@sema-agent/server 1.306.0 → 1.307.0

package/README.md

@@ -130,6 +130,7 @@ The server is configured entirely through environment variables. The most import
 | Variable | Default | What it does |
 |----------|---------|--------------|
 | `PORT` | `8090` | HTTP listen port |
+| `BIND_HOST` (alias `HOST`) | see note | Listen address. An explicit value **always wins**. Default: `127.0.0.1` when the write face is unauthenticated (`ALLOW_UNAUTHED_WRITES=true` **and** no service token configured), otherwise all interfaces — deployments with a token are unaffected. |
 | `MODEL_GATEWAY_BASEURL` | `http://127.0.0.1:8000/v1` | OpenAI-compatible gateway base URL (without `/chat/completions`) |
 | `MODEL_ID` | `Qwen3.5-35B` | Default model id |
 | `MODEL_API_KEY` | — | Gateway API key (optional) |

package/README.zh-CN.md

@@ -123,6 +123,7 @@ curl -s localhost:8090/v1/tasks -H "Authorization: Bearer <SERVICE_AUTH_TOKEN>"
 | 变量 | 默认 | 说明 |
 |------|------|------|
 | `PORT` | `8090` | HTTP 监听端口 |
+| `BIND_HOST`(兼容 `HOST`) | 见说明 | 监听地址。显式值**恒生效**。缺省:写面无鉴权时(`ALLOW_UNAUTHED_WRITES=true` **且**未配任何 service token)= `127.0.0.1`,否则全接口——配了 token 的部署不受影响。 |
 | `MODEL_GATEWAY_BASEURL` | `http://127.0.0.1:8000/v1` | OpenAI 兼容网关地址(不带 `/chat/completions`) |
 | `MODEL_ID` | `Qwen3.5-35B` | 缺省模型 id |
 | `MODEL_API_KEY` | — | 网关 key(可选) |

package/dist/main.js

@@ -28,7 +28,7 @@ import { loadConfig, logConfigDiagnostics, resolveBindHost } from "./config.js";
 import { resourceSuspendOptIn } from "./resource-suspend.js";
 import { createSessionStore, ensureChildSessionDurableWithPromotion } from "./plugins/session-store.js";
 import { ForkRoutingSessionStore } from "./plugins/fork-routing-session-store.js";
-import { createStoreBackend, assertCloudSnapshotBlobPosture } from "./plugins/store-backend.js";
+import { createStoreBackend, openStoreBackendWithFallback, assertCloudSnapshotBlobPosture } from "./plugins/store-backend.js";
 import { e2bExecutionEnvFactory } from "./plugins/remote-env-e2b.js";
 import { k8sExecutionEnvFactory } from "./plugins/remote-env-k8s.js";
 import { sshExecutionEnvFactory } from "./plugins/remote-env-ssh.js";
@@ -428,22 +428,9 @@ async function main() {
         config.dbBackend === "local" ||
         (config.sessionBackend === "auto" && !!(config.tidb || config.pg));
     if (wantDb) {
-        backend = createStoreBackend(config);
-        if (backend) {
-            try {
-                await backend.ensureSchema();
-            }
-            catch (err) {
-                if (config.sessionBackend === "auto" || (config.dbBackend === "local" && !config.dbBackendExplicit)) {
-                    logger.warn("store_db_unreachable_fallback_memory", { backend: backend.kind, error: err instanceof Error ? err.message : String(err) });
-                    storeBackendDegraded = true;
-                    await backend.close().catch(() => undefined);
-                    backend = undefined;
-                }
-                else
-                    throw err;
-            }
-        }
+        const opened = await openStoreBackendWithFallback(config, logger);
+        backend = opened.backend;
+        storeBackendDegraded = opened.degraded;
     }
     metrics.setGauge("store_backend_degraded", storeBackendDegraded ? 1 : 0);
     {

package/dist/plugins/store-backend.d.ts

@@ -96,4 +96,10 @@ export interface StoreBackend {
 export declare function assertCloudSnapshotBlobPosture(kind: "mysql" | "pg" | "local", config: Pick<ServiceConfig, "snapshotBlobStore" | "snapshotBlobAllowSql">): void;
 export declare function snapshotBoundsFromConfig(config: ServiceConfig): FileSnapshotBounds;
 export declare function createStoreBackend(config: ServiceConfig): StoreBackend | undefined;
+export declare function openStoreBackendWithFallback(config: ServiceConfig, logger: {
+    warn: (msg: string, meta?: Record<string, unknown>) => void;
+}): Promise<{
+    backend: StoreBackend | undefined;
+    degraded: boolean;
+}>;
 //# sourceMappingURL=store-backend.d.ts.map

package/dist/plugins/store-backend.js

@@ -217,4 +217,24 @@ export function createStoreBackend(config) {
         return undefined;
     return new TiDBBackend(createTidbPool(config), config);
 }
+export async function openStoreBackendWithFallback(config, logger) {
+    const mayFallback = config.dbBackend === "local" ? !config.dbBackendExplicit : config.sessionBackend === "auto";
+    let backend;
+    try {
+        backend = createStoreBackend(config);
+        if (backend)
+            await backend.ensureSchema();
+    }
+    catch (err) {
+        if (!mayFallback)
+            throw err;
+        logger.warn("store_db_unreachable_fallback_memory", {
+            backend: backend?.kind ?? config.dbBackend,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        await backend?.close().catch(() => undefined);
+        return { backend: undefined, degraded: true };
+    }
+    return { backend, degraded: false };
+}
 //# sourceMappingURL=store-backend.js.map

package/dist/tool-approval.d.ts

@@ -3,6 +3,7 @@ export interface ToolApprovalFrame {
     type: "tool_approval" | "tool_approval_complete";
     approvalId: string;
     toolName?: string;
+    toolCallId?: string;
     sourceTaskId?: string;
     fromSubagent?: true;
     sourceAgentName?: string;

package/dist/tool-approval.js

@@ -160,6 +160,7 @@ export class ToolApprovalCoordinator {
             type: "tool_approval",
             approvalId: id,
             toolName: req.toolName,
+            ...(typeof req.toolCallId === "string" && req.toolCallId !== "" ? { toolCallId: req.toolCallId } : {}),
             ...(child
                 ? {
                     sourceTaskId: req.sourceTaskId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "1.306.0",
+  "version": "1.307.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",