@sema-agent/server 7.93.1 → 7.93.2

package/dist/bench/s1/live-deps.js

@@ -342,6 +342,8 @@ async function runLeaderForTrap(rt, brain, models, roles, pricing, trap, cellId,
         "--enable=receive-pack",
         remoteDir,
     ], { stdio: "ignore" });
+    let daemonSpawnError;
+    daemon.on("error", (e) => { daemonSpawnError = e.message; });
     const waitForPort = async () => {
         for (let i = 0; i < 30; i++) {
             const up = await new Promise((resolve) => {
@@ -387,6 +389,7 @@ async function runLeaderForTrap(rt, brain, models, roles, pricing, trap, cellId,
     let res;
     try {
         if (!(await waitForPort())) {
+            console.error(`[s1] git daemon did not come up on 127.0.0.1:${port}${daemonSpawnError ? ` — spawn failed: ${daemonSpawnError}` : ""}`);
             return { ok: false, reports: [], infraFailed: true };
         }
         const seedDir = mkdtempSync(join(tmpdir(), "s1-team-seed-"));

package/dist/boot/fatal-exit.d.ts

@@ -1,3 +1,24 @@
 /** `err` 的 fatal 日志文本:`String(err)` 过形状律一次。纯函数,零副作用。 */
 export declare function buildFatalErrorText(err: unknown): string;
+/**
+ * 进程级 fatal 出口的**唯一一只腿**:同一只 {@link buildFatalErrorText} 产物写两个面,然后按崩溃码退。
+ *
+ * ── 病(S-555,test [ref] P2)────────────────────────────────────────────────────────────────────
+ * 出口过去只有那条 JSON 行。而拒启文案是**多行**的 —— S-547 的列集对账会生成
+ * `ALTER TABLE <表> ADD COLUMN <列定义>;`,它存在的全部理由就是「运维直接粘进 psql」;塞进 JSON 字符串后
+ * 整段变成一串 `\n` 转义,**粘不走**。dist 里也没有 pretty / `isTTY` 分支去把它摊开(有也不该有:出口的
+ * 可读性不该取决于终端是谁)。
+ *
+ * ── 修 ─────────────────────────────────────────────────────────────────────────────────────────
+ * **同一只产物**再原样多行写一份到 stderr。刻意不做的三件:不铸第二份文案(两份措辞必然分叉)、不加
+ * pretty 旋钮(一个只有出错时才走的出口不该有配置面)、JSON 行**照旧**(机读面零回退,scraper 不动)。
+ * 两个面都在 stderr,次序=先机器行后人读段。**这个次序还承重**:`createLogger()` 的构造会装上 stdio 的
+ * EPIPE 无害化监听(见 `observability/logger.ts` 那段注 —— 宿主把 stderr 接管道又先退时,下一次写会发一个
+ * 异步 `'error'`,无监听即致命),所以那条裸 `process.stderr.write` **必须**排在它之后;同步抛由下面的
+ * `try/finally` 兜住。
+ *
+ * 全仓两个 fatal 出口(`main.ts` 的 `main().catch` 与 `run-local.ts` 的同名尾巴)都经这里 —— 后者此前
+ * 连形状律都没过(裸 `String(err)`),两处各写一遍正是「同类不同命」的土壤。
+ */
+export declare function fatalExit(err: unknown): never;
 //# sourceMappingURL=fatal-exit.d.ts.map

package/dist/boot/fatal-exit.js

@@ -1,5 +1,16 @@
 import { redactSecrets } from "../trace/redact.js";
+import { createLogger } from "../observability/logger.js";
 export function buildFatalErrorText(err) {
     return redactSecrets(String(err));
 }
+export function fatalExit(err) {
+    const text = buildFatalErrorText(err);
+    try {
+        createLogger().error("fatal", { err: text });
+        process.stderr.write(text + "\n");
+    }
+    finally {
+        process.exit(1);
+    }
+}
 //# sourceMappingURL=fatal-exit.js.map

