@sema-agent/server 1.320.0 → 1.322.0

package/dist/main.js

@@ -25,6 +25,7 @@ import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScr
 import { normalizeSuggestNextPrompts, normalizeResilience, normalizeAttachments, normalizeResumeAtMode, resolveTaskLimits, taskAgentsSpecFragment, retainBackgroundProcessesFromBody, toolNameListFromBody, promptProfileFromBody } from "./spec-fields.js";
 import { createBrain, brainSummary } from "./brain.js";
 import { configLkgEnabled, loadConfig, logConfigDiagnostics, resolveBindHost } from "./config.js";
+import { drainNumEnvWarnings } from "./plugins/remote-shell.js";
 import { resourceSuspendOptIn } from "./resource-suspend.js";
 import { createSessionStore, ensureChildSessionDurableWithPromotion } from "./plugins/session-store.js";
 import { ForkRoutingSessionStore } from "./plugins/fork-routing-session-store.js";
@@ -122,6 +123,8 @@ async function main() {
     const logger = createLogger(config.logLevel);
     const metrics = createMetrics();
     logConfigDiagnostics(logger);
+    for (const w of drainNumEnvWarnings())
+        logger.warn("config_env_invalid_using_default", { env: w.env, raw: w.raw });
     if ((config.roles?.verifier ?? "default") === "default") {
         logger.warn("verify_decorrelation_unavailable", {
             hint: "verifier role = default (= implementer) — adversarial verification grades its own work; set MODEL_VERIFIER=<catalog model id> to a heterogeneous model",

package/dist/plugins/pg-pool.js

@@ -156,6 +156,13 @@ export const PG_SCHEMA_STATEMENTS = [
      result     TEXT         NOT NULL,
      created_at BIGINT       NOT NULL,
      PRIMARY KEY (run_id, ordinal)
+   )`,
+    `CREATE TABLE IF NOT EXISTS workflow_resume_claim (
+     source_run_id VARCHAR(191) NOT NULL,
+     scope         VARCHAR(190) NOT NULL,
+     new_run_id    VARCHAR(191) NOT NULL,
+     claimed_at    BIGINT       NOT NULL,
+     PRIMARY KEY (source_run_id, scope)
    )`,
     `CREATE TABLE IF NOT EXISTS workflow_run (
      id         VARCHAR(191) NOT NULL,

package/dist/plugins/remote-env-e2b.js

@@ -2,17 +2,18 @@ import path from "node:path";
 import { Sandbox, CommandExitError, FileType } from "e2b";
 import { FileError, ExecutionError, RemoteExecutionError, RollingTailBuffer, markTruncated, } from "@sema-agent/core";
 import { fileErrorFromExec } from "./remote-env-file-error.js";
+import { numEnvOr } from "./remote-shell.js";
 import { BackgroundShellManager } from "./background-shell-support.js";
 const PROVIDER = "e2b";
 const DEFAULT_MOUNT_PATH = "/home/user";
 const DEFAULT_TIMEOUT_MS = 5 * 60_000;
-const E2B_SANDBOX_MAX_MS = Math.max(60_000, Math.floor(Number(process.env.E2B_SANDBOX_MAX_MS ?? "")) || 3_600_000);
+const E2B_SANDBOX_MAX_MS = numEnvOr("E2B_SANDBOX_MAX_MS", 3_600_000, 60_000);
 const DEFAULT_RPC_TIMEOUT_MS = 60_000;
 const DEFAULT_LIVENESS_MS = 120_000;
 const DEFAULT_DATA_TIMEOUT_MS = 5 * 60_000;
-const E2B_BG_MAX_CONCURRENT = Math.max(1, Math.floor(Number(process.env.E2B_BG_MAX_CONCURRENT ?? "")) || 8);
-const E2B_BG_DEFAULT_TIMEOUT_SEC = Math.max(1, Math.floor(Number(process.env.E2B_BG_DEFAULT_TIMEOUT_SEC ?? "")) || 300);
-const E2B_BG_MAX_TIMEOUT_SEC = Math.max(E2B_BG_DEFAULT_TIMEOUT_SEC, Math.floor(Number(process.env.E2B_BG_MAX_TIMEOUT_SEC ?? "")) || 1800);
+const E2B_BG_MAX_CONCURRENT = numEnvOr("E2B_BG_MAX_CONCURRENT", 8, 1);
+const E2B_BG_DEFAULT_TIMEOUT_SEC = numEnvOr("E2B_BG_DEFAULT_TIMEOUT_SEC", 300, 1);
+const E2B_BG_MAX_TIMEOUT_SEC = numEnvOr("E2B_BG_MAX_TIMEOUT_SEC", 1800, E2B_BG_DEFAULT_TIMEOUT_SEC);
 const E2B_BG_PROVIDER_BACKSTOP_PAD_SEC = 30;
 const ok = (value) => ({ ok: true, value });
 export class RemoteContainerExecutionEnv {

