@sema-agent/core 1.446.0 → 1.448.1

package/dist/bin/sema-tb.js

@@ -2,7 +2,7 @@
 import { readFileSync, realpathSync, createWriteStream } from "node:fs";
 import { pathToFileURL } from "node:url";
 import { Runner, NodeExecutionEnv, createOpenAIBrain, createAnthropicBrain, CODE_SYSTEM_PROMPT, assembleCodeTools, makeWebFetchSummarizer, } from "../index.js";
-import { positiveIntFromEnv } from "./tb-env.js";
+import { positiveIntFromEnv, tbModelInput } from "./tb-env.js";
 import { inferMaxTokensField } from "../brain/openai.js";
 function usage(code = 2) {
     const out = code === 0 ? process.stdout : process.stderr;
@@ -12,7 +12,7 @@ function usage(code = 2) {
         "  WARNING: argv is visible to every process in the sandbox (ps / pgrep -f / /proc/*/cmdline) — long\n" +
         "  or sensitive instructions should ride --objective-file or stdin, never --message.\n" +
         "Env: <PROVIDER>_API_KEY / <PROVIDER>_BASE_URL, TB_MAX_TURNS, TB_TIMEOUT_SEC, TB_FULLBODY, TB_TODOREMIND, TB_BGTASKS, TB_SUMMARIZE,\n" +
-        "     TB_FINALVERIFY, TB_CALLCAP, TB_FINALIZE, TB_REASONING, TB_JSONL, TB_CONTEXT_WINDOW, TB_MAX_OUTPUT_TOKENS, TB_TASKLIST\n" +
+        "     TB_FINALVERIFY, TB_CALLCAP, TB_FINALIZE, TB_REASONING, TB_JSONL, TB_CONTEXT_WINDOW, TB_MAX_OUTPUT_TOKENS, TB_TASKLIST, TB_VISION\n" +
         '     TB_COST="input,output[,cacheRead[,cacheWrite]]" — USD per MTok; explicit pricing override (omitted\n' +
         "     trailing segments default to 0). Without it, pricing resolves by MODEL FAMILY (deepseek/claude/gpt-o*)\n" +
         "     first, then the wire-prefix table; unknown model on an overridden BASE_URL ⇒ cost accounting disabled.\n");
@@ -185,7 +185,7 @@ function buildModelAndBrain(providerModel) {
         provider,
         baseUrl: baseUrlOverride || d.baseUrl,
         reasoning: process.env.TB_REASONING === "0" ? false : process.env.TB_REASONING === "1" ? true : (d?.reasoning ?? false),
-        input: ["text"],
+        input: tbModelInput(),
         cost: costRes.cost,
         contextWindow: contextWindowOverride ?? d?.contextWindow ?? 200_000,
         maxTokens: maxOutputTokensOverride ?? d?.maxTokens ?? 32_000,

package/dist/bin/tb-env.d.ts

@@ -1 +1,2 @@
 export declare function positiveIntFromEnv(name: string, env?: NodeJS.ProcessEnv): number | undefined;
+export declare function tbModelInput(env?: NodeJS.ProcessEnv): ("text" | "image")[];

package/dist/bin/tb-env.js

@@ -12,3 +12,6 @@ export function positiveIntFromEnv(name, env = process.env) {
     }
     return n;
 }
+export function tbModelInput(env = process.env) {
+    return env.TB_VISION === "1" ? ["text", "image"] : ["text"];
+}

