@sema-agent/server 7.16.0-rc.1 → 7.16.0-rc.2

package/dist/config.js

@@ -395,28 +395,33 @@ export function configKnobTable() {
 function registerKnob(rec) {
     CONFIG_KNOBS.set(rec.name, rec);
 }
+/** #241-rc2([3740]③→[3742] 裁定,双臂不留静默):布尔 env 的**闭集词表**解析。
+ *  放宽臂=收 true/false/1/0/yes/no/on/off(大小写不敏感)——`=1` 是运维直觉写法,意图明确按意图执行
+ *  (operator-knob 宪法方向);拒启臂=未知词**抛错**(boot 拒启带词表指路,照 #186 响亮拒先例)——
+ *  行为承重键(DURABLE_APPROVAL 决定 checkpointStore 存在性 ⇒ /v1/approvals 路由存在性)静默回默认的
+ *  真实后果是「审批面整条静默缺席」([3740]② cli/test 真机链)。返回 undefined = raw 未设/空串(沿用
+ *  `env()` 的空串=未设约定),由调用方走默认/legacy 分派。 */
+const BOOL_TRUE_WORDS = new Set(["true", "1", "yes", "on"]);
+const BOOL_FALSE_WORDS = new Set(["false", "0", "no", "off"]);
+function parseBoolWord(name, raw) {
+    if (raw === undefined || raw === "")
+        return undefined;
+    const w = raw.toLowerCase();
+    if (BOOL_TRUE_WORDS.has(w))
+        return true;
+    if (BOOL_FALSE_WORDS.has(w))
+        return false;
+    throw new Error(`${name}=${JSON.stringify(raw)} is not a boolean — accepted (case-insensitive): true/false/1/0/yes/no/on/off. ` +
+        `Refusing to boot: a silently defaulted behavior knob is worse than a loud one ([3742]; e.g. DURABLE_APPROVAL ` +
+        `decides whether the checkpoint store — and with it /v1/approvals — exists at all).`);
+}
 function boolEnv(name, def) {
-    const raw = process.env[name];
-    let value = def;
-    let source = "default";
-    if (raw !== undefined && raw !== "") {
-        // "" = unset, the same convention `env()`/`firstSetEnv()` use (a compose `${VAR:-}` template passes empty through).
-        if (raw === "true") {
-            value = true;
-            source = "env";
-        }
-        else if (raw === "false") {
-            value = false;
-            source = "env";
-        }
-        else if (!CONFIG_KNOBS.has(name)) {
-            // Previously a silent default at every hand-written site. Guarded on first registration: the LAZILY
-            // re-read knobs (boolEnvWithLegacyNegated's host twins, read per exec) must not grow this array for the
-            // process lifetime on one typo — one typo, one warning. (复审 2026-07-30 F6:早期理由「IMAGE_BAKES_
-            // ENABLED/DURABLE_APPROVAL 一次 load 读两次」已随九域拆分的去重失效,懒读族成为本守卫的现行理由。)
-            CONFIG_WARNINGS.push({ env: name, raw });
-        }
-    }
+    // #241-rc2:词表解析(见 parseBoolWord 顶注)。未知词在 parseBoolWord 里抛 = boot 拒启——旧形的
+    // 「CONFIG_WARNINGS 一条 warn + 回默认」臂就此退役(懒读族的防重复 push 守卫随臂一起退役:未知词
+    // 现在到不了任何 push)。
+    const parsed = parseBoolWord(name, process.env[name]);
+    const value = parsed ?? def;
+    const source = parsed !== undefined ? "env" : "default";
     registerKnob({ name, polarity: def ? "opt-out" : "opt-in", value, source });
     return value;
 }
@@ -443,20 +448,11 @@ export function boolEnvWithLegacyNegated(name, legacyNegatedName, def) {
     const legacy = process.env[legacyNegatedName];
     let value;
     let source;
-    if (raw === "true" || raw === "false") {
-        value = raw === "true";
+    const parsedCanonical = parseBoolWord(name, raw); // #241-rc2:与 boolEnv 同一词表同一拒启臂(单一属主)
+    if (parsedCanonical !== undefined) {
+        value = parsedCanonical;
         source = "env";
     }
-    else if (raw !== undefined && raw !== "") {
-        if (!CONFIG_KNOBS.has(name)) {
-            // Same first-registration guard as boolEnv — the three consumers of this helper are the LAZILY re-read
-            // ones (remote-env-host reads per exec/probe), so an unguarded push would grow CONFIG_WARNINGS for the
-            // whole process lifetime on a single operator typo (复审 2026-07-29 #1).
-            CONFIG_WARNINGS.push({ env: name, raw });
-        }
-        value = def;
-        source = "default";
-    }
     else if (legacy !== undefined && legacy !== "") {
         // server 3.0.0([1989],clay 令「不做兼容」):负名旧 env = fail-loud 墓碑。设了(任何值,含
         // "false"——设它的人同样以为它还生效)即拒启并指路新名。选拒启不选静默忽略:静默会让升级部署的
@@ -2105,8 +2101,10 @@ export function loadConfig() {
     // self-report would omit the worst offenders. Its tri-state semantics are unchanged: an explicit literal wins,
     // anything else (including a typo — deliberately NOT warned here, unlike boolEnv) falls to the posture default.
     const postureOn = (name, infraReady = true) => {
-        const envVal = process.env[name];
-        const explicit = envVal === "true" ? true : envVal === "false" ? false : undefined;
+        // #241-rc2:显式臂与 boolEnv 同词表同拒启(parseBoolWord 单一属主)——三态语义不变
+        // (显式 true/显式 false/未设 ⇒ posture 默认),变的只是「显式」的判读:`=1` 是显式 true,
+        // 未知词拒启而不是静默滑进 posture 默认。
+        const explicit = parseBoolWord(name, process.env[name]);
         const value = explicit ?? (singleUserTurnkey && infraReady);
         registerKnob({ name, polarity: "posture", value, source: explicit === undefined ? "posture" : "env" });
         return value;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.16.0-rc.1",
+  "version": "7.16.0-rc.2",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",