@sema-agent/core 7.56.0 → 7.57.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (173) hide show
  1. package/CHANGELOG.md +541 -0
  2. package/LICENSE +1 -1
  3. package/dist/agents/org-delivery-gate.js +3 -4
  4. package/dist/agents/peer-held-queue.d.ts +69 -49
  5. package/dist/agents/peer-held-queue.js +255 -106
  6. package/dist/agents/peer-session-drain.js +63 -43
  7. package/dist/agents/send-message-tool.js +3 -2
  8. package/dist/agents/subagent.js +8 -8
  9. package/dist/brain/anthropic.js +16 -8
  10. package/dist/brain/open-responses.js +10 -8
  11. package/dist/brain/openai.js +11 -9
  12. package/dist/brain/provider-dialect.d.ts +3 -2
  13. package/dist/brain/provider-dialect.js +2 -2
  14. package/dist/brain/request-params.d.ts +6 -0
  15. package/dist/brain/request-params.js +14 -1
  16. package/dist/brain/stream-engine.d.ts +9 -0
  17. package/dist/brain/stream-engine.js +24 -10
  18. package/dist/brain/stream-shared.d.ts +5 -4
  19. package/dist/brain/stream-shared.js +4 -4
  20. package/dist/core/allow-entry.d.ts +3 -10
  21. package/dist/core/allow-entry.js +17 -25
  22. package/dist/core/approval-object.d.ts +21 -5
  23. package/dist/core/approval-object.js +44 -17
  24. package/dist/core/ask-origin.d.ts +2 -2
  25. package/dist/core/auto-compaction.d.ts +71 -6
  26. package/dist/core/auto-compaction.js +42 -26
  27. package/dist/core/background-agent-store.d.ts +6 -2
  28. package/dist/core/background-agent-store.js +1 -1
  29. package/dist/core/checkpoint-requirements.d.ts +7 -1
  30. package/dist/core/checkpoint-requirements.js +2 -0
  31. package/dist/core/checkpoint-store.d.ts +17 -29
  32. package/dist/core/checkpoint-store.js +19 -11
  33. package/dist/core/cross-boundary-taint.js +4 -2
  34. package/dist/core/engine-notice.d.ts +3 -2
  35. package/dist/core/engine-notice.js +6 -0
  36. package/dist/core/file-history-store.d.ts +14 -8
  37. package/dist/core/file-history-store.js +14 -4
  38. package/dist/core/gate-lanes.js +2 -3
  39. package/dist/core/hooks.d.ts +2 -2
  40. package/dist/core/mailbox-store.d.ts +62 -1
  41. package/dist/core/mailbox-store.js +59 -0
  42. package/dist/core/mcp-name-judge.d.ts +46 -0
  43. package/dist/core/mcp-name-judge.js +61 -0
  44. package/dist/core/mcp-probe.d.ts +1 -1
  45. package/dist/core/mcp-probe.js +2 -5
  46. package/dist/core/mcp.js +10 -30
  47. package/dist/core/memory-engine/consolidation-driver.js +4 -3
  48. package/dist/core/memory-engine/distiller.js +26 -17
  49. package/dist/core/memory-engine/layout.js +5 -2
  50. package/dist/core/park-selfcheck.js +2 -0
  51. package/dist/core/permission-rule-consent.d.ts +5 -3
  52. package/dist/core/permission-rule-consent.js +20 -15
  53. package/dist/core/permission-rule-model.d.ts +43 -2
  54. package/dist/core/permission-rule-model.js +52 -8
  55. package/dist/core/permission-rule-org.js +1 -1
  56. package/dist/core/protocol-http-auth.d.ts +16 -2
  57. package/dist/core/protocol-http-auth.js +42 -11
  58. package/dist/core/protocol-naming.d.ts +20 -0
  59. package/dist/core/protocol-naming.js +20 -3
  60. package/dist/core/read-only-shell.d.ts +20 -5