package/dist/core/arg-summary.js

@@ -1,19 +1,23 @@
 const ACTIVITY_ARG_MAX = 80;
 const SENSITIVE_KEY = /token|secret|key|password|passwd|credential|auth/i;
 const SECRET_PATTERNS = [
-    /(?<![A-Za-z0-9])(?:sk|pk|rk|gh[opsur])[-_][A-Za-z0-9_-]{8,}/g,
-    /(?<![A-Za-z0-9])AIza[A-Za-z0-9_-]{20,}/g,
-    /(?<![A-Za-z0-9])xox[baprs]-[A-Za-z0-9-]{10,}/g,
-    /(?<![A-Za-z0-9])AKIA[0-9A-Z]{12,}/g,
-    /(?<![A-Za-z0-9])eyJ[A-Za-z0-9._-]{20,}/g,
-    /-----BEGIN[ A-Z]*PRIVATE KEY-----/g,
-    /(?<![A-Za-z0-9])Bearer\s+[A-Za-z0-9._~+/-]{8,}=*/gi,
-    /(?<![A-Za-z0-9])(?:token|secret|key|password|passwd|credential|authorization)["']?\s*[=:]\s*["']?[^\s"';|&]{4,}/gi,
+    { re: /(?<![A-Za-z0-9])(?:sk|pk|rk|gh[opsur])[-_][A-Za-z0-9_-]{8,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])AIza[A-Za-z0-9_-]{20,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])xox[baprs]-[A-Za-z0-9-]{10,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])AKIA[0-9A-Z]{12,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{20,}/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])eyJ[A-Za-z0-9._-]{20,}/g, replace: "[redacted]" },
+    { re: /-----BEGIN[ A-Z]*PRIVATE KEY-----[\s\S]*?(?:-----END[ A-Z]*PRIVATE KEY-----|$)/g, replace: "[redacted]" },
+    { re: /(?<![A-Za-z0-9])Bearer\s+[A-Za-z0-9._~+/-]{8,}=*/gi, replace: "[redacted]" },
+    {
+        re: /(?<![A-Za-z0-9])((?:token|secret|key|password|passwd|credential|authorization)["']?\s*[=:]\s*["']?)[^\s"';|&]{4,}/gi,
+        replace: "$1[redacted]",
+    },
 ];
 export function scrubSecrets(s) {
     let out = s;
-    for (const p of SECRET_PATTERNS)
-        out = out.replace(p, "[redacted]");
+    for (const { re, replace } of SECRET_PATTERNS)
+        out = out.replace(re, replace);
     return out;
 }
 function truncCodePoints(s) {

package/dist/core/secret-env.js

@@ -1,6 +1,7 @@
-const SECRET_ENV_RE = /(^|_)(KEY|TOKEN|SECRET|SECRETS|PASSWORD|PASSWD|CREDENTIAL|CREDENTIALS|PRIVATEKEY|APIKEY|ACCESS_KEY|SESSION_TOKEN)$/i;
+const SECRET_ENV_RE = /(^|_)(KEY|TOKEN|SECRET|SECRETS|PASSWORD|PASSWD|CREDENTIAL|CREDENTIALS|PRIVATEKEY|APIKEY|ACCESS_KEY|SESSION_TOKEN)(?:_(?:\d+|ID))?$/i;
+const SECRET_ENV_EXACT_NAMES = new Set(["DATABASE_URL", "CONNECTION_STRING", "DSN", "NPM_AUTH"]);
 export function isSecretEnvKey(key) {
-    return SECRET_ENV_RE.test(key);
+    return SECRET_ENV_RE.test(key) || SECRET_ENV_EXACT_NAMES.has(key.toUpperCase());
 }
 export function scrubSecretEnv(env) {
     const out = {};

