@sema-agent/core 7.50.2 → 7.51.0

package/dist/tools/fs/shell-read-judge.js

@@ -14,12 +14,16 @@ export const SHELL_READ_FINDING_RANK = {
     declined: 1,
     none: 0,
 };
-export function dispositionOfCell(cell, narrowedReadFace) {
-    return typeof cell === "string" ? cell : narrowedReadFace ? cell.narrowed : cell.open;
+export function dispositionOfCell(cell, context = {}) {
+    if (typeof cell === "string")
+        return cell;
+    if (context.redirectsOnly === true && cell.redirect !== undefined)
+        return cell.redirect;
+    return context.narrowedReadFace !== false ? cell.narrowed : cell.open;
 }
 export const SHELL_READ_DECISION = {
     deny_hit: { full_shell: "refuse", readonly: "refuse", rejudge: "refuse" },
-    outside_roots: { full_shell: "mandated", readonly: "refuse", rejudge: "refuse" },
+    outside_roots: { full_shell: { narrowed: "mandated", open: "mandated", redirect: "ordinary" }, readonly: "refuse", rejudge: "refuse" },
     unestablishable: { full_shell: { narrowed: "mandated", open: "ordinary" }, readonly: "refuse", rejudge: "refuse" },
     declined: { full_shell: "ordinary", readonly: "refuse", rejudge: "refuse" },
     identity_changed: { full_shell: "refuse", readonly: "refuse", rejudge: "refuse" },
@@ -27,19 +31,17 @@ export const SHELL_READ_DECISION = {
     none: { full_shell: "vouch", readonly: "vouch", rejudge: "vouch" },
 };
 export function decideShellRead(finding, seat, context = {}) {
-    const redirectCell = context.redirectsOnly === true && Object.hasOwn(SHELL_REDIRECT_DECISION, finding) ? SHELL_REDIRECT_DECISION[finding]?.[seat] : undefined;
-    if (redirectCell !== undefined)
-        return redirectCell;
     const row = Object.hasOwn(SHELL_READ_DECISION, finding) ? SHELL_READ_DECISION[finding] : undefined;
     const cell = row !== undefined && Object.hasOwn(row, seat) ? row[seat] : undefined;
     if (cell === undefined) {
         throw new Error(`shell read decision: no cell for finding ${JSON.stringify(finding)} on seat ${JSON.stringify(seat)} — the seats are ${SHELL_READ_SEATS.map((w) => JSON.stringify(w)).join(", ")} (a seat names the face the command runs on)`);
     }
-    return dispositionOfCell(cell, context.narrowedReadFace !== false);
+    return dispositionOfCell(cell, context);
+}
+export function dispositionsOfRow(finding) {
+    const row = Object.hasOwn(SHELL_READ_DECISION, finding) ? SHELL_READ_DECISION[finding] : undefined;
+    return new Set(Object.values(row ?? {}).flatMap((cell) => (typeof cell === "string" ? [cell] : [cell.narrowed, cell.open, ...(cell.redirect !== undefined ? [cell.redirect] : [])])));
 }
-const SHELL_REDIRECT_DECISION = {
-    outside_roots: { full_shell: "ordinary" },
-};
 export function judgeRead(read, boundary) {
     const writeTarget = read.candidate.face === "write";
     const deny = writeTarget ? boundary.writeDenyMatch : boundary.denyMatch;

package/dist/tools/web.js

@@ -2,7 +2,7 @@ import { Type } from "typebox";
 import { defineTool, errorResult } from "../core/tools.js";
 import { delimitUntrusted, inlineUntrusted } from "../core/untrusted-text.js";
 import { discloseReminderShaped, observeReminderMarkEcho } from "../core/reminder-disclosure.js";
-import { redactSecrets } from "../core/untrusted-egress.js";
+import { egressThrownText } from "../core/untrusted-egress.js";
 import { isPrivateHost } from "../core/runner/image.js";
 import { DEFAULT_CHARS_PER_TOKEN } from "../internal/harness.js";
 import { binaryMagicFormat } from "./fs/safety.js";
@@ -911,7 +911,7 @@ export function createWebSearchTool(config) {
                     return abortedFrame();
                 if (ac.signal.aborted)
                     return timedOutFrame();
-                const msg = redactSecrets(thrownText(e)).trim();
+                const msg = egressThrownText("same-principal", e).trim();
                 const headline = "Error (WebSearch): the search backend failed.";
                 const verdict = classifySearchFailure(msg);
                 const composed = (msg ? `${headline} The backend's error text follows:\n\n${delimitUntrusted("WebSearch backend error", msg, SEARCH_ERROR_EXCERPT_CHARS)}` : headline) + `\n\n${verdict.hint}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.50.2",
+  "version": "7.51.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",