@sema-agent/core 7.37.0 → 7.38.0

package/dist/tools/fs/bash-program-position.js

@@ -89,7 +89,7 @@ function launcherOptionStep(row, tok) {
         return 1;
     return undefined;
 }
-export const PROGRAM_POSITION_REFUSAL_KINDS = ["option_at_program_position", "control_syntax_at_program_position"];
+export const PROGRAM_POSITION_REFUSAL_KINDS = Object.freeze(["option_at_program_position", "control_syntax_at_program_position"]);
 export function readProgramPosition(words) {
     const folded = words.map((w) => w.folded);
     const controlWords = [];
@@ -172,7 +172,7 @@ export function argvReentryUnjudged(pos, acceptedTargets) {
     const runs = pos.program?.basename ?? (pos.runsDefaultProgram ? ARGV_REENTRY_DEFAULT_PROGRAM : undefined);
     return runs === undefined || !acceptedTargets.has(runs);
 }
-export const SHELL_SCAN_DECLINES = ["unreadable_program_position", "stream_fed_operands"];
+export const SHELL_SCAN_DECLINES = Object.freeze(["unreadable_program_position", "stream_fed_operands"]);
 export function programPositionRunsShell(pos, shellProgram) {
     if (pos.refusal !== undefined)
         return pos.refusal.kind === "control_syntax_at_program_position" && pos.refusal.runsShell === true;

package/dist/tools/fs/read-deny.js

@@ -11,7 +11,7 @@ export function readDenyRunHead(run) {
     const wild = segments.findIndex((seg) => seg.includes("*"));
     return wild === -1 ? segments.length : wild;
 }
-export const DENY_FACES = ["read", "write"];
+export const DENY_FACES = Object.freeze(["read", "write"]);
 export async function withRuleRowsWhereTheyLead(rows, leadsTo) {
     const leads = new Map();
     const partsOf = (head) => {
@@ -144,7 +144,7 @@ export function elideMiddle(s, budget) {
     const head = Math.ceil(keep / 2);
     return `${sliceHeadSafe(s, head)}\u2026${sliceTailSafe(s, keep - head)}`;
 }
-export const READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet", "agent-config"];
+export const READ_DENY_BUILTIN_TIERS = Object.freeze(["credentials", "shell-history", "browser", "wallet", "agent-config"]);
 export const READ_FACE_BUILTIN_DENY_TABLE = [
     { pattern: ".ssh", tier: "credentials" },
     { pattern: "id_rsa*", tier: "credentials" },

package/dist/tools/fs/safety.js

@@ -312,7 +312,7 @@ export function isUncSpelling(p) {
 export function isAbsoluteForFamily(family, p) {
     return family === "win" ? /^[A-Za-z]:[\\/]/.test(p) || isUncSpelling(p) : p.startsWith("/");
 }
-export const WIN32_NAMESPACE_REFUSALS = ["device_namespace", "unmappable_namespace", "unc_on_posix_tree", "drive_relative"];
+export const WIN32_NAMESPACE_REFUSALS = Object.freeze(["device_namespace", "unmappable_namespace", "unc_on_posix_tree", "drive_relative"]);
 export const WIN32_NAMESPACE_REFUSAL_TEXT = {
     device_namespace: "is a Win32 device-namespace path (\\\\.\\ names a raw device object, not a file)",
     unmappable_namespace: "is a Win32 extended-length namespace path with no DOS-path equivalent (only \\\\?\\<drive>: and \\\\?\\UNC\\ forms name files)",

