@sema-agent/core 5.63.0 → 5.65.0

package/dist/tools/fs/fs-write.js

@@ -4,6 +4,16 @@ import { defineTool, errorResult } from "../../core/tools.js";
 import { sha256, resolveKey, violationText, violationDetails, requireRead, checkStale, checkEditMatch, checkNoChange, fileArgPath, resolveQuoteMatch, adaptNewStringQuotes, resolveEscapeMatch, adaptNewStringEscapes, escapeMatchWasAttempted, ESCAPE_MATCH_MISS_NOTE, deletionOldString, countOccurrences, READ_REFUSED_ESCAPE_HINT, } from "./safety.js";
 import { decodeTextBytes, encodeTextForFile, normalizeEditText, normalizeFileText } from "./encoding.js";
 import { MAX_EDIT_BYTES, decodeEditBytes, tooLargeToEditMessage, truncatedUtf16BodyMessage, persistedTextOf, notReadRefusalText, enoentMessage, FILE_STATE_TRAILER, FILE_PATH_PARAMS, ipynbRedirect, countLines, } from "./fs-shared.js";
+async function envFinalWrite(env, key, content, signal, opts) {
+    if (env.writeFileGuarded !== undefined) {
+        const r = await env.writeFileGuarded(key, content, { canonicalPath: key, ...(opts?.exclusive === true ? { exclusive: true } : {}) }, signal);
+        return r.ok ? { ok: true } : r;
+    }
+    if (opts?.exclusive === true && env.writeFileExclusive !== undefined) {
+        return env.writeFileExclusive(key, content, signal);
+    }
+    return env.writeFile(key, content, signal);
+}
 async function gateToolWrite(hook, tool, path, key, content) {
     if (hook === undefined)
         return undefined;
@@ -71,13 +81,14 @@ export function createEditFileTool(env, state, rootCanonical, cwdRef, additional
                     const gated = await gateToolWrite(beforeWrite, "Edit", path, r.key, created);
                     if (gated !== undefined)
                         return errorResult(gated);
-                    const write = env.writeFileExclusive !== undefined
-                        ? await env.writeFileExclusive(r.key, created, ctx.signal)
-                        : await env.writeFile(r.key, created, ctx.signal);
+                    const write = await envFinalWrite(env, r.key, created, ctx.signal, { exclusive: true });
                     if (!write.ok) {
                         if (write.error.code === "already_exists") {
                             return errorResult(`Error (Edit): cannot create "${path}": file already exists (created concurrently since the existence check). Read the file first, then edit it normally (or Write after the Read to overwrite it).`);
                         }
+                        if (write.error.code === "precondition_failed") {
+                            return errorResult(`Error (Edit): cannot create "${path.slice(0, 512)}": the atomic write refused its precondition (${write.error.message.slice(0, 512)}) — the on-disk state at that path changed between the existence check and the write (something may now exist there, or the path may now resolve somewhere else, e.g. through a symlink). Nothing was written. Read the path to see what is actually there before acting on it.`);
+                        }
                         return errorResult(`Error (Edit): cannot write "${path}": ${write.error.message}`);
                     }
                     const createdNorm = normalizeFileText(created);
@@ -121,7 +132,7 @@ export function createEditFileTool(env, state, rootCanonical, cwdRef, additional
                 if (gated !== undefined)
                     return errorResult(gated);
                 const encodedOverwrite = encodeTextForFile(newContent, preDec.encoding, preDec.endings);
-                const write = await env.writeFile(r.key, encodedOverwrite, ctx.signal);
+                const write = await envFinalWrite(env, r.key, encodedOverwrite, ctx.signal);
                 if (!write.ok)
                     return errorResult(`Error (Edit): cannot write "${path}": ${write.error.message}`);
                 const persistedOverwrite = persistedTextOf(encodedOverwrite);
@@ -194,7 +205,7 @@ export function createEditFileTool(env, state, rootCanonical, cwdRef, additional
             if (gated !== undefined)
                 return errorResult(gated);
             const encodedEdit = encodeTextForFile(working, decoded.encoding, decoded.endings);
-            const write = await env.writeFile(r.key, encodedEdit, ctx.signal);
+            const write = await envFinalWrite(env, r.key, encodedEdit, ctx.signal);
             if (!write.ok)
                 return errorResult(`Error (Edit): cannot write "${path}": ${write.error.message}`);
             const persistedEdit = persistedTextOf(encodedEdit);
@@ -265,7 +276,7 @@ export function createWriteFileTool(env, state, rootCanonical, cwdRef, additiona
                 if (gated !== undefined)
                     return errorResult(gated);
                 const encodedWrite = encodeTextForFile(content, decodedPrev.encoding, "preserve");
-                const write = await env.writeFile(r.key, encodedWrite, ctx.signal);
+                const write = await envFinalWrite(env, r.key, encodedWrite, ctx.signal);
                 if (!write.ok)
                     return errorResult(`Error (Write): cannot write "${path}": ${write.error.message}`);
                 const persistedWrite = persistedTextOf(encodedWrite);
@@ -278,7 +289,7 @@ export function createWriteFileTool(env, state, rootCanonical, cwdRef, additiona
             const gatedCreate = await gateToolWrite(beforeWrite, "Write", path, r.key, content);
             if (gatedCreate !== undefined)
                 return errorResult(gatedCreate);
-            const write = await env.writeFile(r.key, content, ctx.signal);
+            const write = await envFinalWrite(env, r.key, content, ctx.signal);
             if (!write.ok)
                 return errorResult(`Error (Write): cannot write "${path}": ${write.error.message}`);
             const totalLines = countLines(content);
@@ -409,7 +420,7 @@ export function createNotebookEditTool(env, state, rootCanonical, cwdRef, additi
             const gated = await gateToolWrite(beforeWrite, "NotebookEdit", notebook_path, r.key, updated);
             if (gated !== undefined)
                 return errorResult(gated);
-            const w = await env.writeFile(r.key, encodeTextForFile(updated, decodedNb.encoding, decodedNb.endings), ctx.signal);
+            const w = await envFinalWrite(env, r.key, encodeTextForFile(updated, decodedNb.encoding, decodedNb.endings), ctx.signal);
             if (!w.ok)
                 return errorResult(`Error (NotebookEdit): cannot write "${notebook_path}": ${w.error.message}`);
             state.set(r.key, { hash: sha256(updated), totalLines: countLines(updated), truncated: false, lastReadAt: Date.now() });

