@sema-agent/settings-schema 6.2.0 → 6.4.0

package/conformance/cases/c46-s811-host-name-url-userinfo-characterization/expected.json

@@ -0,0 +1,88 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": [
+          {
+            "approved": false,
+            "drain": false,
+            "enabled": true,
+            "labels": [],
+            "name": "ok-host"
+          }
+        ]
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "hosts",
+        "droppedNames": [
+          "https://admin:hunter2@hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh…"
+        ],
+        "kind": "hosts-grandfathered"
+      }
+    ],
+    "metadata": {
+      "version": 17,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 2617555914511015
+  }
+}

package/conformance/cases/c46-s811-host-name-url-userinfo-characterization/input.json

@@ -0,0 +1,18 @@
+{
+  "meta": {
+    "version": 17,
+    "updatedAt": "2026-09-27T00:00:00.000Z"
+  },
+  "domains": {
+    "hosts": {
+      "hosts": [
+        {
+          "name": "ok-host"
+        },
+        {
+          "name": "https://admin:hunter2@hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh.com"
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c46-s811-host-name-url-userinfo-characterization/meta.json

@@ -0,0 +1,6 @@
+{
+  "contributor": "contract",
+  "claim": "🚧 S-811 特征格(既有,非回归;本版刻意不修,设计随 S-809 三表归一):超长主机名 `https://admin:hunter2@hhh…h.com`(81 字)被 `hosts-grandfathered` 按名剔掉,`droppedNames` 的标签过出门那一道 —— 但那一道(`redactSecrets`)不查 URL userinfo,于是 63 字标签里原样带着 `admin:hunter2`。本条把**今天的读数**钉成金样:S-811 修后(自由文本面加 userinfo 判定)本条翻红 —— 届时金样改成 `droppedNames: [\"[redacted-secret]\"]`、meta.secrets 补上 `hunter2`,这一格就从特征钉变成护栏。",
+  "firstRedOn": [],
+  "note": "车PE(2026-09-27)按主会话令加(codex 验修腿 [high] S-811)。刻意**不**在 secrets 里登 `hunter2`:登了,告警面零命中门会把今天的现状判红 —— 现状要能如实入库,修复时一并补。"
+}

package/conformance/cases/c47-s811-roles-key-url-userinfo-characterization/expected.json

@@ -0,0 +1,98 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "keep-id",
+            "name": "keep",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {
+          "summarize": {
+            "model": "keep"
+          }
+        },
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "kind": "entry-dropped",
+        "path": [
+          "roles",
+          "https://admin:hunter2@db.example.com/x"
+        ]
+      }
+    ],
+    "metadata": {
+      "version": 18,
+      "updatedAt": "2026-09-27T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 715023802301241
+  }
+}

package/conformance/cases/c47-s811-roles-key-url-userinfo-characterization/input.json

@@ -0,0 +1,26 @@
+{
+  "meta": {
+    "version": 18,
+    "updatedAt": "2026-09-27T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "keep",
+          "provider": "openai",
+          "id": "keep-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        }
+      ],
+      "roles": {
+        "summarize": {
+          "model": "keep"
+        },
+        "https://admin:hunter2@db.example.com/x": {
+          "model": "keep"
+        }
+      }
+    }
+  }
+}

package/conformance/cases/c47-s811-roles-key-url-userinfo-characterization/meta.json

@@ -0,0 +1,6 @@
+{
+  "contributor": "contract",
+  "claim": "🚧 S-811 特征格(既有,非回归;本版刻意不修,设计随 S-809 三表归一):坏 roles 键 `https://admin:hunter2@db.example.com/x` 被逐条丢掉,坐标段与 zod 回显的 received / message 都只过 `redactSecrets`,它不查 URL userinfo,于是坐标 `[\"roles\", \"https://admin:hunter2@db.example.com/x\"]` 原样出门(错误句同带)。同一个串作身份 6.3.0 起不可披露(身份面有 userinfo 否决),自由文本面没有 —— 本条把今天的读数钉成金样:S-811 修后本条翻红,届时坐标段改成 `[redacted-secret]`、meta.secrets 补上 `hunter2`。",
+  "firstRedOn": [],
+  "note": "车PE(2026-09-27)按主会话令加(codex 验修腿 [high] S-811)。刻意**不**在 secrets 里登 `hunter2`(登了即判红今天的现状)。"
+}

package/conformance/cases/c48-s935-model-headers-transported/expected.json

@@ -0,0 +1,115 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "anthropic-messages",
+            "apiKeyEnv": "ANTHROPIC_API_KEY",
+            "enabled": true,
+            "headers": {
+              "anthropic-beta": "context-1m-2025-08-07"
+            },
+            "id": "claude-x",
+            "name": "claude-1m",
+            "provider": "anthropic",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          },
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "headers": [
+              "Anthropic-Beta: not-a-header-bag"
+            ],
+            "id": "gw-id",
+            "name": "gw",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          },
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "plain-id",
+            "name": "plain",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-10-01T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 1883250445565322
+  }
+}

