@sema-agent/server 1.316.0 → 1.318.0

package/dist/plugins/remote-env-k8s.js

@@ -7,7 +7,8 @@ import WebSocket from "ws";
 import { shellQuote, kindFromMode } from "./remote-shell.js";
 import { presignS3Url } from "./s3-presign.js";
 import { FileError, ExecutionError, RemoteExecutionError, withRetry, RollingTailBuffer, markTruncated, } from "@sema-agent/core";
-import { fileErrorFromExec } from "./remote-env-file-error.js";
+import { fileErrorFromExec, classifyFsStderr } from "./remote-env-file-error.js";
+import { createPosixShellFs } from "./posix-shell-fs.js";
 import { randomUUID } from "node:crypto";
 import { BackgroundShellManager, seedMemStream, feedMemStream, drainMemStream } from "./background-shell-support.js";
 const PROVIDER = "k8s";
@@ -833,7 +834,7 @@ export class RemoteK8sExecutionEnv {
         if (!r.ok)
             return { ok: false, error: fileErrorFromExec(r.error, abs) };
         if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs, "not_found") };
+            return { ok: false, error: classifyFsStderr(r.value.stderr, abs, "not_found") };
         return ok(new Uint8Array(Buffer.from(r.value.stdout.replace(/\s+/g, ""), "base64")));
     }
     async readTextFile(p, abortSignal) {
@@ -859,7 +860,7 @@ export class RemoteK8sExecutionEnv {
         if (!mk.ok)
             return { ok: false, error: fileErrorFromExec(mk.error, dir) };
         if (mk.value.exitCode !== 0)
-            return { ok: false, error: this.fileErrorFrom(mk.value.stderr, dir) };
+            return { ok: false, error: classifyFsStderr(mk.value.stderr, dir) };
         return undefined;
     }
     async writeFile(p, content, abortSignal) {
@@ -885,99 +886,44 @@ export class RemoteK8sExecutionEnv {
             if (!r.ok)
                 return { ok: false, error: fileErrorFromExec(r.error, abs) };
             if (r.value.exitCode !== 0)
-                return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs) };
+                return { ok: false, error: classifyFsStderr(r.value.stderr, abs) };
         }
         return ok(undefined);
     }
+    posixFsInst;
+    get posixFs() {
+        return (this.posixFsInst ??= createPosixShellFs({
+            run: (cmd, abortSignal) => this.exec(cmd, { abortSignal }),
+            resolve: (p) => this.resolve(p),
+            tempDir: () => this.cwd,
+        }));
+    }
     async fileInfo(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`stat -c '%s %Y %f' ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs, "not_found") };
-        const [sizeS, mtimeS, modeHex] = r.value.stdout.trim().split(/\s+/);
-        return ok({ name: path.posix.basename(abs), path: abs, kind: kindFromMode(parseInt(modeHex ?? "0", 16)), size: Number(sizeS) || 0, mtimeMs: (Number(mtimeS) || 0) * 1000 });
+        return this.posixFs.statFileInfo(p, abortSignal);
     }
     async listDir(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`ls -1A ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs) };
-        const names = r.value.stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
-        const out = [];
-        for (const name of names) {
-            const info = await this.fileInfo(path.posix.join(abs, name), abortSignal);
-            out.push(info.ok ? info.value : { name, path: path.posix.join(abs, name), kind: "file", size: 0, mtimeMs: 0 });
-        }
-        return ok(out);
+        return this.posixFs.listDir(p, abortSignal);
     }
     async readLink(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`readlink ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs, "not_found") };
-        return ok(r.value.stdout.trim());
+        return this.posixFs.readLink(p, abortSignal);
     }
     async canonicalPath(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`realpath ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs, "not_found") };
