@2kw/ai 6.4.0-dev.8 → 7.0.0-dev.4

package/dist/agent-config/schema.d.ts

@@ -221,6 +221,25 @@ export declare const agentSchema: {
                 };
             };
         };
+        readonly bashTool: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["type"];
+            readonly properties: {
+                readonly type: {
+                    readonly const: "backbone.bash";
+                };
+                readonly approval: {
+                    readonly enum: readonly ["sandbox", "pause"];
+                };
+                readonly outputs: {
+                    readonly enum: readonly ["immediate", "held"];
+                };
+                readonly annotations: {
+                    readonly $ref: "#/$defs/annotations";
+                };
+            };
+        };
         readonly functionTool: {
             readonly type: "object";
             readonly additionalProperties: false;
@@ -335,6 +354,18 @@ export declare const agentSchema: {
                 readonly then: {
                     readonly $ref: "#/$defs/skillTool";
                 };
+            }, {
+                readonly if: {
+                    required: string[];
+                    properties: {
+                        type: {
+                            const: string;
+                        };
+                    };
+                };
+                readonly then: {
+                    readonly $ref: "#/$defs/bashTool";
+                };
             }, {
                 readonly if: {
                     required: string[];

package/dist/agent-config/schema.js

@@ -35,6 +35,7 @@ const BUILTIN_TYPES = [
     "backbone.document_convert",
     "backbone.todo",
     "backbone.skill",
+    "backbone.bash",
     "function",
 ];
 const typeIs = (t) => ({ required: ["type"], properties: { type: { const: t } } });
@@ -161,6 +162,19 @@ export const agentSchema = {
                 skills: { type: "array", minItems: 1, maxItems: 20, uniqueItems: true, items: { type: "string", pattern: SKILL_REF } },
             },
         },
+        // The envelope BashToolEntryValidator accepts: no name, no requiresConfirmation, and none of
+        // the egress of the withdrawn per-agent network design (#925).
+        bashTool: {
+            type: "object",
+            additionalProperties: false,
+            required: ["type"],
+            properties: {
+                type: { const: "backbone.bash" },
+                approval: { enum: ["sandbox", "pause"] },
+                outputs: { enum: ["immediate", "held"] },
+                annotations: { $ref: "#/$defs/annotations" },
+            },
+        },
         functionTool: {
             type: "object",
             additionalProperties: false,
@@ -194,6 +208,7 @@ export const agentSchema = {
                 { if: typeIs("backbone.document_convert"), then: { $ref: "#/$defs/documentConvertTool" } },
                 { if: typeIs("backbone.todo"), then: { $ref: "#/$defs/todoTool" } },
                 { if: typeIs("backbone.skill"), then: { $ref: "#/$defs/skillTool" } },
+                { if: typeIs("backbone.bash"), then: { $ref: "#/$defs/bashTool" } },
                 { if: typeIs("function"), then: { $ref: "#/$defs/functionTool" } },
                 {
                     // The validator reports these with the reason from NON_AUTHORABLE_TOOL_TYPES; this keeps the published schema honest.

package/dist/agent-config/template.js

@@ -33,6 +33,8 @@ tools: []
 #   - type: backbone.todo
 #   - type: backbone.skill
 #     skills: [skill-name@latest]
+#   - type: backbone.bash
+#     approval: sandbox
 #   - type: function
 #     name: lookup_order
 #     description: Look up an order by number

