@sema-agent/core 7.23.3 → 7.23.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (52) hide show
  1. package/CHANGELOG.md +70 -0
  2. package/dist/agents/list-agents-tool.d.ts +5 -1
  3. package/dist/agents/list-agents-tool.js +14 -2
  4. package/dist/brain/anthropic.js +3 -2
  5. package/dist/brain/circuit-breaker.js +3 -3
  6. package/dist/brain/degrading.js +3 -5
  7. package/dist/brain/errors.d.ts +35 -18
  8. package/dist/brain/errors.js +49 -31
  9. package/dist/brain/failover.js +2 -3
  10. package/dist/brain/open-responses.js +6 -5
  11. package/dist/brain/openai.js +6 -5
  12. package/dist/brain/route-adjudicator.d.ts +26 -4
  13. package/dist/brain/route-adjudicator.js +26 -0
  14. package/dist/brain/stream-engine.js +8 -2
  15. package/dist/core/checkpoint-store.d.ts +4 -6
  16. package/dist/core/checkpoint-store.js +2 -2
  17. package/dist/core/permission-rule-model.js +8 -5
  18. package/dist/core/runner/prepare-delegation-surface.d.ts +3 -0
  19. package/dist/core/runner/prepare-delegation-surface.js +1 -0
  20. package/dist/core/runner/prepare-hands-readface.d.ts +4 -1
  21. package/dist/core/runner/prepare-hands-readface.js +7 -7
  22. package/dist/core/runner/prepare-task.js +2 -2
  23. package/dist/core/runner/run-leg.js +2 -13
  24. package/dist/core/task-spec.d.ts +2 -1
  25. package/dist/core/thrown-value.d.ts +30 -0
  26. package/dist/core/thrown-value.js +23 -1
  27. package/dist/core/tool-catalog-entries.js +1 -1
  28. package/dist/core/tool-model-gate.js +3 -15
  29. package/dist/core/tools.js +7 -7
  30. package/dist/core/untrusted-text.d.ts +6 -0
  31. package/dist/core/untrusted-text.js +1 -0
  32. package/dist/core/workflow-run-store-contract.js +13 -0
  33. package/dist/core/workflow-run-store.d.ts +15 -0
  34. package/dist/core/workflow-run-store.js +1 -0
  35. package/dist/engine/loop/agent-loop.js +10 -24
  36. package/dist/tools/fs/bash-program-position.d.ts +23 -0
  37. package/dist/tools/fs/bash-program-position.js +11 -0
  38. package/dist/tools/fs/bash-readonly-classifier.d.ts +64 -42
  39. package/dist/tools/fs/bash-readonly-classifier.js +33 -10
  40. package/dist/tools/fs/fs-bash.d.ts +41 -3
  41. package/dist/tools/fs/fs-bash.js +152 -58
  42. package/dist/tools/fs/index.d.ts +2 -1
  43. package/dist/tools/fs/index.js +1 -0
  44. package/dist/tools/fs/read-deny.d.ts +28 -0
  45. package/dist/tools/fs/read-deny.js +11 -0
  46. package/dist/tools/fs/safety.d.ts +1 -1
  47. package/dist/tools/fs/safety.js +2 -1
  48. package/dist/tools/monitor.d.ts +5 -0
  49. package/dist/tools/monitor.js +7 -0
  50. package/package.json +1 -1
  51. package/wire-changes/core@7.23.4.json +58 -0
  52. package/wire-changes/core@7.23.5.json +133 -0
@@ -0,0 +1,133 @@
1
+ {
2
+ "repo": "core",
3
+ "version": "7.23.5",
4
+ "from": "0a77a55f973aa9bc0d816abcf25cccb21039bda6",
5
+ "to": "v7.23.5",
6
+ "added": [],
7
+ "removed": [],
8
+ "changed": [],
9
+ "narrowed": [
10
+ {
11
+ "id": "F3",
12
+ "source": "behaviorFlips.summary",
13
+ "text": "NARROWING of the retry ladder, no key change (#933): a fetch throw the RUNTIME raised while BUILDING the request (a base URL carrying userinfo, a malformed URL/method/header name, a GET with a body) is classified by `classifyFetchThrow` (`src/brain/errors.ts:328`) as `invalid_request` — not `network` — and never retried; `AssistantMessage.isApiErrorMessage` is deliberately absent on this class (nothing reached the wire). A base URL with userinfo is refused at brain CONSTRUCTION by `assertBaseUrlWithoutCredentials` (`src/brain/route-adjudicator.ts:91`) in all three factories and in the shared `resolveRequestRoot` for `Model.baseUrl` (rules −2; the message never echoes the password). Structural discriminator, two evidence forms: a transport error carries a `cause` with a connect code, or the `fetch failed` shell sentence; a bare `TypeError` with neither is a build refusal. WHO IS AFFECTED: an operator who saw a ~3-minute retry ladder on a deterministic configuration error (deploy on cli 1.0.121)."