package/dist/tools/fs/shell-read-judge.js

@@ -1,8 +1,8 @@
 import { hasWin32AliasedComponent, normalizeAbsPathLexically, withinAnyRoot } from "./safety.js";
 import { globInWord } from "./bash-readonly-classifier.js";
 import { readOfText } from "./shell-read-word.js";
-export const SHELL_READ_FINDINGS = ["deny_hit", "outside_roots", "unestablishable", "declined", "identity_changed", "none"];
-export const SHELL_READ_SEATS = ["full_shell", "readonly", "rejudge"];
+export const SHELL_READ_FINDINGS = Object.freeze(["deny_hit", "outside_roots", "unestablishable", "declined", "identity_changed", "none"]);
+export const SHELL_READ_SEATS = Object.freeze(["full_shell", "readonly", "rejudge"]);
 export const SHELL_READ_FINDING_RANK = {
     identity_changed: 6,
     deny_hit: 5,

package/dist/tools/fs/shell-read-plan.js

@@ -4,7 +4,7 @@ import { LAUNCHER_TABLE, SHELL_BLOCK_WORDS, programBasename, programPositionRuns
 import { ASSIGNMENT_VALUE_NOT_PATHS, DECLARATION_BUILTINS, INERT_BUILTINS, INTERPRETER_INLINE_PROGRAMS, NO_PATH_OPERAND_COMMANDS, NO_PATH_OPERAND_EVALUATORS, POLL_LOOP_MAX_BEATS, RECURSIVE_READ_FORMS, SHELL_REENTRY_PROGRAM_RE, UNMODELLED_BASE_MOVERS, argvProgramOf, homeMayBeRebound, attachedOptionPayloads, resolveOperandLexically, inlineProgramClause, interpreterKey, isPathShapedToken, messageSlotWords, readVerbOptionSlot, sedScriptSlotFiles, segmentSelectsRecursiveRead, slotValueCandidates, suppliesFirstOperandSlot, verbFirstOperandSlot, verbOptionsArePositionIndependent, } from "./bash-readonly-classifier.js";
 import { isAbsolutePathForm } from "./safety.js";
 import { codeBodies, reentryText } from "./shell-reentry-text.js";
-export const READ_CANDIDATE_PROVENANCES = [
+export const READ_CANDIDATE_PROVENANCES = Object.freeze([
     "operand",
     "option_value",
     "stdin_redirect",
@@ -15,7 +15,7 @@ export const READ_CANDIDATE_PROVENANCES = [
     "cd_target",
     "program_path",
     "script_slot_file",
-];
+]);
 const NESTING_MAX = 4;
 const BASE_CANDIDATE_MAX = 256;
 export function planShellReads(command, decl, depth = 0, homeRebound = false, arithmetic = false) {