package/dist/boot/shutdown.js

@@ -2,6 +2,7 @@ import { Runner, defaultTaskRegistry } from "@sema-agent/core";
 import { writeCrashLast, clearCrashLast, readCrashLast } from "./crash-last.js";
 import { createSighupIdleHandler } from "../sighup-idle.js";
 import { createParentWatch } from "../parent-watch.js";
+import { reapHostForegroundChildren } from "../plugins/host-platform.js";
 import { createEngineLeaseTracker } from "./engine-lease.js";
 import { writeExitLast, readExitLast, clearExitLast } from "./exit-last.js";
 import { isScriptRealmRejection, describeRejectionReason } from "../orchestration/hardened-vm-runner.js";
@@ -30,8 +31,29 @@ export function installShutdownHandlers(ctx) {
         if (dataRoot)
             writeCrashLast(dataRoot, { version, inflight: drainState.inflight?.(), err });
     };
+    const reapOwnChildProcesses = () => {
+        try {
+            const reaped = defaultTaskRegistry.reapAllSessionBackground();
+            if (reaped > 0)
+                logger.info("shutdown_background_reaped", { reaped });
+        }
+        catch (err) {
+            logger.warn("shutdown_background_reap_failed", { err: String(err) });
+        }
+        try {
+            const fg = reapHostForegroundChildren();
+            if (fg.signalled > 0 || fg.alreadyDead > 0)
+                logger.info("shutdown_foreground_reaped", { signalled: fg.signalled, alreadyDead: fg.alreadyDead });
+            if (fg.failed.length > 0)
+                logger.warn("shutdown_foreground_reap_incomplete", { groups: fg.failed });
+        }
+        catch (err) {
+            logger.warn("shutdown_foreground_reap_failed", { err: String(err) });
+        }
+    };
     const onUncaughtException = (err) => {
         try {
+            reapOwnChildProcesses();
             writeLastWords(err);
             console.error(err);
         }
@@ -50,6 +72,7 @@ export function installShutdownHandlers(ctx) {
             return;
         }
         try {
+            reapOwnChildProcesses();
             writeLastWords(err);
             console.error(err);
         }
@@ -92,14 +115,7 @@ export function installShutdownHandlers(ctx) {
         subRunner.sessions.dispose();
         void lspManager?.dispose?.();
         void workflowNotifyJournal?.close?.();
-        try {
-            const reaped = defaultTaskRegistry.reapAllSessionBackground();
-            if (reaped > 0)
-                logger.info("shutdown_background_reaped", { reaped });
-        }
-        catch (err) {
-            logger.warn("shutdown_background_reap_failed", { err: String(err) });
-        }
+        reapOwnChildProcesses();
         void fleetClient?.stop();
         server.close(() => {
             void retentionTeardown.then(() => (backend ? backend.close() : Promise.resolve())).finally(() => process.exit(0));

package/dist/main.js

@@ -1,5 +1,4 @@
-import { createLogger } from "./observability/logger.js";
-import { buildFatalErrorText } from "./boot/fatal-exit.js";
+import { fatalExit } from "./boot/fatal-exit.js";
 import { runStage01 } from "./boot/stage-01-config.js";
 import { runStage02 } from "./boot/stage-02-registry-pull.js";
 import { runStage03 } from "./boot/stage-03-store-backend.js";
@@ -23,7 +22,6 @@ async function main() {
     await runStage10(s09);
 }
 void main().catch((err) => {
-    createLogger().error("fatal", { err: buildFatalErrorText(err) });
-    process.exit(1);
+    fatalExit(err);
 });
 //# sourceMappingURL=main.js.map

