@sema-agent/core 1.419.0 → 1.421.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- {"version":3,"file":"untrusted-egress.d.ts","sourceRoot":"","sources":["../../src/core/untrusted-egress.ts"],"names":[],"mappings":"AAoCA,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI/C;AAOD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAIjD;AA2CD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1E;AAOD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAKpG"}
1
+ {"version":3,"file":"untrusted-egress.d.ts","sourceRoot":"","sources":["../../src/core/untrusted-egress.ts"],"names":[],"mappings":"AAiEA,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI/C;AAOD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAIjD;AA2CD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1E;AAOD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAKpG"}
@@ -1,13 +1,16 @@
1
1
  import { delimitUntrusted } from "./untrusted-text.js";
2
2
  import { scrubSecrets } from "./arg-summary.js";
3
+ const URI_SCHEME = String.raw `[A-Za-z][A-Za-z0-9+.\-_]{0,63}`;
4
+ const CREDENTIALS_IN_AUTHORITY = new RegExp(String.raw `(${URI_SCHEME}:\/\/)(?:[^/\s"'@]*@)+`, "gi");
5
+ const URL_OF_ANY_PROTOCOL = new RegExp(String.raw `${URI_SCHEME}:\/\/[^\s"'\`]+`, "gi");
3
6
  export function redactSecrets(s) {
4
7
  return scrubSecrets(s)
5
- .replace(/(\w+:\/\/)(?:[^/\s"'@]*@)+/gi, "$1[redacted-credentials]@")
8
+ .replace(CREDENTIALS_IN_AUTHORITY, "$1[redacted-credentials]@")
6
9
  .replace(/([?&#](?:sig|signature|sas|code)=)[^&\s"'#]+/gi, "$1[redacted]");
7
10
  }
8
11
  export function redactHostLeaks(s) {
9
12
  return redactSecrets(s)
10
- .replace(/\w+:\/\/[^\s"'`]+/gi, "[redacted-url]")
13
+ .replace(URL_OF_ANY_PROTOCOL, "[redacted-url]")
11
14
  .replace(/(?:\/[A-Za-z0-9_.-]+){2,}/g, "[redacted-path]");
12
15
  }
13
16
  function boundedString(value, max, redact) {
@@ -1 +1 @@
1
- {"version":3,"file":"untrusted-egress.js","sourceRoot":"","sources":["../../src/core/untrusted-egress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAmChD,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,OAAO,YAAY,CAAC,CAAC,CAAC;SACnB,OAAO,CAAC,8BAA8B,EAAE,2BAA2B,CAAC;SACpE,OAAO,CAAC,gDAAgD,EAAE,cAAc,CAAC,CAAC;AAC/E,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,OAAO,aAAa,CAAC,CAAC,CAAC;SACpB,OAAO,CAAC,qBAAqB,EAAE,gBAAgB,CAAC;SAChD,OAAO,CAAC,4BAA4B,EAAE,iBAAiB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,GAAW,EAAE,MAA6B;IAC/E,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QACH,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,CAAC,GAAG,yBAAyB,CAAC;IAChC,CAAC;IACD,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAY9B,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;QAC7B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YAIf,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAGD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAKD,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,GAAW;IAChE,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAOD,MAAM,UAAU,uBAAuB,CAAC,KAAc,EAAE,IAAoC;IAI1F,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AACjG,CAAC"}
1
+ {"version":3,"file":"untrusted-egress.js","sourceRoot":"","sources":["../../src/core/untrusted-egress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA4DhD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,gCAAgC,CAAC;AAC9D,MAAM,wBAAwB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,UAAU,wBAAwB,EAAE,IAAI,CAAC,CAAC;AACpG,MAAM,mBAAmB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,GAAG,UAAU,iBAAiB,EAAE,IAAI,CAAC,CAAC;AAEvF,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,OAAO,YAAY,CAAC,CAAC,CAAC;SACnB,OAAO,CAAC,wBAAwB,EAAE,2BAA2B,CAAC;SAC9D,OAAO,CAAC,gDAAgD,EAAE,cAAc,CAAC,CAAC;AAC/E,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,OAAO,aAAa,CAAC,CAAC,CAAC;SACpB,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;SAC9C,OAAO,CAAC,4BAA4B,EAAE,iBAAiB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,GAAW,EAAE,MAA6B;IAC/E,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QACH,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,CAAC,GAAG,yBAAyB,CAAC;IAChC,CAAC;IACD,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAY9B,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;QAC7B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YAIf,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAGD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAKD,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,GAAW;IAChE,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAOD,MAAM,UAAU,uBAAuB,CAAC,KAAc,EAAE,IAAoC;IAI1F,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AACjG,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@sema-agent/core",
3
- "version": "1.419.0",
3
+ "version": "1.421.0",
4
4
  "description": "Stateless, task-oriented AI agent core",
5
5
  "type": "module",
6
6
  "license": "BUSL-1.1",
@@ -51,6 +51,8 @@
51
51
  "typecheck": "tsc --noEmit",
52
52
  "test": "vitest run",
53
53
  "test:watch": "vitest",
54
+ "gate:skips": "vitest run --exclude \"**/node_modules/**\" --exclude \"**/*.local.test.ts\" --reporter=default --reporter=json --outputFile.json=.skip-report.json && node scripts/verify-skip-baseline.mjs --report .skip-report.json",
55
+ "gate:live": "node scripts/run-live-gate.mjs",
54
56
  "smoke": "tsx src/examples/smoke.ts",
55
57
  "eval": "tsx eval/run.ts",
56
58
  "prepare": "npm run build",