@sema-agent/core 7.12.0 → 7.14.0

package/dist/tools/fs/read-deny.js

@@ -1,4 +1,4 @@
-export const READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet"];
+export const READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet", "agent-config"];
 export const READ_FACE_BUILTIN_DENY_TABLE = [
     { pattern: ".ssh", tier: "credentials" },
     { pattern: "id_rsa*", tier: "credentials" },
@@ -18,6 +18,10 @@ export const READ_FACE_BUILTIN_DENY_TABLE = [
     { pattern: ".pypirc", tier: "credentials" },
     { pattern: ".local/share/keyrings", tier: "credentials" },
     { pattern: "Library/Keychains", tier: "credentials" },
+    { pattern: ".credentials.json", tier: "credentials" },
+    { pattern: ".codex/auth.json", tier: "credentials" },
+    { pattern: ".config/github-copilot", tier: "credentials" },
+    { pattern: ".gemini/oauth_creds.json", tier: "credentials" },
     { pattern: ".bash_history", tier: "shell-history" },
     { pattern: ".zsh_history", tier: "shell-history" },
     { pattern: "Library/Application Support/Google/Chrome", tier: "browser" },
@@ -35,6 +39,21 @@ export const READ_FACE_BUILTIN_DENY_TABLE = [
     { pattern: "Library/Application Support/Exodus", tier: "wallet" },
     { pattern: "Library/Application Support/Ledger Live", tier: "wallet" },
     { pattern: "wallet.dat", tier: "wallet" },
+    { pattern: ".sema/settings.json", tier: "agent-config" },
+    { pattern: ".sema/settings.local.json", tier: "agent-config" },
+    { pattern: ".sema.*", tier: "agent-config" },
+    { pattern: ".claude/settings.json", tier: "agent-config" },
+    { pattern: ".claude/settings.local.json", tier: "agent-config" },
+    { pattern: ".claude.*", tier: "agent-config" },
+    { pattern: ".mcp.json", tier: "agent-config" },
+    { pattern: ".ai-agent/.env", tier: "agent-config" },
+    { pattern: ".sema/engine-data/.env", tier: "agent-config" },
+    { pattern: ".codex/config.toml", tier: "agent-config" },
+    { pattern: ".cursor/mcp.json", tier: "agent-config" },
+    { pattern: ".continue/config.json", tier: "agent-config" },
+    { pattern: ".continue/config.yaml", tier: "agent-config" },
+    { pattern: ".aider.conf.yml", tier: "agent-config" },
+    { pattern: ".gemini/settings.json", tier: "agent-config" },
 ];
 export const READ_DENY_DEFAULT_TIERS = READ_DENY_BUILTIN_TIERS.filter((t) => t !== "shell-history");
 export function resolveReadDenyBuiltins(config) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.12.0",
+  "version": "7.14.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",
@@ -82,6 +82,7 @@
     "gate:tool-catalog": "node scripts/verify-tool-catalog.mjs",
     "gate:tool-names": "node scripts/verify-tool-name-tables.mjs",
     "gate:tool-docs": "node scripts/gen-tool-spec-fields.mjs --check",
+    "gate:backlog-ledger": "node scripts/verify-backlog-ledger.mjs",
     "gate:all": "node scripts/gate-all.mjs"
   },
   "dependencies": {

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2274,
+  "count": 2291,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -37,6 +37,7 @@
     "AUTO_MODE_DEFAULTS_SENTINEL": "variable",
     "AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS": "variable",
