@sema-agent/server 7.60.0 → 7.61.0

package/dist/plugins/retention-store-sql.d.ts

@@ -352,7 +352,7 @@ export declare class SqlRetentionStore implements ManagedRetentionCapability {
      * **可删**的会话 id:本域、过视界、且四条活引用腿**一条都不命中**(保护谓词下推,扣在 LIMIT 之前 ——
      * 理由与 {@link expiryCandidates} 逐字相同:头部被保护的树不许饿死它后面的树)。
      *
-     * `lock = true`(删除事务里的读)追加 `FOR UPDATE`,这一格是**承重**的(codex 交叉复审 R1-[high]):
+     * `forUpdate = true`(删除事务里的读)追加 `FOR UPDATE`,这一格是**承重**的(codex 交叉复审 R1-[high]):
      *  · 会话行是**存在**的行 ⇒ 这把锁与 hold 哨兵不同,它真的锁得住;
      *  · 锁住之后,并发的 `touch()`(把会话重新拉进视界)与 session-sync 的 **owner 改写**(importEntries /
      *    replaceEntries / staged commit 都会重写 `session_meta.owner`)必须排队等我们提交 —— 否则「按旧候选集

package/dist/plugins/retention-store-sql.js

@@ -291,11 +291,12 @@ export class SqlRetentionStore {
             `AND ${this.liveReferenceExists()} LIMIT $3) x`), [...w.params, new Date(input.cutoffMs), RETENTION_SESSION_BATCH]);
         return Number(rows[0]?.n ?? 0);
     }
-    async sessionCandidates(exec, input, lock = false) {
+    async sessionCandidates(exec, input, forUpdate = false) {
         const w = this.domainWhere("sm.owner", input.domain, 1);
+        const suffix = forUpdate ? " FOR UPDATE" : "";
         const { rows } = await exec.query(this.q(`SELECT sm.session_id FROM session_meta sm WHERE ${w.sql} AND sm.updated_at < ? AND NOT ${this.liveReferenceExists()} ` +
-            `ORDER BY sm.updated_at ASC LIMIT ?${lock ? " FOR UPDATE" : ""}`, `SELECT sm.session_id FROM session_meta sm WHERE ${w.sql} AND sm.updated_at < $2 AND NOT ${this.liveReferenceExists()} ` +
-            `ORDER BY sm.updated_at ASC LIMIT $3${lock ? " FOR UPDATE" : ""}`), [...w.params, new Date(input.cutoffMs), RETENTION_SESSION_BATCH]);
+            `ORDER BY sm.updated_at ASC LIMIT ?${suffix}`, `SELECT sm.session_id FROM session_meta sm WHERE ${w.sql} AND sm.updated_at < $2 AND NOT ${this.liveReferenceExists()} ` +
+            `ORDER BY sm.updated_at ASC LIMIT $3${suffix}`), [...w.params, new Date(input.cutoffMs), RETENTION_SESSION_BATCH]);
         return rows.map((r) => String(r.session_id));
     }
     async countOrphanToolResultCandidates(exec, input) {

package/dist/plugins/sql-driver.d.ts

@@ -161,12 +161,14 @@ export interface SqlEngineFacts {
 export interface SqlDriver extends SqlExec {
     readonly dialect: SqlDialect;
     /**
-     * Engine facts, established the first time ANY driver over the same pool hands out a pooled connection
-     * (state is keyed by the pool, so the twenty-odd store drivers sharing one pool report ONE set of facts);
-     * `null` until then (a pool that has never connected has nothing to report — it does not GUESS). Every
-     * pooled connection re-runs initialization the first time it is borrowed (memo keyed by connection
-     * identity), so a pool that reconnects after a fatal error re-establishes the session guarantee on the
-     * new connection rather than inheriting it.
+     * 本池上**最近一次连接初始化的结果**(状态按池存,所以共享一条池的二十多只店 driver 报同一份事实)。
+     * 三种读数,含义各不相同:
+     *  · `null`(还没借出过连接)—— 没有可报的东西,**不猜**;
+     *  · 事实 —— 最近一次初始化**回读复核**过的值。每条池连接首次借出都重跑一次初始化(记忆化按连接身份),
+     *    所以池在致命错误后重连时,保证是在新连接上**重新建立**的,不是继承来的;
+     *  · `null`(借出过、但最近一次初始化被**拒**)—— S-137 ④:保证此刻建立不起来,读面就报缺席。
+     *    此前这里是「一次成功即长期有效」的快照:连接被驱逐、新连接初始化被拒之后,诊断面仍在陈述一条
+     *    已经不成立的结构保证。降级由 `establishSession()` 一处完成,并留 loud warn。
      */
     readonly facts: SqlEngineFacts | null;
     connect(): Promise<SqlTxConn>;

