@sema-agent/server 5.4.0 → 5.6.0

package/dist/boot/execution-env.js

@@ -163,7 +163,16 @@ export function createExecutionEnv(ctx) {
                     // [1009]② host-signal: the spawning shell knows whether a resident daemon will honor session
                     // wakeups — SCHEDULER_SESSION_WAKEUP=false flips the capability off at CONSTRUCTION (instance-
                     // lifetime snapshot, core TOCTOU 契约) so core's ScheduleWakeup refuses up front.
-                    ...(config.schedulerSessionWakeup === false ? { caps: { supportsSessionWakeup: false } } : {}),
+                    // [2436] session-lifetime 同族 host-signal(5.6.0):headless(无 daemon 收割)⇒
+                    // supportsSessionLifetime:false ⇒ CronCreate 前门拒收 + backend 第二道拒落盘,孤儿不产生。
+                    ...(config.schedulerSessionWakeup === false || config.schedulerSessionLifetime === false
+                        ? {
+                            caps: {
+                                ...(config.schedulerSessionWakeup === false ? { supportsSessionWakeup: false } : {}),
+                                ...(config.schedulerSessionLifetime === false ? { supportsSessionLifetime: false } : {}),
+                            },
+                        }
+                        : {}),
                 })
                 : undefined;
             if (hostScheduler)

package/dist/config-types.d.ts

@@ -615,6 +615,12 @@ export interface ServiceConfigFlat {
      *  of parking a wakeup that would never fire (TB background-reap族 [991]②b). Default ON (the co-resident
      *  TOC daemon does honor its own sessions' wakeups); opt-out only — SCHEDULER_ENABLED 同门. */
     schedulerSessionWakeup: boolean;
+    /** [2425]/[2436] session-lifetime 同族 host-signal(5.6.0):headless 部署(spawn 时已知无常驻 daemon
+     *  收割 session-lifetime 记录)设 `SCHEDULER_SESSION_LIFETIME=false` ⇒ capability 面
+     *  `supportsSessionLifetime:false` ⇒ core 的 CronCreate 前门拒收 durable:false(fail-closed 于工具层),
+     *  backend.schedule 第二道同拒——session 记录不落盘=孤儿不产生。Default ON(co-resident TOC daemon
+     *  真会收割);opt-out only,WAKEUP 同形。 */
+    schedulerSessionLifetime: boolean;
     /** R-survey/EnterPlanMode (core 1.167): MODEL-DRIVEN plan mode. When true, runs start with
      *  `TaskSpec.enablePlanMode:true` but NOT `handsReadOnly` (writable-start) → core auto-mounts `enter_plan_mode`
      *  (+ `present_plan`) so the model can self-call `enter_plan_mode` at ANY time it judges a task needs planning
@@ -879,7 +885,7 @@ export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled"
  *  函数不产出它,但它与 `autonomy` 是同一根治理棒的两半,归本组。 */
 export type ServiceAuthConfig = Pick<ServiceConfigFlat, "authToken" | "authTokens" | "allowUnauthedWrites" | "corsOrigins" | "principalHeader" | "requirePrincipal" | "autonomy" | "commandPolicy" | "operatorPrincipals" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "principalJwtMaxTtlSec" | "bindHost" | "bindHostSource">;
 /** 组:orchestration(编排 + 执行车道 + 沙箱面 + workflow/后台 agent 存留)。 */
-export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "remoteExec" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerStorePath" | "planModeEnabled" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentParkClaimStaleMs" | "rosterRetentionMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sessionAutoTitle" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspEnabled" | "lspHostEnabled" | "imageBakes">;
+export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "remoteExec" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerSessionLifetime" | "schedulerStorePath" | "planModeEnabled" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentParkClaimStaleMs" | "rosterRetentionMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sessionAutoTitle" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspEnabled" | "lspHostEnabled" | "imageBakes">;
 /** 组:limitsHttp(HTTP 面 + 各类上限/配额/回收窗)。 */
 export type ServiceLimitsHttpConfig = Pick<ServiceConfigFlat, "port" | "attachmentOrphanGraceMs" | "workspaceFileMaxBytes" | "attachmentMaxBytes" | "attachmentMimeAllowlist" | "attachmentUnboundTtlMs" | "infraCostRates" | "drainGraceMs" | "sighupIdleGraceMs" | "rateLimitPerMin" | "maxTaskCostUsd" | "maxTaskTokens" | "maxPrincipalCostUsd" | "costQuotaWindowSec" | "reapIntervalSec" | "runStaleSec" | "toolResultTtlSec">;
 /** 组:observability(可观测)。 */

