@sema-agent/core 7.24.4 → 7.25.0

package/dist/tools/monitor.d.ts

@@ -42,7 +42,7 @@ import type { AgentTool, ExecutionEnv } from "../internal/harness-types.js";
 import { type MonitorTimers, type TaskRegistry } from "../core/task-registry.js";
 import type { TaskNotificationPayload } from "../core/task-notification.js";
 import type { ToolResultStore } from "../core/tool-result-store.js";
-import type { BashReadonlyRootBoundary } from "./fs/bash-readonly-classifier.js";
+import type { ShellReadAdmission } from "./fs/shell-read-check.js";
 export interface MonitorToolOptions {
     registry: TaskRegistry;
     /** Fallbacks when the runtime ctx carries no identity (direct mounts) — same posture as createBashTool. */
@@ -69,10 +69,10 @@ export interface MonitorToolOptions {
      *  task-registry-monitor.ts's spill helper). Absent ⇒ legal degrade, byte-identical rolling (no spill,
      *  same loss shape as before this design). */
     toolResultStore?: ToolResultStore;
-    /** The deployment's shell READ BOUNDARY — the SAME option `createBashTool` takes: this face spawns a
-     *  shell command too, so the seat that judges the WRITTEN spelling needs the leg that re-judges where the
-     *  kernel takes it. BUILT here, so a library mount is not fail-open on one face and closed on the other. */
-    readBoundary?: BashReadonlyRootBoundary | (() => BashReadonlyRootBoundary | undefined);
+    /** The gate's shell read station's pre-spawn ADMISSION — the SAME option `createBashTool` takes: this face
+     *  spawns a shell command too, so what it runs is what the station judged, re-established before the watch
+     *  spawns. Absent ⇒ no station judged this mount; nothing is re-established. */
+    shellReadAdmission?: ShellReadAdmission;
     /** RB-465-b (HRD-PTL-3 残件): spec-level retain (`TaskSpec.retainBackgroundProcesses`) — the SECOND
      *  retain lane, OR-composed with the env capability at the teardown sweep. Without this bit the mount
      *  could only see the env lane, so a deployment retaining per spec still got the "session ends it"

package/dist/tools/monitor.js

@@ -3,7 +3,6 @@ import { defineTool, errorResult } from "../core/tools.js";
 import { hasBackgroundShell } from "../core/background-shell.js";
 import { MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, } from "../core/task-registry.js";
 import { toolFace } from "../core/tool-catalog-entries.js";
-import { createShellCanonicalRecheck, MONITOR_ESCAPE_PROSE } from "./fs/fs-bash.js";
 import { thrownText } from "../core/thrown-value.js";
 const MONITOR_DESCRIPTION = "Run a shell command in the background and watch its stdout as a stream of events.\n" +
     "\n" +
@@ -43,7 +42,6 @@ function envBackgroundWallSec(caps, requestedSec) {
     return Math.min(base, cap);
 }
 export function createMonitorTool(env, opts) {
-    const canonicalRecheck = opts.readBoundary === undefined ? undefined : createShellCanonicalRecheck(env, opts.readBoundary, MONITOR_ESCAPE_PROSE);
     return defineTool({
         name: "Monitor",
         ...toolFace("monitor"),
@@ -70,9 +68,9 @@ export function createMonitorTool(env, opts) {
             const isPersistent = persistent === true;
             const timeoutMs = Math.min(MONITOR_MAX_TIMEOUT_MS, Math.max(1, Math.floor(timeout_ms ?? MONITOR_DEFAULT_TIMEOUT_MS)));
             const spawnTimeoutSec = isPersistent ? undefined : Math.ceil(timeoutMs / 1000) + 5;
-            const escape = await canonicalRecheck?.(command, ctx.signal);
-            if (escape !== undefined)
-                return escape;
+            const refused = await opts.shellReadAdmission?.("Monitor", ctx.toolCallId, command, ctx.signal);
+            if (refused !== undefined)
+                return refused;
             if (ctx.signal?.aborted === true)
                 return errorResult("Error (Monitor): the call was cancelled before the watch started.");
             const spawn = await env.spawnBackground(command, {