package/dist/plugins/host-platform.d.ts

@@ -48,6 +48,45 @@ export declare function killTreeSoft(pid: number): void;
 /** Graceful tree kill where the CALLER has no escalation timer of its own (currently unused by the host lane —
  *  exported for parity with core's surface; the bg driver keeps its own HOST_BG_KILL_GRACE_MS ladder). */
 export { killProcessTree };
+/** 登记回执 = 注销的唯一凭据(纯数据;身份即凭据,见簿注)。 */
+export interface ForegroundChildTicket {
+    /** 组领袖 pid = pgid(POSIX `detached:true` 的直接后果)。 */
+    readonly pid: number;
+}
+/** 登记一只自起的前台子进程,返回注销用的回执。 */
+export declare function trackHostForegroundChild(pid: number): ForegroundChildTicket;
+/** 注销(`exit` / settle / 领养移交)。按回执身份删 ⇒ 幂等,且**绝不**碰同号的其它登记。 */
+export declare function untrackHostForegroundChild(ticket: ForegroundChildTicket): void;
+/** 一次前台收割的读数。三格分开是**刻意**的:`alreadyDead` 是想要的结果(不是失败),`failed` 是**真的**
+ *  没收上来 —— 两者混成一个数就等于把后者静默掉([ref]:这条腿上不许有安静的兜底)。 */
+export interface ForegroundReapReading {
+    /** 真发出了杀伤信号的组数。 */
+    readonly signalled: number;
+    /** `ESRCH` —— 组已经不在了。信号的语义就是「让它死」,它已经死了 ⇒ 记数,不报警。 */
+    readonly alreadyDead: number;
+    /** 其余拒因,逐条 `pid:code`。本模块没有 logger,所以**交回调用方响亮记下**(它有)。 */
+    readonly failed: readonly string[];
+}
+/**
+ * 收割簿上全部前台子进程组。返回**发出**信号的读数,不是确认死亡数 —— 确认要等,而本函数的调用点之一
+ * 是 uncaught 出口。
+ *
+ * **同步形、一次到位、不等宽限**:两个调用点(`hardShutdown` / uncaught 双钩)都紧挨着 `process.exit`,
+ * `await` 一个宽限梯就是把收割赌在一个永远等不到的续段上。上界 = 簿上条数 × 一次 `kill(-pid)` syscall
+ * (簿条数被 host lane 的在飞 turn 数界住),没有定时器、没有 promise。
+ *
+ * 🔴 **为什么是 `killTreeHard` 而不是 SIGTERM**(codex 对抗复审 [high],亲跑复现后改):软鞍的语义是
+ * 「给它一个收尾窗,到点我再升级」,而这两个调用点之后**没有任何人在场**去升级 —— 一个
+ * `trap '' TERM` 的组收到 SIGTERM 后 `kill` 不抛(实测 `signalled:1, failed:[]`、随后仍然在跑),于是
+ * 「已收割」的读数是**假的**,孤儿照旧永久存活;win32 的软鞍对普通 console tree 更是明确杀不掉任何东西
+ * (见 {@link killTreeSoft} 注)。且本仓对**前台 exec** 的既有杀伤姿势(abort / timeout / 流被放弃)
+ * 一律就是 `killTreeHard` —— 收割用**同一只**,不新造一种只能兑现一半的姿势(规则集更小,不是更大)。
+ * 代价如实写:一条行为良好的命令在这里拿不到收尾窗;它换来的是「引擎死了,它起的命令一定也死」这句话
+ * 真的成立。后台腿的宽限梯不受影响(那条腿有自己的属主,且不在本簿里)。
+ */
+export declare function reapHostForegroundChildren(): ForegroundReapReading;
+/** 测试面:簿上现存条数(产品面没有消费者 —— 收割腿只读它自己那只 Set)。 */
+export declare function liveHostForegroundChildCountForTest(): number;
 /**
  * win32 env-key case collapse (design D1). Windows env keys are case-insensitive; Node hands the
  * object to CreateProcess as-is, so a case-sensitive merge that produced BOTH `Path` (inherited) and `PATH`

