@sema-agent/core 7.9.0 → 7.9.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (61) hide show
  1. package/CHANGELOG.md +39 -0
  2. package/dist/agents/child-model-seat.d.ts +51 -0
  3. package/dist/agents/child-model-seat.js +34 -0
  4. package/dist/agents/subagent.d.ts +4 -2
  5. package/dist/agents/subagent.js +16 -12
  6. package/dist/core/ask-origin.d.ts +7 -3
  7. package/dist/core/checkpoint-store.d.ts +2 -7
  8. package/dist/core/effective-path-target.d.ts +43 -0
  9. package/dist/core/effective-path-target.js +56 -0
  10. package/dist/core/engine-notice.d.ts +8 -0
  11. package/dist/core/fs-write-gate-policy.js +2 -1
  12. package/dist/core/gate-lanes.d.ts +1 -0
  13. package/dist/core/gate-lanes.js +11 -5
  14. package/dist/core/governance-codes.d.ts +1 -1
  15. package/dist/core/governance-codes.js +2 -0
  16. package/dist/core/hooks.d.ts +10 -1
  17. package/dist/core/mcp-injection-drop.d.ts +74 -0
  18. package/dist/core/mcp-injection-drop.js +27 -0
  19. package/dist/core/permission-rule-model.d.ts +91 -75
  20. package/dist/core/permission-rule-model.js +90 -111
  21. package/dist/core/permission-rule-org.d.ts +12 -6
  22. package/dist/core/permission-rule-org.js +9 -3
  23. package/dist/core/permission-rules.d.ts +3 -2
  24. package/dist/core/permission-rules.js +38 -15
  25. package/dist/core/persisted-rule-arms.d.ts +7 -2
  26. package/dist/core/persisted-rule-arms.js +3 -1
  27. package/dist/core/roles.d.ts +8 -0
  28. package/dist/core/runner/active-skill-scope.js +2 -1
  29. package/dist/core/runner/contracts.d.ts +3 -2
  30. package/dist/core/runner/permission-rule-lanes.d.ts +12 -4
  31. package/dist/core/runner/permission-rule-lanes.js +13 -15
  32. package/dist/core/runner/prepare-caps-and-workflow.js +2 -2
  33. package/dist/core/runner/runtask.d.ts +2 -1
  34. package/dist/core/runner/runtask.js +1 -1
  35. package/dist/core/runner/session-rule-policy.js +2 -1
  36. package/dist/core/runner/tool-face-overlay.js +22 -3
  37. package/dist/core/sensitive-path-policy.js +5 -3
  38. package/dist/core/shell-lexer.d.ts +47 -0
  39. package/dist/core/shell-lexer.js +478 -0
  40. package/dist/core/shell-scan.d.ts +60 -0
  41. package/dist/core/shell-scan.js +183 -0
  42. package/dist/core/shell-wrapper-table.d.ts +297 -0
  43. package/dist/core/shell-wrapper-table.js +58 -0
  44. package/dist/core/tool-catalog-entries.js +6 -6
  45. package/dist/core/tool-face.d.ts +80 -4
  46. package/dist/core/tool-face.js +10 -0
  47. package/dist/core/tool-policy.d.ts +1 -6
  48. package/dist/core/tool-registry.d.ts +8 -11
  49. package/dist/core/tool-registry.js +5 -2
  50. package/dist/core/tool-roster.d.ts +11 -2
  51. package/dist/core/tool-roster.js +21 -3
  52. package/dist/index.d.ts +6 -3
  53. package/dist/index.js +5 -2
  54. package/dist/orchestration/workflow.js +21 -4
  55. package/dist/tools/fs/fs-search-tools.d.ts +3 -2
  56. package/dist/tools/fs/fs-search-tools.js +17 -9
  57. package/dist/tools/fs/index.js +1 -1
  58. package/dist/tools/fs/search.d.ts +0 -8
  59. package/dist/tools/fs/search.js +0 -23
  60. package/package.json +1 -1
  61. package/test/export-surface.snapshot.json +57 -1
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
3
3
  "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
4
- "count": 2206,
