@sema-agent/settings-schema 6.2.0 → 6.3.0

package/conformance/cases/c43-s792-form-and-deep-encoded-pem/expected.json

@@ -0,0 +1,137 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {
+          "summarize": {
+            "model": "keep"
+          }
+        },
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "identity": {
+          "name": "flat-plus-pem"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          1
+        ]
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "id": "o3-mini+high",
+          "name": "plus-control"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          2
+        ]
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ]
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ]
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ]
+      }
+    ],
+    "metadata": {
+      "version": 14,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 223987850021483
+  }
+}

package/conformance/cases/c43-s792-form-and-deep-encoded-pem/input.json

@@ -0,0 +1,44 @@
+{
+  "meta": {
+    "version": 14,
+    "updatedAt": "2026-09-27T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        },
+        {
+          "name": "flat-plus-pem",
+          "provider": "openai",
+          "id": "-----BEGIN+PRIVATE+KEY-----MC4CAQAwBQYDK2VwBCIEIFAKEC43FLATPLUSIDBODY0000000000000000000000-----END+PRIVATE+KEY-----",
+          "apiKeyEnv": "not an env name"
+        },
+        {
+          "name": "plus-control",
+          "provider": "openai",
+          "id": "o3-mini+high",
+          "apiKeyEnv": "not an env name"
+        }
+      ],
+      "roles": {
+        "summarize": {
+          "model": "keep"
+        },
+        "key=-----BEGIN+PRIVATE+KEY-----%0AMC4CAQAwBQYDK2VwBCIEIFAKEC43FORMENCODEDROLEKEYBODY00000000000000%0A-----END+PRIVATE+KEY-----%0A": {
+          "model": "keep"
+        },
+        "key=-----BEGIN%25252520PRIVATE%25252520KEY-----%2525250AMC4CAQAwBQYDK2VwBCIEIFAKEC43DEEPENCODEDROLEKEYBODY00000000000000%2525250A-----END%25252520PRIVATE%25252520KEY-----%2525250A": {
+          "model": "keep"
+        },
+        "key=-----BEGIN%2525252520PRIVATE%2525252520KEY-----%252525250AMC4CAQAwBQYDK2VwBCIEIFAKEC43FIVELAYERROLEKEYBODY0000000000000000%252525250A-----END%2525252520PRIVATE%2525252520KEY-----%252525250A": {
+          "model": "keep"
+        }
+      }
+    }
+  }
+}

package/conformance/cases/c43-s792-form-and-deep-encoded-pem/meta.json

@@ -0,0 +1,12 @@
+{
+  "contributor": "contract",
+  "claim": "6.3.0(codex gpt-6-astra r1 F1 部分修,S-792):归一化那一处的两件事压在语料上。① `+` 代空格:扁平无换行的 `-----BEGIN+PRIVATE+KEY-----<base64>-----END+PRIVATE+KEY-----` 全在身份白名单字符集内,6.2.0 起它过身份与 refusal 两谓词 ⇒ 被丢条目的 id 必须不带(`secretScanForms` 把 `+` 读作空格的形交 PEM 头判,身份否决随之);URLSearchParams 形(`+` 代空格 + `%0A`)作 roles 坏键 ⇒ 坐标段整段扣、error 不带私钥。② 解码界上 fail-closed:四层 / 五层百分号编码作 roles 坏键 ⇒ 三层走完仍能再解,整串扣(codex r2 起展示侧的边界读法对末层再解一层,四层那条因此也被 PEM 头判扣下;五层那条只有「没走完」这一位扣得住 —— 变异门的 `unresolved` 靶靠它)。正控:`o3-mini+high` 作 id 逐字带出(`+` 在真实 id 里照旧可披露)。",
+  "firstRedOn": [],
+  "secrets": [
+    "MC4CAQAwBQYDK2VwBCIEIFAKEC43FLATPLUSIDBODY0000000000000000000000",
+    "MC4CAQAwBQYDK2VwBCIEIFAKEC43FORMENCODEDROLEKEYBODY00000000000000",
+    "MC4CAQAwBQYDK2VwBCIEIFAKEC43DEEPENCODEDROLEKEYBODY00000000000000",
+    "MC4CAQAwBQYDK2VwBCIEIFAKEC43FIVELAYERROLEKEYBODY0000000000000000"
+  ],
+  "note": "车PE(2026-09-27)红先:加本条时 6.3.0 修前(A 已修、B 未修)读腿在三腿上报告警差 + 秘密扫描命中。变异门为 `secretScanForms` 的 `+` 读法与 `redactSecrets` 的 `unresolved` 一位各登记一靶,本条杀。firstRedOn 为空:historical 阶梯证据真跑于本条入库之前,那一栏只收 historical 真跑。 codex r2 收敛(车PE 同日):边界读法上线后四层那条不再单靠 `unresolved`,追加五层一条(`FAKEC43FIVELAYER…`)使该靶仍有语料杀。"
+}

