@sema-agent/server 5.5.0 → 5.7.0

package/dist/boot/execution-env.js

@@ -163,7 +163,16 @@ export function createExecutionEnv(ctx) {
                     // [1009]② host-signal: the spawning shell knows whether a resident daemon will honor session
                     // wakeups — SCHEDULER_SESSION_WAKEUP=false flips the capability off at CONSTRUCTION (instance-
                     // lifetime snapshot, core TOCTOU 契约) so core's ScheduleWakeup refuses up front.
-                    ...(config.schedulerSessionWakeup === false ? { caps: { supportsSessionWakeup: false } } : {}),
+                    // [2436] session-lifetime 同族 host-signal(5.6.0):headless(无 daemon 收割)⇒
+                    // supportsSessionLifetime:false ⇒ CronCreate 前门拒收 + backend 第二道拒落盘,孤儿不产生。
+                    ...(config.schedulerSessionWakeup === false || config.schedulerSessionLifetime === false
+                        ? {
+                            caps: {
+                                ...(config.schedulerSessionWakeup === false ? { supportsSessionWakeup: false } : {}),
+                                ...(config.schedulerSessionLifetime === false ? { supportsSessionLifetime: false } : {}),
+                            },
+                        }
+                        : {}),
                 })
                 : undefined;
             if (hostScheduler)

package/dist/config-types.d.ts

@@ -615,6 +615,12 @@ export interface ServiceConfigFlat {
      *  of parking a wakeup that would never fire (TB background-reap族 [991]②b). Default ON (the co-resident
      *  TOC daemon does honor its own sessions' wakeups); opt-out only — SCHEDULER_ENABLED 同门. */
     schedulerSessionWakeup: boolean;
+    /** [2425]/[2436] session-lifetime 同族 host-signal(5.6.0):headless 部署(spawn 时已知无常驻 daemon
+     *  收割 session-lifetime 记录)设 `SCHEDULER_SESSION_LIFETIME=false` ⇒ capability 面
+     *  `supportsSessionLifetime:false` ⇒ core 的 CronCreate 前门拒收 durable:false(fail-closed 于工具层),
+     *  backend.schedule 第二道同拒——session 记录不落盘=孤儿不产生。Default ON(co-resident TOC daemon
+     *  真会收割);opt-out only,WAKEUP 同形。 */
+    schedulerSessionLifetime: boolean;
     /** R-survey/EnterPlanMode (core 1.167): MODEL-DRIVEN plan mode. When true, runs start with
      *  `TaskSpec.enablePlanMode:true` but NOT `handsReadOnly` (writable-start) → core auto-mounts `enter_plan_mode`
      *  (+ `present_plan`) so the model can self-call `enter_plan_mode` at ANY time it judges a task needs planning
@@ -879,7 +885,7 @@ export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled"
  *  函数不产出它,但它与 `autonomy` 是同一根治理棒的两半,归本组。 */
 export type ServiceAuthConfig = Pick<ServiceConfigFlat, "authToken" | "authTokens" | "allowUnauthedWrites" | "corsOrigins" | "principalHeader" | "requirePrincipal" | "autonomy" | "commandPolicy" | "operatorPrincipals" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "principalJwtMaxTtlSec" | "bindHost" | "bindHostSource">;
 /** 组:orchestration(编排 + 执行车道 + 沙箱面 + workflow/后台 agent 存留)。 */
-export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "remoteExec" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerStorePath" | "planModeEnabled" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentParkClaimStaleMs" | "rosterRetentionMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sessionAutoTitle" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspEnabled" | "lspHostEnabled" | "imageBakes">;
+export type ServiceOrchestrationConfig = Pick<ServiceConfigFlat, "remoteExec" | "worktreeIsolation" | "leaderEnabled" | "leaderFanoutEnabled" | "routerEnabled" | "selfOrchestrationEnabled" | "selfOrchestrationModels" | "selfOrchestrationWorkerIsolation" | "forkEnabled" | "experimentalObserverAgents" | "schedulerEnabled" | "schedulerSessionWakeup" | "schedulerSessionLifetime" | "schedulerStorePath" | "planModeEnabled" | "workflowRunStoreBackend" | "workflowOrphanGraceMs" | "workflowJournalRetentionMs" | "workflowRunRetentionMs" | "workflowAgentsReadOnly" | "workflowSizeGuideline" | "backgroundAgentRetentionMs" | "backgroundAgentStaleRunningMs" | "backgroundAgentParkClaimStaleMs" | "rosterRetentionMs" | "scratchpadSweepTtlMs" | "sandboxPkgSource" | "sessionAutoTitle" | "selectEnvironmentTool" | "envFactsEnabled" | "toolDeferLongtail" | "lspEnabled" | "lspHostEnabled" | "imageBakes">;
 /** 组:limitsHttp(HTTP 面 + 各类上限/配额/回收窗)。 */
 export type ServiceLimitsHttpConfig = Pick<ServiceConfigFlat, "port" | "attachmentOrphanGraceMs" | "workspaceFileMaxBytes" | "attachmentMaxBytes" | "attachmentMimeAllowlist" | "attachmentUnboundTtlMs" | "infraCostRates" | "drainGraceMs" | "sighupIdleGraceMs" | "rateLimitPerMin" | "maxTaskCostUsd" | "maxTaskTokens" | "maxPrincipalCostUsd" | "costQuotaWindowSec" | "reapIntervalSec" | "runStaleSec" | "toolResultTtlSec">;
 /** 组:observability(可观测)。 */

