@sema-agent/core 1.434.0 → 1.436.2

package/dist/agents/subagent.d.ts

@@ -5,6 +5,7 @@ import { type ExecutionEnv } from "../internal/harness.js";
 import type { RunInternals } from "../core/runner/prepare-task.js";
 import type { TaskNotificationPayload } from "../core/task-notification.js";
 export type { SubagentStep, SubagentEditedFile } from "./subagent-steps.js";
+export declare function notifyResultField(result: string | undefined): string | undefined;
 export declare function inheritedManifestScopeFor(snapshot: readonly unknown[] | undefined): RunInternals["inheritedManifestScope"];
 export declare const DEFAULT_SUBAGENT_TOOL_NAME = "Agent";
 export declare const LEGACY_SUBAGENT_TOOL_NAME = "Task";

package/dist/agents/subagent.js

@@ -12,6 +12,7 @@ import { SUBAGENT_PROMPT } from "../prompts/default.js";
 import { hasSessionFork } from "../core/session.js";
 import { isDurablePause } from "./suspend-guard.js";
 import { delimitUntrusted, inlineUntrusted } from "../core/untrusted-text.js";
+import { boundedRedactedSummary } from "../core/untrusted-egress.js";
 import { uuidv7 } from "../internal/harness.js";
 import { addWorktree } from "../core/git-worktree-env.js";
 import { BG_AGENT_REAP_STOP_ERROR, DURABLE_AGENT_HANDLE_RE, DURABLE_AGENT_HEARTBEAT_MS, normalizeAgentName } from "../core/task-registry.js";
@@ -19,6 +20,23 @@ import { canAccessAgentRecord } from "../core/background-agent-store.js";
 import { extractErrorCode } from "../brain/errors.js";
 import { ObserverDigestTap, ObserverPairing, createObserverReportToolSpec, markObserverTaskId, unmarkObserverTaskId, isObserverTaskId, observerFramingPrompt, observerSlug, resolveObserverDeclaration, OBSERVER_SENDMESSAGE_SENDER_REFUSAL, OBSERVER_SENDMESSAGE_TARGET_REFUSAL, } from "./observer.js";
 import { SubagentStepRecorder, stepsFromMessages } from "./subagent-steps.js";
+const BG_AGENT_RESULT_MAX = 4_000;
+const BG_AGENT_RESULT_FULL_MAX = 200_000;
+function resultSettleFields(result) {
+    if (!result)
+        return {};
+    const full = boundedRedactedSummary(result, BG_AGENT_RESULT_FULL_MAX);
+    const display = full.length > BG_AGENT_RESULT_MAX ? boundedRedactedSummary(result, BG_AGENT_RESULT_MAX) : full;
+    return display === full ? { result: display } : { result: display, resultFull: full };
+}
+const BG_AGENT_NOTIFY_RESULT_MAX = 2_000;
+export function notifyResultField(result) {
+    if (!result)
+        return undefined;
+    return result.length > BG_AGENT_NOTIFY_RESULT_MAX
+        ? `${result.slice(0, BG_AGENT_NOTIFY_RESULT_MAX)}\n[result truncated: ${result.length} chars total — call TaskOutput for the full text]`
+        : result;
+}
 export function inheritedManifestScopeFor(snapshot) {
     if (!snapshot || snapshot.length === 0)
         return undefined;
@@ -610,7 +628,7 @@ function makeSubagentResume(deps) {
                     try {
                         const winner = deps.registry.settleRevivedAgent(deps.taskId, reviveCycle, {
                             status,
-                            ...(child.result ? { result: child.result.slice(0, 2_000) } : {}),
+                            ...resultSettleFields(child.result),
                             ...(status !== "completed" ? { error: (child.errorMessage ?? `resumed run ${status}`).slice(0, 500) } : {}),
                         });
                         if (winner !== undefined)
@@ -644,7 +662,7 @@ function makeSubagentResume(deps) {
                     ...(stoppedByRevive !== undefined ? { stoppedBy: stoppedByRevive } : {}),
                     seq: entry.cycleSeq,
                     summary: `Agent "${reviveName}" (resumed) ${status === "killed" ? "stopped" : child.status === "completed" ? "finished" : String(child.status)}${ccElapsedTag(Date.now() - reviveStartedAt)}`,
-                    ...(child.result ? { result: child.result.slice(0, 2_000) } : {}),
+                    ...(child.result ? { result: notifyResultField(child.result) } : {}),
                     ...(status === "killed" && child.result ? { partial: true } : {}),
                     ...resumeResidual(),
                     resumable: status !== "killed",
@@ -1771,7 +1789,7 @@ function makeSubagentTool(opts, depth, excluded, extraToolsBudget) {
                         const reapedBg = !okBg && abort.signal.aborted;
                         const settledBg = bg.registry.settleBackgroundAgent(taskId, {
                             status: okBg ? "completed" : reapedBg ? "killed" : "failed",
-                            ...(child.result ? { result: child.result.slice(0, 4_000) } : {}),
+                            ...resultSettleFields(child.result),
                             ...(!okBg ? { error: reapedBg ? BG_AGENT_REAP_STOP_ERROR : child.errorMessage ?? String(child.status) } : {}),
                         }) ?? (abort.signal.aborted ? "killed" : okBg ? "completed" : "failed");
                         const stoppedByBg = settledBg === "killed" ? bg.registry.getStopAttribution(taskId) ?? "system" : undefined;
@@ -1809,7 +1827,7 @@ function makeSubagentTool(opts, depth, excluded, extraToolsBudget) {
                                 ...(stoppedByBg !== undefined ? { stoppedBy: stoppedByBg } : {}),
                                 summary: `${ccCompletionText(shortDesc, settledBg, String(child.status), Date.now() - forkBgStartedAt)}`,
                                 ...(child.sessionId ? { sessionId: child.sessionId } : {}),
-                                ...(child.result ? { result: child.result.slice(0, 2_000) } : {}),
+                                ...(child.result ? { result: notifyResultField(child.result) } : {}),
                                 ...(settledBg === "killed" && child.result ? { partial: true } : {}),
                                 ...residualFork,
                                 resumable: resumableFork,
@@ -2347,7 +2365,7 @@ task_id: ${taskId}
                     const settled = bg.registry.settleBackgroundAgent(taskId, {
                         status: ok ? "completed" : reaped ? "killed" : "failed",
                         seq: seqAtSettle ?? 1,
-                        ...(child.result ? { result: child.result.slice(0, 4_000) } : {}),
+                        ...resultSettleFields(child.result),
                         ...(!ok ? { error: reaped ? BG_AGENT_REAP_STOP_ERROR : child.errorMessage ?? String(child.status) } : {}),
                     }) ??
                         (abort.signal.aborted ? "killed" : ok ? "completed" : "failed");
@@ -2386,7 +2404,7 @@ task_id: ${taskId}
                         ...(stoppedBy !== undefined ? { stoppedBy } : {}),
                         summary: `${ccCompletionText(shortDesc, settled, String(child.status), Date.now() - bgStartedAt)}${observerNote}`,
                         ...(child.sessionId ? { sessionId: child.sessionId } : {}),
-                        ...(child.result ? { result: child.result.slice(0, 2_000) } : {}),
+                        ...(child.result ? { result: notifyResultField(child.result) } : {}),
                         ...(settled === "killed" && child.result ? { partial: true } : {}),
                         ...residual,
                         resumable: resumableBg,

