@sema-agent/server 1.316.0 → 1.318.0

package/dist/http/sse-log.js

@@ -1,11 +1,11 @@
-import { sendJson, sseHeaders } from "./send.js";
+import { sendJson, sendError, sseHeaders } from "./send.js";
 export async function streamSseLog(req, res, provider, id, staleMs) {
     const lastId = Number(req.headers["last-event-id"] ?? new URL(req.url ?? "", "http://x").searchParams.get("from") ?? 0);
     let from = Number.isFinite(lastId) ? lastId : 0;
     if (from > 0) {
         const retainedFrom = await provider.retainedFrom(id);
         if (retainedFrom > from + 1) {
-            sendJson(res, 416, { error: "resume point evicted past retention", retainedFrom });
+            sendError(res, 416, "limit.retention_evicted", "resume point evicted past retention", { retainedFrom });
             return;
         }
     }

package/dist/http/wire-types.d.ts

@@ -81,4 +81,10 @@ export interface TaskRequestBody {
     enableFork?: boolean;
     [k: string]: unknown;
 }
+export type DecideBinding = {
+    checkpointToken?: string;
+    boundCallId?: string;
+    boundInputHash?: string;
+    updatedInput?: unknown;
+};
 //# sourceMappingURL=wire-types.d.ts.map

package/dist/leader/endpoint.js

@@ -27,12 +27,12 @@ export function createLeaderEndpoint(runLeader, opts = {}) {
         if (method === "POST" && url === "/v1/leader") {
             const b = body;
             if (!b || typeof b.objective !== "string" || b.objective.trim() === "") {
-                return { status: 400, body: { error: "missing 'objective' string" } };
+                return { status: 400, body: { error: "missing 'objective' string", errorCode: "request.body_shape" } };
             }
             if (opts.requiredFields) {
                 const missing = opts.requiredFields.filter((f) => typeof b[f] !== "string" || b[f].trim() === "");
                 if (missing.length > 0) {
-                    return { status: 400, body: { error: `missing required field(s): ${missing.join(", ")}` } };
+                    return { status: 400, body: { error: `missing required field(s): ${missing.join(", ")}`, errorCode: "request.body_shape" } };
                 }
             }
             reap();
@@ -61,9 +61,9 @@ export function createLeaderEndpoint(runLeader, opts = {}) {
         if (m) {
             const run = runs.get(m[1]);
             if (!run)
-                return { status: 404, body: { error: "leader run not found" } };
+                return { status: 404, body: { error: "leader run not found", errorCode: "not_found.leader_run" } };
             if (run.owner != null && run.owner !== (requester ?? null)) {
-                return { status: 404, body: { error: "leader run not found" } };
+                return { status: 404, body: { error: "leader run not found", errorCode: "not_found.leader_run" } };
             }
             return {
                 status: 200,

