@sema-agent/cli 1.0.77 → 1.0.78

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@sema-agent/cli",
-  "version": "1.0.77",
+  "version": "1.0.78",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@sema-agent/cli",
-      "version": "1.0.77",
+      "version": "1.0.78",
       "license": "BUSL-1.1",
       "dependencies": {
         "@sema-agent/sdk": "6.17.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/cli",
-  "version": "1.0.77",
+  "version": "1.0.78",
   "description": "Sema — your own Claude Code-grade coding agent, in the terminal.",
   "license": "BUSL-1.1",
   "bin": {

package/sema-main.js

@@ -61798,6 +61798,12 @@ function installSubagentActivitySink(sink2) {
     activitySink = prev;
   };
 }
+function installSubagentTailMetaSink(sink2) {
+  let prev = tailMetaSink;
+  return tailMetaSink = sink2, () => {
+    tailMetaSink = prev;
+  };
+}
 function isEngineSubagentTailActive(taskId) {
   return activeTails.has(taskId);
 }
@@ -61833,8 +61839,22 @@ function tailEngineSubagent(taskId) {
       for await (let ev of stream5) {
         if (ac.signal.aborted)
           break;
-        if (connectLogged || (connectLogged = !0, hostLog("debug", `[subagent-tail] ${taskId} stream connected +${Date.now() - openedAt}ms`)), ev.event !== "forward")
-          continue;
+        switch (connectLogged || (connectLogged = !0, hostLog("debug", `[subagent-tail] ${taskId} stream connected +${Date.now() - openedAt}ms`)), ev.event) {
+          case "meta":
+            try {
+              let out6 = tailMetaSink?.({ taskId, meta: ev.data });
+              out6 !== null && typeof out6 == "object" && typeof out6.then == "function" && out6.then(void 0, (e) => {
+                hostLog("debug", `[subagent-tail] ${taskId} meta sink rejected: ${String(e).slice(0, 160)}`);
+              });
+            } catch (e) {
+              hostLog("debug", `[subagent-tail] ${taskId} meta sink threw: ${String(e).slice(0, 160)}`);
+            }
+            continue;
+          case "forward":
+            break;
+          default:
+            continue;
+        }
         let d4 = ev.data, t2 = d4.type;
         if (frames += 1, !firstContentLogged && (t2 === "text_delta" || t2 === "reasoning_delta" || t2 === "tool_start") && (firstContentLogged = !0, hostLog("debug", `[subagent-tail] ${taskId} first content frame +${Date.now() - openedAt}ms (${String(t2)})`)), t2 === "text_delta" || t2 === "reasoning_delta")
           typeof d4.delta == "string" && d4.delta.length > 0 && publishSubagentContentEvent({
@@ -61885,7 +61905,7 @@ function hasActiveSubagentTail(taskId) {
 function __activeTailCountForTests() {
   return activeTails.size;
 }
-var capByBase2, CAP_FALSE_RETRY_TTL_MS2, activeTails, activitySink, init_engineSubagentTail = __esm({
+var capByBase2, CAP_FALSE_RETRY_TTL_MS2, activeTails, activitySink, tailMetaSink, init_engineSubagentTail = __esm({
   "node_modules/@sema-agent/client-core/dist/subagent/engineSubagentTail.js"() {
     init_host();
     init_engineWireSdk();
@@ -61894,6 +61914,7 @@ var capByBase2, CAP_FALSE_RETRY_TTL_MS2, activeTails, activitySink, init_engineS
     init_subagentContentStore();
     capByBase2 = /* @__PURE__ */ new Map(), CAP_FALSE_RETRY_TTL_MS2 = 5 * 6e4;
     activeTails = /* @__PURE__ */ new Map(), activitySink = null;
+    tailMetaSink = null;
   }
 });
 
