@sema-agent/settings-schema 6.1.0 → 6.3.0

package/conformance/cases/c42-s792-unknown-key-secret-redacted/expected.json

@@ -0,0 +1,120 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {
+        "maxToolCallz": 3,
+        "sk-live-FAKEC42CARRIEDKEY000000000": 5
+      },
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "models",
+            0,
+            "[redacted-secret]"
+          ],
+          [
+            "models",
+            0,
+            "typoKey"
+          ],
+          [
+            "[redacted-secret]"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "limits",
+        "keys": [
+          [
+            "[redacted-secret]"
+          ],
+          [
+            "maxToolCallz"
+          ]
+        ],
+        "kind": "unknown-keys-carried"
+      }
+    ],
+    "metadata": {
+      "version": 13,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 547314222926085
+  }
+}

package/conformance/cases/c42-s792-unknown-key-secret-redacted/input.json

@@ -0,0 +1,25 @@
+{
+  "meta": {
+    "version": 13,
+    "updatedAt": "2026-09-27T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY",
+          "ghp_FAKEC42NESTEDUNKNOWNKEY00000000000000": 1,
+          "typoKey": 1
+        }
+      ],
+      "sk-live-FAKEC42TOPUNKNOWNKEY0000": 1
+    },
+    "limits": {
+      "sk-live-FAKEC42CARRIEDKEY000000000": 5,
+      "maxToolCallz": 3
+    }
+  }
+}

package/conformance/cases/c42-s792-unknown-key-secret-redacted/meta.json

@@ -0,0 +1,11 @@
+{
+  "contributor": "contract",
+  "claim": "6.3.0(codex gpt-6-astra r1 F2,发版方裁并入 S-792):未知键告警的坐标是**用户写的键名**,完全可能就是一条粘错位置的凭据 —— 0.19.0 起 `droppedKeys` / `carriedUnknownKeys` 铸 `keys` 从不过脱敏器,`sk-` / `ghp_` 形的键名原样进 `unknown-keys-dropped` / `unknown-keys-carried` 与投影。三处:models 顶层未知键、models 条目内嵌套未知键(strip 域)、limits 承运的未知键(open-world 域)⇒ 坐标段 `[redacted-secret]`,告警面零命中语料秘密;良性拼错键(`typoKey` / `maxToolCallz`)逐字点名(正控);承运进 effective 的值与键照旧逐字(承运是契约,告警才是本包铸的新文本)。",
+  "firstRedOn": [],
+  "secrets": [
+    "sk-live-FAKEC42TOPUNKNOWNKEY0000",
+    "ghp_FAKEC42NESTEDUNKNOWNKEY00000000000000",
+    "sk-live-FAKEC42CARRIEDKEY000000000"
+  ],
+  "note": "车PE(2026-09-27)红先:加本条时 6.2.0 / 6.3.0 修前读腿在三腿上报告警差 + 秘密扫描命中 3 条。变异门为坐标出门那一道(`outgoingPath`)登记靶:去掉脱敏 ⇒ 本条与 c10 / c40 / c41 红。firstRedOn 为空:historical 阶梯证据真跑于本条入库之前,那一栏只收 historical 真跑。"
+}

package/conformance/cases/c43-s792-form-and-deep-encoded-pem/expected.json

@@ -0,0 +1,137 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {
+          "summarize": {
+            "model": "keep"
+          }
+        },
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "identity": {
+          "name": "flat-plus-pem"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          1
+        ]
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "id": "o3-mini+high",
+          "name": "plus-control"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          2
+        ]
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ]
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ]
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ]
+      }
+    ],
+    "metadata": {
+      "version": 14,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 223987850021483
+  }
+}