package/dist/main.js

@@ -24,7 +24,7 @@ import { stat as fsStat, readFile as fsReadFile } from "node:fs/promises";
 import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScratchpadDir, purgeScratchpadDir, sweepStaleScratchpads, resumeFactsForLane } from "./env-facts.js";
 import { normalizeSuggestNextPrompts, normalizeResilience, normalizeAttachments, normalizeResumeAtMode, resolveTaskLimits, taskAgentsSpecFragment, retainBackgroundProcessesFromBody, toolNameListFromBody, promptProfileFromBody } from "./spec-fields.js";
 import { createBrain, brainSummary } from "./brain.js";
-import { loadConfig, logConfigDiagnostics, resolveBindHost } from "./config.js";
+import { configLkgEnabled, loadConfig, logConfigDiagnostics, resolveBindHost } from "./config.js";
 import { resourceSuspendOptIn } from "./resource-suspend.js";
 import { createSessionStore, ensureChildSessionDurableWithPromotion } from "./plugins/session-store.js";
 import { ForkRoutingSessionStore } from "./plugins/fork-routing-session-store.js";
@@ -247,7 +247,7 @@ async function main() {
         }
     };
     let bootConfigPending;
-    const lkgEnabled = configProvider?.kind === "remote" && process.env.CONFIG_LKG_DISABLED !== "true";
+    const lkgEnabled = configProvider?.kind === "remote" && configLkgEnabled();
     const lkgPath = process.env.CONFIG_LKG_PATH ?? defaultLkgPath(cc?.worker);
     const lkgSurvivesRestart = lkgEnabled && process.env.CONFIG_LKG_DURABLE === "true";
     let lkgBooted = false;
@@ -1089,8 +1089,8 @@ async function main() {
         executionEnvFactory: executionEnvFactory ? executionEnvFactory : undefined,
         lspManager: lspManager ? lspManager : undefined,
         onBackgroundChildEvent: fleetBackgroundChildPublisher(fleetBus, (msg, fields) => logger.info(msg, fields)),
-        loadProjectMemory: config.requirePrincipal !== true && !config.projectMemoryDisabled ? makeLoadProjectMemory({ logger }) : undefined,
-        probeInstructionSources: config.remoteExec?.provider === "host" && config.requirePrincipal !== true && !config.projectMemoryDisabled
+        loadProjectMemory: config.requirePrincipal !== true && config.projectMemoryEnabled ? makeLoadProjectMemory({ logger }) : undefined,
+        probeInstructionSources: config.remoteExec?.provider === "host" && config.requirePrincipal !== true && config.projectMemoryEnabled
             ? makeProbeInstructionSources()
             : undefined,
         hooks: deploymentHooks,
@@ -1266,7 +1266,7 @@ async function main() {
         : undefined;
     let skills = loadSkills(config.skillsDir);
     if (effective?.skills && config.configCenter) {
-        skills = await applyCenterSkills(skills, effective.skills, config.configCenter.baseUrl, config.configCenter.token, logger, undefined, process.env.CONFIG_LKG_DISABLED !== "true" ? defaultSkillCacheDir() : undefined);
+        skills = await applyCenterSkills(skills, effective.skills, config.configCenter.baseUrl, config.configCenter.token, logger, undefined, configLkgEnabled() ? defaultSkillCacheDir() : undefined);
     }
     if (effective?.plugins && config.configCenter) {
         const pluginOut = await applyCenterPlugins(skills, effective, {

package/dist/plugins/posix-shell-fs.d.ts

@@ -0,0 +1,35 @@
+import { FileError, type ExecutionError, type RemoteExecutionError, type FileInfo, type Result } from "@sema-agent/core";
+export interface ShellRunResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}
+export interface PosixShellFsDeps {
+    run: (cmd: string, abortSignal?: AbortSignal) => Promise<Result<ShellRunResult, ExecutionError | RemoteExecutionError>>;
+    resolve: (p: string) => string;
+    tempDir: () => string | null;
+}
+export interface PosixShellFs {
+    readLink(p: string, abortSignal?: AbortSignal): Promise<Result<string, FileError>>;
+    canonicalPath(p: string, abortSignal?: AbortSignal): Promise<Result<string, FileError>>;
+    statFileInfo(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo, FileError>>;
+    listDir(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo[], FileError>>;
+    exists(p: string, abortSignal?: AbortSignal): Promise<Result<boolean, FileError>>;
+    createDir(p: string, options?: {
+        recursive?: boolean;
+        abortSignal?: AbortSignal;
+    }): Promise<Result<void, FileError>>;
+    remove(p: string, options?: {
+        recursive?: boolean;
+        force?: boolean;
+        abortSignal?: AbortSignal;
+    }): Promise<Result<void, FileError>>;
+    createTempDir(prefix?: string, abortSignal?: AbortSignal): Promise<Result<string, FileError>>;
+    createTempFile(options?: {
+        prefix?: string;
+        suffix?: string;
+        abortSignal?: AbortSignal;
+    }): Promise<Result<string, FileError>>;
+}
+export declare function createPosixShellFs(deps: PosixShellFsDeps): PosixShellFs;
+//# sourceMappingURL=posix-shell-fs.d.ts.map

