@sema-agent/settings-schema 17.2.0 → 19.0.0

package/conformance/cases/c86-a2a-peers-legal/expected.json

@@ -0,0 +1,135 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "a2a": {
+        "peers": [
+          {
+            "allowSkills": [
+              "search"
+            ],
+            "enabled": true,
+            "headerRefs": {
+              "Authorization": "KB_TOKEN"
+            },
+            "name": "kb",
+            "principalHeader": "X-Principal",
+            "scenarios": [],
+            "url": "https://kb.example/a2a"
+          },
+          {
+            "cardUrl": "https://ops.example/agent-card.json",
+            "enabled": false,
+            "name": "ops",
+            "scenarios": [
+              "oncall"
+            ],
+            "url": "https://ops.example/"
+          }
+        ]
+      },
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "atMention": {
+          "mode": "all"
+        },
+        "models": [],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {},
+      "rosters": {
+        "rosters": []
+      },
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-11-03T00:00:00.000Z"
+    }
+  },
+  "strictWrite": {
+    "outcome": "effective",
+    "effective": {
+      "a2a": {
+        "peers": [
+          {
+            "allowSkills": [
+              "search"
+            ],
+            "enabled": true,
+            "headerRefs": {
+              "Authorization": "KB_TOKEN"
+            },
+            "name": "kb",
+            "principalHeader": "X-Principal",
+            "scenarios": [],
+            "url": "https://kb.example/a2a"
+          },
+          {
+            "cardUrl": "https://ops.example/agent-card.json",
+            "enabled": false,
+            "name": "ops",
+            "scenarios": [
+              "oncall"
+            ],
+            "url": "https://ops.example/"
+          }
+        ]
+      }
+    },
+    "warnings": [],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-11-03T00:00:00.000Z"
+    },
+    "why": "受理:两个对端都合 `A2aPeerSpec`(URL 不带凭据与 fragment、头名合 token 文法、引用是 env-NAME、对端名可当线上名且不重名);严写收下的就是读腿 a2a 那一格。"
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 206605001400842
+  }
+}

package/conformance/cases/c86-a2a-peers-legal/input.json

@@ -0,0 +1,32 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-11-03T00:00:00.000Z"
+  },
+  "domains": {
+    "a2a": {
+      "peers": [
+        {
+          "name": "kb",
+          "url": "https://kb.example/a2a",
+          "headerRefs": {
+            "Authorization": "KB_TOKEN"
+          },
+          "principalHeader": "X-Principal",
+          "allowSkills": [
+            "search"
+          ]
+        },
+        {
+          "name": "ops",
+          "url": "https://ops.example/",
+          "cardUrl": "https://ops.example/agent-card.json",
+          "scenarios": [
+            "oncall"
+          ],
+          "enabled": false
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c86-a2a-peers-legal/meta.json

@@ -0,0 +1,5 @@
+{
+  "contributor": "contract",
+  "claim": "`a2a`(常驻出站 A2A 对端名册)是便携域:两个合法对端在四条腿上同读 —— 缺省物化(缺 `scenarios` ⇒ `[]`、缺 `enabled` ⇒ `true`),停用的对端照样在表里(`enabled: false` 由读方过滤,不是读腿丢),header 值只以 env-NAME 引用出现(`headerRefs`),零告警。本地腿读 `config.d/a2a.json`:在没有这个域的包上,同一份文件报 `unread-config-file`、远端 `/effective.a2a` 原样透传 —— 一个仍按旧读法的读腿会把这条读成「对端名册缺席」或「未校验的原文」。",
+  "firstRedOn": []
+}

package/conformance/cases/c87-a2a-credential-refs-not-partially-salvaged/expected.json

@@ -0,0 +1,123 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "a2a": {
+        "peers": [
+          {
+            "enabled": true,
+            "headerRefs": {
+              "Authorization": "KB_TOKEN"
+            },
+            "name": "kb",
+            "scenarios": [],
+            "url": "https://kb.example/a2a"
+          },
+          {
+            "allowSkills": [
+              "search"
+            ],
+            "enabled": true,
+            "name": "narrow",
+            "scenarios": [],
+            "url": "https://narrow.example/a2a"
+          }
+        ]
+      },
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "atMention": {
+          "mode": "all"
+        },
+        "models": [],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {},
+      "rosters": {
+        "rosters": []
+      },
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "a2a",
+        "identity": {
+          "name": "half"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "peers",
+          1
+        ],
+        "reasonCode": "entry-schema-invalid"
+      },
+      {
+        "domain": "a2a",
+        "kind": "entry-dropped",
+        "path": [
+          "peers",
+          2,
+          "allowSkills",
+          1
+        ],
+        "reasonCode": "entry-schema-invalid"
+      }
+    ],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-11-03T00:00:00.000Z"
+    }
+  },
+  "strictWrite": {
+    "outcome": "rejected",
+    "stage": "validate",
+    "why": "拒:`half` 的一条 header 引用不是 env-NAME、`half` 与 `narrow` 的 `allowSkills` 各有一个空串 —— 写是一个动作,一处坏整份不受理。"
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 3675868689326288
+  }
+}

package/conformance/cases/c87-a2a-credential-refs-not-partially-salvaged/input.json