@@ -64374,13 +64395,14 @@ async function surfaceFsApprovalAndDecide(deps2, taskId, argsByCall, signal) {
   let { pending: pending2, gatedCallId } = found, toolName2 = typeof pending2.toolName == "string" ? pending2.toolName : "", args = (gatedCallId !== void 0 ? argsByCall.get(gatedCallId) : void 0) ?? pending2.input ?? {};
   if (typeof args != "object" || args === null)
     return { kind: "failed", gatedCallId, reason: "gate has no tool input payload" };
-  let bridge3 = new HitlBridge(deps2.client, taskId), callKey = approvalCallKey(gatedCallId, taskId), ruleSuggestionsReadOnly = readRuleSuggestions(pending2.ruleSuggestions), card = await surfaceApprovalCard({
+  let bridge3 = new HitlBridge(deps2.client, taskId), callKey = approvalCallKey(gatedCallId, taskId), ruleSuggestionsReadOnly = readRuleSuggestions(pending2.ruleSuggestions), durableProbeCause = pending2.riskDescriptor?.probeCause, card = await surfaceApprovalCard({
     toolName: toolName2,
     args,
     callKey,
     ...signal ? { signal } : {},
     ...pending2.governanceForced === !0 ? { governanceForced: !0 } : {},
-    ...ruleSuggestionsReadOnly !== void 0 ? { ruleSuggestionsReadOnly } : {}
+    ...ruleSuggestionsReadOnly !== void 0 ? { ruleSuggestionsReadOnly } : {},
+    ...isProbeCauseCarrier(durableProbeCause) ? { probeCause: durableProbeCause } : {}
   });
   switch (card.kind) {
     case "failed":
@@ -64449,6 +64471,9 @@ function pathFromGateMessage(message) {
   if (typeof message == "string")
     return FS_WRITE_GATE_ASK_PATTERN.exec(message)?.[1];
 }
+function isProbeCauseCarrier(v2) {
+  return typeof v2 == "object" && v2 !== null && !Array.isArray(v2);
+}
 function readRuleSuggestions(v2) {
   if (!Array.isArray(v2) || v2.length === 0 || v2.length > 8)
     return;
@@ -64501,7 +64526,10 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     // (server 明说空串不铸键:「空串是坏值不是『空规则』」)—— 一格空白的规则解释比没有解释更坏。
     // 🔴 stamp 的是**原文字节**(不 trim、不截、不改写):展示值一改写就不再是「你那条规则」的原文;
     //    渲染面的长度夹取归壳,与 `message`/`sourceAgentName` 同族口径(本模块对展示文本零加工)。
-    ...typeof frame.persistedRuleShadowed == "string" && frame.persistedRuleShadowed.trim() !== "" ? { persistedRuleShadowed: frame.persistedRuleShadowed } : {}
+    ...typeof frame.persistedRuleShadowed == "string" && frame.persistedRuleShadowed.trim() !== "" ? { persistedRuleShadowed: frame.persistedRuleShadowed } : {},
+    // #280 件1(0.30.4):探针因由随卡透传 —— 载体形判之外零校验零改写(内部结构归呈卡端窄读器,
+    // isProbeCauseCarrier 顶注);缺席/坏载体 ⇒ 键不 stamp,卡形字节不变。
+    ...isProbeCauseCarrier(frame.probeCause) ? { probeCause: frame.probeCause } : {}
   }), decision = card.kind === "allow" ? card.allowSession ? "allow_session" : "allow" : "deny";
   card.kind === "failed" && hostLog("debug", `liveToolApprovalWire: approval card unavailable (${card.reason}) \u2014 fail-closed deny for ${frame.approvalId}`);
   let note;
@@ -64553,6 +64581,11 @@ var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND
       // (sdk 6.14.0/6.15.0 的 TOOL_APPROVAL_FRAME_KEYS 都还没有它)⇒ 对账门里有一条**带退出条件**的
       // 领先登记(AHEAD_OF_ANCHOR):SDK 锚一旦补上,那条登记当场红,逼人删登记而不是让豁免长住。
       "persistedRuleShadowed",
+      // #280 件1(client-core 0.30.4):server 7.21.0-rc(#253)起真发 `probeCause`(直证 = engine
+      // 7.22.0 fixture 的 `@sema-agent/server/dist/tool-approval.d.ts`)。⚠️ 本键**领先** SDK 运行期锚
+      // 一代(sdk 6.17.2 尚无)⇒ 对账门里有一条带退出条件的领先登记(AHEAD_OF_ANCHOR),SDK 锚一旦
+      // 补上,那条登记当场红,逼人删登记回到逐元素相等 —— #144 persistedRuleShadowed 同形先例。
+      "probeCause",
       "delegation",
       "outcome"
     ];
@@ -67850,6 +67883,7 @@ __export(dist_exports, {
   installHostFor: () => installHostFor,
   installNotificationQueuePort: () => installNotificationQueuePort,
   installSubagentActivitySink: () => installSubagentActivitySink,
+  installSubagentTailMetaSink: () => installSubagentTailMetaSink,
   installWorkflowStatusProbe: () => installWorkflowStatusProbe,
   isAllowedCatalogUrl: () => isAllowedCatalogUrl,
   isAlreadyResolvedGateReason: () => isAlreadyResolvedGateReason,
@@ -109067,7 +109101,7 @@ var import_stack_utils, import_jsx_runtime6, cleanupPath, stackUtils, init_Error
 // build-src/src/ink/components/TerminalSizeContext.tsx
 var import_react9, TerminalSizeContext, init_TerminalSizeContext = __esm({
   "build-src/src/ink/components/TerminalSizeContext.tsx"() {
-    import_react9 = __toESM(require_react()), TerminalSizeContext = (0, import_react9.createContext)(null);
+    import_react9 = __toESM(require_react(), 1), TerminalSizeContext = (0, import_react9.createContext)(null);
   }
 });
 
