@sema-agent/settings-schema 2.1.0 → 3.0.1

package/conformance/cases/t02-entry-salvage-vs-whole-domain-refusal/expected.json

@@ -0,0 +1,16 @@
+{
+  "domains": {
+    "outcome": "rejected",
+    "stage": "validate"
+  },
+  "wire": {
+    "outcome": "rejected",
+    "stage": "validate",
+    "why": "domains 腿是拒绝态,不派生;wire 腿把同一份 rosters 文档交给同一个 buildEffective(skills/prompts 之外零改道),闸门域的 throw 穿过信封层 ⇒ 拒绝层与 domains 腿相同"
+  },
+  "localRoot": {
+    "outcome": "rejected",
+    "stage": "validate",
+    "why": "models 与 rosters 都是便携域,两份文件层都过得去(都是 JSON 对象),拒绝发生在域校验层而不是 parse 层"
+  }
+}

package/conformance/cases/t02-entry-salvage-vs-whole-domain-refusal/input.json

@@ -0,0 +1,32 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-09-16T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        },
+        {
+          "name": 5,
+          "id": "bad-id"
+        }
+      ]
+    },
+    "rosters": {
+      "rosters": [
+        {
+          "name": "r1"
+        },
+        {
+          "name": 5
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/t02-entry-salvage-vs-whole-domain-refusal/meta.json

@@ -0,0 +1,6 @@
+{
+  "contributor": "test",
+  "claim": "同一份坏条目,放进逐条容错的域(`models`,`DOMAIN_READ_FALLBACK=\"default\"`)与放进 fail-loud 的闸门域(`rosters`,`=\"throw\"`),结论必须不同:前者丢那一条并恰报一条 `entry-dropped`、**不得同时**报 `domain-defaulted`(一域一个结论);后者**整份读在 validate 层被拒**(不是回落到 schema 默认 —— 对闸门域回落就是放宽闸门)。server [6782] 与 web-admin [7285] G2/G4 是同一件事的两半,跨腿读错会把『逐条容错』顺手放宽到闸门域,把这条设计为拒的输入读成绿(带两条 `entry-dropped`)。",
+  "firstRedOn": [],
+  "note": "【claim 措辞订正 2026-09-19,test 自纠】初稿写的是「后者整域回落」—— **是本方写错**:「回落」是 `DOMAIN_READ_FALLBACK=\"default\"` 那一族的动作,闸门域是 `\"throw\"` = fail-loud,整份读被拒。出处:契约自述 `config-fns.js` 的 `DOMAIN_READ_FALLBACK` 头注(defaulting would LOOSEN gates)+ 契约自带 `c05-gate-domain-bad-entry-throws` 金样(rejected/validate)+ 本仓 historical 实跑五版一致。claim 已按实测改写,对抗意图不变。两域放**同形**坏条目(`name` 是数字):`models`(DOMAIN_READ_FALLBACK=\"default\")与 `rosters`(=\"throw\",且是唯一一个便携的数组形闸门域)。3.0.0 实测:闸门域坏条目使**整份读**在 `validate` 层拒,三腿同形 —— 因此本条的期望是 `rejected/validate`,`models` 那半场在同一份输入里**结构上观察不到**。这正是本条的判别力所在:一个把逐条容错顺手放宽到闸门域的消费方,会把这条设计为拒的 case 读成绿(带两条 `entry-dropped`)。claim 前半场(`models` 恰一条 `entry-dropped`、零 `domain-defaulted`)由 verify.mjs 的配对正控臂(同一份输入去掉 `rosters` 域)钉住,读数记在 _SUMMARY.json 的 t02.pairedControl。claim 里「闸门域整域回落」的『回落』一词与契约自述的 `\"throw\"` = fail-loud 不符 —— 见 _SUMMARY.json 的 claimVsObserved。firstRedOn 空是**实跑**出来的:1.0.0/1.5.0/1.10.0/2.0.0/2.1.0 五版在本条上都是 expected-rejected(闸门域坏条目整份拒这条律从 1.0.0 起一字未动)⇒ 护栏,不是回归凭证。"
+}

