@sema-agent/core 7.51.0 → 7.51.2

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a BREAKING change: name every removed entry in the CHANGELOG's BREAKING lines (what was removed / who is hurt / what to read instead) and update this fixture in the SAME commit. Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2670,
+  "count": 2686,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -199,6 +199,7 @@
     "BOUND_GRANT_ABSENCES": "variable",
     "BUILTIN_COMPLIANCE_DENIES": "variable",
     "BUILTIN_READONLY_DENY_TOOLS": "variable",
+    "BUILTIN_SUBAGENT_TYPES": "variable",
     "BackgroundAgentQuery": "interface",
     "BackgroundAgentRecord": "interface",
     "BackgroundAgentRowSummary": "interface",
@@ -236,6 +237,7 @@
     "BreakerState": "interface",
     "BudgetAxis": "type",
     "BuildAutoModePromptOptions": "interface",
+    "BuiltinSubagentType": "type",
     "BundleChallengeRow": "interface",
     "BundleLineageRow": "interface",
     "BundlePollutedSession": "interface",
@@ -453,6 +455,7 @@
     "EMPTY_USAGE_WINDOW_RECORD": "variable",
     "ENGINE_AUTHORITY_ENVELOPE_TAGS": "variable",
     "ENGINE_BUILTIN_TOOL_NAMES": "variable",
+    "ENGINE_CAPABILITIES": "variable",
     "ENGINE_NOTICE_CODES": "variable",
     "ENTER_PLAN_MODE_TOOL_NAME": "variable",
     "ENV_LIFETIME_SUSPEND_MARGIN_MS": "variable",
@@ -475,6 +478,7 @@
     "EgressTier": "type",
     "Embedder": "interface",
     "EngineAttestation": "interface",
+    "EngineCapability": "type",
     "EngineNotice": "interface",
     "EngineNoticeCode": "type",
     "EntryCustodyReport": "interface",
@@ -637,6 +641,7 @@
     "InMemoryWorkflowJournalStore": "class",
     "InMemoryWorkflowRunStore": "class",
     "InboundEntryFinding": "interface",
+    "InheritEnvPolicy": "type",
     "Invariant": "interface",
     "InvariantKind": "type",
     "InvariantViolation": "interface",
@@ -791,6 +796,7 @@
     "McpServerLiveness": "interface",
     "McpServerSpec": "interface",
     "McpServerStatus": "interface",
+    "McpToolAxesRead": "type",
     "McpToolFace": "type",
     "MediaDescriptor": "type",
     "MediaStripInfo": "interface",
@@ -1147,6 +1153,7 @@
     "PromptSourceStateStore": "interface",
     "PromptTextDeclaration": "interface",
     "PromptTrust": "type",
+    "ProtocolHttpAuth": "interface",
     "ProtocolId": "type",
     "ProtocolNamespace": "interface",
     "ProviderCondition": "type",
@@ -1387,6 +1394,7 @@
     "SESSION_BOX_PREFIX": "variable",
     "SESSION_CAPTURE_OPTOUT_DIR": "variable",
     "SESSION_LOG_DIGEST_SCHEME": "variable",
+    "SESSION_RULES_GRAMMAR": "variable",
     "SETTLEMENT_IS_REFUSAL": "variable",
     "SETTLEMENT_KINDS": "variable",
     "SETTLEMENT_PARTIES": "variable",
@@ -1468,6 +1476,7 @@
     "SessionRuleEntryRefusal": "interface",
     "SessionRulePartition": "interface",
     "SessionRuleShapeRefusal": "interface",
+    "SessionRulesInGrammar": "type",
     "SessionRulesRecord": "interface",
     "SessionStorage": "interface",
     "SessionStore": "interface",
@@ -1955,6 +1964,7 @@
     "compactableToolNames": "function",
     "compileAllowList": "function",
     "compileReadDeny": "function",
+    "compileSessionRuleBucket": "function",
     "compileWriteDeny": "function",
     "compileWriteProtection": "function",
     "complianceCallDenial": "function",
@@ -2049,6 +2059,7 @@
     "debitLedger": "function",
     "decideAutoPromote": "function",
     "decisionText": "function",
+    "declareWithheldEnv": "function",