@@ -317012,7 +317046,7 @@ function useClaudeAiLimits() {
 }
 var import_react69, init_claudeAiLimitsHook = __esm({
   "build-src/src/services/claudeAiLimitsHook.ts"() {
-    import_react69 = __toESM(require_react());
+    import_react69 = __toESM(require_react(), 1);
     init_claudeAiLimits();
   }
 });
@@ -400155,18 +400189,15 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.77",
+        version: "1.0.78",
         notes: [
-          "Engine upgraded to 7.22.0 (from 7.19.0): reversibility probes, memory-governance surfaces, and full status-frame disclosure land in the wire this shell speaks",
-          "Approval cards now explain why a command tripped the reversibility probe: a one-line note names the probe cause (for example an unbounded recursive read) and the directories it rooted in, alongside the existing governance and wire notes",
-          "ctrl+b (send to background) stays honest on remote-hosted turns: the shell records the engine's session-backgroundable capability during handshake and keeps the local backgrounding shortcut scoped to turns it actually owns \u2014 remote lanes get a structured verdict instead of a silent no-op",
-          "The engine-fence suite gained a full 7.22.0 lane (41 live checks) and the 7.18 fence re-run stays green on the new engine, so wire regressions in approvals, session reads, and SSE cleanup surface before a release rather than after",
-          "Two upstream default flips are now pinned by tests so they cannot silently drift: shell-history files are readable by built-in tools (deny still available via explicit configuration), and a throwing activity listener no longer fails the whole leg",
-          "client-core 0.30.3: principal handling gained a single normalization primitive (an all-whitespace principal now means absent \u2014 no more blank identity headers), turn-error classification and session-id mapping moved to shared single sources, and approval-card rule suggestions share one persistence verdict across surfaces"
+          "Approval cards now actually show the reversibility-probe note promised in 1.0.77: client-core 0.30.4 forwards the probe cause on both the live approval frame and the durable parked row, so the one-line 'reversibility probe: \u2026 \u2014 roots: \u2026' explanation reaches the card in the default interactive path (this closes the gap where 1.0.77 advertised the note but the wire dropped it in transit)",
+          "The subagent tail stream now publishes engine meta frames to the shell, so content-frame availability is knowable per subagent (groundwork; the viewing-pane hint that consumes it ships separately)",
+          "No engine change: still 7.22.0"
         ]
       },
-      productVersion: "1.0.77",
-      announcement: "sema 1.0.77 \u2014 Engine 7.22.0 pickup: approval cards now name the reversibility-probe cause and its root directories, the shell records the engine's session-backgroundable capability at handshake (ctrl+b stays scoped to turns the shell owns, with a structured verdict instead of a silent no-op on remote lanes), and a full 7.22.0 live fence (41 checks) plus the 7.18 fence re-run guard approvals, session reads, and SSE cleanup against wire regressions. Two upstream default flips are pinned by tests (shell-history readable by built-ins; a throwing activity listener no longer fails the leg). client-core 0.30.3: blank principals mean absent (no more blank identity headers), and turn-error classification, session-id mapping, and rule-persistence verdicts are single-sourced across surfaces."
+      productVersion: "1.0.78",
+      announcement: "sema 1.0.78 \u2014 Fix release: the reversibility-probe note on approval cards (advertised in 1.0.77) now actually renders \u2014 client-core 0.30.4 forwards the probe cause across both the live frame and durable parked rows, closing the transit gap a black-box audit caught. Subagent tail streams now surface engine meta frames as groundwork for per-agent content-frame hints. Engine unchanged at 7.22.0."
     };
   }
 });
@@ -404369,18 +404400,15 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.77",
+        version: "1.0.78",
         notes: [
-          "Engine upgraded to 7.22.0 (from 7.19.0): reversibility probes, memory-governance surfaces, and full status-frame disclosure land in the wire this shell speaks",