package/dist/core/untrusted-egress.js

@@ -1,11 +1,22 @@
 import { delimitUntrusted } from "./untrusted-text.js";
 import { scrubSecrets } from "./arg-summary.js";
 const URI_SCHEME = String.raw `[A-Za-z][A-Za-z0-9+.\-_]{0,63}`;
-const CREDENTIALS_IN_AUTHORITY = new RegExp(String.raw `(${URI_SCHEME}:\/\/)(?:[^/\s"'@]*@)+`, "gi");
+const CREDENTIALS_IN_AUTHORITY = new RegExp(String.raw `(${URI_SCHEME}:\/\/)((?:[^/\s"'@]*@)+)`, "gi");
 const URL_OF_ANY_PROTOCOL = new RegExp(String.raw `${URI_SCHEME}:\/\/[^\s"'\`]+`, "gi");
+const BARE_USERNAME_MAX_LEN = 20;
+function redactUserinfo(scheme, userinfoWithAt) {
+    const userinfo = userinfoWithAt.slice(0, -1);
+    if (userinfo.includes("@"))
+        return `${scheme}[redacted-credentials]@`;
+    const colonIdx = userinfo.indexOf(":");
+    if (colonIdx === -1) {
+        return userinfo.length >= BARE_USERNAME_MAX_LEN ? `${scheme}[redacted-credentials]@` : `${scheme}${userinfo}@`;
+    }
+    return `${scheme}${userinfo.slice(0, colonIdx)}:[redacted-credentials]@`;
+}
 export function redactSecrets(s) {
     return scrubSecrets(s)
-        .replace(CREDENTIALS_IN_AUTHORITY, "$1[redacted-credentials]@")
+        .replace(CREDENTIALS_IN_AUTHORITY, (_m, scheme, userinfo) => redactUserinfo(scheme, userinfo))
         .replace(/([?&#](?:sig|signature|sas|code)=)[^&\s"'#]+/gi, "$1[redacted]");
 }
 export function redactHostLeaks(s) {
@@ -13,6 +24,22 @@ export function redactHostLeaks(s) {
         .replace(URL_OF_ANY_PROTOCOL, "[redacted-url]")
         .replace(/(?:\/[A-Za-z0-9_.-]+){2,}/g, "[redacted-path]");
 }
+const REDACTION_MARKER_RE = /\[redacted(?:-[a-z]+)?\]/g;
+function countRedactionMarkers(s) {
+    return (s.match(REDACTION_MARKER_RE) ?? []).length;
+}
+function safeEllipsisTruncate(s, max) {
+    if (max < 1)
+        return "";
+    const budget = max - 1;
+    let out = "";
+    for (const codePoint of s) {
+        if (out.length + codePoint.length > budget)
+            break;
+        out += codePoint;
+    }
+    return out + "…";
+}
 function boundedString(value, max, redact) {
     let s;
     try {
@@ -24,18 +51,32 @@ function boundedString(value, max, redact) {
     s = redact(s);
     if (s.length <= max)
         return s;
-    let keep = max;
-    let out = "";
-    for (let i = 0; i < 4; i++) {
-        out = `${s.slice(0, keep)}…[+${s.length - keep} chars]`;
-        if (out.length <= max)
-            break;
-        if (keep === 0) {
-            return max >= 1 ? `${s.slice(0, max - 1)}…` : "";
+    const totalMarkers = countRedactionMarkers(s);
+    const plainSuffix = (keepN) => `…[+${s.length - keepN} chars]`;
+    const enrichedSuffix = (keepN) => {
+        const lost = totalMarkers - countRedactionMarkers(s.slice(0, keepN));
+        return lost > 0 ? `…[+${s.length - keepN} chars, ${lost} redaction marker(s) among them]` : plainSuffix(keepN);
+    };
+    const converge = (suffixFor) => {
+        let keep = max;
+        let out = "";
+        for (let i = 0; i < 4; i++) {
+            out = `${s.slice(0, keep)}${suffixFor(keep)}`;
+            if (out.length <= max)
+                return out;
+            if (keep === 0)
+                return undefined;
+            keep = Math.max(0, keep - (out.length - max));
         }
-        keep = Math.max(0, keep - (out.length - max));
+        return out.length <= max ? out : undefined;
+    };
+    const out = (totalMarkers > 0 ? converge(enrichedSuffix) : undefined) ?? converge(plainSuffix);
+    if (out === undefined) {
+        return safeEllipsisTruncate(s, max);
     }
-    return out.length < s.length ? out : s;
+    if (out.length >= s.length)
+        return s;
+    return out;
 }
 export function boundedRedactedSummary(value, max) {
     return boundedString(value, max, redactSecrets);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "1.446.0",
+  "version": "1.448.1",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",
@@ -62,6 +62,9 @@
     "@modelcontextprotocol/sdk": "1.29.0",
     "typebox": "1.1.39"
   },
+  "optionalDependencies": {
+    "sharp": "^0.35.0"
+  },
   "devDependencies": {
     "@types/node": "22.10.2",
     "@types/pg": "^8.20.0",