package/dist/tools/fs/shell-read-write-targets.js

@@ -1,5 +1,5 @@
 import { denyFloorShadowsOf } from "./shell-read-judge.js";
-export const SHELL_WRITE_COMMANDS = ["mkdir", "touch", "rm", "rmdir", "mv", "cp", "tee", "sed"];
+export const SHELL_WRITE_COMMANDS = Object.freeze(["mkdir", "touch", "rm", "rmdir", "mv", "cp", "tee", "sed"]);
 const WRITE_COMMAND_SET = new Set(SHELL_WRITE_COMMANDS);
 export function spellsOption(word, long, short) {
     if (word.startsWith("--")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.37.0",
+  "version": "7.38.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2540,
+  "count": 2548,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -835,6 +835,7 @@
     "MonitorTimers": "interface",
     "MonitorToolOptions": "interface",
     "NOTICE_AUDIENCE": "variable",
+    "NOTICE_MINTER": "variable",
     "NOTIFICATION_INJECTION_OUTCOMES": "variable",
     "NO_PERSISTENT_MEMORY_NOTICE": "variable",
     "NamedToolPolicy": "type",
@@ -847,6 +848,7 @@
     "NormalizedReadDenyEntry": "interface",
     "NotePatch": "interface",
     "NoticeAudience": "type",
+    "NoticeMinter": "type",
     "NotificationInjectionOutcome": "type",
     "OFFLOAD_TOOL_NAME": "variable",
     "ORCHESTRATION_AWARENESS": "variable",
@@ -1503,6 +1505,7 @@
     "TOOL_SEARCH_DEFAULT_THRESHOLD_PERCENT": "variable",
     "TOOL_SEARCH_INVALID_CODE": "variable",
     "TOOL_SEARCH_POLICIES": "variable",
+    "TOOL_TURN_INCOMPLETE_CAUSES": "variable",
     "TOOL_WIRE_NAME_MAX_CHARS": "variable",
     "TSchema": "interface",
     "TaskAccess": "interface",
@@ -1538,6 +1541,7 @@
     "TerminalCause": "type",
     "TerminalClaimIntent": "type",
     "TerminalClaimOutcome": "type",
+    "TerminalFailureDetail": "interface",
     "TextContent": "interface",
     "ThinkingContent": "interface",
     "ThinkingLevel": "type",
@@ -1596,6 +1600,7 @@
     "ToolSearchPolicy": "type",
     "ToolSearchSetting": "type",
     "ToolSpec": "interface",
+    "ToolTurnIncompleteCause": "type",
     "TraceEvent": "type",
     "TracerHook": "type",
     "TrackEditRequest": "interface",
@@ -1611,6 +1616,7 @@
     "UNCOVERED_SEGMENT_REASON_BASELINE": "variable",
     "URL_SAFETY": "variable",
     "USAGE_WINDOW_REAP_MARGIN_MS": "variable",
+    "USER_STEER_UNDRAINED_CAUSES": "variable",
     "UnarmedDenialLimitFallback": "interface",
     "UncoveredSegmentDetail": "interface",
     "UnifiedTaskOutput": "interface",
@@ -1626,6 +1632,7 @@
     "UserMessage": "interface",
     "UserPromptSubmitContext": "interface",
     "UserPromptSubmitResult": "interface",
+    "UserSteerUndrainedCause": "type",
     "UtilityGate": "type",
     "V2HeaderHints": "interface",
     "VERIFICATION_PROMPT": "variable",
@@ -2446,6 +2453,7 @@
     "scopeCoversCwd": "function",
     "scopeDirName": "function",
     "screenApproverAttribution": "function",
+    "screenAskClassMembers": "function",
     "screenGateOutcome": "function",
     "screenInboundEntries": "function",
     "screenRuleSyncState": "function",
@@ -3377,6 +3385,7 @@
     "MonitorTimers": "advanced",
     "MonitorToolOptions": "advanced",
     "NOTICE_AUDIENCE": "advanced",
+    "NOTICE_MINTER": "advanced",
     "NOTIFICATION_INJECTION_OUTCOMES": "advanced",
     "NO_PERSISTENT_MEMORY_NOTICE": "advanced",
     "NamedToolPolicy": "advanced",
@@ -3389,6 +3398,7 @@
     "NormalizedReadDenyEntry": "stable",
     "NotePatch": "stable",
     "NoticeAudience": "advanced",
+    "NoticeMinter": "advanced",
     "NotificationInjectionOutcome": "advanced",
     "OFFLOAD_TOOL_NAME": "advanced",
     "ORCHESTRATION_AWARENESS": "advanced",
@@ -4045,6 +4055,7 @@
     "TOOL_SEARCH_DEFAULT_THRESHOLD_PERCENT": "advanced",
     "TOOL_SEARCH_INVALID_CODE": "advanced",
     "TOOL_SEARCH_POLICIES": "advanced",
+    "TOOL_TURN_INCOMPLETE_CAUSES": "advanced",
     "TOOL_WIRE_NAME_MAX_CHARS": "advanced",
     "TSchema": "advanced",
     "TaskAccess": "advanced",
@@ -4080,6 +4091,7 @@
     "TerminalCause": "advanced",
     "TerminalClaimIntent": "advanced",
     "TerminalClaimOutcome": "advanced",
+    "TerminalFailureDetail": "advanced",
     "TextContent": "advanced",
     "ThinkingContent": "advanced",
     "ThinkingLevel": "internal",
@@ -4138,6 +4150,7 @@
     "ToolSearchPolicy": "advanced",
     "ToolSearchSetting": "advanced",
     "ToolSpec": "stable",
+    "ToolTurnIncompleteCause": "advanced",
     "TraceEvent": "advanced",
     "TracerHook": "advanced",
     "TrackEditRequest": "advanced",
@@ -4153,6 +4166,7 @@
     "UNCOVERED_SEGMENT_REASON_BASELINE": "advanced",
     "URL_SAFETY": "advanced",
     "USAGE_WINDOW_REAP_MARGIN_MS": "internal",
+    "USER_STEER_UNDRAINED_CAUSES": "advanced",
     "UnarmedDenialLimitFallback": "advanced",
     "UncoveredSegmentDetail": "advanced",
     "UnifiedTaskOutput": "advanced",
@@ -4168,6 +4182,7 @@
     "UserMessage": "advanced",
     "UserPromptSubmitContext": "advanced",
     "UserPromptSubmitResult": "advanced",
+    "UserSteerUndrainedCause": "advanced",
     "UtilityGate": "advanced",
     "V2HeaderHints": "advanced",
     "VERIFICATION_PROMPT": "advanced",
@@ -4988,6 +5003,7 @@
     "scopeCoversCwd": "advanced",
     "scopeDirName": "advanced",
     "screenApproverAttribution": "advanced",
+    "screenAskClassMembers": "advanced",
     "screenGateOutcome": "advanced",
     "screenInboundEntries": "advanced",
     "screenRuleSyncState": "advanced",

