@bridge4dev/runner 0.31.0 → 0.34.0

package/dist/protocol.d.ts

@@ -38,26 +38,52 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
          * scratch anyway; the bounds here only keep nonsense off the wire.
          */
         agentPromptPath: z.ZodCatch<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+        /**
+         * Session 18: the project's git policy for agents.
+         *
+         * `.optional().catch(undefined)` for the QA-100 MAJOR-1 reason above — this
+         * rides inside `hello_ack` with every session on the server, so a malformed
+         * value must cost its own session's policy at most, never the frame.
+         *
+         * «Costs its own session's policy» is safe here BECAUSE of the polarity in
+         * `policy.ts`: `agentPushBan` resolves `undefined` to «refuse», so a value
+         * this schema drops leaves the session strictly more restricted, never less.
+         * That property is the whole reason `.catch(undefined)` is acceptable on a
+         * security field, and it is why the resolution lives in exactly one
+         * function rather than at each point of use.
+         */
+        agentPushBan: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+        agentProtectedBranches: z.ZodCatch<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        agentAllowForcePush: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+        agentAllowDestructiveGit: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
         budgetUsd: z.ZodNullable<z.ZodNumber>;
         budgetMinutes: z.ZodNullable<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
+        trustMode: "STRICT" | "NORMAL" | "AUTO";
         id: string;
         path: string;
         projectId: string;
-        trustMode: "STRICT" | "NORMAL" | "AUTO";
         budgetUsd: number | null;
         budgetMinutes: number | null;
         agentAutoCommit?: boolean | undefined;
+        agentPushBan?: boolean | undefined;
         agentPromptPath?: string | null | undefined;
+        agentProtectedBranches?: string[] | undefined;
+        agentAllowForcePush?: boolean | undefined;
+        agentAllowDestructiveGit?: boolean | undefined;
     }, {
+        trustMode: "STRICT" | "NORMAL" | "AUTO";
         id: string;
         path: string;
         projectId: string;
-        trustMode: "STRICT" | "NORMAL" | "AUTO";
         budgetUsd: number | null;
         budgetMinutes: number | null;
         agentAutoCommit?: boolean | undefined;
+        agentPushBan?: unknown;
         agentPromptPath?: unknown;
+        agentProtectedBranches?: unknown;
+        agentAllowForcePush?: unknown;
+        agentAllowDestructiveGit?: unknown;
     }>;
     /**
      * «Run this one without the project's agent prompt.» Absent means no — both
@@ -153,14 +179,18 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
     activeMsBase: number;
     extraBudgetMinutes: number | null;
     workspace: {
+        trustMode: "STRICT" | "NORMAL" | "AUTO";
         id: string;
         path: string;
         projectId: string;
-        trustMode: "STRICT" | "NORMAL" | "AUTO";
         budgetUsd: number | null;
         budgetMinutes: number | null;
         agentAutoCommit?: boolean | undefined;
+        agentPushBan?: boolean | undefined;
         agentPromptPath?: string | null | undefined;
+        agentProtectedBranches?: string[] | undefined;
+        agentAllowForcePush?: boolean | undefined;
+        agentAllowDestructiveGit?: boolean | undefined;
     };
     tickets: {
         number: number;
@@ -188,14 +218,18 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
     prompt: string;
     providerSessionId: string | null;
     workspace: {
+        trustMode: "STRICT" | "NORMAL" | "AUTO";
         id: string;
         path: string;
         projectId: string;
-        trustMode: "STRICT" | "NORMAL" | "AUTO";
         budgetUsd: number | null;
         budgetMinutes: number | null;
         agentAutoCommit?: boolean | undefined;
+        agentPushBan?: unknown;
         agentPromptPath?: unknown;
+        agentProtectedBranches?: unknown;
+        agentAllowForcePush?: unknown;
+        agentAllowDestructiveGit?: unknown;
     };
     tickets: {
         number: number;
@@ -264,26 +298,52 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
              * scratch anyway; the bounds here only keep nonsense off the wire.