     "AUTO_MODE_DENIAL_LIMIT_DEFAULTS": "variable",
+    "AUTO_MODE_DENY_SOURCES": "variable",
     "AUTO_MODE_PERMISSIONS_EXTERNAL": "variable",
     "AUTO_MODE_UNAVAILABLE_CAUSES": "variable",
     "AcquiredSession": "interface",
@@ -85,6 +86,7 @@
     "AssertOracleIsolationOptions": "interface",
     "AssistantMessage": "interface",
     "AssistantMessageEvent": "type",
+    "AutoModeArmFact": "interface",
     "AutoModeArmReason": "type",
     "AutoModeArmingFace": "interface",
     "AutoModeArmingFold": "type",
@@ -97,6 +99,7 @@
     "AutoModeDeciderOptions": "interface",
     "AutoModeDenialLimitOptions": "interface",
     "AutoModeDenialTracker": "interface",
+    "AutoModeDenySource": "type",
     "AutoModeRebuildOptions": "interface",
     "AutoModeRebuildRefusal": "type",
     "AutoModeRebuildResult": "type",
@@ -109,6 +112,7 @@
     "AutonomousLoopPromptOptions": "interface",
     "BACKGROUND_AGENT_CONTRACT_SCOPE": "variable",
     "BARE_INTERPRETER_NAMES": "variable",
+    "BARE_REQUEST_CODE": "variable",
     "BASH_READONLY_DEFAULT_ALLOW": "variable",
     "BUILTIN_COMPLIANCE_DENIES": "variable",
     "BUILTIN_READONLY_DENY_TOOLS": "variable",
@@ -152,6 +156,7 @@
     "CHALLENGES_FILE": "variable",
     "CHALLENGE_LEDGER_MAX_EVENTS": "variable",
     "CIRCUIT_OPEN_MARKER": "variable",
+    "CLASSIFIER_DENY_CAUSES": "variable",
     "CLASSIFIER_PARSE_FAILURE_DENY_MESSAGE": "variable",
     "COARSE_SHELL_TOOLS": "variable",
     "CODE_AGENT_PROMPT": "variable",
@@ -214,6 +219,7 @@
     "CheckpointSummary": "interface",
     "CheckpointToken": "type",
     "CircuitBreakerOptions": "interface",
+    "ClassifierDenyCause": "type",
     "CleanArmLeakFinding": "interface",
     "CleanArmLeakVerdict": "interface",
     "CleanMemoryIndexRow": "interface",
@@ -308,6 +314,7 @@
     "DEGRADED_DIAGNOSTIC_TYPE": "variable",
     "DELEGATION_MAX_CONCURRENT_DEFAULT": "variable",
     "DELEGATION_MAX_PER_SESSION_DEFAULT": "variable",
+    "DENIED_BY_MAY_CARRY_CAUSE": "variable",
     "DENIED_BY_MAY_VETO": "variable",
     "DENIED_BY_VALUES": "variable",
     "DESIGN_REVIEW_PROMPTS": "variable",
@@ -999,6 +1006,7 @@
     "RULE_BEHAVIORS_BY_PRECEDENCE": "variable",
     "RULE_BEHAVIOR_PRECEDENCE": "variable",
     "RULE_OFFERS_ABSENCE_BASELINE": "variable",
+    "RULE_STORE_UNREADABLE_KINDS": "variable",
     "RULE_SYNC_DROP_CODES": "variable",
     "RUN_WORKFLOW_TOOL_NAME": "variable",
     "RawPrefixInputs": "interface",
@@ -1078,6 +1086,8 @@
     "RollingTailBuffer": "class",
     "RootAdoptionFile": "type",
     "RosterAccess": "interface",
+    "RosterBoundCode": "type",
+    "RosterBoundMembers": "interface",
     "RosterEntry": "interface",
     "RosterGcOptions": "interface",
     "RosterSource": "type",
@@ -1113,6 +1123,7 @@
     "RuleRejectCode": "type",
     "RuleScope": "type",
     "RuleSource": "type",
+    "RuleStoreUnreadable": "type",
     "RuleSyncDrop": "interface",
     "RuleSyncDropReason": "type",
     "RuleSyncFrontier": "type",
@@ -1308,6 +1319,7 @@
     "TEAM_DISCUSSION_WORKFLOW_NAME": "variable",
     "TOKEN_CHECKPOINT_VERSION": "variable",
     "TOOL_APPROVAL_CARDS": "variable",
+    "TOOL_CARD_ID_MAX_CHARS": "variable",