package/dist/plugins/remote-env-host.js

@@ -5,20 +5,20 @@ import fs from "node:fs/promises";
 import { randomBytes } from "node:crypto";
 import { openSync, closeSync, readSync, statSync, truncateSync, unlinkSync, mkdirSync, rmdirSync, mkdtempSync, existsSync, realpathSync } from "node:fs";
 import { StringDecoder } from "node:string_decoder";
-import { armPipeDestroyGrace } from "./remote-shell.js";
+import { armPipeDestroyGrace, numEnvOr } from "./remote-shell.js";
 import { hostBackgroundShellEnabled, hostExecSpoolEnabled } from "../config.js";
 import { resolveHostShell, hostShell, spawnGroupOptions, killTreeHard, killTreeSoft, collapseWin32EnvKeys } from "./host-platform.js";
 import { BackgroundShellManager, seedMemStream, feedMemStream, drainMemStream } from "./background-shell-support.js";
 import { FileError, ExecutionError, RemoteExecutionError, scrubSecretEnv, RollingTailBuffer, markTruncated, SchedulerError, BackgroundShellError, } from "@sema-agent/core";
 const PROVIDER = "host";
 const DEFAULT_COMMAND_TIMEOUT_MS = 30 * 60_000;
-const HOST_BG_MAX_CONCURRENT = Math.max(1, Math.floor(Number(process.env.HOST_BG_MAX_CONCURRENT ?? "")) || 8);
-const HOST_BG_DEFAULT_TIMEOUT_SEC = Math.max(1, Math.floor(Number(process.env.HOST_BG_DEFAULT_TIMEOUT_SEC ?? "")) || 300);
-const HOST_BG_MAX_TIMEOUT_SEC = Math.max(HOST_BG_DEFAULT_TIMEOUT_SEC, Math.floor(Number(process.env.HOST_BG_MAX_TIMEOUT_SEC ?? "")) || 1800);
-const HOST_BG_READ_CAP = Math.max(64 * 1024, Math.floor(Number(process.env.HOST_BG_READ_CAP ?? "")) || 1024 * 1024);
-const HOST_BG_FILE_CAP = Math.max(HOST_BG_READ_CAP, Math.floor(Number(process.env.HOST_BG_FILE_CAP ?? "")) || 64 * 1024 * 1024);
-const HOST_BG_KILL_GRACE_MS = Math.max(0, Math.floor(Number(process.env.HOST_BG_KILL_GRACE_MS ?? "")) || 1000);
-const HOST_BG_MEM_CAP = Math.max(64 * 1024, Math.floor(Number(process.env.HOST_BG_MEM_CAP ?? "")) || 8 * 1024 * 1024);
+const HOST_BG_MAX_CONCURRENT = numEnvOr("HOST_BG_MAX_CONCURRENT", 8, 1);
+const HOST_BG_DEFAULT_TIMEOUT_SEC = numEnvOr("HOST_BG_DEFAULT_TIMEOUT_SEC", 300, 1);
+const HOST_BG_MAX_TIMEOUT_SEC = numEnvOr("HOST_BG_MAX_TIMEOUT_SEC", 1800, HOST_BG_DEFAULT_TIMEOUT_SEC);
+const HOST_BG_READ_CAP = numEnvOr("HOST_BG_READ_CAP", 1024 * 1024, 64 * 1024);
+const HOST_BG_FILE_CAP = numEnvOr("HOST_BG_FILE_CAP", 64 * 1024 * 1024, HOST_BG_READ_CAP);
+const HOST_BG_KILL_GRACE_MS = numEnvOr("HOST_BG_KILL_GRACE_MS", 1000, 0);
+const HOST_BG_MEM_CAP = numEnvOr("HOST_BG_MEM_CAP", 8 * 1024 * 1024, 64 * 1024);
 const ok = (value) => ({ ok: true, value });
 const unsupported = (op) => ({
     ok: false,

