@livx.cc/agentx 0.99.125 → 0.99.126

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { c as AgentOptions, H as Hooks, x as RunResult, k as Decider, b as Agent, q as PermissionPolicy, G as Gender, L as LineKind, d as ChannelMode, y as SecondChannelOptions, S as SecondChannel } from './secondChannel-GFT69ax4.js';
-export { A as ADVISE_LIMIT, a as AdvisorSetup, C as CC_WRITE_TOOLS, e as ChatFragment, f as ChatUsage, g as Classification, h as Classifier, i as CompactResult, j as ContextFileSpec, D as DEFAULT_MUTATING, l as Decision, M as ModelRouter, m as ModelRouterOptions, P as PLANNER_BLOCKED, n as PLANNER_REFUSAL, o as PLAN_FIRST, p as PermissionOptions, r as PermissionRule, s as PreToolUseDecision, R as ReasoningEffort, t as RecordingHooks, u as RecordingLifecycle, v as RouteDecision, w as RouterState, T as Tier, z as ToolUse, B as ToolUseMeta, W as WRITE_TOOLS, E as advisorFor, F as advisorPrompt, I as ccModeOptions, J as claudeCodeDisallowedTools, K as composeHooks, N as delegatePrompt, O as delegateTools, Q as delegateWorkerFor, U as estimateTokens, V as jevAvailable, X as jevClassifier, Y as loadContextFiles, Z as loadInstructions, _ as makeAdvisor, $ as meterWorkers, a0 as pickTier, a1 as planMode, a2 as plannerBlocks, a3 as reasoningToChatFragment } from './secondChannel-GFT69ax4.js';
+import { c as AgentOptions, H as Hooks, x as RunResult, k as Decider, b as Agent, q as PermissionPolicy, G as Gender, L as LineKind, d as ChannelMode, y as SecondChannelOptions, S as SecondChannel } from './secondChannel-B76KLrf7.js';
+export { A as ADVISE_LIMIT, a as AdvisorSetup, C as CC_WRITE_TOOLS, e as ChatFragment, f as ChatUsage, g as Classification, h as Classifier, i as CompactResult, j as ContextFileSpec, D as DEFAULT_MUTATING, l as Decision, M as ModelRouter, m as ModelRouterOptions, P as PLANNER_BLOCKED, n as PLANNER_REFUSAL, o as PLAN_FIRST, p as PermissionOptions, r as PermissionRule, s as PreToolUseDecision, R as ReasoningEffort, t as RecordingHooks, u as RecordingLifecycle, v as RouteDecision, w as RouterState, T as Tier, z as ToolUse, B as ToolUseMeta, W as WRITE_TOOLS, E as advisorFor, F as advisorPrompt, I as ccModeOptions, J as claudeCodeDisallowedTools, K as composeHooks, N as delegatePrompt, O as delegateTools, Q as delegateWorkerFor, U as estimateTokens, V as jevAvailable, X as jevClassifier, Y as loadContextFiles, Z as loadInstructions, _ as makeAdvisor, $ as meterWorkers, a0 as pickTier, a1 as planMode, a2 as plannerBlocks, a3 as reasoningToChatFragment } from './secondChannel-B76KLrf7.js';
 export { MODEL_ALIASES, ModelSwitch, ResolveModelSwitchOpts, latestClaude, modelShortLabel, resolveModelAlias, resolveModelSwitch } from './models.js';
 import { IFilesystem, FileMetadata } from '@livx.cc/wcli/core';
 export { CommandExecutor, FileMetadata, IFilesystem, IndexedDbFilesystem, MemFilesystem, registerHeadlessCommands } from '@livx.cc/wcli/core';

package/dist/index.js

@@ -4610,10 +4610,15 @@ function delegateWorkerFor(planner, worker) {
 function advisorFor(worker, advisor) {
   return advisor && pairOk("advisor", worker, advisor) ? advisor : void 0;
 }
-function delegateTools(tools, planner) {
+function delegateTools(tools, planner, plannerMay) {
   return tools.map((t) => !plannerBlocks(t) ? t : {
     ...t,
-    run: async (...a) => a[1]?.model === planner ? PLANNER_REFUSAL : t.run(...a)
+    // THROWN, not returned: a returned string read as a SUCCESSFUL write in every trace (isError false), so a host
+    // counted a write that never happened (Blank prod 8834a8bd-d4b).
+    run: async (...a) => {
+      if (a[1]?.model === planner && !plannerMay?.(t.name, a[0])) throw new Error(PLANNER_REFUSAL);
+      return t.run(...a);
+    }
   });
 }
 function delegatePrompt(worker) {
@@ -4944,7 +4949,9 @@ var AgentOptions = class {
   subagents = false;
   /** DELEGATE MODE: `model` plans, `worker` writes. The planner's Write/Edit/MultiEdit/ApplyEdits/bash/Shell are
    *  refused at execution; Task/TaskBatch are on (maxDepth 1, children default to `worker`) and children get the
-   *  parent's `postToolUse` too. Off when the models are equal or either is cursor/*. Wins over `advisor`. */
+   *  parent's `postToolUse` too. Off when the models are equal or either is cursor/*. Wins over `advisor`.
+   *  `plannerMay(tool, args)`: a blocked call the planner may still make itself (the host's own carve-out, e.g. its
+   *  private notes) — say so in the host prompt, the planner prompt says it cannot write. */
   delegate;
   /** ADVISOR MODE: `model` does the work; an `Advise` tool asks `advisor.model` (≤`limit`, default 3) with only
    *  the request + `snapshot()` (host state, optional) + the question. The first write waits for one consult. */
@@ -5327,7 +5334,7 @@ var Agent = class _Agent {
         traceDir: o.traceDir,
         permissions: o.permissions,
         // a child obeys the parent's allow/deny rules (else Task is a one-call bypass)
-        tools: worker ? delegateTools([...o.tools, ...this.injectedTools], o.model) : [...o.tools, ...this.injectedTools],
+        tools: worker ? delegateTools([...o.tools, ...this.injectedTools], o.model, o.delegate?.plannerMay) : [...o.tools, ...this.injectedTools],
         systemPrompt: o.systemPrompt,
         // A child never resumes the parent's own claude-code session (the host's `resume` link is the parent's).
         providerOptionsFor: o.providerOptionsFor ?? ((m) => modelProvider(m) === modelProvider(o.model) && o.providerOptions ? { ...o.providerOptions, resume: void 0, onClaudeCodeSession: void 0 } : void 0)
@@ -5341,7 +5348,7 @@ var Agent = class _Agent {
     this.activeHooks = composeHooks(o.hooks, plan?.hooks, o.permissions?.hooks());
     this.activeTools = [...tools, ...this.injectedTools];
     if (worker) {
-      this.activeTools = delegateTools(this.activeTools, o.model);
+      this.activeTools = delegateTools(this.activeTools, o.model, o.delegate?.plannerMay);
       systemPrompt += delegatePrompt(worker);
     }
     if (adv) {