     "declaredOffSpelling": "function",
     "declaredPathTargetOf": "function",
     "decodeCcPeerFrame": "function",
@@ -2181,7 +2192,10 @@
     "hasScheduler": "function",
     "hasSessionFork": "function",
     "hasToolContract": "function",
+    "headerOwnershipCollision": "function",
     "htmlToText": "function",
+    "inheritEnvPolicyProblem": "function",
+    "inheritedHostEnv": "function",
     "injectionLaneOf": "function",
     "inlineUntrusted": "function",
     "inputKeysOf": "function",
@@ -2429,6 +2443,7 @@
     "readIntentCredentials": "function",
     "readJsonlRecords": "function",
     "readMailboxPeerMeta": "function",
+    "readMcpToolAxes": "function",
     "readOnlyShellVerdict": "function",
     "readPeerSessionRecord": "function",
     "readPendingSteerQueue": "function",
@@ -2629,6 +2644,7 @@
     "toolCallFaceOf": "function",
     "toolFaceProblem": "function",
     "toolIdentityOf": "function",
+    "toolOutputBlockChars": "variable",
     "toolPolicyNameSets": "function",
     "toolPolicyPathRules": "function",
     "toolResultContentSegment": "function",
@@ -2871,6 +2887,7 @@
     "BOUND_GRANT_ABSENCES": "advanced",
     "BUILTIN_COMPLIANCE_DENIES": "advanced",
     "BUILTIN_READONLY_DENY_TOOLS": "advanced",
+    "BUILTIN_SUBAGENT_TYPES": "advanced",
     "BackgroundAgentQuery": "advanced",
     "BackgroundAgentRecord": "advanced",
     "BackgroundAgentRowSummary": "advanced",
@@ -2908,6 +2925,7 @@
     "BreakerState": "stable",
     "BudgetAxis": "internal",
     "BuildAutoModePromptOptions": "advanced",
+    "BuiltinSubagentType": "advanced",
     "BundleChallengeRow": "advanced",
     "BundleLineageRow": "advanced",
     "BundlePollutedSession": "advanced",
@@ -3125,6 +3143,7 @@
     "EMPTY_USAGE_WINDOW_RECORD": "advanced",
     "ENGINE_AUTHORITY_ENVELOPE_TAGS": "advanced",
     "ENGINE_BUILTIN_TOOL_NAMES": "advanced",
+    "ENGINE_CAPABILITIES": "advanced",
     "ENGINE_NOTICE_CODES": "advanced",
     "ENTER_PLAN_MODE_TOOL_NAME": "advanced",
     "ENV_LIFETIME_SUSPEND_MARGIN_MS": "internal",
@@ -3147,6 +3166,7 @@
     "EgressTier": "advanced",
     "Embedder": "advanced",
     "EngineAttestation": "advanced",
+    "EngineCapability": "advanced",
     "EngineNotice": "advanced",
     "EngineNoticeCode": "advanced",
     "EntryCustodyReport": "advanced",
@@ -3309,6 +3329,7 @@
     "InMemoryWorkflowJournalStore": "advanced",
     "InMemoryWorkflowRunStore": "advanced",
     "InboundEntryFinding": "advanced",
+    "InheritEnvPolicy": "advanced",
     "Invariant": "advanced",
     "InvariantKind": "advanced",
     "InvariantViolation": "advanced",
@@ -3463,6 +3484,7 @@
     "McpServerLiveness": "advanced",
     "McpServerSpec": "advanced",
     "McpServerStatus": "advanced",
+    "McpToolAxesRead": "advanced",
     "McpToolFace": "internal",
     "MediaDescriptor": "advanced",
     "MediaStripInfo": "advanced",
@@ -3819,6 +3841,7 @@
     "PromptSourceStateStore": "advanced",
     "PromptTextDeclaration": "advanced",
     "PromptTrust": "advanced",
+    "ProtocolHttpAuth": "advanced",
     "ProtocolId": "advanced",
     "ProtocolNamespace": "advanced",
     "ProviderCondition": "advanced",
@@ -4059,6 +4082,7 @@
     "SESSION_BOX_PREFIX": "advanced",
     "SESSION_CAPTURE_OPTOUT_DIR": "advanced",
     "SESSION_LOG_DIGEST_SCHEME": "internal",
+    "SESSION_RULES_GRAMMAR": "advanced",
     "SETTLEMENT_IS_REFUSAL": "advanced",
     "SETTLEMENT_KINDS": "advanced",
     "SETTLEMENT_PARTIES": "advanced",
