@sema-agent/core 5.36.0 → 5.38.0

package/dist/scenarios/full-body.d.ts

@@ -28,6 +28,8 @@ export interface CodeToolsConfig {
      * parity: TodoWrite is enabled only when the task list is off). With `taskList` on (the default),
      * TodoWrite is NOT mounted even when `todoWrite: true` is set explicitly — the exclusion gate wins;
      * pass `taskList: false` to get TodoWrite back. `todoWrite: false` always drops it.
+     * design/277: the DEFAULT arm (undefined) is model-gated (`modelGate: "task-scaffold"` — trimmed
+     * at prepare for gate-table models); an EXPLICIT `true` mounts unstamped (never gated).
      */
     todoWrite?: boolean;
     /**
@@ -36,6 +38,9 @@ export interface CodeToolsConfig {
      * list is on unless explicitly disabled, and TodoWrite is its off-state fallback — the two families
      * are mutually exclusive, never co-mounted). Only an explicit `taskList: false` reverts to the
      * TodoWrite shape.
+     * design/277: the DEFAULT arm (undefined) is model-gated (`modelGate: "task-scaffold"`); an
+     * EXPLICIT `true` mounts the family unstamped (never gated). `taskList: false` only selects the
+     * TodoWrite family shape — it is NOT an explicit demand for TodoWrite (see `todoWrite`).
      */
     taskList?: boolean;
     /**

package/dist/scenarios/full-body.js

@@ -10,11 +10,15 @@ export function assembleCodeTools(cfg = {}) {
         tools.push(createWebSearchTool(cfg.webSearch));
     if (cfg.subagent)
         tools.push(createSubagentTool({ ...cfg.subagent, systemPrompt: cfg.subagent.systemPrompt ?? CODE_SYSTEM_PROMPT }));
+    const stamp = (t) => ({ ...t, modelGate: "task-scaffold" });
     const taskListOn = cfg.taskList !== false;
-    if (cfg.todoWrite !== false && !taskListOn)
-        tools.push(createTodoWriteTool());
-    if (taskListOn)
-        tools.push(...createTaskListTools(cfg.taskListStore));
+    if (cfg.todoWrite !== false && !taskListOn) {
+        tools.push(cfg.todoWrite === true ? createTodoWriteTool() : stamp(createTodoWriteTool()));
+    }
+    if (taskListOn) {
+        const family = createTaskListTools(cfg.taskListStore);
+        tools.push(...(cfg.taskList === true ? family : family.map(stamp)));
+    }
     return tools;
 }
 export const CODE_ROLE = { systemPrompt: CODE_SYSTEM_PROMPT, thinking: "high" };

package/dist/tools/fs/fs-shared.d.ts

@@ -232,8 +232,9 @@ export declare function resolveBashTimeoutCaps(opts?: {
     defaultMs: number;
     maxMs: number;
 };
-/** Test seam: the announcement de-dupes per process, so a test that asserts the line must be able to
- *  clear the ledger. Never called by production code. */
+/** Test seam: the announcement de-dupes per sink (console arm per process), so a test that asserts
+ *  the line must be able to re-arm the ledger. Re-arms BOTH arms (a WeakMap has no clear — it is
+ *  re-minted). Never called by production code. */
 export declare function __resetBashTimeoutAnnouncements(): void;
 /** RB-370 ②: the seconds view of a resolved {@link resolveBashTimeoutCaps} pair — the shell's INTERNAL
  *  unit stays seconds while every model-facing surface stays ms (design/64 §8.1C posture). One rounding