package/dist/config.js

@@ -448,7 +448,7 @@ function parseStoreDomain(ctx) {
     const needsDb = needsTidb;
     return {
         sessionBackend,
-        sessionCacheTtlSec: Number(env("SESSION_CACHE_TTL_SEC", "300")),
+        sessionCacheTtlSec: numEnv("SESSION_CACHE_TTL_SEC", "300"), // A2 同族:NaN ⇒ `> 0` 假 ⇒ 缓存静默关
         rewindSnapshotMaxMb: optFinitePositiveEnv("REWIND_SNAPSHOT_MAX_MB"), // soft knob (S20: bad value warns + default)
         dbBackend,
         dbBackendExplicit: dbBackendSet,
@@ -748,7 +748,7 @@ function parseModelDomain() {
                 baseUrl: firstSetEnv("ANTHROPIC_BASE_URL"),
                 version: process.env.ANTHROPIC_VERSION,
                 cacheBreakpoints: (process.env.ANTHROPIC_CACHE_BREAKPOINTS ?? "true") === "true",
-                ...(process.env.ANTHROPIC_MAX_RETRIES ? { maxRetries: Number(env("ANTHROPIC_MAX_RETRIES", "2")) } : {}),
+                ...(process.env.ANTHROPIC_MAX_RETRIES ? { maxRetries: numEnv("ANTHROPIC_MAX_RETRIES", "2") } : {}), // A1 同族:NaN 会把 SDK 重试面折没
             }
             : undefined,
         resilience: {
@@ -756,16 +756,19 @@ function parseModelDomain() {
             // timer only arms AFTER the first token (bumpIdle lives in sawContentToken), so with these
             // two off a stream that opens but never emits hangs unbounded — the one true blind spot the
             // fleet audit found. Values follow the [880] recommendation; =0 restores off.
-            connectTimeoutMs: Number(env("MODEL_CONNECT_TIMEOUT_MS", "30000")),
-            firstTokenTimeoutMs: Number(env("MODEL_FIRST_TOKEN_TIMEOUT_MS", "120000")),
+            // 鲁棒性批1 A1(2026-08-03):这五个是 TASK_TIMEOUT_SEC 同族的**危险方向**键——NaN 在 core 的
+            // `if (x && x > 0)` 门下判假 ⇒ 看门狗/熔断静默关(设了收紧值反而更松)。当年 gap-sweep 的棘轮
+            // 正则只抓 process.env 直读拼法,这批「裸 Number 包 env() helper」从盲区漏网;门已补第二正则。
+            connectTimeoutMs: numEnv("MODEL_CONNECT_TIMEOUT_MS", "30000"),
+            firstTokenTimeoutMs: numEnv("MODEL_FIRST_TOKEN_TIMEOUT_MS", "120000"),
             // BEHAVIOR CHANGE (CC 196 parity): mid-stream stall watchdog default ON at 5min —
             // after output starts, 5min of zero deltas cancels the stream as a retryable [network] failure
             // (retry/failover recovers; without it a hung gateway pins the turn until the user Escapes).
             // MODEL_IDLE_TIMEOUT_MS=0 restores off.
-            idleTimeoutMs: Number(env("MODEL_IDLE_TIMEOUT_MS", "300000")),
+            idleTimeoutMs: numEnv("MODEL_IDLE_TIMEOUT_MS", "300000"),
             circuitBreaker: boolEnv("MODEL_CIRCUIT_BREAKER", false),
