@sema-agent/server 6.2.0 → 6.2.1

package/dist/bake-runner/runner.js

@@ -191,6 +191,17 @@ export class BakeRunner {
                 enqueueIngest(dockerBuildTickFrame(nextOrd(ord), Math.floor(elapsed / 1000)));
             }
         })();
+        // #131-6:创建即挂接——rejection 若等到 stopSupervisor(child 退出后)才有人接,会在整个构建
+        // 时长内悬置,Node 默认 unhandled-rejections=throw 直接终结 runner 进程。挂接后 supervisor 腿
+        // 静默死掉的后果有界:lease 心跳停 → image-api reaper 兜底(与 heartbeat error continue 同口径)。
+        void supervisor.catch((err) => {
+            try {
+                this.o.log.warn("bake_supervisor_error", { bakeId: bake.bakeId, err: String(err) });
+            }
+            catch {
+                /* 日志面故障不再外抛 */
+            }
+        });
         const exit = await child.exited;
         childExited = true;
         this.stopSupervisor(supervisor);

package/dist/boot/config-center.d.ts

@@ -42,6 +42,8 @@ export interface ConfigCenterRuntime {
         runnerTierFrozen: boolean;
         pricing: ReturnType<typeof buildPricing>;
     }): void;
+    /** #131-2:停刷新环(hardShutdown 收尾链;幂等,未起环时 no-op)。 */
+    stopRefreshLoop(): void;
     /** 晚绑取值:refresh 热应用会整个换引用(hook LLM / resolveSpec 每次现取)。 */
     getKeyResolver(): ((model: ModelKeyRef) => Promise<{
         apiKey: string;

package/dist/boot/config-center.js

@@ -485,6 +485,8 @@ export async function createConfigCenterRuntime(ctx) {
     // 函数而非常量:`config.degrade` 今天由 env 独占(applyEffective 不写它),但若哪天中心接管这面,这里
     // 自动跟着走,不会退化成 boot 期快照。车道关(默认)⇒ ctx 空 ⇒ 该片恒 null ⇒ 零行为变化。
     const restartCtx = () => (config.degrade?.reactive ? { reactiveDegradeTo: config.degrade.to } : {});
+    // #131-2:60s 刷新环的句柄提到 runtime 闭包层——stopRefreshLoop(hardShutdown 收尾链)要能清它。
+    let ccTimer;
     return {
         providerKind: configProvider?.kind,
         promptSource,
@@ -913,7 +915,7 @@ export async function createConfigCenterRuntime(ctx) {
                         refreshInFlight = false;
                     }
                 };
-                const ccTimer = setInterval(() => void refreshTick(), 60_000);
+                ccTimer = setInterval(() => void refreshTick(), 60_000);
                 ccTimer.unref?.();
                 // Boot-deferred continuation(二轮复审 F5 改形):到货结果按「迟到的 boot」处理,而不是转普通 tick——
                 // 普通 tick 的 restartReasons(undefined, r) 会把 prompts/skills 面全判为差异 → restart → 中心持续慢时
@@ -1020,6 +1022,13 @@ export async function createConfigCenterRuntime(ctx) {
                     void bootConfigPending.then((r) => (lkgBooted ? refreshTick(r) : deferredBootApply(r)), () => { });
             }
         },
+        stopRefreshLoop() {
+            // #131-2:hardShutdown 收尾链——停机中途不再热应用配置(幂等;env 部署没起环时是 no-op)。
+            if (ccTimer !== undefined) {
+                clearInterval(ccTimer);
+                ccTimer = undefined;
+            }
+        },
     };
 }
 //# sourceMappingURL=config-center.js.map

package/dist/boot/shutdown.d.ts

@@ -44,6 +44,16 @@ export interface ShutdownCtx {
         inflight?: () => number;
         lastActivityAt?: () => number;
     };
+    /** #131-2:store 活体探针(main 建)——不停的话 hardShutdown 后仍对正在关闭的池发探针,刷假
+     *  store_probe_dead 告警(文件头契约 3 的同族漏网)。缺席 = 该部署形没建探针。 */
+    storeLiveProbe: {
+        stop(): void;
+    } | undefined;
+    /** #131-2:config 60s 刷新环(config-center startRefreshLoop)——不停的话停机中途还可能热应用
+     *  一份新配置。缺席 = 纯 env 部署没起环。 */
+    configCenter: {
+        stopRefreshLoop(): void;
+    } | undefined;
 }
 /** 注册 SIGTERM/SIGINT/SIGHUP 收尾链。**必须在 listen 之后调用**(见文件头「位置即契约」)。 */
 export declare function installShutdownHandlers(ctx: ShutdownCtx): void;