4
+ "count": 2234,
5
5
  "exports": {
6
6
  "A2ATaskState": "type",
7
7
  "A2ATaskStateReversal": "type",
@@ -568,12 +568,15 @@
568
568
  "MAX_PENDING_STEER_CHARS": "variable",
569
569
  "MAX_PENDING_STEER_ENTRIES": "variable",
570
570
  "MAX_RULE_TEXT_CHARS": "variable",
571
+ "MAX_SHELL_READ_CHARS": "variable",
571
572
  "MAX_STEER_INPUT_ID_CHARS": "variable",
572
573
  "MAX_SUPPORTED_CHECKPOINT_VERSION": "variable",
573
574
  "MAX_WORKFLOW_ITEMS": "variable",
574
575
  "MCP_DELIVERY_VERDICTS": "variable",
575
576
  "MCP_FAILURE_KINDS": "variable",
576
577
  "MCP_IMAGE_MAX_BASE64": "variable",
578
+ "MCP_INJECTION_DROP_REASONS": "variable",
579
+ "MCP_INJECTION_DROP_TEXT": "variable",
577
580
  "MCP_NAMESPACE": "variable",
578
581
  "MCP_PREFIX": "variable",
579
582
  "MEMORY_ANNOUNCEMENTS_MAX": "variable",
@@ -630,6 +633,8 @@
630
633
  "McpFailure": "interface",
631
634
  "McpFailureKind": "type",
632
635
  "McpImageResizer": "type",
636
+ "McpInjectionDropFacts": "interface",
637
+ "McpInjectionDropReason": "type",
633
638
  "McpRefreshResult": "interface",
634
639
  "McpServerSpec": "interface",
635
640
  "McpServerStatus": "interface",
@@ -753,6 +758,7 @@
753
758
  "OrgRuleSnapshotProvider": "interface",
754
759
  "OrgRuleStatePersistence": "interface",
755
760
  "OrgRuleStatus": "type",
761
+ "OrgRuleVerdict": "interface",
756
762
  "OriginClearanceEvent": "interface",
757
763
  "OriginClearanceRow": "interface",
758
764
  "OriginClearanceShadow": "interface",
@@ -797,6 +803,7 @@
797
803
  "PLAN_WHEN_TO_USE": "variable",
798
804
  "PREFIX_INPUT_CLASSIFICATION": "variable",
799
805
  "PRESENT_PLAN_TOOL_NAME": "variable",
806
+ "PROGRAM_RUN_REACHES": "variable",
800
807
  "PROJECT_ID_HINTS_FILE": "variable",
801
808
  "PROJECT_ID_REGEX": "variable",
802
809
  "PROJECT_MARKER_PATH": "variable",
@@ -910,6 +917,8 @@
910
917
  "ProbeCause": "interface",
911
918
  "ProbeCauseOperands": "interface",
912
919
  "ProcessFingerprint": "interface",
920
+ "ProgramRunReach": "type",
921
+ "ProgramRunReachOutcome": "type",
913
922
  "ProjectMemoryLoad": "interface",
914
923
  "PromotedRecord": "interface",
915
924
  "PromptArtifactSource": "interface",
@@ -1125,6 +1134,7 @@
1125
1134
  "SETTLEMENT_KINDS": "variable",
1126
1135
  "SHARED_MEMORY_LIST_PAGE_SIZE": "variable",
1127
1136
  "SHARED_MEMORY_READ_CAP_BYTES": "variable",
1137
+ "SHELL_WRAPPER_TABLE": "variable",
1128
1138
  "SKILL_TOOL_NAME": "variable",
1129
1139
  "STALE_RUNNING_REAP_ATTRIBUTION": "variable",
1130
1140
  "STARTER_RULES": "variable",
@@ -1211,6 +1221,10 @@
1211
1221
  "SharedMemoryStoreInfo": "interface",
1212
1222
  "SharedMemoryStoreProvider": "interface",
1213
1223
  "SharedMemoryStoreReader": "interface",
1224
+ "ShellCommandShape": "interface",
1225
+ "ShellSegment": "interface",
1226
+ "ShellWord": "interface",
1227
+ "ShellWrapperName": "type",
1214
1228
  "SideQueryDeps": "interface",
1215
1229
  "SideQueryMessage": "type",
1216
1230
  "SideQueryResult": "interface",
@@ -1275,7 +1289,9 @@
1275
1289
  "TOOL_KEY_MAX_CHARS": "variable",
1276
1290
  "TOOL_MODEL_GATE_CLASSES": "variable",
1277
1291
  "TOOL_MOUNT_TAGS": "variable",
1292
+ "TOOL_PATH_ABSENCES": "variable",
1278
1293
  "TOOL_PATH_ACCESSES": "variable",
1294
+ "TOOL_PATH_BASES": "variable",
1279
1295