package/conformance/cases/c44-s792-utf8-escape-glued-token/expected.json

@@ -0,0 +1,115 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {
+          "summarize": {
+            "model": "keep"
+          }
+        },
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "[redacted-secret]"
+        ]
+      },
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "path%2Fto%E4%B8%AD"
+        ]
+      },
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "[redacted-secret]"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      }
+    ],
+    "metadata": {
+      "version": 15,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 507135464587988
+  }
+}

package/conformance/cases/c44-s792-utf8-escape-glued-token/input.json

@@ -0,0 +1,30 @@
+{
+  "meta": {
+    "version": 15,
+    "updatedAt": "2026-09-27T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        }
+      ],
+      "roles": {
+        "summarize": {
+          "model": "keep"
+        },
+        "key=%C2%A0sk-live-FAKEC44NBSPGLUEDROLEKEY000": {
+          "model": "keep"
+        },
+        "path%2Fto%E4%B8%AD": {
+          "model": "keep"
+        }
+      },
+      "note:%E2%80%8Bghp_FAKEC44ZWSPGLUEDUNKNOWNKEY00000000000": 1
+    }
+  }
+}

package/conformance/cases/c44-s792-utf8-escape-glued-token/meta.json

@@ -0,0 +1,10 @@
+{
+  "contributor": "contract",
+  "claim": "6.3.0(codex gpt-6-astra r2 F-r2-1 [high],S-792):转义的 UTF-8 字节粘在密钥形令牌前面(`%C2%A0` = NBSP、`%E2%80%8B` = 零宽空格)—— 逐个 %HH 解码解不开多字节,十六进制位粘上令牌(`A0sk-live-…`),探测器与脱敏器都看不见令牌边界,而任何标准解码器都还原得出。作 roles 坏键(坐标 + zod received / message)与 models 顶层未知键名 ⇒ 坐标段 `[redacted-secret]`,告警面零命中语料秘密。正控:`path%2Fto%E4%B8%AD`(编码的中文、不带秘密)作 roles 坏键照旧逐字进坐标。",
+  "firstRedOn": [],
+  "secrets": [
+    "sk-live-FAKEC44NBSPGLUEDROLEKEY000",
+    "ghp_FAKEC44ZWSPGLUEDUNKNOWNKEY00000000000"
+  ],
+  "note": "车PE(2026-09-27)codex r2 收敛,红先:加本条时(B 已修)读腿三腿告警差 + 秘密扫描命中 2 条。变异门为 `secretScanForms` 的边界读法登记一靶,本条杀。firstRedOn 为空:historical 阶梯证据真跑于本条入库之前。"
+}

package/conformance/cases/c45-s792-identity-bounds-and-decode-depth/expected.json

@@ -0,0 +1,185 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": [
+          {
+            "approved": false,
+            "drain": false,
+            "enabled": true,
+            "labels": [],
+            "name": "ok-host"
+          }
+        ]
+      },
+      "limits": {},
+      "mcp": {
+        "servers": [
+          {
+            "elicitation": false,
+            "enabled": true,
+            "name": "ok-server",
+            "rosters": [],
+            "scenarios": [],
+            "transport": {
+              "args": [
+                "server.js"
+              ],
+              "command": "node",
+              "kind": "stdio"
+            }
+          }
+        ]
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "hosts",
+        "droppedNames": [
+          "[redacted-secret]"
+        ],
+        "kind": "hosts-grandfathered"
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "id": "cap-256-id",
+          "name": "maaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          1
+        ]
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "id": "cap-257-id"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          2
+        ]
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "name": "db-url-id"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          3
+        ]
+      },
+      {
+        "domain": "models",
+        "identity": {
+          "id": "https://registry.example.com/@scope/pkg",
+          "name": "scope-path-id"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          4
+        ]
+      },
+      {
+        "domain": "models",
+        "keys": [
+          [
+            "kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk"
+          ],
+          [
+            "[redacted-secret]"
+          ]
+        ],
+        "kind": "unknown-keys-dropped"
+      },
+      {
+        "domain": "mcp",
+        "identity": {
+          "name": "triple-encoded-arg"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "servers",
+          1
+        ]
+      }
+    ],
+    "metadata": {
+      "version": 16,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 3755850331161695
+  }
+}