-        return ok(r.value.stdout.trim());
+        return this.posixFs.canonicalPath(p, abortSignal);
     }
     async exists(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`{ [ -e ${shellQuote(abs)} ] || [ -L ${shellQuote(abs)} ]; } && printf yes || printf no`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        const out = r.value.stdout.trim();
-        if (out === "yes")
-            return ok(true);
-        if (out === "no")
-            return ok(false);
-        return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs) };
+        return this.posixFs.exists(p, abortSignal);
     }
     async createDir(p, options) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`mkdir ${options?.recursive === false ? "" : "-p "}${shellQuote(abs)}`, { abortSignal: options?.abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs) };
-        return ok(undefined);
+        return this.posixFs.createDir(p, options);
     }
     async remove(p, options) {
-        const abs = this.resolve(p);
-        const flags = `${options?.recursive ? "r" : ""}${options?.force ? "f" : ""}`;
-        const r = await this.exec(`rm ${flags ? `-${flags}` : ""} ${shellQuote(abs)}`, { abortSignal: options?.abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            if (options?.force && /no such file/i.test(r.value.stderr))
-                return ok(undefined);
-            return { ok: false, error: this.fileErrorFrom(r.value.stderr, abs) };
-        }
-        return ok(undefined);
+        return this.posixFs.remove(p, options);
     }
     async createTempDir(prefix = "tmp-", abortSignal) {
-        const r = await this.exec(`mktemp -d -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}`, { abortSignal });
-        return this.tempResult(r, "mktemp -d");
+        return this.posixFs.createTempDir(prefix, abortSignal);
     }
     async createTempFile(options) {
-        const prefix = options?.prefix ?? "";
-        const sfx = options?.suffix ?? "";
-        const cmd = sfx
-            ? `f=$(mktemp -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}) && mv -- "$f" "$f"${shellQuote(sfx)} && printf '%s' "$f"${shellQuote(sfx)}`
-            : `mktemp -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}`;
-        const r = await this.exec(cmd, { abortSignal: options?.abortSignal });
-        return this.tempResult(r, "mktemp");
+        return this.posixFs.createTempFile(options);
     }
     async execData(command, abortSignal) {
         const c = await this.ensureConnected();
@@ -996,27 +942,6 @@ export class RemoteK8sExecutionEnv {
         parts.push(command);
         return parts.join(" ");
     }
-    fileErrorFrom(stderr, p, fallback = "unknown") {
-        const msg = stderr.trim();
-        if (/no such file/i.test(msg))
-            return new FileError("not_found", msg, p);
-        if (/permission denied/i.test(msg))
-            return new FileError("permission_denied", msg, p);
-        if (/is a directory/i.test(msg))
-            return new FileError("is_directory", msg, p);
-        if (/not a directory/i.test(msg))
-            return new FileError("not_directory", msg, p);
-        if (/input\/output error|too many levels|file name too long|no space left/i.test(msg))
-            return new FileError("unknown", msg, p);
-        return new FileError(fallback, msg || "command failed", p);
-    }
-    tempResult(r, label) {
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, undefined) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: new FileError("unknown", r.value.stderr.trim() || `${label} failed`) };
-        return ok(r.value.stdout.trim());
-    }
 }
 export function k8sExecutionEnvFactory(config) {
     return (ctx) => new RemoteK8sExecutionEnv({ ...config, sessionId: ctx.sessionId });