-            failureThreshold: Number(env("MODEL_CB_FAILURE_THRESHOLD", "5")),
-            cooldownMs: Number(env("MODEL_CB_COOLDOWN_MS", "30000")),
+            failureThreshold: numEnv("MODEL_CB_FAILURE_THRESHOLD", "5"),
+            cooldownMs: numEnv("MODEL_CB_COOLDOWN_MS", "30000"),
         },
         model,
         models,
@@ -1179,6 +1182,7 @@ function parseOrchestrationDomain(ctx) {
         planModeEnabled: boolEnv("PLAN_MODE_ENABLED", true), // EnterPlanMode (core 1.167) model-driven plan; 🆕 default ON (resident — clay), PLAN_MODE_ENABLED=false opts out
         ...(process.env.SCHEDULER_STORE_PATH ? { schedulerStorePath: process.env.SCHEDULER_STORE_PATH } : {}),
         schedulerSessionWakeup: boolEnv("SCHEDULER_SESSION_WAKEUP", true), // [1009]② host-signal: default ON, the spawning shell opts a daemon-less engine out (PLAN_MODE_ENABLED 同形解析)
+        schedulerSessionLifetime: boolEnv("SCHEDULER_SESSION_LIFETIME", true), // [2436] 同族 host-signal(5.6.0):headless=false ⇒ CronCreate 前门拒 session-lifetime,孤儿不落盘
         selfOrchestrationModels: csv("SELF_ORCHESTRATION_MODELS"),
         selfOrchestrationWorkerIsolation: boolEnv("SELF_ORCHESTRATION_WORKER_ISOLATION", false),
         ...(workflowSizeGuideline ? { workflowSizeGuideline } : {}),
@@ -1247,7 +1251,7 @@ function parseLimitsHttpDomain() {
         costQuotaWindowSec: numEnv("COST_QUOTA_WINDOW_SEC", "86400"),
         reapIntervalSec: numEnv("REAP_INTERVAL_SEC", "60"),
         runStaleSec: numEnv("REAP_RUN_STALE_SEC", "120"),
-        toolResultTtlSec: Number(env("TOOL_RESULT_TTL_SEC", "86400")),
+        toolResultTtlSec: numEnv("TOOL_RESULT_TTL_SEC", "86400"), // A2 同族:NaN ⇒ reapOlderThan(NaN) 永不回收且被 .catch 吞
     };
 }
 /** 域:observability(可观测)—— 指标/追踪令牌、工具与思考轨迹开关、日志档位、OTLP 出口。 */
@@ -1326,7 +1330,7 @@ const AUTH_GROUP_KEYS = [
 const ORCHESTRATION_GROUP_KEYS = [
     "remoteExec", "worktreeIsolation", "leaderEnabled", "leaderFanoutEnabled", "routerEnabled", "selfOrchestrationEnabled",
     "selfOrchestrationModels", "selfOrchestrationWorkerIsolation", "forkEnabled", "experimentalObserverAgents",
-    "schedulerEnabled", "schedulerSessionWakeup", "schedulerStorePath", "planModeEnabled", "workflowRunStoreBackend",
+    "schedulerEnabled", "schedulerSessionWakeup", "schedulerSessionLifetime", "schedulerStorePath", "planModeEnabled", "workflowRunStoreBackend",
     "workflowOrphanGraceMs", "workflowJournalRetentionMs", "workflowRunRetentionMs", "workflowAgentsReadOnly",
     "workflowSizeGuideline", "backgroundAgentRetentionMs", "backgroundAgentStaleRunningMs",
     "backgroundAgentParkClaimStaleMs", "rosterRetentionMs", "scratchpadSweepTtlMs", "sandboxPkgSource",

