@sema-agent/server 6.7.0 → 6.8.0

package/dist/bake-runner/main.js

@@ -15,6 +15,14 @@ import { parseNumOrFailNonNegative } from "../config.js";
 import { shellQuote as shellSafe } from "../plugins/remote-shell.js";
 import { BakeRunner, } from "./runner.js";
 const exec = promisify(execCb);
+// 鲁棒性批5 A3(2026-08-05):claim/ingest/heartbeat 三个 fetch 此前零超时——bake-runner 的整条 loop()
+// 是这台构建宿主机唯一的主循环,一次悬挂的 image-api 连接(网络分区/黑洞 TCP)会让 claim/heartbeat 永久
+// 挂起,直到底层 socket 超时(可能几十分钟),期间既不上报心跳也不能认领新 bake——整机静默停摆。
+// 上界两档:claim/ingest 不在心跳热路径,给 30s 吃满慢网 RTT + 大 body;heartbeat 必须显著小于
+// BAKE_HEARTBEAT_MS 的默认量级(30s)——否则一次超时本身就吃掉一整个心跳周期,取 10s(同
+// fleet-client.ts `FLEET_CLIENT_FETCH_TIMEOUT_MS` 判据的普适形)。
+const BAKE_CLAIM_INGEST_FETCH_TIMEOUT_MS = 30_000;
+const BAKE_HEARTBEAT_FETCH_TIMEOUT_MS = 10_000;
 function loadEnv() {
     const need = (k) => {
         const v = process.env[k];
@@ -55,6 +63,7 @@ function makeApiClient(env, log) {
                 method: "POST",
                 headers: auth,
                 body: JSON.stringify({ runnerId: env.runnerId }),
+                signal: AbortSignal.timeout(BAKE_CLAIM_INGEST_FETCH_TIMEOUT_MS),
             });
             if (res.status === 204)
                 return null; // empty queue — the routine "nothing to do" case, no log line
@@ -93,6 +102,7 @@ function makeApiClient(env, log) {
                 method: "POST",
                 headers: { ...auth, "x-bake-ingest-secret": ingestSecret },
                 body: JSON.stringify(frame),
+                signal: AbortSignal.timeout(BAKE_CLAIM_INGEST_FETCH_TIMEOUT_MS),
             });
             const body = res.ok ? (await res.json().catch(() => ({}))) : {};
             return {
@@ -107,6 +117,7 @@ function makeApiClient(env, log) {
                 method: "POST",
                 headers: { ...auth, "x-bake-ingest-secret": ingestSecret },
                 body: JSON.stringify({ event: "heartbeat" }),
+                signal: AbortSignal.timeout(BAKE_HEARTBEAT_FETCH_TIMEOUT_MS),
             });
             const body = res.ok ? (await res.json().catch(() => ({}))) : {};
             return {

package/dist/boot/leader.d.ts

@@ -23,5 +23,16 @@ export interface LeaderCtx {
     sessionStore: ReturnType<StoreBackend["session"]>;
     checkpointStore: CheckpointStoreFull | undefined;
 }
+/**
+ * 鲁棒性批5 A6(2026-08-05):k8s 腿要求 MinIO 三件套(ENDPOINT/ACCESS_KEY/SECRET_KEY)全在——半开(一件缺)
+ * 就让 `leaderEndpoint` 的三元式落到 undefined,此前**零披露**:运维显式开了 LEADER_ENABLED +
+ * REMOTE_EXEC=k8s,却在日志里既看不到 `leader_endpoint_enabled` 也看不到任何"为什么没启用"的信号——只能
+ * 靠读源码才知道要去检查 MinIO 三件套。
+ *
+ * 纯谓词,抽出独立函数:只吃 leaderEnabled/leaderProvider/hasS3 三个原语 + 直接读 process.env 取缺失的
+ * 具体变量名,不依赖完整 `LeaderCtx`(构造一整套 brain/pricing/sessionStore 只为测一个 warn 分支不值当)。
+ * 返回 null = 不适用该警告(未开启/非 k8s 腿/三件套齐全);非 null = 该报警,携带具体缺的变量名列表。
+ */
+export declare function leaderK8sMinioGap(leaderEnabled: boolean, leaderProvider: string | undefined, hasS3: boolean): string[] | null;
 export declare function createLeaderFace(ctx: LeaderCtx): ReturnType<typeof createLeaderEndpoint> | undefined;
 //# sourceMappingURL=leader.d.ts.map