package/conformance/cases/t03-prototype-name-key-not-swallowed/expected.json

@@ -0,0 +1,107 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "m0-id",
+            "name": "m0",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "models",
+            0,
+            "__proto__"
+          ],
+          [
+            "models",
+            0,
+            "constructor"
+          ],
+          [
+            "models",
+            0,
+            "toString"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      }
+    ],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-09-16T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 3232605402901914
+  }
+}

package/conformance/cases/t03-prototype-name-key-not-swallowed/input.json

@@ -0,0 +1,25 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-09-16T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "m0",
+          "provider": "openai",
+          "id": "m0-id",
+          "apiKeyEnv": "OPENAI_API_KEY",
+          "__proto__": {
+            "polluted": true
+          },
+          "constructor": {
+            "polluted": true
+          },
+          "toString": "nope"
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/t03-prototype-name-key-not-swallowed/meta.json

@@ -0,0 +1,6 @@
+{
+  "contributor": "test",
+  "claim": "`__proto__` / `constructor` / `toString` 作为域内条目的键,**在坏条目上**:告警坐标必须把它当**普通字面键**点名、`effective` 的原型必须不被污染、三腿读法一致。本方在 server 7.87.0 G6 实测过同族(`answer.answers[0].__proto__` ⇒ `400 request.field_invalid` 且 `unknownKeys` 逐字点名);也在本仓自证里把 `__proto__` 的断言方向搞反过一次(`JSON.parse` + spread **保留** own 属性、plain assignment 才污染原型),所以这条同时是护栏。",
+  "firstRedOn": [],
+  "note": "【claim 收窄 2026-09-19,server [7621] ① 指出、主会话亲验】初稿把 `__proto__` **作好条目的 record 键**也算进「当普通字面键报进坐标」。**实测不成立**:`parseDomainLoud('limits', {__proto__:1, ok:2}, …)` 的告警 keys 只有 `['ok']`,`parsed` 上无 own `__proto__`(原型仍是 `Object.prototype`)—— 好条目上的原型名键在 zod 3 正常解析路径上本来就被丢,是 [7617] 已知限制,不是本条要钉的东西。claim 已收窄到**坏条目**那半场(真的、可判、有判别力);好条目那半场不入语料。与契约仓 c12 的差别:c12 打的是**顶层键**(`k in built` 一路问到 Object.prototype ⇒ open-world 承诺失效),本条打的是**域内条目的键**(剥键扫描 `collectDropped` 的 `Object.keys` / `hasOwnProperty` 两处判据,以及 salvage/rebase 路径上的对象重建)。构造坑(本方亲踩,记在此处防下一个人重踩):用 JS 对象字面量 `{\"__proto__\": {...}}` 造这条输入会**设置原型而不是加一个键**,于是 `isPlainJsonObject` 判假、整条扫描被跳过、case 测了个寂寞;语料走 `JSON.parse` 才拿到自有键 —— 这也是为什么这条必须以磁盘语料形存在,而不是测试里一个内联对象。firstRedOn 空是**实跑**出来的:五个旧版(1.0.0/1.5.0/1.10.0/2.0.0/2.1.0)在本条上全绿 —— S-332 那个 bug 只落在**顶层键**那一层(契约 c12 五版全红),域内条目键这一层从 1.0.0 起就一直对 ⇒ 本条是护栏,不是回归凭证。"
+}

package/conformance/cases/t04-secret-literal-never-in-warning-value/expected.json

@@ -0,0 +1,105 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          1
+        ]
+      },
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "models",
+            0,
+            "apiKeyInline"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      }
+    ],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-09-16T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 2614200563056761
+  }
+}

package/conformance/cases/t04-secret-literal-never-in-warning-value/input.json

@@ -0,0 +1,25 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-09-16T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY",
+          "apiKeyInline": "sk-FAKE-CORPUS-0000000000000000"
+        },
+        {
+          "name": "bad",
+          "provider": "openai",
+          "id": "bad-id",
+          "api": "ghp_FAKE-CORPUS-1111111111111111"
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/t04-secret-literal-never-in-warning-value/meta.json