package/dist/plugins/remote-env-k8s.js

@@ -4,7 +4,7 @@ import https from "node:https";
 import http from "node:http";
 import { StringDecoder } from "node:string_decoder";
 import WebSocket from "ws";
-import { shellQuote, kindFromMode } from "./remote-shell.js";
+import { shellQuote, kindFromMode, numEnvOr } from "./remote-shell.js";
 import { presignS3Url } from "./s3-presign.js";
 import { FileError, ExecutionError, RemoteExecutionError, withRetry, RollingTailBuffer, markTruncated, } from "@sema-agent/core";
 import { fileErrorFromExec, classifyFsStderr } from "./remote-env-file-error.js";
@@ -13,12 +13,12 @@ import { randomUUID } from "node:crypto";
 import { BackgroundShellManager, seedMemStream, feedMemStream, drainMemStream } from "./background-shell-support.js";
 const PROVIDER = "k8s";
 const K8S_BG_DIR_ROOT = "/tmp/.sema-bg";
-const K8S_BG_MAX_CONCURRENT = Math.max(1, Math.floor(Number(process.env.K8S_BG_MAX_CONCURRENT ?? "")) || 8);
-const K8S_BG_DEFAULT_TIMEOUT_SEC = Math.max(1, Math.floor(Number(process.env.K8S_BG_DEFAULT_TIMEOUT_SEC ?? "")) || 300);
-const K8S_BG_MAX_TIMEOUT_SEC = Math.max(K8S_BG_DEFAULT_TIMEOUT_SEC, Math.floor(Number(process.env.K8S_BG_MAX_TIMEOUT_SEC ?? "")) || 1800);
-const K8S_BG_READ_CAP = Math.max(64 * 1024, Math.floor(Number(process.env.K8S_BG_READ_CAP ?? "")) || 1024 * 1024);
-const K8S_BG_FILE_CAP = Math.max(K8S_BG_READ_CAP, Math.floor(Number(process.env.K8S_BG_FILE_CAP ?? "")) || 64 * 1024 * 1024);
-const K8S_BG_MEM_CAP = Math.max(64 * 1024, Math.floor(Number(process.env.K8S_BG_MEM_CAP ?? "")) || 8 * 1024 * 1024);
+const K8S_BG_MAX_CONCURRENT = numEnvOr("K8S_BG_MAX_CONCURRENT", 8, 1);
+const K8S_BG_DEFAULT_TIMEOUT_SEC = numEnvOr("K8S_BG_DEFAULT_TIMEOUT_SEC", 300, 1);
+const K8S_BG_MAX_TIMEOUT_SEC = numEnvOr("K8S_BG_MAX_TIMEOUT_SEC", 1800, K8S_BG_DEFAULT_TIMEOUT_SEC);
+const K8S_BG_READ_CAP = numEnvOr("K8S_BG_READ_CAP", 1024 * 1024, 64 * 1024);
+const K8S_BG_FILE_CAP = numEnvOr("K8S_BG_FILE_CAP", 64 * 1024 * 1024, K8S_BG_READ_CAP);
+const K8S_BG_MEM_CAP = numEnvOr("K8S_BG_MEM_CAP", 8 * 1024 * 1024, 64 * 1024);
 import { buildBgRunnerScript, buildBgLauncherScript, buildBgPollScript, buildBgKillScript, buildBgDisposeScript, buildDetachCapableExec, parseBgPollOutput, } from "./k8s-bg-scripts.js";
 export { buildBgRunnerScript, buildBgLauncherScript, buildBgPollScript, buildBgKillScript, buildBgDisposeScript, buildDetachCapableExec, parseBgPollOutput, } from "./k8s-bg-scripts.js";
 const ok = (value) => ({ ok: true, value });

package/dist/plugins/remote-shell.d.ts

@@ -4,4 +4,9 @@ export declare const EXEC_FORCE_SETTLE_GRACE_MS = 3000;
 export declare function armPipeDestroyGrace(child: ChildProcess): ReturnType<typeof setTimeout>;
 export declare function shellQuote(s: string): string;
 export declare function kindFromMode(mode?: number): FileInfo["kind"];
+export declare function drainNumEnvWarnings(): Array<{
+    env: string;
+    raw: string;
+}>;
+export declare function numEnvOr(name: string, def: number, min: number): number;
 //# sourceMappingURL=remote-shell.d.ts.map