  "TOOL_RESULT_REF_CONFLICT_CODE": "variable",
1280
1296
  "TOOL_WIRE_NAME_MAX_CHARS": "variable",
1281
1297
  "TSchema": "interface",
@@ -1320,6 +1336,7 @@
1320
1336
  "ToolCallFace": "interface",
1321
1337
  "ToolCallIdentity": "interface",
1322
1338
  "ToolCallLike": "interface",
1339
+ "ToolCallPathTarget": "interface",
1323
1340
  "ToolCallRequest": "interface",
1324
1341
  "ToolCatalogEntry": "interface",
1325
1342
  "ToolConformanceVector": "interface",
@@ -1337,7 +1354,10 @@
1337
1354
  "ToolModelGateRule": "interface",
1338
1355
  "ToolMountTag": "type",
1339
1356
  "ToolOrigin": "type",
1357
+ "ToolPathAbsence": "type",
1340
1358
  "ToolPathAccess": "type",
1359
+ "ToolPathBase": "type",
1360
+ "ToolPathBases": "interface",
1341
1361
  "ToolPathTarget": "interface",
1342
1362
  "ToolPolicy": "interface",
1343
1363
  "ToolPolicyNameSets": "interface",
@@ -1355,6 +1375,7 @@
1355
1375
  "ToolRosterDelta": "type",
1356
1376
  "ToolRosterDeltaSeat": "class",
1357
1377
  "ToolRosterEntry": "type",
1378
+ "ToolRosterPathTarget": "interface",
1358
1379
  "ToolRosterRenderHints": "variable",
1359
1380
  "ToolRuleFace": "interface",
1360
1381
  "ToolSpec": "interface",
@@ -1716,6 +1737,7 @@
1716
1737
  "durableParkGapOf": "function",
1717
1738
  "editBudget": "function",
1718
1739
  "effectiveOrThrow": "function",
1740
+ "effectivePathTargetOf": "function",
1719
1741
  "effectivePermissionRules": "function",
1720
1742
  "emitTaskOutcome": "function",
1721
1743
  "emitTrace": "function",
@@ -1807,6 +1829,7 @@
1807
1829
  "isDelegatedAgentTerminal": "function",
1808
1830
  "isDeniedBy": "function",
1809
1831
  "isExecutionOutcomeRecordWord": "function",
1832
+ "isFullyReadable": "function",
1810
1833
  "isGateKind": "function",
1811
1834
  "isInstructionEntry": "function",
1812
1835
  "isIsolated": "function",
@@ -1874,6 +1897,7 @@
1874
1897
  "materializeEntriesToFiles": "function",
1875
1898
  "materializeMcpTools": "function",
1876
1899
  "maybeCompact": "function",
1900
+ "mcpInjectionDroppedNotice": "function",
1877
1901
  "memoryBackendContract": "function",
1878
1902
  "memoryCaptureOptOutUnpersistedNotice": "function",
1879
1903
  "memoryCaptureOptedOutNotice": "function",
@@ -1940,7 +1964,9 @@
1940
1964
  "parseWorkflowMeta": "function",
1941
1965
  "pathConfinableWriteToolNames": "function",
1942
1966
  "pathRuleReaches": "function",
1967
+ "pathTargetBaseOf": "function",
1943
1968
  "pathTargetOf": "function",
1969
+ "pathTargetSlotOnly": "function",
1944
1970
  "pathTargetValue": "function",
1945
1971
  "pathTargetingToolNames": "function",
1946
1972
  "pathToUri": "function",
@@ -1973,6 +1999,7 @@
1973
1999
  "probeParkRoundTrip": "function",
1974
2000
  "probeSearchBackend": "function",
1975
2001
  "processFingerprint": "function",
2002
+ "programRunReachOf": "function",
1976
2003
  "projectHumanInput": "function",
1977
2004
  "projectToolManifest": "function",
1978
2005
  "projectionsToWriteBack": "function",
@@ -1995,6 +2022,7 @@
1995
2022
  "readRootAdoptionFile": "function",
1996
2023
  "readRowBehavior": "function",
1997
2024
  "readSessionCaptureOptOut": "function",
2025
+ "readShellCommand": "function",
1998
2026
  "readUsageRecord": "function",
1999
2027
  "readV2HeaderHints": "function",
2000
2028
  "realApprovalOrgFact": "function",