package/dist/boot/leader.js

@@ -1,5 +1,24 @@
 import { createLeaderEndpoint } from "../leader/endpoint.js";
 import { createLeaderRunner } from "../leader/wire.js";
+/**
+ * 鲁棒性批5 A6(2026-08-05):k8s 腿要求 MinIO 三件套(ENDPOINT/ACCESS_KEY/SECRET_KEY)全在——半开(一件缺)
+ * 就让 `leaderEndpoint` 的三元式落到 undefined,此前**零披露**:运维显式开了 LEADER_ENABLED +
+ * REMOTE_EXEC=k8s,却在日志里既看不到 `leader_endpoint_enabled` 也看不到任何"为什么没启用"的信号——只能
+ * 靠读源码才知道要去检查 MinIO 三件套。
+ *
+ * 纯谓词,抽出独立函数:只吃 leaderEnabled/leaderProvider/hasS3 三个原语 + 直接读 process.env 取缺失的
+ * 具体变量名,不依赖完整 `LeaderCtx`(构造一整套 brain/pricing/sessionStore 只为测一个 warn 分支不值当)。
+ * 返回 null = 不适用该警告(未开启/非 k8s 腿/三件套齐全);非 null = 该报警,携带具体缺的变量名列表。
+ */
+export function leaderK8sMinioGap(leaderEnabled, leaderProvider, hasS3) {
+    if (!(leaderEnabled && leaderProvider === "k8s" && !hasS3))
+        return null;
+    return [
+        !process.env.MINIO_ENDPOINT && "MINIO_ENDPOINT",
+        !process.env.MINIO_ACCESS_KEY && "MINIO_ACCESS_KEY",
+        !process.env.MINIO_SECRET_KEY && "MINIO_SECRET_KEY",
+    ].filter((v) => typeof v === "string");
+}
 export function createLeaderFace(ctx) {
     const { config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore } = ctx;
     // v2 leader endpoint (design/50 + design/68): wire when LEADER_ENABLED + an isolated remote-exec backend
@@ -19,6 +38,9 @@ export function createLeaderFace(ctx) {
         }
         : {};
     const leaderProvider = config.remoteExec?.provider;
+    const minioGap = leaderK8sMinioGap(config.leaderEnabled, leaderProvider, "s3" in leaderMinio);
+    if (minioGap)
+        logger.warn("leader_k8s_minio_incomplete", { missing: minioGap });
     // DUAL-MODE §5: orchestration is an ENGINE capability, not fleet-only — the TOC `host` lane runs leader fan-out
     // bounded by ONE box (isolation=none, NON-durable: no snapshot, so the durable sub-worker suspend block below is
     // skipped — host workers run to completion in-process-adjacent). e2b/k8s keep their isolated/suspendable posture.