@@ -4140,6 +4164,7 @@
     "SessionRuleEntryRefusal": "advanced",
     "SessionRulePartition": "advanced",
     "SessionRuleShapeRefusal": "advanced",
+    "SessionRulesInGrammar": "advanced",
     "SessionRulesRecord": "advanced",
     "SessionStorage": "internal",
     "SessionStore": "advanced",
@@ -4627,6 +4652,7 @@
     "compactableToolNames": "advanced",
     "compileAllowList": "advanced",
     "compileReadDeny": "advanced",
+    "compileSessionRuleBucket": "advanced",
     "compileWriteDeny": "advanced",
     "compileWriteProtection": "advanced",
     "complianceCallDenial": "advanced",
@@ -4721,6 +4747,7 @@
     "debitLedger": "advanced",
     "decideAutoPromote": "advanced",
     "decisionText": "advanced",
+    "declareWithheldEnv": "advanced",
     "declaredOffSpelling": "advanced",
     "declaredPathTargetOf": "advanced",
     "decodeCcPeerFrame": "advanced",
@@ -4853,7 +4880,10 @@
     "hasScheduler": "advanced",
     "hasSessionFork": "advanced",
     "hasToolContract": "advanced",
+    "headerOwnershipCollision": "advanced",
     "htmlToText": "advanced",
+    "inheritEnvPolicyProblem": "advanced",
+    "inheritedHostEnv": "advanced",
     "injectionLaneOf": "advanced",
     "inlineUntrusted": "advanced",
     "inputKeysOf": "advanced",
@@ -5101,6 +5131,7 @@
     "readIntentCredentials": "advanced",
     "readJsonlRecords": "advanced",
     "readMailboxPeerMeta": "advanced",
+    "readMcpToolAxes": "advanced",
     "readOnlyShellVerdict": "advanced",
     "readPeerSessionRecord": "advanced",
     "readPendingSteerQueue": "advanced",
@@ -5301,6 +5332,7 @@
     "toolCallFaceOf": "advanced",
     "toolFaceProblem": "internal",
     "toolIdentityOf": "advanced",
+    "toolOutputBlockChars": "internal",
     "toolPolicyNameSets": "advanced",
     "toolPolicyPathRules": "advanced",
     "toolResultContentSegment": "advanced",

package/wire-changes/core@7.51.1.json

@@ -0,0 +1,259 @@
+{
+  "repo": "core",
+  "version": "7.51.1",
+  "from": "d990eb2fd73215c09bf254545bdab6f1080c0c98",
+  "to": "v7.51.1",
+  "added": [
+    {
+      "name": "ENGINE_CAPABILITIES",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/engine-capabilities.ts:13",
+        "src/index.ts:516"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "EngineCapability",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/engine-capabilities.ts:16",
+        "src/index.ts:516"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "InheritEnvPolicy",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/secret-env.ts:220",
+        "src/index.ts:515"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ProtocolHttpAuth",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/protocol-http-auth.ts:18",
+        "src/index.ts:2985"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "declareWithheldEnv",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/secret-env.ts:278",
+        "src/index.ts:515"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "headerOwnershipCollision",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/protocol-http-auth.ts:24",
+        "src/index.ts:2984"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "inheritEnvPolicyProblem",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/secret-env.ts:341",
+        "src/index.ts:515"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "inheritedHostEnv",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/secret-env.ts:326",
+        "src/index.ts:515"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "toolOutputBlockChars",
