@sema-agent/core 7.17.4 → 7.17.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (40) hide show
  1. package/CHANGELOG.md +77 -0
  2. package/dist/core/memory-engine/delegation-settlement.d.ts +27 -9
  3. package/dist/core/memory-engine/delegation-settlement.js +155 -46
  4. package/dist/core/memory-engine/engine.js +12 -6
  5. package/dist/core/remote-env.d.ts +23 -1
  6. package/dist/core/remote-env.js +4 -1
  7. package/dist/core/runner/prepare-hands-readface.js +10 -8
  8. package/dist/core/tool-catalog-entries.js +1 -1
  9. package/dist/tools/fs/bash-readonly-classifier.d.ts +46 -5
  10. package/dist/tools/fs/bash-readonly-classifier.js +572 -80
  11. package/dist/tools/fs/fs-bash.d.ts +28 -0
  12. package/dist/tools/fs/fs-bash.js +135 -27
  13. package/dist/tools/fs/index.d.ts +13 -0
  14. package/dist/tools/fs/index.js +1 -0
  15. package/package.json +3 -2
  16. package/wire-changes/core@7.10.0.json +739 -0
  17. package/wire-changes/core@7.11.0.json +685 -0
  18. package/wire-changes/core@7.11.1.json +112 -0
  19. package/wire-changes/core@7.11.2.json +73 -0
  20. package/wire-changes/core@7.12.0.json +356 -0
  21. package/wire-changes/core@7.13.0.json +199 -0
  22. package/wire-changes/core@7.14.0.json +578 -0
  23. package/wire-changes/core@7.15.0.json +174 -0
  24. package/wire-changes/core@7.16.0.json +132 -0
  25. package/wire-changes/core@7.17.0.json +1621 -0
  26. package/wire-changes/core@7.17.1.json +139 -0
  27. package/wire-changes/core@7.17.2.json +65 -0
  28. package/wire-changes/core@7.17.3.json +44 -0
  29. package/wire-changes/core@7.17.4.json +52 -0
  30. package/wire-changes/core@7.17.5.json +67 -0
  31. package/wire-changes/core@7.5.0.json +1063 -0
  32. package/wire-changes/core@7.5.1.json +252 -0
  33. package/wire-changes/core@7.5.2.json +418 -0
  34. package/wire-changes/core@7.6.0.json +1243 -0
  35. package/wire-changes/core@7.6.1.json +1130 -0
  36. package/wire-changes/core@7.7.0.json +509 -0
  37. package/wire-changes/core@7.8.0.json +1293 -0
  38. package/wire-changes/core@7.9.0.json +691 -0
  39. package/wire-changes/core@7.9.1.json +518 -0
  40. package/wire-changes/core@7.9.2.json +46 -0
package/wire-changes/core@7.9.0.json ADDED
@@ -0,0 +1,691 @@
1
+ {
2
+ "repo": "core",
3
+ "version": "7.9.0",
4
+ "from": "d1f86a6d5796ff2b16f803661613e7711fe81511",
5
+ "to": "v7.9.0",
6
+ "added": [
7
+ {
8
+ "name": "COMMAND_RULE_TOOL",
9
+ "kind": "variable",
10
+ "tier": "advanced",
11
+ "at": [
12
+ "src/core/permission-rule-model.ts:146",
13
+ "src/index.ts:1379"
14
+ ],
15
+ "criteriaCovered": false,
16
+ "breaking": false
17
+ },
18
+ {
19
+ "name": "ParsedRule",
20
+ "kind": "interface",
21
+ "tier": "advanced",
22
+ "at": [
23
+ "src/core/permission-rule-model.ts:309",
24
+ "src/index.ts:1433"
25
+ ],
26
+ "criteriaCovered": false,
27
+ "breaking": false
28
+ },
29
+ {
30
+ "name": "PathRuleBases",
31