     "TOOL_CONFORMANCE_VECTORS": "variable",
     "TOOL_CONTRACT_MAX_CHARS": "variable",
     "TOOL_FAMILIES": "variable",
@@ -1857,8 +1869,10 @@
     "inspectDegenerate": "function",
     "isAliasModelId": "function",
     "isAskOrigin": "function",
+    "isAutoModeDenySource": "function",
     "isAutoModeUnavailableCause": "function",
     "isCanonicalPeerAddress": "function",
+    "isClassifierDenyCause": "function",
     "isCrossSessionInboundSetting": "function",
     "isDeclaredWrite": "function",
     "isDelegatedAgentTerminal": "function",
@@ -1883,6 +1897,7 @@
     "isRetryableRemoteErrorCode": "function",
     "isRuleBehavior": "function",
     "isRuleLive": "function",
+    "isRuleStoreUnreadable": "function",
     "isSecretEnvKey": "function",
     "isSelfOrchestrationActive": "function",
     "isSessionConflict": "function",
@@ -2065,6 +2080,7 @@
     "realApprovalOrgFact": "function",
     "realPeerClock": "variable",
     "reasoningBudgetShare": "function",
+    "reasoningEffortLevelsOf": "function",
     "rebuildAutoModeDecider": "function",
     "rebuildStrictControlPlaneLedger": "function",
     "reconcileInterruptedSession": "function",
@@ -2137,6 +2153,7 @@
     "retiredWorkflowNameAliases": "function",
     "retryBackoffMs": "function",
     "riskSeverity": "function",
+    "rosterMemberBoundProblem": "function",
     "routePairingStatus": "function",
     "routePeerDeliveryReceipt": "function",
     "routePeerDroppedReceipt": "function",
@@ -2313,6 +2330,7 @@
     "AUTO_MODE_DEFAULTS_SENTINEL": "advanced",
     "AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS": "advanced",
     "AUTO_MODE_DENIAL_LIMIT_DEFAULTS": "advanced",
+    "AUTO_MODE_DENY_SOURCES": "advanced",
     "AUTO_MODE_PERMISSIONS_EXTERNAL": "advanced",
     "AUTO_MODE_UNAVAILABLE_CAUSES": "advanced",
     "AcquiredSession": "advanced",
@@ -2361,6 +2379,7 @@
     "AssertOracleIsolationOptions": "advanced",
     "AssistantMessage": "stable",
     "AssistantMessageEvent": "stable",
+    "AutoModeArmFact": "advanced",
     "AutoModeArmReason": "advanced",
     "AutoModeArmingFace": "advanced",
     "AutoModeArmingFold": "advanced",
@@ -2373,6 +2392,7 @@
     "AutoModeDeciderOptions": "advanced",
     "AutoModeDenialLimitOptions": "advanced",
     "AutoModeDenialTracker": "advanced",
+    "AutoModeDenySource": "advanced",
     "AutoModeRebuildOptions": "advanced",
     "AutoModeRebuildRefusal": "advanced",
     "AutoModeRebuildResult": "advanced",
@@ -2385,6 +2405,7 @@
     "AutonomousLoopPromptOptions": "advanced",
     "BACKGROUND_AGENT_CONTRACT_SCOPE": "advanced",
     "BARE_INTERPRETER_NAMES": "advanced",
+    "BARE_REQUEST_CODE": "advanced",
     "BASH_READONLY_DEFAULT_ALLOW": "advanced",
     "BUILTIN_COMPLIANCE_DENIES": "advanced",
     "BUILTIN_READONLY_DENY_TOOLS": "advanced",
@@ -2428,6 +2449,7 @@
     "CHALLENGES_FILE": "advanced",
     "CHALLENGE_LEDGER_MAX_EVENTS": "advanced",
     "CIRCUIT_OPEN_MARKER": "advanced",
+    "CLASSIFIER_DENY_CAUSES": "advanced",
     "CLASSIFIER_PARSE_FAILURE_DENY_MESSAGE": "advanced",
     "COARSE_SHELL_TOOLS": "stable",
     "CODE_AGENT_PROMPT": "advanced",
@@ -2490,6 +2512,7 @@
