@sema-agent/server 1.305.0 → 1.307.0

package/README.md

@@ -130,6 +130,7 @@ The server is configured entirely through environment variables. The most import
 | Variable | Default | What it does |
 |----------|---------|--------------|
 | `PORT` | `8090` | HTTP listen port |
+| `BIND_HOST` (alias `HOST`) | see note | Listen address. An explicit value **always wins**. Default: `127.0.0.1` when the write face is unauthenticated (`ALLOW_UNAUTHED_WRITES=true` **and** no service token configured), otherwise all interfaces — deployments with a token are unaffected. |
 | `MODEL_GATEWAY_BASEURL` | `http://127.0.0.1:8000/v1` | OpenAI-compatible gateway base URL (without `/chat/completions`) |
 | `MODEL_ID` | `Qwen3.5-35B` | Default model id |
 | `MODEL_API_KEY` | — | Gateway API key (optional) |

package/README.zh-CN.md

@@ -123,6 +123,7 @@ curl -s localhost:8090/v1/tasks -H "Authorization: Bearer <SERVICE_AUTH_TOKEN>"
 | 变量 | 默认 | 说明 |
 |------|------|------|
 | `PORT` | `8090` | HTTP 监听端口 |
+| `BIND_HOST`(兼容 `HOST`) | 见说明 | 监听地址。显式值**恒生效**。缺省:写面无鉴权时(`ALLOW_UNAUTHED_WRITES=true` **且**未配任何 service token)= `127.0.0.1`,否则全接口——配了 token 的部署不受影响。 |
 | `MODEL_GATEWAY_BASEURL` | `http://127.0.0.1:8000/v1` | OpenAI 兼容网关地址(不带 `/chat/completions`) |
 | `MODEL_ID` | `Qwen3.5-35B` | 缺省模型 id |
 | `MODEL_API_KEY` | — | 网关 key(可选) |

package/dist/config.d.ts

@@ -164,6 +164,7 @@ export interface ServiceConfig {
     };
     snapshotBlobSqlMaxBytes?: number;
     snapshotBlobAllowSql: boolean;
+    bindHost?: string;
     attachmentOrphanGraceMs: number;
     workspaceFileMaxBytes: number;
     sendUserFile?: {
@@ -315,4 +316,10 @@ export declare function logConfigDiagnostics(logger: {
 }): void;
 export declare function applyAutoCompactWindow(m: Model, explicit?: number): void;
 export declare function loadConfig(): ServiceConfig;
+export declare function resolveBindHost(config: {
+    bindHost?: string;
+    allowUnauthedWrites?: boolean;
+    authToken?: string;
+    authTokens?: Record<string, string>;
+}): string | undefined;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.js

@@ -538,6 +538,7 @@ export function loadConfig() {
             : undefined,
         snapshotBlobSqlMaxBytes: optFinitePositiveEnv("SNAPSHOT_BLOB_SQL_MAX_BYTES"),
         snapshotBlobAllowSql: process.env.SNAPSHOT_BLOB_ALLOW_SQL_BYTES === "true",
+        bindHost: process.env.BIND_HOST || process.env.HOST || undefined,
         attachmentOrphanGraceMs: ((v) => (v !== undefined && Number.isFinite(v) && v >= 0 ? v : 3_600_000))(process.env.ATTACHMENT_ORPHAN_GRACE_MS !== undefined ? Number(process.env.ATTACHMENT_ORPHAN_GRACE_MS) : undefined),
         workspaceFileMaxBytes: optFinitePositiveEnv("WORKSPACE_FILE_MAX_BYTES") ?? 8 * 1024 * 1024,
         sendUserFile: (process.env.MINIO_ENDPOINT || process.env.S3_ENDPOINT) && process.env.MINIO_ACCESS_KEY && process.env.MINIO_SECRET_KEY
@@ -727,4 +728,10 @@ export function loadConfig() {
         configLocalDir: process.env.CONFIG_LOCAL_DIR || undefined,
     };
 }
+export function resolveBindHost(config) {
+    if (config.bindHost)
+        return config.bindHost;
+    const anyServiceAuth = Boolean(config.authToken) || Object.keys(config.authTokens ?? {}).length > 0;
+    return config.allowUnauthedWrites && !anyServiceAuth ? "127.0.0.1" : undefined;
+}
 //# sourceMappingURL=config.js.map