package/dist/core/background-agent-store.d.ts

@@ -34,6 +34,7 @@ export interface BackgroundAgentRecord {
     parkClaimId?: string;
     summary?: string;
     finalOutput?: string;
+    finalOutputFull?: string;
     error?: string;
     resultIsPartial?: boolean;
     recentSteps?: SubagentStep[];

package/dist/core/task-registry.d.ts

@@ -97,6 +97,7 @@ interface BackgroundAgentTaskHandle extends SemaTaskHandle {
     name?: string;
     sessionScoped?: true;
     result?: string;
+    resultFull?: string;
     error?: string;
     resultIsPartial?: boolean;
     stopSource?: StopSource;
@@ -291,6 +292,7 @@ export declare class TaskRegistry {
     settleBackgroundAgent(id: string, outcome: {
         status: "completed" | "failed" | "killed";
         result?: string;
+        resultFull?: string;
         error?: string;
         stoppedBy?: StopSource;
         seq?: number;
@@ -353,6 +355,7 @@ export declare class TaskRegistry {
     settleRevivedAgent(id: string, cycle: number, outcome: {
         status: "completed" | "failed" | "killed";
         result?: string;
+        resultFull?: string;
         error?: string;
     }): "completed" | "failed" | "killed" | undefined;
     unmarkRetainedContinuation(id: string): void;

