@sema-agent/core 7.49.1 → 7.49.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (34) hide show
  1. package/CHANGELOG.md +91 -0
  2. package/dist/core/arg-summary.js +23 -5
  3. package/dist/core/credential-vocabulary.js +19 -2
  4. package/dist/core/gate-fold.js +2 -2
  5. package/dist/core/runner/prepare-gate-stations.js +2 -2
  6. package/dist/core/runner/prepare-lsp.d.ts +4 -4
  7. package/dist/core/runner/prepare-lsp.js +2 -2
  8. package/dist/core/runner/prepare-safety-scan.js +10 -6
  9. package/dist/core/runner-deps.d.ts +2 -2
  10. package/dist/core/task-spec.d.ts +2 -2
  11. package/dist/core/tool-catalog-entries.js +1 -1
  12. package/dist/core/tool-conformance.js +2 -1
  13. package/dist/core/tool-roster.d.ts +11 -6
  14. package/dist/core/tool-roster.js +8 -4
  15. package/dist/core/write-protect.d.ts +3 -1
  16. package/dist/core/write-protect.js +4 -5
  17. package/dist/tools/fs/bash-readonly-classifier.d.ts +2 -2
  18. package/dist/tools/fs/bash-readonly-classifier.js +5 -3
  19. package/dist/tools/fs/read-deny-home.d.ts +5 -1
  20. package/dist/tools/fs/read-deny-home.js +40 -19
  21. package/dist/tools/fs/shell-read-check.d.ts +1 -1
  22. package/dist/tools/fs/shell-read-check.js +29 -15
  23. package/dist/tools/fs/shell-read-environment.d.ts +74 -0
  24. package/dist/tools/fs/shell-read-environment.js +71 -0
  25. package/dist/tools/fs/shell-read-establish.d.ts +8 -4
  26. package/dist/tools/fs/shell-read-establish.js +34 -36
  27. package/dist/tools/fs/shell-read-identity.d.ts +3 -2
  28. package/dist/tools/fs/shell-read-identity.js +5 -3
  29. package/dist/tools/fs/shell-read-judge.d.ts +69 -18
  30. package/dist/tools/fs/shell-read-judge.js +27 -14
  31. package/package.json +1 -1
  32. package/wire-changes/core@7.49.1.json +57 -0
  33. package/wire-changes/core@7.49.2.json +138 -0
  34. package/wire-changes/core@7.49.3.json +142 -0
@@ -0,0 +1,138 @@
1
+ {
2
+ "repo": "core",
3
+ "version": "7.49.2",
4
+ "from": "57363d52a115a659d902a81e8aad865ed98e2419",
5
+ "to": "50ffffb636bb70863f86ee9a74aee0c0a82891a0",
6
+ "added": [],
7
+ "removed": [],
8
+ "changed": [],
9
+ "narrowed": [],
10
+ "closedSetMembers": [
11
+ {
12
+ "set": "SHELL_READ_FINDINGS",
13
+ "at": [
14
+ "src/tools/fs/shell-read-judge.ts:34"
15
+ ],
16
+ "newSet": false,
17
+ "added": [
18
+ "unanswered"
19
+ ],
20
+ "removed": [],
21
+ "breaking": false,
22
+ "criteriaCovered": false
23
+ }
24
+ ],
25
+ "closedSetsUnreadable": [],
26
+ "typeKeys": [],
27
+ "typeKeysUnreadableArms": [],
28
+ "typeKeysFlattenedCount": 223,
29
+ "signatures": [
30
+ {
31
+ "name": "ShellReadBoundary.writeTargetJudge",
32
+ "at": [
33
+ "src/tools/fs/shell-read-judge.ts:191"
34
+ ],
35
+ "from": [
36
+ "(target: string, opts?: { readonly signal?: AbortSignal; readonly canonical?: true; }): Promise<\"protected\" | \"guarded\" | undefined>"
37
+ ],
38
+ "to": [
39