package/dist/tools/fs/fs-shared.js

@@ -88,8 +88,23 @@ export function envErrorDetail(message) {
     const trimmed = (message ?? "").trim();
     return trimmed === "" ? "the execution environment reported no reason" : trimmed;
 }
-const announcedTimeoutConfig = new Set();
+let announcedTimeoutConfigBySink = new WeakMap();
+const announcedTimeoutConfigConsole = new Set();
+function timeoutConfigLedger(onNotice) {
+    if (typeof onNotice !== "function")
+        return announcedTimeoutConfigConsole;
+    let lines = announcedTimeoutConfigBySink.get(onNotice);
+    if (lines === undefined) {
+        lines = new Set();
+        announcedTimeoutConfigBySink.set(onNotice, lines);
+    }
+    return lines;
+}
 function emitTimeoutDiscardNotice(message, detail, onNotice) {
+    const ledger = timeoutConfigLedger(onNotice);
+    if (ledger.has(message))
+        return;
+    ledger.add(message);
     deliverEngineNotice(onNotice, { code: "config.env_timeout_discarded", message, detail });
 }
 function announceDiscardedTimeout(knob, raw, usedMs, onNotice) {
@@ -106,9 +121,6 @@ function announceDiscardedTimeout(knob, raw, usedMs, onNotice) {
             return;
         line = `${knob}=${String(raw)} was ignored — it ${defect}. Using ${usedMs}ms instead.`;
     }
-    if (announcedTimeoutConfig.has(line))
-        return;
-    announcedTimeoutConfig.add(line);
     emitTimeoutDiscardNotice(line, { knob, raw, usedMs }, onNotice);
 }
 export function bashTimeoutParamDescription(caps, withDefault) {
@@ -147,15 +159,13 @@ export function resolveBashTimeoutCaps(opts) {
     if (requestedCap !== undefined && requestedCap < defaultMs) {
         const knob = optsCap !== undefined ? "bashMaxTimeoutMs" : "BASH_MAX_TIMEOUT_MS";
         const line = `${knob}=${requestedCap} is below the resolved default budget (${defaultMs}ms) — the ceiling was raised to ${maxMs}ms (the default always fits under the cap).`;
-        if (!announcedTimeoutConfig.has(line)) {
-            announcedTimeoutConfig.add(line);
-            emitTimeoutDiscardNotice(line, { knob, raw: requestedCap, usedMs: maxMs }, opts?.onNotice);
-        }
+        emitTimeoutDiscardNotice(line, { knob, raw: requestedCap, usedMs: maxMs }, opts?.onNotice);
     }
     return { defaultMs, maxMs };
 }
 export function __resetBashTimeoutAnnouncements() {
-    announcedTimeoutConfig.clear();
+    announcedTimeoutConfigBySink = new WeakMap();
+    announcedTimeoutConfigConsole.clear();
 }
 export function bashTimeoutCapsSec(caps) {
     return { defaultSec: Math.max(1, Math.round(caps.defaultMs / 1000)), maxSec: Math.max(1, Math.round(caps.maxMs / 1000)) };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "5.36.0",
+  "version": "5.38.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,6 +1,6 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
-  "count": 1562,
+  "count": 1585,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -171,6 +171,9 @@
     "CircuitBreakerOptions": "interface",
     "CodeReviewMode": "type",
     "CodeToolsConfig": "interface",
+    "CommittedBinding": "type",
+    "CommittedEntrySnapshot": "type",
+    "CommittedScopeSnapshots": "type",
     "CompactOutcome": "type",
     "CompactionWindowSafetyInfo": "interface",
     "CompiledEventPrompt": "interface",
@@ -223,12 +226,15 @@
     "DEFAULT_TOOL_RESULT_THRESHOLD_CHARS": "variable",
     "DEGRADED_DIAGNOSTIC_TYPE": "variable",
     "DESIGN_REVIEW_PROMPTS": "variable",
+    "DISCUSSION_SCRIPT": "variable",
+    "DISCUSSION_WORKFLOW_NAME": "variable",
     "DURABLE_AGENT_HANDLE_RE": "variable",
     "DecisionReason": "type",
     "DefaultPackDescription": "interface",
     "DegradationInfo": "interface",
     "DegradeReason": "type",
     "DegradingBrainOptions": "type",
+    "DelegationLifecycleEvent": "type",
     "DelegationTaskType": "type",