package/dist/core/task-registry.js

@@ -7,6 +7,7 @@ import { summarizeWorkflowRun } from "./workflow-run-store.js";
 import { canAccessAgentRecord, BackgroundAgentStoreError, } from "./background-agent-store.js";
 import { delimitUntrusted } from "./untrusted-text.js";
 import { boundedRedactedSummary } from "./untrusted-egress.js";
+import { clipWithFilePointer } from "./tool-errors.js";
 const defaultMonitorTimers = {
     setInterval: (fn, ms) => {
         const h = setInterval(() => void fn(), ms);
@@ -52,8 +53,6 @@ const TASK_OUTPUT_DEFAULT_CHARS = 32_000;
 const TASK_OUTPUT_MAX_CHARS = 160_000;
 const TASK_OUTPUT_ALIASES = ["BashOutput", "AgentOutputTool", "BashOutputTool", "AgentOutput", "WorkflowStatus"];
 const TASK_STOP_ALIASES = ["KillShell", "KillBash"];
-const isHighSurrogate = (c) => c >= 0xd800 && c <= 0xdbff;
-const isLowSurrogate = (c) => c >= 0xdc00 && c <= 0xdfff;
 const TASK_OUTPUT_MIN_CHARS = 512;
 function taskMaxOutputChars() {
     const raw = process.env.TASK_MAX_OUTPUT_LENGTH;
@@ -67,24 +66,7 @@ function taskMaxOutputChars() {
     return Math.min(Math.max(n, TASK_OUTPUT_MIN_CHARS), TASK_OUTPUT_MAX_CHARS);
 }
 export function clipTaskOutput(s, fullOutputPath) {
-    const limit = taskMaxOutputChars();
-    if (s.length <= limit)
-        return s;
-    if (fullOutputPath !== undefined) {
-        const header = `[Truncated. Full output: ${fullOutputPath}]\n\n`;
-        const room = limit - header.length;
-        return room > 0 ? header + s.slice(-room) : header.trimEnd().slice(0, Math.min(limit, s.length));
-    }
-    const omittedCount = (kept) => s.length - kept;
-    const markerFor = (kept) => `\n…[${s.length} chars total, ${omittedCount(kept)} omitted from the middle]…\n`;
-    const budget = limit - markerFor(0).length;
-    if (budget < 2)
-        return s.slice(0, limit);
-    const half = Math.floor(budget / 2);
-    const headEnd = half > 0 && isHighSurrogate(s.charCodeAt(half - 1)) ? half - 1 : half;
-    const tailStart = half > 0 && isLowSurrogate(s.charCodeAt(s.length - half)) ? s.length - half + 1 : s.length - half;
-    const kept = headEnd + (s.length - tailStart);
-    return `${s.slice(0, headEnd)}${markerFor(kept)}${s.slice(tailStart)}`;
+    return clipWithFilePointer(s, taskMaxOutputChars(), fullOutputPath);
 }
 function firstString(...values) {
     for (const value of values) {
@@ -1092,6 +1074,8 @@ export class TaskRegistry {
                     handle.result = outcome.result;
                     handle.resultIsPartial = true;
                     backfilled = true;
+                    if (outcome.resultFull !== undefined)
+                        handle.resultFull = outcome.resultFull;
                 }
                 if (handle.error === undefined && outcome.error !== undefined && outcome.error !== BG_AGENT_REAP_STOP_ERROR) {
                     handle.error = outcome.error;
@@ -1101,6 +1085,7 @@ export class TaskRegistry {
                     handle.updatedAt = Date.now();
                     this.durableAgentWrite(handle, {
                         ...(handle.result !== undefined ? { finalOutput: handle.result } : {}),
+                        ...(handle.resultFull !== undefined ? { finalOutputFull: handle.resultFull } : {}),
                         ...(handle.resultIsPartial ? { resultIsPartial: true } : {}),
                         ...(handle.error !== undefined ? { error: handle.error } : {}),
                     });
@@ -1121,6 +1106,8 @@ export class TaskRegistry {
         }
         if (outcome.result !== undefined)
             handle.result = outcome.result;