+ "kind": "interface",
32
+ "tier": "advanced",
33
+ "at": [
34
+ "src/core/permission-rule-model.ts:1202",
35
+ "src/index.ts:1381"
36
+ ],
37
+ "criteriaCovered": false,
38
+ "breaking": false
39
+ },
40
+ {
41
+ "name": "PersistedRule",
42
+ "kind": "interface",
43
+ "tier": "advanced",
44
+ "at": [
45
+ "src/core/permission-rule-model.ts:250",
46
+ "src/index.ts:1420"
47
+ ],
48
+ "criteriaCovered": true,
49
+ "breaking": false
50
+ },
51
+ {
52
+ "name": "PersistedRuleVerdict",
53
+ "kind": "interface",
54
+ "tier": "advanced",
55
+ "at": [
56
+ "src/core/permission-rule-model.ts:2065",
57
+ "src/index.ts:1383"
58
+ ],
59
+ "criteriaCovered": false,
60
+ "breaking": false
61
+ },
62
+ {
63
+ "name": "READ_RULE_TOOL",
64
+ "kind": "variable",
65
+ "tier": "advanced",
66
+ "at": [
67
+ "src/core/permission-rule-model.ts:148",
68
+ "src/index.ts:1380"
69
+ ],
70
+ "criteriaCovered": false,
71
+ "breaking": false
72
+ },
73
+ {
74
+ "name": "RULE_BEHAVIORS",
75
+ "kind": "variable",
76
+ "tier": "advanced",
77
+ "at": [
78
+ "src/core/permission-rule-model.ts:91",
79
+ "src/index.ts:1366"
80
+ ],
81
+ "criteriaCovered": false,
82
+ "breaking": false
83
+ },
84
+ {
85
+ "name": "RULE_BEHAVIORS_BY_PRECEDENCE",
86
+ "kind": "variable",
87
+ "tier": "advanced",
88
+ "at": [
89
+ "src/core/permission-rule-model.ts:115",
90
+ "src/index.ts:1368"
91
+ ],
92
+ "criteriaCovered": false,
93
+ "breaking": false
94
+ },
95
+ {
96
+ "name": "RULE_BEHAVIOR_PRECEDENCE",
97
+ "kind": "variable",
98
+ "tier": "advanced",
99
+ "at": [
100
+ "src/core/permission-rule-model.ts:107",
101
+ "src/index.ts:1367"
102
+ ],
103
+ "criteriaCovered": false,
104
+ "breaking": false
105
+ },
106
+ {
107
+ "name": "RuleBehavior",
108
+ "kind": "type",
109
+ "tier": "advanced",
110
+ "at": [
111
+ "src/core/permission-rule-model.ts:92",
112
+ "src/index.ts:1382"
113
+ ],
114
+ "criteriaCovered": false,
115
+ "breaking": false
116
+ },
117
+ {
118
+ "name": "StoredRules",
119
+ "kind": "interface",
120
+ "tier": "advanced",
121
+ "at": [
122
+ "src/core/permission-rule-store.ts:53",
123
+ "src/index.ts:1457"
124
+ ],
125
+ "criteriaCovered": false,
126
+ "breaking": false
127
+ },
128
+ {
129
+ "name": "adjudicatePersistedPathRules",
130
+ "kind": "function",
131
+ "tier": "advanced",
132
+ "at": [
133
+ "src/core/permission-rule-model.ts:2114",
134
+ "src/index.ts:1372"
135
+ ],
136
+ "criteriaCovered": false,
137
+ "breaking": false
138
+ },
139
+ {
140
+ "name": "adjudicatePersistedRules",
141
+ "kind": "function",
142
+ "tier": "advanced",
143
+ "at": [
144
+ "src/core/permission-rule-model.ts:2083",
145
+ "src/index.ts:1371"
146
+ ],
147
+ "criteriaCovered": false,
148
+ "breaking": false
149
+ },
150
+ {
151
+ "name": "formatRuleText",
152
+ "kind": "function",
153
+ "tier": "advanced",
154
+ "at": [
155
+ "src/core/permission-rule-model.ts:1121",
156
+ "src/index.ts:1385"