package/dist/boot/shutdown.js

@@ -17,13 +17,15 @@ import { Runner, defaultTaskRegistry } from "@sema-agent/core";
 import { createSighupIdleHandler } from "../sighup-idle.js";
 /** 注册 SIGTERM/SIGINT/SIGHUP 收尾链。**必须在 listen 之后调用**(见文件头「位置即契约」)。 */
 export function installShutdownHandlers(ctx) {
-    const { config, logger, server, reaper, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, } = ctx;
+    const { config, logger, server, reaper, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, configCenter, } = ctx;
     let closing = false;
     const hardShutdown = () => {
         if (closing)
             return;
         closing = true;
         clearInterval(reaper);
+        storeLiveProbe?.stop(); // #131-2:契约 3 同族——收尾期不再有探针 tick 打向正在关闭的池
+        configCenter?.stopRefreshLoop(); // #131-2:停机中途不再热应用配置
         otelExporter?.stop();
         breakerState?.stop();
         if (costQuota && "stop" in costQuota)

package/dist/http/idempotency.js

@@ -43,7 +43,16 @@ export class IdempotencyCache {
         // cacheable success for the TTL. Handlers also avert an unhandled-rejection on the cached copy; the returned
         // promise is the same object the caller awaits, so errors still surface to the caller.
         promise.then((value) => {
-            if (!shouldCache(value))
+            // #131-7:谓词抛=当不可缓存(重试重跑)。裸调时谓词一抛,这条**派生** promise 就成了无人接的
+            // rejection(调用方拿的是原 promise,接不到它),且条目滞留缓存——双错方向。
+            let cacheable = false;
+            try {
+                cacheable = shouldCache(value);
+            }
+            catch {
+                /* fall through: cacheable=false */
+            }
+            if (!cacheable)
                 this.entries.delete(key);
         }, () => this.entries.delete(key));
         return promise;

package/dist/http/routes/tasks.js

@@ -45,6 +45,10 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                     if (!res.writableEnded)
                         res.write(`event: heartbeat\ndata: {}\n\n`); // real frame (not an SSE comment) — a per-frame-parsing BFF drops comments, so downstream saw a zero-frame window; EventSource clients without a heartbeat listener ignore it (zero break)
                 }, 15_000);
+                hb.unref?.(); // #131-5①:同文件 durableHeartbeat 口径——停机时心跳不拖事件循环
+                // #131-5②:重试客户端断连即清——`cached` 可悬到原始流 settle(deadline 级时长),此前这个
+                // timer 一直空转到那时(写有 writableEnded 守卫,烧的是 tick 本身);finally 仍是兜底清。
+                res.on("close", () => clearInterval(hb));
                 try {
                     const resp = await cached;
                     if (!res.writableEnded)
@@ -160,6 +164,7 @@ async function handleTasksBody(req, res, url, ctx, miss) {
                 if (!res.writableEnded && !res.destroyed)
                     res.write(`event: heartbeat\ndata: {}\n\n`); // real frame (not an SSE comment) — a per-frame-parsing BFF drops comments, so downstream saw a zero-frame window; EventSource clients without a heartbeat listener ignore it (zero break)
             }, 15_000);
+            hb.unref?.(); // #131-5①:同文件 durableHeartbeat 口径——停机时心跳不拖事件循环
             // Wrap the whole stream in idemCache.run so the IN-FLIGHT promise is stored BEFORE work begins — a retry
             // that arrives WHILE this stream is still running (relay timeout → re-send same key) is then caught by the
             // peek above and replays this result instead of starting a second billable stream (council). `ranLive`

package/dist/main.js

@@ -999,6 +999,7 @@ async function main() {
     installShutdownHandlers({
         config, logger, server, reaper, otelExporter, breakerState, costQuota, rateLimiter,
         runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState,
+        storeLiveProbe, configCenter, // #131-2:两个漏网的进程级后台环进收尾链
     });
 }
 void main().catch((err) => {