-          "Approval cards now explain why a command tripped the reversibility probe: a one-line note names the probe cause (for example an unbounded recursive read) and the directories it rooted in, alongside the existing governance and wire notes",
-          "ctrl+b (send to background) stays honest on remote-hosted turns: the shell records the engine's session-backgroundable capability during handshake and keeps the local backgrounding shortcut scoped to turns it actually owns \u2014 remote lanes get a structured verdict instead of a silent no-op",
-          "The engine-fence suite gained a full 7.22.0 lane (41 live checks) and the 7.18 fence re-run stays green on the new engine, so wire regressions in approvals, session reads, and SSE cleanup surface before a release rather than after",
-          "Two upstream default flips are now pinned by tests so they cannot silently drift: shell-history files are readable by built-in tools (deny still available via explicit configuration), and a throwing activity listener no longer fails the whole leg",
-          "client-core 0.30.3: principal handling gained a single normalization primitive (an all-whitespace principal now means absent \u2014 no more blank identity headers), turn-error classification and session-id mapping moved to shared single sources, and approval-card rule suggestions share one persistence verdict across surfaces"
+          "Approval cards now actually show the reversibility-probe note promised in 1.0.77: client-core 0.30.4 forwards the probe cause on both the live approval frame and the durable parked row, so the one-line 'reversibility probe: \u2026 \u2014 roots: \u2026' explanation reaches the card in the default interactive path (this closes the gap where 1.0.77 advertised the note but the wire dropped it in transit)",
+          "The subagent tail stream now publishes engine meta frames to the shell, so content-frame availability is knowable per subagent (groundwork; the viewing-pane hint that consumes it ships separately)",
+          "No engine change: still 7.22.0"
         ]
       },
-      productVersion: "1.0.77",
-      announcement: "sema 1.0.77 \u2014 Engine 7.22.0 pickup: approval cards now name the reversibility-probe cause and its root directories, the shell records the engine's session-backgroundable capability at handshake (ctrl+b stays scoped to turns the shell owns, with a structured verdict instead of a silent no-op on remote lanes), and a full 7.22.0 live fence (41 checks) plus the 7.18 fence re-run guard approvals, session reads, and SSE cleanup against wire regressions. Two upstream default flips are pinned by tests (shell-history readable by built-ins; a throwing activity listener no longer fails the leg). client-core 0.30.3: blank principals mean absent (no more blank identity headers), and turn-error classification, session-id mapping, and rule-persistence verdicts are single-sourced across surfaces."
+      productVersion: "1.0.78",
+      announcement: "sema 1.0.78 \u2014 Fix release: the reversibility-probe note on approval cards (advertised in 1.0.77) now actually renders \u2014 client-core 0.30.4 forwards the probe cause across both the live frame and durable parked rows, closing the transit gap a black-box audit caught. Subagent tail streams now surface engine meta frames as groundwork for per-agent content-frame hints. Engine unchanged at 7.22.0."
     };
   }
 });
@@ -476908,7 +476936,7 @@ var import_jsx_runtime414, init_chrome_context_window_warning = __esm({
     init_autoCompact();
     init_compactWarningHook();
     init_contextWindowUpgradeCheck();
-    import_jsx_runtime414 = __toESM(require_jsx_runtime(), 1);
+    import_jsx_runtime414 = __toESM(require_jsx_runtime());
   }
 });
 
@@ -529519,7 +529547,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.77", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.78", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);

package/sema.js

@@ -71,7 +71,7 @@ function installBootSignalTailFrame(argv2 = process.argv.slice(2)) {
 installBootSignalTailFrame();
 
 // build-src/src/sema/preludeEntry.ts
-var versionLine = "sema 1.0.77" ? "sema 1.0.77" : "";
+var versionLine = "sema 1.0.78" ? "sema 1.0.78" : "";
 var argv = process.argv.slice(2);
 var wantsVersionFastPath = argv.length === 1 && (argv[0] === "--version" || argv[0] === "-v");
 if (wantsVersionFastPath && versionLine) {