package/dist/main.js

@@ -24,11 +24,11 @@ import { stat as fsStat, readFile as fsReadFile } from "node:fs/promises";
 import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScratchpadDir, purgeScratchpadDir, sweepStaleScratchpads, resumeFactsForLane } from "./env-facts.js";
 import { normalizeSuggestNextPrompts, normalizeResilience, normalizeAttachments, normalizeResumeAtMode, resolveTaskLimits, taskAgentsSpecFragment, retainBackgroundProcessesFromBody, toolNameListFromBody, promptProfileFromBody } from "./spec-fields.js";
 import { createBrain, brainSummary } from "./brain.js";
-import { loadConfig, logConfigDiagnostics } from "./config.js";
+import { loadConfig, logConfigDiagnostics, resolveBindHost } from "./config.js";
 import { resourceSuspendOptIn } from "./resource-suspend.js";
 import { createSessionStore, ensureChildSessionDurableWithPromotion } from "./plugins/session-store.js";
 import { ForkRoutingSessionStore } from "./plugins/fork-routing-session-store.js";
-import { createStoreBackend, assertCloudSnapshotBlobPosture } from "./plugins/store-backend.js";
+import { createStoreBackend, openStoreBackendWithFallback, assertCloudSnapshotBlobPosture } from "./plugins/store-backend.js";
 import { e2bExecutionEnvFactory } from "./plugins/remote-env-e2b.js";
 import { k8sExecutionEnvFactory } from "./plugins/remote-env-k8s.js";
 import { sshExecutionEnvFactory } from "./plugins/remote-env-ssh.js";
@@ -428,22 +428,9 @@ async function main() {
         config.dbBackend === "local" ||
         (config.sessionBackend === "auto" && !!(config.tidb || config.pg));
     if (wantDb) {
-        backend = createStoreBackend(config);
-        if (backend) {
-            try {
-                await backend.ensureSchema();
-            }
-            catch (err) {
-                if (config.sessionBackend === "auto" || (config.dbBackend === "local" && !config.dbBackendExplicit)) {
-                    logger.warn("store_db_unreachable_fallback_memory", { backend: backend.kind, error: err instanceof Error ? err.message : String(err) });
-                    storeBackendDegraded = true;
-                    await backend.close().catch(() => undefined);
-                    backend = undefined;
-                }
-                else
-                    throw err;
-            }
-        }
+        const opened = await openStoreBackendWithFallback(config, logger);
+        backend = opened.backend;
+        storeBackendDegraded = opened.degraded;
     }
     metrics.setGauge("store_backend_degraded", storeBackendDegraded ? 1 : 0);
     {
@@ -2340,7 +2327,15 @@ async function main() {
         },
     });
     runDenySweep = server.denyExpiredApprovals;
-    await new Promise((resolve) => server.listen(config.port, resolve));
+    const bindHost = resolveBindHost(config);
+    await new Promise((resolve) => (bindHost ? server.listen(config.port, bindHost, resolve) : server.listen(config.port, resolve)));
+    logger.info("listening", {
+        port: config.port,
+        bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",
+        ...(bindHost === "127.0.0.1" && !config.bindHost
+            ? { note: "auto-narrowed to loopback: write face is unauthenticated (ALLOW_UNAUTHED_WRITES with no service token). Set BIND_HOST explicitly to override." }
+            : {}),
+    });
     const fleetClient = startFleetClientFromEnv(config, {
         instanceId,
         version: serviceVersion(),

package/dist/plugins/store-backend.d.ts

@@ -96,4 +96,10 @@ export interface StoreBackend {
 export declare function assertCloudSnapshotBlobPosture(kind: "mysql" | "pg" | "local", config: Pick<ServiceConfig, "snapshotBlobStore" | "snapshotBlobAllowSql">): void;
 export declare function snapshotBoundsFromConfig(config: ServiceConfig): FileSnapshotBounds;
 export declare function createStoreBackend(config: ServiceConfig): StoreBackend | undefined;
+export declare function openStoreBackendWithFallback(config: ServiceConfig, logger: {
+    warn: (msg: string, meta?: Record<string, unknown>) => void;
+}): Promise<{
+    backend: StoreBackend | undefined;
+    degraded: boolean;
+}>;
 //# sourceMappingURL=store-backend.d.ts.map

package/dist/plugins/store-backend.js

@@ -217,4 +217,24 @@ export function createStoreBackend(config) {
         return undefined;
     return new TiDBBackend(createTidbPool(config), config);
 }
+export async function openStoreBackendWithFallback(config, logger) {
+    const mayFallback = config.dbBackend === "local" ? !config.dbBackendExplicit : config.sessionBackend === "auto";
+    let backend;
+    try {
+        backend = createStoreBackend(config);
+        if (backend)
+            await backend.ensureSchema();
+    }
+    catch (err) {
+        if (!mayFallback)
+            throw err;
+        logger.warn("store_db_unreachable_fallback_memory", {
+            backend: backend?.kind ?? config.dbBackend,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        await backend?.close().catch(() => undefined);
+        return { backend: undefined, degraded: true };
+    }
+    return { backend, degraded: false };
+}
 //# sourceMappingURL=store-backend.js.map

package/dist/tool-approval.d.ts

@@ -3,6 +3,7 @@ export interface ToolApprovalFrame {
     type: "tool_approval" | "tool_approval_complete";
     approvalId: string;
     toolName?: string;
+    toolCallId?: string;
     sourceTaskId?: string;
     fromSubagent?: true;
     sourceAgentName?: string;

package/dist/tool-approval.js

@@ -160,6 +160,7 @@ export class ToolApprovalCoordinator {
             type: "tool_approval",
             approvalId: id,
             toolName: req.toolName,
+            ...(typeof req.toolCallId === "string" && req.toolCallId !== "" ? { toolCallId: req.toolCallId } : {}),
             ...(child
                 ? {
                     sourceTaskId: req.sourceTaskId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "1.305.0",
+  "version": "1.307.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",