+ "(target: string, opts: { readonly fs: ObservedFilesystem; readonly signal?: AbortSignal; readonly canonical?: true; }): Promise<\"protected\" | \"guarded\" | undefined>"
40
+ ],
41
+ "changes": [
42
+ {
43
+ "aspect": "param",
44
+ "detail": "param 2 `opts` type changed, direction not read: { readonly [ -> fs: ObservedFilesystem; readonly ]signal?: AbortSignal; re…",
45
+ "breaking": true,
46
+ "uncertain": true
47
+ },
48
+ {
49
+ "aspect": "param",
50
+ "detail": "param 2 `opts` is now required",
51
+ "breaking": true
52
+ }
53
+ ],
54
+ "uncertain": "param 2 `opts` type changed, direction not read: { readonly [ -> fs: ObservedFilesystem; readonly ]signal?: AbortSignal; re… — the direction of a type change is not read syntactically, so it is reported breaking: check whether existing call sites still type-check before writing the BREAKING line",
55
+ "breaking": true,
56
+ "criteriaCovered": false
57
+ }
58
+ ],
59
+ "declarationMoves": [],
60
+ "mintMoves": [],
61
+ "criteriaObserves": [
62
+ {
63
+ "kind": "taskEventField",
64
+ "name": "tool_end.gate",
65
+ "assertions": [
66
+ "G3.a",
67
+ "G4.a"
68
+ ]
69
+ },
70
+ {
71
+ "kind": "typeMember",
72
+ "name": "AskRequest.askClass",
73
+ "assertions": [
74
+ "G1.b"
75
+ ]
76
+ },
77
+ {
78
+ "kind": "typeMember",
79
+ "name": "AskRequest.requiresRealApproval",
80
+ "assertions": [
81
+ "G1.a",
82
+ "G2.a",
83
+ "G3.a"
84
+ ]
85
+ },
86
+ {
87
+ "kind": "typeMember",
88
+ "name": "RedactionFinding.kind",
89
+ "assertions": [
90
+ "G5.a",
91
+ "G5.b"
92
+ ]
93
+ },
94
+ {
95
+ "kind": "typeMember",
96
+ "name": "RedactionFinding.span",
97
+ "assertions": [
98
+ "G5.a"
99
+ ]
100
+ },
101
+ {
102
+ "kind": "typeMember",
103
+ "name": "ShellReadVerdict.face",
104
+ "assertions": [
105
+ "G1.a",
106
+ "G2.a",
107
+ "G3.b"
108
+ ]
109
+ },
110
+ {
111
+ "kind": "typeMember",
112
+ "name": "ToolCatalogEntry.mountedBy",
113
+ "assertions": [
114
+ "G4.a"
115
+ ]
116
+ },
117
+ {
118
+ "kind": "typeMember",
119
+ "name": "ToolSpec.pathTarget",
120
+ "assertions": [
121
+ "G4.b"
122
+ ]
123
+ }
124
+ ],
125
+ "consumersHint": {
126
+ "cli": [
127
+ "SHELL_READ_FINDINGS",
128
+ "ShellReadBoundary"
129
+ ],
130
+ "server": [],
131
+ "sdk": [],
132
+ "note": "scanned cli@1aef2b83 server@5a38b2ce sdk@46baee2 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it. Ledger files (**/docs/core-consumption/**, **/docs/wire-consumption/**, **/*LEDGER*.json) are not evidence of use — server: 2 name(s) matched ONLY in bookkeeping files and were set aside (SHELL_READ_FINDINGS, ShellReadBoundary)"
133
+ },
134
+ "breakingCount": 1,
135
+ "breakingItems": [
136
+ "signature changed: ShellReadBoundary.writeTargetJudge — param 2 `opts` type changed, direction not read: { readonly [ -> fs: ObservedFilesystem; readonly ]signal?: AbortSignal; re…; param 2 `opts` is now required"
137
+ ]
138
+ }
@@ -0,0 +1,142 @@
1
+ {
2
+ "repo": "core",
3
+ "version": "7.49.3",
4