package/dist/plugins/posix-shell-fs.js

@@ -0,0 +1,122 @@
+import path from "node:path";
+import { FileError, } from "@sema-agent/core";
+import { shellQuote, kindFromMode } from "./remote-shell.js";
+import { classifyFsStderr, fileErrorFromExec } from "./remote-env-file-error.js";
+const ok = (value) => ({ ok: true, value });
+export function createPosixShellFs(deps) {
+    const { run, resolve } = deps;
+    const tempResult = (r) => {
+        if (!r.ok)
+            return { ok: false, error: fileErrorFromExec(r.error, undefined) };
+        if (r.value.exitCode !== 0)
+            return { ok: false, error: classifyFsStderr(r.value.stderr, undefined, "unknown") };
+        return ok(r.value.stdout.trim());
+    };
+    const fs = {
+        async readLink(p, abortSignal) {
+            const abs = resolve(p);
+            const r = await run(`readlink -- ${shellQuote(abs)}`, abortSignal);
+            if (!r.ok)
+                return { ok: false, error: fileErrorFromExec(r.error, abs) };
+            if (r.value.exitCode !== 0)
+                return { ok: false, error: classifyFsStderr(r.value.stderr, abs, "not_found") };
+            return ok(r.value.stdout.trim());
+        },
+        async canonicalPath(p, abortSignal) {
+            const abs = resolve(p);
+            const r = await run(`realpath -- ${shellQuote(abs)}`, abortSignal);
+            if (!r.ok)
+                return { ok: false, error: fileErrorFromExec(r.error, abs) };
+            if (r.value.exitCode !== 0)
+                return { ok: false, error: classifyFsStderr(r.value.stderr, abs, "not_found") };
+            return ok(r.value.stdout.trim());
+        },
+        async statFileInfo(p, abortSignal) {
+            const abs = resolve(p);
+            const r = await run(`stat -c '%s %Y %f' -- ${shellQuote(abs)}`, abortSignal);
+            if (!r.ok)
+                return { ok: false, error: fileErrorFromExec(r.error, abs) };
+            if (r.value.exitCode !== 0)
+                return { ok: false, error: classifyFsStderr(r.value.stderr, abs, "not_found") };
+            const [sizeS, mtimeS, modeHex] = r.value.stdout.trim().split(/\s+/);
+            return ok({
+                name: path.posix.basename(abs),
+                path: abs,
+                kind: kindFromMode(parseInt(modeHex ?? "0", 16)),
+                size: Number(sizeS) || 0,
+                mtimeMs: (Number(mtimeS) || 0) * 1000,
+            });
+        },
+        async listDir(p, abortSignal) {
+            const abs = resolve(p);
+            const r = await run(`ls -1A -- ${shellQuote(abs)}`, abortSignal);
+            if (!r.ok)
+                return { ok: false, error: fileErrorFromExec(r.error, abs) };
+            if (r.value.exitCode !== 0)
+                return { ok: false, error: classifyFsStderr(r.value.stderr, abs, "not_found") };
+            const names = r.value.stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
+            const out = [];
+            for (const name of names) {
+                const info = await fs.statFileInfo(path.posix.join(abs, name), abortSignal);
+                if (info.ok)
+                    out.push(info.value);
+                else
+                    out.push({ name, path: path.posix.join(abs, name), kind: "file", size: 0, mtimeMs: 0 });
+            }
+            return ok(out);
+        },
+        async exists(p, abortSignal) {
+            const abs = resolve(p);
+            const r = await run(`{ [ -e ${shellQuote(abs)} ] || [ -L ${shellQuote(abs)} ]; } && printf yes || printf no`, abortSignal);
+            if (!r.ok)
+                return { ok: false, error: fileErrorFromExec(r.error, abs) };
+            const out = r.value.stdout.trim();
+            if (out === "yes")
+                return ok(true);
+            if (out === "no")
+                return ok(false);
+            return { ok: false, error: classifyFsStderr(r.value.stderr, abs, "unknown") };
+        },
+        async createDir(p, options) {
+            const abs = resolve(p);
+            const r = await run(`mkdir -p -- ${shellQuote(abs)}`, options?.abortSignal);
+            if (!r.ok)
+                return { ok: false, error: fileErrorFromExec(r.error, abs) };
+            if (r.value.exitCode !== 0)
+                return { ok: false, error: classifyFsStderr(r.value.stderr, abs, "unknown") };
+            return ok(undefined);
+        },
+        async remove(p, options) {
+            const abs = resolve(p);
+            const flags = `${options?.recursive ? "r" : ""}${options?.force ? "f" : ""}`;
+            const r = await run(`rm ${flags ? `-${flags} ` : ""}-- ${shellQuote(abs)}`, options?.abortSignal);
+            if (!r.ok)
+                return { ok: false, error: fileErrorFromExec(r.error, abs) };
+            if (r.value.exitCode !== 0) {
+                if (options?.force && /no such file/i.test(r.value.stderr))
+                    return ok(undefined);
+                return { ok: false, error: classifyFsStderr(r.value.stderr, abs, "unknown") };
+            }
+            return ok(undefined);
+        },
+        async createTempDir(prefix = "tmp-", abortSignal) {
+            const dir = deps.tempDir();
+            const where = dir === null ? "-t" : `-p ${shellQuote(dir)}`;
+            const r = await run(`mktemp -d ${where} ${shellQuote(`${prefix}XXXXXX`)}`, abortSignal);
+            return tempResult(r);
+        },
+        async createTempFile(options) {
+            const prefix = options?.prefix ?? "";
+            const sfx = options?.suffix ?? "";
+            const dir = deps.tempDir();
+            const where = dir === null ? "-t" : `-p ${shellQuote(dir)}`;
+            const cmd = sfx
+                ? `f=$(mktemp ${where} ${shellQuote(`${prefix}XXXXXX`)}) && mv -- "$f" "$f"${shellQuote(sfx)} && printf '%s' "$f"${shellQuote(sfx)}`
+                : `mktemp ${where} ${shellQuote(`${prefix}XXXXXX`)}`;
+            const r = await run(cmd, options?.abortSignal);
+            return tempResult(r);
+        },
+    };
+    return fs;
+}
+//# sourceMappingURL=posix-shell-fs.js.map