package/dist/config.js

@@ -491,9 +491,11 @@ function parseStoreDomain(ctx) {
                 user: env("MYSQL_USER"),
                 password: env("MYSQL_PASSWORD", ""),
                 database: env("MYSQL_DATABASE"),
-                connectionLimit: process.env.MYSQL_POOL_SIZE
-                    ? Number(process.env.MYSQL_POOL_SIZE)
-                    : undefined,
+                // 鲁棒性批5 A2(2026-08-05):此前裸 `Number(process.env.MYSQL_POOL_SIZE)` ——一个手滑值(如
+                // "20;drop") → NaN,driver 的 `connectionLimit` 直接拿到 NaN 而不是走池大小默认,行为因驱动
+                // 而异(未必 fail-loud)。optFinitePositiveEnv 与 dbQueryTimeoutMs 同款:非法值回默认(undefined
+                // = driver 默认池大小)+ S20 boot 警告,合法值照常生效。
+                connectionLimit: optFinitePositiveEnv("MYSQL_POOL_SIZE"),
             }
             : undefined,
         pg: needsDb && dbBackend === "pg"
@@ -503,7 +505,8 @@ function parseStoreDomain(ctx) {
                 user: env("PG_USER"),
                 password: env("PG_PASSWORD", ""),
                 database: env("PG_DATABASE"),
-                connectionLimit: process.env.PG_POOL_SIZE ? Number(process.env.PG_POOL_SIZE) : undefined,
+                // 同 MYSQL_POOL_SIZE 族(鲁棒性批5 A2)。
+                connectionLimit: optFinitePositiveEnv("PG_POOL_SIZE"),
             }
             : undefined,
         // S9 deeper fix: per-query DB timeout (see the interface doc). Soft knob — a typo degrades to the default
@@ -1177,7 +1180,12 @@ function parseOrchestrationDomain(ctx) {
                                                         ...(process.env.DOCKER_HOST ? { dockerHost: process.env.DOCKER_HOST } : {}),
                                                         ...(process.env.DOCKER_MEMORY ? { memory: process.env.DOCKER_MEMORY } : {}),
                                                         ...(process.env.DOCKER_CPUS ? { cpus: Number(process.env.DOCKER_CPUS) } : {}),
-                                                        ...(process.env.DOCKER_PIDS_LIMIT ? { pidsLimit: Number(process.env.DOCKER_PIDS_LIMIT) } : {}),
+                                                        // 鲁棒性批5 A1(2026-08-05):此前裸 `Number(process.env.DOCKER_PIDS_LIMIT)`——非数字值(如
+                                                        // 手滑的 "512;") → NaN,而消费端(local-docker 执行环境)对 `pidsLimit` 的守卫是
+                                                        // `?? 512`(只挡 null/undefined),NaN 穿透守卫;随后 `NaN > 0` 恒假,`--pids-limit` 整个
+                                                        // 从 docker run 参数里省略——运维以为设了 fork-bomb 背栓,实际背栓被静默卸掉。
+                                                        // optFinitePositiveEnv:非法值回 undefined(消费端默认 512 生效)+ S20 boot 警告。
+                                                        ...((n) => (n !== undefined ? { pidsLimit: n } : {}))(optFinitePositiveEnv("DOCKER_PIDS_LIMIT")),
                                                         ...(boolEnv("DOCKER_DROP_CAPS", false) ? { dropAllCaps: true } : {}),
                                                         ...(process.env.DOCKER_NETWORK
                                                             ? { network: enumEnv("DOCKER_NETWORK", "bridge", ["none", "bridge", "host"]) }

package/dist/http/routes/session-sync.js

@@ -420,6 +420,10 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 }
                 // §4 active-run guard (don't drop a live append) + per-session import lease (don't let two staged imports race
                 // to commit the same session). Both 409.
+                // `runStore?.` 的可选链不是守卫豁免面(鲁棒性批5 #7 亲验定性,2026-08-06):runStore 仅在
+                // **backend 整体缺席**时才 undefined(tidb/pg/local 三形态的 backend.run() 全都在,main.ts:378),
+                // 而 backend 缺席时本路由的 Phase A 已在 `beginImportStaging` 探测处硬 501(capability.session_store_
+                // required)——「守卫被跳过而 sync 仍可达」的组合按构造不存在(能力面与路由解析同真值)。
                 const activeTaskId = await deps.runStore?.getActiveTaskId(sessionId);
                 if (activeTaskId) {
                     sendError(res, 409, "session_active", "session has an active run; sync after it settles", { activeTaskId });

package/dist/leader/wire.d.ts

@@ -1,6 +1,6 @@
 import { type Brain, type Model, type ModelRoles, type ModelPricing, type TaskSpec, type ExecutionEnvFactory, type RemoteExecutionEnv, type ToolResultStore, type SessionStore } from "@sema-agent/core";
 import type { CheckpointStoreFull } from "../plugins/store-backend.js";
-import { type LeaderResult } from "./leader.js";
+import { type LeaderDeps, type LeaderResult } from "./leader.js";
 import type { LeaderRequestBody } from "./endpoint.js";
 export interface LeaderWireConfig {
     /** Static-env compat mode (E2B only): the leader provisions/owns each env. Required when `envFactory` unset. */
@@ -162,6 +162,16 @@ export declare function leaderLoopConfig(cfg: {
     repairRounds?: number;
     conflictRounds?: number;
 }, env?: NodeJS.ProcessEnv): LeaderLoopConfig;
+export declare const LEADER_PUSH_NETWORK_TIMEOUT_MS = 120000;
+export declare const LEADER_PUSH_LOCAL_TIMEOUT_MS = 30000;
+/** Coordinator(control plane,持有推送凭据)的 git push 闭包——从 `createLeaderRunner` 抽出为独立工厂,
+ *  仅依赖 durableRemote/targetRef/git 身份(不依赖 wire 内其余状态),因此可以脱离完整的
+ *  plan→provision→fan-out→merge 管线单测(那条管线需要真 brain + E2B/k8s env)。行为与抽出前逐字相同,
+ *  唯一新增是六条 execFileSync 各自的 `timeout`。 */
+export declare function createCoordinatorPush(durableRemote: string, targetRef: string | undefined, ident: {
+    name: string;
+    email: string;
+}): LeaderDeps["push"];
 export declare function createLeaderRunner(cfg: LeaderWireConfig): (body: LeaderRequestBody) => Promise<LeaderResult>;
 export {};
 //# sourceMappingURL=wire.d.ts.map