package/dist/plugins/remote-env-local-docker.d.ts

@@ -90,6 +90,8 @@ export declare class RemoteLocalDockerExecutionEnv implements RemoteExecutionEnv
     }): Promise<Result<string[], FileError>>;
     writeFile(p: string, content: string | Uint8Array, abortSignal?: AbortSignal): Promise<Result<void, FileError>>;
     appendFile(p: string, content: string | Uint8Array, abortSignal?: AbortSignal): Promise<Result<void, FileError>>;
+    private posixFsInst?;
+    private get posixFs();
     fileInfo(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo, FileError>>;
     listDir(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo[], FileError>>;
     readLink(p: string, abortSignal?: AbortSignal): Promise<Result<string, FileError>>;
@@ -119,8 +121,6 @@ export declare class RemoteLocalDockerExecutionEnv implements RemoteExecutionEnv
     private probeContainerShell;
     private ensureConnectedExec;
     private fsReady;
-    private tempResult;
-    private fsErrorFromStderr;
     private dockerToRemoteError;
 }
 export declare function localDockerExecutionEnvFactory(config: LocalDockerEnvConfig, deps?: LocalDockerEnvDeps): ExecutionEnvFactory;

package/dist/plugins/remote-env-local-docker.js

@@ -3,9 +3,10 @@ import os from "node:os";
 import fs from "node:fs/promises";
 import { spawn } from "node:child_process";
 import { randomBytes } from "node:crypto";
-import { shellQuote, kindFromMode, armPipeDestroyGrace } from "./remote-shell.js";
+import { shellQuote, armPipeDestroyGrace } from "./remote-shell.js";
 import { FileError, ExecutionError, RemoteExecutionError, RollingTailBuffer, markTruncated, } from "@sema-agent/core";
-import { fileErrorFromExec } from "./remote-env-file-error.js";
+import { fileErrorFromExec, classifyFsStderr } from "./remote-env-file-error.js";
+import { createPosixShellFs } from "./posix-shell-fs.js";
 const PROVIDER = "local-docker";
 const DEFAULT_MOUNT_PATH = "/workspace";
 const DEFAULT_COMMAND_TIMEOUT_MS = 30 * 60_000;
@@ -301,7 +302,7 @@ export class RemoteLocalDockerExecutionEnv {
         if (!r.ok)
             return { ok: false, error: fileErrorFromExec(r.error, abs) };
         if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fsErrorFromStderr(r.value.stderr, abs) };
+            return { ok: false, error: classifyFsStderr(r.value.stderr, abs) };
         return ok(r.value.stdoutBytes ?? new Uint8Array());
     }
     async readTextFile(p, abortSignal) {
@@ -330,7 +331,7 @@ export class RemoteLocalDockerExecutionEnv {
             if (!mk.ok)
                 return { ok: false, error: fileErrorFromExec(mk.error, dir) };
             if (mk.value.exitCode !== 0)
-                return { ok: false, error: this.fsErrorFromStderr(mk.value.stderr, dir) };
+                return { ok: false, error: classifyFsStderr(mk.value.stderr, dir) };
         }
         let local;
         try {
@@ -340,7 +341,7 @@ export class RemoteLocalDockerExecutionEnv {
             if (!cp.ok)
                 return { ok: false, error: fileErrorFromExec(cp.error, abs) };
             if (cp.value.exitCode !== 0)
-                return { ok: false, error: this.fsErrorFromStderr(cp.value.stderr, abs) };
+                return { ok: false, error: classifyFsStderr(cp.value.stderr, abs) };
             return ok(undefined);
         }
         catch (e) {
@@ -367,108 +368,49 @@ export class RemoteLocalDockerExecutionEnv {
         merged.set(add, base.length);
         return this.writeFile(abs, merged, abortSignal);
     }
+    posixFsInst;
+    get posixFs() {
+        return (this.posixFsInst ??= createPosixShellFs({
+            run: async (cmd, abortSignal) => {
+                if (this.destroyed)
+                    return { ok: false, error: new ExecutionError("shell_unavailable", "execution env already destroyed") };
+                if (!this.containerId) {
+                    const c = await this.connect();
+                    if (!c.ok)
+                        return { ok: false, error: new ExecutionError("shell_unavailable", `local-docker connect failed: ${c.error.message}`) };
+                }
+                return this.docker(this.execRaw(cmd), { signal: abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
+            },
+            resolve: (p) => this.resolve(p),
+            tempDir: () => this.cwd,
+        }));
+    }
     async fileInfo(p, abortSignal) {
-        const ready = await this.fsReady(p);
-        if (!ready.ok)
-            return ready;
-        const abs = this.resolve(p);
-        const r = await this.docker(this.execRaw(`stat -c '%s %Y %f' ${shellQuote(abs)}`), { signal: abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fsErrorFromStderr(r.value.stderr, abs) };
-        const [sizeS, mtimeS, modeHex] = r.value.stdout.trim().split(/\s+/);
-        return ok({ name: path.posix.basename(abs), path: abs, kind: kindFromMode(parseInt(modeHex ?? "0", 16)), size: Number(sizeS) || 0, mtimeMs: (Number(mtimeS) || 0) * 1000 });
+        return this.posixFs.statFileInfo(p, abortSignal);
     }
     async listDir(p, abortSignal) {
-        const ready = await this.fsReady(p);
-        if (!ready.ok)
-            return ready;
-        const abs = this.resolve(p);
