@sema-agent/core 5.22.0 → 5.23.0

package/dist/tools/fs/bash-readonly-classifier.js

@@ -238,11 +238,51 @@ function isGrepClusterFileStdin(tok) {
     }
     return false;
 }
-function isCutSeparatedDelimiterOption(tok) {
-    if (tok.includes("="))
+const SEPARATED_VALUE_OPTIONS = {
+    head: { short: "cn", long: ["bytes", "lines"] },
+    tail: { short: "cns", long: ["bytes", "lines", "sleep-interval", "pid", "max-unchanged-stats"] },
+    cut: { short: "bcdf", long: ["bytes", "characters", "delimiter", "fields", "output-delimiter"] },
+    grep: {
+        ownsValueButNotSkippable: "ef",
+        short: "mABCdD",
+        long: [
+            "max-count",
+            "after-context",
+            "before-context",
+            "context",
+            "devices",
+            "directories",
+            "label",
+            "binary-files",
+            "group-separator",
+            "include",
+            "exclude",
+            "exclude-dir",
+        ],
+    },
+};
+function takesSeparatedValue(name, tok) {
+    const model = SEPARATED_VALUE_OPTIONS[name];
+    if (model === undefined)
         return false;
-    const name = longOptionNameOf(tok);
-    return name !== undefined && (isLongOptionAbbrevOf(name, "delimiter") || isLongOptionAbbrevOf(name, "output-delimiter"));
+    if (tok.startsWith("--")) {
+        if (tok.includes("="))
+            return false;
+        const long = longOptionNameOf(tok);
+        return long !== undefined && model.long.some((full) => isLongOptionAbbrevOf(long, full));
+    }
+    if (!/^-[A-Za-z0-9]/.test(tok))
+        return false;
+    for (let i = 1; i < tok.length; i++) {
+        const ch = tok[i];
+        if ((model.ownsValueButNotSkippable ?? "").includes(ch))
+            return false;
+        if (model.short.includes(ch))
+            return i === tok.length - 1;
+        if (!/[A-Za-z0-9]/.test(ch))
+            return false;
+    }
+    return false;
 }
 function isGrepFileStdinLongOption(tok) {
     const eq = tok.indexOf("=");
@@ -478,19 +518,28 @@ export function classifyCompoundReadonlyDetailed(command, allow, boundary) {
             let sawNonFlagOperand = false;
             let hasStdinDash = false;
             let operandCount = 0;
+            let endOfOptions = false;
             if (name !== "tr") {
                 for (let k = 0; k < restArgs.length; k++) {
                     const t = restArgs[k];
-                    if (name === "cut" && (t === "-d" || isCutSeparatedDelimiterOption(t))) {
+                    if (endOfOptions) {
+                    }
+                    else if (t === "--") {
+                        endOfOptions = true;
+                        continue;
+                    }
+                    else if (takesSeparatedValue(name, t)) {
                         k++;
                         continue;
                     }
-                    if (name === "grep" && (isGrepClusterFileStdin(t) || isGrepFileStdinLongOption(t))) {
-                        hasStdinDash = true;
-                        break;
+                    else {
+                        if (name === "grep" && (isGrepClusterFileStdin(t) || isGrepFileStdinLongOption(t))) {
+                            hasStdinDash = true;
+                            break;
+                        }
+                        if (t.startsWith("-") && t !== "-")
+                            continue;
                     }
-                    if (t.startsWith("-") && t !== "-")
-                        continue;
                     const isGrepPatternPosition = name === "grep" && !grepPatternSuppliedByFlag && !sawNonFlagOperand;
                     sawNonFlagOperand = true;
                     operandCount++;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "5.22.0",
+  "version": "5.23.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",
@@ -63,7 +63,8 @@
     "gate:domain-lexicon": "node scripts/verify-domain-lexicon.mjs",
     "gate:single-mint": "node scripts/verify-single-mint.mjs",
     "gate:nuia": "node scripts/verify-nuia-baseline.mjs",
-    "gate:field-liveness": "node scripts/verify-field-liveness.mjs"
+    "gate:field-liveness": "node scripts/verify-field-liveness.mjs",
+    "gate:error-surface": "node scripts/verify-error-surface.mjs"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",