@dudousxd/nestjs-agent-core 0.15.2 → 0.15.3

package/dist/index.cjs

@@ -56,6 +56,7 @@ __export(index_exports, {
   DEFAULT_MAX_FACT_CHARS: () => DEFAULT_MAX_FACT_CHARS,
   DEFAULT_MAX_MEMORIES: () => DEFAULT_MAX_MEMORIES,
   DEFAULT_MAX_SKILLS: () => DEFAULT_MAX_SKILLS,
+  DEFAULT_REFUSAL_REASON: () => DEFAULT_REFUSAL_REASON,
   DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION: () => DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION,
   DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS: () => DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS,
   DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS: () => DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS,
@@ -3246,15 +3247,58 @@ async function runClaimedToolCall(turn, claimed) {
         name: call.name,
         output: {
           rejected: true,
-          reason: decision.reason ?? "rejected by user"
+          reason: decision.reason ?? DEFAULT_REFUSAL_REASON
         },
-        error: "rejected"
+        denied: true,
+        // What the MODEL is told. It used to be the bare word `rejected`, which names no actor and
+        // reads exactly like a tool that blew up — so the answer that followed would speculate about
+        // causes ("the key may not exist", "there may be permission restrictions") and offer to try
+        // again. A person's decision is not a fault to diagnose, so this says who decided, that
+        // nothing ran, and what not to do next.
+        error: refusalNarrative(decision.reason)
       };
     }
   }
   return recordToolOutcome(turn, claimed, await invokeClaimedTool(turn, claimed), deciderRef);
 }
 __name(runClaimedToolCall, "runClaimedToolCall");
+function outputFrame(result) {
+  if (result.denied === true) {
+    const reason = refusalReason(result);
+    return {
+      kind: "tool-output-denied",
+      id: result.id,
+      ...reason !== void 0 ? {
+        reason
+      } : {}
+    };
+  }
+  return result.error !== void 0 ? {
+    kind: "tool-output-error",
+    id: result.id,
+    error: result.error
+  } : {
+    kind: "tool-output",
+    id: result.id,
+    output: result.output
+  };
+}
+__name(outputFrame, "outputFrame");
+function refusalReason(result) {
+  const { output } = result;
+  if (output !== null && typeof output === "object" && "reason" in output) {
+    const reason = output.reason;
+    return typeof reason === "string" && reason !== DEFAULT_REFUSAL_REASON ? reason : void 0;
+  }
+  return void 0;
+}
+__name(refusalReason, "refusalReason");
+var DEFAULT_REFUSAL_REASON = "rejected by user";
+function refusalNarrative(reason) {
+  const base = "The person was asked to approve this action and declined it. Nothing ran and nothing changed. This is their decision, not an error, a missing record or a permissions problem \u2014 do not explain it as one, do not guess at causes, and do not run this action again or reach for another way to do the same thing. Acknowledge the decision and ask what they would like instead.";
+  return reason === void 0 ? base : `${base} They said: ${reason}`;
+}
+__name(refusalNarrative, "refusalNarrative");
 async function invokeClaimedToolsTogether(turn, parallel, claimed) {
   const settled = await parallel(claimed.map((entry) => () => invokeClaimedTool(turn, entry)));
   for (const outcome of settled) {
@@ -3786,15 +3830,7 @@ ${block}`;
     await hooks.step(`stream:tool-outputs:${i}`, async () => {
       await deps.store.setMessageToolResults(assistant.id, settledResults);
       for (const result of results) {
-        await writer.write(encodeStreamEvent(result.error !== void 0 ? {
-          kind: "tool-output-error",
-          id: result.id,
-          error: result.error
-        } : {
-          kind: "tool-output",
-          id: result.id,
-          output: result.output
-        }));
+        await writer.write(encodeStreamEvent(outputFrame(result)));
       }
     });
     await hooks.step(`stream:step-finish:${i}`, async () => {
@@ -3893,6 +3929,7 @@ __name(runAgentLoop, "runAgentLoop");
   DEFAULT_MAX_FACT_CHARS,
   DEFAULT_MAX_MEMORIES,
   DEFAULT_MAX_SKILLS,
+  DEFAULT_REFUSAL_REASON,
   DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION,
   DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS,
   DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS,