@sema-agent/settings-schema 3.0.0 → 3.0.1

package/conformance/historical/settings-schema@1.10.0.json

@@ -8,9 +8,10 @@
     "why": "旧版坐标是点号串、今天是段数组;归一 = 按 `.` 拼串,这正是 3.0.0 要消掉的有损编码(`[\"a.b\"]` 与 `[\"a\",\"b\"]` 归一后同串)"
   },
   "summary": {
-    "pass": 111,
-    "diff": 24,
-    "expected-rejected": 12,
+    "pass": 117,
+    "diff": 27,
+    "diff-ledgered": 0,
+    "expected-rejected": 15,
     "harness-error": 0,
     "skipped": 0
   },
@@ -955,6 +956,86 @@
         }
       }
     },
+    "t01-absent-domain-key-not-null": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
+    "t02-entry-salvage-vs-whole-domain-refusal": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        },
+        "wire": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        },
+        "localRoot": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        }
+      }
+    },
+    "t03-prototype-name-key-not-swallowed": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
+    "t04-secret-literal-never-in-warning-value": {
+      "firstRed": true,
+      "legs": {
+        "domains": {
+          "status": "diff",
+          "behaviour": true,
+          "detail": "1 effective diff(s), 2 missing / 1 extra warning(s), 0 metadata diff(s)"
+        },
+        "wire": {
+          "status": "diff",
+          "behaviour": true,
+          "detail": "1 effective diff(s), 2 missing / 1 extra warning(s), 0 metadata diff(s)"
+        },
+        "localRoot": {
+          "status": "diff",
+          "behaviour": true,
+          "detail": "1 effective diff(s), 2 missing / 1 extra warning(s), 0 metadata diff(s)"
+        }
+      }
+    },
     "z01-every-domain-empty-object": {
       "firstRed": false,
       "legs": {

package/conformance/historical/settings-schema@1.5.0.json

@@ -8,9 +8,10 @@
     "why": "旧版坐标是点号串、今天是段数组;归一 = 按 `.` 拼串,这正是 3.0.0 要消掉的有损编码(`[\"a.b\"]` 与 `[\"a\",\"b\"]` 归一后同串)"
   },
   "summary": {
-    "pass": 102,
-    "diff": 33,
-    "expected-rejected": 12,
+    "pass": 108,
+    "diff": 36,
+    "diff-ledgered": 0,
+    "expected-rejected": 15,
     "harness-error": 0,
     "skipped": 0
   },
@@ -955,6 +956,86 @@
         }
       }
     },
+    "t01-absent-domain-key-not-null": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
+    "t02-entry-salvage-vs-whole-domain-refusal": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        },
+        "wire": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        },
+        "localRoot": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        }
+      }
+    },
+    "t03-prototype-name-key-not-swallowed": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
+    "t04-secret-literal-never-in-warning-value": {
+      "firstRed": true,
+      "legs": {
+        "domains": {
+          "status": "diff",
+          "behaviour": true,
+          "detail": "1 effective diff(s), 2 missing / 1 extra warning(s), 0 metadata diff(s)"
+        },
+        "wire": {
+          "status": "diff",
+          "behaviour": true,
+          "detail": "1 effective diff(s), 2 missing / 1 extra warning(s), 0 metadata diff(s)"
+        },
+        "localRoot": {
+          "status": "diff",
+          "behaviour": true,
+          "detail": "1 effective diff(s), 2 missing / 1 extra warning(s), 0 metadata diff(s)"
+        }
+      }
+    },
     "z01-every-domain-empty-object": {
       "firstRed": false,
       "legs": {

package/conformance/historical/settings-schema@2.0.0.json

@@ -8,9 +8,10 @@
     "why": "旧版坐标是点号串、今天是段数组;归一 = 按 `.` 拼串,这正是 3.0.0 要消掉的有损编码(`[\"a.b\"]` 与 `[\"a\",\"b\"]` 归一后同串)"
   },
   "summary": {
-    "pass": 129,
+    "pass": 138,
     "diff": 6,
-    "expected-rejected": 12,
+    "diff-ledgered": 0,
+    "expected-rejected": 15,
     "harness-error": 0,
     "skipped": 0
   },
@@ -955,6 +956,86 @@
         }
       }
     },
+    "t01-absent-domain-key-not-null": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
+    "t02-entry-salvage-vs-whole-domain-refusal": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        },
+        "wire": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        },
+        "localRoot": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        }
+      }
+    },
+    "t03-prototype-name-key-not-swallowed": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
+    "t04-secret-literal-never-in-warning-value": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
     "z01-every-domain-empty-object": {
       "firstRed": false,
       "legs": {