-        const r = await this.docker(this.execRaw(`ls -1A ${shellQuote(abs)}`), { signal: abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fsErrorFromStderr(r.value.stderr, abs) };
-        const names = r.value.stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
-        const out = [];
-        for (const name of names) {
-            const info = await this.fileInfo(path.posix.join(abs, name), abortSignal);
-            if (info.ok)
-                out.push(info.value);
-            else
-                out.push({ name, path: path.posix.join(abs, name), kind: "file", size: 0, mtimeMs: 0 });
-        }
-        return ok(out);
+        return this.posixFs.listDir(p, abortSignal);
     }
     async readLink(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.docker(this.execRaw(`readlink ${shellQuote(abs)}`), { signal: abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fsErrorFromStderr(r.value.stderr, abs) };
-        return ok(r.value.stdout.trim());
+        return this.posixFs.readLink(p, abortSignal);
     }
     async canonicalPath(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.docker(this.execRaw(`realpath ${shellQuote(abs)}`), { signal: abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fsErrorFromStderr(r.value.stderr, abs) };
-        return ok(r.value.stdout.trim());
+        return this.posixFs.canonicalPath(p, abortSignal);
     }
     async exists(p, abortSignal) {
-        const info = await this.fileInfo(p, abortSignal);
-        if (info.ok)
-            return ok(true);
-        if (info.error.code === "not_found")
-            return ok(false);
-        return { ok: false, error: info.error };
+        return this.posixFs.exists(p, abortSignal);
     }
     async createDir(p, options) {
-        const ready = await this.fsReady(p);
-        if (!ready.ok)
-            return ready;
-        const abs = this.resolve(p);
-        const recursive = options?.recursive ?? true;
-        const r = await this.docker(this.execRaw(`mkdir ${recursive ? "-p " : ""}${shellQuote(abs)}`), { signal: options?.abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fsErrorFromStderr(r.value.stderr, abs) };
-        return ok(undefined);
+        return this.posixFs.createDir(p, options);
     }
     async remove(p, options) {
-        const ready = await this.fsReady(p);
-        if (!ready.ok)
-            return ready;
-        const abs = this.resolve(p);
-        const flags = `${options?.recursive ? "r" : ""}${options?.force ? "f" : ""}`;
-        const r = await this.docker(this.execRaw(`rm ${flags ? `-${flags} ` : ""}-- ${shellQuote(abs)}`), { signal: options?.abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const fe = this.fsErrorFromStderr(r.value.stderr, abs);
-            if (options?.force && fe.code === "not_found")
-                return ok(undefined);
-            return { ok: false, error: fe };
-        }
-        return ok(undefined);
+        return this.posixFs.remove(p, options);
     }
     async createTempDir(prefix = "tmp-", abortSignal) {
-        const r = await this.docker(this.execRaw(`mktemp -d -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}`), { signal: abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
-        return this.tempResult(r);
+        return this.posixFs.createTempDir(prefix, abortSignal);
     }
     async createTempFile(options) {
-        const prefix = options?.prefix ?? "";
-        const sfx = options?.suffix ?? "";
-        const cmd = sfx
-            ? `f=$(mktemp -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}) && mv -- "$f" "$f"${shellQuote(sfx)} && printf '%s' "$f"${shellQuote(sfx)}`
-            : `mktemp -p ${shellQuote(this.cwd)} ${shellQuote(`${prefix}XXXXXX`)}`;
-        const r = await this.docker(this.execRaw(cmd), { signal: options?.abortSignal, timeoutMs: this.cfg.commandTimeoutMs });
-        return this.tempResult(r);
+        return this.posixFs.createTempFile(options);
     }
     withHostFlag(args) {
         return this.cfg.dockerHost ? ["-H", this.cfg.dockerHost, ...args] : args;
@@ -584,25 +526,6 @@ export class RemoteLocalDockerExecutionEnv {
             return { ok: false, error: new FileError("unknown", `local-docker connect failed: ${c.error.message}`, this.resolve(p), c.error) };
         return ok(undefined);
     }
-    tempResult(r) {
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, undefined) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: this.fsErrorFromStderr(r.value.stderr, undefined) };
-        return ok(r.value.stdout.trim());
-    }
-    fsErrorFromStderr(stderr, p) {
-        const msg = stderr.trim();
-        if (/no such file|not found/i.test(msg))
-            return new FileError("not_found", msg || "no such file", p);
-        if (/permission denied/i.test(msg))
-            return new FileError("permission_denied", msg, p);
-        if (/is a directory/i.test(msg))
-            return new FileError("is_directory", msg, p);
-        if (/not a directory/i.test(msg))
-            return new FileError("not_directory", msg, p);
-        return new FileError("unknown", msg || "command failed", p);
-    }
     dockerToRemoteError(e, fallback) {
         if (e.code === "timeout")
             return new RemoteExecutionError("timeout", e.message, e);