  61. package/dist/core/read-only-shell.js +29 -14
  62. package/dist/core/remote-env.d.ts +37 -1
  63. package/dist/core/remote-env.js +11 -0
  64. package/dist/core/resume-startup-cause.d.ts +24 -2
  65. package/dist/core/resume-startup-cause.js +20 -1
  66. package/dist/core/roles.js +50 -7
  67. package/dist/core/runner/compact-session.d.ts +10 -0
  68. package/dist/core/runner/compact-session.js +202 -0
  69. package/dist/core/runner/compaction-call-options.d.ts +2 -2
  70. package/dist/core/runner/compaction-seams.d.ts +21 -1
  71. package/dist/core/runner/compaction-seams.js +11 -8
  72. package/dist/core/runner/contracts.d.ts +23 -16
  73. package/dist/core/runner/derived-route-fallback.d.ts +13 -0
  74. package/dist/core/runner/derived-route-fallback.js +6 -0
  75. package/dist/core/runner/env-capability-census.d.ts +3 -2
  76. package/dist/core/runner/env-capability-census.js +9 -3
  77. package/dist/core/runner/permission-rule-lanes.d.ts +7 -7
  78. package/dist/core/runner/permission-rule-lanes.js +17 -11
  79. package/dist/core/runner/prepare-acquire-reconcile.d.ts +3 -0
  80. package/dist/core/runner/prepare-acquire-reconcile.js +2 -1
  81. package/dist/core/runner/prepare-config-doors.d.ts +6 -0
  82. package/dist/core/runner/prepare-config-doors.js +4 -3
  83. package/dist/core/runner/prepare-hands-readface.d.ts +3 -1
  84. package/dist/core/runner/prepare-hands-readface.js +2 -0
  85. package/dist/core/runner/prepare-park-ask.d.ts +2 -0
  86. package/dist/core/runner/prepare-park-ask.js +2 -2
  87. package/dist/core/runner/prepare-policy-chain.js +2 -4
  88. package/dist/core/runner/prepare-task.d.ts +4 -1
  89. package/dist/core/runner/prepare-task.js +23 -27
  90. package/dist/core/runner/prepare-tool-disclosure-mount.d.ts +13 -0
  91. package/dist/core/runner/prepare-tool-disclosure-mount.js +13 -7
  92. package/dist/core/runner/rewind-files.d.ts +2 -5
  93. package/dist/core/runner/rewind-files.js +9 -51
  94. package/dist/core/runner/run-leg.js +10 -21
  95. package/dist/core/runner/run-notification-lane.d.ts +2 -0
  96. package/dist/core/runner/run-notification-lane.js +2 -2
  97. package/dist/core/runner/run-recovery-lanes.js +3 -4
  98. package/dist/core/runner/run-settle-and-teardown.js +5 -11
  99. package/dist/core/runner/run-terminal-adoption.js +3 -4
  100. package/dist/core/runner/run-turn-boundary.js +3 -5
  101. package/dist/core/runner/runtask.d.ts +8 -1
  102. package/dist/core/runner/runtask.js +28 -34
  103. package/dist/core/runner/send-message-continuation.js +1 -1
  104. package/dist/core/runner/session-verb-doors.d.ts +28 -0
  105. package/dist/core/runner/session-verb-doors.js +48 -0
  106. package/dist/core/runner/session-write-ledger.d.ts +30 -0
  107. package/dist/core/runner/session-write-ledger.js +101 -0
  108. package/dist/core/runner/stream-settle-backstop.js +11 -14
  109. package/dist/core/runner/sub-agent-deny-lists.d.ts +25 -3
  110. package/dist/core/runner/sub-agent-deny-lists.js +21 -10
  111. package/dist/core/runner/teardown-bounded.d.ts +1 -0
  112. package/dist/core/runner/teardown-bounded.js +1 -0
  113. package/dist/core/runner-deps.d.ts +2 -2