package/dist/plugins/remote-shell.js

@@ -22,4 +22,18 @@ export function kindFromMode(mode) {
         return "symlink";
     return "file";
 }
+const NUM_ENV_WARNINGS = [];
+const NUM_ENV_SEEN = new Set();
+export function drainNumEnvWarnings() {
+    return NUM_ENV_WARNINGS.splice(0, NUM_ENV_WARNINGS.length);
+}
+export function numEnvOr(name, def, min) {
+    const raw = process.env[name] ?? "";
+    const n = Math.floor(Number(raw));
+    if (raw !== "" && Number.isNaN(n) && !NUM_ENV_SEEN.has(name)) {
+        NUM_ENV_SEEN.add(name);
+        NUM_ENV_WARNINGS.push({ env: name, raw });
+    }
+    return Math.max(min, n || def);
+}
 //# sourceMappingURL=remote-shell.js.map

package/dist/plugins/tidb-pool.js

@@ -312,6 +312,13 @@ export const SCHEMA_STATEMENTS = [
      result     MEDIUMTEXT   NOT NULL,
      created_at BIGINT       NOT NULL,
      PRIMARY KEY (run_id, ordinal)
+   )`,
+    `CREATE TABLE IF NOT EXISTS workflow_resume_claim (
+     source_run_id VARCHAR(191) NOT NULL,
+     scope         VARCHAR(190) NOT NULL,
+     new_run_id    VARCHAR(191) NOT NULL,
+     claimed_at    BIGINT       NOT NULL,
+     PRIMARY KEY (source_run_id, scope)
    )`,
     `CREATE TABLE IF NOT EXISTS workflow_run (
      id         VARCHAR(191) NOT NULL,

package/dist/plugins/workflow-journal-store-sql.d.ts

@@ -2,9 +2,13 @@ import type { Pool as MySqlPool } from "mysql2/promise";
 import type { Pool as PgPool } from "pg";
 import { type WorkflowJournalEntry, type WorkflowJournalStore } from "@sema-agent/core";
 import { type SqlDriver } from "./sql-driver.js";
+export interface SqlWorkflowJournalStoreOptions {
+    resumeClaimTtlMs?: number;
+}
 export declare class SqlWorkflowJournalStore implements WorkflowJournalStore {
     private readonly db;
-    constructor(db: SqlDriver);
+    private readonly resumeClaimTtlMs;
+    constructor(db: SqlDriver, opts?: SqlWorkflowJournalStoreOptions);
     private q;
     append(runId: string, scope: string, entry: WorkflowJournalEntry): Promise<void>;
     load(runId: string, scope: string): Promise<WorkflowJournalEntry[]>;
@@ -19,12 +23,25 @@ export declare class SqlWorkflowJournalStore implements WorkflowJournalStore {
         resultBytes: number;
     }>>;
     deleteByRun(runId: string): Promise<number>;
+    resumeClaim(input: {
+        sourceRunId: string;
+        newRunId: string;
+        scope: string;
+    }): Promise<{
+        granted: boolean;
+        holder?: string;
+    }>;
+    releaseResumeClaim(input: {
+        sourceRunId: string;
+        newRunId: string;
+        scope: string;
+    }): Promise<void>;
     reapExpired(now: number, maxAgeMs: number): Promise<number>;
 }
 export declare class TiDBWorkflowJournalStore extends SqlWorkflowJournalStore {
-    constructor(pool: MySqlPool);
+    constructor(pool: MySqlPool, opts?: SqlWorkflowJournalStoreOptions);
 }
 export declare class PgWorkflowJournalStore extends SqlWorkflowJournalStore {
-    constructor(pool: PgPool);
+    constructor(pool: PgPool, opts?: SqlWorkflowJournalStoreOptions);
 }
 //# sourceMappingURL=workflow-journal-store-sql.d.ts.map