@@ -2776,12 +2804,15 @@
2776
2804
  "MAX_PENDING_STEER_CHARS": "advanced",
2777
2805
  "MAX_PENDING_STEER_ENTRIES": "advanced",
2778
2806
  "MAX_RULE_TEXT_CHARS": "advanced",
2807
+ "MAX_SHELL_READ_CHARS": "advanced",
2779
2808
  "MAX_STEER_INPUT_ID_CHARS": "advanced",
2780
2809
  "MAX_SUPPORTED_CHECKPOINT_VERSION": "advanced",
2781
2810
  "MAX_WORKFLOW_ITEMS": "advanced",
2782
2811
  "MCP_DELIVERY_VERDICTS": "advanced",
2783
2812
  "MCP_FAILURE_KINDS": "advanced",
2784
2813
  "MCP_IMAGE_MAX_BASE64": "advanced",
2814
+ "MCP_INJECTION_DROP_REASONS": "advanced",
2815
+ "MCP_INJECTION_DROP_TEXT": "advanced",
2785
2816
  "MCP_NAMESPACE": "advanced",
2786
2817
  "MCP_PREFIX": "advanced",
2787
2818
  "MEMORY_ANNOUNCEMENTS_MAX": "advanced",
@@ -2838,6 +2869,8 @@
2838
2869
  "McpFailure": "advanced",
2839
2870
  "McpFailureKind": "advanced",
2840
2871
  "McpImageResizer": "advanced",
2872
+ "McpInjectionDropFacts": "advanced",
2873
+ "McpInjectionDropReason": "advanced",
2841
2874
  "McpRefreshResult": "advanced",
2842
2875
  "McpServerSpec": "advanced",
2843
2876
  "McpServerStatus": "advanced",
@@ -2961,6 +2994,7 @@
2961
2994
  "OrgRuleSnapshotProvider": "stable",
2962
2995
  "OrgRuleStatePersistence": "stable",
2963
2996
  "OrgRuleStatus": "advanced",
2997
+ "OrgRuleVerdict": "advanced",
2964
2998
  "OriginClearanceEvent": "advanced",
2965
2999
  "OriginClearanceRow": "advanced",
2966
3000
  "OriginClearanceShadow": "advanced",
@@ -3005,6 +3039,7 @@
3005
3039
  "PLAN_WHEN_TO_USE": "advanced",
3006
3040
  "PREFIX_INPUT_CLASSIFICATION": "advanced",
3007
3041
  "PRESENT_PLAN_TOOL_NAME": "advanced",
3042
+ "PROGRAM_RUN_REACHES": "advanced",
3008
3043
  "PROJECT_ID_HINTS_FILE": "advanced",
3009
3044
  "PROJECT_ID_REGEX": "advanced",
3010
3045
  "PROJECT_MARKER_PATH": "advanced",
@@ -3118,6 +3153,8 @@
3118
3153
  "ProbeCause": "advanced",
3119
3154
  "ProbeCauseOperands": "advanced",
3120
3155
  "ProcessFingerprint": "advanced",
3156
+ "ProgramRunReach": "advanced",
3157
+ "ProgramRunReachOutcome": "advanced",
3121
3158
  "ProjectMemoryLoad": "advanced",
3122
3159
  "PromotedRecord": "advanced",
3123
3160
  "PromptArtifactSource": "advanced",
@@ -3333,6 +3370,7 @@
3333
3370
  "SETTLEMENT_KINDS": "advanced",
3334
3371
  "SHARED_MEMORY_LIST_PAGE_SIZE": "advanced",
3335
3372
  "SHARED_MEMORY_READ_CAP_BYTES": "advanced",
3373
+ "SHELL_WRAPPER_TABLE": "advanced",
3336
3374
  "SKILL_TOOL_NAME": "internal",
3337
3375
  "STALE_RUNNING_REAP_ATTRIBUTION": "advanced",
3338
3376
  "STARTER_RULES": "advanced",
@@ -3419,6 +3457,10 @@
3419
3457
  "SharedMemoryStoreInfo": "advanced",
3420
3458
  "SharedMemoryStoreProvider": "advanced",
3421
3459
  "SharedMemoryStoreReader": "advanced",
3460
+ "ShellCommandShape": "advanced",
3461
+ "ShellSegment": "advanced",
3462
+ "ShellWord": "advanced",
3463
+ "ShellWrapperName": "advanced",
3422
3464
  "SideQueryDeps": "advanced",
3423
3465
  "SideQueryMessage": "advanced",
3424
3466
  "SideQueryResult": "advanced",
@@ -3483,7 +3525,9 @@
3483
3525
  "TOOL_KEY_MAX_CHARS": "advanced",
3484
3526
  "TOOL_MODEL_GATE_CLASSES": "advanced",
3485
3527
  "TOOL_MOUNT_TAGS": "advanced",
3528
+ "TOOL_PATH_ABSENCES": "advanced",
3486
3529
  "TOOL_PATH_ACCESSES": "advanced",
3530
+ "TOOL_PATH_BASES": "advanced",
3487
3531
