@sema-agent/server 1.220.0 → 1.221.0

package/dist/main.js

@@ -18,7 +18,7 @@ import { withLedgerRecording } from "./plugins/send-file-ledger.js";
 import { basename, resolve } from "node:path";
 import { stat as fsStat, readFile as fsReadFile } from "node:fs/promises";
 import { buildEnvFacts, egressForRemoteExec, ensureScratchpadDir, purgeScratchpadDir, sweepStaleScratchpads } from "./env-facts.js";
-import { normalizeSuggestNextPrompts, normalizeResilience, normalizeAttachments, normalizeResumeAtMode, resolveTaskLimits, taskAgentsSpecFragment, retainBackgroundProcessesFromBody } from "./spec-fields.js";
+import { normalizeSuggestNextPrompts, normalizeResilience, normalizeAttachments, normalizeResumeAtMode, resolveTaskLimits, taskAgentsSpecFragment, retainBackgroundProcessesFromBody, toolNameListFromBody } from "./spec-fields.js";
 import { createBrain, brainSummary } from "./brain.js";
 import { loadConfig, logConfigDiagnostics } from "./config.js";
 import { resourceSuspendOptIn } from "./resource-suspend.js";
@@ -69,7 +69,7 @@ import { QuestionCoordinator } from "./question.js";
 import { ToolApprovalCoordinator } from "./tool-approval.js";
 import { applyEffective, mutateInPlace, logEffectiveDiff, applyCenterSkills, resolveMcpServers, mcpForScenario, restartReasons } from "./sema-registry.js";
 import { ensureSealedKeyStore, reportExecutionPublicKey } from "./sealed-key.js";
-import { createConfigProvider } from "./config-provider.js";
+import { createConfigProvider, raceBootFetch, BOOT_FETCH_DEFERRED } from "./config-provider.js";
 import { createPrincipalCapsClient, gateExecutionLane, scopedTokenNeedsWorker, applyObserverEnvOptIn } from "./runtime-caps-resolver.js";
 import { applyRuntimeGovernance, stripDelegationTools } from "./runtime-governance.js";
 import { parseTaskSettings, applyTaskSettings, coercePermissionMode, withPermissionMode, effectiveThinking } from "./task-settings.js";
@@ -154,10 +154,22 @@ async function main() {
             logger.info("model_roster_landed", { note: "ready gate open — billable submissions accepted" });
         }
     };
+    let bootConfigPending;
     if (configProvider) {
         const dryRun = cc?.dryRun ?? false;
         try {
-            const r = await configProvider.fetchEffective(undefined);
+            const bootFetch = configProvider.fetchEffective(undefined);
+            const raced = await raceBootFetch(bootFetch, config.configBootFetchBudgetMs);
+            if (raced === BOOT_FETCH_DEFERRED) {
+                bootConfigPending = bootFetch;
+                bootFetch.catch(() => { });
+                logger.warn("config_boot_fetch_deferred", {
+                    source: configProvider.kind,
+                    budgetMs: config.configBootFetchBudgetMs,
+                    note: "center slow/unreachable — serving on the env fallback now; the pull continues in the background and hot-applies on arrival (roster gate opens then). Raise CONFIG_BOOT_FETCH_BUDGET_MS to block boot instead.",
+                });
+            }
+            const r = raced === BOOT_FETCH_DEFERRED ? null : raced;
             if (r) {
                 const bootClean = (r.domainErrors ?? []).length === 0;
                 if (bootClean)
@@ -1042,67 +1054,68 @@ async function main() {
     if (configProvider) {
         const ccRef = config.configCenter;
         let refreshInFlight = false;
-        const ccTimer = setInterval(() => {
-            void (async () => {
-                if (refreshInFlight)
-                    return;
-                refreshInFlight = true;
-                try {
-                    const r = await configProvider.fetchEffective(ccEtag);
-                    if (r) {
-                        const badDomains = [...new Set((r.domainErrors ?? []).map((de) => de.domain))].sort().join(",");
-                        if (badDomains) {
-                            if (lastRejectedCandidate?.version !== r.effective.version || lastRejectedCandidate.domains !== badDomains) {
-                                lastRejectedCandidate = { version: r.effective.version, domains: badDomains, at: Date.now() };
-                                logger.warn("config_candidate_rejected", {
-                                    version: r.effective.version,
-                                    domains: badDomains,
-                                    errors: (r.domainErrors ?? []).map((de) => ({ domain: de.domain, error: de.error })),
-                                    lkgVersion: latestEffective?.version ?? "(env)",
-                                    note: "candidate rejected whole (§9.5-5) — live config keeps the last-known-good; fix the named files to unblock",
-                                });
-                            }
-                            return;
+        const refreshTick = async () => {
+            if (refreshInFlight)
+                return;
+            refreshInFlight = true;
+            try {
+                const r = await configProvider.fetchEffective(ccEtag);
+                if (r) {
+                    const badDomains = [...new Set((r.domainErrors ?? []).map((de) => de.domain))].sort().join(",");
+                    if (badDomains) {
+                        if (lastRejectedCandidate?.version !== r.effective.version || lastRejectedCandidate.domains !== badDomains) {
+                            lastRejectedCandidate = { version: r.effective.version, domains: badDomains, at: Date.now() };
+                            logger.warn("config_candidate_rejected", {
+                                version: r.effective.version,
+                                domains: badDomains,