157
+ ],
158
+ "criteriaCovered": false,
159
+ "breaking": false
160
+ },
161
+ {
162
+ "name": "isRuleBehavior",
163
+ "kind": "function",
164
+ "tier": "advanced",
165
+ "at": [
166
+ "src/core/permission-rule-model.ts:96",
167
+ "src/index.ts:1369"
168
+ ],
169
+ "criteriaCovered": false,
170
+ "breaking": false
171
+ },
172
+ {
173
+ "name": "parseRuleText",
174
+ "kind": "function",
175
+ "tier": "advanced",
176
+ "at": [
177
+ "src/core/permission-rule-model.ts:1010",
178
+ "src/index.ts:1384"
179
+ ],
180
+ "criteriaCovered": false,
181
+ "breaking": false
182
+ },
183
+ {
184
+ "name": "pathRuleReaches",
185
+ "kind": "function",
186
+ "tier": "advanced",
187
+ "at": [
188
+ "src/core/permission-rule-model.ts:1281",
189
+ "src/index.ts:1377"
190
+ ],
191
+ "criteriaCovered": false,
192
+ "breaking": false
193
+ },
194
+ {
195
+ "name": "readRowBehavior",
196
+ "kind": "function",
197
+ "tier": "advanced",
198
+ "at": [
199
+ "src/core/permission-rule-model.ts:126",
200
+ "src/index.ts:1370"
201
+ ],
202
+ "criteriaCovered": false,
203
+ "breaking": false
204
+ },
205
+ {
206
+ "name": "ruleReachesProgramRun",
207
+ "kind": "function",
208
+ "tier": "advanced",
209
+ "at": [
210
+ "src/core/permission-rule-model.ts:1383",
211
+ "src/index.ts:1373"
212
+ ],
213
+ "criteriaCovered": false,
214
+ "breaking": false
215
+ },
216
+ {
217
+ "name": "ruleToolGrammarOf",
218
+ "kind": "function",
219
+ "tier": "advanced",
220
+ "at": [
221
+ "src/core/permission-rule-model.ts:157",
222
+ "src/index.ts:1378"
223
+ ],
224
+ "criteriaCovered": false,
225
+ "breaking": false
226
+ },
227
+ {
228
+ "name": "sameRuleIdentity",
229
+ "kind": "function",
230
+ "tier": "advanced",
231
+ "at": [
232
+ "src/core/permission-rule-store.ts:270",
233
+ "src/index.ts:1441"
234
+ ],
235
+ "criteriaCovered": false,
236
+ "breaking": false
237
+ }
238
+ ],
239
+ "removed": [
240
+ {
241
+ "name": "ParsedAllowRule",
242
+ "kind": "interface",
243
+ "tier": "advanced",
244
+ "at": [
245
+ "src/core/permission-rule-model.ts:208",
246
+ "src/index.ts:1412"
247
+ ],
248
+ "breaking": true
249
+ },
250
+ {
251
+ "name": "PersistedAllowRule",
252
+ "kind": "interface",
253
+ "tier": "advanced",
254
+ "at": [
255
+ "src/core/permission-rule-model.ts:157",
256
+ "src/index.ts:1399"
257
+ ],
258
+ "breaking": true
259
+ },
260
+ {
261
+ "name": "StoredAllowRules",
262
+ "kind": "interface",
263
+ "tier": "advanced",
264
+ "at": [
265
+ "src/core/permission-rule-store.ts:53",
266
+ "src/index.ts:1435"
267
+ ],
268
+ "breaking": true
269
+ },
270
+ {
271
+ "name": "formatAllowRuleText",
272
+ "kind": "function",
273
+ "tier": "advanced",
274
+ "at": [
275
+ "src/core/permission-rule-model.ts:1039",
276
+ "src/index.ts:1364"
277
+ ],
278
+ "breaking": true
279
+ },
280
+ {
281
+ "name": "parseAllowRuleText",
282
+ "kind": "function",
283
+ "tier": "advanced",
284