  "TOOL_RESULT_REF_CONFLICT_CODE": "advanced",
3488
3532
  "TOOL_WIRE_NAME_MAX_CHARS": "advanced",
3489
3533
  "TSchema": "advanced",
@@ -3528,6 +3572,7 @@
3528
3572
  "ToolCallFace": "advanced",
3529
3573
  "ToolCallIdentity": "advanced",
3530
3574
  "ToolCallLike": "advanced",
3575
+ "ToolCallPathTarget": "advanced",
3531
3576
  "ToolCallRequest": "advanced",
3532
3577
  "ToolCatalogEntry": "advanced",
3533
3578
  "ToolConformanceVector": "advanced",
@@ -3545,7 +3590,10 @@
3545
3590
  "ToolModelGateRule": "advanced",
3546
3591
  "ToolMountTag": "advanced",
3547
3592
  "ToolOrigin": "advanced",
3593
+ "ToolPathAbsence": "advanced",
3548
3594
  "ToolPathAccess": "advanced",
3595
+ "ToolPathBase": "advanced",
3596
+ "ToolPathBases": "advanced",
3549
3597
  "ToolPathTarget": "advanced",
3550
3598
  "ToolPolicy": "stable",
3551
3599
  "ToolPolicyNameSets": "advanced",
@@ -3563,6 +3611,7 @@
3563
3611
  "ToolRosterDelta": "advanced",
3564
3612
  "ToolRosterDeltaSeat": "advanced",
3565
3613
  "ToolRosterEntry": "advanced",
3614
+ "ToolRosterPathTarget": "advanced",
3566
3615
  "ToolRosterRenderHints": "advanced",
3567
3616
  "ToolRuleFace": "advanced",
3568
3617
  "ToolSpec": "stable",
@@ -3924,6 +3973,7 @@
3924
3973
  "durableParkGapOf": "advanced",
3925
3974
  "editBudget": "advanced",
3926
3975
  "effectiveOrThrow": "advanced",
3976
+ "effectivePathTargetOf": "advanced",
3927
3977
  "effectivePermissionRules": "advanced",
3928
3978
  "emitTaskOutcome": "advanced",
3929
3979
  "emitTrace": "advanced",
@@ -4015,6 +4065,7 @@
4015
4065
  "isDelegatedAgentTerminal": "advanced",
4016
4066
  "isDeniedBy": "advanced",
4017
4067
  "isExecutionOutcomeRecordWord": "advanced",
4068
+ "isFullyReadable": "advanced",
4018
4069
  "isGateKind": "advanced",
4019
4070
  "isInstructionEntry": "advanced",
4020
4071
  "isIsolated": "advanced",
@@ -4082,6 +4133,7 @@
4082
4133
  "materializeEntriesToFiles": "advanced",
4083
4134
  "materializeMcpTools": "stable",
4084
4135
  "maybeCompact": "advanced",
4136
+ "mcpInjectionDroppedNotice": "advanced",
4085
4137
  "memoryBackendContract": "stable",
4086
4138
  "memoryCaptureOptOutUnpersistedNotice": "advanced",
4087
4139
  "memoryCaptureOptedOutNotice": "advanced",
@@ -4148,7 +4200,9 @@
4148
4200
  "parseWorkflowMeta": "advanced",
4149
4201
  "pathConfinableWriteToolNames": "advanced",
4150
4202
  "pathRuleReaches": "advanced",
4203
+ "pathTargetBaseOf": "advanced",
4151
4204
  "pathTargetOf": "advanced",
4205
+ "pathTargetSlotOnly": "advanced",
4152
4206
  "pathTargetValue": "advanced",
4153
4207
  "pathTargetingToolNames": "advanced",
4154
4208
  "pathToUri": "advanced",
@@ -4181,6 +4235,7 @@
4181
4235
  "probeParkRoundTrip": "stable",
4182
4236
  "probeSearchBackend": "advanced",
4183
4237
  "processFingerprint": "advanced",
4238
+ "programRunReachOf": "advanced",
4184
4239
  "projectHumanInput": "advanced",
4185
4240
  "projectToolManifest": "advanced",
4186
4241
  "projectionsToWriteBack": "advanced",
@@ -4203,6 +4258,7 @@
4203
4258
  "readRootAdoptionFile": "advanced",
4204
4259
  "readRowBehavior": "advanced",
4205
4260
  "readSessionCaptureOptOut": "advanced",
4261
+ "readShellCommand": "advanced",
4206
4262
  "readUsageRecord": "advanced",
4207
4263
  "readV2HeaderHints": "advanced",
4208
4264
  "realApprovalOrgFact": "advanced",