  114. package/dist/core/secret-env.d.ts +4 -0
  115. package/dist/core/secret-env.js +3 -0
  116. package/dist/core/session-policy-store.d.ts +7 -2
  117. package/dist/core/session-policy-store.js +1 -1
  118. package/dist/core/shell-wrapper-projection.d.ts +1 -1
  119. package/dist/core/store-contracts/background-agent-store-contract.js +1 -0
  120. package/dist/core/store-contracts/checkpoint-store-contract.js +2 -1
  121. package/dist/core/store-contracts/file-history-store-contract.js +9 -0
  122. package/dist/core/store-contracts/mailbox-store-contract.js +49 -1
  123. package/dist/core/task-registry-agent.d.ts +8 -4
  124. package/dist/core/task-registry-agent.js +14 -8
  125. package/dist/core/task-registry-shared.d.ts +35 -6
  126. package/dist/core/task-registry-shared.js +11 -0
  127. package/dist/core/task-registry.d.ts +1 -1
  128. package/dist/core/task-registry.js +1 -1
  129. package/dist/core/tool-catalog-entries.d.ts +6 -0
  130. package/dist/core/tool-catalog-entries.js +1 -0
  131. package/dist/core/tool-name-aliases.d.ts +32 -2
  132. package/dist/core/tool-name-aliases.js +23 -0
  133. package/dist/core/tool-name-readings.d.ts +4 -0
  134. package/dist/core/tool-name-readings.js +1 -0
  135. package/dist/core/tool-policy.d.ts +10 -6
  136. package/dist/core/tool-policy.js +4 -7
  137. package/dist/core/trace.d.ts +4 -1
  138. package/dist/core/trace.js +2 -1
  139. package/dist/core/untrusted-egress.d.ts +20 -0
  140. package/dist/core/untrusted-egress.js +77 -3
  141. package/dist/engine/harness/agent-harness.d.ts +7 -5
  142. package/dist/engine/harness/agent-harness.js +11 -2
  143. package/dist/engine/loop/agent-loop.d.ts +1 -4
  144. package/dist/engine/loop/agent-loop.js +26 -4
  145. package/dist/index.d.ts +12 -7
  146. package/dist/index.js +7 -4
  147. package/dist/internal/harness.d.ts +2 -1
  148. package/dist/internal/harness.js +1 -0
  149. package/dist/primitives/credential-ref.d.ts +89 -0
  150. package/dist/primitives/credential-ref.js +125 -0
  151. package/dist/primitives/index.d.ts +2 -0
  152. package/dist/primitives/index.js +1 -0
  153. package/dist/stores/file/checkpoint-store.d.ts +0 -4
  154. package/dist/stores/file/checkpoint-store.js +0 -1
  155. package/dist/stores/file/file-history-store.js +12 -4
  156. package/dist/stores/file/mailbox-store.d.ts +2 -1
  157. package/dist/stores/file/mailbox-store.js +26 -1
  158. package/dist/tools/fs/bash-readonly-classifier.d.ts +15 -19
  159. package/dist/tools/fs/bash-readonly-classifier.js +5 -10
  160. package/dist/tools/fs/fs-bash.js +10 -3
  161. package/dist/tools/fs/pattern-kill-guard.d.ts +3 -2
  162. package/dist/tools/fs/pattern-kill-guard.js +68 -36
  163. package/dist/tools/fs/shell-read-check.d.ts +10 -0
  164. package/dist/tools/fs/shell-read-check.js +7 -1
  165. package/dist/tools/fs/shell-read-identity.d.ts +12 -9
  166. package/dist/tools/fs/shell-read-identity.js +9 -4
  167. package/dist/tools/web.js +9 -7
  168. package/package.json +1 -1
  169. package/test/export-surface.snapshot.json +79 -3
  170. package/wire-changes/core-stores-sql@7.57.0.json +29 -0
  171. package/wire-changes/core@7.57.0.json +1487 -0