package/conformance/cases/c43-s792-form-and-deep-encoded-pem/input.json

@@ -0,0 +1,44 @@
+{
+  "meta": {
+    "version": 14,
+    "updatedAt": "2026-09-27T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        },
+        {
+          "name": "flat-plus-pem",
+          "provider": "openai",
+          "id": "-----BEGIN+PRIVATE+KEY-----MC4CAQAwBQYDK2VwBCIEIFAKEC43FLATPLUSIDBODY0000000000000000000000-----END+PRIVATE+KEY-----",
+          "apiKeyEnv": "not an env name"
+        },
+        {
+          "name": "plus-control",
+          "provider": "openai",
+          "id": "o3-mini+high",
+          "apiKeyEnv": "not an env name"
+        }
+      ],
+      "roles": {
+        "summarize": {
+          "model": "keep"
+        },
+        "key=-----BEGIN+PRIVATE+KEY-----%0AMC4CAQAwBQYDK2VwBCIEIFAKEC43FORMENCODEDROLEKEYBODY00000000000000%0A-----END+PRIVATE+KEY-----%0A": {
+          "model": "keep"
+        },
+        "key=-----BEGIN%25252520PRIVATE%25252520KEY-----%2525250AMC4CAQAwBQYDK2VwBCIEIFAKEC43DEEPENCODEDROLEKEYBODY00000000000000%2525250A-----END%25252520PRIVATE%25252520KEY-----%2525250A": {
+          "model": "keep"
+        },
+        "key=-----BEGIN%2525252520PRIVATE%2525252520KEY-----%252525250AMC4CAQAwBQYDK2VwBCIEIFAKEC43FIVELAYERROLEKEYBODY0000000000000000%252525250A-----END%2525252520PRIVATE%2525252520KEY-----%252525250A": {
+          "model": "keep"
+        }
+      }
+    }
+  }
+}

package/conformance/cases/c43-s792-form-and-deep-encoded-pem/meta.json

@@ -0,0 +1,12 @@
+{
+  "contributor": "contract",
+  "claim": "6.3.0(codex gpt-6-astra r1 F1 部分修,S-792):归一化那一处的两件事压在语料上。① `+` 代空格:扁平无换行的 `-----BEGIN+PRIVATE+KEY-----<base64>-----END+PRIVATE+KEY-----` 全在身份白名单字符集内,6.2.0 起它过身份与 refusal 两谓词 ⇒ 被丢条目的 id 必须不带(`secretScanForms` 把 `+` 读作空格的形交 PEM 头判,身份否决随之);URLSearchParams 形(`+` 代空格 + `%0A`)作 roles 坏键 ⇒ 坐标段整段扣、error 不带私钥。② 解码界上 fail-closed:四层 / 五层百分号编码作 roles 坏键 ⇒ 三层走完仍能再解,整串扣(codex r2 起展示侧的边界读法对末层再解一层,四层那条因此也被 PEM 头判扣下;五层那条只有「没走完」这一位扣得住 —— 变异门的 `unresolved` 靶靠它)。正控:`o3-mini+high` 作 id 逐字带出(`+` 在真实 id 里照旧可披露)。",
+  "firstRedOn": [],
+  "secrets": [
+    "MC4CAQAwBQYDK2VwBCIEIFAKEC43FLATPLUSIDBODY0000000000000000000000",
+    "MC4CAQAwBQYDK2VwBCIEIFAKEC43FORMENCODEDROLEKEYBODY00000000000000",
+    "MC4CAQAwBQYDK2VwBCIEIFAKEC43DEEPENCODEDROLEKEYBODY00000000000000",
+    "MC4CAQAwBQYDK2VwBCIEIFAKEC43FIVELAYERROLEKEYBODY0000000000000000"
+  ],
+  "note": "车PE(2026-09-27)红先:加本条时 6.3.0 修前(A 已修、B 未修)读腿在三腿上报告警差 + 秘密扫描命中。变异门为 `secretScanForms` 的 `+` 读法与 `redactSecrets` 的 `unresolved` 一位各登记一靶,本条杀。firstRedOn 为空:historical 阶梯证据真跑于本条入库之前,那一栏只收 historical 真跑。 codex r2 收敛(车PE 同日):边界读法上线后四层那条不再单靠 `unresolved`,追加五层一条(`FAKEC43FIVELAYER…`)使该靶仍有语料杀。"
+}