package/dist/config.js

@@ -1,7 +1,7 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { CODE_AGENT_PROMPT, formatUserScope, isThinkingLevel, protocolOf, RECOMMENDED_SENSITIVE_PATTERNS, RETIRED_TOOL_NAMES } from "@sema-agent/core";
+import { CODE_AGENT_PROMPT, formatUserScope, isThinkingLevel, PROTOCOL_TABLE, protocolOf, RECOMMENDED_SENSITIVE_PATTERNS, RETIRED_TOOL_NAMES } from "@sema-agent/core";
 import { ROSTER_PRIMARY_ROLES, ROSTER_CHEAP_ROLES } from "@sema-agent/registry-core";
 import { parseApprovalHmacKeys, parsePrincipalJwks } from "./auth-keys.js"; // design/158 A4: the parser leaf — NOT security.js (base config layer must not value-import the 55KiB auth module)
 import { DEFAULT_ELICITATION_THROTTLE } from "./elicitation.js";
@@ -820,8 +820,10 @@ export function findUnmatchableToolNames(names) {
         }
         const ns = protocolOf(name);
         if (ns === undefined) {
+            // 5.3.0 协议表两行起,短名归属不再唯一(figma__x 可能是 mcp 短形或 a2a 短形)——指引枚举全表
+            // 前缀(与 core 5.3.0 自侧同族修同口径),不再手写死 mcp__。
             if (name.includes("__"))
-                out.push({ name, guidance: `pre-prefix MCP short form — the live name is mcp__${name}` });
+                out.push({ name, guidance: `pre-prefix short form — the live name carries a protocol prefix: ${PROTOCOL_TABLE.map((e) => `${e.prefix}${name}`).join(" or ")}` });
             continue;
         }
         if (ns.parse(name) === undefined) {
@@ -1177,6 +1179,7 @@ function parseOrchestrationDomain(ctx) {
         planModeEnabled: boolEnv("PLAN_MODE_ENABLED", true), // EnterPlanMode (core 1.167) model-driven plan; 🆕 default ON (resident — clay), PLAN_MODE_ENABLED=false opts out
         ...(process.env.SCHEDULER_STORE_PATH ? { schedulerStorePath: process.env.SCHEDULER_STORE_PATH } : {}),
         schedulerSessionWakeup: boolEnv("SCHEDULER_SESSION_WAKEUP", true), // [1009]② host-signal: default ON, the spawning shell opts a daemon-less engine out (PLAN_MODE_ENABLED 同形解析)
+        schedulerSessionLifetime: boolEnv("SCHEDULER_SESSION_LIFETIME", true), // [2436] 同族 host-signal(5.6.0):headless=false ⇒ CronCreate 前门拒 session-lifetime,孤儿不落盘
         selfOrchestrationModels: csv("SELF_ORCHESTRATION_MODELS"),
         selfOrchestrationWorkerIsolation: boolEnv("SELF_ORCHESTRATION_WORKER_ISOLATION", false),
         ...(workflowSizeGuideline ? { workflowSizeGuideline } : {}),
@@ -1324,7 +1327,7 @@ const AUTH_GROUP_KEYS = [
 const ORCHESTRATION_GROUP_KEYS = [
     "remoteExec", "worktreeIsolation", "leaderEnabled", "leaderFanoutEnabled", "routerEnabled", "selfOrchestrationEnabled",
     "selfOrchestrationModels", "selfOrchestrationWorkerIsolation", "forkEnabled", "experimentalObserverAgents",
-    "schedulerEnabled", "schedulerSessionWakeup", "schedulerStorePath", "planModeEnabled", "workflowRunStoreBackend",
+    "schedulerEnabled", "schedulerSessionWakeup", "schedulerSessionLifetime", "schedulerStorePath", "planModeEnabled", "workflowRunStoreBackend",
     "workflowOrphanGraceMs", "workflowJournalRetentionMs", "workflowRunRetentionMs", "workflowAgentsReadOnly",
     "workflowSizeGuideline", "backgroundAgentRetentionMs", "backgroundAgentStaleRunningMs",
     "backgroundAgentParkClaimStaleMs", "rosterRetentionMs", "scratchpadSweepTtlMs", "sandboxPkgSource",

package/dist/http/server.js

@@ -1925,6 +1925,10 @@ export function createHttpServer(rawDeps) {
                         errorCode: e.code === "checkpoint.invalid_outcome"
                             ? (outcome.gate === "policy_ask" ? "approval_binding_mismatch" : "resume_outcome_invalid")
                             : e.code,
+                        // [2422] HITL-2 裁 (a),core 5.3.0:invalid_outcome 同码两义(动作被换 vs 输入被换)——
+                        // detail.field 是唯一机读判别式,透传给 UI 路由恢复动作(boundCallId=重取 pending 列表,
+                        // boundInputHash=重审同动作的新输入)。缺席=core 未铸(非绑定类 invalid_outcome),不造键。
+                        ...(e.detail?.field ? { field: e.detail.field } : {}),
                         ...(retriable ? { retriable: true } : {}),
                     },
                 };