package/conformance/historical/settings-schema@2.1.0.json

@@ -8,9 +8,10 @@
     "why": "旧版坐标是点号串、今天是段数组;归一 = 按 `.` 拼串,这正是 3.0.0 要消掉的有损编码(`[\"a.b\"]` 与 `[\"a\",\"b\"]` 归一后同串)"
   },
   "summary": {
-    "pass": 134,
+    "pass": 143,
     "diff": 1,
-    "expected-rejected": 12,
+    "diff-ledgered": 0,
+    "expected-rejected": 15,
     "harness-error": 0,
     "skipped": 0
   },
@@ -955,6 +956,86 @@
         }
       }
     },
+    "t01-absent-domain-key-not-null": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
+    "t02-entry-salvage-vs-whole-domain-refusal": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        },
+        "wire": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        },
+        "localRoot": {
+          "status": "expected-rejected",
+          "behaviour": false,
+          "detail": "rejected at `validate` as expected"
+        }
+      }
+    },
+    "t03-prototype-name-key-not-swallowed": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
+    "t04-secret-literal-never-in-warning-value": {
+      "firstRed": false,
+      "legs": {
+        "domains": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "wire": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        },
+        "localRoot": {
+          "status": "pass",
+          "behaviour": false,
+          "detail": "effective, warnings and metadata all match"
+        }
+      }
+    },
     "z01-every-domain-empty-object": {
       "firstRed": false,
       "legs": {

package/dist/config-fns.d.ts

@@ -227,7 +227,7 @@ export declare function statusRowsToPrune(rows: {
  *  store upgrades with zero data migration and zero gate loss. An explicitly-set governance domain WINS
  *  (its absence-of-a-key then means "center not managing", never "fall back to legacy runtime").
  *
- *  SUNSET (1.11.0): removal is a **persistent-data** break — a store still carrying the 0.5 shape would lose
+ *  SUNSET (2.0.0): removal is a **persistent-data** break — a store still carrying the 0.5 shape would lose
  *  its guardrails silently, so this arm cannot simply be deleted at a minor. It goes at the next MAJOR, with
  *  the standard persistent-data treatment (a loud refusal naming the domain + a one-time migration on the
  *  writer side), and the closing condition is observable rather than a promise: `buildEffective` now emits
@@ -273,7 +273,7 @@ export type EffectiveReadWarning = {
 }
 /** 0.5 期的 runtime 文档里还带着治理三闸,而 governance 域从未被设过 —— 读侧抬升腿真生效了。
  *  `keys` = 这次抬起来的那几个键。**照旧生效,只是不再无声**:兼容窗要能关掉,前提是有人知道它还开着。
- *  1.11.0 起。 */
+ *  2.0.0 起。 */
  | {
     domain: "governance";
     kind: "legacy-governance-lifted";
@@ -282,7 +282,7 @@ export type EffectiveReadWarning = {
 /** 一条**条目**没通过它自己的 entry schema,被单独丢掉了(域内其余条目照常生效)。`path` = 段坐标
  *  (`["models",3]` / `["roles","summarize"]`),与 `unknown-keys-dropped` 的坐标形同一套。逐条一发 —— 载荷是
  *  O(域里的条目数),与被读文档同阶,不放大,故不设条数上限(有上限的是**单条**告警里的键列表)。
- *  1.11.0 起;只可能来自 {@link DOMAIN_READ_FALLBACK} 判 `"default"` 的域,gate 域坏形仍然 throw。 */
+ *  2.0.0 起;只可能来自 {@link DOMAIN_READ_FALLBACK} 判 `"default"` 的域,gate 域坏形仍然 throw。 */
  | {
     domain: DomainName;
     kind: "entry-dropped";
@@ -459,7 +459,7 @@ export interface GrandfatherHostsReadResult {
  *  everything else (regex, types, duplicates) is left for parseDomain — this is a targeted grandfather, not a
  *  lenient parser. PURE + idempotent; returns the ORIGINAL reference when nothing exceeds the bounds.
  *
- *  SUNSET (1.11.0): same persistent-data class as the governance lift — it goes at the next MAJOR. This one was
+ *  SUNSET (2.0.0): same persistent-data class as the governance lift — it goes at the next MAJOR. This one was
  *  never silent (`hosts-grandfathered` fires whenever it clamps), so the closing condition is already
  *  observable: a deployment that has not seen that warning across a full read cycle no longer needs the arm. */
 export declare function grandfatherHostsRead(raw: unknown): GrandfatherHostsReadResult;