package/dist/plugins/host-platform.js

@@ -54,6 +54,38 @@ export function killTreeSoft(pid) {
     process.kill(-pid, "SIGTERM");
 }
 export { killProcessTree };
+const liveHostForegroundGroups = new Set();
+export function trackHostForegroundChild(pid) {
+    const ticket = { pid };
+    liveHostForegroundGroups.add(ticket);
+    return ticket;
+}
+export function untrackHostForegroundChild(ticket) {
+    liveHostForegroundGroups.delete(ticket);
+}
+export function reapHostForegroundChildren() {
+    let signalled = 0;
+    let alreadyDead = 0;
+    const failed = [];
+    for (const { pid } of liveHostForegroundGroups) {
+        try {
+            killTreeHard(pid);
+            signalled++;
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code === "ESRCH")
+                alreadyDead++;
+            else
+                failed.push(`${pid}:${code ?? String(err)}`);
+        }
+    }
+    liveHostForegroundGroups.clear();
+    return { signalled, alreadyDead, failed };
+}
+export function liveHostForegroundChildCountForTest() {
+    return liveHostForegroundGroups.size;
+}
 export function collapseWin32EnvKeys(env) {
     if (!IS_WIN32)
         return env;

package/dist/plugins/remote-env-host.js

@@ -7,7 +7,7 @@ import { openSync, closeSync, readSync, statSync, truncateSync, unlinkSync, mkdi
 import { StringDecoder } from "node:string_decoder";
 import { armPipeDestroyGrace, numEnvOr, SYMLINK_CHAIN_MAX_HOPS } from "./remote-shell.js";
 import { hostBackgroundShellEnabled, hostExecSpoolEnabled } from "../config.js";
-import { resolveHostShell, hostShell, spawnGroupOptions, killTreeHard, killTreeSoft, collapseWin32EnvKeys } from "./host-platform.js";
+import { resolveHostShell, hostShell, spawnGroupOptions, killTreeHard, killTreeSoft, collapseWin32EnvKeys, trackHostForegroundChild, untrackHostForegroundChild } from "./host-platform.js";
 import { BackgroundShellManager, seedMemStream, feedMemStream, drainMemStream } from "./background-shell-support.js";
 import { FileError, ExecutionError, RemoteExecutionError, scrubSecretEnv, RollingTailBuffer, markTruncated, SchedulerError, BackgroundShellError, } from "@sema-agent/core";
 import { recordSecretEnvScrub } from "../observability/secret-env-scrub.js";
@@ -241,9 +241,9 @@ export class RemoteHostExecutionEnv {
                         throw new BackgroundShellError("spawn_failed", e instanceof Error ? e.message : String(e), e);
                     }
                     const pid = child.pid;
+                    child.on("error", () => ctx.onTerminal(true));
                     if (pid != null) {
                         child.on("close", (code, signal) => ctx.onTerminal(false, code ?? (signal ? 128 + (signalNumber(signal) ?? 9) : 0)));
-                        child.on("error", () => ctx.onTerminal(true));
                         child.unref();
                     }
                     await outFh.close().catch(() => { });
@@ -403,10 +403,15 @@ export class RemoteHostExecutionEnv {
                 env: this.mergeEnv(options?.env),
                 ...spawnGroupOptions(),
             });
+            const ticket = child.pid != null ? trackHostForegroundChild(child.pid) : undefined;
+            if (ticket)
+                child.once("exit", () => untrackHostForegroundChild(ticket));
             const finish = (r) => {
                 if (settled)
                     return;
                 settled = true;
+                if (ticket)
+                    untrackHostForegroundChild(ticket);
                 clearTimeout(timer);
                 options?.abortSignal?.removeEventListener("abort", onAbort);
                 removeDetachListener?.();
@@ -455,6 +460,8 @@ export class RemoteHostExecutionEnv {
                 if (forceSettleTimer)
                     clearTimeout(forceSettleTimer);
                 options?.abortSignal?.removeEventListener("abort", onAbort);
+                if (ticket)
+                    untrackHostForegroundChild(ticket);
