@atlasharness/atlascode 0.1.48 → 0.1.49

package/dist/cli.js

@@ -55323,6 +55323,9 @@ function createSandboxManager(deps, backend) {
     const allowedDomains = [
       ...s?.sandbox?.network?.allowedDomains || []
     ];
+    const deniedDomains = [
+      ...s?.sandbox?.network?.deniedDomains || []
+    ];
     const allowWrite = [".", deps.getAtlasTempDir()];
     const denyWrite = [];
     const denyRead = [];
@@ -55375,7 +55378,7 @@ function createSandboxManager(deps, backend) {
     return {
       network: {
         allowedDomains,
-        deniedDomains: [],
+        deniedDomains,
         allowUnixSockets: s?.sandbox?.network?.allowUnixSockets,
         allowAllUnixSockets: s?.sandbox?.network?.allowAllUnixSockets,
         allowLocalBinding: s?.sandbox?.network?.allowLocalBinding,
@@ -55621,7 +55624,6 @@ var init_createSandboxManager = __esm(() => {
   init_sandbox_backend();
   init_ripgrep();
 });
-
 // src/sandbox/index.ts
 var init_sandbox = __esm(() => {
   init_config4();
@@ -80597,7 +80599,7 @@ var init_autoCompactWindow = __esm(() => {
 // src/engine/context/autoCompact.ts
 import { randomUUID as randomUUID17 } from "crypto";
 function resolveModelContextWindow(model) {
-  return getProviderContextWindow(model) ?? MODEL_CONTEXT_WINDOW_DEFAULT;
+  return getProviderContextWindow(model) ?? HARD_DEFAULT_CONTEXT_WINDOW;
 }
 function setAutoCompactSettingsSource(next) {
   autoCompactSettingsSource = next;
@@ -80750,7 +80752,7 @@ async function autoCompactIfNeeded(messages, tracking, deps) {
     };
   }
 }
-var AUTOCOMPACT_BUFFER_TOKENS = 13000, MAX_CONSECUTIVE_AUTOCOMPACT_FAILURES = 3, MODEL_CONTEXT_WINDOW_DEFAULT = 150000, autoCompactSettingsSource = null, autoCompactWindowSettingsSource = null, WARNING_THRESHOLD_BUFFER_TOKENS = 20000, ERROR_THRESHOLD_BUFFER_TOKENS = 20000, MANUAL_COMPACT_BUFFER_TOKENS = 3000;
+var AUTOCOMPACT_BUFFER_TOKENS = 13000, MAX_CONSECUTIVE_AUTOCOMPACT_FAILURES = 3, autoCompactSettingsSource = null, autoCompactWindowSettingsSource = null, WARNING_THRESHOLD_BUFFER_TOKENS = 20000, ERROR_THRESHOLD_BUFFER_TOKENS = 20000, MANUAL_COMPACT_BUFFER_TOKENS = 3000;
 var init_autoCompact = __esm(() => {
   init_modelprovider2();
   init_config();
@@ -214569,7 +214571,7 @@ function getContextWindowForModel(model, betas) {
   if (providerCtx !== undefined) {
     return providerCtx;
   }
-  return MODEL_CONTEXT_WINDOW_DEFAULT2;
+  return MODEL_CONTEXT_WINDOW_DEFAULT;
 }
 function calculateContextPercentages(currentUsage, contextWindowSize) {
   if (!currentUsage) {
@@ -214593,9 +214595,10 @@ function getModelMaxOutputTokens(model) {
     upperLimit: MAX_OUTPUT_TOKENS_UPPER_LIMIT
   };
 }
-var MODEL_CONTEXT_WINDOW_DEFAULT2 = 150000, COMPACT_MAX_OUTPUT_TOKENS2 = 20000, MAX_OUTPUT_TOKENS_DEFAULT = 32000, MAX_OUTPUT_TOKENS_UPPER_LIMIT = 64000, CAPPED_DEFAULT_MAX_TOKENS = 8000;
+var MODEL_CONTEXT_WINDOW_DEFAULT, COMPACT_MAX_OUTPUT_TOKENS2 = 20000, MAX_OUTPUT_TOKENS_DEFAULT = 32000, MAX_OUTPUT_TOKENS_UPPER_LIMIT = 64000, CAPPED_DEFAULT_MAX_TOKENS = 8000;
 var init_context2 = __esm(() => {
   init_modelprovider2();
+  MODEL_CONTEXT_WINDOW_DEFAULT = HARD_DEFAULT_CONTEXT_WINDOW;
 });
 