package/dist/fleet-client.d.ts

@@ -16,6 +16,10 @@ import { UsageReport } from "@sema-agent/registry-core/fleet";
 /** Bound on distinct principal×model keys per window — a runaway/multi-tenant burst collapses into
  *  `__other__` instead of growing unbounded (same posture as budget.ts cardinalityGuard). */
 export declare const FLEET_USAGE_KEY_CAP = 1024;
+/** C1(2026-08-03):announce/usage/deregister 三站点的 fetch 上界(fleet-lease `LEASE_FETCH_TIMEOUT_MS`
+ *  同款判据的普适形)。比 lease 的 2500 略宽——这三条不在提交热路径,5s 足以吃掉慢网 RTT,又远小于
+ *  undici 默认 ~300s headersTimeout(此前半开 center 把 stop()/心跳各钉住到那个量级)。 */
+export declare const FLEET_CLIENT_FETCH_TIMEOUT_MS = 5000;
 /**
  * Per-window principal×model usage accumulator, fed from the tracer's `brain.call` hook (which carries the
  * ALS principal — reaches council/team sub-task spend too, same attribution point costQuota uses). Sync,

package/dist/fleet-client.js

@@ -16,6 +16,10 @@ import { InstanceAnnouncement, UsageReport, DEFAULT_HEARTBEAT_MS } from "@sema-a
 /** Bound on distinct principal×model keys per window — a runaway/multi-tenant burst collapses into
  *  `__other__` instead of growing unbounded (same posture as budget.ts cardinalityGuard). */
 export const FLEET_USAGE_KEY_CAP = 1024;
+/** C1(2026-08-03):announce/usage/deregister 三站点的 fetch 上界(fleet-lease `LEASE_FETCH_TIMEOUT_MS`
+ *  同款判据的普适形)。比 lease 的 2500 略宽——这三条不在提交热路径,5s 足以吃掉慢网 RTT,又远小于
+ *  undici 默认 ~300s headersTimeout(此前半开 center 把 stop()/心跳各钉住到那个量级)。 */
+export const FLEET_CLIENT_FETCH_TIMEOUT_MS = 5000;
 /**
  * Per-window principal×model usage accumulator, fed from the tracer's `brain.call` hook (which carries the
  * ALS principal — reaches council/team sub-task spend too, same attribution point costQuota uses). Sync,
@@ -122,7 +126,10 @@ export function startFleetClient(opts) {
             heartbeatMs,
         };
         try {
-            const res = await f(`${base}/api/fleet/instances`, { method: "POST", headers, body: JSON.stringify(body) });
+            // 鲁棒性批1 C1(2026-08-03):三条对 center 的 fetch 全部界上 abort(fleet-lease O1 同款判据的
+            // 普适形)——半开 center 下此前各挂 undici 默认 ~300s headersTimeout,stop() 的滚动更新被单个
+            // 半开连接钉住;心跳侧每 tick 叠一个在飞请求。
+            const res = await f(`${base}/api/fleet/instances`, { method: "POST", headers, body: JSON.stringify(body), signal: AbortSignal.timeout(FLEET_CLIENT_FETCH_TIMEOUT_MS) });
             if (!res.ok)
                 throw new Error(`announce ${res.status}`);
             if (failStreak > 0)
@@ -147,7 +154,7 @@ export function startFleetClient(opts) {
             return; // nothing accrued — skip the POST entirely
         const report = { worker: opts.center.worker, instanceId: opts.instanceId, windowStartMs: start, windowEndMs, entries };
         try {
-            const res = await f(`${base}/api/fleet/usage`, { method: "POST", headers, body: JSON.stringify({ reports: [report] }) });
+            const res = await f(`${base}/api/fleet/usage`, { method: "POST", headers, body: JSON.stringify({ reports: [report] }), signal: AbortSignal.timeout(FLEET_CLIENT_FETCH_TIMEOUT_MS) });
             if (!res.ok)
                 throw new Error(`usage ${res.status}`);
         }
@@ -171,7 +178,7 @@ export function startFleetClient(opts) {
             clearInterval(uw);
         await flushUsage(); // final partial window — best-effort
         try {
-            await f(`${base}/api/fleet/instances`, { method: "DELETE", headers, body: JSON.stringify({ instanceId: opts.instanceId, worker: opts.center.worker }) });
+            await f(`${base}/api/fleet/instances`, { method: "DELETE", headers, body: JSON.stringify({ instanceId: opts.instanceId, worker: opts.center.worker }), signal: AbortSignal.timeout(FLEET_CLIENT_FETCH_TIMEOUT_MS) });
         }
         catch {
             /* deregistration is best-effort — staleness (2× heartbeatMs) reaps us anyway */