              */
             agentPromptPath: z.ZodCatch<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+            /**
+             * Session 18: the project's git policy for agents.
+             *
+             * `.optional().catch(undefined)` for the QA-100 MAJOR-1 reason above — this
+             * rides inside `hello_ack` with every session on the server, so a malformed
+             * value must cost its own session's policy at most, never the frame.
+             *
+             * «Costs its own session's policy» is safe here BECAUSE of the polarity in
+             * `policy.ts`: `agentPushBan` resolves `undefined` to «refuse», so a value
+             * this schema drops leaves the session strictly more restricted, never less.
+             * That property is the whole reason `.catch(undefined)` is acceptable on a
+             * security field, and it is why the resolution lives in exactly one
+             * function rather than at each point of use.
+             */
+            agentPushBan: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+            agentProtectedBranches: z.ZodCatch<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+            agentAllowForcePush: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+            agentAllowDestructiveGit: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
             budgetUsd: z.ZodNullable<z.ZodNumber>;
             budgetMinutes: z.ZodNullable<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: boolean | undefined;
             agentPromptPath?: string | null | undefined;
+            agentProtectedBranches?: string[] | undefined;
+            agentAllowForcePush?: boolean | undefined;
+            agentAllowDestructiveGit?: boolean | undefined;
         }, {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: unknown;
             agentPromptPath?: unknown;
+            agentProtectedBranches?: unknown;
+            agentAllowForcePush?: unknown;
+            agentAllowDestructiveGit?: unknown;
         }>;
         /**
          * «Run this one without the project's agent prompt.» Absent means no — both
@@ -379,14 +439,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         activeMsBase: number;
         extraBudgetMinutes: number | null;
         workspace: {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: boolean | undefined;
             agentPromptPath?: string | null | undefined;
+            agentProtectedBranches?: string[] | undefined;
+            agentAllowForcePush?: boolean | undefined;
+            agentAllowDestructiveGit?: boolean | undefined;
         };
         tickets: {
             number: number;
@@ -414,14 +478,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         prompt: string;
         providerSessionId: string | null;
         workspace: {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: unknown;
             agentPromptPath?: unknown;
+            agentProtectedBranches?: unknown;
+            agentAllowForcePush?: unknown;
+            agentAllowDestructiveGit?: unknown;
         };
         tickets: {
             number: number;
@@ -465,14 +533,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         activeMsBase: number;
         extraBudgetMinutes: number | null;
         workspace: {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: boolean | undefined;
             agentPromptPath?: string | null | undefined;
+            agentProtectedBranches?: string[] | undefined;
+            agentAllowForcePush?: boolean | undefined;
+            agentAllowDestructiveGit?: boolean | undefined;
         };
         tickets: {
             number: number;
@@ -506,14 +578,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         prompt: string;
         providerSessionId: string | null;
         workspace: {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: unknown;
             agentPromptPath?: unknown;
+            agentProtectedBranches?: unknown;
+            agentAllowForcePush?: unknown;
+            agentAllowDestructiveGit?: unknown;
         };
         tickets: {
             number: number;
@@ -606,26 +682,52 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
              * scratch anyway; the bounds here only keep nonsense off the wire.
              */
             agentPromptPath: z.ZodCatch<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+            /**
+             * Session 18: the project's git policy for agents.
+             *
+             * `.optional().catch(undefined)` for the QA-100 MAJOR-1 reason above — this
+             * rides inside `hello_ack` with every session on the server, so a malformed
+             * value must cost its own session's policy at most, never the frame.
+             *
+             * «Costs its own session's policy» is safe here BECAUSE of the polarity in
+             * `policy.ts`: `agentPushBan` resolves `undefined` to «refuse», so a value
+             * this schema drops leaves the session strictly more restricted, never less.
+             * That property is the whole reason `.catch(undefined)` is acceptable on a
+             * security field, and it is why the resolution lives in exactly one
+             * function rather than at each point of use.
