@agentproto/driver-agent-cli 2.4.0 → 2.4.1

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { A as AgentCliHandle, a as AgentCliRuntime, b as AgentCliDefinition, c as AgentCliRuntimeSession, d as AgentCliClient, S as SetModelResult, e as AgentCliPrintConfig, R as RuntimeConfig, C as ContinuationStrategyId, f as AgentCliStartOptions, T as TurnContext, g as ContinuationKeyScope } from './schema-BYbdjuKI.js';
-export { h as AgentCliAuth, i as AgentCliCapabilities, j as AgentCliConnectOptions, k as AgentCliContinuation, l as AgentCliFrontmatter, m as AgentCliInstallMethod, n as AgentCliMcpBlock, o as AgentCliMode, p as AgentCliModelEntry, q as AgentCliModels, r as AgentCliOption, s as AgentCliOptionType, t as AgentCliPinnedSessionTuning, u as AgentCliPresetDeclaration, v as AgentCliProtocol, w as AgentCliRouteSelection, x as AgentCliSession, y as AgentCliSessionMode, z as AgentCliSetupPersist, B as AgentCliSetupSkipIf, D as AgentCliSetupStep, E as AgentCliVersionCheck, F as RuntimeConfigInput, G as SetEffortResult, H as SetSessionModeResult, I as agentCliFrontmatterSchema, J as runtimeConfigSchema } from './schema-BYbdjuKI.js';
+import { A as AgentCliHandle, a as AgentCliRuntime, b as AgentCliDefinition, c as AgentCliRuntimeSession, d as AgentCliClient, S as SetModelResult, e as AgentCliPrintConfig, R as RuntimeConfig, C as ContinuationStrategyId, f as AgentCliStartOptions, T as TurnContext, g as ContinuationKeyScope } from './schema-BKnQX5Sj.js';
+export { h as AgentCliAuth, i as AgentCliCapabilities, j as AgentCliConnectOptions, k as AgentCliContinuation, l as AgentCliFrontmatter, m as AgentCliInstallMethod, n as AgentCliMcpBlock, o as AgentCliMode, p as AgentCliModelEntry, q as AgentCliModels, r as AgentCliOption, s as AgentCliOptionType, t as AgentCliPinnedSessionTuning, u as AgentCliPresetDeclaration, v as AgentCliProtocol, w as AgentCliRouteSelection, x as AgentCliSession, y as AgentCliSessionMode, z as AgentCliSetupPersist, B as AgentCliSetupSkipIf, D as AgentCliSetupStep, E as AgentCliVersionCheck, F as RuntimeConfigInput, G as SetEffortResult, H as SetSessionModeResult, I as agentCliFrontmatterSchema, J as runtimeConfigSchema } from './schema-BKnQX5Sj.js';
 import { StreamEvent, AcpMcpServer } from '@agentproto/acp';
 export { StreamEvent } from '@agentproto/acp';
 import { ChildProcess } from 'node:child_process';
@@ -334,6 +334,10 @@ interface PrintArmOptions {
     /** Extra write-capable paths beyond the default toolchain set, e.g. the
      *  per-session `CLAUDE_CONFIG_DIR` temp dir set up by the caller. */
     extraWritePaths?: string[];
+    /** Extra READ-only paths beyond the confinement boundary — the exact-file
+     *  AGENTS.md grant (`AgentCliStartOptions.additionalReadPaths`). READ
+     *  exceptions only; never widens writes. */
+    extraReadPaths?: string[];
     /**
      * The explicitly requested model id — when set, a wire event that
      * truthfully reports which model the agent ACTUALLY started on (today:

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { LEGACY_GATEWAY_MODE_IDS, LEGACY_POSTURE_MODE_IDS, RuntimeConfigError, agentCliFrontmatterSchema, applyModelCommand, autoAllowPermissionHandler, composeSpawn, createAcpProtocolArm, createAgentCliRuntime, createArmSessionControls, createJcodeMapperState, createMastraMapperState, createPrintSession, createProprietaryProtocolArm, defineAgentCli, inferLegacyModeKind, isLegacyExtractedModeId, isModelSwitchAcknowledgement, mapJcodeEvent, mapMastraEvent, parseModelSwitchCommand, planModePermissionHandler, promptTurn, resolveContinuationStrategy, runtimeConfigSchema, toFileBasedMcpServers } from './chunk-DBU5VORQ.mjs';
+export { LEGACY_GATEWAY_MODE_IDS, LEGACY_POSTURE_MODE_IDS, RuntimeConfigError, agentCliFrontmatterSchema, applyModelCommand, autoAllowPermissionHandler, composeSpawn, createAcpProtocolArm, createAgentCliRuntime, createArmSessionControls, createJcodeMapperState, createMastraMapperState, createPrintSession, createProprietaryProtocolArm, defineAgentCli, inferLegacyModeKind, isLegacyExtractedModeId, isModelSwitchAcknowledgement, mapJcodeEvent, mapMastraEvent, parseModelSwitchCommand, planModePermissionHandler, promptTurn, resolveContinuationStrategy, runtimeConfigSchema, toFileBasedMcpServers } from './chunk-E4MSI6PV.mjs';
 
 /**
  * @agentproto/driver-agent-cli v0.1.0-alpha

package/dist/manifest/index.d.ts

@@ -1,5 +1,5 @@
-import { l as AgentCliFrontmatter, A as AgentCliHandle } from '../schema-BYbdjuKI.js';
-export { I as agentCliFrontmatterSchema } from '../schema-BYbdjuKI.js';
+import { l as AgentCliFrontmatter, A as AgentCliHandle } from '../schema-BKnQX5Sj.js';
+export { I as agentCliFrontmatterSchema } from '../schema-BKnQX5Sj.js';
 import '@agentproto/acp';
 import '@agentproto/acp/client';
 import '@agentproto/command-sandbox';

package/dist/manifest/index.mjs

@@ -1,5 +1,5 @@
-import { agentCliFrontmatterSchema, defineAgentCli } from '../chunk-DBU5VORQ.mjs';
-export { agentCliFrontmatterSchema } from '../chunk-DBU5VORQ.mjs';
+import { agentCliFrontmatterSchema, defineAgentCli } from '../chunk-E4MSI6PV.mjs';
+export { agentCliFrontmatterSchema } from '../chunk-E4MSI6PV.mjs';
 import matter from 'gray-matter';
 
 /**

package/dist/{schema-BYbdjuKI.d.ts → schema-BKnQX5Sj.d.ts}

@@ -1145,6 +1145,17 @@ interface AgentCliStartOptions {
      * both `posture` and legacy `config.mode` — each axis is independent.
      */
     contextProfile?: string;
+    /**
+     * Absolute paths OUTSIDE `cwd` the adapter's workspace toolset may READ
+     * (never write). Daemon-authored only (`spawnAgentSession` hands it down
+     * for the exact AGENTS.md an inherited pointer prompt names). Threaded two
+     * ways: onto the child env (`AGENTPROTO_ADDITIONAL_READ_PATHS`, for
+     * adapters that build their own toolset from it) and onto the
+     * `commandSandbox` confinement as extra READ paths — writes and sibling
+     * reads stay denied either way. Adapters that can't model the grant
+     * ignore it.
+     */
+    additionalReadPaths?: string[];
     /**
      * OS-level confinement for the spawned child itself (macOS Seatbelt /
      * Linux bubblewrap, `@agentproto/command-sandbox`) — confines the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/driver-agent-cli",
-  "version": "2.4.0",
+  "version": "2.4.1",
   "description": "@agentproto/driver-agent-cli — AIP-45 AGENT-CLI.md reference implementation. Multi-protocol runner that loads an AGENT-CLI.md manifest, spawns the binary, and dispatches turns through an ACP / MCP / proprietary arm. ACP arm delegates to @agentproto/acp; emits the canonical StreamEvent taxonomy regardless of underlying protocol.",
   "keywords": [
     "agentproto",
@@ -53,8 +53,8 @@
   "dependencies": {
     "gray-matter": "^4.0.3",
     "zod": "^4.5.4",
+    "@agentproto/acp": "0.8.0",
     "@agentproto/command-sandbox": "0.2.0",
-    "@agentproto/acp": "0.7.3",
     "@agentproto/define-doctype": "0.1.1"
   },
   "devDependencies": {
@@ -62,7 +62,7 @@
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "vitest": "^3.2.4",
-    "@agentproto/tooling": "0.1.0-alpha.0"
+    "@agentproto/tooling": "0.1.0"
   },
   "scripts": {
     "dev": "tsup --watch",