package/conformance/cases/c44-s792-utf8-escape-glued-token/expected.json

@@ -0,0 +1,115 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {
+          "summarize": {
+            "model": "keep"
+          }
+        },
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ]
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "path%2Fto%E4%B8%AD"
+        ]
+      },
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "[redacted-secret]"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      }
+    ],
+    "metadata": {
+      "version": 15,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 507135464587988
+  }
+}

package/conformance/cases/c44-s792-utf8-escape-glued-token/input.json

@@ -0,0 +1,30 @@
+{
+  "meta": {
+    "version": 15,
+    "updatedAt": "2026-09-27T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        }
+      ],
+      "roles": {
+        "summarize": {
+          "model": "keep"
+        },
+        "key=%C2%A0sk-live-FAKEC44NBSPGLUEDROLEKEY000": {
+          "model": "keep"
+        },
+        "path%2Fto%E4%B8%AD": {
+          "model": "keep"
+        }
+      },
+      "note:%E2%80%8Bghp_FAKEC44ZWSPGLUEDUNKNOWNKEY00000000000": 1
+    }
+  }
+}

package/conformance/cases/c44-s792-utf8-escape-glued-token/meta.json

@@ -0,0 +1,10 @@
+{
+  "contributor": "contract",
+  "claim": "6.3.0(codex gpt-6-astra r2 F-r2-1 [high],S-792):转义的 UTF-8 字节粘在密钥形令牌前面(`%C2%A0` = NBSP、`%E2%80%8B` = 零宽空格)—— 逐个 %HH 解码解不开多字节,十六进制位粘上令牌(`A0sk-live-…`),探测器与脱敏器都看不见令牌边界,而任何标准解码器都还原得出。作 roles 坏键(坐标 + zod received / message)与 models 顶层未知键名 ⇒ 坐标段 `[redacted-secret]`,告警面零命中语料秘密。正控:`path%2Fto%E4%B8%AD`(编码的中文、不带秘密)作 roles 坏键照旧逐字进坐标。",
+  "firstRedOn": [],
+  "secrets": [
+    "sk-live-FAKEC44NBSPGLUEDROLEKEY000",
+    "ghp_FAKEC44ZWSPGLUEDUNKNOWNKEY00000000000"
+  ],
+  "note": "车PE(2026-09-27)codex r2 收敛,红先:加本条时(B 已修)读腿三腿告警差 + 秘密扫描命中 2 条。变异门为 `secretScanForms` 的边界读法登记一靶,本条杀。firstRedOn 为空:historical 阶梯证据真跑于本条入库之前。"
+}

package/conformance/cases/c45-s792-identity-bounds-and-decode-depth/expected.json

@@ -0,0 +1,185 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": [
+          {
+            "approved": false,
+            "drain": false,
+            "enabled": true,
+            "labels": [],
+            "name": "ok-host"
+          }
+        ]
+      },
+      "limits": {},
+      "mcp": {
+        "servers": [
+          {
+            "elicitation": false,
+            "enabled": true,
+            "name": "ok-server",
+            "rosters": [],
+            "scenarios": [],
+            "transport": {
+              "args": [
+                "server.js"
+              ],
+              "command": "node",
+              "kind": "stdio"
+            }
+          }
+        ]
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "hosts",
+        "droppedNames": [
+          "[redacted-secret]"
+        ],
+        "kind": "hosts-grandfathered"
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "id": "cap-256-id",
+          "name": "maaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          1
+        ]
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "id": "cap-257-id"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          2
+        ]
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "name": "db-url-id"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          3
+        ]
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "id": "https://registry.example.com/@scope/pkg",
+          "name": "scope-path-id"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          4
+        ]
+      },
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk"
+          ],
+          [
+            "[redacted-secret]"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "mcp",
+        "identity": {
+          "name": "triple-encoded-arg"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "servers",
+          1
+        ]
+      }
+    ],
+    "metadata": {
+      "version": 16,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 3755850331161695
+  }
+}