@sema-agent/server 1.239.0 → 1.241.0

package/dist/http/server.js

@@ -30,6 +30,7 @@ import { composeSupervisorCost, infraCost, infraUsageFromEvents, hasInfraPricing
 import { redactSecrets, redactDeep, redactedPreview } from "../trace/redact.js";
 import { usageSummary, usageSeries, usageBreakdown } from "../usage-analytics.js";
 import { IdempotencyCache } from "./idempotency.js";
+import { pgHasUnstorable } from "../plugins/pg-safe-json.js";
 export const MAX_USER_SKILLS = 10;
 export const MAX_SKILL_CONTENT_CHARS = 1_048_576;
 export const MAX_SYSTEM_PROMPT_CHARS = 16_384;
@@ -140,10 +141,10 @@ const RUN_STEER_RE = /^\/v1\/runs\/([^/]+)\/steer$/;
 const RUN_DETACH_RE = /^\/v1\/runs\/([^/]+)\/detach$/;
 const RUN_COMPACT_RE = /^\/v1\/runs\/([^/]+)\/compact$/;
 function runNotFoundBody(id) {
-    const aStar = /^a[0-9a-f]{4,}$/i.test(id);
+    const aStar = /^(?:a|wa)[0-9a-f]{4,}$/i.test(id);
     return {
         error: aStar
-            ? `run not found — "${id}" looks like a background-agent handle (a* domain), which is never in the run store; use the TaskOutput tool (or the parent run's subagents surface) to read it, and the run's durable taskId (X-Task-Id) for this endpoint`
+            ? `run not found — "${id}" looks like an agent handle (a*/wa* domain), which is never in the run store; use the TaskOutput tool (or the workflow journal / subagents surface) to read it, and the run's durable taskId (X-Task-Id) for this endpoint`
             : "run not found — the id belongs to no run in this deployment's run store (a run from another server process, or an in-memory store that did not survive a restart, is not visible here)",
     };
 }
@@ -5469,7 +5470,7 @@ async function ingestBakeLine(bakes, idx, bake, line, registry) {
     const cancelled = doneStatus === "CANCELLED";
     const errorText = typeof line.error === "string" ? redactSecrets(line.error) : null;
     const tag = typeof line.tag === "string" ? line.tag : bake.tag;
-    const digest = typeof line.digest === "string" && line.digest.length > 0 ? line.digest : null;
+    let digest = typeof line.digest === "string" && line.digest.length > 0 ? line.digest : null;
     let indexId = bake.indexId;
     let repo = bake.repo;
     let ref = bake.ref;
@@ -5484,27 +5485,35 @@ async function ingestBakeLine(bakes, idx, bake, line, registry) {
         const fresh = await bakes.getBake(bakeId);
         const nonTerminal = !!fresh && (fresh.status === "queued" || fresh.status === "running");
         if (manifestBody && typeof manifestBody === "object" && nonTerminal) {
-            registerSteps.push({ step: "register", status: "running" });
-            try {
-                const profile = bake.profile && bake.profile !== "custom" ? bake.profile : (manifestBody.profile && manifestBody.profile !== "custom" ? manifestBody.profile : "custom");
-                repo = registry ? `${registry}/${profile}` : `sema-images/${profile}`;
-                manifestSha = typeof line.manifestSha === "string" ? line.manifestSha : (typeof line.manifest?.sha256 === "string" ? String(line.manifest.sha256) : bake.manifestSha);
-                const entry = manifestToIndexEntry(manifestBody, { repo, digest, status: "building", manifestSha, sizeBytes: manifestBody.sizeBytes ?? null, signed: false });
-                entry.visibility = "public";
-                entry.tenantId = null;
-                indexId = await idx.registerBuilding(entry);
-                ref = `${repo}@${digest}`;
-                await bakes.setIndexId(bakeId, indexId);
-                registerSteps.push({ step: "register", status: "ok" });
-            }
-            catch (err) {
+            const profile = bake.profile && bake.profile !== "custom" ? bake.profile : (manifestBody.profile && manifestBody.profile !== "custom" ? manifestBody.profile : "custom");
+            repo = registry ? `${registry}/${profile}` : `sema-images/${profile}`;
+            manifestSha = typeof line.manifestSha === "string" ? line.manifestSha : (typeof line.manifest?.sha256 === "string" ? String(line.manifest.sha256) : bake.manifestSha);
+            if (pgHasUnstorable(digest) || pgHasUnstorable(repo) || pgHasUnstorable(manifestSha)) {
                 indexId = null;
-                ref = `${repo}@${digest}`;
-                finalStatus = "FAILED";
-                registerDowngraded = true;
-                finalExit = exitCode ?? 0;
-                finalError = redactSecrets(`index register failed after a COMPLETE build (built-but-unregistered partial): ${String(err?.message ?? err)}`);
-                registerSteps.push({ step: "register", status: "fail", reason: "index register failed (TiDB?)" });
+                registerSteps.push({ step: "register", status: "skipped", reason: "identity fields contained unstorable bytes" });
+            }
+            else {
+                registerSteps.push({ step: "register", status: "running" });
+                try {
+                    const entry = manifestToIndexEntry(manifestBody, { repo, digest, status: "building", manifestSha, sizeBytes: manifestBody.sizeBytes ?? null, signed: false });
+                    entry.visibility = "public";
+                    entry.tenantId = null;
+                    indexId = await idx.registerBuilding(entry);
+                    ref = `${repo}@${digest}`;
+                    const bound = await bakes.setIndexId(bakeId, indexId);
+                    if (!bound)
+                        indexId = null;
+                    registerSteps.push({ step: "register", status: "ok" });
+                }
+                catch (err) {
+                    indexId = null;
+                    ref = `${repo}@${digest}`;
+                    finalStatus = "FAILED";
+                    registerDowngraded = true;
+                    finalExit = exitCode ?? 0;
+                    finalError = redactSecrets(`index register failed after a COMPLETE build (built-but-unregistered partial): ${String(err?.message ?? err)}`);
+                    registerSteps.push({ step: "register", status: "fail", reason: "index register failed (TiDB?)" });
+                }
             }
         }
     }
@@ -5519,6 +5528,19 @@ async function ingestBakeLine(bakes, idx, bake, line, registry) {
     const conflictBands = errorCode === "band-conflict" && Array.isArray(line.conflictBands)
         ? line.conflictBands.filter((b) => typeof b === "string")
         : null;
+    const identityInvalid = (typeof digest === "string" && pgHasUnstorable(digest)) ||
+        (typeof repo === "string" && pgHasUnstorable(repo)) ||
+        (typeof ref === "string" && pgHasUnstorable(ref)) ||
+        (typeof manifestSha === "string" && pgHasUnstorable(manifestSha));
+    if (identityInvalid) {
+        finalStatus = "FAILED";
+        digest = null;
+        repo = null;
+        ref = null;
+        manifestSha = null;
+        indexId = null;
+        finalError = finalError ? `${finalError}; identity fields contained unstorable bytes` : "terminal frame identity fields contained unstorable bytes";
+    }
     const finalState = (finalStatus === "COMPLETE" ? "COMPLETE" : finalStatus === "CANCELLED" ? "CANCELLED" : "FAILED");
     const coarse = coarseStatusForState(finalState);
     let affectedRows = 0;