  172. package/wire-changes/mods-kernel@7.57.0.json +29 -0
  173. package/wire-changes/primitives@7.57.0.json +245 -0
package/wire-changes/mods-kernel@7.57.0.json ADDED
@@ -0,0 +1,29 @@
1
+ {
2
+ "repo": "core",
3
+ "package": "@sema-agent/mods-kernel",
4
+ "version": "7.57.0",
5
+ "from": "f670b709158790d2f763935fd22da62d73e88c47",
6
+ "to": "v7.57.0",
7
+ "added": [],
8
+ "removed": [],
9
+ "changed": [],
10
+ "narrowed": [],
11
+ "closedSetMembers": [],
12
+ "closedSetsUnreadable": [],
13
+ "typeKeys": [],
14
+ "typeKeysUnreadableArms": [],
15
+ "typeKeysFlattenedCount": 1,
16
+ "signatures": [],
17
+ "declarationMoves": [],
18
+ "mintMoves": [],
19
+ "criteriaObserves": [],
20
+ "consumersHint": {
21
+ "cli": [],
22
+ "server": [],
23
+ "sdk": [],
24
+ "note": "scanned cli@d8289997 server@0c4fcc35 sdk@2c4a7c3 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
25
+ },
26
+ "breakingCount": 0,
27
+ "breakingItems": [],
28
+ "toResolvedAt": "b70cd95238e728c9652cf11d846cdb3338bff2c6"
29
+ }
package/wire-changes/primitives@7.57.0.json ADDED
@@ -0,0 +1,245 @@
1
+ {
2
+ "repo": "core",
3
+ "package": "@sema-agent/primitives",
4
+ "version": "7.57.0",
5
+ "from": "f670b709158790d2f763935fd22da62d73e88c47",
6
+ "to": "v7.57.0",
7
+ "added": [
8
+ {
9
+ "name": "CREDENTIAL_REF_KINDS",
10
+ "kind": "variable",
11
+ "tier": null,
12
+ "at": [
13
+ "src/credential-ref.ts:9",
14
+ "src/index.ts:3"
15
+ ],
16
+ "criteriaCovered": false,
17
+ "breaking": false
18
+ },
19
+ {
20
+ "name": "CREDENTIAL_REF_MAP_MAX",
21
+ "kind": "variable",
22
+ "tier": null,
23
+ "at": [
24
+ "src/credential-ref.ts:48",
25
+ "src/index.ts:6"
26
+ ],
27
+ "criteriaCovered": false,
28
+ "breaking": false
29
+ },
30
+ {
31
+ "name": "CREDENTIAL_REF_PROBLEM_REASONS",
32
+ "kind": "variable",
33
+ "tier": null,
34
+ "at": [
35
+ "src/credential-ref.ts:51",
36
+ "src/index.ts:7"
37
+ ],
38
+ "criteriaCovered": false,
39
+ "breaking": false
40
+ },
41
+ {
42
+ "name": "CREDENTIAL_REF_TEXT_MAX",
43
+ "kind": "variable",
44
+ "tier": null,
45
+ "at": [
46
+ "src/credential-ref.ts:45",
47
+ "src/index.ts:5"
48
+ ],
49
+ "criteriaCovered": false,
50
+ "breaking": false
51
+ },
52
+ {
53
+ "name": "CREDENTIAL_REF_TRUST",
54
+ "kind": "variable",
55
+ "tier": null,
56
+ "at": [
57
+ "src/credential-ref.ts:33",
58
+ "src/index.ts:4"
59
+ ],
60
+ "criteriaCovered": false,
61
+ "breaking": false
62
+ },
63
+ {
64
+ "name": "CredentialRef",
65
+ "kind": "type",
66
+ "tier": null,
67
+ "at": [
68
+ "src/credential-ref.ts:17",
69
+ "src/index.ts:9"
70
+ ],
71
+ "criteriaCovered": false,
72
+ "breaking": false
73
+ },
74
+ {
75
+ "name": "CredentialRefKind",
76
+ "kind": "type",
77
+ "tier": null,
78
+ "at": [
79
+ "src/credential-ref.ts:10",
80
+ "src/index.ts:10"
81
+ ],
82
+ "criteriaCovered": false,
83
+ "breaking": false
84
+ },
85
+ {
86
+ "name": "CredentialRefProblem",
87
+ "kind": "type",
88
+ "tier": null,
89
+ "at": [
90
+ "src/credential-ref.ts:60",
91
+ "src/index.ts:12"
92
+ ],
93
+ "criteriaCovered": false,
94
+ "breaking": false
95
+ },
96
+ {
97
+ "name": "CredentialRefProblemReason",
98
+ "kind": "type",
99
+ "tier": null,
