@sema-agent/core 7.13.0 → 7.15.0

package/dist/tools/fs/read-deny.js

@@ -1,4 +1,4 @@
-export const READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet"];
+export const READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet", "agent-config"];
 export const READ_FACE_BUILTIN_DENY_TABLE = [
     { pattern: ".ssh", tier: "credentials" },
     { pattern: "id_rsa*", tier: "credentials" },
@@ -18,6 +18,10 @@ export const READ_FACE_BUILTIN_DENY_TABLE = [
     { pattern: ".pypirc", tier: "credentials" },
     { pattern: ".local/share/keyrings", tier: "credentials" },
     { pattern: "Library/Keychains", tier: "credentials" },
+    { pattern: ".credentials.json", tier: "credentials" },
+    { pattern: ".codex/auth.json", tier: "credentials" },
+    { pattern: ".config/github-copilot", tier: "credentials" },
+    { pattern: ".gemini/oauth_creds.json", tier: "credentials" },
     { pattern: ".bash_history", tier: "shell-history" },
     { pattern: ".zsh_history", tier: "shell-history" },
     { pattern: "Library/Application Support/Google/Chrome", tier: "browser" },
@@ -35,6 +39,21 @@ export const READ_FACE_BUILTIN_DENY_TABLE = [
     { pattern: "Library/Application Support/Exodus", tier: "wallet" },
     { pattern: "Library/Application Support/Ledger Live", tier: "wallet" },
     { pattern: "wallet.dat", tier: "wallet" },
+    { pattern: ".sema/settings.json", tier: "agent-config" },
+    { pattern: ".sema/settings.local.json", tier: "agent-config" },
+    { pattern: ".sema.*", tier: "agent-config" },
+    { pattern: ".claude/settings.json", tier: "agent-config" },
+    { pattern: ".claude/settings.local.json", tier: "agent-config" },
+    { pattern: ".claude.*", tier: "agent-config" },
+    { pattern: ".mcp.json", tier: "agent-config" },
+    { pattern: ".ai-agent/.env", tier: "agent-config" },
+    { pattern: ".sema/engine-data/.env", tier: "agent-config" },
+    { pattern: ".codex/config.toml", tier: "agent-config" },
+    { pattern: ".cursor/mcp.json", tier: "agent-config" },
+    { pattern: ".continue/config.json", tier: "agent-config" },
+    { pattern: ".continue/config.yaml", tier: "agent-config" },
+    { pattern: ".aider.conf.yml", tier: "agent-config" },
+    { pattern: ".gemini/settings.json", tier: "agent-config" },
 ];
 export const READ_DENY_DEFAULT_TIERS = READ_DENY_BUILTIN_TIERS.filter((t) => t !== "shell-history");
 export function resolveReadDenyBuiltins(config) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.13.0",
+  "version": "7.15.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",
@@ -82,6 +82,7 @@
     "gate:tool-catalog": "node scripts/verify-tool-catalog.mjs",
     "gate:tool-names": "node scripts/verify-tool-name-tables.mjs",
     "gate:tool-docs": "node scripts/gen-tool-spec-fields.mjs --check",
+    "gate:backlog-ledger": "node scripts/verify-backlog-ledger.mjs",
     "gate:all": "node scripts/gate-all.mjs"
   },
   "dependencies": {

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2279,
+  "count": 2293,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -37,6 +37,7 @@
     "AUTO_MODE_DEFAULTS_SENTINEL": "variable",
     "AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS": "variable",
     "AUTO_MODE_DENIAL_LIMIT_DEFAULTS": "variable",
+    "AUTO_MODE_DENY_SOURCES": "variable",
     "AUTO_MODE_PERMISSIONS_EXTERNAL": "variable",
     "AUTO_MODE_UNAVAILABLE_CAUSES": "variable",
     "AcquiredSession": "interface",
@@ -85,6 +86,7 @@
     "AssertOracleIsolationOptions": "interface",
     "AssistantMessage": "interface",
     "AssistantMessageEvent": "type",
+    "AutoModeArmFact": "interface",
     "AutoModeArmReason": "type",
     "AutoModeArmingFace": "interface",
     "AutoModeArmingFold": "type",
@@ -97,6 +99,7 @@
     "AutoModeDeciderOptions": "interface",
     "AutoModeDenialLimitOptions": "interface",