@@ -0,0 +1,39 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-11-03T00:00:00.000Z"
+  },
+  "domains": {
+    "a2a": {
+      "peers": [
+        {
+          "name": "kb",
+          "url": "https://kb.example/a2a",
+          "headerRefs": {
+            "Authorization": "KB_TOKEN"
+          }
+        },
+        {
+          "name": "half",
+          "url": "https://half.example/a2a",
+          "headerRefs": {
+            "Authorization": "HALF_TOKEN",
+            "X-Tenant": "not an env name"
+          },
+          "allowSkills": [
+            "search",
+            ""
+          ]
+        },
+        {
+          "name": "narrow",
+          "url": "https://narrow.example/a2a",
+          "allowSkills": [
+            "search",
+            ""
+          ]
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c87-a2a-credential-refs-not-partially-salvaged/meta.json

@@ -0,0 +1,5 @@
+{
+  "contributor": "contract",
+  "claim": "凭据引用集合不可部分抢救:对端 `half` 的 `headerRefs` 里一条引用坏形(值不是 env-NAME)⇒ **整个对端** `entry-dropped`(域 `a2a`、坐标 `[\"peers\",1]`、身份 `half`),不是只丢那一条引用、留下一个带着一半凭据去拨远端的对端;兄弟 `kb` 原样保留。对照组 `narrow`:非凭据集合(`allowSkills`)里的坏元素照旧逐条丢(坐标 `[\"peers\",2,\"allowSkills\",1]`;丢了只会更窄),对端本身活下来。严写腿整份拒。一个对每个 Record 都逐条抢救的读腿会把 `half` 读成「只带 Authorization 的对端」。",
+  "firstRedOn": []
+}

package/conformance/cases/cc01-mcp-toolfaces-non-object/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -161,6 +164,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 197807763204275
+    "localVersion": 3253988119103129
   }
 }

package/conformance/cases/cc02-mcp-source-key-is-transported/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -107,6 +110,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2482576595667034
+    "localVersion": 3591318400132154
   }
 }

package/conformance/cases/cc03-model-compat-unknown-subkey/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -116,6 +119,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 4345724001787046
+    "localVersion": 1663867526020649
   }
 }

package/conformance/cases/cli01-model-name-nfc-vs-nfd/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -112,6 +115,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 694685728514477
+    "localVersion": 2654544430240950
   }
 }

package/conformance/cases/cli02-control-and-zero-width-chars/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -125,6 +128,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 4213710307592750
+    "localVersion": 3769852229872529
   }
 }

package/conformance/cases/cli03-credential-pasted-into-unknown-key/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -121,6 +124,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2617555914511015
+    "localVersion": 1531100058823047
   }
 }

package/conformance/cases/cli04-env-value-with-newline/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -149,6 +152,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2617555914511015
+    "localVersion": 1531100058823047
   }
 }

package/conformance/cases/cli05-long-and-prefix-colliding-names/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -148,6 +151,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 1318036626730287
+    "localVersion": 3555569200054848
   }
 }

package/conformance/cases/t01-absent-domain-key-not-null/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -91,6 +94,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2247688933988744
+    "localVersion": 1409565868890479
   }
 }

package/conformance/cases/t03-prototype-name-key-not-swallowed/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -152,6 +155,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 3232605402901914
+    "localVersion": 3557208461559525
   }
 }

package/conformance/cases/t04-secret-literal-never-in-warning-value/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -108,6 +111,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 2614200563056761
+    "localVersion": 3944259292559843
   }
 }

package/conformance/cases/z01-every-domain-empty-object/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -131,6 +134,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 499959296543014
+    "localVersion": 3006809479574243
   }
 }

package/conformance/cases/z02-every-domain-unknown-key/expected.json

@@ -2,6 +2,9 @@
   "domains": {
     "outcome": "effective",
     "effective": {
+      "a2a": {
+        "peers": []
+      },
       "collab": {
         "templates": []
       },
@@ -425,6 +428,6 @@
   },
   "localRoot": {
     "derive": true,
-    "localVersion": 567413778934550
+    "localVersion": 1287865876181806
   }
 }

