@sema-agent/core 7.49.1 → 7.49.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +91 -0
- package/dist/core/arg-summary.js +23 -5
- package/dist/core/credential-vocabulary.js +19 -2
- package/dist/core/gate-fold.js +2 -2
- package/dist/core/runner/prepare-gate-stations.js +2 -2
- package/dist/core/runner/prepare-lsp.d.ts +4 -4
- package/dist/core/runner/prepare-lsp.js +2 -2
- package/dist/core/runner/prepare-safety-scan.js +10 -6
- package/dist/core/runner-deps.d.ts +2 -2
- package/dist/core/task-spec.d.ts +2 -2
- package/dist/core/tool-catalog-entries.js +1 -1
- package/dist/core/tool-conformance.js +2 -1
- package/dist/core/tool-roster.d.ts +11 -6
- package/dist/core/tool-roster.js +8 -4
- package/dist/core/write-protect.d.ts +3 -1
- package/dist/core/write-protect.js +4 -5
- package/dist/tools/fs/bash-readonly-classifier.d.ts +2 -2
- package/dist/tools/fs/bash-readonly-classifier.js +5 -3
- package/dist/tools/fs/read-deny-home.d.ts +5 -1
- package/dist/tools/fs/read-deny-home.js +40 -19
- package/dist/tools/fs/shell-read-check.d.ts +1 -1
- package/dist/tools/fs/shell-read-check.js +29 -15
- package/dist/tools/fs/shell-read-environment.d.ts +74 -0
- package/dist/tools/fs/shell-read-environment.js +71 -0
- package/dist/tools/fs/shell-read-establish.d.ts +8 -4
- package/dist/tools/fs/shell-read-establish.js +34 -36
- package/dist/tools/fs/shell-read-identity.d.ts +3 -2
- package/dist/tools/fs/shell-read-identity.js +5 -3
- package/dist/tools/fs/shell-read-judge.d.ts +69 -18
- package/dist/tools/fs/shell-read-judge.js +27 -14
- package/package.json +1 -1
- package/wire-changes/core@7.49.1.json +57 -0
- package/wire-changes/core@7.49.2.json +138 -0
- package/wire-changes/core@7.49.3.json +142 -0
|
@@ -0,0 +1,138 @@
|
|
|
1
|
+
{
|
|
2
|
+
"repo": "core",
|
|
3
|
+
"version": "7.49.2",
|
|
4
|
+
"from": "57363d52a115a659d902a81e8aad865ed98e2419",
|
|
5
|
+
"to": "50ffffb636bb70863f86ee9a74aee0c0a82891a0",
|
|
6
|
+
"added": [],
|
|
7
|
+
"removed": [],
|
|
8
|
+
"changed": [],
|
|
9
|
+
"narrowed": [],
|
|
10
|
+
"closedSetMembers": [
|
|
11
|
+
{
|
|
12
|
+
"set": "SHELL_READ_FINDINGS",
|
|
13
|
+
"at": [
|
|
14
|
+
"src/tools/fs/shell-read-judge.ts:34"
|
|
15
|
+
],
|
|
16
|
+
"newSet": false,
|
|
17
|
+
"added": [
|
|
18
|
+
"unanswered"
|
|
19
|
+
],
|
|
20
|
+
"removed": [],
|
|
21
|
+
"breaking": false,
|
|
22
|
+
"criteriaCovered": false
|
|
23
|
+
}
|
|
24
|
+
],
|
|
25
|
+
"closedSetsUnreadable": [],
|
|
26
|
+
"typeKeys": [],
|
|
27
|
+
"typeKeysUnreadableArms": [],
|
|
28
|
+
"typeKeysFlattenedCount": 223,
|
|
29
|
+
"signatures": [