package/dist/plugins/remote-env-ssh.d.ts

@@ -101,6 +101,8 @@ export declare class RemoteSshExecutionEnv implements RemoteExecutionEnv {
     appendFile(p: string, content: string | Uint8Array, abortSignal?: AbortSignal): Promise<Result<void, FileError>>;
     fileInfo(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo, FileError>>;
     listDir(p: string, abortSignal?: AbortSignal): Promise<Result<FileInfo[], FileError>>;
+    private posixFsInst?;
+    private get posixFs();
     readLink(p: string, abortSignal?: AbortSignal): Promise<Result<string, FileError>>;
     canonicalPath(p: string, abortSignal?: AbortSignal): Promise<Result<string, FileError>>;
     exists(p: string, abortSignal?: AbortSignal): Promise<Result<boolean, FileError>>;
@@ -120,7 +122,6 @@ export declare class RemoteSshExecutionEnv implements RemoteExecutionEnv {
         abortSignal?: AbortSignal;
     }): Promise<Result<string, FileError>>;
     private withCwdEnv;
-    private tempResult;
     private connErr;
     private fileError;
 }

package/dist/plugins/remote-env-ssh.js

@@ -1,6 +1,7 @@
 import path from "node:path";
 import { Client } from "ssh2";
 import { shellQuote, kindFromMode } from "./remote-shell.js";
+import { createPosixShellFs } from "./posix-shell-fs.js";
 import { FileError, ExecutionError, RemoteExecutionError, withRetry, RollingTailBuffer, markTruncated, } from "@sema-agent/core";
 import { fileErrorFromExec } from "./remote-env-file-error.js";
 const PROVIDER = "ssh";
@@ -503,29 +504,19 @@ export class RemoteSshExecutionEnv {
             return { ok: false, error: this.fileError(e, abs) };
         }
     }
+    posixFsInst;
+    get posixFs() {
+        return (this.posixFsInst ??= createPosixShellFs({
+            run: (cmd, abortSignal) => this.exec(cmd, { abortSignal }),
+            resolve: (p) => this.resolve(p),
+            tempDir: () => null,
+        }));
+    }
     async readLink(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`readlink -- ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: new FileError("not_found", r.value.stderr.trim() || `readlink failed for ${abs}`, abs) };
-        return ok(r.value.stdout.trim());
+        return this.posixFs.readLink(p, abortSignal);
     }
     async canonicalPath(p, abortSignal) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`realpath -- ${shellQuote(abs)}`, { abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const msg = r.value.stderr.trim();
-            if (/permission denied|access denied/i.test(msg))
-                return { ok: false, error: new FileError("permission_denied", msg, abs) };
-            if (/not a directory/i.test(msg))
-                return { ok: false, error: new FileError("not_directory", msg, abs) };
-            return { ok: false, error: new FileError("not_found", msg || `realpath failed for ${abs}`, abs) };
-        }
-        return ok(r.value.stdout.trim());
+        return this.posixFs.canonicalPath(p, abortSignal);
     }
     async exists(p, abortSignal) {
         const info = await this.fileInfo(p, abortSignal);
@@ -536,46 +527,16 @@ export class RemoteSshExecutionEnv {
         return { ok: false, error: info.error };
     }
     async createDir(p, options) {
-        const abs = this.resolve(p);
-        const r = await this.exec(`mkdir -p -- ${shellQuote(abs)}`, { abortSignal: options?.abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const msg = r.value.stderr.trim();
-            if (/permission denied/i.test(msg))
-                return { ok: false, error: new FileError("permission_denied", msg, abs) };
-            return { ok: false, error: new FileError("unknown", msg || `mkdir failed for ${abs}`, abs) };
-        }
-        return ok(undefined);
+        return this.posixFs.createDir(p, options);
     }
     async remove(p, options) {
-        const abs = this.resolve(p);
-        const flags = `${options?.recursive ? "r" : ""}${options?.force ? "f" : ""}`;
-        const r = await this.exec(`rm ${flags ? `-${flags}` : ""} -- ${shellQuote(abs)}`, { abortSignal: options?.abortSignal });
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, abs) };
-        if (r.value.exitCode !== 0) {
-            const msg = r.value.stderr.trim();
-            if (options?.force && /no such file/i.test(msg))
-                return ok(undefined);
-            if (/no such file/i.test(msg))
-                return { ok: false, error: new FileError("not_found", msg, abs) };
-            if (/permission denied/i.test(msg))
-                return { ok: false, error: new FileError("permission_denied", msg, abs) };
-            return { ok: false, error: new FileError("unknown", msg || `rm failed for ${abs}`, abs) };
-        }
-        return ok(undefined);
+        return this.posixFs.remove(p, options);
     }
     async createTempDir(prefix = "tmp-", abortSignal) {
-        const r = await this.exec(`mktemp -d -t ${shellQuote(`${prefix}XXXXXX`)}`, { abortSignal });
-        return this.tempResult(r, "mktemp -d");
+        return this.posixFs.createTempDir(prefix, abortSignal);
     }
     async createTempFile(options) {
-        const prefix = options?.prefix ?? "";
-        const suffix = options?.suffix ?? "";
-        const suffixArg = suffix ? `--suffix=${shellQuote(suffix)} -t` : "-t";
-        const r = await this.exec(`mktemp ${suffixArg} ${shellQuote(`${prefix}XXXXXX`)}`, { abortSignal: options?.abortSignal });
-        return this.tempResult(r, "mktemp");
+        return this.posixFs.createTempFile(options);
     }
     withCwdEnv(command, cwd, env) {
         const parts = [];
@@ -588,13 +549,6 @@ export class RemoteSshExecutionEnv {
         parts.push(command);
         return parts.join(" ");
     }
-    tempResult(r, label) {
-        if (!r.ok)
-            return { ok: false, error: fileErrorFromExec(r.error, undefined) };
-        if (r.value.exitCode !== 0)
-            return { ok: false, error: new FileError("unknown", r.value.stderr.trim() || `${label} failed`) };
-        return ok(r.value.stdout.trim());
-    }
     connErr(e) {
         const msg = e.message || String(e);
         if (e.level === "client-authentication" || /authentication|all configured authentication methods failed/i.test(msg)) {

