@sema-agent/core 7.26.0 → 7.26.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. package/CHANGELOG.md +73 -0
  2. package/dist/agents/verify.d.ts +16 -6
  3. package/dist/agents/verify.js +12 -5
  4. package/dist/core/checkpoint-store.d.ts +13 -10
  5. package/dist/core/gate-lanes.js +2 -1
  6. package/dist/core/gate-outcome.d.ts +54 -5
  7. package/dist/core/gate-outcome.js +17 -0
  8. package/dist/core/permission-rule-provider.js +6 -1
  9. package/dist/core/permission-rule-store.d.ts +36 -0
  10. package/dist/core/permission-rule-store.js +119 -19
  11. package/dist/core/permission-rule-sync.js +14 -5
  12. package/dist/core/runner/contracts.d.ts +48 -0
  13. package/dist/core/runner/decide-continuation.js +3 -1
  14. package/dist/core/runner/denial-limit-arms.d.ts +4 -3
  15. package/dist/core/runner/denial-limit-arms.js +2 -1
  16. package/dist/core/runner/prepare-inherited-gate.d.ts +1 -1
  17. package/dist/core/runner/prepare-inherited-gate.js +2 -1
  18. package/dist/core/runner/resume-apply.js +3 -1
  19. package/dist/core/runner/resume-policy-outcome.js +6 -6
  20. package/dist/core/runner/run-harness-handlers.js +2 -5
  21. package/dist/core/runner/run-identity-wiring.d.ts +6 -0
  22. package/dist/core/runner/run-identity-wiring.js +8 -3
  23. package/dist/core/runner/run-leg.js +9 -3
  24. package/dist/core/runner/runtask.js +2 -2
  25. package/dist/core/runner/session-rule-policy.d.ts +1 -1
  26. package/dist/core/runner/session-rule-policy.js +6 -7
  27. package/dist/core/session-policy-store.d.ts +18 -0
  28. package/dist/core/session-policy-store.js +3 -0
  29. package/dist/core/store-contracts/permission-rule-write-contract.js +16 -3
  30. package/dist/core/store-contracts/read-back-shape-contract.d.ts +56 -0
  31. package/dist/core/store-contracts/read-back-shape-contract.js +78 -0
  32. package/dist/core/tool-policy.d.ts +36 -12
  33. package/dist/core/tool-policy.js +22 -9
  34. package/dist/index.d.ts +4 -0
  35. package/dist/index.js +4 -0
  36. package/dist/stores/file/adoption/adopt.js +4 -10
  37. package/dist/stores/file/permission-rule-store.d.ts +5 -1
  38. package/dist/stores/file/permission-rule-store.js +5 -3
  39. package/dist/stores/file/session-policy-store.d.ts +32 -0
  40. package/dist/stores/file/session-policy-store.js +72 -50
  41. package/dist/tools/fs/shell-read-check.d.ts +58 -1
  42. package/dist/tools/fs/shell-read-check.js +47 -33
  43. package/dist/tools/fs/shell-read-establish.js +19 -8
  44. package/dist/tools/fs/shell-read-judge.d.ts +3 -0
  45. package/dist/tools/fs/shell-read-judge.js +3 -1
  46. package/dist/tools/fs/shell-read-plan.js +16 -17
  47. package/package.json +1 -1
  48. package/test/export-surface.snapshot.json +52 -2
  49. package/wire-changes/core@7.26.1.json +605 -0
  50. package/wire-changes/core@7.26.2.json +106 -0
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
3
3
  "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
4
- "count": 2424,
4
+ "count": 2449,
5
5
  "exports": {
6
6
  "A2ATaskState": "type",
7
7
  "A2ATaskStateReversal": "type",
@@ -225,6 +225,7 @@
225
225
  "CONSOLIDATION_SYSTEM_PROMPT": "variable",
226
226
  "CONTRACT_KIT_ENGINE_VERSION": "variable",
227
227
  "COORDINATOR_ROLE_PROMPT": "variable",
228
+ "CORRUPT_BODY_FORMS": "variable",
228
229
  "CROSS_SESSION_CLASSIFIER_RULE": "variable",
229
230
  "CROSS_SESSION_DIALOG_EXPIRY_DEFAULT": "variable",
230
231
  "CROSS_SESSION_DIALOG_EXPIRY_VALUES": "variable",
@@ -337,6 +338,7 @@
337
338
  "ControlPlaneCorruptError": "class",
338
339
  "ControlPlaneRebuildReceipt": "interface",
339
340
  "CoreCompatRange": "interface",
341
+ "CorruptBodyForm": "type",
340
342
  "CrossSessionCodecError": "class",
341
343
  "CrossSessionDialogExpiry": "type",