+ "at": [
285
+ "src/core/permission-rule-model.ts:907",
286
+ "src/index.ts:1363"
287
+ ],
288
+ "breaking": true
289
+ }
290
+ ],
291
+ "changed": [],
292
+ "narrowed": [],
293
+ "closedSetMembers": [
294
+ {
295
+ "set": "ASK_ORIGINS",
296
+ "at": [
297
+ "src/core/ask-origin.ts:69"
298
+ ],
299
+ "newSet": false,
300
+ "added": [
301
+ "rule_store_unavailable"
302
+ ],
303
+ "removed": [],
304
+ "breaking": false,
305
+ "criteriaCovered": false
306
+ },
307
+ {
308
+ "set": "CheckpointErrorReason",
309
+ "at": [
310
+ "src/core/checkpoint-store.ts:2361"
311
+ ],
312
+ "newSet": true,
313
+ "added": [
314
+ "constraint_chain_missing",
315
+ "env_factory_missing",
316
+ "governed_unwired",
317
+ "ledger_event_unknown",
318
+ "origin_missing",
319
+ "read_face_damaged",
320
+ "read_face_forged",
321
+ "real_approval_damaged",
322
+ "real_approval_forged",
323
+ "version_newer"
324
+ ],
325
+ "removed": [],
326
+ "breaking": false,
327
+ "criteriaCovered": false
328
+ },
329
+ {
330
+ "set": "DENIED_BY_VALUES",
331
+ "at": [
332
+ "src/core/gate-outcome.ts:133"
333
+ ],
334
+ "newSet": false,
335
+ "added": [
336
+ "persisted_rule"
337
+ ],
338
+ "removed": [],
339
+ "breaking": false,
340
+ "criteriaCovered": false
341
+ },
342
+ {
343
+ "set": "PersistedRuleMatch",
344
+ "at": [
345
+ "src/core/permission-rule-model.ts:185"
346
+ ],
347
+ "newSet": false,
348
+ "added": [
349
+ "path"
350
+ ],
351
+ "removed": [],
352
+ "breaking": false,
353
+ "criteriaCovered": false
354
+ },
355
+ {
356
+ "set": "PersistedRuleTool",
357
+ "at": [
358
+ "src/core/permission-rule-model.ts:80"
359
+ ],
360
+ "newSet": false,
361
+ "added": [],
362
+ "removed": [
363
+ "Bash",
364
+ "Read"
365
+ ],
366
+ "breaking": true,
367
+ "criteriaCovered": false
368
+ },
369
+ {
370
+ "set": "RULE_BEHAVIORS",
371
+ "at": [
372
+ "src/core/permission-rule-model.ts:91"
373
+ ],
374
+ "newSet": true,
375
+ "added": [
376
+ "allow",
377
+ "ask",
378
+ "deny"
379
+ ],
380
+ "removed": [],
381
+ "breaking": false,
382
+ "criteriaCovered": false
383
+ }
384
+ ],
385
+ "typeKeys": [
386
+ {
387
+ "type": "EffectivePermissionRule",
388
+ "at": [
389
+ "src/core/permission-rule-provider.ts:71"
390
+ ],
391
+ "added": [
392
+ "behavior"
393
+ ],
394
+ "removed": [],
395
+ "breaking": false,
396
+ "criteriaCovered": false
397
+ },
398
+ {
399
+ "type": "PermissionRulePolicyOptions",
400
+ "at": [
401
+ "src/core/permission-rules.ts:142"
402
+ ],
403
+ "added": [
404
+ "pathBases"
405
+ ],
406
+ "removed": [
407
+ "bashPrefixLane"
408
+ ],
409
+ "breaking": true,
410
+ "criteriaCovered": false
411
+ },
412
+ {
413
+ "type": "PersistedRuleHit",
414
+ "at": [
415
+ "src/core/hooks.ts:1374"
416
+ ],
417
+ "added": [
418
+ "behavior"
419
+ ],
420
+ "removed": [],
421
+ "breaking": false,
422
+ "criteriaCovered": false
423
+ },
424
+ {
425
+ "type": "QuarantinedRuleAdd",
426
+ "at": [