package/dist/config-fns.js

@@ -123,7 +123,7 @@ export function parseDomain(domain, raw) {
         return r.data;
     throw sanitizeZodError(r.error); // recursive redaction (message/received/unionErrors) — no secret echo. R13/R14.
 }
-// ── 逐条容错律(1.11.0,S-144 按类修)───────────────────────────────────────────────────────────────
+// ── 逐条容错律(2.0.0,S-144 按类修)───────────────────────────────────────────────────────────────
 //
 // 病:域解析整域 all-or-nothing —— 13 个模型里坏一条,整张目录退成 schema 默认 = 一条都不剩。缓解一直
 // 是**逐键**打补丁(把新键改成 `z.unknown()` 让它别拒),那是给每个新键加特判,规则只会越来越多;
@@ -306,7 +306,7 @@ export function statusRowsToPrune(rows, opts) {
  *  store upgrades with zero data migration and zero gate loss. An explicitly-set governance domain WINS
  *  (its absence-of-a-key then means "center not managing", never "fall back to legacy runtime").
  *
- *  SUNSET (1.11.0): removal is a **persistent-data** break — a store still carrying the 0.5 shape would lose
+ *  SUNSET (2.0.0): removal is a **persistent-data** break — a store still carrying the 0.5 shape would lose
  *  its guardrails silently, so this arm cannot simply be deleted at a minor. It goes at the next MAJOR, with
  *  the standard persistent-data treatment (a loud refusal naming the domain + a one-time migration on the
  *  writer side), and the closing condition is observable rather than a promise: `buildEffective` now emits
@@ -637,7 +637,7 @@ export const DOMAIN_READ_FALLBACK = {
  *  everything else (regex, types, duplicates) is left for parseDomain — this is a targeted grandfather, not a
  *  lenient parser. PURE + idempotent; returns the ORIGINAL reference when nothing exceeds the bounds.
  *
- *  SUNSET (1.11.0): same persistent-data class as the governance lift — it goes at the next MAJOR. This one was
+ *  SUNSET (2.0.0): same persistent-data class as the governance lift — it goes at the next MAJOR. This one was
  *  never silent (`hosts-grandfathered` fires whenever it clamps), so the closing condition is already
  *  observable: a deployment that has not seen that warning across a full read cycle no longer needs the arm. */
 export function grandfatherHostsRead(raw) {
@@ -697,7 +697,7 @@ export function buildEffective(version, getRaw, updatedAt, onWarning) {
         catch (e) {
             if (DOMAIN_READ_FALLBACK[domain] === "throw")
                 throw e;
-            // 逐条容错(1.11.0)在整域降级**之前**试一次:只丢掉真正坏掉的那几条条目,同域好兄弟活下来。
+            // 逐条容错(2.0.0)在整域降级**之前**试一次:只丢掉真正坏掉的那几条条目,同域好兄弟活下来。
             // 告警先缓存再决定 —— 一个域只给一个结论:救活了就逐条报 `entry-dropped`,没救活就只报
             // `domain-defaulted`(那一域的条目反正一条都不剩,再讲「丢了第 3 条」只会误导)。
             const salvage = salvageEntries(DOMAIN_SCHEMAS[domain], raw);
@@ -728,7 +728,7 @@ export function buildEffective(version, getRaw, updatedAt, onWarning) {
     let governanceSource = governanceRaw;
     if (governanceRaw === undefined) {
         const lifted = legacyGovernanceFromRuntime(getRaw("runtime"));
-        // 兼容臂真生效时出声(1.11.0):行为一字不变,但窗要能关就得有人看得见它还开着。
+        // 兼容臂真生效时出声(2.0.0):行为一字不变,但窗要能关就得有人看得见它还开着。
         if (lifted !== undefined)
             onWarning?.({ domain: "governance", kind: "legacy-governance-lifted", keys: Object.keys(lifted).map((k) => [k]) });
         governanceSource = lifted;