package/dist/memory-sync-client.js

@@ -10,6 +10,7 @@
 //   ③ 串行化 + 节流:syncOnce 按 promise 链串行(两轮并发会在同一文件面上交错写);trigger =
 //      fire-and-forget,上一轮在飞(排队中/执行中)则跳过(设计:简单 inflight 布尔)。
 // conflicts = logger.warn 逐条上报(不自动 ladder——败者铸 sibling 的解决动作留给 operator/后续单)。
+import { randomBytes } from "node:crypto";
 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { encodeScopeSegment, syncMemoryScope, } from "@sema-agent/core";
@@ -85,7 +86,10 @@ async function loadCursor(path, scope, peer, log) {
 /** 写 cursor:tmp + rename 原子(半写的 cursor = 下轮坏 JSON 当首轮,重收敛而非错基线)。 */
 async function saveCursor(path, cursor) {
     await mkdir(dirname(path), { recursive: true });
-    const tmp = `${path}.tmp`;
+    // #131-3:staging 名带熵(pid+random)——共享 memoryRoot 的跨进程形(server + run-local 同 data 根)
+    // 用固定 `.tmp` 会互抢 staging(一侧 rename 走对方的 tmp ⇒ 对方 ENOENT / 写出对方字节);同仓其余
+    // 原子写(config-lkg / local-session-store / skills-mcp / workflow-completion-inbox)全带熵,此处对齐。
+    const tmp = `${path}.tmp.${process.pid}.${randomBytes(4).toString("hex")}`;
     await writeFile(tmp, JSON.stringify(cursor), "utf8");
     await rename(tmp, path);
 }

package/dist/plugins/background-shell-support.d.ts

@@ -143,6 +143,10 @@ export declare class BackgroundShellManager<S> {
      * all-or-nothing: put every operation that can throw BEFORE the first side effect, or clean up on the throw
      * path itself. Today's three lane builders are entirely non-throwing (listener attach + object construction).
      */
+    /** #131-T0:两条注册腿共用的 BG 超时钳制。非有限值(NaN/±Infinity)当缺席回退 default——
+     *  Math.max/min 对 NaN 全塌 NaN,setTimeout(NaN) 被 Node 折成 1ms = 后台 shell 秒杀
+     *  (方向反转:想给超时变成即杀;同族判例 TASK_TIMEOUT_SEC / leader 旋钮非法值)。 */
+    private boundedBgTimeoutSec;
     adoptSync(builder: (ctx: LaunchCtx) => S, timeoutSec?: number): {
         shellId: BackgroundShellId;
     } | undefined;

package/dist/plugins/background-shell-support.js

@@ -146,11 +146,22 @@ export class BackgroundShellManager {
      * all-or-nothing: put every operation that can throw BEFORE the first side effect, or clean up on the throw
      * path itself. Today's three lane builders are entirely non-throwing (listener attach + object construction).
      */
+    /** #131-T0:两条注册腿共用的 BG 超时钳制。非有限值(NaN/±Infinity)当缺席回退 default——
+     *  Math.max/min 对 NaN 全塌 NaN,setTimeout(NaN) 被 Node 折成 1ms = 后台 shell 秒杀
+     *  (方向反转:想给超时变成即杀;同族判例 TASK_TIMEOUT_SEC / leader 旋钮非法值)。 */
+    boundedBgTimeoutSec(timeoutSec) {
+        const wanted = timeoutSec !== undefined && Number.isFinite(timeoutSec) ? timeoutSec : undefined;
+        // caps 同座防御:default/max 由各 lane 从常数×cfg 推导(k8s 腿含 cfg.timeoutMs 除法),坏输入会把
+        // NaN 带进 caps——任何一格非有限即回退安全常数(30min/24h,方向:保「有界但不即杀」,§3.6 不破)。
+        const dflt = Number.isFinite(this.caps.defaultBgTimeoutSec) ? this.caps.defaultBgTimeoutSec : 1_800;
+        const max = Number.isFinite(this.caps.maxBgTimeoutSec) ? this.caps.maxBgTimeoutSec : 86_400;
+        // Bounded BG timeout — never unbounded (design/103 §3.6). `maxBgTimeoutSec` is the fail-closed ceiling.
+        return Math.min(Math.max(1, wanted ?? dflt), max);
+    }
     adoptSync(builder, timeoutSec) {
         if (this.liveCount() >= this.caps.maxConcurrent)
             return undefined; // refused → exec keeps the foreground
-        // Bounded BG timeout — never unbounded (design/103 §3.6). `maxBgTimeoutSec` is the fail-closed ceiling.
-        const bgTimeoutSec = Math.min(Math.max(1, timeoutSec ?? this.caps.defaultBgTimeoutSec), this.caps.maxBgTimeoutSec);
+        const bgTimeoutSec = this.boundedBgTimeoutSec(timeoutSec);
         const shellId = `bg_${++this.counter}_${randomUUID()}`; // opaque — never the provider pid (§3.8)
         const applyTerminal = (e, failed, exitCode) => {
             if (e.status !== "running")
@@ -198,8 +209,7 @@ export class BackgroundShellManager {
         if (this.liveCount() >= this.caps.maxConcurrent) {
             return fail(new BackgroundShellError("limit_exceeded", `Too many running background shells (max ${this.caps.maxConcurrent}); KillShell one first.`));
         }
-        // Bounded BG timeout — never unbounded (design/103 §3.6). `maxBgTimeoutSec` is the fail-closed ceiling.
-        const bgTimeoutSec = Math.min(Math.max(1, timeoutSec ?? this.caps.defaultBgTimeoutSec), this.caps.maxBgTimeoutSec);
+        const bgTimeoutSec = this.boundedBgTimeoutSec(timeoutSec); // #131-T0:与 adoptSync 同座(NaN 当缺席)
         // Opaque brand — NOT derived from the provider job/pid (design/103 §3.8 越权红线).
         const shellId = `bg_${++this.counter}_${randomUUID()}`;
         const applyTerminal = (e, failed, exitCode) => {

