+        },
+        {
+          "name": "plus-spelled-pem-header",
+          "transport": { "kind": "stdio", "command": "npx", "args": ["x -----BEGIN+PRIVATE+KEY-----FAKEC71PLUSPEMBODY0000"] }
+        },
+        {
+          "name": "encoded-space-short-basic",
+          "transport": { "kind": "stdio", "command": "npx", "args": ["note:Basic+FAKEc71"] }
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c71-one-scanner-write-reads-display-forms/meta.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "contributor": "contract",
+  "claim": "11.0.0(一只秘密扫描器,S-1274 + S-797):写侧探测器读展示侧同一组归一化形。mcp stdio 参数三条:① 三重百分号编码的良性串(`%252541`)在解码预算之内 ⇒ 照收(预算少一层就成了「归一化没走完」被拒);② 只在 `+` 读作空格时才是私钥 PEM 头的串 ⇒ 该条被丢(改前写侧只读百分号层,照收进 effective);③ 认证词后接编码空格(`+`)的短凭据 `Basic+…` ⇒ 该条被丢(改前两侧都放行)。告警面零命中语料秘密。",
+  "firstRedOn": [],
+  "secrets": [
+    "FAKEC71PLUSPEMBODY0000",
+    "FAKEc71"
+  ],
+  "note": "变异门杀手:`containsSecretToken` 读形改回只读百分号层(②杀)、S-797 一臂去掉(③杀)、`SECRET_SCAN_DECODE_LAYERS` 3 → 2(①杀)。firstRedOn 为空:不是 historical 阶梯证据。"
+}

package/conformance/cases/c72-dangling-reference-write-seat-refuses/expected.json ADDED Viewed

@@ -0,0 +1,111 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "atMention": {
+          "mode": "all"
+        },
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "m1-id",
+            "name": "m1",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": [
+          {
+            "models": [
+              "m1",
+              "ghost"
+            ],
+            "name": "r1"
+          }
+        ]
+      },
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [],
+    "metadata": {
+      "version": 16,
+      "updatedAt": "2026-10-10T00:00:00.000Z"
+    }
+  },
+  "strictWrite": {
+    "outcome": "rejected",
+    "stage": "validate",
+    "code": "ref-integrity",
+    "refIssues": [
+      {
+        "path": [
+          "rosters",
+          0,
+          "models",
+          1
+        ]
+      }
+    ],
+    "why": "拒:每个域都解析得了,但 roster r1 点名的模型 ghost 不在目录里 —— 写入席不收悬空引用(读侧容忍、运行期剔掉,写侧拒并点名坐标)。"
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 3346719867414959
+  }
+}

package/conformance/cases/c72-dangling-reference-write-seat-refuses/input.json ADDED Viewed

@@ -0,0 +1,26 @@
+{
+  "meta": {
+    "version": 16,
+    "updatedAt": "2026-10-10T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "m1",
+          "provider": "openai",
+          "id": "m1-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        }
+      ]
+    },
+    "rosters": {
+      "rosters": [
+        {
+          "name": "r1",
+          "models": ["m1", "ghost"]
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c72-dangling-reference-write-seat-refuses/meta.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "contributor": "contract",
+  "claim": "严写腿 = 写入席的两道。一份每个域都解析得了、却有一条悬空跨域引用(roster r1 点名目录里没有的模型 ghost)的文档集:读腿照常读出(引用在读侧是容忍的,运行期解析时剔掉),写入席拒收并点名悬空引用的坐标。打的是「严写腿只逐域解析、不判跨域引用」的写入席 —— 它把这份文档集当成可受理,而判引用完整性的写入席拒(两边在严写格分歧)。",
+  "firstRedOn": [],
+  "note": "金样的严写格:rejected{validate, code: ref-integrity, refIssues: [[rosters,0,models,1]]};读腿三格照常读出。firstRedOn 为空:严写腿 8.0.0 才有,historical 阶梯不覆盖。"
+}

package/conformance/cases/cc01-mcp-toolfaces-non-object/expected.json CHANGED Viewed

