@2kw/ai 7.4.0-dev.9 → 8.0.0-dev.1

package/dist/agent-config/schema.d.ts

@@ -571,7 +571,7 @@ export declare const agentSchema: {
                     };
                     readonly additionalProperties: {
                         readonly type: "string";
-                        readonly enum: readonly ["read", "write", "destructive", "approve", "auto", "deny"];
+                        readonly enum: readonly ["read", "write", "destructive", "approve", "deny"];
                     };
                 };
             };

package/dist/agent-config/schema.js

@@ -105,8 +105,8 @@ export const agentSchema = {
             properties: {
                 readOnlyHint: { type: "boolean" },
                 destructiveHint: { type: "boolean" },
-                // Optional. With destructiveHint: false it declares the tool harmless, so a write under
-                // `auto` may reach the approver (#938).
+                // Optional. With destructiveHint: false it declares the tool harmless, so a write that needs
+                // approval may be decided by the automatic approver in the Auto mode (#938, #1645).
                 openWorldHint: { type: "boolean" },
             },
         },
@@ -290,17 +290,17 @@ export const agentSchema = {
                     type: "object",
                     additionalProperties: false,
                     properties: {
-                        read: oneOfLowercase("allow", "auto", "approve", "block", "deny"),
-                        write: oneOfLowercase("auto", "approve", "block", "deny"),
-                        destructive: oneOfLowercase("block", "deny"),
+                        read: oneOfLowercase("allow", "approve", "block", "deny"),
+                        write: oneOfLowercase("approve", "block", "deny"),
+                        destructive: oneOfLowercase("approve", "block", "deny"),
                     },
                 },
                 tools: {
-                    // Value is a policy class or an action. Actions (approve, auto, deny) are exact lowercase;
+                    // Value is a policy class or an action. Actions (approve, deny) are exact lowercase;
                     // classes (read, write, destructive) are case-insensitive and lowercased by the validator.
                     type: "object",
                     propertyNames: { pattern: "\\S" },
-                    additionalProperties: { type: "string", enum: ["read", "write", "destructive", "approve", "auto", "deny"] },
+                    additionalProperties: { type: "string", enum: ["read", "write", "destructive", "approve", "deny"] },
                 },
             },
         },

package/dist/commands/agent-policy.js

@@ -24,7 +24,8 @@ export function makeAgentPolicyCommand() {
         .option("--tool <name>", "Answer for one tool instead of every configured tool")
         .option("--installation <id>", "Resolve the module tool catalog of this installation")
         .option("--mode <mode>", "Answer as a conversation in this mode would be gated: plan (every call that is not read-only is refused), " +
-        "ask (a person decides where the policy would ask the judge), auto (the policy as written)")
+        "ask (a person decides every call that needs approval), auto (the automatic approver decides reads and " +
+        "writes the server marks safe). Without it, the agent's default mode")
         .action(async (agentRef, opts, command) => {
         await runAction(command, async () => {
             const mode = parseModeOption(opts.mode);
@@ -49,11 +50,14 @@ export function makeAgentPolicyCommand() {
             // model, so they belong above the table rather than in a footnote.
             const auto = data?.autoApproval;
             const parts = [
-                `auto-approval ${auto?.enabled ? "on" : "off (every auto pauses for a human)"}`,
-                `judge ${auto?.judgeConfigured ? "configured" : "not configured (every candidate escalates)"}`,
+                `auto-approval ${auto?.enabled ? "on" : "off (every call the approver would decide pauses for a human)"}`,
+                `approver ${auto?.judgeConfigured ? "configured" : "not configured (every candidate escalates)"}`,
             ];
-            if (mode)
-                parts.push(`mode ${mode}`);
+            if (auto?.instructionsExceedJudgeBound) {
+                parts.push("instructions longer than the approver reads (every candidate escalates)");
+            }
+            if (data?.effectiveMode)
+                parts.push(`mode ${data.effectiveMode} (${data.effectiveModeSource})`);
             if (data?.catalogResolvedAt)
                 parts.push(`catalog resolved ${data.catalogResolvedAt}`);
             console.log(chalk.dim(parts.join(", ")));

package/dist/commands/dataset-versions.js

@@ -97,7 +97,6 @@ export function makeDatasetVersionsCommand() {
             const versionId = opts.versionId ?? (await resolveLatestVersionId(client, opts.dataset));
             await client.DELETE("/v1/datasets/{id}/versions/{versionId}/items/{itemId}", {
                 params: {
-                    // OpenAPI spec omits `id` in declared path params though `{id}` is in the URL template.
                     path: { id: opts.dataset, versionId, itemId },
                 },
             });
@@ -120,7 +119,6 @@ export function makeDatasetVersionsCommand() {
                 body.expectedOutput = JSON.parse(opts.expectedOutput);
             const { data } = await client.PATCH("/v1/datasets/{id}/versions/{versionId}/items/{itemId}/expected-output", {
                 params: {
-                    // OpenAPI spec omits `id` in declared path params though `{id}` is in the URL template.
                     path: { id: opts.dataset, versionId, itemId },
                 },
                 body: body,