package/dist/plugins/local-task-attachment-store.d.ts

@@ -2,6 +2,7 @@ import type { TaskAttachmentStore, TaskAttachmentRecord } from "./task-attachmen
 export declare class LocalTaskAttachmentStore implements TaskAttachmentStore {
     private readonly dir;
     private metas;
+    private hydration;
     constructor(rootDir: string);
     private hydrate;
     put(rec: TaskAttachmentRecord & {

package/dist/plugins/local-task-attachment-store.js

@@ -13,35 +13,39 @@ const ID_RE = /^[0-9a-f-]{16,64}$/i; // uuid 形(server 铸);水合时非此形
 export class LocalTaskAttachmentStore {
     dir;
     metas;
+    hydration;
     constructor(rootDir) {
         this.dir = join(rootDir, "attachments");
     }
-    async hydrate() {
-        if (this.metas)
-            return this.metas;
-        const m = new Map();
-        try {
-            for (const f of await fsp.readdir(this.dir)) {
-                if (!f.endsWith(".json"))
-                    continue;
-                const id = f.slice(0, -5);
-                if (!ID_RE.test(id))
-                    continue;
-                try {
-                    const meta = JSON.parse(await fsp.readFile(join(this.dir, f), "utf8"));
-                    if (meta && meta.id === id)
-                        m.set(id, meta);
-                }
-                catch {
-                    /* 半写/损坏 meta:跳过(bin 无 meta 即孤儿,reap 收) */
+    hydrate() {
+        // #131-1:记「在飞的 promise」而非「结果」(同仓正确形=local-session-store.loaded)。记结果时,
+        // 同进程两条并发首触各自 readdir,晚到的空快照会覆盖已被 put() 写入的索引——盘上有档、内存答 null。
+        this.hydration ??= (async () => {
+            const m = new Map();
+            try {
+                for (const f of await fsp.readdir(this.dir)) {
+                    if (!f.endsWith(".json"))
+                        continue;
+                    const id = f.slice(0, -5);
+                    if (!ID_RE.test(id))
+                        continue;
+                    try {
+                        const meta = JSON.parse(await fsp.readFile(join(this.dir, f), "utf8"));
+                        if (meta && meta.id === id)
+                            m.set(id, meta);
+                    }
+                    catch {
+                        /* 半写/损坏 meta:跳过(bin 无 meta 即孤儿,reap 收) */
+                    }
                 }
             }
-        }
-        catch {
-            /* 目录不存在 = 空店 */
-        }
-        this.metas = m;
-        return m;
+            catch {
+                /* 目录不存在 = 空店 */
+            }
+            this.metas = m;
+            return m;
+        })();
+        return this.hydration;
     }
     async put(rec) {
         const metas = await this.hydrate();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "6.2.0",
+  "version": "6.2.1",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",