+      "kind": "variable",
+      "tier": "internal",
+      "at": [
+        "src/core/runner/tool-output-projection.ts:28",
+        "src/index.ts:34"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    }
+  ],
+  "removed": [],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "ENGINE_CAPABILITIES",
+      "at": [
+        "src/core/engine-capabilities.ts:13"
+      ],
+      "newSet": true,
+      "added": [
+        "inherit_env.own_credentials_withheld"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "EngineCapability",
+      "at": [
+        "src/core/engine-capabilities.ts:16",
+        "src/index.ts:516"
+      ],
+      "newSet": true,
+      "added": [
+        "inherit_env.own_credentials_withheld"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "SecretEnvFindingKind",
+      "at": [
+        "src/core/secret-env.ts:149"
+      ],
+      "newSet": false,
+      "added": [
+        "own-credential"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "closedSetsUnreadable": [],
+  "typeKeys": [],
+  "typeKeysUnreadableArms": [],
+  "typeKeysFlattenedCount": 234,
+  "signatures": [],
+  "declarationMoves": [
+    {
+      "name": "InheritEnvPolicy",
+      "kind": "type",
+      "onSurface": true,
+      "from": [
+        "src/core/secret-env.ts"
+      ],
+      "to": [
+        "src/core/secret-env.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "ProtocolHttpAuth",
+      "kind": "interface",
+      "onSurface": true,
+      "from": [
+        "src/core/protocol-http-auth.ts"
+      ],
+      "to": [
+        "src/core/protocol-http-auth.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "headerOwnershipCollision",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/protocol-http-auth.ts"
+      ],
+      "to": [
+        "src/core/protocol-http-auth.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "inheritEnvPolicyProblem",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/secret-env.ts"
+      ],
+      "to": [
+        "src/core/secret-env.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "inheritedHostEnv",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/secret-env.ts"
+      ],
+      "to": [
+        "src/core/secret-env.ts",
+        "src/index.ts"
+      ]
+    }
+  ],
+  "mintMoves": [],
+  "criteriaObserves": [
+    {
+      "kind": "engineNoticeCode",
+      "name": "config.secret_env_scrubbed",
+      "assertions": [
+        "G1.b"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.totalChars",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "SecretEnvFinding.kind",
+      "assertions": [
+        "G1.a",
+        "G1.c"
+      ]
+    }
+  ],
+  "consumersHint": {
+    "cli": [
+      "InheritEnvPolicy",
+      "SecretEnvFindingKind"
+    ],
+    "server": [
+      "InheritEnvPolicy",
+      "SecretEnvFindingKind"
+    ],
+    "sdk": [],
+    "note": "scanned cli@d742f6fd server@52b73a9c sdk@304339d — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it. Ledger files (**/docs/core-consumption/**, **/docs/wire-consumption/**, **/*LEDGER*.json) are not evidence of use — server: 8 name(s) matched ONLY in bookkeeping files and were set aside (ENGINE_CAPABILITIES, EngineCapability, ProtocolHttpAuth, declareWithheldEnv, headerOwnershipCollision, inheritEnvPolicyProblem, inheritedHostEnv, toolOutputBlockChars)"
+  },
+  "breakingCount": 0,
+  "breakingItems": [],
+  "toResolvedAt": "a5c7c33244f7b139e674093f35159037fdfb63da"
+}