342
344
  "CrossSessionEnvelopeFields": "interface",
@@ -430,6 +432,7 @@
430
432
  "ErasureSelect": "type",
431
433
  "EscalationRecord": "interface",
432
434
  "EscalationTrigger": "type",
435
+ "EstablishedRead": "interface",
433
436
  "EventDedupe": "type",
434
437
  "EventDefaultPolicy": "type",
435
438
  "EvictPolicy": "type",
@@ -1094,11 +1097,15 @@
1094
1097
  "RUN_WORKFLOW_TOOL_NAME": "variable",
1095
1098
  "RawPrefixInputs": "interface",
1096
1099
  "RawRuleSyncState": "interface",
1100
+ "ReadBackShapeSubject": "interface",
1101
+ "ReadCandidate": "interface",
1097
1102
  "ReadDenyBuiltinConfig": "interface",
1098
1103
  "ReadDenyBuiltinRow": "interface",
1099
1104
  "ReadDenyBuiltinTier": "type",
1100
1105
  "ReadDenyEntry": "type",
1101
1106
  "ReadDenyMatcher": "interface",
1107
+ "ReadEstablishment": "type",
1108
+ "ReadFinding": "interface",
1102
1109
  "ReadOnlyCommandRow": "interface",
1103
1110
  "ReadOnlyFlagArity": "type",
1104
1111
  "ReadOnlyShellVerdict": "type",
@@ -1251,6 +1258,10 @@
1251
1258
  "SETTLEMENT_KINDS": "variable",
1252
1259
  "SHARED_MEMORY_LIST_PAGE_SIZE": "variable",
1253
1260
  "SHARED_MEMORY_READ_CAP_BYTES": "variable",
1261
+ "SHELL_READ_DECISION": "variable",
1262
+ "SHELL_READ_FINDINGS": "variable",
1263
+ "SHELL_READ_FINDING_RANK": "variable",
1264
+ "SHELL_READ_SEATS": "variable",
1254
1265
  "SHELL_WRAPPER_TABLE": "variable",
1255
1266
  "SKILL_TOOL_NAME": "variable",
1256
1267
  "STALE_RUNNING_REAP_ATTRIBUTION": "variable",
@@ -1340,6 +1351,17 @@
1340
1351
  "SharedMemoryStoreReader": "interface",
1341
1352
  "ShellCommandShape": "interface",
1342
1353
  "ShellGateDoctrine": "type",
1354
+ "ShellReadAdmission": "type",
1355
+ "ShellReadBoundary": "interface",
1356
+ "ShellReadDisposition": "type",
1357
+ "ShellReadFinding": "type",
1358
+ "ShellReadJudgeInput": "interface",
1359
+ "ShellReadJudgment": "interface",
1360
+ "ShellReadPlan": "interface",
1361
+ "ShellReadSeat": "type",
1362
+ "ShellReadSegment": "interface",
1363
+ "ShellReadStationSeat": "type",
1364
+ "ShellReadVerdict": "interface",
1343
1365
  "ShellRedirection": "interface",
1344
1366
  "ShellSegment": "interface",
1345
1367
  "ShellWord": "interface",
@@ -1369,6 +1391,7 @@
1369
1391
  "StopSource": "type",
1370
1392
  "StoreDurability": "type",
1371
1393
  "StoreFidelity": "type",
1394
+ "StoreReadBackShapeHooks": "interface",
1372
1395
  "StoredRules": "interface",
1373
1396
  "StoredSession": "class",
1374
1397
  "StoredSessionRules": "interface",
@@ -2040,6 +2063,7 @@
2040
2063
  "judgeParkedToolIdentity": "function",
2041
2064
  "judgePeerAdmission": "function",
2042
2065
  "judgePeerRecordFile": "function",
2066
+ "judgeShellRead": "function",
2043
2067
  "killProcessTree": "function",
2044
2068
  "languageFor": "function",
2045
2069
  "leafIdAfterEntry": "function",
@@ -2361,6 +2385,7 @@
2361
2385
  "splitWorkflowMeta": "function",
2362
2386
  "sqliteQuery": "function",
2363
2387
  "startWorkflow": "function",
2388
+ "storeReadBackShapeContract": "function",
2364
2389
  "stripEngineMetadata": "function",
2365
2390
  "stripFormatCharacters": "function",
2366
2391
  "stripRev": "function",
@@ -2651,6 +2676,7 @@
2651
2676
  "CONSOLIDATION_SYSTEM_PROMPT": "internal",
2652
2677
  "CONTRACT_KIT_ENGINE_VERSION": "advanced",
2653
2678
  "COORDINATOR_ROLE_PROMPT": "advanced",
2679
+ "CORRUPT_BODY_FORMS": "advanced",
2654
2680
  "CROSS_SESSION_CLASSIFIER_RULE": "advanced",
2655
2681
  "CROSS_SESSION_DIALOG_EXPIRY_DEFAULT": "advanced",
2656
2682
  "CROSS_SESSION_DIALOG_EXPIRY_VALUES": "advanced",
@@ -2763,6 +2789,7 @@
2763
2789
  "ControlPlaneCorruptError": "advanced",
2764
2790
  "ControlPlaneRebuildReceipt": "advanced",
2765
2791
  "CoreCompatRange": "advanced",