|
|
30
|
+
{
|
|
31
|
+
"name": "ShellReadBoundary.writeTargetJudge",
|
|
32
|
+
"at": [
|
|
33
|
+
"src/tools/fs/shell-read-judge.ts:191"
|
|
34
|
+
],
|
|
35
|
+
"from": [
|
|
36
|
+
"(target: string, opts?: { readonly signal?: AbortSignal; readonly canonical?: true; }): Promise<\"protected\" | \"guarded\" | undefined>"
|
|
37
|
+
],
|
|
38
|
+
"to": [
|
|
39
|
+
"(target: string, opts: { readonly fs: ObservedFilesystem; readonly signal?: AbortSignal; readonly canonical?: true; }): Promise<\"protected\" | \"guarded\" | undefined>"
|
|
40
|
+
],
|
|
41
|
+
"changes": [
|
|
42
|
+
{
|
|
43
|
+
"aspect": "param",
|
|
44
|
+
"detail": "param 2 `opts` type changed, direction not read: { readonly [ -> fs: ObservedFilesystem; readonly ]signal?: AbortSignal; re…",
|
|
45
|
+
"breaking": true,
|
|
46
|
+
"uncertain": true
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"aspect": "param",
|
|
50
|
+
"detail": "param 2 `opts` is now required",
|
|
51
|
+
"breaking": true
|
|
52
|
+
}
|
|
53
|
+
],
|
|
54
|
+
"uncertain": "param 2 `opts` type changed, direction not read: { readonly [ -> fs: ObservedFilesystem; readonly ]signal?: AbortSignal; re… — the direction of a type change is not read syntactically, so it is reported breaking: check whether existing call sites still type-check before writing the BREAKING line",
|
|
55
|
+
"breaking": true,
|
|
56
|
+
"criteriaCovered": false
|
|
57
|
+
}
|
|
58
|
+
],
|
|
59
|
+
"declarationMoves": [],
|
|
60
|
+
"mintMoves": [],
|
|
61
|
+
"criteriaObserves": [
|
|
62
|
+
{
|
|
63
|
+
"kind": "taskEventField",
|
|
64
|
+
"name": "tool_end.gate",
|
|
65
|
+
"assertions": [
|
|
66
|
+
"G3.a",
|
|
67
|
+
"G4.a"
|
|
68
|
+
]
|
|
69
|
+
},
|
|
70
|
+
{
|
|
71
|
+
"kind": "typeMember",
|
|
72
|
+
"name": "AskRequest.askClass",
|
|
73
|
+
"assertions": [
|
|
74
|
+
"G1.b"
|
|
75
|
+
]
|
|
76
|
+
},
|
|
77
|
+
{
|
|
78
|
+
"kind": "typeMember",
|
|
79
|
+
"name": "AskRequest.requiresRealApproval",
|
|
80
|
+
"assertions": [
|
|
81
|
+
"G1.a",
|
|
82
|
+
"G2.a",
|
|
83
|
+
"G3.a"
|
|
84
|
+
]
|
|
85
|
+
},
|
|
86
|
+
{
|
|
87
|
+
"kind": "typeMember",
|
|
88
|
+
"name": "RedactionFinding.kind",
|
|
89
|
+
"assertions": [
|
|
90
|
+
"G5.a",
|
|
91
|
+
"G5.b"
|
|
92
|
+
]
|
|
93
|
+
},
|
|
94
|
+
{
|
|
95
|
+
"kind": "typeMember",
|
|
96
|
+
"name": "RedactionFinding.span",
|
|
97
|
+
"assertions": [
|
|
98
|
+
"G5.a"
|
|
99
|
+
]
|
|
100
|
+
},
|
|
101
|
+
{
|
|
102
|
+
"kind": "typeMember",
|
|
103
|
+
"name": "ShellReadVerdict.face",
|
|
104
|
+
"assertions": [
|
|
105
|
+
"G1.a",
|
|
106
|
+
"G2.a",
|