package/dist/plugins/remote-env-adb.d.ts

@@ -93,6 +93,8 @@ export declare class RemoteAdbExecutionEnv implements RemoteExecutionEnv {
     }): Promise<Result<string[], FileError>>;
     writeFile(p: string, content: string | Uint8Array, abortSignal?: AbortSignal): Promise<Result<void, FileError>>;
     appendFile(p: string, content: string | Uint8Array, abortSignal?: AbortSignal): Promise<Result<void, FileError>>;
+    private posixFsInst?;
+    private get posixFs();
     fileInfo(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo, FileError>>;
     listDir(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo[], FileError>>;
     readLink(p: string, abortSignal?: AbortSignal): Promise<Result<string, FileError>>;
@@ -115,7 +117,6 @@ export declare class RemoteAdbExecutionEnv implements RemoteExecutionEnv {
     }): Promise<Result<string, FileError>>;
     private adb;
     private withCwdEnv;
-    private tempResult;
 }
 export declare function adbExecutionEnvFactory(config: AdbEnvConfig): ExecutionEnvFactory;
 export {};

package/dist/plugins/remote-env-adb.js

@@ -2,9 +2,10 @@ import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";
 import { spawn } from "node:child_process";
-import { shellQuote, kindFromMode, armPipeDestroyGrace } from "./remote-shell.js";
+import { shellQuote, armPipeDestroyGrace } from "./remote-shell.js";
 import { FileError, ExecutionError, RemoteExecutionError, withRetry, RollingTailBuffer, markTruncated, } from "@sema-agent/core";
 import { fileErrorFromExec } from "./remote-env-file-error.js";
+import { createPosixShellFs } from "./posix-shell-fs.js";
 const PROVIDER = "adb";
 const ok = (value) => ({ ok: true, value });
 const unsupported = (op) => ({
@@ -320,123 +321,40 @@ export class RemoteAdbExecutionEnv {
         merged.set(add, base.length);
         return this.writeFile(abs, merged, abortSignal);
     }
+    posixFsInst;
+    get posixFs() {
+        return (this.posixFsInst ??= createPosixShellFs({
+            run: (cmd, abortSignal) => this.exec(cmd, { abortSignal }),
+            resolve: (p) => this.resolve(p),
+            tempDir: () => this.cwd,
+        }));
+    }
     async fileInfo(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`stat -c '%s %Y %f' ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const msg = r.value.stderr.trim();
-            if (/no such file/i.test(msg))
-                return { ok: false, error: new FileError("not_found", msg, abs) };
-            if (/permission denied/i.test(msg))
-                return { ok: false, error: new FileError("permission_denied", msg, abs) };
-            return { ok: false, error: new FileError("unknown", msg || `stat failed for ${abs}`, abs) };
-        }
-        const [sizeS, mtimeS, modeHex] = r.value.stdout.trim().split(/\s+/);
-        return ok({ name: path.posix.basename(abs), path: abs, kind: kindFromMode(parseInt(modeHex ?? "0", 16)), size: Number(sizeS) || 0, mtimeMs: (Number(mtimeS) || 0) * 1000 });
+        return this.posixFs.statFileInfo(p, abortSignal);
     }
     async listDir(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`ls -1 ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const msg = r.value.stderr.trim();
-            if (/no such file/i.test(msg))
-                return { ok: false, error: new FileError("not_found", msg, abs) };
-            if (/not a directory/i.test(msg))
-                return { ok: false, error: new FileError("not_directory", msg, abs) };
-            if (/permission denied/i.test(msg))
-                return { ok: false, error: new FileError("permission_denied", msg, abs) };
-            return { ok: false, error: new FileError("unknown", msg || `ls failed for ${abs}`, abs) };
-        }
-        const names = r.value.stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
-        const out = [];
-        for (const name of names) {
-            const info = await this.fileInfo(path.posix.join(abs, name), abortSignal);
-            if (info.ok)
-                out.push(info.value);
-            else
-                out.push({ name, path: path.posix.join(abs, name), kind: "file", size: 0, mtimeMs: 0 });
-        }
-        return ok(out);
+        return this.posixFs.listDir(p, abortSignal);
     }