2792
+ "CorruptBodyForm": "advanced",
2766
2793
  "CrossSessionCodecError": "advanced",
2767
2794
  "CrossSessionDialogExpiry": "advanced",
2768
2795
  "CrossSessionEnvelopeFields": "advanced",
@@ -2856,6 +2883,7 @@
2856
2883
  "ErasureSelect": "advanced",
2857
2884
  "EscalationRecord": "advanced",
2858
2885
  "EscalationTrigger": "advanced",
2886
+ "EstablishedRead": "advanced",
2859
2887
  "EventDedupe": "advanced",
2860
2888
  "EventDefaultPolicy": "advanced",
2861
2889
  "EvictPolicy": "advanced",
@@ -3520,11 +3548,15 @@
3520
3548
  "RUN_WORKFLOW_TOOL_NAME": "stable",
3521
3549
  "RawPrefixInputs": "advanced",
3522
3550
  "RawRuleSyncState": "advanced",
3551
+ "ReadBackShapeSubject": "advanced",
3552
+ "ReadCandidate": "advanced",
3523
3553
  "ReadDenyBuiltinConfig": "advanced",
3524
3554
  "ReadDenyBuiltinRow": "advanced",
3525
3555
  "ReadDenyBuiltinTier": "advanced",
3526
3556
  "ReadDenyEntry": "advanced",
3527
3557
  "ReadDenyMatcher": "advanced",
3558
+ "ReadEstablishment": "advanced",
3559
+ "ReadFinding": "advanced",
3528
3560
  "ReadOnlyCommandRow": "advanced",
3529
3561
  "ReadOnlyFlagArity": "advanced",
3530
3562
  "ReadOnlyShellVerdict": "advanced",
@@ -3677,6 +3709,10 @@
3677
3709
  "SETTLEMENT_KINDS": "advanced",
3678
3710
  "SHARED_MEMORY_LIST_PAGE_SIZE": "advanced",
3679
3711
  "SHARED_MEMORY_READ_CAP_BYTES": "advanced",
3712
+ "SHELL_READ_DECISION": "advanced",
3713
+ "SHELL_READ_FINDINGS": "advanced",
3714
+ "SHELL_READ_FINDING_RANK": "advanced",
3715
+ "SHELL_READ_SEATS": "advanced",
3680
3716
  "SHELL_WRAPPER_TABLE": "advanced",
3681
3717
  "SKILL_TOOL_NAME": "internal",
3682
3718
  "STALE_RUNNING_REAP_ATTRIBUTION": "advanced",
@@ -3752,7 +3788,7 @@
3752
3788
  "SessionWarmup": "advanced",
3753
3789
  "SessionWriteOptions": "stable",
3754
3790
  "Settlement": "advanced",
3755
- "SettlementKind": "advanced",
3791
+ "SettlementKind": "stable",
3756
3792
  "SharedAbortScope": "advanced",
3757
3793
  "SharedMemoryDocumentEntry": "advanced",
3758
3794
  "SharedMemoryFixture": "advanced",
@@ -3766,6 +3802,17 @@
3766
3802
  "SharedMemoryStoreReader": "advanced",
3767
3803
  "ShellCommandShape": "advanced",
3768
3804
  "ShellGateDoctrine": "advanced",
3805
+ "ShellReadAdmission": "advanced",
3806
+ "ShellReadBoundary": "advanced",
3807
+ "ShellReadDisposition": "advanced",
3808
+ "ShellReadFinding": "advanced",
3809
+ "ShellReadJudgeInput": "advanced",
3810
+ "ShellReadJudgment": "advanced",
3811
+ "ShellReadPlan": "advanced",
3812
+ "ShellReadSeat": "advanced",
3813
+ "ShellReadSegment": "advanced",
3814
+ "ShellReadStationSeat": "advanced",
3815
+ "ShellReadVerdict": "advanced",
3769
3816
  "ShellRedirection": "advanced",
3770
3817
  "ShellSegment": "advanced",
3771
3818
  "ShellWord": "advanced",
@@ -3795,6 +3842,7 @@
3795
3842
  "StopSource": "advanced",
3796
3843
  "StoreDurability": "advanced",
3797
3844
  "StoreFidelity": "advanced",
3845
+ "StoreReadBackShapeHooks": "advanced",
3798
3846
  "StoredRules": "advanced",
3799
3847
  "StoredSession": "stable",
3800
3848
  "StoredSessionRules": "advanced",
@@ -4466,6 +4514,7 @@
4466
4514
  "judgeParkedToolIdentity": "advanced",
4467
4515
  "judgePeerAdmission": "advanced",
4468
4516
  "judgePeerRecordFile": "advanced",
4517
+ "judgeShellRead": "advanced",
4469
4518
  "killProcessTree": "internal",
4470
4519
  "languageFor": "internal",
4471
4520
  "leafIdAfterEntry": "internal",
@@ -4787,6 +4836,7 @@
4787
4836
  "splitWorkflowMeta": "advanced",
4788
4837
  "sqliteQuery": "advanced",
4789
4838
  "startWorkflow": "advanced",
4839
+ "storeReadBackShapeContract": "advanced",
4790
4840
  "stripEngineMetadata": "advanced",
4791
4841
  "stripFormatCharacters": "advanced",
4792
4842
  "stripRev": "advanced",