     "DeveloperTaskConfig": "interface",
     "DocumentContent": "interface",
@@ -243,10 +249,16 @@
     "EXPLORE_WHEN_TO_USE": "variable",
     "EXPLORE_WHEN_TO_USE_LEAN": "variable",
     "EffectiveConfigField": "interface",
+    "EffectiveMemoryScopes": "type",
     "EffectivePermissionRule": "interface",
     "Embedder": "interface",
     "EngineNotice": "interface",
+    "EntryCustodyReport": "interface",
+    "EntryProvenanceAccount": "interface",
     "EnvironmentFacts": "interface",
+    "EraseMemoryEntriesInput": "interface",
+    "ErasedBinding": "type",
+    "ErasureSelect": "type",
     "EscalationRecord": "interface",
     "EscalationTrigger": "type",
     "EventDedupe": "type",
@@ -327,6 +339,7 @@
     "HarvestRejectionCode": "type",
     "HarvestReport": "interface",
     "HookEnvCapabilities": "interface",
+    "HookInvocationIdentity": "interface",
     "HookToolContext": "interface",
     "HookToolFailure": "interface",
     "HookToolOutput": "interface",
@@ -456,6 +469,7 @@
     "MemoryEntry": "interface",
     "MemoryEntryFrontmatter": "interface",
     "MemoryEntryHeader": "interface",
+    "MemoryErasureAttestation": "interface",
     "MemoryGateError": "class",
     "MemoryGetDetails": "interface",
     "MemoryInjection": "interface",
@@ -607,6 +621,7 @@
     "PlatformLimitReason": "type",
     "PostCompactContext": "interface",
     "PostToolBatchCall": "interface",
+    "PostToolBatchContext": "interface",
     "PostToolBatchResult": "interface",
     "PostToolUseFailureResult": "interface",
     "PostToolUseResult": "interface",
@@ -910,6 +925,7 @@
     "TEAM_DISCUSSION_SCRIPT": "variable",
     "TEAM_DISCUSSION_WORKFLOW_NAME": "variable",
     "TOKEN_CHECKPOINT_VERSION": "variable",
+    "TOOL_MODEL_GATE_CLASSES": "variable",
     "TOOL_RESULT_REF_CONFLICT_CODE": "variable",
     "TSchema": "interface",
     "TaskAccess": "interface",
@@ -953,6 +969,7 @@
     "ToolEffect": "type",
     "ToolExecuteContext": "interface",
     "ToolFingerprintInput": "interface",
+    "ToolModelGateRule": "interface",
     "ToolOrigin": "type",
     "ToolPolicy": "interface",
     "ToolPolicyNameSets": "interface",
@@ -968,6 +985,7 @@
     "ToolSpec": "interface",
     "TraceEvent": "type",
     "TracerHook": "type",
+    "TransferEvidence": "interface",
     "TransportLspSession": "class",
     "TripwireResult": "interface",
     "TtlSessionStore": "class",
@@ -987,6 +1005,7 @@
     "UsageWindowRecord": "interface",
     "UsageWindowStore": "interface",
     "UserMessage": "interface",
+    "UserPromptSubmitContext": "interface",
     "UserPromptSubmitResult": "interface",
     "UtilityGate": "type",
     "V2HeaderHints": "interface",
@@ -1119,6 +1138,7 @@
     "callKeyOrdinal": "function",
     "canAccessAgentRecord": "function",
     "canAccessWorkflowRun": "function",
+    "canonicalWorkflowName": "function",
     "capAggregateMediaBytes": "function",
     "capAggregateToolResults": "function",
     "captureBaseline": "function",
@@ -1256,6 +1276,7 @@
     "enqueueMemoryAnnouncement": "function",
     "ensureDir": "function",
     "entryFromFile": "function",
+    "erasureSelectHash": "function",
     "err": "function",
     "errorClassOf": "function",
     "eventDefaultOn": "function",
@@ -1306,6 +1327,7 @@
     "isApprovalSettledBy": "function",
     "isDelegatedAgentTerminal": "function",
     "isIsolated": "function",
+    "isModelGatedForClass": "function",
     "isPersonalScope": "function",
     "isQuestionUnavailable": "function",
     "isRemoteExecutionEnv": "function",
@@ -1457,6 +1479,7 @@
     "resolveUsageWindows": "function",
     "restoreFrozenPaths": "function",
     "resumeWithVerification": "function",
+    "retiredWorkflowNameAliases": "function",
     "retryBackoffMs": "function",
     "riskSeverity": "function",
     "ruleAdmitsCommand": "function",