+ "from": "f1c55b07b7533fc1afdb428c6148d87e44744c2b",
5
+ "to": "2a6b9343850cb0c77213c7c9d8b52619b6a24148",
6
+ "added": [],
7
+ "removed": [],
8
+ "changed": [],
9
+ "narrowed": [],
10
+ "closedSetMembers": [],
11
+ "closedSetsUnreadable": [],
12
+ "typeKeys": [
13
+ {
14
+ "type": "ReadCandidate",
15
+ "at": [
16
+ "src/tools/fs/shell-read-plan.ts:140"
17
+ ],
18
+ "added": [
19
+ "device",
20
+ "through"
21
+ ],
22
+ "addedDetail": [
23
+ {
24
+ "key": "device",
25
+ "optional": true
26
+ },
27
+ {
28
+ "key": "through",
29
+ "optional": true
30
+ }
31
+ ],
32
+ "addedRequired": [],
33
+ "removed": [],
34
+ "breaking": false,
35
+ "criteriaCovered": false
36
+ },
37
+ {
38
+ "type": "ShellReadRedirect",
39
+ "at": [
40
+ "src/tools/fs/shell-read-plan.ts:189"
41
+ ],
42
+ "via": "ShellReadSegment.redirects",
43
+ "added": [
44
+ "fd"
45
+ ],
46
+ "addedDetail": [
47
+ {
48
+ "key": "fd",
49
+ "optional": true
50
+ }
51
+ ],
52
+ "addedRequired": [],
53
+ "removed": [],
54
+ "breaking": false,
55
+ "criteriaCovered": false
56
+ }
57
+ ],
58
+ "typeKeysUnreadableArms": [],
59
+ "typeKeysFlattenedCount": 223,
60
+ "signatures": [
61
+ {
62
+ "name": "readOnlyShellVerdict",
63
+ "at": [
64
+ "src/core/read-only-shell.ts:111"
65
+ ],
66
+ "from": [
67
+ "(command: string, shape?: ShellCommandShape, cwd?: string): ReadOnlyShellVerdict"
68
+ ],
69
+ "to": [
70
+ "(command: string, shape?: ShellCommandShape, cwd?: string, bound?: (() => LineDescriptors) | LineDescriptors): ReadOnlyShellVerdict"
71
+ ],
72
+ "changes": [
73
+ {
74
+ "aspect": "param",
75
+ "detail": "+optional param `bound?: (() => LineDescriptors) | LineDescriptors`",
76
+ "breaking": false
77
+ }
78
+ ],
79
+ "breaking": false,
80
+ "criteriaCovered": false
81
+ }
82
+ ],
83
+ "declarationMoves": [],
84
+ "mintMoves": [],
85
+ "criteriaObserves": [
86
+ {
87
+ "kind": "typeMember",
88
+ "name": "AskRequest.classes",
89
+ "assertions": [
90
+ "G1.a",
91
+ "G2.a",
92
+ "G7.a"
93
+ ]
94
+ },
95
+ {
96
+ "kind": "typeMember",
97
+ "name": "AskRequest.mandated",
98
+ "assertions": [
99
+ "G1.a",
100
+ "G7.a",
101
+ "G8.a"
102
+ ]
103
+ },
104
+ {
105
+ "kind": "typeMember",
106
+ "name": "AskRequest.requiresRealApproval",
107
+ "assertions": [
108
+ "G8.a"
109
+ ]
110
+ },
111
+ {
112
+ "kind": "typeMember",
113
+ "name": "RedactionReport.findings",
114
+ "assertions": [
115
+ "G4.a",
116
+ "G5.a",
117
+ "G6.a"
118
+ ]
119
+ },
120
+ {
121
+ "kind": "typeMember",
122
+ "name": "ShellReadVerdict.finding",
123
+ "assertions": [
124
+ "G3.a"
125
+ ]
126
+ }
127
+ ],
128
+ "consumersHint": {
129
+ "cli": [
130
+ "ReadCandidate",
131
+ "readOnlyShellVerdict"
132
+ ],
133
+ "server": [
134
+ "ReadCandidate",
135
+ "readOnlyShellVerdict"
136
+ ],
137
+ "sdk": [],
138
+ "note": "scanned cli@d23f3258 server@1922afc1 sdk@f1b30d4 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
139
+ },
140
+ "breakingCount": 0,
141
+ "breakingItems": []
142
+ }