     "CheckpointSummary": "stable",
     "CheckpointToken": "stable",
     "CircuitBreakerOptions": "advanced",
+    "ClassifierDenyCause": "advanced",
     "CleanArmLeakFinding": "advanced",
     "CleanArmLeakVerdict": "advanced",
     "CleanMemoryIndexRow": "advanced",
@@ -2584,6 +2607,7 @@
     "DEGRADED_DIAGNOSTIC_TYPE": "advanced",
     "DELEGATION_MAX_CONCURRENT_DEFAULT": "advanced",
     "DELEGATION_MAX_PER_SESSION_DEFAULT": "advanced",
+    "DENIED_BY_MAY_CARRY_CAUSE": "advanced",
     "DENIED_BY_MAY_VETO": "advanced",
     "DENIED_BY_VALUES": "advanced",
     "DESIGN_REVIEW_PROMPTS": "advanced",
@@ -3275,6 +3299,7 @@
     "RULE_BEHAVIORS_BY_PRECEDENCE": "advanced",
     "RULE_BEHAVIOR_PRECEDENCE": "advanced",
     "RULE_OFFERS_ABSENCE_BASELINE": "advanced",
+    "RULE_STORE_UNREADABLE_KINDS": "advanced",
     "RULE_SYNC_DROP_CODES": "advanced",
     "RUN_WORKFLOW_TOOL_NAME": "stable",
     "RawPrefixInputs": "advanced",
@@ -3354,6 +3379,8 @@
     "RollingTailBuffer": "advanced",
     "RootAdoptionFile": "advanced",
     "RosterAccess": "advanced",
+    "RosterBoundCode": "advanced",
+    "RosterBoundMembers": "advanced",
     "RosterEntry": "advanced",
     "RosterGcOptions": "advanced",
     "RosterSource": "advanced",
@@ -3389,6 +3416,7 @@
     "RuleRejectCode": "advanced",
     "RuleScope": "advanced",
     "RuleSource": "advanced",
+    "RuleStoreUnreadable": "advanced",
     "RuleSyncDrop": "advanced",
     "RuleSyncDropReason": "advanced",
     "RuleSyncFrontier": "advanced",
@@ -3584,6 +3612,7 @@
     "TEAM_DISCUSSION_WORKFLOW_NAME": "advanced",
     "TOKEN_CHECKPOINT_VERSION": "advanced",
     "TOOL_APPROVAL_CARDS": "advanced",
+    "TOOL_CARD_ID_MAX_CHARS": "advanced",
     "TOOL_CONFORMANCE_VECTORS": "advanced",
     "TOOL_CONTRACT_MAX_CHARS": "advanced",
     "TOOL_FAMILIES": "advanced",
@@ -4133,8 +4162,10 @@
     "inspectDegenerate": "advanced",
     "isAliasModelId": "advanced",
     "isAskOrigin": "advanced",
+    "isAutoModeDenySource": "advanced",
     "isAutoModeUnavailableCause": "advanced",
     "isCanonicalPeerAddress": "advanced",
+    "isClassifierDenyCause": "advanced",
     "isCrossSessionInboundSetting": "advanced",
     "isDeclaredWrite": "advanced",
     "isDelegatedAgentTerminal": "advanced",
@@ -4159,6 +4190,7 @@
     "isRetryableRemoteErrorCode": "advanced",
     "isRuleBehavior": "advanced",
     "isRuleLive": "advanced",
+    "isRuleStoreUnreadable": "advanced",
     "isSecretEnvKey": "advanced",
     "isSelfOrchestrationActive": "advanced",
     "isSessionConflict": "stable",
@@ -4341,6 +4373,7 @@
     "realApprovalOrgFact": "advanced",
     "realPeerClock": "advanced",
     "reasoningBudgetShare": "advanced",
+    "reasoningEffortLevelsOf": "advanced",
     "rebuildAutoModeDecider": "advanced",
     "rebuildStrictControlPlaneLedger": "advanced",
     "reconcileInterruptedSession": "advanced",
@@ -4413,6 +4446,7 @@
     "retiredWorkflowNameAliases": "advanced",
     "retryBackoffMs": "advanced",
     "riskSeverity": "advanced",
+    "rosterMemberBoundProblem": "advanced",
     "routePairingStatus": "advanced",
     "routePeerDeliveryReceipt": "advanced",
     "routePeerDroppedReceipt": "advanced",