     "AutoModeDenialTracker": "interface",
+    "AutoModeDenySource": "type",
     "AutoModeRebuildOptions": "interface",
     "AutoModeRebuildRefusal": "type",
     "AutoModeRebuildResult": "type",
@@ -153,6 +156,7 @@
     "CHALLENGES_FILE": "variable",
     "CHALLENGE_LEDGER_MAX_EVENTS": "variable",
     "CIRCUIT_OPEN_MARKER": "variable",
+    "CLASSIFIER_DENY_CAUSES": "variable",
     "CLASSIFIER_PARSE_FAILURE_DENY_MESSAGE": "variable",
     "COARSE_SHELL_TOOLS": "variable",
     "CODE_AGENT_PROMPT": "variable",
@@ -215,6 +219,7 @@
     "CheckpointSummary": "interface",
     "CheckpointToken": "type",
     "CircuitBreakerOptions": "interface",
+    "ClassifierDenyCause": "type",
     "CleanArmLeakFinding": "interface",
     "CleanArmLeakVerdict": "interface",
     "CleanMemoryIndexRow": "interface",
@@ -309,6 +314,7 @@
     "DEGRADED_DIAGNOSTIC_TYPE": "variable",
     "DELEGATION_MAX_CONCURRENT_DEFAULT": "variable",
     "DELEGATION_MAX_PER_SESSION_DEFAULT": "variable",
+    "DENIED_BY_MAY_CARRY_CAUSE": "variable",
     "DENIED_BY_MAY_VETO": "variable",
     "DENIED_BY_VALUES": "variable",
     "DESIGN_REVIEW_PROMPTS": "variable",
@@ -1000,6 +1006,7 @@
     "RULE_BEHAVIORS_BY_PRECEDENCE": "variable",
     "RULE_BEHAVIOR_PRECEDENCE": "variable",
     "RULE_OFFERS_ABSENCE_BASELINE": "variable",
+    "RULE_STORE_UNREADABLE_KINDS": "variable",
     "RULE_SYNC_DROP_CODES": "variable",
     "RUN_WORKFLOW_TOOL_NAME": "variable",
     "RawPrefixInputs": "interface",
@@ -1116,6 +1123,7 @@
     "RuleRejectCode": "type",
     "RuleScope": "type",
     "RuleSource": "type",
+    "RuleStoreUnreadable": "type",
     "RuleSyncDrop": "interface",
     "RuleSyncDropReason": "type",
     "RuleSyncFrontier": "type",
@@ -1248,6 +1256,7 @@
     "SharedMemoryStoreProvider": "interface",
     "SharedMemoryStoreReader": "interface",
     "ShellCommandShape": "interface",
+    "ShellGateDoctrine": "type",
     "ShellRedirection": "interface",
     "ShellSegment": "interface",
     "ShellWord": "interface",
@@ -1570,6 +1579,7 @@
     "autoModeArmingRecipeOf": "function",
     "backgroundAgentStoreContract": "function",
     "backgroundAgentStoreScopesContract": "function",
+    "bashReadBoundaryProbe": "function",
     "bashReversibilityProbe": "function",
     "boundaryPublishVerdict": "function",
     "boundedRedactedSummary": "function",
@@ -1861,8 +1871,10 @@
     "inspectDegenerate": "function",
     "isAliasModelId": "function",
     "isAskOrigin": "function",
+    "isAutoModeDenySource": "function",
     "isAutoModeUnavailableCause": "function",
     "isCanonicalPeerAddress": "function",
+    "isClassifierDenyCause": "function",
     "isCrossSessionInboundSetting": "function",
     "isDeclaredWrite": "function",
     "isDelegatedAgentTerminal": "function",
@@ -1887,6 +1899,7 @@
     "isRetryableRemoteErrorCode": "function",
     "isRuleBehavior": "function",
     "isRuleLive": "function",
+    "isRuleStoreUnreadable": "function",
     "isSecretEnvKey": "function",
     "isSelfOrchestrationActive": "function",
     "isSessionConflict": "function",
@@ -2069,6 +2082,7 @@
     "realApprovalOrgFact": "function",
     "realPeerClock": "variable",
     "reasoningBudgetShare": "function",
+    "reasoningEffortLevelsOf": "function",
     "rebuildAutoModeDecider": "function",
     "rebuildStrictControlPlaneLedger": "function",
     "reconcileInterruptedSession": "function",
@@ -2318,6 +2332,7 @@
     "AUTO_MODE_DEFAULTS_SENTINEL": "advanced",
     "AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS": "advanced",
     "AUTO_MODE_DENIAL_LIMIT_DEFAULTS": "advanced",
+    "AUTO_MODE_DENY_SOURCES": "advanced",
     "AUTO_MODE_PERMISSIONS_EXTERNAL": "advanced",
     "AUTO_MODE_UNAVAILABLE_CAUSES": "advanced",
     "AcquiredSession": "advanced",
@@ -2366,6 +2381,7 @@