package/conformance/cases/c48-s935-model-headers-transported/input.json

@@ -0,0 +1,37 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-10-01T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "claude-1m",
+          "provider": "anthropic",
+          "api": "anthropic-messages",
+          "id": "claude-x",
+          "apiKeyEnv": "ANTHROPIC_API_KEY",
+          "headers": {
+            "anthropic-beta": "context-1m-2025-08-07"
+          }
+        },
+        {
+          "name": "gw",
+          "provider": "openai",
+          "id": "gw-id",
+          "apiKeyEnv": "OPENAI_API_KEY",
+          "headers": [
+            "Anthropic-Beta: not-a-header-bag"
+          ]
+        },
+        {
+          "name": "plain",
+          "provider": "openai",
+          "id": "plain-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c48-s935-model-headers-transported/meta.json

@@ -0,0 +1,6 @@
+{
+  "contributor": "contract",
+  "claim": "S-935(6.4.0):`models[].headers` 是解析透明键(与 `compat` 同一只变换)⇒ 三读腿**逐字交出、零告警**,不剥、不报 `unknown-keys-dropped`;并且本包**不做形校验** —— 写在 openai 线路上的数组形 `headers`(非规范大小写的名、根本不是头袋)照样逐字过,形与线路归 sema-server 的目录条目判据。任一腿把它剥掉,经生产配置通道写下的附加请求头(开 1M 上下文的 `anthropic-beta`)就到不了 server 目录且零告警;任一腿对它做形校验,就是本包复述了 server 的白名单(两个写者)。第三条不带 `headers` 的条目是负控:不铸键。",
+  "firstRedOn": [],
+  "note": "车SL(2026-10-01)红先:6.3.0 读腿在本条上三腿同红 —— 两条带 `headers` 的条目都被剥掉该键,`unknown-keys-dropped` 点名 `[\"models\",0,\"headers\"]` / `[\"models\",1,\"headers\"]`(实测读数见车SL 收车档)。firstRedOn 为空:`conformance/historical/` 的阶梯证据(2.1.0 及更早)真跑于本条入库之前,没有本条的读数,那一栏只收 historical 真跑,不手填(c41 同口径)。"
+}

package/conformance/cases/c49-s935-model-headers-secret-entry-dropped/expected.json

@@ -0,0 +1,98 @@
+{
+  "domains": {
+    "outcome": "effective",
+    "effective": {
+      "collab": {
+        "templates": []
+      },
+      "entitlement": {
+        "budgetGroups": [],
+        "groupBindings": [],
+        "subjects": [],
+        "tiers": []
+      },
+      "execution": {
+        "allowedLanes": [
+          "host"
+        ],
+        "required": false
+      },
+      "governance": {},
+      "hosts": {
+        "hosts": []
+      },
+      "limits": {},
+      "mcp": {
+        "servers": []
+      },
+      "models": {
+        "models": [
+          {
+            "api": "openai-completions",
+            "apiKeyEnv": "OPENAI_API_KEY",
+            "enabled": true,
+            "id": "gw-id",
+            "name": "gw",
+            "provider": "openai",
+            "quotaWeight": 1,
+            "reasoning": false,
+            "tier": "standard",
+            "vision": false
+          }
+        ],
+        "roles": {},
+        "tierGroups": []
+      },
+      "plugins": {
+        "plugins": []
+      },
+      "projects": {
+        "projects": {}
+      },
+      "prompts": {
+        "bindings": []
+      },
+      "rosters": {
+        "rosters": []
+      },
+      "runtime": {},
+      "scenarios": {
+        "scenarios": []
+      },
+      "skills": {
+        "skills": []
+      },
+      "systems": {
+        "systems": []
+      },
+      "workers": {
+        "workers": []
+      }
+    },
+    "warnings": [
+      {
+        "domain": "models",
+        "identity": {
+          "id": "claude-x",
+          "name": "claude-1m"
+        },
+        "kind": "entry-dropped",
+        "path": [
+          "models",
+          0
+        ]
+      }
+    ],
+    "metadata": {
+      "version": 7,
+      "updatedAt": "2026-10-01T00:00:00.000Z"
+    }
+  },
+  "wire": {
+    "derive": true
+  },
+  "localRoot": {
+    "derive": true,
+    "localVersion": 496785931148953
+  }
+}