14
+ },
15
+ {
16
+ "id": "F7",
17
+ "source": "behaviorFlips.summary",
18
+ "text": "NARROWING, `Monitor` tool (#938): the shell faces' execute-time canonical recheck (`createShellCanonicalRecheck`, `src/tools/fs/fs-bash.ts`, extracted verbatim from the Bash tool) is mounted on `Monitor` from the same `readBoundary` option; a watch whose established operands resolve outside the roots or onto a deny row is refused as the whole call result before `registerMonitor` (no task_id, no stream), with a pre-spawn cancellation guard. WHO IS AFFECTED: a deployment that watched a symlinked or globbed deny-listed file through Monitor at zero refusals."
19
+ }
20
+ ],
21
+ "closedSetMembers": [
22
+ {
23
+ "set": "FetchThrowClass",
24
+ "at": [
25
+ "src/brain/errors.ts:327"
26
+ ],
27
+ "newSet": true,
28
+ "added": [
29
+ "request_unbuildable",
30
+ "transport"
31
+ ],
32
+ "removed": [],
33
+ "breaking": false,
34
+ "criteriaCovered": false
35
+ }
36
+ ],
37
+ "closedSetsUnreadable": [],
38
+ "typeKeys": [
39
+ {
40
+ "type": "MonitorToolOptions",
41
+ "at": [
42
+ "src/tools/monitor.ts:61"
43
+ ],
44
+ "added": [
45
+ "readBoundary"
46
+ ],
47
+ "removed": [],
48
+ "breaking": false,
49
+ "criteriaCovered": false
50
+ },
51
+ {
52
+ "type": "WorkflowRunSummary",
53
+ "at": [
54
+ "src/core/workflow-run-store.ts:35"
55
+ ],
56
+ "added": [
57
+ "errorCode"
58
+ ],
59
+ "removed": [],
60
+ "breaking": false,
61
+ "criteriaCovered": true
62
+ }
63
+ ],
64
+ "declarationMoves": [
65
+ {
66
+ "name": "PROBE_REASON_MAX",
67
+ "kind": null,
68
+ "onSurface": false,
69
+ "from": [
70
+ "src/core/checkpoint-store.ts"
71
+ ],
72
+ "to": [
73
+ "src/core/checkpoint-store.ts",
74
+ "src/core/untrusted-text.ts"
75
+ ]
76
+ }
77
+ ],
78
+ "mintMoves": [],
79
+ "criteriaObserves": [
80
+ {
81
+ "kind": "taskEventField",
82
+ "name": "tool_end.isError",
83
+ "assertions": [
84
+ "G2.a",
85
+ "G2.b",
86
+ "G4.a",
87
+ "G4.b"
88
+ ]
89
+ },
90
+ {
91
+ "kind": "taskEventField",
92
+ "name": "tool_end.structured",
93
+ "assertions": [
94
+ "G1.b"
95
+ ]
96
+ },
97
+ {
98
+ "kind": "typeMember",
99
+ "name": "PersistedRule.rule",
100
+ "assertions": [
101
+ "G3.a"
102
+ ]
103
+ },
104
+ {
105
+ "kind": "typeMember",
106
+ "name": "ReversibilityVerdict.boundaryDeclined",
107
+ "assertions": [
108
+ "G3.b"
109
+ ]
110
+ },
111
+ {
112
+ "kind": "typeMember",
113
+ "name": "WorkflowRunSummary.errorCode",
114
+ "assertions": [
115
+ "G1.a"
116
+ ]
117
+ }
118
+ ],
119
+ "consumersHint": {
120
+ "cli": [],
121
+ "server": [
122
+ "MonitorToolOptions",
123
+ "WorkflowRunSummary"
124
+ ],
125
+ "sdk": [
126
+ "WorkflowRunSummary"
127
+ ],
128
+ "note": "scanned cli@c38ebaf9 server@3793eaf4 sdk@ace0d09 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
129
+ },
130
+ "breakingCount": 0,
131
+ "breakingItems": [],
132
+ "toResolvedAt": "a11cee1b37ecec0004b3b2e31a6d5d51370dfa52"
133
+ }