+             */
+            agentPushBan: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+            agentProtectedBranches: z.ZodCatch<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+            agentAllowForcePush: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+            agentAllowDestructiveGit: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
             budgetUsd: z.ZodNullable<z.ZodNumber>;
             budgetMinutes: z.ZodNullable<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: boolean | undefined;
             agentPromptPath?: string | null | undefined;
+            agentProtectedBranches?: string[] | undefined;
+            agentAllowForcePush?: boolean | undefined;
+            agentAllowDestructiveGit?: boolean | undefined;
         }, {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: unknown;
             agentPromptPath?: unknown;
+            agentProtectedBranches?: unknown;
+            agentAllowForcePush?: unknown;
+            agentAllowDestructiveGit?: unknown;
         }>;
         /**
          * «Run this one without the project's agent prompt.» Absent means no — both
@@ -721,14 +823,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         activeMsBase: number;
         extraBudgetMinutes: number | null;
         workspace: {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: boolean | undefined;
             agentPromptPath?: string | null | undefined;
+            agentProtectedBranches?: string[] | undefined;
+            agentAllowForcePush?: boolean | undefined;
+            agentAllowDestructiveGit?: boolean | undefined;
         };
         tickets: {
             number: number;
@@ -756,14 +862,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         prompt: string;
         providerSessionId: string | null;
         workspace: {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: unknown;
             agentPromptPath?: unknown;
+            agentProtectedBranches?: unknown;
+            agentAllowForcePush?: unknown;
+            agentAllowDestructiveGit?: unknown;
         };
         tickets: {
             number: number;
@@ -805,14 +915,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         activeMsBase: number;
         extraBudgetMinutes: number | null;
         workspace: {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: boolean | undefined;
             agentPromptPath?: string | null | undefined;
+            agentProtectedBranches?: string[] | undefined;
+            agentAllowForcePush?: boolean | undefined;
+            agentAllowDestructiveGit?: boolean | undefined;
         };
         tickets: {
             number: number;
@@ -843,14 +957,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         prompt: string;
         providerSessionId: string | null;
         workspace: {
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
             path: string;
             projectId: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             budgetUsd: number | null;
             budgetMinutes: number | null;
             agentAutoCommit?: boolean | undefined;
+            agentPushBan?: unknown;
             agentPromptPath?: unknown;
+            agentProtectedBranches?: unknown;
+            agentAllowForcePush?: unknown;
+            agentAllowDestructiveGit?: unknown;
         };
         tickets: {
             number: number;
@@ -1005,16 +1123,28 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     workspaceId: z.ZodString;
     trustMode: z.ZodOptional<z.ZodEnum<["STRICT", "NORMAL", "AUTO"]>>;
     agentAutoCommit: z.ZodOptional<z.ZodBoolean>;
+    agentPushBan: z.ZodOptional<z.ZodBoolean>;
+    agentProtectedBranches: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    agentAllowForcePush: z.ZodOptional<z.ZodBoolean>;
+    agentAllowDestructiveGit: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     type: "workspace_settings";
     workspaceId: string;
-    agentAutoCommit?: boolean | undefined;
     trustMode?: "STRICT" | "NORMAL" | "AUTO" | undefined;
+    agentAutoCommit?: boolean | undefined;
+    agentPushBan?: boolean | undefined;
+    agentProtectedBranches?: string[] | undefined;
+    agentAllowForcePush?: boolean | undefined;
+    agentAllowDestructiveGit?: boolean | undefined;
 }, {
     type: "workspace_settings";
     workspaceId: string;
-    agentAutoCommit?: boolean | undefined;
     trustMode?: "STRICT" | "NORMAL" | "AUTO" | undefined;
+    agentAutoCommit?: boolean | undefined;
+    agentPushBan?: boolean | undefined;
+    agentProtectedBranches?: string[] | undefined;
+    agentAllowForcePush?: boolean | undefined;
+    agentAllowDestructiveGit?: boolean | undefined;
 }>, z.ZodObject<{
     type: z.ZodLiteral<"session_settings">;
     sessionId: z.ZodString;

package/dist/protocol.js

@@ -64,6 +64,31 @@ export const SessionDescriptorSchema = z.object({
          * scratch anyway; the bounds here only keep nonsense off the wire.