     async readLink(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`readlink ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: new FileError("not_found", r.value.stderr.trim() || `readlink failed for ${abs}`, abs) };
-        return ok(r.value.stdout.trim());
+        return this.posixFs.readLink(p, abortSignal);
     }
     async canonicalPath(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`realpath ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const msg = r.value.stderr.trim();
-            if (/permission denied/i.test(msg))
-                return { ok: false, error: new FileError("permission_denied", msg, abs) };
-            if (/not a directory/i.test(msg))
-                return { ok: false, error: new FileError("not_directory", msg, abs) };
-            return { ok: false, error: new FileError("not_found", msg || `realpath failed for ${abs}`, abs) };
-        }
-        return ok(r.value.stdout.trim());
+        return this.posixFs.canonicalPath(p, abortSignal);
     }
     async exists(p, abortSignal) {
-        const info = await this.fileInfo(p, abortSignal);
-        if (info.ok)
-            return ok(true);
-        if (info.error.code === "not_found")
-            return ok(false);
-        return { ok: false, error: info.error };
+        return this.posixFs.exists(p, abortSignal);
     }
     async createDir(p, options) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`mkdir -p ${shellQuote(abs)}`, { abortSignal: options?.abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const msg = r.value.stderr.trim();
-            if (/permission denied/i.test(msg))
-                return { ok: false, error: new FileError("permission_denied", msg, abs) };
-            return { ok: false, error: new FileError("unknown", msg || `mkdir failed for ${abs}`, abs) };
-        }
-        return ok(undefined);
+        return this.posixFs.createDir(p, options);
     }
     async remove(p, options) {
-        const abs = this.resolve(p);
-        const flags = `${options?.recursive ? "r" : ""}${options?.force ? "f" : ""}`;
-        const r = await this.exec(`rm ${flags ? `-${flags}` : ""} ${shellQuote(abs)}`, { abortSignal: options?.abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const msg = r.value.stderr.trim();
-            if (options?.force && /no such file/i.test(msg))
-                return ok(undefined);
-            if (/no such file/i.test(msg))
-                return { ok: false, error: new FileError("not_found", msg, abs) };
-            if (/permission denied/i.test(msg))
-                return { ok: false, error: new FileError("permission_denied", msg, abs) };
-            return { ok: false, error: new FileError("unknown", msg || `rm failed for ${abs}`, abs) };
-        }
-        return ok(undefined);
+        return this.posixFs.remove(p, options);
     }
     async createTempDir(prefix = "tmp-", abortSignal) {
-        const r = await this.exec(`mktemp -d -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}`, { abortSignal });
-        return this.tempResult(r, "mktemp -d");
+        return this.posixFs.createTempDir(prefix, abortSignal);
     }
     async createTempFile(options) {
-        const prefix = options?.prefix ?? "";
-        const sfx = options?.suffix ?? "";
-        const cmd = sfx
-            ? `f=$(mktemp -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}) && mv -- "$f" "$f"${shellQuote(sfx)} && printf '%s' "$f"${shellQuote(sfx)}`
-            : `mktemp -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}`;
-        const r = await this.exec(cmd, { abortSignal: options?.abortSignal });
-        return this.tempResult(r, "mktemp");
+        return this.posixFs.createTempFile(options);
     }
     adb(args, opts) {
         return new Promise((resolve) => {
@@ -515,13 +433,6 @@ export class RemoteAdbExecutionEnv {
         parts.push(command);
         return parts.join(" ");
     }
-    tempResult(r, label) {
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, undefined) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: new FileError("unknown", r.value.stderr.trim() || `${label} failed`) };
-        return ok(r.value.stdout.trim());
-    }
 }
 export function adbExecutionEnvFactory(config) {
     return (_ctx) => new RemoteAdbExecutionEnv(config);