+        if (outcome.resultFull !== undefined)
+            handle.resultFull = outcome.resultFull;
         if (outcome.status === "killed" && outcome.result !== undefined && outcome.result !== "") {
             handle.resultIsPartial = true;
         }
@@ -1137,6 +1124,7 @@ export class TaskRegistry {
             settledAt: Date.now(),
             ...(handle.stoppedBy !== undefined ? { stoppedBy: handle.stoppedBy } : {}),
             ...(handle.result !== undefined ? { finalOutput: handle.result } : {}),
+            ...(handle.resultFull !== undefined ? { finalOutputFull: handle.resultFull } : {}),
             ...(handle.resultIsPartial ? { resultIsPartial: true } : {}),
             ...(handle.error !== undefined ? { error: handle.error } : {}),
         }, ["parkedCheckpointToken", "parkClaimId", "parkedAt"]);
@@ -1859,7 +1847,7 @@ The agent is durably suspended, waiting for an approval decision. It resumes whe
         const body = `status: ${row.status}
 ${row.error ? `error: ${row.error}
 ` : ""}${row.finalOutput ? `--- result${row.resultIsPartial ? " (partial — produced before the task was stopped)" : ""} ---
-${clipTaskOutput(row.finalOutput)}` : "(no result text)"}`;
+${clipTaskOutput(row.finalOutputFull ?? row.finalOutput)}` : "(no result text)"}`;
         return {
             content: delimitUntrusted(`TaskOutput ${row.handle}`, body),
             details: {
@@ -2037,13 +2025,14 @@ ${clipTaskOutput(row.finalOutput)}` : "(no result text)"}`;
         if (abort !== undefined)
             handle.abort = abort;
         handle.result = undefined;
+        handle.resultFull = undefined;
         handle.error = undefined;
         handle.resultIsPartial = undefined;
         handle.stopSource = undefined;
         handle.reviveCycle = (handle.reviveCycle ?? 0) + 1;
         handle.cycleSeq = (handle.cycleSeq ?? 1) + 1;
         handle.updatedAt = Date.now();
-        this.durableAgentWrite(handle, { status: "running" }, ["settledAt", "stoppedBy", "finalOutput", "error", "resultIsPartial", "summary", "recentSteps", "editedFiles", "usage"]);
+        this.durableAgentWrite(handle, { status: "running" }, ["settledAt", "stoppedBy", "finalOutput", "finalOutputFull", "error", "resultIsPartial", "summary", "recentSteps", "editedFiles", "usage"]);
         return { ok: true, cycle: handle.reviveCycle };
     }
     settleRevivedAgent(id, cycle, outcome) {
@@ -2597,7 +2586,7 @@ The agent is still working — you will be notified when it completes.`
             : `status: ${handle.status}
 ${handle.error ? `error: ${handle.error}
 ` : ""}${handle.result ? `--- result${handle.resultIsPartial ? " (partial — produced before the task was stopped)" : ""} ---
-${clipTaskOutput(handle.result, handle.outputFile)}` : "(no result text)"}`;
+${clipTaskOutput(handle.resultFull ?? handle.result, handle.outputFile)}` : "(no result text)"}`;
         return {
             content: delimitUntrusted(`TaskOutput ${handle.id}`, body),
             details: {

package/dist/core/tool-errors.d.ts

@@ -1,5 +1,6 @@
 import type { TSchema } from "typebox";
 export declare function truncateError(s: string): string;
+export declare function clipWithFilePointer(s: string, limit: number, fullOutputPath?: string): string;
 export declare function formatToolError(error: unknown): string;
 export type WorkerErrorClass = "budget" | "limit" | "output" | "suspend" | "review" | "unexpected" | "oracle" | "resume" | "config" | "conflict" | "brain" | "aborted" | "unknown";
 export declare function errorClassOf(errorCode: string | undefined): WorkerErrorClass;