          */
         agentPromptPath: z.string().max(300).nullable().optional().catch(undefined),
+        /**
+         * Session 18: the project's git policy for agents.
+         *
+         * `.optional().catch(undefined)` for the QA-100 MAJOR-1 reason above — this
+         * rides inside `hello_ack` with every session on the server, so a malformed
+         * value must cost its own session's policy at most, never the frame.
+         *
+         * «Costs its own session's policy» is safe here BECAUSE of the polarity in
+         * `policy.ts`: `agentPushBan` resolves `undefined` to «refuse», so a value
+         * this schema drops leaves the session strictly more restricted, never less.
+         * That property is the whole reason `.catch(undefined)` is acceptable on a
+         * security field, and it is why the resolution lives in exactly one
+         * function rather than at each point of use.
+         */
+        agentPushBan: z.boolean().optional().catch(undefined),
+        agentProtectedBranches: z
+            .array(z
+            .string()
+            .max(200)
+            .regex(/^[A-Za-z0-9][A-Za-z0-9._\-/]*$/))
+            .max(20)
+            .optional()
+            .catch(undefined),
+        agentAllowForcePush: z.boolean().optional().catch(undefined),
+        agentAllowDestructiveGit: z.boolean().optional().catch(undefined),
         budgetUsd: z.number().nullable(),
         budgetMinutes: z.number().nullable(),
     }),
@@ -230,6 +255,19 @@ export const GatewayFrameSchema = z.discriminatedUnion('type', [
         workspaceId: z.string().min(1).max(64),
         trustMode: z.enum(['STRICT', 'NORMAL', 'AUTO']).optional(),
         agentAutoCommit: z.boolean().optional(),
+        // Session 18 — the git policy, for the same reason: read on every tool
+        // call, so switching «Принудительно запретить push» back on must not
+        // require stopping the agent first.
+        agentPushBan: z.boolean().optional(),
+        agentProtectedBranches: z
+            .array(z
+            .string()
+            .max(200)
+            .regex(/^[A-Za-z0-9][A-Za-z0-9._\-/]*$/))
+            .max(20)
+            .optional(),
+        agentAllowForcePush: z.boolean().optional(),
+        agentAllowDestructiveGit: z.boolean().optional(),
     }),
     z.object({
         type: z.literal('session_settings'),

package/dist/supervisor.d.ts

@@ -246,6 +246,30 @@ export declare class Supervisor {
      * rewound (ticket #126).
      */
     private park;
+    /**
+     * The agent is producing output while this runner still says a human is
+     * expected — put `lastReported` back to RUNNING (ticket #185).
+     *
+     * This is not cosmetics on top of the API's own repair. While `lastReported`
+     * lies, two things break here and only here:
+     *
+     *  - `isParkable()` reads WAITING_INPUT with no open question as «idle», so
+     *    `ensureCapacity` may KILL a live agent process to hand its slot to
+     *    another session;
+     *  - `isBillable()` counts only RUNNING/STARTING, so `agentActiveMs` stops
+     *    growing and the time budget never fires for work that is really happening.
+     *
+     * It happens for real: a background subagent's report wakes a new turn inside
+     * the agent process (SDK 0.3.226 emits a second `system:init` and a `result`
+     * carrying `origin: {kind:'task-notification'}`), and nothing here reports a
+     * turn the runner did not start. Compaction does the same, and so does a
+     * question this runner withdraws by itself.
+     *
+     * An open question is the one thing that must survive: there, WAITING_INPUT
+     * means a tool call is parked on a person, and the agent narrating around its
+     * own question must not take the card off the screen.
+     */
+    private noteAgentIsWorking;
     private forwardEvent;
     /**
      * The dashboard's answer to a parked question (session 12).