@@ -66,6 +66,9 @@
         ]
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -82,7 +85,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/cc02-mcp-source-key-is-transported/expected.json CHANGED Viewed

@@ -39,6 +39,9 @@
         ]
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -55,7 +58,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/cc03-model-compat-unknown-subkey/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -59,7 +62,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -83,6 +85,9 @@
     "outcome": "effective",
     "effective": {
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",

package/conformance/cases/cli01-model-name-nfc-vs-nfd/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -55,7 +58,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -72,6 +74,10 @@
     "warnings": [
       {
         "domain": "models",
+        "identity": {
+          "idWithheld": true,
+          "nameWithheld": true
+        },
         "kind": "entry-dropped",
         "path": [
           "models",
@@ -81,6 +87,10 @@
       },
       {
         "domain": "models",
+        "identity": {
+          "idWithheld": true,
+          "nameWithheld": true
+        },
         "kind": "entry-dropped",
         "path": [
           "models",

package/conformance/cases/cli02-control-and-zero-width-chars/expected.json CHANGED Viewed

@@ -39,6 +39,9 @@
         ]
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -68,7 +71,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -85,6 +87,10 @@
     "warnings": [
       {
         "domain": "models",
+        "identity": {
+          "idWithheld": true,
+          "nameWithheld": true
+        },
         "kind": "entry-dropped",
         "path": [
           "models",
@@ -94,6 +100,10 @@
       },
       {
         "domain": "models",
+        "identity": {
+          "idWithheld": true,
+          "nameWithheld": true
+        },
         "kind": "entry-dropped",
         "path": [
           "models",

package/conformance/cases/cli03-credential-pasted-into-unknown-key/expected.json CHANGED Viewed

@@ -34,6 +34,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -50,7 +53,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -97,7 +99,19 @@
         ]
       }
     },
-    "warnings": [],
+    "warnings": [
+      {
+        "domain": "hosts",
+        "keys": [
+          [
+            "hosts",
+            0,
+            "url"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      }
+    ],
     "metadata": {
       "version": 7,
       "updatedAt": "2026-09-16T00:00:00.000Z"

package/conformance/cases/cli04-env-value-with-newline/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/cli05-long-and-prefix-colliding-names/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -79,7 +82,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -103,6 +105,9 @@
     "outcome": "effective",
     "effective": {
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",

package/conformance/cases/t01-absent-domain-key-not-null/expected.json CHANGED Viewed

@@ -34,6 +34,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -63,7 +66,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/t03-prototype-name-key-not-swallowed/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -55,7 +58,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -101,6 +103,9 @@
     "outcome": "effective",
     "effective": {
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -119,7 +124,29 @@
         "tierGroups": []
       }
     },
-    "warnings": [],
+    "warnings": [
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "models",
+            0,
+            "__proto__"
+          ],
+          [
+            "models",
+            0,
+            "constructor"
+          ],
+          [
+            "models",
+            0,
+            "toString"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      }
+    ],
     "metadata": {
       "version": 7,
       "updatedAt": "2026-09-16T00:00:00.000Z"

package/conformance/cases/t04-secret-literal-never-in-warning-value/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -55,7 +58,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/z01-every-domain-empty-object/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -89,6 +91,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -105,7 +110,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -124,13 +128,13 @@
       "version": 7,
       "updatedAt": "2026-09-16T00:00:00.000Z"
     },
-    "why": "受理:十七个域各一份空对象,读腿零告警;严写逐份受理,受理形 = 十七个域的 schema 默认(只含提交的键 —— 这里恰好十七个都在)。"
+    "why": "受理:十六个域各一份空对象,读腿零告警;严写逐份受理,受理形 = 十六个域的 schema 默认(只含提交的键 —— 这里恰好十六个都在)。"
   },
   "wire": {
     "derive": true
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 209075514147757
+    "localVersion": 499959296543014
   }
 }

package/conformance/cases/z01-every-domain-empty-object/input.json CHANGED Viewed

@@ -14,7 +14,6 @@
     "collab": {},
     "workers": {},
     "hosts": {},
-    "runtime": {},
     "governance": {},
     "entitlement": {},
     "execution": {},