package/dist/plugins/background-agent-store-sql.js

@@ -1,4 +1,4 @@
-import { BackgroundAgentStoreError, } from "@sema-agent/core";
+import { BackgroundAgentStoreError, STALE_RUNNING_REAP_ATTRIBUTION, } from "@sema-agent/core";
 import { pgSafeJsonStringify, pgSanitizeText } from "./pg-safe-json.js";
 export const BACKGROUND_AGENT_TABLE = "background_agents";
 const SUMMARY_COLS = "handle, owner, session_scoped, session_id, parent_session_id, root_session_id, name, agent_type, status, spawned_at_ms, updated_at_ms, settled_at_ms, usage_json";
@@ -66,11 +66,8 @@ function rowToSummary(r) {
             : {}),
     };
 }
-/** core 的共享归因句(`STALE_RUNNING_REAP_ATTRIBUTION`,dist/core/background-agent-store.js:44)——
- *  **值拷贝**:core 5.3.0 未把它放上包根(exports 只有 ./bench 与 ./fixtures 两条子路,deep import 会被
- *  exports 图拒绝),已在提货回执里请 core 上包根,到货后换 import。漂移钉=backgroundAgentStoreContract
- *  的 stale-running 条目逐字断言这句(store-contract-kit-db-integration §4.5,真双库)——core 改句必红。 */
-const STALE_RUNNING_REAP_ATTRIBUTION = "the host process was interrupted while this agent was running — its in-process state was lost. Check its worktree / output file for partial work before assuming the task landed (stale running row reaped).";
+// 共享归因句:core 5.4.0 起上包根([2436] 请求→[2437] 兑现),值拷贝退役——同一常量,双生与
+// InMemory 语义源头彻底同源;试剂盒条目仍逐字断言它(真双库),但漂移自此在编译期就不可能发生。
 /** core reap 的 staleRunning 翻转形(逐字段照抄 InMemory,background-agent-store.js:266-272):
  *  summary **和 error** 都只在缺席时补共享归因句——error 半边 5.2.0 起就该有,双生此前只写 summary
  *  且是手写旧句(core 5.3.0 新试剂盒首跑两方言一致揪红,[2425] bg-agent B 族同源),真失败文本永不覆写。 */

package/dist/plugins/scheduler-support.js

@@ -145,6 +145,12 @@ export class FileSchedulerBackend {
         if (intent.lifetime === "session" && !ctx.sessionId) {
             return err(new SchedulerError("invalid_schedule", 'lifetime:"session" requires a session to bind to (ctx.sessionId missing)'));
         }
+        // [2436] 纵深(5.6.0):能力面已声明无 daemon 收割 session-lifetime(headless 部署形,
+        // SCHEDULER_SESSION_LIFETIME=false)⇒ 落盘一条即必然孤儿([2425] 外溢病)。core 的 CronCreate 读
+        // 能力面在工具层前门拒是第一道;这里是第二道——错装配宿主绕过工具层直调也不许落盘。
+        if (intent.lifetime === "session" && this.schedulerCapabilities.supportsSessionLifetime === false) {
+            return err(new SchedulerError("invalid_schedule", 'lifetime:"session" is not supported on this deployment (no resident daemon reaps session-lifetime records — the row would be an orphan)'));
+        }
         const records = this.load();
         const key = dedupKey(ctx.scope, intent, ctx.sessionId);
         const existingIdx = records.findIndex((r) => {
@@ -194,9 +200,12 @@ export class FileSchedulerBackend {
     async cancel(id, ctx) {
         const records = this.load();
         const idx = records.findIndex((r) => r.id === id);
-        // 🔴 scope isolation: a non-own-scope id is `not_found` (don't leak existence). Idempotent: missing = ok.
-        if (idx < 0 || records[idx].scope !== ctx.scope)
-            return ok(undefined);
+        // 🔴 scope isolation + 假肯定病修([2425]/[2209],5.6.0):missing 与 non-own-scope **同折**
+        // err(not_found)——存在性仍不泄露(错 id/别人的任务/已删的重试三条到达路径一个答案),但不再
+        // ok(undefined) 谎报「删掉了」。旧形的代价是真实的:模型删错 id 得到成功回执,真任务继续按点起跑。
+        if (idx < 0 || records[idx].scope !== ctx.scope) {
+            return err(new SchedulerError("not_found", `no scheduled task ${id} in your scope (wrong id, already cancelled, or not yours)`));
+        }
         records.splice(idx, 1);
         try {
             this.save(records);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "5.5.0",
+  "version": "5.7.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.3.0",
+    "@sema-agent/core": "^5.4.0",
     "@sema-agent/registry-core": "^0.13.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",