npm - @sema-agent/settings-schema - Versions diffs - 10.1.1 → 11.1.0 - Mend

@sema-agent/settings-schema 10.1.1 → 11.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (240) hide show

package/conformance/cases/{c46-s811-host-name-url-userinfo-characterization → c46-s811-host-name-url-userinfo-withheld}/expected.json RENAMED Viewed

@@ -34,6 +34,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -50,7 +53,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -67,10 +69,15 @@
     "warnings": [
       {
         "domain": "hosts",
-        "droppedNames": [
-          "https://admin:hunter2@hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh…"
+        "identity": {
+          "nameWithheld": true
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "hosts",
+          1
         ],
-        "kind": "hosts-grandfathered"
+        "reasonCode": "entry-schema-invalid"
       }
     ],
     "metadata": {
@@ -81,7 +88,7 @@
   "strictWrite": {
     "outcome": "rejected",
     "stage": "validate",
-    "why": "拒:hosts 第 2 条名字是一条带 userinfo 的 URL(超长且形不合法),读腿夹紧剔除(hosts-grandfathered);严写按现行 schema 拒。"
+    "why": "拒:hosts 第 2 条名字是一条带 userinfo 的 URL(超长且形不合法);读腿逐条丢(entry-dropped,身份不带名字),严写按现行 schema 拒。"
   },
   "wire": {
     "derive": true

package/conformance/cases/c46-s811-host-name-url-userinfo-withheld/meta.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "contributor": "contract",
+  "claim": "超长主机名是一条带 userinfo 的 URL(`https://admin:hunter2@hhh…h.com`,81 字)。改前它被 hosts 读侧夹紧臂按名剔掉,`droppedNames` 的标签原样带着 `admin:hunter2`(特征格)。11.0.0 起夹紧臂退役,这一条作被丢条目出门(entry-dropped),身份否决里的 userinfo 判定不让它的名字出门 —— 那条泄漏路随臂一起没了,`hunter2` 进本条的秘密清单,从特征钉变成护栏。",
+  "firstRedOn": [],
+  "note": "车PE(2026-09-27)按主会话令加,当时是现状特征钉(刻意不登 `hunter2`);11.0.0 起翻成护栏:持久面一件退役了夹紧臂(这一条改作被丢条目出门),S-811 让 `redactSecrets` 对 URL 候选段问 `carriesUserinfo` —— 身份面问的就是它,带凭据的名不出门。",
+  "secrets": [
+    "hunter2"
+  ]
+}

package/conformance/cases/{c47-s811-roles-key-url-userinfo-characterization → c47-s811-roles-key-url-userinfo-withheld}/expected.json RENAMED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -59,7 +62,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -79,7 +81,25 @@
         "kind": "entry-dropped",
         "path": [
           "roles",
-          "https://admin:hunter2@db.example.com/x"
+          "[redacted-secret]"
+        ],
+        "reasonCode": "entry-key-invalid"
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ],
+        "reasonCode": "entry-key-invalid"
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "see [redacted-secret]"
         ],
         "reasonCode": "entry-key-invalid"
       }
@@ -99,6 +119,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 715023802301241
+    "localVersion": 3500355790243190
   }
 }

package/conformance/cases/{c47-s811-roles-key-url-userinfo-characterization → c47-s811-roles-key-url-userinfo-withheld}/input.json RENAMED Viewed

@@ -19,6 +19,12 @@
         },
         "https://admin:hunter2@db.example.com/x": {
           "model": "keep"
+        },
+        "https%3A%2F%2Fadmin%3AFAKEC47ENCODEDPW%40db.example.com": {
+          "model": "keep"
+        },
+        "see https://admin:hunter2@db.example.com/x": {
+          "model": "keep"
         }
       }
     }