package/dist/core/tool-errors.js

@@ -7,6 +7,27 @@ export function truncateError(s) {
     const removed = s.length - MAX_ERROR_CHARS;
     return `${s.slice(0, HALF)}\n\n... [${removed} characters truncated] ...\n\n${s.slice(s.length - HALF)}`;
 }
+const isHighSurrogate = (c) => c >= 0xd800 && c <= 0xdbff;
+const isLowSurrogate = (c) => c >= 0xdc00 && c <= 0xdfff;
+export function clipWithFilePointer(s, limit, fullOutputPath) {
+    if (s.length <= limit)
+        return s;
+    if (fullOutputPath !== undefined) {
+        const header = `[Truncated. Full output: ${fullOutputPath}]\n\n`;
+        const room = limit - header.length;
+        return room > 0 ? header + s.slice(-room) : header.trimEnd().slice(0, Math.min(limit, s.length));
+    }
+    const omittedCount = (kept) => s.length - kept;
+    const markerFor = (kept) => `\n…[${s.length} chars total, ${omittedCount(kept)} omitted from the middle]…\n`;
+    const budget = limit - markerFor(0).length;
+    if (budget < 2)
+        return s.slice(0, limit);
+    const half = Math.floor(budget / 2);
+    const headEnd = half > 0 && isHighSurrogate(s.charCodeAt(half - 1)) ? half - 1 : half;
+    const tailStart = half > 0 && isLowSurrogate(s.charCodeAt(s.length - half)) ? s.length - half + 1 : s.length - half;
+    const kept = headEnd + (s.length - tailStart);
+    return `${s.slice(0, headEnd)}${markerFor(kept)}${s.slice(tailStart)}`;
+}
 function isShellLike(e) {
     return typeof e === "object" && e !== null && ("exitCode" in e || "stderr" in e || "stdout" in e);
 }