                 settled = true;
                 resolve(ok({ stdout: seedOut, stderr: seedErr, exitCode: 0, detached: { shellId } }));
             };
@@ -521,6 +528,7 @@ export class RemoteHostExecutionEnv {
             const errBuf = new RollingTailBuffer();
             let settled = false;
             let handedOver = false;
+            let ticket;
             let pump;
             let drainTimer;
             const cursor = { out: 0, err: 0 };
@@ -613,6 +621,8 @@ export class RemoteHostExecutionEnv {
                     clearInterval(pump);
                     pump = undefined;
                 }
+                if (ticket)
+                    untrackHostForegroundChild(ticket);
                 if (drainTimer) {
                     clearTimeout(drainTimer);
                     drainTimer = undefined;
@@ -665,6 +675,8 @@ export class RemoteHostExecutionEnv {
                 cleanupSpool();
                 throw e;
             }
+            if (child.pid != null)
+                ticket = trackHostForegroundChild(child.pid);
             closeSpoolFds();
             child.on("error", (e) => {
                 finish({ ok: false, error: new ExecutionError("spawn_error", `host spawn failed: ${e.message}`) });
@@ -753,6 +765,8 @@ export class RemoteHostExecutionEnv {
                 settleFromTermination(code, signal);
             });
             child.on("exit", (code, signal) => {
+                if (ticket)
+                    untrackHostForegroundChild(ticket);
                 exited = true;
                 drainTimer = setTimeout(() => settleFromTermination(code, signal), EXIT_SETTLE_DRAIN_MS);
                 drainTimer.unref?.();
@@ -797,6 +811,9 @@ export class RemoteHostExecutionEnv {
         const signalReady = () => { const w = wake; wake = undefined; w?.(); };
         const sh = hostShell();
         const child = spawn(sh.shell, [...sh.args, command], { cwd, env: this.mergeEnv(options?.env), ...spawnGroupOptions() });
+        const ticket = child.pid != null ? trackHostForegroundChild(child.pid) : undefined;
+        if (ticket)
+            child.once("exit", () => untrackHostForegroundChild(ticket));
         let pipeDestroyTimer;
         const kill = () => {
             try {
@@ -831,6 +848,8 @@ export class RemoteHostExecutionEnv {
         child.on("close", (code, signal) => {
             if (pipeDestroyTimer)
                 clearTimeout(pipeDestroyTimer);
+            if (ticket)
+                untrackHostForegroundChild(ticket);
             if (finished)
                 return;
             exitCode = code ?? (signal ? 128 + (signalNumber(signal) ?? 0) : 1);
@@ -906,6 +925,8 @@ export class RemoteHostExecutionEnv {
             if (wallTimer)
                 clearTimeout(wallTimer);
             options?.signal?.removeEventListener("abort", onAbort);
+            if (ticket)
+                untrackHostForegroundChild(ticket);
         }
     }
     async absolutePath(p) {

package/dist/run-local.js

@@ -42,6 +42,7 @@ import { createOrgMemoryAdmissionWiring } from "./boot/org-memory.js";
 import { createPermissionDeniedMeter } from "./observability/tool-trace.js";
 import { createKeyResolver } from "./key-resolver.js";
 import { createLogger } from "./observability/logger.js";
+import { fatalExit } from "./boot/fatal-exit.js";
 import { createMetrics } from "./observability/metrics.js";
 import { installSecretEnvScrubRecorder } from "./observability/secret-env-scrub.js";
 import { buildDisplaySafeUrl } from "./trace/redact.js";
@@ -575,9 +576,6 @@ function isMainModule() {
     }
 }
 if (isMainModule()) {
-    void main().catch((err) => {
-        createLogger().error("fatal", { err: String(err) });
-        process.exit(1);
-    });
+    void main().catch((err) => fatalExit(err));
 }
 //# sourceMappingURL=run-local.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.93.1",
+  "version": "7.93.2",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",