|
107
|
+
"G3.b"
|
|
108
|
+
]
|
|
109
|
+
},
|
|
110
|
+
{
|
|
111
|
+
"kind": "typeMember",
|
|
112
|
+
"name": "ToolCatalogEntry.mountedBy",
|
|
113
|
+
"assertions": [
|
|
114
|
+
"G4.a"
|
|
115
|
+
]
|
|
116
|
+
},
|
|
117
|
+
{
|
|
118
|
+
"kind": "typeMember",
|
|
119
|
+
"name": "ToolSpec.pathTarget",
|
|
120
|
+
"assertions": [
|
|
121
|
+
"G4.b"
|
|
122
|
+
]
|
|
123
|
+
}
|
|
124
|
+
],
|
|
125
|
+
"consumersHint": {
|
|
126
|
+
"cli": [
|
|
127
|
+
"SHELL_READ_FINDINGS",
|
|
128
|
+
"ShellReadBoundary"
|
|
129
|
+
],
|
|
130
|
+
"server": [],
|
|
131
|
+
"sdk": [],
|
|
132
|
+
"note": "scanned cli@1aef2b83 server@5a38b2ce sdk@46baee2 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it. Ledger files (**/docs/core-consumption/**, **/docs/wire-consumption/**, **/*LEDGER*.json) are not evidence of use — server: 2 name(s) matched ONLY in bookkeeping files and were set aside (SHELL_READ_FINDINGS, ShellReadBoundary)"
|
|
133
|
+
},
|
|
134
|
+
"breakingCount": 1,
|
|
135
|
+
"breakingItems": [
|
|
136
|
+
"signature changed: ShellReadBoundary.writeTargetJudge — param 2 `opts` type changed, direction not read: { readonly [ -> fs: ObservedFilesystem; readonly ]signal?: AbortSignal; re…; param 2 `opts` is now required"
|
|
137
|
+
]
|
|
138
|
+
}
|
|
@@ -0,0 +1,142 @@
|
|
|
1
|
+
{
|
|
2
|
+
"repo": "core",
|
|
3
|
+
"version": "7.49.3",
|
|
4
|
+
"from": "f1c55b07b7533fc1afdb428c6148d87e44744c2b",
|
|
5
|
+
"to": "2a6b9343850cb0c77213c7c9d8b52619b6a24148",
|
|
6
|
+
"added": [],
|
|
7
|
+
"removed": [],
|
|
8
|
+
"changed": [],
|
|
9
|
+
"narrowed": [],
|
|
10
|
+
"closedSetMembers": [],
|
|
11
|
+
"closedSetsUnreadable": [],
|
|
12
|
+
"typeKeys": [
|
|
13
|
+
{
|
|
14
|
+
"type": "ReadCandidate",
|
|
15
|
+
"at": [
|
|
16
|
+
"src/tools/fs/shell-read-plan.ts:140"
|
|
17
|
+
],
|
|
18
|
+
"added": [
|
|
19
|
+
"device",
|
|
20
|
+
"through"
|
|
21
|
+
],
|
|
22
|
+
"addedDetail": [
|
|
23
|
+
{
|
|
24
|
+
"key": "device",
|
|
25
|
+
"optional": true
|
|
26
|
+
},
|
|
27
|
+
{
|
|
28
|
+
"key": "through",
|
|
29
|
+
"optional": true
|
|
30
|
+
}
|
|
31
|
+
],
|
|
32
|
+
"addedRequired": [],
|
|
33
|
+
"removed": [],
|
|
34
|
+
"breaking": false,
|
|
35
|
+
"criteriaCovered": false
|
|
36
|
+
},
|
|
37
|
+
{
|
|
38
|
+
"type": "ShellReadRedirect",
|
|
39
|
+
"at": [
|
|
40
|
+
"src/tools/fs/shell-read-plan.ts:189"
|
|
41
|
+
],
|
|
42
|
+
"via": "ShellReadSegment.redirects",
|
|
43
|
+
"added": [
|
|
44
|
+
"fd"
|
|
45
|
+
],
|
|
46
|
+
"addedDetail": [
|
|
47
|
+
{
|
|
48
|
+
"key": "fd",
|
|
49
|
+
"optional": true
|
|
50
|
+
}
|