package/dist/leader/wire.js

@@ -177,6 +177,68 @@ export function leaderLoopConfig(cfg, env = process.env) {
         ...(env.LEADER_BUDGET_USD ? { replanBudgetUsd: parseNumOrFailNonNegative("LEADER_BUDGET_USD", env.LEADER_BUDGET_USD) } : {}),
     };
 }
+// 鲁棒性批5 A4(2026-08-05):Coordinator 的六条 execFileSync(clone/config×2/am/ls-remote/push×2)此前零超时。
+// `execFileSync` 是**同步**调用——它挂起的是整个 Node 事件循环,不只是这一次 leader 跑;`durableRemote`
+// 是运维配的、可能半开/不可达的远端(DNS 黑洞、TCP SYN 丢、对端 git-upload-pack 卡死),一旦挂住,这一个
+// 副本上**所有并发请求**一起冻结,直到操作系统层 TCP 超时(可能几十分钟)才会松绑。
+// 上界两档:clone/push/ls-remote 是网络往返(仓可能较大,给 120s);config/am 是纯本地操作(不该合法挂起,
+// 但损坏的 object store / 文件锁可能卡住 `git am`),给 30s——同 fleet-client.ts `FLEET_CLIENT_FETCH_TIMEOUT_MS`
+// 判据的普适形(操作分类决定上界,不是一刀切）。
+export const LEADER_PUSH_NETWORK_TIMEOUT_MS = 120_000;
+export const LEADER_PUSH_LOCAL_TIMEOUT_MS = 30_000;
+/** Coordinator(control plane,持有推送凭据)的 git push 闭包——从 `createLeaderRunner` 抽出为独立工厂,
+ *  仅依赖 durableRemote/targetRef/git 身份(不依赖 wire 内其余状态),因此可以脱离完整的
+ *  plan→provision→fan-out→merge 管线单测(那条管线需要真 brain + E2B/k8s env)。行为与抽出前逐字相同,
+ *  唯一新增是六条 execFileSync 各自的 `timeout`。 */
+export function createCoordinatorPush(durableRemote, targetRef, ident) {
+    return async (integratedPatch, baseSha) => {
+        // Coordinator (control plane, creds): clone durable remote, apply integrated series, force-with-lease push.
+        // 🔴 requires `git` on the service host PATH (deploy req).
+        const dir = mkdtempSync(join(tmpdir(), "leader-coord-"));
+        // Force C locale so the `raced` regex below matches git's (English) push-rejection messages regardless of
+        // the host locale — otherwise a translated message → regex miss → a real race mislabeled non-retryable (council #5).
+        const gitEnv = { ...process.env, LC_ALL: "C" };
+        try {
+            execFileSync("git", ["clone", "-q", durableRemote, dir], { env: gitEnv, timeout: LEADER_PUSH_NETWORK_TIMEOUT_MS });
+            execFileSync("git", ["-C", dir, "config", "user.name", ident.name], { timeout: LEADER_PUSH_LOCAL_TIMEOUT_MS });
+            execFileSync("git", ["-C", dir, "config", "user.email", ident.email], { timeout: LEADER_PUSH_LOCAL_TIMEOUT_MS });
+            writeFileSync(join(dir, ".leader.patch"), integratedPatch);
+            execFileSync("git", ["-C", dir, "am", "--3way", ".leader.patch"], { env: gitEnv, timeout: LEADER_PUSH_LOCAL_TIMEOUT_MS });
+            rmSync(join(dir, ".leader.patch"));
+            const ref = targetRef ?? "refs/heads/main";
+            // CAS against the TARGET ref's ACTUAL current tip (not baseSha). The old `=ref:baseSha` lease assumed
+            // the target ref already pointed at baseSha — but a FRESH ref (or one at any other commit) is never at
+            // baseSha, so the lease rejected EVERY such push and mislabeled it "raced" (found live: auto1 reached
+            // push after a clean 6-worker fan-out + green gradle, and failed only here). ls-remote gives the ref's
+            // current oid (empty = it doesn't exist yet) → lease against THAT, which still detects a real concurrent
+            // merge race (the ref moved since we read it) but lets a normal create/update through.
+            // Does the target ref already exist? (exact full-ref match; --refs drops peeled annotated-tag lines.)
+            const ls = execFileSync("git", ["-C", dir, "ls-remote", "--refs", "origin", ref], { encoding: "utf8", env: gitEnv, timeout: LEADER_PUSH_NETWORK_TIMEOUT_MS });
+            const exists = ls.split("\n").some((l) => l.split("\t")[1] === ref);
+            if (exists) {
+                // Existing ref → keep the original CAS against baseSha (detects a concurrent merge that moved the ref
+                // off the base this run started from — council#2). NOT against a just-read end-of-run tip: that would
+                // let leader B force-push over leader A's concurrent merge (Codex review #1). A ref that exists but
+                // isn't at baseSha → refuse (use a fresh per-run targetRef to avoid that — the proving-ground does).
+                execFileSync("git", ["-C", dir, "push", `--force-with-lease=${ref}:${baseSha}`, "origin", `HEAD:${ref}`], { env: gitEnv, timeout: LEADER_PUSH_NETWORK_TIMEOUT_MS });
+            }
+            else {
+                // Absent → create with a "must not exist" lease (empty expected oid): a concurrent create races safely
+                // (rejected as stale info) instead of silently fast-forwarding. The original `:baseSha` lease wrongly
+                // rejected a fresh ref (it's never at baseSha) — that was auto1's only failure after a green build.
+                execFileSync("git", ["-C", dir, "push", `--force-with-lease=${ref}:`, "origin", `HEAD:${ref}`], { env: gitEnv, timeout: LEADER_PUSH_NETWORK_TIMEOUT_MS });
+            }
+            return { ok: true, ref };