427
+ "src/core/permission-rule-store.ts:409"
428
+ ],
429
+ "added": [
430
+ "behavior"
431
+ ],
432
+ "removed": [],
433
+ "breaking": false,
434
+ "criteriaCovered": false
435
+ },
436
+ {
437
+ "type": "RedeemResult",
438
+ "at": [
439
+ "src/core/permission-rule-consent.ts:1358"
440
+ ],
441
+ "added": [
442
+ "behavior"
443
+ ],
444
+ "removed": [],
445
+ "breaking": false,
446
+ "criteriaCovered": false
447
+ },
448
+ {
449
+ "type": "RedeemedBatchMember",
450
+ "at": [
451
+ "src/core/permission-rule-consent.ts:1628"
452
+ ],
453
+ "added": [
454
+ "behavior"
455
+ ],
456
+ "removed": [],
457
+ "breaking": false,
458
+ "criteriaCovered": false
459
+ },
460
+ {
461
+ "type": "RemovedPermissionRule",
462
+ "at": [
463
+ "src/core/permission-rule-provider.ts:79"
464
+ ],
465
+ "added": [
466
+ "behavior"
467
+ ],
468
+ "removed": [],
469
+ "breaking": false,
470
+ "criteriaCovered": false
471
+ },
472
+ {
473
+ "type": "RuleAddDelta",
474
+ "at": [
475
+ "src/core/permission-rule-store.ts:144"
476
+ ],
477
+ "added": [
478
+ "behavior"
479
+ ],
480
+ "removed": [],
481
+ "breaking": false,
482
+ "criteriaCovered": false
483
+ },
484
+ {
485
+ "type": "RuleCandidate",
486
+ "at": [
487
+ "src/core/permission-rule-consent.ts:64"
488
+ ],
489
+ "added": [
490
+ "behavior"
491
+ ],
492
+ "removed": [],
493
+ "breaking": false,
494
+ "criteriaCovered": false
495
+ },
496
+ {
497
+ "type": "RuleSyncDrop",
498
+ "at": [
499
+ "src/core/permission-rule-store.ts:420"
500
+ ],
501
+ "added": [
502
+ "behavior"
503
+ ],
504
+ "removed": [],
505
+ "breaking": false,
506
+ "criteriaCovered": false
507
+ },
508
+ {
509
+ "type": "RuleTombstone",
510
+ "at": [
511
+ "src/core/permission-rule-model.ts:275"
512
+ ],
513
+ "added": [
514
+ "behavior"
515
+ ],
516
+ "removed": [],
517
+ "breaking": false,
518
+ "criteriaCovered": false
519
+ },
520
+ {
521
+ "type": "SessionRuleAdd",
522
+ "at": [
523
+ "src/core/permission-rule-session.ts:52"
524
+ ],
525
+ "added": [
526
+ "behavior"
527
+ ],
528
+ "removed": [],
529
+ "breaking": false,
530
+ "criteriaCovered": false
531
+ }
532
+ ],
533
+ "declarationMoves": [
534
+ {
535
+ "name": "ParsedPermissionRule",
536
+ "kind": "interface",
537
+ "onSurface": true,
538
+ "from": [
539
+ "src/core/permission-rules.ts",
540
+ "src/index.ts"
541
+ ],
542
+ "to": [
543
+ "src/core/permission-rule-syntax.ts",
544
+ "src/core/permission-rules.ts",
545
+ "src/index.ts"
546
+ ]
547
+ },
548
+ {
549
+ "name": "parsePermissionRule",
550
+ "kind": "function",
551
+ "onSurface": true,
552
+ "from": [
553
+ "src/core/permission-rules.ts",
554
+ "src/index.ts"
555
+ ],
556
+ "to": [
557
+ "src/core/permission-rule-syntax.ts",
558
+ "src/core/permission-rules.ts",
559
+ "src/index.ts"
560
+ ]
561
+ }
562
+ ],
563
+ "mintMoves": [],
564
+ "criteriaObserves": [
565
+ {
566
+ "kind": "engineNoticeCode",
567