package/dist/center-refs.d.ts

@@ -8,8 +8,9 @@
  * ## 律(一条)
  * 引用表怎么读、每个变量怎么问、读不出怎么说,只有这一处:
  *  · **引用表经公开的记录读器读**({@link readPlainStringRecord}:同一个函数、同一张原因词表 {@link PLAIN_STRING_RECORD_FAULTS}),不另写形状 / 描述符判据。读不出(整张不是纯数据、有成员的变量名不是串、
- *    读成员就抛、叫 `__proto__` 的成员)⇒ 整台结论 `refs_unreadable`,带读器的词,**一个变量都不问** —— 引用表本身不可信时,问了的值也没有可以挂的地方。
- *    读器会把叫 `__proto__` 的串值成员**剔出副本**交其余;本口不许这样悄悄丢一条引用再挂一台少了鉴权的 server,所以同样答 `refs_unreadable`、词 `member_name_reserved`。
+ *    读成员就抛、叫保留名 `__proto__` / `constructor` / `prototype` 的成员)⇒ 整台结论 `refs_unreadable`,带读器的词,**一个变量都不问** —— 引用表本身不可信时,问了的值也没有可以挂的地方。
+ *    读器会把叫保留名的串值成员**剔出副本**交其余;本口不许这样悄悄丢一条引用再挂一台少了鉴权的 server,所以同样答 `refs_unreadable`、词 `member_name_reserved`,点名第一个(自有键序)。
+ *    保留名只有一张表(`./reserved-member-name`):域 schema 的凭据引用集合拒同一组名字,两个读口同答。
  *  · **查找函数 `lookup(name)` 由调用方给**,本口**不读 `process.env`**(源里没有 `process` / `globalThis`;宿主怎么读环境、读哪一层环境、要不要缓存,都是调用方的事)。没给 / 不是函数 ⇒ `TypeError`
  *    (这是调用方的编程错,不是数据错:不折成成员的 `read_threw`,更不回落任何环境)。
  *  · 每个成员恰问一次 `lookup`(按引用表副本的自有键序 —— 整数形的键在前、其余按记录列出的次序;实参只有变量名一个),判成**一个词**({@link CenterRefMemberVerdict}):
@@ -23,7 +24,7 @@
  *
  * ## 读数的构造
  * 成员表用 `map`,`values` 用 `Object.defineProperty` + 零原型描述符({@link dataDescriptor})逐键写进一个新对象(定义语义,不走 [[Set]]):`Object.prototype` 上挂了数字键 setter 时目标键 `"0"` 的值也不会被吞;
- * `constructor` / `toString` 这类原型链上的名字作目标键照落成自有数据属性。交出的 `values` 原型是 `Object.prototype`,与读器交出的副本同形。
+ * `toString` / `hasOwnProperty` 这类不在保留名表里的原型链名字作目标键照落成自有数据属性。交出的 `values` 原型是 `Object.prototype`,与读器交出的副本同形。
  */
 import { type PlainStringRecordFault } from "./mcp-request-entry.js";
 /** 一个成员没解到的**原因词**,闭集,三个:`missing_name`(查找函数答 `undefined` —— 变量没设)· `not_a_string`(答了别的种类)· `read_threw`(查找函数抛了)。消费方按词分派,穷尽 `switch`,不读句子(本口没有句子)。 */