package/dist/plugins/remote-env-file-error.d.ts

@@ -1,3 +1,4 @@
 import { FileError, type ExecutionError, type RemoteExecutionError } from "@sema-agent/core";
 export declare function fileErrorFromExec(e: ExecutionError | RemoteExecutionError, path?: string): FileError;
+export declare function classifyFsStderr(stderr: string, p: string | undefined, fallback?: "unknown" | "not_found"): FileError;
 //# sourceMappingURL=remote-env-file-error.d.ts.map

package/dist/plugins/remote-env-file-error.js

@@ -3,4 +3,20 @@ export function fileErrorFromExec(e, path) {
     const code = e.code === "aborted" ? "aborted" : "unknown";
     return new FileError(code, e.message, path, e);
 }
+export function classifyFsStderr(stderr, p, fallback = "unknown") {
+    const msg = stderr.trim();
+    if (/command not found|applet not found|:\s+not found\s*$/im.test(msg))
+        return new FileError("unknown", msg, p);
+    if (/input\/output error|too many levels|file name too long|no space left/i.test(msg))
+        return new FileError("unknown", msg, p);
+    if (/no such file/i.test(msg))
+        return new FileError("not_found", msg, p);
+    if (/permission denied/i.test(msg))
+        return new FileError("permission_denied", msg, p);
+    if (/is a directory/i.test(msg))
+        return new FileError("is_directory", msg, p);
+    if (/not a directory/i.test(msg))
+        return new FileError("not_directory", msg, p);
+    return new FileError(fallback, msg || "command failed", p);
+}
 //# sourceMappingURL=remote-env-file-error.js.map