|
51
|
+
],
|
|
52
|
+
"addedRequired": [],
|
|
53
|
+
"removed": [],
|
|
54
|
+
"breaking": false,
|
|
55
|
+
"criteriaCovered": false
|
|
56
|
+
}
|
|
57
|
+
],
|
|
58
|
+
"typeKeysUnreadableArms": [],
|
|
59
|
+
"typeKeysFlattenedCount": 223,
|
|
60
|
+
"signatures": [
|
|
61
|
+
{
|
|
62
|
+
"name": "readOnlyShellVerdict",
|
|
63
|
+
"at": [
|
|
64
|
+
"src/core/read-only-shell.ts:111"
|
|
65
|
+
],
|
|
66
|
+
"from": [
|
|
67
|
+
"(command: string, shape?: ShellCommandShape, cwd?: string): ReadOnlyShellVerdict"
|
|
68
|
+
],
|
|
69
|
+
"to": [
|
|
70
|
+
"(command: string, shape?: ShellCommandShape, cwd?: string, bound?: (() => LineDescriptors) | LineDescriptors): ReadOnlyShellVerdict"
|
|
71
|
+
],
|
|
72
|
+
"changes": [
|
|
73
|
+
{
|
|
74
|
+
"aspect": "param",
|
|
75
|
+
"detail": "+optional param `bound?: (() => LineDescriptors) | LineDescriptors`",
|
|
76
|
+
"breaking": false
|
|
77
|
+
}
|
|
78
|
+
],
|
|
79
|
+
"breaking": false,
|
|
80
|
+
"criteriaCovered": false
|
|
81
|
+
}
|
|
82
|
+
],
|
|
83
|
+
"declarationMoves": [],
|
|
84
|
+
"mintMoves": [],
|
|
85
|
+
"criteriaObserves": [
|
|
86
|
+
{
|
|
87
|
+
"kind": "typeMember",
|
|
88
|
+
"name": "AskRequest.classes",
|
|
89
|
+
"assertions": [
|
|
90
|
+
"G1.a",
|
|
91
|
+
"G2.a",
|
|
92
|
+
"G7.a"
|
|
93
|
+
]
|
|
94
|
+
},
|
|
95
|
+
{
|
|
96
|
+
"kind": "typeMember",
|
|
97
|
+
"name": "AskRequest.mandated",
|
|
98
|
+
"assertions": [
|
|
99
|
+
"G1.a",
|
|
100
|
+
"G7.a",
|
|
101
|
+
"G8.a"
|
|
102
|
+
]
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
"kind": "typeMember",
|
|
106
|
+
"name": "AskRequest.requiresRealApproval",
|
|
107
|
+
"assertions": [
|
|
108
|
+
"G8.a"
|
|
109
|
+
]
|
|
110
|
+
},
|
|
111
|
+
{
|
|
112
|
+
"kind": "typeMember",
|
|
113
|
+
"name": "RedactionReport.findings",
|
|
114
|
+
"assertions": [
|
|
115
|
+
"G4.a",
|
|
116
|
+
"G5.a",
|
|
117
|
+
"G6.a"
|
|
118
|
+
]
|
|
119
|
+
},
|
|
120
|
+
{
|
|
121
|
+
"kind": "typeMember",
|
|
122
|
+
"name": "ShellReadVerdict.finding",
|
|
123
|
+
"assertions": [
|
|
124
|
+
"G3.a"
|
|
125
|
+
]
|
|
126
|
+
}
|
|
127
|
+
],
|
|
128
|
+
"consumersHint": {
|
|
129
|
+
"cli": [
|
|
130
|
+
"ReadCandidate",
|
|
131
|
+
"readOnlyShellVerdict"
|
|
132
|
+
],
|
|
133
|
+
"server": [
|
|
134
|
+
"ReadCandidate",
|
|
135
|
+
"readOnlyShellVerdict"
|
|
136
|
+
],
|
|
137
|
+
"sdk": [],
|
|
138
|
+
"note": "scanned cli@d23f3258 server@1922afc1 sdk@f1b30d4 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
|
|
139
|
+
},
|
|
140
|
+
"breakingCount": 0,
|
|
141
|
+
"breakingItems": []
|
|
142
|
+
}
|