     "AssertOracleIsolationOptions": "advanced",
     "AssistantMessage": "stable",
     "AssistantMessageEvent": "stable",
+    "AutoModeArmFact": "advanced",
     "AutoModeArmReason": "advanced",
     "AutoModeArmingFace": "advanced",
     "AutoModeArmingFold": "advanced",
@@ -2378,6 +2394,7 @@
     "AutoModeDeciderOptions": "advanced",
     "AutoModeDenialLimitOptions": "advanced",
     "AutoModeDenialTracker": "advanced",
+    "AutoModeDenySource": "advanced",
     "AutoModeRebuildOptions": "advanced",
     "AutoModeRebuildRefusal": "advanced",
     "AutoModeRebuildResult": "advanced",
@@ -2434,6 +2451,7 @@
     "CHALLENGES_FILE": "advanced",
     "CHALLENGE_LEDGER_MAX_EVENTS": "advanced",
     "CIRCUIT_OPEN_MARKER": "advanced",
+    "CLASSIFIER_DENY_CAUSES": "advanced",
     "CLASSIFIER_PARSE_FAILURE_DENY_MESSAGE": "advanced",
     "COARSE_SHELL_TOOLS": "stable",
     "CODE_AGENT_PROMPT": "advanced",
@@ -2496,6 +2514,7 @@
     "CheckpointSummary": "stable",
     "CheckpointToken": "stable",
     "CircuitBreakerOptions": "advanced",
+    "ClassifierDenyCause": "advanced",
     "CleanArmLeakFinding": "advanced",
     "CleanArmLeakVerdict": "advanced",
     "CleanMemoryIndexRow": "advanced",
@@ -2590,6 +2609,7 @@
     "DEGRADED_DIAGNOSTIC_TYPE": "advanced",
     "DELEGATION_MAX_CONCURRENT_DEFAULT": "advanced",
     "DELEGATION_MAX_PER_SESSION_DEFAULT": "advanced",
+    "DENIED_BY_MAY_CARRY_CAUSE": "advanced",
     "DENIED_BY_MAY_VETO": "advanced",
     "DENIED_BY_VALUES": "advanced",
     "DESIGN_REVIEW_PROMPTS": "advanced",
@@ -3281,6 +3301,7 @@
     "RULE_BEHAVIORS_BY_PRECEDENCE": "advanced",
     "RULE_BEHAVIOR_PRECEDENCE": "advanced",
     "RULE_OFFERS_ABSENCE_BASELINE": "advanced",
+    "RULE_STORE_UNREADABLE_KINDS": "advanced",
     "RULE_SYNC_DROP_CODES": "advanced",
     "RUN_WORKFLOW_TOOL_NAME": "stable",
     "RawPrefixInputs": "advanced",
@@ -3397,6 +3418,7 @@
     "RuleRejectCode": "advanced",
     "RuleScope": "advanced",
     "RuleSource": "advanced",
+    "RuleStoreUnreadable": "advanced",
     "RuleSyncDrop": "advanced",
     "RuleSyncDropReason": "advanced",
     "RuleSyncFrontier": "advanced",
@@ -3529,6 +3551,7 @@
     "SharedMemoryStoreProvider": "advanced",
     "SharedMemoryStoreReader": "advanced",
     "ShellCommandShape": "advanced",
+    "ShellGateDoctrine": "advanced",
     "ShellRedirection": "advanced",
     "ShellSegment": "advanced",
     "ShellWord": "advanced",
@@ -3851,6 +3874,7 @@
     "autoModeArmingRecipeOf": "advanced",
     "backgroundAgentStoreContract": "advanced",
     "backgroundAgentStoreScopesContract": "advanced",
+    "bashReadBoundaryProbe": "advanced",
     "bashReversibilityProbe": "advanced",
     "boundaryPublishVerdict": "advanced",
     "boundedRedactedSummary": "advanced",
@@ -4142,8 +4166,10 @@
     "inspectDegenerate": "advanced",
     "isAliasModelId": "advanced",
     "isAskOrigin": "advanced",
+    "isAutoModeDenySource": "advanced",
     "isAutoModeUnavailableCause": "advanced",
     "isCanonicalPeerAddress": "advanced",
+    "isClassifierDenyCause": "advanced",
     "isCrossSessionInboundSetting": "advanced",
     "isDeclaredWrite": "advanced",
     "isDelegatedAgentTerminal": "advanced",
@@ -4168,6 +4194,7 @@
     "isRetryableRemoteErrorCode": "advanced",
     "isRuleBehavior": "advanced",
     "isRuleLive": "advanced",
+    "isRuleStoreUnreadable": "advanced",
     "isSecretEnvKey": "advanced",
     "isSelfOrchestrationActive": "advanced",
     "isSessionConflict": "stable",
@@ -4350,6 +4377,7 @@
     "realApprovalOrgFact": "advanced",
     "realPeerClock": "advanced",
     "reasoningBudgetShare": "advanced",
+    "reasoningEffortLevelsOf": "advanced",
     "rebuildAutoModeDecider": "advanced",
     "rebuildStrictControlPlaneLedger": "advanced",
     "reconcileInterruptedSession": "advanced",