package/dist/tools/fs/index.js

@@ -4,9 +4,10 @@ import { defineTool } from "../../core/tools.js";
 import { createTaskOutputTool, createTaskStopTool, defaultTaskRegistry } from "../../core/task-registry.js";
 import { hasBackgroundShell } from "../../core/background-shell.js";
 import { delimitUntrusted } from "../../core/untrusted-text.js";
+import { clipWithFilePointer } from "../../core/tool-errors.js";
 import { sha256, resolveKey, violationText, requireRead, checkStale, checkEditMatch, checkNoChange, hasBinaryExtension, isBinaryContent, fileArgPath, imageMimeForRead, imageMagicMatches, similarNameSuggestion, resolveQuoteMatch, adaptNewStringQuotes, deletionOldString, countOccurrences, OVERSIZE_READ_ESCAPE_HINT, isBlockedDevicePath, normalizeAbsPathLexically, } from "./safety.js";
 import { decodeTextBytes, encodeTextForFile, normalizeEditText } from "./encoding.js";
-import { runGrepDetailed, runGlobDetailed, splitAbsoluteGlobPattern } from "./search.js";
+import { runGrepDetailed, runGlobDetailed, splitAbsoluteGlobPattern, shellQuote } from "./search.js";
 import { makeRepoMapTool } from "./repo-map.js";
 import { ghRateLimitHint } from "./gh-rate-limit.js";
 import { MCP_IMAGE_MAX_BASE64, IMAGE_TARGET_RAW_SIZE, sharpImageDownsampler } from "../../core/mcp.js";
@@ -61,12 +62,23 @@ const FILE_PATH_PARAMS = {
     path: Type.Optional(Type.String({ description: "Deprecated alias for `file_path` (back-compat; prefer file_path)." })),
 };
 function clipShellOutput(s) {
-    const max = bashMaxOutputChars();
-    if (s.length <= max)
-        return s;
-    const half = Math.floor(max / 2);
-    const omitted = s.length - 2 * half;
-    return `${s.slice(0, half)}\n…[${s.length} chars total, ${omitted} omitted from the middle]…\n${s.slice(s.length - half)}`;
+    return clipWithFilePointer(s, bashMaxOutputChars());
+}
+async function writeShellOverflowFile(env, stdout, stderr) {
+    const tf = await env.createTempFile({ prefix: "bash-output-", suffix: ".log" });
+    if (!tf.ok)
+        return undefined;
+    const body = stderr.length > 0 ? `${stdout}${stdout.length > 0 && !stdout.endsWith("\n") ? "\n" : ""}--- stderr ---\n${stderr}` : stdout;
+    const w = await env.writeFile(tf.value, body);
+    if (!w.ok)
+        return undefined;
+    const canon = await env.canonicalPath(tf.value);
+    return canon.ok ? canon.value : tf.value;
+}
+function shellRecoveryHint(path, readOnly) {
+    const quoted = shellQuote(path);
+    const example = readOnly ? `tail -c 50000 ${quoted}` : `sed -n 'START,ENDp' ${quoted}`;
+    return `\n(captured output preserved at ${path} — inspect with bash, e.g. \`${example}\`)`;
 }
 const FILE_STATE_TRAILER = " (file state is current in your context — no need to Read it back)";
 const CWD_SENTINEL = "__cc_cwd_9f2c1b__";
@@ -1446,7 +1458,7 @@ export function canAutoBackground(command) {
         return false;
     return true;
 }
-async function runShell(env, cwd, toolName, command, timeoutSec, signal, cwdRef, detach, execClamp, toolCallId) {
+async function runShell(env, cwd, toolName, command, timeoutSec, signal, cwdRef, detach, execClamp, toolCallId, readOnly) {
     let timeout = Math.min(BASH_MAX_TIMEOUT_SEC, Math.max(1, Math.floor(timeoutSec ?? BASH_DEFAULT_TIMEOUT_SEC)));
     const requestedSec = timeout;
     let clampedByDeadline = false;
@@ -1509,9 +1521,13 @@ async function runShell(env, cwd, toolName, command, timeoutSec, signal, cwdRef,
             return `Error (${toolName}): connection to the execution environment was lost — the command's outcome is unknown and it may still be running. Verify its effects before retrying; retry only if the command is idempotent. (${res.error.message})`;
         }
         if (res.error.code === "timeout" || res.error.code === "aborted" || res.error.code === "callback_error") {
-            const clip = clipShellOutput;
-            const pStdout = clip(res.error.partialStdout ?? "");
-            const pStderr = clip(res.error.partialStderr ?? "");
+            const rawStdout = res.error.partialStdout ?? "";
+            const rawStderr = res.error.partialStderr ?? "";
+            const cutOverflowFile = rawStdout.length > bashMaxOutputChars() || rawStderr.length > bashMaxOutputChars()
+                ? await writeShellOverflowFile(env, rawStdout, rawStderr)
+                : undefined;
+            const pStdout = clipShellOutput(rawStdout);
+            const pStderr = clipShellOutput(rawStderr);
             const headline = res.error.code === "timeout"
                 ? clampedByDeadline
                     ? deadlineExhausted
@@ -1526,13 +1542,15 @@ async function runShell(env, cwd, toolName, command, timeoutSec, signal, cwdRef,
             const body = captured.length > 0
                 ? `\n${delimitUntrusted("partial command output", captured)}`
                 : `\n(no output was produced before the cutoff)`;