+ "name": "config.tool_card_undeclared",
568
+ "assertions": [
569
+ "G2.a"
570
+ ]
571
+ },
572
+ {
573
+ "kind": "engineNoticeCode",
574
+ "name": "config.tool_face_invalid",
575
+ "assertions": [
576
+ "G3.a"
577
+ ]
578
+ },
579
+ {
580
+ "kind": "taskEventField",
581
+ "name": "tool_end.structured",
582
+ "assertions": [
583
+ "G2.a",
584
+ "G3.a"
585
+ ]
586
+ },
587
+ {
588
+ "kind": "taskEventField",
589
+ "name": "tool_roster_delta.delta",
590
+ "assertions": [
591
+ "G1.a"
592
+ ]
593
+ },
594
+ {
595
+ "kind": "taskEventField",
596
+ "name": "wiring_manifest.manifest",
597
+ "assertions": [
598
+ "G1.a",
599
+ "G2.a"
600
+ ]
601
+ },
602
+ {
603
+ "kind": "typeMember",
604
+ "name": "AskRequest.origin",
605
+ "assertions": [
606
+ "G4.a"
607
+ ]
608
+ },
609
+ {
610
+ "kind": "typeMember",
611
+ "name": "GateDisposition.deniedBy",
612
+ "assertions": [
613
+ "G4.a",
614
+ "G4.e"
615
+ ]
616
+ },
617
+ {
618
+ "kind": "typeMember",
619
+ "name": "PermissionRuleIssue.code",
620
+ "assertions": [
621
+ "G4.d"
622
+ ]
623
+ },
624
+ {
625
+ "kind": "typeMember",
626
+ "name": "PersistedRule.behavior",
627
+ "assertions": [
628
+ "G4.c"
629
+ ]
630
+ },
631
+ {
632
+ "kind": "typeMember",
633
+ "name": "ToolCallRequest.face",
634
+ "assertions": [
635
+ "G4.b"
636
+ ]
637
+ }
638
+ ],
639
+ "consumersHint": {
640
+ "cli": [
641
+ "ASK_ORIGINS",
642
+ "DENIED_BY_VALUES",
643
+ "PersistedRule",
644
+ "parseAllowRuleText"
645
+ ],
646
+ "server": [
647
+ "ASK_ORIGINS",
648
+ "DENIED_BY_VALUES",
649
+ "EffectivePermissionRule",
650
+ "ParsedAllowRule",
651
+ "PermissionRulePolicyOptions",
652
+ "PersistedAllowRule",
653
+ "PersistedRuleHit",
654
+ "PersistedRuleMatch",
655
+ "PersistedRuleTool",
656
+ "QuarantinedRuleAdd",
657
+ "RedeemResult",
658
+ "RedeemedBatchMember",
659
+ "RemovedPermissionRule",
660
+ "RuleAddDelta",
661
+ "RuleCandidate",
662
+ "RuleSyncDrop",
663
+ "RuleTombstone",
664
+ "SessionRuleAdd",
665
+ "StoredAllowRules",
666
+ "formatAllowRuleText",
667
+ "parseAllowRuleText"
668
+ ],
669
+ "sdk": [
670
+ "ASK_ORIGINS",
671
+ "DENIED_BY_VALUES",
672
+ "PersistedAllowRule",
673
+ "PersistedRule",
674
+ "PersistedRuleMatch",
675
+ "RedeemedBatchMember",
676
+ "RuleCandidate"
677
+ ],
678
+ "note": "scanned cli@0c3bce13 server@db889cb7 sdk@da3859c — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
679
+ },
680
+ "breakingCount": 7,
681
+ "breakingItems": [
682
+ "closed set lost members: PersistedRuleTool -Bash,Read",
683
+ "export removed: ParsedAllowRule (interface)",
684
+ "export removed: PersistedAllowRule (interface)",
685
+ "export removed: StoredAllowRules (interface)",
686
+ "export removed: formatAllowRuleText (function)",
687
+ "export removed: parseAllowRuleText (function)",
688
+ "type lost keys: PermissionRulePolicyOptions -bashPrefixLane"
689
+ ],
690
+ "toResolvedAt": "96581fd0929626c538a19d17e20b2632ceb76a3d"
691
+ }