package/dist/plugins/remote-env-host.js

@@ -6,6 +6,7 @@ import { randomBytes } from "node:crypto";
 import { openSync, closeSync, readSync, statSync, truncateSync, unlinkSync, mkdirSync, rmdirSync, mkdtempSync, existsSync, realpathSync } from "node:fs";
 import { StringDecoder } from "node:string_decoder";
 import { armPipeDestroyGrace } from "./remote-shell.js";
+import { hostBackgroundShellEnabled, hostExecSpoolEnabled } from "../config.js";
 import { resolveHostShell, hostShell, spawnGroupOptions, killTreeHard, killTreeSoft, collapseWin32EnvKeys } from "./host-platform.js";
 import { BackgroundShellManager, seedMemStream, feedMemStream, drainMemStream } from "./background-shell-support.js";
 import { FileError, ExecutionError, RemoteExecutionError, scrubSecretEnv, RollingTailBuffer, markTruncated, SchedulerError, BackgroundShellError, } from "@sema-agent/core";
@@ -149,11 +150,11 @@ export class RemoteHostExecutionEnv {
     }
     get backgroundCapabilities() {
         return {
-            supported: (this.cfg.backgroundShell ?? true) && process.env.HOST_BG_DISABLED !== "true",
+            supported: (this.cfg.backgroundShell ?? true) && hostBackgroundShellEnabled(),
             maxConcurrent: HOST_BG_MAX_CONCURRENT,
             defaultBgTimeoutSec: HOST_BG_DEFAULT_TIMEOUT_SEC,
             maxBgTimeoutSec: HOST_BG_MAX_TIMEOUT_SEC,
-            supportsDetach: (this.cfg.backgroundShell ?? true) && process.env.HOST_BG_DISABLED !== "true",
+            supportsDetach: (this.cfg.backgroundShell ?? true) && hostBackgroundShellEnabled(),
         };
     }
     _bgManager;
@@ -331,7 +332,7 @@ export class RemoteHostExecutionEnv {
         const cwd = this.resolve(options?.cwd ?? this.cwd);
         const timeoutMs = options?.timeout != null ? options.timeout * 1000 : this.cfg.commandTimeoutMs;
         const detachSignal = options?.detachSignal;
-        if (process.platform !== "win32" && process.env.HOST_EXEC_SPOOL_DISABLED !== "true") {
+        if (process.platform !== "win32" && hostExecSpoolEnabled()) {
             const spool = this.openFgSpool();
             if (spool)
                 return this.execViaSpool(command, options, cwd, timeoutMs, detachSignal, spool);

package/dist/plugins/remote-env-k8s.d.ts

@@ -149,6 +149,8 @@ export declare class RemoteK8sExecutionEnv implements RemoteExecutionEnv, Backgr
     writeFile(p: string, content: string | Uint8Array, abortSignal?: AbortSignal): Promise<Result<void, FileError>>;
     appendFile(p: string, content: string | Uint8Array, abortSignal?: AbortSignal): Promise<Result<void, FileError>>;
     private writeChunked;
+    private posixFsInst?;
+    private get posixFs();
     fileInfo(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo, FileError>>;
     listDir(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo[], FileError>>;
     readLink(p: string, abortSignal?: AbortSignal): Promise<Result<string, FileError>>;
@@ -171,8 +173,6 @@ export declare class RemoteK8sExecutionEnv implements RemoteExecutionEnv, Backgr
     }): Promise<Result<string, FileError>>;
     private execData;
     private withCwdEnv;
-    private fileErrorFrom;
-    private tempResult;
 }
 export declare function k8sExecutionEnvFactory(config: K8sEnvConfig): ExecutionEnvFactory;
 //# sourceMappingURL=remote-env-k8s.d.ts.map