package/dist/question.js

@@ -118,10 +118,10 @@ export class QuestionCoordinator {
     respond(id, principal, body) {
         const parsed = parseQuestionResponse(body);
         if (!parsed.ok)
-            return { status: 400, body: { error: parsed.error } };
+            return { status: 400, body: { error: parsed.error, errorCode: "request.body_shape" } };
         const entry = this.pending.get(id);
         if (!entry || (entry.owner !== null && entry.owner !== principal)) {
-            return { status: 404, body: { error: "no pending question for this id (answered, expired, or not on this replica)" } };
+            return { status: 404, body: { error: "no pending question for this id (answered, expired, or not on this replica)", errorCode: "question.not_pending" } };
         }
         entry.settle(parsed.value, "answered");
         return { status: 200, body: { questionId: id, delivery: "applied" } };

package/dist/run-local.js

@@ -254,7 +254,7 @@ export async function runLocal(argv, deps = {}) {
         toolResultStore: fileBackend.toolResultStore,
         ...(executionEnvFactory ? { executionEnvFactory } : {}),
         ...(lspManager ? { lspManager } : {}),
-        ...(!config.projectMemoryDisabled
+        ...(config.projectMemoryEnabled
             ? { loadProjectMemory: makeLoadProjectMemory({ logger }), probeInstructionSources: makeProbeInstructionSources() }
             : {}),
     });

package/dist/tool-approval.js

@@ -211,10 +211,10 @@ export class ToolApprovalCoordinator {
     respond(id, principal, body) {
         const parsed = parseToolApprovalResponse(body);
         if (!parsed.ok)
-            return { status: 400, body: { error: parsed.error } };
+            return { status: 400, body: { error: parsed.error, errorCode: "request.body_shape" } };
         const entry = this.pending.get(id);
         if (!entry || (entry.owner !== null && entry.owner !== principal)) {
-            return { status: 404, body: { error: "no pending tool approval for this id (settled, expired, or not on this replica)" } };
+            return { status: 404, body: { error: "no pending tool approval for this id (settled, expired, or not on this replica)", errorCode: "tool_approval.not_pending" } };
         }
         let rememberApplied;
         if (parsed.value === "allow_session")

package/dist/trace/ledger-sink.js

@@ -45,7 +45,7 @@ export function createLedgerSink(opts) {
                 break;
             case "status":
                 await flush();
-                await append("brain_status", brainStatusEventData(ev));
+                await append("status", brainStatusEventData(ev));
                 break;
             case "context_usage":
                 await flush();

package/dist/trace/project.d.ts

@@ -221,6 +221,7 @@ export interface TaskSummary {
     };
 }
 export declare function runSummary(run: RunRecord, latestEventType?: string): TaskSummary;
+export declare function normalizeRunEventType(type: string): string;
 export declare function mapTraceEvent(type: string, seq: number, data: Record<string, unknown>): {
     event: string;
     data: Record<string, unknown>;

package/dist/trace/project.js

@@ -299,6 +299,9 @@ export function runSummary(run, latestEventType) {
         lastStep: lastStep(latestEventType, run.status),
     };
 }
+export function normalizeRunEventType(type) {
+    return type === "brain_status" ? "status" : type;
+}
 export function mapTraceEvent(type, seq, data) {
     switch (type) {
         case "reasoning":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "1.316.0",
+  "version": "1.318.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",