package/dist/plugins/workflow-journal-store-sql.js

@@ -1,10 +1,13 @@
 import { callKeyOrdinal } from "@sema-agent/core";
 import { oversizeJournalResult } from "./workflow-journal-limits.js";
 import { mysqlDriver, pgDriver } from "./sql-driver.js";
+const DEFAULT_RESUME_CLAIM_TTL_MS = 15 * 60 * 1000;
 export class SqlWorkflowJournalStore {
     db;
-    constructor(db) {
+    resumeClaimTtlMs;
+    constructor(db, opts) {
         this.db = db;
+        this.resumeClaimTtlMs = opts?.resumeClaimTtlMs ?? DEFAULT_RESUME_CLAIM_TTL_MS;
     }
     q(tidb, pg) {
         return this.db.dialect === "tidb" ? tidb : pg;
@@ -35,19 +38,40 @@ export class SqlWorkflowJournalStore {
         const res = await this.db.query(this.q("DELETE FROM workflow_journal WHERE run_id = ?", "DELETE FROM workflow_journal WHERE run_id = $1"), [runId]);
         return res.affected;
     }
+    async resumeClaim(input) {
+        const now = Date.now();
+        const ins = await this.db.query(this.q("INSERT IGNORE INTO workflow_resume_claim (source_run_id, scope, new_run_id, claimed_at) VALUES (?, ?, ?, ?)", "INSERT INTO workflow_resume_claim (source_run_id, scope, new_run_id, claimed_at) VALUES ($1, $2, $3, $4) ON CONFLICT (source_run_id, scope) DO NOTHING"), [input.sourceRunId, input.scope, input.newRunId, now]);
+        if (ins.affected === 1)
+            return { granted: true };
+        const refresh = await this.db.query(this.q("UPDATE workflow_resume_claim SET claimed_at = ? WHERE source_run_id = ? AND scope = ? AND new_run_id = ?", "UPDATE workflow_resume_claim SET claimed_at = $1 WHERE source_run_id = $2 AND scope = $3 AND new_run_id = $4"), [now, input.sourceRunId, input.scope, input.newRunId]);
+        if (refresh.affected >= 1)
+            return { granted: true };
+        const takeover = await this.db.query(this.q("UPDATE workflow_resume_claim SET new_run_id = ?, claimed_at = ? WHERE source_run_id = ? AND scope = ? AND claimed_at < ?", "UPDATE workflow_resume_claim SET new_run_id = $1, claimed_at = $2 WHERE source_run_id = $3 AND scope = $4 AND claimed_at < $5"), [input.newRunId, now, input.sourceRunId, input.scope, now - this.resumeClaimTtlMs]);
+        if (takeover.affected >= 1)
+            return { granted: true };
+        const holder = await this.db.query(this.q("SELECT new_run_id FROM workflow_resume_claim WHERE source_run_id = ? AND scope = ?", "SELECT new_run_id FROM workflow_resume_claim WHERE source_run_id = $1 AND scope = $2"), [input.sourceRunId, input.scope]);
+        const row = holder.rows[0];
+        const holderId = row?.new_run_id === undefined ? undefined : String(row.new_run_id);
+        if (holderId === input.newRunId)
+            return { granted: true };
+        return { granted: false, holder: holderId };
+    }
+    async releaseResumeClaim(input) {
+        await this.db.query(this.q("DELETE FROM workflow_resume_claim WHERE source_run_id = ? AND scope = ? AND new_run_id = ?", "DELETE FROM workflow_resume_claim WHERE source_run_id = $1 AND scope = $2 AND new_run_id = $3"), [input.sourceRunId, input.scope, input.newRunId]);
+    }
     async reapExpired(now, maxAgeMs) {
         const res = await this.db.query(this.q("DELETE FROM workflow_journal WHERE created_at < ?", "DELETE FROM workflow_journal WHERE created_at < $1"), [now - maxAgeMs]);
         return res.affected;
     }
 }
 export class TiDBWorkflowJournalStore extends SqlWorkflowJournalStore {
-    constructor(pool) {
-        super(mysqlDriver(pool));
+    constructor(pool, opts) {
+        super(mysqlDriver(pool), opts);
     }
 }
 export class PgWorkflowJournalStore extends SqlWorkflowJournalStore {
-    constructor(pool) {
-        super(pgDriver(pool));
+    constructor(pool, opts) {
+        super(pgDriver(pool), opts);
     }
 }
 //# sourceMappingURL=workflow-journal-store-sql.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "1.320.0",
+  "version": "1.322.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",