@@ -0,0 +1,14 @@
+{
+  "contributor": "test",
+  "claim": "坏条目的**值**里埋 `sk-`/`ghp_` 形秘密字面:告警面必须**名字上线、值永不上线**(与 `hosts-grandfathered` 同律)。本方给 web-admin G3 加过同款正控 —— 没有正控时『没打印秘密』与『判据没跑到那一行』同形。",
+  "firstRedOn": [
+    "settings-schema@1.0.0",
+    "settings-schema@1.10.0",
+    "settings-schema@1.5.0"
+  ],
+  "secrets": [
+    "sk-FAKE-CORPUS-0000000000000000",
+    "ghp_FAKE-CORPUS-1111111111111111"
+  ],
+  "note": "两条秘密走**两条不同的告警路径**,所以「值不上线」在两条路上分别被判:①`sk-` 那把是**存活条目**上一个未知键的值 ⇒ 只该出现在 `unknown-keys-dropped` 的键坐标里(键名 `apiKeyInline` 上线、值不上线);②`ghp_` 那把是**被丢条目**上一个 enum 字段的值 ⇒ zod 的 `invalid_enum_value` 会把 `received` 原样回显,只有 `sanitizeZodError`/`redactSecrets` 挡着 ⇒ 它落在 `entry-dropped.error` 的文案面上,而 `findSecretLeaks` 恰恰扫这一面。正控(判据到达性)由 expected 的两条告警坐标承担:`[\"models\",0,\"apiKeyInline\"]` 与 `[\"models\",1]` 必须在场,证明剥键扫描与抢救路径都真跑到了。扫描器自身的判别力由 verify.mjs 的 decoy 臂钉住(把一个**非**秘密形的 enum 值当秘密登记 ⇒ findSecretLeaks 必须命中),否则「零命中」与「扫描器恒返回空」同形。语料里的两把是**假串**,不是任何真凭据。⚠️ firstRedOn 里的三个旧版**不是在秘密轴上红的**:逐版直读 `findSecretLeaks`(1.0.0/1.5.0/1.10.0/2.0.0/2.1.0)**五版全零命中**;那三版红是因为 1.11.0 才有的逐条容错还不存在,整个 `models` 域退默认(只报一条 `domain-defaulted`),于是 effective 与告警多重集都对不上。⇒ 在**秘密轴**上这条同样是护栏;把「这条 case 在旧版上红」读成「旧版泄过秘密」是从读数推到结论的那一类错,读数见 _historical-readout.json#t04SecretAxis。"
+}

package/conformance/cases/z01-every-domain-empty-object/expected.json

@@ -0,0 +1,72 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-09-16T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 209075514147757
+  }
+}

package/conformance/cases/z01-every-domain-empty-object/input.json

@@ -0,0 +1,25 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-09-16T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {},
+    "rosters": {},
+    "skills": {},
+    "mcp": {},
+    "plugins": {},
+    "scenarios": {},
+    "systems": {},
+    "collab": {},
+    "workers": {},
+    "hosts": {},
+    "runtime": {},
+    "governance": {},
+    "entitlement": {},
+    "execution": {},
+    "projects": {},
+    "prompts": {},
+    "limits": {}
+  }
+}

package/conformance/cases/z01-every-domain-empty-object/meta.json

@@ -0,0 +1,5 @@
+{
+  "contributor": "contract",
+  "claim": "十七个域各给一份**合法空文档** `{}` ⇒ 零告警、每域落 schema 默认。覆盖律的第一份:每个域至少被两条 case 摸过。它同时钉住「设了空」这一形在三腿上的读数,以及 local-root 腿对五个非便携域各报一条 unread-config-file。",
+  "firstRedOn": []
+}

package/conformance/cases/z02-every-domain-unknown-key/expected.json

@@ -0,0 +1,228 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {
+        "zzzUnknown": 1
+      },
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "governance",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "runtime",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "rosters",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "skills",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "mcp",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "plugins",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "scenarios",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "systems",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "collab",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "workers",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "hosts",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "entitlement",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "execution",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "projects",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "prompts",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "limits",
+        "keys": [
+          [
+            "zzzUnknown"
+          ]
+        ],
+        "kind": "unknown-keys-carried"
+      }
+    ],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-09-16T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 2336752390152956
+  }
+}