 // src/tui/cost-tracker.ts
@@ -333891,6 +333894,9 @@ function buildYoloRejectionMessage(reason) {
   const ruleHint = feature("BASH_CLASSIFIER") ? `To allow this type of action in the future, the user can add a permission rule like ` + `Bash(prompt: <description of allowed action>) to their settings. ` + `At the end of your session, recommend what permission rules to add so you don't get blocked again.` : `To allow this type of action in the future, the user can add a Bash permission rule to their settings.`;
   return `${prefix}${reason}. ` + `If you have other tasks that don't depend on this action, continue working on those. ` + `${DENIAL_WORKAROUND_GUIDANCE2} ` + ruleHint;
 }
+function buildYoloRejectionMessageWithRetry(reason) {
+  return buildYoloRejectionMessage(reason) + " A PermissionDenied hook indicated this action may be retried: you may try the action again.";
+}
 function buildClassifierUnavailableMessage(toolName, classifierModel) {
   return `${classifierModel} is temporarily unavailable, so auto mode cannot determine the safety of ${toolName} right now. ` + `Wait briefly and then try this action again. ` + `If it keeps failing, continue with other tasks that don't require this action and come back to it later. ` + `Note: reading files, searching code, and other read-only operations do not require the classifier and can still be used.`;
 }
@@ -337877,6 +337883,24 @@ async function runPermissionRequestHooksForHeadlessAgent(tool, input, toolUseID,
   }
   return null;
 }
+async function runPermissionDeniedHooks(tool, input, toolUseID, reason, context, permissionMode) {
+  let retry = false;
+  try {
+    for await (const hookResult of executePermissionDeniedHooks(tool.name, toolUseID, input, reason, context, permissionMode, context.abortController.signal)) {
+      if (hookResult.retry) {
+        retry = true;
+      }
+    }
+  } catch (error) {
+    logError3(new Error("PermissionDenied hook failed", {
+      cause: toError2(error)
+    }));
+  }
+  if (retry) {
+    logForDebugging3("PermissionDenied hook set retry=true; rejection carries retry guidance", { level: "info" });
+  }
+  return retry;
+}
 function persistDenialState(context, newState) {
   if (context.localDenialTracking) {
     Object.assign(context.localDenialTracking, newState);
@@ -338289,6 +338313,7 @@ var classifierDecisionModule, autoModeStateModule3, CLASSIFIER_FAIL_CLOSED_REFRE
         if (classifierResult.unavailable) {
           if (getFeatureValue_CACHED_WITH_REFRESH("atlas_iron_gate_closed", true, CLASSIFIER_FAIL_CLOSED_REFRESH_MS)) {
             logForDebugging3("Auto mode classifier unavailable, denying with retry guidance (fail closed)", { level: "warn" });
+            await runPermissionDeniedHooks(tool, input, toolUseID, "Classifier unavailable", context, appState.toolPermissionContext.mode);
             return {
               behavior: "deny",
               decisionReason: {
@@ -338307,9 +338332,11 @@ var classifierDecisionModule, autoModeStateModule3, CLASSIFIER_FAIL_CLOSED_REFRE
         logForDebugging3(`Auto mode classifier blocked action: ${classifierResult.reason}`, { level: "warn" });
         const denialLimitResult = handleDenialLimitExceeded(newDenialState, appState, classifierResult.reason, assistantMessage, tool, result, context);
         if (denialLimitResult) {
+          await runPermissionDeniedHooks(tool, input, toolUseID, classifierResult.reason, context, appState.toolPermissionContext.mode);
           return denialLimitResult;
         }
         if (appState.toolPermissionContext.shouldAvoidPermissionPrompts) {
+          const deniedRetry = await runPermissionDeniedHooks(tool, input, toolUseID, classifierResult.reason, context, appState.toolPermissionContext.mode);
           return {
             behavior: "deny",
             decisionReason: {
@@ -338317,9 +338344,10 @@ var classifierDecisionModule, autoModeStateModule3, CLASSIFIER_FAIL_CLOSED_REFRE
               classifier: "auto-mode",
               reason: classifierResult.reason
             },
-            message: buildYoloRejectionMessage(classifierResult.reason)
+            message: deniedRetry ? buildYoloRejectionMessageWithRetry(classifierResult.reason) : buildYoloRejectionMessage(classifierResult.reason)
           };
         }
+        await runPermissionDeniedHooks(tool, input, toolUseID, classifierResult.reason, context, appState.toolPermissionContext.mode);
         return {
           ...result,
           decisionReason: {
@@ -427784,6 +427812,29 @@ async function executeHooksOutsideREPL({
   });
   return await Promise.all(hookPromises);
 }
+async function* executePermissionDeniedHooks(toolName, toolUseID, toolInput, reason, toolUseContext, permissionMode, signal, timeoutMs = TOOL_HOOK_EXECUTION_TIMEOUT_MS) {
+  const appState = toolUseContext.getAppState();
+  const sessionId = toolUseContext.agentId ?? getSessionId();
+  if (!hasHookForEvent("PermissionDenied", appState, sessionId)) {
+    return;
+  }
+  const hookInput = {
+    ...createBaseHookInput2(permissionMode, undefined, toolUseContext),
+    hook_event_name: "PermissionDenied",
+    tool_name: toolName,
+    tool_input: toolInput,
+    tool_use_id: toolUseID,
+    reason
+  };
+  yield* executeHooks({
+    hookInput,
+    toolUseID,
+    matchQuery: toolName,
+    signal,
+    timeoutMs,
+    toolUseContext
+  });
+}
 async function executeNotificationHooks(notificationData, timeoutMs = TOOL_HOOK_EXECUTION_TIMEOUT_MS) {
   const { message, title, notificationType } = notificationData;
   const hookInput = {
@@ -457165,7 +457216,14 @@ var jsx_dev_runtime378, ContextBarSegment = ({ input }) => {
   const used = usedContextTokens(cw);
   const total = cw.context_window_size;
   if (pct == null) {
-    return null;
+    return /* @__PURE__ */ jsx_dev_runtime378.jsxDEV(ThemedText, {
+      dimColor: true,
+      children: [
+        "▤ —/",
+        formatK(total),
+        " tok"
+      ]
+    }, undefined, true, undefined, this);
   }
   const color = contextColorForPercentage(pct);
   const modelId = input.model?.id;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasharness/atlascode",
-  "version": "0.1.48",
+  "version": "0.1.49",
   "description": "AtlasCode \u2014 Coding Agent for the domestic computing ecosystem (Ascend NPU + domestic LLM backends)",
   "bin": {
     "atlas": "dist/cli.js",