package/dist/commands/experiments.js

@@ -16,8 +16,18 @@ function formatComparisonCell(result) {
         return chalk.red("ERROR");
     const scores = result.scores ?? [];
     if (scores.length > 0) {
-        const avg = scores.reduce((sum, s) => sum + (s.score ?? 0), 0) / scores.length;
-        return avg.toFixed(2);
+        // A SKIP carries a placeholder 0.0 that is not a rating, and a comment-only
+        // score has no number; neither takes part in the average (#693).
+        const rated = scores.filter((s) => s.label !== "SKIP" && s.score != null);
+        if (rated.length > 0) {
+            return (rated.reduce((sum, s) => sum + s.score, 0) / rated.length).toFixed(2);
+        }
+        // A label-only verdict (#1163) has no number; show its label, as the console does.
+        const verdict = scores.find((s) => s.label && s.label !== "SKIP");
+        if (verdict)
+            return String(verdict.label);
+        if (scores.every((s) => s.label === "SKIP"))
+            return chalk.dim("skipped");
     }
     return result.durationMs != null ? `${result.durationMs}ms` : chalk.dim("done");
 }
@@ -392,8 +402,14 @@ export function makeExperimentsCommand() {
                 console.log(chalk.dim(`Page ${(page.number ?? 0) + 1} of ${page.totalPages ?? 0} (${page.totalElements ?? 0} total)`));
             }
             if (aggregates.length > 0) {
+                const skippedOf = (agg) => Object.entries((agg.skippedEvaluatorCounts ?? {}))
+                    .filter(([, n]) => n > 0)
+                    .map(([evaluatorId, n]) => `${evaluatorId}: ${n}`)
+                    .join(", ");
+                // Only when something was skipped, so a clean run keeps its narrow table (#693).
+                const showSkipped = aggregates.some((agg) => skippedOf(agg) !== "");
                 const aggTable = new Table({
-                    head: ["Variant", "Items", "Avg Duration", "Avg Tokens", "Total Cost"].map((h) => chalk.cyan(h)),
+                    head: ["Variant", "Items", "Avg Duration", "Avg Tokens", "Total Cost", ...(showSkipped ? ["Skipped"] : [])].map((h) => chalk.cyan(h)),
                     wordWrap: true,
                 });
                 for (const agg of aggregates) {
@@ -403,6 +419,7 @@ export function makeExperimentsCommand() {
                         agg.avgDurationMs != null ? `${Math.round(agg.avgDurationMs)}ms` : "—",
                         agg.avgTokens != null ? Math.round(agg.avgTokens) : "—",
                         agg.totalCost != null ? `$${agg.totalCost}` : "—",
+                        ...(showSkipped ? [skippedOf(agg) || "—"] : []),
                     ]);
                 }
                 console.log(chalk.bold("\nAggregates:"));

package/dist/commands/providers.js

@@ -14,7 +14,7 @@ export function makeProvidersCommand() {
             const { data } = await client.GET("/v1/providers", {
                 params: { query: { search: opts.search, ...paginationParams(opts) } },
             });
-            formatPage(data, command, ["id", "name", "type", "enabled", "createdAt"]);
+            formatPage(data, command, ["id", "name", "provider", "createdAt"]);
         });
     });
     cmd.addCommand(list);
@@ -36,7 +36,7 @@ export function makeProvidersCommand() {
         .description("Create a new provider")
         .requiredOption("-n, --name <name>", "Provider name")
         .requiredOption("--type <type>", "Provider type (openai, azure_openai, anthropic, xai, mistral, ollama)")
-        .requiredOption("--provider-api-key <key>", "API key for the AI provider")
+        .option("--provider-api-key <key>", "API key for the AI provider (not needed for ollama)")
         .option("-c, --config <json>", "Provider config as JSON")
         .action(async (opts, command) => {
         await runAction(command, async () => {
@@ -54,7 +54,6 @@ export function makeProvidersCommand() {
         .argument("<id>", "Provider ID")
         .option("-n, --name <name>", "New name")
         .option("--type <type>", "New type")
-        .option("--enabled <bool>", "Enable/disable")
         .option("-c, --config <json>", "New config as JSON")
         .action(async (id, opts, command) => {
         await runAction(command, async () => {
@@ -64,8 +63,6 @@ export function makeProvidersCommand() {
                 body.name = opts.name;
             if (opts.type)
                 body.provider = opts.type.toUpperCase();
-            if (opts.enabled !== undefined)
-                body.enabled = opts.enabled === "true";
             if (opts.config)
                 body.config = JSON.parse(opts.config);
             const { data } = await client.PATCH("/v1/providers/{id}", {
@@ -95,13 +92,7 @@ export function makeProvidersCommand() {
         await runAction(command, async () => {
             const client = getClient(command);
             const { data } = await client.GET("/v1/providers/all");
-            formatList(data, command, [
-                "id",
-                "name",
-                "provider",
-                "enabled",
-                "createdAt",
-            ]);
+            formatList(data, command, ["id", "name", "provider", "createdAt"]);
         });
     });
     cmd

package/dist/lib/agent-run.d.ts

@@ -116,6 +116,9 @@ export declare function parseAgentModel(model?: string): {
  * clipboard. Newlines and tabs stay. JSON output is never passed through this.
  */
 export declare function stripControl(s: string): string;
+export declare function hasInvisible(s: string): boolean;
+/** Replaces each hidden code point with a visible `<U+XXXX>`, so approving a diff means having seen it. */
+export declare function revealInvisible(s: string): string;
 export declare function shellQuote(value: string): string;
 /** "Connect a (h), allow the agent to use b (h) and reconnect c (h)". */
 export declare function connectionsSentence(connections: PendingConnection[]): string;