package/dist/tools/task-list.d.ts

@@ -55,6 +55,10 @@ export interface TaskListItem {
  *   (a real CC instance on the same directory) can set an id out of order, and then the backends
  *   disagreed: memory replayed its Map's insertion order while file/cc read the id order back off
  *   disk. Ordering is part of the contract, not each backend's incidental iteration order.
+ *
+ * @contract task_list.partition_is_root_session — a deployment that mounts a TaskListStore per session keys it by the
+ * delegation tree's ROOT session: every child of the tree (spawned live, or revived by a host verb after a durable park)
+ * reads the one list the leader reads; in-engine children share by construction, a per-call or per-reviver store is the divergence.
  */
 export interface TaskListStore {
     get(id: string): TaskListItem | undefined | Promise<TaskListItem | undefined>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.24.4",
+  "version": "7.25.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2402,
+  "count": 2410,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -60,6 +60,7 @@
     "AcquiredSession": "interface",
     "ActiveWorktreeSession": "interface",
     "ActorAssertion": "interface",
+    "AddResult": "type",
     "AddWorktreeOptions": "interface",
     "AdoptFileRuleStoreResult": "type",
     "AdoptLocalDataRootOptions": "interface",
@@ -793,6 +794,7 @@
     "MonitorTimers": "interface",
     "MonitorToolOptions": "interface",
     "NOTICE_AUDIENCE": "variable",
+    "NOTIFICATION_INJECTION_OUTCOMES": "variable",
     "NO_PERSISTENT_MEMORY_NOTICE": "variable",
     "NamedToolPolicy": "type",
     "NamedWorkflowListing": "interface",
@@ -804,6 +806,7 @@
     "NormalizedReadDenyEntry": "interface",
     "NotePatch": "interface",
     "NoticeAudience": "type",
+    "NotificationInjectionOutcome": "type",
     "OFFLOAD_TOOL_NAME": "variable",
     "ORCHESTRATION_AWARENESS": "variable",
     "ORCHESTRATION_GUIDANCE": "variable",
@@ -853,6 +856,7 @@
     "PEER_ADDRESS_PREFIXES": "variable",
     "PEER_ADMISSION_DEFAULTS": "variable",
     "PEER_DELIVERY_RECEIPT_STATES": "variable",
+    "PEER_DIRECTORY_CONTRACT_SCOPE": "variable",
     "PEER_DROP_REASONS": "variable",
     "PEER_HELD_QUEUE_CAP": "variable",
     "PEER_HELD_REVIEW_CAUSES": "variable",
@@ -922,6 +926,7 @@
     "PeerDeliveryReceiptState": "type",
     "PeerDirectory": "interface",
     "PeerDirectoryAccess": "interface",
+    "PeerDirectoryContractHooks": "interface",
     "PeerDropReason": "type",
     "PeerHeldEntry": "interface",
     "PeerHeldQueue": "interface",
@@ -1204,6 +1209,7 @@
     "RuleSyncResponseBody": "interface",
     "RuleSyncState": "interface",
     "RuleTicket": "type",
+    "RuleTightenAddDelta": "interface",
     "RuleTombstone": "interface",
     "RuleWriteDelta": "type",
     "RuleWriteOutcome": "type",
@@ -1625,6 +1631,7 @@
     "ackAdoptionConfig": "function",
     "acquireCcLock": "function",
     "addDotsOf": "function",
+    "addPersistedRule": "function",
     "addWorktree": "function",
     "adjudicateModelRoute": "function",
     "adjudicatePersistedPathRules": "function",
@@ -1670,7 +1677,6 @@
     "autoRunOnRecommendationEffective": "function",
     "backgroundAgentStoreContract": "function",
     "backgroundAgentStoreScopesContract": "function",
-    "bashReadBoundaryProbe": "function",
     "bashReversibilityProbe": "function",
     "boundaryPublishVerdict": "function",
     "boundedRedactedSummary": "function",
@@ -1984,6 +1990,7 @@
     "isModelGatedForClass": "function",
     "isModelPriced": "function",
