@sema-agent/core 7.26.1 → 7.26.3

package/wire-changes/core@7.26.2.json

@@ -0,0 +1,106 @@
+{
+  "repo": "core",
+  "version": "7.26.2",
+  "from": "d9d6418fe808128c2b9bd9a51273602f5d6c28e1",
+  "to": "v7.26.2",
+  "added": [],
+  "removed": [],
+  "changed": [
+    {
+      "name": "SettlementKind",
+      "from": {
+        "kind": "type",
+        "tier": "advanced"
+      },
+      "to": {
+        "kind": "type",
+        "tier": "stable"
+      },
+      "at": [
+        "src/core/gate-outcome.ts:64",
+        "src/index.ts:1411"
+      ],
+      "breaking": false
+    }
+  ],
+  "narrowed": [
+    {
+      "id": "F3",
+      "source": "behaviorFlips.summary",
+      "text": "NARROWING + closed-set addition (#1016, P1, approval face — user-visible through the model): a deployment's own policy refusal is no longer handed to the model as the user's words. `AskOutcome.settledBy` gains `\"policy\"` (live) and the durable `hostDecision.decidedBy` gains `\"policy\"`; `SETTLEMENT_KINDS` gains `policy_refused` (party `none`); a refusal so settled reaches the model as ONE policy sentence (`Action requires interactive approval and permission prompts are not available in this context` + `Policy note:` when the host supplied one), minted in one place for the live and the durable-resume arms. A refusal with no `settledBy` is still read as a person's (default unchanged)."
+    }
+  ],
+  "closedSetMembers": [
+    {
+      "set": "SETTLEMENT_KINDS",
+      "at": [
+        "src/core/gate-outcome.ts:49"
+      ],
+      "newSet": false,
+      "added": [
+        "policy_refused"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "closedSetsUnreadable": [],
+  "typeKeys": [
+    {
+      "type": "RunInternals",
+      "at": [
+        "src/core/runner/contracts.ts:1340"
+      ],
+      "added": [
+        "onWiringManifest"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    }
+  ],
+  "declarationMoves": [],
+  "mintMoves": [],
+  "criteriaObserves": [
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.gate",
+      "assertions": [
+        "G3.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "RunInternals.onWiringManifest",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ShellReadJudgment.verdict",
+      "assertions": [
+        "G1.a"
+      ]
+    }
+  ],
+  "consumersHint": {
+    "cli": [
+      "RunInternals",
+      "SETTLEMENT_KINDS"
+    ],
+    "server": [
+      "RunInternals",
+      "SETTLEMENT_KINDS",
+      "SettlementKind"
+    ],
+    "sdk": [
+      "SETTLEMENT_KINDS"
+    ],
+    "note": "scanned cli@1da88f0f server@8fe5139f sdk@192ebd1 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
+  },
+  "breakingCount": 0,
+  "breakingItems": [],
+  "toResolvedAt": "cf8254dcbedc7be05f796fb4813b6b9a2967c842"
+}

package/wire-changes/core@7.26.3.json

@@ -0,0 +1,65 @@
+{
+  "repo": "core",
+  "version": "7.26.3",
+  "from": "f41acbdc6dace7426c1a4dafa1a9c184d010cdb7",
+  "to": "v7.26.3",
+  "added": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [
+    {
+      "id": "F1",
+      "source": "behaviorFlips.summary",
+      "text": "NARROWING (#1018, P3, Monitor tool — user-visible): the watch tool probes the tracked working directory before it spawns, through the same probe and diagnosis the shell's legs use (`src/tools/fs/dead-cwd.ts`, one mint). A dead cwd (gone / replaced by a file / standing under a file / a symlink that does not resolve to a directory) refuses loudly with the shell's dead-cwd sentence and, when the task root is alive, resets the tracked cwd to the root (self-heal, same as Bash); a mount that was handed no root says it has no reset target. `MonitorToolOptions.rootCanonical?` (additive) carries the root in the same canonical spelling `createBashTool` receives; `prepareTask` wires it. Two probe shapes got truthful on BOTH legs: an ENOTDIR-class probe error and a symlink retargeted at a file now count as dead."
+    }
+  ],
+  "closedSetMembers": [],
+  "closedSetsUnreadable": [],
+  "typeKeys": [
+    {
+      "type": "MonitorToolOptions",
+      "at": [
+        "src/tools/monitor.ts:61"
+      ],
+      "added": [
+        "rootCanonical"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    }
+  ],
+  "typeKeysUnreadableArms": [],
+  "typeKeysFlattenedCount": 212,
+  "declarationMoves": [],
+  "mintMoves": [],
+  "criteriaObserves": [
+    {
+      "kind": "typeMember",
+      "name": "MonitorToolOptions.rootCanonical",
+      "assertions": [
+        "G1.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "RunInternals.inheritedGate",
+      "assertions": [
+        "G2.a"
+      ]
+    }
+  ],
+  "consumersHint": {
+    "cli": [
+      "MonitorToolOptions"
+    ],
+    "server": [
+      "MonitorToolOptions"
+    ],
+    "sdk": [],
+    "note": "scanned cli@7ea76c7c server@bcf41646 sdk@2bff51e — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
+  },
+  "breakingCount": 0,
+  "breakingItems": [],
+  "toResolvedAt": "ee393c7d629f3ae8a2f3dbd906441aab40c31cd1"
+}