package/dist/lib/agent-run.js

@@ -89,6 +89,39 @@ const CONTROL_CHARS = /[\x00-\x08\x0b-\x1f\x7f-\x9f]/g;
 export function stripControl(s) {
     return s.replace(CONTROL_CHARS, "");
 }
+/**
+ * Code points that print as nothing, or reorder what surrounds them, yet reach the model: Unicode
+ * tags, zero-width characters, directional marks, embeddings, overrides and isolates, the word
+ * joiner and the byte-order mark (#1027). As numbers, not an escaped regex, so no tool can fold
+ * them into the source. Kept in step with `surface/src/core/skills-apply-preview.ts`.
+ */
+const INVISIBLE_RANGES = [
+    [0xe0000, 0xe007f],
+    [0x200b, 0x200f],
+    [0x202a, 0x202e],
+    [0x2060, 0x2060],
+    [0x2066, 0x2069],
+    [0x061c, 0x061c],
+    [0xfeff, 0xfeff],
+];
+function isInvisible(codePoint) {
+    return INVISIBLE_RANGES.some(([low, high]) => codePoint >= low && codePoint <= high);
+}
+export function hasInvisible(s) {
+    for (const char of s)
+        if (isInvisible(char.codePointAt(0)))
+            return true;
+    return false;
+}
+/** Replaces each hidden code point with a visible `<U+XXXX>`, so approving a diff means having seen it. */
+export function revealInvisible(s) {
+    let out = "";
+    for (const char of s) {
+        const codePoint = char.codePointAt(0);
+        out += isInvisible(codePoint) ? `<U+${codePoint.toString(16).toUpperCase().padStart(4, "0")}>` : char;
+    }
+    return out;
+}
 export function shellQuote(value) {
     if (/^[A-Za-z0-9._@/:-]+$/.test(value))
         return value;

package/dist/lib/approval-prompt.js

@@ -1,6 +1,6 @@
 import { createInterface } from "node:readline/promises";
 import chalk from "chalk";
-import { stripControl } from "./agent-run.js";
+import { hasInvisible, revealInvisible, stripControl } from "./agent-run.js";
 import { REMEMBER_NOTE, previewIsIncomplete, previewLines } from "./skills-apply-preview.js";
 /** Raised when the prompt's input closes (EOF, Ctrl+C, Ctrl+D) before an answer arrives. */
 export class PromptAbortedError extends Error {
@@ -50,7 +50,7 @@ export function readlineAsk(input = process.stdin, output = process.stderr) {
 }
 export async function promptApprovals(pending, ask, write = (line) => console.error(line)) {
     const answers = new Map();
-    const s = stripControl;
+    const s = (value) => revealInvisible(stripControl(value));
     for (const [index, a] of pending.entries()) {
         // A connector approval carries no policy class (#949): "unknown" may be destructive, so it is never
         // offered a standing grant here; the server drops one for a destructive row anyway.
@@ -62,7 +62,12 @@ export async function promptApprovals(pending, ask, write = (line) => console.er
             // A SkillsApply change reads as its diff (#782, spec §10). When the preview leaves changes
             // out, the full arguments follow it: this prompt never runs with --json, so it is the only
             // place the member can read what would persist (spec D7).
-            for (const line of previewLines(a.preview))
+            const lines = previewLines(a.preview);
+            // Hidden characters are shown as <U+XXXX> below; the warning says why (#1027, spec D7).
+            if (lines.some(hasInvisible)) {
+                write(chalk.yellow("Hidden characters found: shown as <U+XXXX>. A model reads them; you would not see them. Check each marked line before you approve."));
+            }
+            for (const line of lines)
                 write(colourPreviewLine(s(line)));
             if (previewIsIncomplete(a.preview)) {
                 write(chalk.dim("Full request (the preview leaves changes out):"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@2kw/ai",
-  "version": "6.4.0-dev.8",
+  "version": "7.0.0-dev.4",
   "description": "CLI for 2kw.ai — schema-driven document extraction, an OpenAI-compatible EU LLM gateway, transcription, prompts, datasets, and experiments from your terminal or agentic workflows. Ships as 2kw, backbone, and bb.",
   "keywords": [
     "cli",