package/dist/center-refs.js

@@ -8,8 +8,9 @@
  * ## 律(一条)
  * 引用表怎么读、每个变量怎么问、读不出怎么说,只有这一处:
  *  · **引用表经公开的记录读器读**({@link readPlainStringRecord}:同一个函数、同一张原因词表 {@link PLAIN_STRING_RECORD_FAULTS}),不另写形状 / 描述符判据。读不出(整张不是纯数据、有成员的变量名不是串、
- *    读成员就抛、叫 `__proto__` 的成员)⇒ 整台结论 `refs_unreadable`,带读器的词,**一个变量都不问** —— 引用表本身不可信时,问了的值也没有可以挂的地方。
- *    读器会把叫 `__proto__` 的串值成员**剔出副本**交其余;本口不许这样悄悄丢一条引用再挂一台少了鉴权的 server,所以同样答 `refs_unreadable`、词 `member_name_reserved`。
+ *    读成员就抛、叫保留名 `__proto__` / `constructor` / `prototype` 的成员)⇒ 整台结论 `refs_unreadable`,带读器的词,**一个变量都不问** —— 引用表本身不可信时,问了的值也没有可以挂的地方。
+ *    读器会把叫保留名的串值成员**剔出副本**交其余;本口不许这样悄悄丢一条引用再挂一台少了鉴权的 server,所以同样答 `refs_unreadable`、词 `member_name_reserved`,点名第一个(自有键序)。
+ *    保留名只有一张表(`./reserved-member-name`):域 schema 的凭据引用集合拒同一组名字,两个读口同答。
  *  · **查找函数 `lookup(name)` 由调用方给**,本口**不读 `process.env`**(源里没有 `process` / `globalThis`;宿主怎么读环境、读哪一层环境、要不要缓存,都是调用方的事)。没给 / 不是函数 ⇒ `TypeError`
  *    (这是调用方的编程错,不是数据错:不折成成员的 `read_threw`,更不回落任何环境)。
  *  · 每个成员恰问一次 `lookup`(按引用表副本的自有键序 —— 整数形的键在前、其余按记录列出的次序;实参只有变量名一个),判成**一个词**({@link CenterRefMemberVerdict}):
@@ -23,9 +24,9 @@
  *
  * ## 读数的构造
  * 成员表用 `map`,`values` 用 `Object.defineProperty` + 零原型描述符({@link dataDescriptor})逐键写进一个新对象(定义语义,不走 [[Set]]):`Object.prototype` 上挂了数字键 setter 时目标键 `"0"` 的值也不会被吞;
- * `constructor` / `toString` 这类原型链上的名字作目标键照落成自有数据属性。交出的 `values` 原型是 `Object.prototype`,与读器交出的副本同形。
+ * `toString` / `hasOwnProperty` 这类不在保留名表里的原型链名字作目标键照落成自有数据属性。交出的 `values` 原型是 `Object.prototype`,与读器交出的副本同形。
  */
-import { PLAIN_STRING_RECORD_RESERVED_MEMBER, readPlainStringRecord } from "./mcp-request-entry.js";
+import { readPlainStringRecord } from "./mcp-request-entry.js";
 import { dataDescriptor, inspect } from "./own-key-read.js";
 /** 一个成员没解到的**原因词**,闭集,三个:`missing_name`(查找函数答 `undefined` —— 变量没设)· `not_a_string`(答了别的种类)· `read_threw`(查找函数抛了)。消费方按词分派,穷尽 `switch`,不读句子(本口没有句子)。 */
 export const CENTER_REF_FAULTS = ["missing_name", "not_a_string", "read_threw"];
@@ -55,8 +56,9 @@ export function resolveCenterRefs(refs, lookup) {
     const read = readPlainStringRecord(refs);
     if (!read.ok)
         return { verdict: "refs_unreadable", fault: read.fault, ...(read.member !== undefined ? { member: read.member } : {}) };
-    if (read.reservedMember)
-        return { verdict: "refs_unreadable", fault: "member_name_reserved", member: PLAIN_STRING_RECORD_RESERVED_MEMBER };
+    const [reserved] = read.reservedMembers;
+    if (reserved !== undefined)
+        return { verdict: "refs_unreadable", fault: "member_name_reserved", member: reserved };
     const judged = Object.entries(read.record).map((pair) => ({ key: pair[0], ref: pair[1], answer: answerOf(pair[1], lookup) }));
     const members = judged.map((j) => ({ key: j.key, ref: j.ref, verdict: j.answer.verdict }));
     if (judged.some((j) => j.answer.verdict !== "resolved"))

package/dist/cli.d.ts

@@ -35,5 +35,5 @@ export interface SettingsSchemaCliIo extends ConfigDirectoryIo {
     stderr(text: string): void;
 }
 /** 命令行的覆盖面:全部配置域、retired 域(便携与否不论 —— 离线的 `workers.json` 一样迁)与 `remote-exec.json`。 */
-export declare const COVERED_DOCUMENTS: ("remote-exec" | "models" | "rosters" | "scenarios" | "skills" | "execution" | "plugins" | "systems" | "limits" | "runtime" | "workers" | "hosts" | "projects" | "mcp" | "collab" | "governance" | "entitlement" | "prompts")[];
+export declare const COVERED_DOCUMENTS: ("remote-exec" | "models" | "rosters" | "scenarios" | "skills" | "execution" | "plugins" | "systems" | "limits" | "runtime" | "workers" | "hosts" | "projects" | "mcp" | "collab" | "governance" | "entitlement" | "prompts" | "a2a")[];
 export declare function runSettingsSchemaCli(argv: readonly string[], io: SettingsSchemaCliIo): Promise<number>;