package/dist/commands/datasets.js

@@ -138,7 +138,6 @@ export function makeDatasetsCommand() {
                 body.metadata = JSON.parse(opts.metadata);
             const { data } = await client.POST("/v1/datasets/{id}/versions/{versionId}/items", {
                 params: {
-                    // OpenAPI spec omits `id` in declared path params though `{id}` is in the URL template.
                     path: { id: opts.dataset, versionId },
                 },
                 body: body,
@@ -158,7 +157,6 @@ export function makeDatasetsCommand() {
             const items = JSON.parse(opts.items);
             const { data } = await client.POST("/v1/datasets/{id}/versions/{versionId}/items/bulk", {
                 params: {
-                    // OpenAPI spec omits `id` in declared path params though `{id}` is in the URL template.
                     path: { id: opts.dataset, versionId },
                 },
                 body: items,

package/dist/commands/experiments.js

@@ -335,7 +335,7 @@ export function makeExperimentsCommand() {
                 },
             });
             formatPage(data, command, [
-                "datasetItemId", "durationMs", "inputTokens", "outputTokens", "estimatedCost", "error",
+                "datasetItemId", "durationMs", "inputTokens", "outputTokens", "error",
             ]);
         });
     });
@@ -418,7 +418,7 @@ export function makeExperimentsCommand() {
                 // Only when something was skipped, so a clean run keeps its narrow table (#693).
                 const showSkipped = aggregates.some((agg) => skippedOf(agg) !== "");
                 const aggTable = new Table({
-                    head: ["Variant", "Items", "Avg Duration", "Avg Tokens", "Total Cost", ...(showSkipped ? ["Skipped"] : [])].map((h) => chalk.cyan(h)),
+                    head: ["Variant", "Items", "Avg Duration", "Avg Tokens", ...(showSkipped ? ["Skipped"] : [])].map((h) => chalk.cyan(h)),
                     wordWrap: true,
                 });
                 for (const agg of aggregates) {
@@ -427,7 +427,6 @@ export function makeExperimentsCommand() {
                         agg.itemCount ?? "—",
                         agg.avgDurationMs != null ? `${Math.round(agg.avgDurationMs)}ms` : "—",
                         agg.avgTokens != null ? Math.round(agg.avgTokens) : "—",
-                        agg.totalCost != null ? `$${agg.totalCost}` : "—",
                         ...(showSkipped ? [skippedOf(agg) || "—"] : []),
                     ]);
                 }

package/dist/lib/agent-run.js

@@ -5,8 +5,9 @@ import { CliUsageError } from "./errors.js";
 import { previewIsIncomplete, previewLines } from "./skills-apply-preview.js";
 export const CONVERSATION_MODES = ["plan", "ask", "auto"];
 /** `--mode` help text, in the words of the embedded chat's mode chip (#655). */
-export const MODE_OPTION_HELP = "Conversation mode: plan (read-only), ask (no automatic approver; calls that need approval wait for you), " +
-    "auto (the operator's policy as written). Without it, the conversation keeps its mode";
+export const MODE_OPTION_HELP = "Conversation mode: plan (read-only), ask (calls that need approval wait for you), " +
+    "auto (the automatic approver decides reads and writes the server marks safe; the rest wait for you). " +
+    "Without it, the conversation keeps its mode, else the agent's default; a mode the agent does not offer is refused";
 function isConversationMode(value) {
     return typeof value === "string" && CONVERSATION_MODES.includes(value);
 }

package/dist/lib/errors.js

@@ -102,6 +102,7 @@ const CODE_HINTS = {
         "Check pendingToolCalls and pendingApprovals in the run envelope.",
     unknown_tool_output: "That call id was not released by this response. Use the responseId of the latest envelope.",
     conversation_agent_mismatch: "This conversation belongs to another agent. Start a new conversation or run the agent that owns it.",
+    conversation_mode_not_offered: "The agent does not offer that mode. Use one of the modes the message lists (plan is always offered), or leave --mode out for the agent's default.",
     provider_quota_exhausted: "The model provider account is out of credits or at its spend limit. Add credits or raise the limit with the provider; retrying will not help.",
 };
 /** The most specific hint for an API error: gateway code, then known messages, then the status table. */
@@ -117,6 +118,9 @@ export function hintFor(err) {
     }
     if (err.code && Object.hasOwn(CODE_HINTS, err.code))
         return CODE_HINTS[err.code];
+    // The REST layer (the explain view) spells the same refusal as an errorCode.
+    if (err.errorCode === "CONVERSATION_MODE_NOT_OFFERED")
+        return CODE_HINTS.conversation_mode_not_offered;
     // The gateway answers `agent_not_published` (code), the REST layer AGENT_NOT_PUBLISHED (errorCode).
     if (err.code === "agent_not_published" || err.errorCode === "AGENT_NOT_PUBLISHED") {
         return NOT_PUBLISHED_HINT;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@2kw/ai",
-  "version": "7.4.0-dev.9",
+  "version": "8.0.0-dev.1",
   "description": "CLI for 2kw.ai — schema-driven document extraction, an OpenAI-compatible EU LLM gateway, transcription, prompts, datasets, and experiments from your terminal or agentic workflows. Ships as 2kw, backbone, and bb.",
   "keywords": [
     "cli",