package/dist/cross-domain.d.ts

@@ -23,7 +23,7 @@ export type SiblingResolver = <K extends keyof DomainConfig>(domain: K) => Promi
  *  Widened from the fat ConfigStore to the narrow {@link ConfigReader} (it only calls `getDomain`) so a TOC
  *  file source can use it without the full store.
  *
- *  1.11.0 renamed this from `siblingResolver` (BREAKING, zero aliases): the naming law is `build*` returns
+ *  2.0.0 renamed this from `siblingResolver` (BREAKING, zero aliases): the naming law is `build*` returns
  *  plain DATA and `create*` returns a LIVE object — this returns a closure, so it was on the wrong side of
  *  the line and carried neither prefix. A consumer's compile error IS the notice; the fix is the new name. */
 export declare function createSiblingResolver(store: ConfigReader, pending?: Partial<{

package/dist/cross-domain.js

@@ -2,7 +2,7 @@
  *  Widened from the fat ConfigStore to the narrow {@link ConfigReader} (it only calls `getDomain`) so a TOC
  *  file source can use it without the full store.
  *
- *  1.11.0 renamed this from `siblingResolver` (BREAKING, zero aliases): the naming law is `build*` returns
+ *  2.0.0 renamed this from `siblingResolver` (BREAKING, zero aliases): the naming law is `build*` returns
  *  plain DATA and `create*` returns a LIVE object — this returns a closure, so it was on the wrong side of
  *  the line and carried neither prefix. A consumer's compile error IS the notice; the fix is the new name. */
 export function createSiblingResolver(store, pending) {

package/dist/hooks.d.ts

@@ -10,7 +10,7 @@
  * DRIFT: this package OWNS the hooks contract, so it owns noticing that CC moved. `test/upstream-drift.test.ts`
  * compares {@link HOOK_EVENTS} against a CC anchor snapshot that `scripts/extract-cc-hook-events.mjs` extracts
  * from the CLI bundle — a word CC has and this set does not is a RED test naming it, instead of a consumer
- * discovering it the hard way (the 1.3.0 / 1.6.0 / 1.8.0 / 1.11.0 pattern).
+ * discovering it the hard way (the 1.3.0 / 1.6.0 / 1.8.0 / 2.0.0 pattern).
  *
  * CONSUMERS
  * - service (the worker server): `TaskRequest.settings.hooks` wire face = `HooksConfig` below; the worker-side
@@ -35,7 +35,7 @@ export declare const CC_198_HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse",
  * Post-CC-2.1.198 additions (sema superset; CC added them after 198).
  * APPEND-ONLY: new members go at the tail (1.3.0 `DirectoryAdded`, CC 2.1.219 — CC's own tuple places it
  * between FileChanged and MessageDisplay; the declaration order here is not normative, the enum is a set).
- * 1.11.0 appends the model-switch pair (`PreModelSwitch` / `PostModelSwitch`, CC 2.1.259 — absent from the
+ * 2.0.0 appends the model-switch pair (`PreModelSwitch` / `PostModelSwitch`, CC 2.1.259 — absent from the
  * 2.1.250 corpus, so 250→259 is when they landed upstream).
  *
  * 🔴 This list is no longer maintained by hand-reading a CLI bundle: `test/upstream-drift.test.ts` fails