package/dist/tools/fs/index.d.ts

@@ -11,6 +11,7 @@ export * from "./fs-search-tools.js";
 export * from "./bash-readonly-classifier.js";
 export * from "./fs-bash.js";
 export * from "./read-deny.js";
+export { BASH_CLASSIFY_DEFAULT_ALLOW } from "./bash-readonly-classifier.js";
 import { type ReadDenyEntry } from "./read-deny.js";
 export * from "./read-face.js";
 import { type CwdRef, type ReadImageDownsamplerOption } from "./fs-shared.js";

package/dist/tools/fs/index.js

@@ -12,6 +12,7 @@ export * from "./bash-readonly-classifier.js";
 export * from "./fs-bash.js";
 export * from "./read-deny.js";
 import { BASH_READONLY_DEFAULT_ALLOW, } from "./bash-readonly-classifier.js";
+export { BASH_CLASSIFY_DEFAULT_ALLOW } from "./bash-readonly-classifier.js";
 import { compileReadDeny } from "./read-deny.js";
 import { deploymentReadFaceClampNotice, resolveReadFace } from "./read-face.js";
 export * from "./read-face.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "5.63.0",
+  "version": "5.65.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 1764,
+  "count": 1768,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -829,6 +829,8 @@
     "ResourceLimitReason": "type",
     "Result": "type",
     "ResumeOutcome": "type",
+    "ResumePreflightInfo": "interface",
+    "ResumePreflightVerdict": "type",
     "ResumeTaskConfig": "type",
     "RetentionDeclaration": "type",
     "RetentionDeclaring": "interface",
@@ -1192,11 +1194,13 @@
     "WorktreeSessionRef": "interface",
     "WorktreeToolsOptions": "interface",
     "WritablePermissionRuleStore": "interface",
+    "WriteExpectation": "interface",
     "WriteProtectedEntry": "type",
     "WriteProtectedHit": "interface",
     "WriteProtectedKind": "type",
     "WriteProtectedRow": "interface",
     "WriteProtectionMatcher": "interface",
+    "WriteReceipt": "interface",
     "ackAdoptionConfig": "function",
     "acquireCcLock": "function",
     "addDotsOf": "function",
@@ -2595,6 +2599,8 @@
     "ResourceLimitReason": "advanced",
     "Result": "stable",
     "ResumeOutcome": "stable",
+    "ResumePreflightInfo": "advanced",
+    "ResumePreflightVerdict": "advanced",
     "ResumeTaskConfig": "stable",
     "RetentionDeclaration": "advanced",
     "RetentionDeclaring": "advanced",
@@ -2958,11 +2964,13 @@
     "WorktreeSessionRef": "advanced",
     "WorktreeToolsOptions": "advanced",
     "WritablePermissionRuleStore": "advanced",
+    "WriteExpectation": "internal",
     "WriteProtectedEntry": "advanced",
     "WriteProtectedHit": "advanced",
     "WriteProtectedKind": "advanced",
     "WriteProtectedRow": "advanced",
     "WriteProtectionMatcher": "advanced",
+    "WriteReceipt": "internal",
     "ackAdoptionConfig": "advanced",
     "acquireCcLock": "advanced",
     "addDotsOf": "advanced",