     "isNamespacedCoveringRuleName": "function",
+    "isNotificationInjectionOutcome": "function",
     "isPeerDeliveryReceiptState": "function",
     "isPeerIdleNoticeKind": "function",
     "isPeerSessionId": "function",
@@ -2132,6 +2139,7 @@
     "peekMemoryAnnouncements": "function",
     "peerAdmissionFor": "function",
     "peerAxisToken": "function",
+    "peerDirectoryContract": "function",
     "peerHeldQueueFor": "function",
     "peerHeldQueueIfAny": "function",
     "peerHeldQueueKey": "function",
@@ -2464,6 +2472,7 @@
     "AcquiredSession": "advanced",
     "ActiveWorktreeSession": "internal",
     "ActorAssertion": "advanced",
+    "AddResult": "advanced",
     "AddWorktreeOptions": "advanced",
     "AdoptFileRuleStoreResult": "advanced",
     "AdoptLocalDataRootOptions": "advanced",
@@ -3197,6 +3206,7 @@
     "MonitorTimers": "advanced",
     "MonitorToolOptions": "advanced",
     "NOTICE_AUDIENCE": "advanced",
+    "NOTIFICATION_INJECTION_OUTCOMES": "advanced",
     "NO_PERSISTENT_MEMORY_NOTICE": "advanced",
     "NamedToolPolicy": "advanced",
     "NamedWorkflowListing": "advanced",
@@ -3208,6 +3218,7 @@
     "NormalizedReadDenyEntry": "stable",
     "NotePatch": "stable",
     "NoticeAudience": "advanced",
+    "NotificationInjectionOutcome": "advanced",
     "OFFLOAD_TOOL_NAME": "advanced",
     "ORCHESTRATION_AWARENESS": "advanced",
     "ORCHESTRATION_GUIDANCE": "advanced",
@@ -3257,6 +3268,7 @@
     "PEER_ADDRESS_PREFIXES": "advanced",
     "PEER_ADMISSION_DEFAULTS": "advanced",
     "PEER_DELIVERY_RECEIPT_STATES": "advanced",
+    "PEER_DIRECTORY_CONTRACT_SCOPE": "advanced",
     "PEER_DROP_REASONS": "advanced",
     "PEER_HELD_QUEUE_CAP": "advanced",
     "PEER_HELD_REVIEW_CAUSES": "advanced",
@@ -3326,6 +3338,7 @@
     "PeerDeliveryReceiptState": "advanced",
     "PeerDirectory": "advanced",
     "PeerDirectoryAccess": "advanced",
+    "PeerDirectoryContractHooks": "advanced",
     "PeerDropReason": "advanced",
     "PeerHeldEntry": "advanced",
     "PeerHeldQueue": "advanced",
@@ -3608,6 +3621,7 @@
     "RuleSyncResponseBody": "advanced",
     "RuleSyncState": "advanced",
     "RuleTicket": "advanced",
+    "RuleTightenAddDelta": "advanced",
     "RuleTombstone": "advanced",
     "RuleWriteDelta": "advanced",
     "RuleWriteOutcome": "advanced",
@@ -4029,6 +4043,7 @@
     "ackAdoptionConfig": "advanced",
     "acquireCcLock": "advanced",
     "addDotsOf": "advanced",
+    "addPersistedRule": "advanced",
     "addWorktree": "advanced",
     "adjudicateModelRoute": "advanced",
     "adjudicatePersistedPathRules": "advanced",
@@ -4074,7 +4089,6 @@
     "autoRunOnRecommendationEffective": "internal",
     "backgroundAgentStoreContract": "advanced",
     "backgroundAgentStoreScopesContract": "advanced",
-    "bashReadBoundaryProbe": "advanced",
     "bashReversibilityProbe": "advanced",
     "boundaryPublishVerdict": "advanced",
     "boundedRedactedSummary": "advanced",
@@ -4388,6 +4402,7 @@
     "isModelGatedForClass": "advanced",
     "isModelPriced": "advanced",
     "isNamespacedCoveringRuleName": "advanced",
+    "isNotificationInjectionOutcome": "advanced",
     "isPeerDeliveryReceiptState": "advanced",
     "isPeerIdleNoticeKind": "advanced",
     "isPeerSessionId": "advanced",
@@ -4536,6 +4551,7 @@
     "peekMemoryAnnouncements": "advanced",
     "peerAdmissionFor": "advanced",
     "peerAxisToken": "advanced",
+    "peerDirectoryContract": "advanced",
     "peerHeldQueueFor": "advanced",
     "peerHeldQueueIfAny": "advanced",
     "peerHeldQueueKey": "advanced",