package/conformance/cases/c47-s811-roles-key-url-userinfo-withheld/meta.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "contributor": "contract",
+  "claim": "S-811(11.0.0 收;原 🚧 特征格翻面):坏 roles 键 `https://admin:hunter2@db.example.com/x` 被逐条丢掉,坐标段与 zod 回显的文本都过 `redactSecrets` —— 11.0.0 起它对 URL 候选段问 `carriesUserinfo`,整段扣成 `[redacted-secret]`(改前坐标 `[\"roles\", \"https://admin:hunter2@db.example.com/x\"]` 原样出门)。第二个坏键是同一形的百分号编码(`https%3A%2F%2Fadmin%3AFAKEC47ENCODEDPW%40db.example.com`):原文上看不见 `@`,只在归一化形上可见 ⇒ 整串扣。 第三个坏键是一句话里夹着同一个带凭据的 URL(`see https://admin:hunter2@…`):只扣那一段,坐标段读 `see [redacted-secret]`(其余照旧可读)。",
+  "firstRedOn": [],
+  "note": "车PE(2026-09-27)按主会话令加,当时是现状特征钉(刻意不登 `hunter2`);11.0.0 S-811 修后翻成护栏,并加编码形与句中形两键。变异门靶:URL 候选段 userinfo 一遍(本条第三键杀:去掉它,句中形整串扣)、归一化形上的 userinfo 整串扣(本条第二键杀)。",
+  "secrets": [
+    "hunter2",
+    "FAKEC47ENCODEDPW"
+  ]
+}

package/conformance/cases/c48-s935-model-headers-transported/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "anthropic-messages",
@@ -85,7 +88,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },
@@ -109,6 +111,9 @@
     "outcome": "effective",
     "effective": {
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "anthropic-messages",

package/conformance/cases/c49-s935-model-headers-secret-entry-dropped/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -55,7 +58,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c50-s784-lane-host-legal/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c51-s784-lane-e2b-legal/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c52-s784-lane-k8s-legal/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c53-s784-lane-ssh-legal/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c54-s784-lane-adb-legal/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c55-s784-lane-local-docker-legal/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c56-s784-lane-device-legal/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -42,7 +45,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c57-s784-g1-enabled-no-lane/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c58-s784-g2-multitenant-host/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c59-s784-g3-k8s-missing-image/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c60-s784-g3-e2b-missing-key/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c61-s784-g3-other-lane-key/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c62-s784-g7a-session-tidb/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c63-s784-host-two-replicas/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c64-s784-multitenant-local-store/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c65-s784-pg-without-db/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c66-s784-memory-backend-mismatch/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c67-s784-retired-field-loud/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c67-s784-retired-field-loud/meta.json CHANGED Viewed

@@ -1,5 +1,5 @@
 {
   "contributor": "contract",
-  "claim": "7.0.0 删除项读到即**响亮拒**(runtime.sessionBackend,哪怕是停用的 worker),拒因指路 migrateWorkersDomain / npx @sema-agent/settings-schema migrate-workers —— 不被 zod 静默剥成「什么都没声明」。",
+  "claim": "7.0.0 删除项读到即**响亮拒**(runtime.sessionBackend,哪怕是停用的 worker)—— 11.0.0 起由 WorkerSpec 里原位的墓碑字段拒,拒句点名一次性迁移 SS-M4(与 `npx @sema-agent/settings-schema migrate <config.d directory>`);不被 zod 静默剥成「什么都没声明」。",
   "firstRedOn": []
 }

package/conformance/cases/c68-s784-device-local-store/expected.json CHANGED Viewed

@@ -41,6 +41,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [],
         "roles": {},
         "tierGroups": []
@@ -57,7 +60,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c69-deep-encoded-token-past-every-reading/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -59,7 +62,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },

package/conformance/cases/c70-rewritten-token-in-front-of-encoded-pem-header/expected.json CHANGED Viewed

@@ -26,6 +26,9 @@
         "servers": []
       },
       "models": {
+        "atMention": {
+          "mode": "all"
+        },
         "models": [
           {
             "api": "openai-completions",
@@ -59,7 +62,6 @@
       "rosters": {
         "rosters": []
       },
-      "runtime": {},
       "scenarios": {
         "scenarios": []
       },