package/dist/hooks.js

@@ -10,7 +10,7 @@
  * DRIFT: this package OWNS the hooks contract, so it owns noticing that CC moved. `test/upstream-drift.test.ts`
  * compares {@link HOOK_EVENTS} against a CC anchor snapshot that `scripts/extract-cc-hook-events.mjs` extracts
  * from the CLI bundle — a word CC has and this set does not is a RED test naming it, instead of a consumer
- * discovering it the hard way (the 1.3.0 / 1.6.0 / 1.8.0 / 1.11.0 pattern).
+ * discovering it the hard way (the 1.3.0 / 1.6.0 / 1.8.0 / 2.0.0 pattern).
  *
  * CONSUMERS
  * - service (the worker server): `TaskRequest.settings.hooks` wire face = `HooksConfig` below; the worker-side
@@ -64,7 +64,7 @@ export const CC_198_HOOK_EVENTS = [
  * Post-CC-2.1.198 additions (sema superset; CC added them after 198).
  * APPEND-ONLY: new members go at the tail (1.3.0 `DirectoryAdded`, CC 2.1.219 — CC's own tuple places it
  * between FileChanged and MessageDisplay; the declaration order here is not normative, the enum is a set).
- * 1.11.0 appends the model-switch pair (`PreModelSwitch` / `PostModelSwitch`, CC 2.1.259 — absent from the
+ * 2.0.0 appends the model-switch pair (`PreModelSwitch` / `PostModelSwitch`, CC 2.1.259 — absent from the
  * 2.1.250 corpus, so 250→259 is when they landed upstream).
  *
  * 🔴 This list is no longer maintained by hand-reading a CLI bundle: `test/upstream-drift.test.ts` fails

package/dist/scheduler-store.d.ts

@@ -60,7 +60,7 @@ export declare function isSchedulerRecord(v: unknown): v is SchedulerRecord;
  *  `switch` gains an arm to write).
  *   - `malformed-record`      — the record failed {@link isSchedulerRecord} and was dropped; `record` = the
  *                               raw (unvalidated) value, for diagnostics.
- *   - `durable-scope-rekeyed` — the durable-scope compat arm rewrote this row's `scope` (1.11.0; before that
+ *   - `durable-scope-rekeyed` — the durable-scope compat arm rewrote this row's `scope` (2.0.0; before that
  *                               the rewrite happened silently every parse). */
 export type SchedulerParseWarning = {
     index: number;

package/dist/scheduler-store.js

@@ -56,7 +56,7 @@ export function isSchedulerRecord(v) {
  * 窄读判据:`lifetime` 不在本契约的显式键上(server 写侧作为 forward-compat 字段随行),按未知
  * 字段窄读——`"session"` 行是会话链键,零触碰;其余(缺席=durable 默认)按 durable 归一。
  *
- * 落日(1.11.0):删除它 = **持久数据**面的破坏(仍按旧键存着的 durable 行会就此找不回),所以不能在
+ * 落日(2.0.0):删除它 = **持久数据**面的破坏(仍按旧键存着的 durable 行会就此找不回),所以不能在
  * minor 上一删了事 —— 归下一个 MAJOR,按持久数据的规矩办(响亮拒收 + 一次性迁移)。在那之前,本版把
  * 这次重写从**静默**改成**出声**(`durable-scope-rekeyed`,带改写前后):关窗的前提是有人能证明它
  * 已经不再触发,而不是有人记得它还在。

package/dist/types.d.ts

@@ -125,7 +125,7 @@ export interface ParseTransparentKey {
  * 五行同义散文 ×3,没有任何一处能回答「一共有几个这样的键、分别归谁校验」。那正是「修法给每个新键加一条
  * 特判」的形。这张表把那段理由收成一处:键在这里登记,JSDoc 只留一行指过来。
  *
- * 1.11.0 起整域 all-or-nothing 已按类改成逐条容错(坏条目逐条丢、同域其余条目存活),所以「设形判据
+ * 2.0.0 起整域 all-or-nothing 已按类改成逐条容错(坏条目逐条丢、同域其余条目存活),所以「设形判据
  * 会抹掉整域」这条**理由本身已经弱化** —— 但登记表要回答的问题没变:这些键的形归谁校验。新键要不要
  * 解析透明,按「本包是不是那张形表的属主」判,不再按「怕连坐」判。
  *
@@ -4812,7 +4812,7 @@ export type ExecutionPolicy = z.infer<typeof ExecutionPolicy>;
  *  center mint 端点)统一产 **uuidv7**。36 字符,天然满足 design/142 §1.2 段编码 64 上限。
  *  SINGLE-SOURCE 纪律:本常量是引擎那条正则的**自持镜像**(本仓不带引擎运行时依赖轴),对拍走 dev-only
  *  conformance(never a runtime import,EffectiveKey/coreTypes 先例)。
- *  1.11.0:drift-lock 已建(`test/upstream-drift.test.ts` ③)—— pattern 必须与引擎逐字相同,唯一成文的差是
+ *  2.0.0:drift-lock 已建(`test/upstream-drift.test.ts` ③)—— pattern 必须与引擎逐字相同,唯一成文的差是
  *  flags:本常量刻意**不带** `i`,因为它是登记簿 Record 的**键**,大小写不同的同一个 UUID 会变成两条登记行
  *  (同一 project 双注册);引擎侧是识别语义(读 marker / 找回身份),放宽合理。 */
 export declare const PROJECT_ID_REGEX: RegExp;