+                                errors: (r.domainErrors ?? []).map((de) => ({ domain: de.domain, error: de.error })),
+                                lkgVersion: latestEffective?.version ?? "(env)",
+                                note: "candidate rejected whole (§9.5-5) — live config keeps the last-known-good; fix the named files to unblock",
+                            });
                         }
-                        lastRejectedCandidate = undefined;
-                        if (ccRef?.dryRun) {
-                            logEffectiveDiff(config, r.effective, logger);
-                            ccEtag = r.etag;
+                        return;
+                    }
+                    lastRejectedCandidate = undefined;
+                    if (ccRef?.dryRun) {
+                        logEffectiveDiff(config, r.effective, logger);
+                        ccEtag = r.etag;
+                    }
+                    else {
+                        applyEffective(config, r.effective, logger, { teamsOnly: true, sealedKeys });
+                        markRosterLanded(r.effective);
+                        mutateInPlace(pricing, buildPricing(config.models));
+                        keyResolver = buildKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
+                        const reasons = restartReasons(effective, r.effective);
+                        if (reasons.length === 0) {
+                            pendingRestart = undefined;
+                        }
+                        else if (!pendingRestart || pendingRestart.reasons.join(",") !== reasons.join(",")) {
+                            pendingRestart = { restartRequired: true, reasons, version: r.effective.version, since: Date.now() };
                         }
                         else {
-                            applyEffective(config, r.effective, logger, { teamsOnly: true, sealedKeys });
-                            markRosterLanded(r.effective);
-                            mutateInPlace(pricing, buildPricing(config.models));
-                            keyResolver = buildKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
-                            const reasons = restartReasons(effective, r.effective);
-                            if (reasons.length === 0) {
-                                pendingRestart = undefined;
-                            }
-                            else if (!pendingRestart || pendingRestart.reasons.join(",") !== reasons.join(",")) {
-                                pendingRestart = { restartRequired: true, reasons, version: r.effective.version, since: Date.now() };
-                            }
-                            else {
-                                pendingRestart = { ...pendingRestart, version: r.effective.version };
-                            }
-                            logger.info("sema_registry_refreshed", {
-                                version: r.effective.version,
-                                note: "teams + runtime governance + models/roles/roster hot-applied; skills/mcp/runtime-gates/scenarios are restart-to-apply",
-                                ...(pendingRestart ? { restartRequired: true, restartReasons: pendingRestart.reasons } : {}),
-                            });
-                            latestEffective = r.effective;
-                            ccEtag = r.etag;
+                            pendingRestart = { ...pendingRestart, version: r.effective.version };
                         }
+                        logger.info("sema_registry_refreshed", {
+                            version: r.effective.version,
+                            note: "teams + runtime governance + models/roles/roster hot-applied; skills/mcp/runtime-gates/scenarios are restart-to-apply",
+                            ...(pendingRestart ? { restartRequired: true, restartReasons: pendingRestart.reasons } : {}),
+                        });
+                        latestEffective = r.effective;
+                        ccEtag = r.etag;
                     }
                 }
-                catch (err) {
-                    logger.warn("sema_registry_refresh_failed", { err: String(err), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
-                }
-                finally {
-                    refreshInFlight = false;
-                }
-            })();
-        }, 60_000);
+            }
+            catch (err) {
+                logger.warn("sema_registry_refresh_failed", { err: String(err), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
+            }
+            finally {
+                refreshInFlight = false;
+            }
+        };
+        const ccTimer = setInterval(() => void refreshTick(), 60_000);
         ccTimer.unref?.();
+        if (bootConfigPending)
+            void bootConfigPending.then(() => refreshTick(), () => { });
     }
     let keyResolver = buildKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
     const mysqlPool = backend?.mysqlPool();
@@ -1397,6 +1410,8 @@ async function main() {
                 ...(retainBackgroundProcessesFromBody(body.retainBackgroundProcesses, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null })) === true
                     ? { retainBackgroundProcesses: true }
                     : {}),
+                ...(() => { const v = toolNameListFromBody(body.excludeTools); return v ? { excludeTools: v } : {}; })(),
+                ...(() => { const v = toolNameListFromBody(body.deferTools); return v ? { deferTools: v } : {}; })(),
                 ...(typeof body.interactiveTools === "boolean"
                     ? { interactiveTools: body.interactiveTools }
                     : {}),