@2kw/ai 7.4.0-dev.13 → 7.4.0-dev.15

package/dist/agent-config/schema.d.ts

@@ -571,7 +571,7 @@ export declare const agentSchema: {
                     };
                     readonly additionalProperties: {
                         readonly type: "string";
-                        readonly enum: readonly ["read", "write", "destructive", "approve", "auto", "deny"];
+                        readonly enum: readonly ["read", "write", "destructive", "approve", "deny"];
                     };
                 };
             };

package/dist/agent-config/schema.js

@@ -105,8 +105,8 @@ export const agentSchema = {
             properties: {
                 readOnlyHint: { type: "boolean" },
                 destructiveHint: { type: "boolean" },
-                // Optional. With destructiveHint: false it declares the tool harmless, so a write under
-                // `auto` may reach the approver (#938).
+                // Optional. With destructiveHint: false it declares the tool harmless, so a write that needs
+                // approval may be decided by the automatic approver in the Auto mode (#938, #1645).
                 openWorldHint: { type: "boolean" },
             },
         },
@@ -290,17 +290,17 @@ export const agentSchema = {
                     type: "object",
                     additionalProperties: false,
                     properties: {
-                        read: oneOfLowercase("allow", "auto", "approve", "block", "deny"),
-                        write: oneOfLowercase("auto", "approve", "block", "deny"),
-                        destructive: oneOfLowercase("block", "deny"),
+                        read: oneOfLowercase("allow", "approve", "block", "deny"),
+                        write: oneOfLowercase("approve", "block", "deny"),
+                        destructive: oneOfLowercase("approve", "block", "deny"),
                     },
                 },
                 tools: {
-                    // Value is a policy class or an action. Actions (approve, auto, deny) are exact lowercase;
+                    // Value is a policy class or an action. Actions (approve, deny) are exact lowercase;
                     // classes (read, write, destructive) are case-insensitive and lowercased by the validator.
                     type: "object",
                     propertyNames: { pattern: "\\S" },
-                    additionalProperties: { type: "string", enum: ["read", "write", "destructive", "approve", "auto", "deny"] },
+                    additionalProperties: { type: "string", enum: ["read", "write", "destructive", "approve", "deny"] },
                 },
             },
         },

package/dist/commands/agent-policy.js

@@ -24,7 +24,8 @@ export function makeAgentPolicyCommand() {
         .option("--tool <name>", "Answer for one tool instead of every configured tool")
         .option("--installation <id>", "Resolve the module tool catalog of this installation")
         .option("--mode <mode>", "Answer as a conversation in this mode would be gated: plan (every call that is not read-only is refused), " +
-        "ask (a person decides where the policy would ask the judge), auto (the policy as written)")
+        "ask (a person decides every call that needs approval), auto (the automatic approver decides reads and " +
+        "writes the server marks safe). Without it, the agent's default mode")
         .action(async (agentRef, opts, command) => {
         await runAction(command, async () => {
             const mode = parseModeOption(opts.mode);
@@ -49,14 +50,14 @@ export function makeAgentPolicyCommand() {
             // model, so they belong above the table rather than in a footnote.
             const auto = data?.autoApproval;
             const parts = [
-                `auto-approval ${auto?.enabled ? "on" : "off (every auto pauses for a human)"}`,
-                `judge ${auto?.judgeConfigured ? "configured" : "not configured (every candidate escalates)"}`,
+                `auto-approval ${auto?.enabled ? "on" : "off (every call the approver would decide pauses for a human)"}`,
+                `approver ${auto?.judgeConfigured ? "configured" : "not configured (every candidate escalates)"}`,
             ];
             if (auto?.instructionsExceedJudgeBound) {
-                parts.push("instructions longer than the judge reads (every candidate escalates)");
+                parts.push("instructions longer than the approver reads (every candidate escalates)");
             }
-            if (mode)
-                parts.push(`mode ${mode}`);
+            if (data?.effectiveMode)
+                parts.push(`mode ${data.effectiveMode} (${data.effectiveModeSource})`);
             if (data?.catalogResolvedAt)
                 parts.push(`catalog resolved ${data.catalogResolvedAt}`);
             console.log(chalk.dim(parts.join(", ")));

package/dist/lib/agent-run.js

@@ -5,8 +5,9 @@ import { CliUsageError } from "./errors.js";
 import { previewIsIncomplete, previewLines } from "./skills-apply-preview.js";
 export const CONVERSATION_MODES = ["plan", "ask", "auto"];
 /** `--mode` help text, in the words of the embedded chat's mode chip (#655). */
-export const MODE_OPTION_HELP = "Conversation mode: plan (read-only), ask (no automatic approver; calls that need approval wait for you), " +
-    "auto (the operator's policy as written). Without it, the conversation keeps its mode";
+export const MODE_OPTION_HELP = "Conversation mode: plan (read-only), ask (calls that need approval wait for you), " +
+    "auto (the automatic approver decides reads and writes the server marks safe; the rest wait for you). " +
+    "Without it, the conversation keeps its mode, else the agent's default; a mode the agent does not offer is refused";
 function isConversationMode(value) {
     return typeof value === "string" && CONVERSATION_MODES.includes(value);
 }

package/dist/lib/errors.js

@@ -102,6 +102,7 @@ const CODE_HINTS = {
         "Check pendingToolCalls and pendingApprovals in the run envelope.",
     unknown_tool_output: "That call id was not released by this response. Use the responseId of the latest envelope.",
     conversation_agent_mismatch: "This conversation belongs to another agent. Start a new conversation or run the agent that owns it.",
+    conversation_mode_not_offered: "The agent does not offer that mode. Use one of the modes the message lists (plan is always offered), or leave --mode out for the agent's default.",
     provider_quota_exhausted: "The model provider account is out of credits or at its spend limit. Add credits or raise the limit with the provider; retrying will not help.",
 };
 /** The most specific hint for an API error: gateway code, then known messages, then the status table. */
@@ -117,6 +118,9 @@ export function hintFor(err) {
     }
     if (err.code && Object.hasOwn(CODE_HINTS, err.code))
         return CODE_HINTS[err.code];
+    // The REST layer (the explain view) spells the same refusal as an errorCode.
+    if (err.errorCode === "CONVERSATION_MODE_NOT_OFFERED")
+        return CODE_HINTS.conversation_mode_not_offered;
     // The gateway answers `agent_not_published` (code), the REST layer AGENT_NOT_PUBLISHED (errorCode).
     if (err.code === "agent_not_published" || err.errorCode === "AGENT_NOT_PUBLISHED") {
         return NOT_PUBLISHED_HINT;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@2kw/ai",
-  "version": "7.4.0-dev.13",
+  "version": "7.4.0-dev.15",
   "description": "CLI for 2kw.ai — schema-driven document extraction, an OpenAI-compatible EU LLM gateway, transcription, prompts, datasets, and experiments from your terminal or agentic workflows. Ships as 2kw, backbone, and bb.",
   "keywords": [
     "cli",