@sema-agent/server 1.291.0 → 1.292.0

package/README.md

@@ -134,7 +134,7 @@ The server is configured entirely through environment variables. The most import
 | `MODEL_ID` | `Qwen3.5-35B` | Default model id |
 | `MODEL_API_KEY` | — | Gateway API key (optional) |
 | `SERVICE_AUTH_TOKEN` | — | Callers must send `Authorization: Bearer <token>` |
-| `DB_BACKEND` | `mysql` | SQL engine: `mysql` (any MySQL-protocol DB: MySQL/TiDB/MariaDB; `tidb` is an alias) / `pg` (PostgreSQL) / `local` (file-backed, no DB). Setting `mysql`/`pg` explicitly also switches sessions to durable |
+| `DB_BACKEND` | `local`* | `mysql` (any MySQL-protocol DB: MySQL/TiDB/MariaDB; `tidb` alias) / `pg` (PostgreSQL) / `local` (file-backed, no DB) / `memory` (explicit in-memory: nothing survives a restart, durable-runs faces 501). *Bare boot (no DB env at all) defaults to `local` so a single-user machine keeps its runs across restarts; any SQL signal (`SESSION_BACKEND` or `TIDB_/MYSQL_/PG_HOST`) keeps the `mysql` engine default, and `REQUIRE_PRINCIPAL=true` bare boots stay `memory` (the local file store has no tenant isolation — a warning says so). A DEFAULT-derived `local` that cannot create its data root degrades to memory with a warning + the `store_backend_degraded` gauge; an EXPLICIT `DB_BACKEND=local` fails loud instead. Setting `mysql`/`pg` explicitly also switches sessions to durable |
 | `SESSION_BACKEND` | `memory`* | `memory` / `mysql` (durable session center; `tidb` alias) / `auto`. *Defaults to durable when `DB_BACKEND` is explicitly `mysql`/`pg` |
 | `REMOTE_EXEC` | unset | Sandbox execution lane: `host` / `local-docker` / `e2b` / `k8s` / `ssh` / `adb`; unset = in-process stub (with `CONFIG_PROVIDER=local` the default becomes `host`) |
 | `CONFIG_PROVIDER` | unset | Config source: `local` (file-backed `config.d/`, single machine) / `remote` (registry control plane) |

package/dist/config.d.ts

@@ -141,7 +141,8 @@ export interface ServiceConfig {
         database: string;
         connectionLimit?: number;
     };
-    dbBackend: "mysql" | "pg" | "local";
+    dbBackend: "mysql" | "pg" | "local" | "memory";
+    dbBackendExplicit: boolean;
     localDataRoot?: string;
     pg?: {
         host: string;

package/dist/config.js

@@ -168,9 +168,22 @@ export function loadConfig() {
     const modelId = env("MODEL_ID", "Qwen3.5-35B");
     const singleUserTurnkey = process.env.REQUIRE_PRINCIPAL !== "true";
     const postureOn = (envVal, infraReady = true) => envVal === "true" ? true : envVal === "false" ? false : singleUserTurnkey && infraReady;
-    const dbBackendRaw = enumEnv("DB_BACKEND", "mysql", ["mysql", "tidb", "pg", "local"]);
+    const dbBackendSet = !!process.env.DB_BACKEND;
+    const sqlSignal = (!!process.env.SESSION_BACKEND && process.env.SESSION_BACKEND !== "memory") ||
+        !!(process.env.TIDB_HOST || process.env.MYSQL_HOST || process.env.PG_HOST);
+    const bareBoot = !dbBackendSet && !sqlSignal;
+    const multiTenantBareBoot = bareBoot && process.env.REQUIRE_PRINCIPAL === "true";
+    const dbBackendRaw = enumEnv("DB_BACKEND", bareBoot ? (multiTenantBareBoot ? "memory" : "local") : "mysql", ["mysql", "tidb", "pg", "local", "memory"]);
     const dbBackend = dbBackendRaw === "tidb" ? "mysql" : dbBackendRaw;
-    const sqlEngineExplicit = !!process.env.DB_BACKEND && dbBackend !== "local";
+    if (multiTenantBareBoot) {
+        CONFIG_NOTICES.push({
+            event: "db_backend_default_memory_multi_tenant",
+            fields: {
+                note: "REQUIRE_PRINCIPAL=true with no DB_BACKEND — the single-user default (local file store) is incompatible with multi-tenant (no tenant isolation in the file owner map), so this deployment runs IN-MEMORY (runs/sessions lost on restart, durable runs 501). Configure DB_BACKEND=mysql|pg for a durable multi-tenant deployment.",
+            },
+        });
+    }
+    const sqlEngineExplicit = !!process.env.DB_BACKEND && dbBackend !== "local" && dbBackend !== "memory";
     const sessionBackendRaw = enumEnv("SESSION_BACKEND", sqlEngineExplicit ? "mysql" : "memory", ["memory", "mysql", "tidb", "auto"]);
     const sessionBackend = sessionBackendRaw === "mysql" ? "tidb" : sessionBackendRaw;
     const memoryEngineEnabled = process.env.MEMORY_ENGINE !== "off";
@@ -487,6 +500,7 @@ export function loadConfig() {
             }
             : undefined,
         dbBackend,
+        dbBackendExplicit: dbBackendSet,
         localDataRoot,
         tidb: needsDb && dbBackend === "mysql"
             ? {

package/dist/main.js

@@ -434,7 +434,7 @@ async function main() {
                 await backend.ensureSchema();
             }
             catch (err) {
-                if (config.sessionBackend === "auto") {
+                if (config.sessionBackend === "auto" || (config.dbBackend === "local" && !config.dbBackendExplicit)) {
                     logger.warn("store_db_unreachable_fallback_memory", { backend: backend.kind, error: err instanceof Error ? err.message : String(err) });
                     storeBackendDegraded = true;
                     await backend.close().catch(() => undefined);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "1.291.0",
+  "version": "1.292.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",