package/conformance/cases/c49-s935-model-headers-secret-entry-dropped/input.json

@@ -0,0 +1,28 @@
+{
+  "meta": {
+    "version": 7,
+    "updatedAt": "2026-10-01T00:00:00.000Z"
+  },
+  "domains": {
+    "models": {
+      "models": [
+        {
+          "name": "claude-1m",
+          "provider": "anthropic",
+          "api": "anthropic-messages",
+          "id": "claude-x",
+          "apiKeyEnv": "ANTHROPIC_API_KEY",
+          "headers": {
+            "x-api-key": "sk-ant-api03-FAKES935CORPUS000000000000000000"
+          }
+        },
+        {
+          "name": "gw",
+          "provider": "openai",
+          "id": "gw-id",
+          "apiKeyEnv": "OPENAI_API_KEY"
+        }
+      ]
+    }
+  }
+}

package/conformance/cases/c49-s935-model-headers-secret-entry-dropped/meta.json

@@ -0,0 +1,9 @@
+{
+  "contributor": "contract",
+  "claim": "S-935(6.4.0):`models[].headers` 里粘了一把密钥形值(`x-api-key: sk-ant-…`)⇒ 与 `compat` 同一只自由形安全判据拒 ⇒ 该条目**逐条丢**(`entry-dropped`,坐标 `[\"models\",0]`)、兄弟条目幸存、告警面零回显那把钥匙。打的是两种读错:① 腿把 `headers` 当未知键剥掉(6.3.0 形)⇒ 条目带着「看起来干净」的形幸存,明文凭据却已经进了持久层且没人拒;② 腿对 `headers` 另起一套判据(或把拒句拼上值)⇒ 告警面带出密钥。",
+  "firstRedOn": [],
+  "secrets": [
+    "sk-ant-api03-FAKES935CORPUS000000000000000000"
+  ],
+  "note": "车SL(2026-10-01)红先:6.3.0 读腿在本条上三腿同红 —— 条目幸存(`headers` 被剥)+ `unknown-keys-dropped` 点名 `[\"models\",0,\"headers\"]`,没有 `entry-dropped`(实测读数见车SL 收车档)。firstRedOn 为空:同 c48 / c41 口径(historical 阶梯证据真跑于本条入库之前,不手填)。"
+}

package/conformance/cases/cli01-model-name-nfc-vs-nfd/expected.json

@@ -72,10 +72,6 @@
     "warnings": [
       {
         "domain": "models",
-        "identity": {
-          "id": "café-id",
-          "name": "café"
-        },
         "kind": "entry-dropped",
         "path": [
           "models",
@@ -84,10 +80,6 @@
       },
       {
         "domain": "models",
-        "identity": {
-          "id": "café-id",
-          "name": "café"
-        },
         "kind": "entry-dropped",
         "path": [
           "models",

package/conformance/cases/cli01-model-name-nfc-vs-nfd/meta.json

@@ -5,5 +5,6 @@
     "settings-schema@1.0.0",
     "settings-schema@1.10.0",
     "settings-schema@1.5.0"
-  ]
+  ],
+  "note": "6.3.0(车PE,2026-09-27):被丢条目的身份改走白名单闭形 `DISCLOSABLE_IDENTITY_RE`(`A-Za-z0-9._:/@+-`,1–256)—— 两条的 name / id 含非 ASCII 字母(é / 组合符),落在集外 ⇒ 按无名处置,`identity` 键缺席;两条仍各自按下标点名(坐标照旧),effective 与三腿一致性不动。expected.json 随之重 bless,diff 只少两处 identity。"
 }

package/conformance/cases/cli02-control-and-zero-width-chars/expected.json

@@ -85,10 +85,6 @@
     "warnings": [
       {
         "domain": "models",
-        "identity": {
-          "id": "a\u0007b-id",
-          "name": "a\u0007b"
-        },
         "kind": "entry-dropped",
         "path": [
           "models",
@@ -97,10 +93,6 @@
       },
       {
         "domain": "models",
-        "identity": {
-          "id": "zero​width-id",
-          "name": "zero​width"
-        },
         "kind": "entry-dropped",
         "path": [
           "models",

package/conformance/cases/cli02-control-and-zero-width-chars/meta.json

@@ -5,5 +5,6 @@
     "settings-schema@1.0.0",
     "settings-schema@1.10.0",
     "settings-schema@1.5.0"
-  ]
+  ],
+  "note": "6.3.0(车PE,2026-09-27):被丢条目的身份改走白名单闭形 `DISCLOSABLE_IDENTITY_RE`(`A-Za-z0-9._:/@+-`,1–256)—— 两条的 name / id 含控制字符(BEL)/ 零宽空格,落在集外 ⇒ 按无名处置,`identity` 键缺席;两条仍各自按下标点名(坐标照旧),effective 与三腿一致性不动。expected.json 随之重 bless,diff 只少两处 identity。"
 }