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            return { ok: false, raced: /stale info|force-with-lease|\[rejected\]|non-fast-forward/.test(msg), error: msg };
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+    };
+}
 export function createLeaderRunner(cfg) {
     const W = cfg.workspace ?? "/home/user";
     const repo = `${W}/repo`;
@@ -563,53 +625,7 @@ export function createLeaderRunner(cfg) {
             }
             return { env: asIntegrationEnv(env), destroy: () => env.destroy().then(() => { }), ...(mkRepair(env, repo, body.oracleFiles ?? []) ? { repair: mkRepair(env, repo, body.oracleFiles ?? []) } : {}), ...(mkConflictResolver(env, repo, body.oracleFiles ?? []) ? { conflictResolver: mkConflictResolver(env, repo, body.oracleFiles ?? []) } : {}) };
         };
-        const push = async (integratedPatch, baseSha) => {
-            // Coordinator (control plane, creds): clone durable remote, apply integrated series, force-with-lease push.
-            // 🔴 requires `git` on the service host PATH (deploy req).
-            const dir = mkdtempSync(join(tmpdir(), "leader-coord-"));
-            // Force C locale so the `raced` regex below matches git's (English) push-rejection messages regardless of
-            // the host locale — otherwise a translated message → regex miss → a real race mislabeled non-retryable (council #5).
-            const gitEnv = { ...process.env, LC_ALL: "C" };
-            try {
-                execFileSync("git", ["clone", "-q", body.durableRemote, dir], { env: gitEnv });
-                execFileSync("git", ["-C", dir, "config", "user.name", ident.name]);
-                execFileSync("git", ["-C", dir, "config", "user.email", ident.email]);
-                writeFileSync(join(dir, ".leader.patch"), integratedPatch);
-                execFileSync("git", ["-C", dir, "am", "--3way", ".leader.patch"], { env: gitEnv });
-                rmSync(join(dir, ".leader.patch"));
-                const ref = body.targetRef ?? "refs/heads/main";
-                // CAS against the TARGET ref's ACTUAL current tip (not baseSha). The old `=ref:baseSha` lease assumed
-                // the target ref already pointed at baseSha — but a FRESH ref (or one at any other commit) is never at
-                // baseSha, so the lease rejected EVERY such push and mislabeled it "raced" (found live: auto1 reached
-                // push after a clean 6-worker fan-out + green gradle, and failed only here). ls-remote gives the ref's
-                // current oid (empty = it doesn't exist yet) → lease against THAT, which still detects a real concurrent
-                // merge race (the ref moved since we read it) but lets a normal create/update through.
-                // Does the target ref already exist? (exact full-ref match; --refs drops peeled annotated-tag lines.)
-                const ls = execFileSync("git", ["-C", dir, "ls-remote", "--refs", "origin", ref], { encoding: "utf8", env: gitEnv });
-                const exists = ls.split("\n").some((l) => l.split("\t")[1] === ref);
-                if (exists) {
-                    // Existing ref → keep the original CAS against baseSha (detects a concurrent merge that moved the ref
-                    // off the base this run started from — council#2). NOT against a just-read end-of-run tip: that would
-                    // let leader B force-push over leader A's concurrent merge (Codex review #1). A ref that exists but
-                    // isn't at baseSha → refuse (use a fresh per-run targetRef to avoid that — the proving-ground does).
-                    execFileSync("git", ["-C", dir, "push", `--force-with-lease=${ref}:${baseSha}`, "origin", `HEAD:${ref}`], { env: gitEnv });
-                }
-                else {
-                    // Absent → create with a "must not exist" lease (empty expected oid): a concurrent create races safely
-                    // (rejected as stale info) instead of silently fast-forwarding. The original `:baseSha` lease wrongly
-                    // rejected a fresh ref (it's never at baseSha) — that was auto1's only failure after a green build.
-                    execFileSync("git", ["-C", dir, "push", `--force-with-lease=${ref}:`, "origin", `HEAD:${ref}`], { env: gitEnv });
-                }
-                return { ok: true, ref };
-            }
-            catch (e) {
-                const msg = e instanceof Error ? e.message : String(e);
-                return { ok: false, raced: /stale info|force-with-lease|\[rejected\]|non-fast-forward/.test(msg), error: msg };
-            }
-            finally {
-                rmSync(dir, { recursive: true, force: true });
-            }
-        };
+        const push = createCoordinatorPush(body.durableRemote, body.targetRef, ident);
         const deps = {
             plan,
             provisionWorker,