package/dist/plugins/sql-driver.js

@@ -37,6 +37,24 @@ function refuseSession(what) {
         `are established per pooled connection at initialization: session REPEATABLE READ on the MySQL protocol, plus TiDB's pessimistic transaction mode. ` +
         `Neither is optional: every "SELECT … FOR UPDATE" decision point in this service is a CURRENT read only under them.`);
 }
+async function establishSession(session, pooled, c, init) {
+    if (session.initialized.has(pooled))
+        return;
+    try {
+        session.facts = await init(c);
+        session.initialized.add(pooled);
+    }
+    catch (err) {
+        const stale = session.facts;
+        session.facts = null;
+        session.initialized = new WeakSet();
+        if (stale !== null)
+            console.warn(`[sql-driver] connection initialization REFUSED — SQL engine facts invalidated (was: ${stale ? `${stale.engine} ${stale.version} ${stale.isolation} txnMode=${stale.txnMode ?? "-"}` : "<absent>"}). GET /v1/diagnostics/wiring -> sqlEngine and GET /v1/capabilities -> sql now report ABSENT, which is the honest ` +
+                `reading: this pool cannot currently establish the read semantics every "SELECT … FOR UPDATE" in this repo assumes. Cause: ${err.message}`);
+        c.release();
+        throw err;
+    }
+}
 async function initMySqlSession(c) {
     await c.query("SET SESSION TRANSACTION ISOLATION LEVEL REPEATABLE READ");
     let txnMode = await mysqlVar(c, "SELECT @@tidb_txn_mode AS v");
@@ -72,17 +90,7 @@ export function mysqlDriver(pool) {
         query: (sql, params) => mysqlQuery(pool, sql, params),
         async connect() {
             const c = await pool.getConnection();
-            const pooled = c.connection ?? c;
-            try {
-                if (!session.initialized.has(pooled)) {
-                    session.facts = await initMySqlSession(c);
-                    session.initialized.add(pooled);
-                }
-            }
-            catch (err) {
-                c.release();
-                throw err;
-            }
+            await establishSession(session, c.connection ?? c, c, initMySqlSession);
             return {
                 query: (sql, params) => mysqlQuery(c, sql, params),
                 begin: () => c.beginTransaction(),
@@ -122,16 +130,7 @@ export function pgDriver(pool) {
         query: (sql, params) => pgQuery(pool, sql, params),
         async connect() {
             const c = await pool.connect();
-            try {
-                if (!session.initialized.has(c)) {
-                    session.facts = await initPgSession(c);
-                    session.initialized.add(c);
-                }
-            }
-            catch (err) {
-                c.release();
-                throw err;
-            }
+            await establishSession(session, c, c, initPgSession);
             return {
                 query: (sql, params) => pgQuery(c, sql, params),
                 begin: async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.60.0",
+  "version": "7.61.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -54,7 +54,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.5.0",
+    "@sema-agent/core": "7.5.1",
     "@sema-agent/settings-schema": "1.6.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
@@ -69,7 +69,7 @@
     "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@sema-agent/sdk": "8.1.0",
+    "@sema-agent/sdk": "8.3.0",
     "@types/libsodium-wrappers": "^0.7.14",
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",