package/wire-changes/core@7.37.1.json

@@ -0,0 +1,122 @@
+{
+  "repo": "core",
+  "version": "7.37.1",
+  "from": "979f761e382593d192c6c5b3170cb82cc676677c",
+  "to": "072c5d4502bddacb7b28e2e3f47653ad28c008a5",
+  "added": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "ENGINE_NOTICE_CODES",
+      "at": [
+        "src/core/governance-codes.ts:344"
+      ],
+      "newSet": false,
+      "added": [
+        "context.tool_turn_repaired"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "set": "TOOL_TURN_REPAIR_FORMS",
+      "at": [
+        "src/engine/llm/tool-turns.ts:43"
+      ],
+      "newSet": true,
+      "added": [
+        "duplicate_result",
+        "late_result",
+        "missing_result",
+        "trailing_text"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "ToolTurnRepairForm",
+      "at": [
+        "src/engine/llm/tool-turns.ts:44"
+      ],
+      "newSet": true,
+      "added": [
+        "duplicate_result",
+        "late_result",
+        "missing_result",
+        "trailing_text"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "closedSetsUnreadable": [],
+  "typeKeys": [],
+  "typeKeysUnreadableArms": [],
+  "typeKeysFlattenedCount": 219,
+  "declarationMoves": [],
+  "mintMoves": [],
+  "criteriaObserves": [
+    {
+      "kind": "engineNoticeCode",
+      "name": "context.tool_turn_repaired",
+      "assertions": [
+        "G1.b",
+        "G3.a",
+        "G3.b",
+        "G3.c"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AssistantMessage.content",
+      "assertions": [
+        "G1.a",
+        "G1.c",
+        "G2.a",
+        "G2.b"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AssistantMessage.errorMessage",
+      "assertions": [
+        "G2.c",
+        "G4.a",
+        "G4.b"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AssistantMessage.stopReason",
+      "assertions": [
+        "G2.c"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "EngineNotice.detail",
+      "assertions": [
+        "G1.b"
+      ]
+    }
+  ],
+  "consumersHint": {
+    "cli": [
+      "ENGINE_NOTICE_CODES"
+    ],
+    "server": [
+      "ENGINE_NOTICE_CODES"
+    ],
+    "sdk": [
+      "ENGINE_NOTICE_CODES"
+    ],
+    "note": "scanned cli@6b6025f7 server@65b2df99 sdk@a90a03a — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
+  },
+  "breakingCount": 0,
+  "breakingItems": []
+}