100
+ "at": [
101
+ "src/credential-ref.ts:52",
102
+ "src/index.ts:13"
103
+ ],
104
+ "criteriaCovered": false,
105
+ "breaking": false
106
+ },
107
+ {
108
+ "name": "CredentialRefReading",
109
+ "kind": "type",
110
+ "tier": null,
111
+ "at": [
112
+ "src/credential-ref.ts:67",
113
+ "src/index.ts:14"
114
+ ],
115
+ "criteriaCovered": false,
116
+ "breaking": false
117
+ },
118
+ {
119
+ "name": "CredentialRefRequestAdmission",
120
+ "kind": "type",
121
+ "tier": null,
122
+ "at": [
123
+ "src/credential-ref.ts:24",
124
+ "src/index.ts:11"
125
+ ],
126
+ "criteriaCovered": false,
127
+ "breaking": false
128
+ },
129
+ {
130
+ "name": "readCredentialRef",
131
+ "kind": "function",
132
+ "tier": null,
133
+ "at": [
134
+ "src/credential-ref.ts:182",
135
+ "src/index.ts:8"
136
+ ],
137
+ "criteriaCovered": false,
138
+ "breaking": false
139
+ }
140
+ ],
141
+ "removed": [],
142
+ "changed": [],
143
+ "narrowed": [],
144
+ "closedSetMembers": [
145
+ {
146
+ "set": "CREDENTIAL_REF_KINDS",
147
+ "at": [
148
+ "src/credential-ref.ts:9"
149
+ ],
150
+ "newSet": true,
151
+ "added": [
152
+ "assertion",
153
+ "env",
154
+ "handle",
155
+ "vault"
156
+ ],
157
+ "removed": [],
158
+ "breaking": false,
159
+ "criteriaCovered": false
160
+ },
161
+ {
162
+ "set": "CREDENTIAL_REF_PROBLEM_REASONS",
163
+ "at": [
164
+ "src/credential-ref.ts:51"
165
+ ],
166
+ "newSet": true,
167
+ "added": [
168
+ "bad_value",
169
+ "extra_field",
170
+ "missing_field",
171
+ "not_a_record",
172
+ "unknown_kind"
173
+ ],
174
+ "removed": [],
175
+ "breaking": false,
176
+ "criteriaCovered": false
177
+ },
178
+ {
179
+ "set": "CredentialRefKind",
180
+ "at": [
181
+ "src/credential-ref.ts:10",
182
+ "src/index.ts:10"
183
+ ],
184
+ "newSet": true,
185
+ "added": [
186
+ "assertion",
187
+ "env",
188
+ "handle",
189
+ "vault"
190
+ ],
191
+ "removed": [],
192
+ "breaking": false,
193
+ "criteriaCovered": false
194
+ },
195
+ {
196
+ "set": "CredentialRefProblemReason",
197
+ "at": [
198
+ "src/credential-ref.ts:52",
199
+ "src/index.ts:13"
200
+ ],
201
+ "newSet": true,
202
+ "added": [
203
+ "bad_value",
204
+ "extra_field",
205
+ "missing_field",
206
+ "not_a_record",
207
+ "unknown_kind"
208
+ ],
209
+ "removed": [],
210
+ "breaking": false,
211
+ "criteriaCovered": false
212
+ },
213
+ {
214
+ "set": "CredentialRefRequestAdmission",
215
+ "at": [
216
+ "src/credential-ref.ts:24"
217
+ ],
218
+ "newSet": true,
219
+ "added": [
220
+ "own_entry",
221
+ "refused"
222
+ ],
223
+ "removed": [],
224
+ "breaking": false,
225
+ "criteriaCovered": false
226
+ }
227
+ ],
228
+ "closedSetsUnreadable": [],
229
+ "typeKeys": [],
230
+ "typeKeysUnreadableArms": [],
231
+ "typeKeysFlattenedCount": 0,
232
+ "signatures": [],
233
+ "declarationMoves": [],
234
+ "mintMoves": [],
235
+ "criteriaObserves": [],
236
+ "consumersHint": {
237
+ "cli": [],
238
+ "server": [],
239
+ "sdk": [],
240
+ "note": "scanned cli@d8289997 server@0c4fcc35 sdk@2c4a7c3 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
241
+ },
242
+ "breakingCount": 0,
243
+ "breakingItems": [],
244
+ "toResolvedAt": "b70cd95238e728c9652cf11d846cdb3338bff2c6"
245
+ }