@sema-agent/core 7.23.0 → 7.23.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.23.0",
+  "version": "7.23.2",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",
@@ -70,6 +70,7 @@
     "gate:field-liveness": "node scripts/verify-field-liveness.mjs",
     "gate:debts": "node scripts/verify-debts.mjs",
     "handoff:diff": "node scripts/dist-handoff-diff.mjs",
+    "post-ship": "node scripts/post-ship.mjs",
     "gate:debts:rc": "node scripts/verify-debts.mjs --rc-gate",
     "gate:error-surface": "node scripts/verify-error-surface.mjs",
     "gate:criteria": "node scripts/criteria-lint.mjs",

package/wire-changes/core@7.23.1.json

@@ -0,0 +1,205 @@
+{
+  "repo": "core",
+  "version": "7.23.1",
+  "from": "0f45a3d257bcdb5f38faaa7c75a6fa1298685402",
+  "to": "v7.23.1",
+  "added": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [
+    {
+      "id": "F2",
+      "source": "behaviorFlips.summary",
+      "text": "FEWER CARDS, both seats (#892): a verb's FIRST OPERAND can be a slot its grammar fills rather than a file. `VerbOptionSlots.firstOperand` (`src/tools/fs/bash-readonly-classifier.ts:1562`) is a declaration ROW — grep's `pattern` (`:1621`), sed's `script` (`:1675`) — read with the same `OptionValueKind` vocabulary the option slots already use, and ONE reader (`suppliesFirstOperandSlot` `:1401`) answers \"did an option supply this slot instead\" for both walks that needed it (the boundary walk `:3441`/`:3459-3466`, the stdin-floor walk `:4007`/`:4012`). Rules: -1 (the verb-named branch and its private predicate are gone; a verb with no row keeps an ordinary first operand). WHO NEEDS IT: `sed -n '/error/p' app.log` — an everyday log-reading line whose script, spelled with slashes because it opens with an address regexp, was read as the absolute path `/error/p`, found outside the roots and mandated; the `-e` spelling of the same script was already exempt, so one invocation had two readings. WHO IS HURT: a probe pinned at `mandated` for a path-shaped sed script, including its deny-listed spelling — `sed <deny row>` and `sed -l <deny row>` now drop their card on the default/off and bypass tiers. COMPENSATION: the token is not a file under EITHER implementation (it is the script where `-l` takes no value and `-l`'s length argument where it does), so the verb-blind reading that recorded it as a read was an over-approximation, not a protection; the narrowing is exactly one operand wide and no other verb grew a row."
+    },
+    {
+      "id": "G2",
+      "source": "criteria.title",
+      "text": "#892 — a verb's first operand can be a slot its grammar fills, and the narrowing is exactly one operand wide"
+    }
+  ],
+  "closedSetMembers": [
+    {
+      "set": "QuoteOpen",
+      "at": [
+        "src/tools/fs/bash-lexer.ts:109"
+      ],
+      "newSet": true,
+      "added": [
+        "\"",
+        "'"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "SHELL_SCAN_DECLINES",
+      "at": [
+        "src/tools/fs/bash-program-position.ts:346"
+      ],
+      "newSet": true,
+      "added": [
+        "stream_fed_operands",
+        "unreadable_program_position"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "closedSetsUnreadable": [],
+  "typeKeys": [],
+  "declarationMoves": [
+    {
+      "name": "NOT_AUTO_ALLOWED",
+      "kind": null,
+      "onSurface": false,
+      "from": [
+        "src/tools/fs/bash-program-position.ts",
+        "src/tools/fs/bash-readonly-classifier.ts"
+      ],
+      "to": [
+        "src/tools/fs/bash-program-position.ts"
+      ]
+    },
+    {
+      "name": "traceHookCrash",
+      "kind": null,
+      "onSurface": false,
+      "from": [
+        "src/core/runner/gate-exit.ts"
+      ],
+      "to": [
+        "src/core/gate-crash-trace.ts"
+      ]
+    }
+  ],
+  "mintMoves": [],
+  "criteriaObserves": [
+    {
+      "kind": "typeMember",
+      "name": "AskRequest.message",
+      "assertions": [
+        "G5.a",
+        "G5.b"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AskRequest.origin",
+      "assertions": [
+        "G5.a",
+        "G5.b",
+        "G5.c"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AskRequest.ruleOffersAbsence",
+      "assertions": [
+        "G1.d",
+        "G3.b",
+        "G3.d",
+        "G4.c"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AskRequest.toolName",
+      "assertions": [
+        "G5.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "BashReadonlyRootBoundary.denyMatch",
+      "assertions": [
+        "G1.c"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "CompoundReadonlyVerdict.outOfRootPaths",
+      "assertions": [
+        "G1.b",
+        "G2.a",
+        "G2.b",
+        "G2.c",
+        "G2.d"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "CompoundReadonlyVerdict.readDenied",
+      "assertions": [
+        "G1.b",
+        "G2.b"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ReadRootGrantCandidate.dir",
+      "assertions": [
+        "G4.e"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ReversibilityVerdict.mandated",
+      "assertions": [
+        "G1.a",
+        "G1.b",
+        "G1.c",
+        "G2.a",
+        "G2.b",
+        "G2.c",
+        "G2.d",
+        "G3.a",
+        "G3.c",
+        "G3.d",
+        "G3.e",
+        "G4.a",
+        "G4.b",
+        "G4.c",
+        "G4.d",
+        "G6.a",
+        "G6.c",
+        "G7.a",
+        "G7.b",
+        "G7.c"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ReversibilityVerdict.readRootCandidate",
+      "assertions": [
+        "G4.e"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ReversibilityVerdict.reversible",
+      "assertions": [
+        "G1.a",
+        "G3.a",
+        "G3.e",
+        "G4.b",
+        "G4.d",
+        "G6.a",
+        "G6.b",
+        "G7.a",
+        "G7.c"
+      ]
+    }
+  ],
+  "consumersHint": {
+    "cli": [],
+    "server": [],
+    "sdk": [],
+    "note": "scanned cli@879f19e9 server@1b232ad6 sdk@6209e5e — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
+  },
+  "breakingCount": 0,
+  "breakingItems": [],
+  "toResolvedAt": "29f9c021a132099c91933bd71a58bd4da716bfac"
+}

package/wire-changes/core@7.23.2.json

@@ -0,0 +1,42 @@
+{
+  "repo": "core",
+  "version": "7.23.2",
+  "from": "e9bf8451c623a118a6589a6f860bd7b828c3aa3e",
+  "to": "v7.23.2",
+  "added": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [],
+  "closedSetsUnreadable": [],
+  "typeKeys": [
+    {
+      "type": "ReversibilityVerdict",
+      "at": [
+        "src/core/tool-spec.ts:50"
+      ],
+      "added": [
+        "boundaryDeclined"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "declarationMoves": [],
+  "mintMoves": [],
+  "criteriaObserves": [],
+  "consumersHint": {
+    "cli": [
+      "ReversibilityVerdict"
+    ],
+    "server": [
+      "ReversibilityVerdict"
+    ],
+    "sdk": [],
+    "note": "scanned cli@8dd52617 server@7d768b71 sdk@3b02abb — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
+  },
+  "breakingCount": 0,
+  "breakingItems": [],
+  "toResolvedAt": "cb5240a4a8289d28ed37ef84df8ee1bfb2139905"
+}