package/conformance/cases/c45-s792-identity-bounds-and-decode-depth/input.json

@@ -0,0 +1,78 @@
+{
+  "meta": {
+    "version": 16,
+    "updatedAt": "2026-09-27T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        },
+        {
+          "name": "maaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "provider": "openai",
+          "id": "cap-256-id",
+          "apiKeyEnv": "not an env name"
+        },
+        {
+          "name": "maaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "provider": "openai",
+          "id": "cap-257-id",
+          "apiKeyEnv": "not an env name"
+        },
+        {
+          "name": "db-url-id",
+          "provider": "openai",
+          "id": "postgres://svc:FAKEC45USERINFOPW@db.internal/app",
+          "apiKeyEnv": "not an env name"
+        },
+        {
+          "name": "scope-path-id",
+          "provider": "openai",
+          "id": "https://registry.example.com/@scope/pkg",
+          "apiKeyEnv": "not an env name"
+        }
+      ],
+      "kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk": 1,
+      "kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk": 1
+    },
+    "mcp": {
+      "servers": [
+        {
+          "name": "ok-server",
+          "transport": {
+            "kind": "stdio",
+            "command": "node",
+            "args": [
+              "server.js"
+            ]
+          }
+        },
+        {
+          "name": "triple-encoded-arg",
+          "transport": {
+            "kind": "stdio",
+            "command": "node",
+            "args": [
+              "--token=%252573%25256B-live-FAKEC45TRIPLEENCODEDARG00"
+            ]
+          }
+        }
+      ]
+    },
+    "hosts": {
+      "hosts": [
+        {
+          "name": "ok-host"
+        },
+        {
+          "name": "sk-live-FAKEC45HOSTNAME000000000000000000000000000000000000000000000000000000000000"
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c45-s792-identity-bounds-and-decode-depth/meta.json

@@ -0,0 +1,11 @@
+{
+  "contributor": "contract",
+  "claim": "6.3.0(合并复审 opus 腿 L5 / M1 / M2 / L1,S-792):给语料里此前没有杀手的几道边补上 —— ① 长度上界 256(身份白名单与出门坐标段同一只常量):256 字的合法模型名被丢时身份照带 name、257 字不带;256 字的良性未知键名逐字点名、257 字整段 `[redacted-secret]`。② 解码层数 3(校验侧探测器):mcp stdio 参数里三重百分号编码的 `sk-` 形令牌照旧被拒、条目被丢(层数少一层就放行进 effective)。③ 身份否决里的 URL userinfo 判定:`postgres://svc:…@db…` 作被丢条目 id 不带;路径里的 `@`(`https://…/@scope/pkg`)照带。④ `hosts-grandfathered.droppedNames` 过同一道出门:`sk-live-…` 形超长主机名读 `[redacted-secret]`,不再是 63 字原文前缀。",
+  "firstRedOn": [],
+  "secrets": [
+    "FAKEC45USERINFOPW",
+    "sk-live-FAKEC45HOSTNAME",
+    "FAKEC45TRIPLEENCODEDARG00"
+  ],
+  "note": "车PE(2026-09-27)合并复审 opus 腿之后同轮加;是变异门的杀手语料,不是红先复现(对应的红先在 test/disclosable-identity-6.3.0.test.ts 的 M1 / M2 / L1 组)。变异门靶:`DISCLOSABLE_IDENTITY_MAX` 改大、`outgoingSegment` 去上界、`SECRET_SCAN_DECODE_LAYERS` 3 → 2、身份否决去 `carriesUserinfo`、`droppedNames` 不过出门那一道 —— 各由本条杀(逐靶实测见车PE 收车档)。firstRedOn 为空:historical 阶梯证据真跑于本条入库之前。"
+}