package/dist/types.js

@@ -301,7 +301,7 @@ export const SealedApiKey = z.object({
  * 五行同义散文 ×3,没有任何一处能回答「一共有几个这样的键、分别归谁校验」。那正是「修法给每个新键加一条
  * 特判」的形。这张表把那段理由收成一处:键在这里登记,JSDoc 只留一行指过来。
  *
- * 1.11.0 起整域 all-or-nothing 已按类改成逐条容错(坏条目逐条丢、同域其余条目存活),所以「设形判据
+ * 2.0.0 起整域 all-or-nothing 已按类改成逐条容错(坏条目逐条丢、同域其余条目存活),所以「设形判据
  * 会抹掉整域」这条**理由本身已经弱化** —— 但登记表要回答的问题没变:这些键的形归谁校验。新键要不要
  * 解析透明,按「本包是不是那张形表的属主」判,不再按「怕连坐」判。
  *
@@ -634,7 +634,7 @@ export const ScenarioEntry = z.object({
     // registry field would become an ambiguous precedence channel」):配置域 prompt 单入口=center
     // prompts binding(scenario 维度);引擎 API 层 TaskSpec.systemPrompt 保留(不同层,勿混)。
     // 现网无用户直删;z.object 非 strict ⇒ 存量数据带 prompt 被 strip,parse 不炸。
-    // 落日(1.11.0):本条是**纯墓碑**(零代码,靠 strip 生效),没有要删的兼容码;它留在这里的唯一作用
+    // 落日(2.0.0):本条是**纯墓碑**(零代码,靠 strip 生效),没有要删的兼容码;它留在这里的唯一作用
     // 是让下一个读到这段 schema 的人知道 `prompt` 这个名字曾经在这里、别再铸回来。0.19.0 起存量文档带
     // 它会被 `unknown-keys-dropped` 点名,所以「还有人在写它」是可观察的,不靠记忆。
     enabled: z.boolean().default(true),
@@ -1336,7 +1336,7 @@ export const ExecutionPolicy = z.object({
  *  center mint 端点)统一产 **uuidv7**。36 字符,天然满足 design/142 §1.2 段编码 64 上限。
  *  SINGLE-SOURCE 纪律:本常量是引擎那条正则的**自持镜像**(本仓不带引擎运行时依赖轴),对拍走 dev-only
  *  conformance(never a runtime import,EffectiveKey/coreTypes 先例)。
- *  1.11.0:drift-lock 已建(`test/upstream-drift.test.ts` ③)—— pattern 必须与引擎逐字相同,唯一成文的差是
+ *  2.0.0:drift-lock 已建(`test/upstream-drift.test.ts` ③)—— pattern 必须与引擎逐字相同,唯一成文的差是
  *  flags:本常量刻意**不带** `i`,因为它是登记簿 Record 的**键**,大小写不同的同一个 UUID 会变成两条登记行
  *  (同一 project 双注册);引擎侧是识别语义(读 marker / 找回身份),放宽合理。 */
 export const PROJECT_ID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/settings-schema",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "Sema settings schema — pure config contract (zod domains + effective-config + roster resolution + ref-integrity + remoteExec) shared by sema-registry, sema-server, and the TOC desktop/CLI. One source of truth. (Renamed at 1.0.0 from @sema-agent/registry-core — name and docs only, no behavior change; note the range moves 0.19.0 -> 1.0.0, so a dependency must become ^1.0.0. The old names @sema-agent/registry-core <=0.19.0 and @sema-ai/registry-core remain published, frozen, for migration.)",
   "type": "module",
   "license": "BUSL-1.1",