package/dist/plugins/background-agent-store-sql.js

@@ -66,13 +66,21 @@ function rowToSummary(r) {
             : {}),
     };
 }
-/** core reap 的 staleRunning 翻转形(逐字段照抄 InMemory:summary 只在缺席时补默认句)。 */
+/** core 的共享归因句(`STALE_RUNNING_REAP_ATTRIBUTION`,dist/core/background-agent-store.js:44)——
+ *  **值拷贝**:core 5.3.0 未把它放上包根(exports 只有 ./bench 与 ./fixtures 两条子路,deep import 会被
+ *  exports 图拒绝),已在提货回执里请 core 上包根,到货后换 import。漂移钉=backgroundAgentStoreContract
+ *  的 stale-running 条目逐字断言这句(store-contract-kit-db-integration §4.5,真双库)——core 改句必红。 */
+const STALE_RUNNING_REAP_ATTRIBUTION = "the host process was interrupted while this agent was running — its in-process state was lost. Check its worktree / output file for partial work before assuming the task landed (stale running row reaped).";
+/** core reap 的 staleRunning 翻转形(逐字段照抄 InMemory,background-agent-store.js:266-272):
+ *  summary **和 error** 都只在缺席时补共享归因句——error 半边 5.2.0 起就该有,双生此前只写 summary
+ *  且是手写旧句(core 5.3.0 新试剂盒首跑两方言一致揪红,[2425] bg-agent B 族同源),真失败文本永不覆写。 */
 function flippedForm(live, now) {
     return {
         ...live,
         status: "failed",
         stoppedBy: "system",
-        summary: live.summary ?? "host process interrupted (stale running row reaped)",
+        summary: live.summary ?? STALE_RUNNING_REAP_ATTRIBUTION,
+        error: live.error ?? STALE_RUNNING_REAP_ATTRIBUTION,
         settledAt: now,
         updatedAt: now,
     };

package/dist/plugins/scheduler-support.js

@@ -145,6 +145,12 @@ export class FileSchedulerBackend {
         if (intent.lifetime === "session" && !ctx.sessionId) {
             return err(new SchedulerError("invalid_schedule", 'lifetime:"session" requires a session to bind to (ctx.sessionId missing)'));
         }
+        // [2436] 纵深(5.6.0):能力面已声明无 daemon 收割 session-lifetime(headless 部署形,
+        // SCHEDULER_SESSION_LIFETIME=false)⇒ 落盘一条即必然孤儿([2425] 外溢病)。core 的 CronCreate 读
+        // 能力面在工具层前门拒是第一道;这里是第二道——错装配宿主绕过工具层直调也不许落盘。
+        if (intent.lifetime === "session" && this.schedulerCapabilities.supportsSessionLifetime === false) {
+            return err(new SchedulerError("invalid_schedule", 'lifetime:"session" is not supported on this deployment (no resident daemon reaps session-lifetime records — the row would be an orphan)'));
+        }
         const records = this.load();
         const key = dedupKey(ctx.scope, intent, ctx.sessionId);
         const existingIdx = records.findIndex((r) => {
@@ -194,9 +200,12 @@ export class FileSchedulerBackend {
     async cancel(id, ctx) {
         const records = this.load();
         const idx = records.findIndex((r) => r.id === id);
-        // 🔴 scope isolation: a non-own-scope id is `not_found` (don't leak existence). Idempotent: missing = ok.
-        if (idx < 0 || records[idx].scope !== ctx.scope)
-            return ok(undefined);
+        // 🔴 scope isolation + 假肯定病修([2425]/[2209],5.6.0):missing 与 non-own-scope **同折**
+        // err(not_found)——存在性仍不泄露(错 id/别人的任务/已删的重试三条到达路径一个答案),但不再
+        // ok(undefined) 谎报「删掉了」。旧形的代价是真实的:模型删错 id 得到成功回执,真任务继续按点起跑。
+        if (idx < 0 || records[idx].scope !== ctx.scope) {
+            return err(new SchedulerError("not_found", `no scheduled task ${id} in your scope (wrong id, already cancelled, or not yours)`));
+        }
         records.splice(idx, 1);
         try {
             this.save(records);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "5.4.0",
+  "version": "5.6.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.2.0",
+    "@sema-agent/core": "^5.3.0",
     "@sema-agent/registry-core": "^0.13.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",