package/dist/runs.js

@@ -362,7 +362,9 @@ promptManifests) {
     // run-store mutation/poll below (the run row was created with owner = principal ?? null).
     const owner = principal ?? null;
     const heartbeat = setInterval(() => {
-        void runStore.heartbeat(taskId, owner).catch(() => undefined);
+        // 鲁棒性批5 A5(2026-08-05):与下面 cancel/preempt 两条兄弟同族——此前裸吞错,store 持续故障期间本 run
+        // 的心跳每拍静默落空、运维零信号,直到某个副本的 reapStale 把它误判死亡(心跳失败正是那个误判的前兆)。
+        void runStore.heartbeat(taskId, owner).catch(() => { metrics?.inc("run_signal_poll_errors_total", { kind: "heartbeat" }); });
         // Cross-replica cancel: the cancel may have landed on another instance, which only set the durable flag.
         // Poll it here so the OWNING instance aborts its in-flight run (bounded by HEARTBEAT_MS).
         // 鲁棒性批3 A5(2026-08-04,§M 感知链路):poll 失败本身有界(下一拍重试),但此前**零披露**——

package/dist/spec-fields.js

@@ -69,9 +69,10 @@ export function normalizeAttachments(v) {
         ...(o.todoReminder === true ? { todoReminder: true } : {}),
         ...(changedFiles !== undefined ? { changedFiles } : {}),
         ...(o.planModeReminder === true ? { planModeReminder: true } : {}),
-        // core 1.253 G1: post-compaction background-task recap + deferred-tools boundary notice —
-        // same literal-true contract as the rest of the family (both are one-shot/opt-in on the core side).
-        ...(o.backgroundTasks === true ? { backgroundTasks: true } : {}),
+        // core 1.253 G1 → 5.12.0 BREAKING-3:压缩后 bg 任务重述从 opt-in 翻 **DEFAULT-ON**(显式 false
+        // 恒关/缺席走默认)。literal-true 形在此翻转后就是轴B #1 的原案复刻(agentListing/skillsListing
+        // 当年同病):丢 false = 客户端显式关断被静默压成默认 ON,wire 上无法表达关闭 ⇒ 迁 boolean 透传。
+        ...(typeof o.backgroundTasks === "boolean" ? { backgroundTasks: o.backgroundTasks } : {}),
         ...(o.toolsDelta === true ? { toolsDelta: true } : {}),
         ...(o.todoReminderMode === "baseline" || o.todoReminderMode === "off" ? { todoReminderMode: o.todoReminderMode } : {}),
         ...(o.budgetUsd === true ? { budgetUsd: true } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "6.7.0",
+  "version": "6.8.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "^5.11.0",
+    "@sema-agent/core": "^5.12.0",
     "@sema-agent/registry-core": "^0.14.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",