+            const overflowNote = cutOverflowFile !== undefined ? shellRecoveryHint(cutOverflowFile, readOnly) : "";
             return {
-                content: `Error (${toolName}): ${headline}${body}`,
+                content: `Error (${toolName}): ${headline}${body}${overflowNote}`,
                 details: {
                     type: "bash",
                     stdout: pStdout,
                     stderr: pStderr,
                     exitCode: null,
+                    ...(cutOverflowFile !== undefined ? { output_file: cutOverflowFile } : {}),
                     ...(res.error.code === "timeout"
                         ? {
                             timedOut: true,
@@ -1567,26 +1585,38 @@ async function runShell(env, cwd, toolName, command, timeoutSec, signal, cwdRef,
                 cwdRef.current = captured;
         }
     }
-    const clip = clipShellOutput;
-    const clippedStdout = clip(stdout);
-    const clippedStderr = clip(stderr);
+    const clippedStdout = clipShellOutput(stdout);
+    const clippedStderr = clipShellOutput(stderr);
     const stdoutImage = dataUriImageFromStdout(stdout);
     if (stdoutImage) {
+        const imgOverflowFile = stderr.length > bashMaxOutputChars() ? await writeShellOverflowFile(env, "", stderr) : undefined;
+        const imgOverflowNote = imgOverflowFile !== undefined ? shellRecoveryHint(imgOverflowFile, readOnly) : "";
         return {
             content: [
                 { type: "image", data: stdoutImage.data, mimeType: stdoutImage.mime },
-                { type: "text", text: `exit code: ${exitCode}\n[Image data detected in stdout and shown above]${stderr.trim() !== "" ? `\n--- stderr ---\n${clippedStderr}` : ""}` },
+                { type: "text", text: `exit code: ${exitCode}\n[Image data detected in stdout and shown above]${stderr.trim() !== "" ? `\n--- stderr ---\n${clippedStderr}` : ""}${imgOverflowNote}` },
             ],
-            details: { type: "bash", stdout: "[image data]", stderr: clippedStderr, exitCode, isImage: true },
+            details: { type: "bash", stdout: "[image data]", stderr: clippedStderr, exitCode, isImage: true, ...(imgOverflowFile !== undefined ? { output_file: imgOverflowFile } : {}) },
         };
     }
+    const cleanOverflowFile = stdout.length > bashMaxOutputChars() || stderr.length > bashMaxOutputChars() ? await writeShellOverflowFile(env, stdout, stderr) : undefined;
+    const overflowNote = cleanOverflowFile !== undefined ? shellRecoveryHint(cleanOverflowFile, readOnly) : "";
     const exit1Note = exitCode === 1 ? bashExitOneInterpretation(command) : undefined;
     const parts = [`exit code: ${exitCode}${exit1Note ? ` (${exit1Note} — exit 1 from this command is not an error)` : ""}`, `--- stdout ---\n${clippedStdout || "(empty)"}`];
     if (stderr.trim() !== "")
         parts.push(`--- stderr ---\n${clippedStderr}`);
+    if (overflowNote)
+        parts.push(overflowNote.trim());
     return {
         content: parts.join("\n"),
-        details: { type: "bash", stdout: clippedStdout, stderr: clippedStderr, exitCode, ...(exit1Note ? { returnCodeInterpretation: exit1Note } : {}) },
+        details: {
+            type: "bash",
+            stdout: clippedStdout,
+            stderr: clippedStderr,
+            exitCode,
+            ...(exit1Note ? { returnCodeInterpretation: exit1Note } : {}),
+            ...(cleanOverflowFile !== undefined ? { output_file: cleanOverflowFile } : {}),
+        },
     };
 }
 function bashDescription(coAuthor, bgNotifies = false, bgRetained = false) {
@@ -1828,7 +1858,7 @@ export function makeBashTool(env, rootCanonical, coAuthor = false, cwdRef = { cu
                 : undefined;
             let res;
             try {
-                res = await runShell(env, rootCanonical, "Bash", command, msTimeoutToSec(timeout), ctx.signal, cwdRef, detachChain, taskOpts.execClamp, ctx.toolCallId);
+                res = await runShell(env, rootCanonical, "Bash", command, msTimeoutToSec(timeout), ctx.signal, cwdRef, detachChain, taskOpts.execClamp, ctx.toolCallId, false);
             }
             finally {
                 taskOpts.detachHub?.gc(ctx.toolCallId);
@@ -1863,7 +1893,7 @@ export function makeBashReadonlyTool(env, rootCanonical, allow, execClamp) {
             const reason = coarseReadonlyCheck(command, allow);
             if (reason)
                 return `Error (Bash): ${reason}`;
-            return runShell(env, rootCanonical, "Bash", command, msTimeoutToSec(timeout), ctx.signal, undefined, undefined, execClamp, ctx.toolCallId);
+            return runShell(env, rootCanonical, "Bash", command, msTimeoutToSec(timeout), ctx.signal, undefined, undefined, execClamp, ctx.toolCallId, true);
         },
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "1.434.0",
+  "version": "1.436.2",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",