@livx.cc/agentx 0.99.78 → 0.99.80

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { a as AgentOptions, H as Hooks, n as RunResult, A as Agent, g as PermissionPolicy } from './Agent-BBlKI8uD.js';
-export { C as ChatFragment, b as Classification, c as Classifier, d as CompactResult, D as DEFAULT_MUTATING, e as Decision, M as ModelRouter, f as ModelRouterOptions, P as PermissionOptions, h as PermissionRule, i as PreToolUseDecision, R as ReasoningEffort, j as RecordingHooks, k as RecordingLifecycle, l as RouteDecision, m as RouterState, T as Tier, o as ToolUse, p as ToolUseMeta, q as claudeCodeDisallowedTools, r as composeHooks, s as estimateTokens, t as jevAvailable, u as jevClassifier, v as pickTier, w as planMode, x as reasoningToChatFragment } from './Agent-BBlKI8uD.js';
+import { a as AgentOptions, H as Hooks, n as RunResult, A as Agent, g as PermissionPolicy } from './Agent-BK-heHrw.js';
+export { C as ChatFragment, b as Classification, c as Classifier, d as CompactResult, D as DEFAULT_MUTATING, e as Decision, M as ModelRouter, f as ModelRouterOptions, P as PermissionOptions, h as PermissionRule, i as PreToolUseDecision, R as ReasoningEffort, j as RecordingHooks, k as RecordingLifecycle, l as RouteDecision, m as RouterState, T as Tier, o as ToolUse, p as ToolUseMeta, q as claudeCodeDisallowedTools, r as composeHooks, s as estimateTokens, t as jevAvailable, u as jevClassifier, v as pickTier, w as planMode, x as reasoningToChatFragment } from './Agent-BK-heHrw.js';
 export { MODEL_ALIASES, ModelSwitch, ResolveModelSwitchOpts, modelShortLabel, resolveModelAlias, resolveModelSwitch } from './models.js';
 import { IFilesystem, FileMetadata } from '@livx.cc/wcli/core';
 export { CommandExecutor, FileMetadata, IFilesystem, IndexedDbFilesystem, MemFilesystem, registerHeadlessCommands } from '@livx.cc/wcli/core';
@@ -18,17 +18,32 @@ export { log } from 'libx.js/src/modules/log';
  * The VFS path space ('/...') maps under baseDir, so the same agent/tools/commands
  * run unchanged against disk or memory — complete mem↔disk interchangeability.
  * Semantics mirror MemFilesystem (throws on missing parent / existing dir / etc.).
+ *
+ * Windows (see hostPath.ts): incoming host paths (`C:\…`, backslashes) are translated to VFS form
+ * first, and a `baseDir` of '/' is the whole machine — `/c/…` is drive C:, '/' lists the drives.
+ * Name aliases that would let a path spell one name and open another (alternate data streams,
+ * trailing dots, device names, 8.3 short names) are refused, so name-based policy above this
+ * backend (the jail's denylist) sees the name that is actually opened.
  */
 declare class NodeDiskFilesystem implements IFilesystem {
     private baseDir;
     private cwd;
     private opts;
+    private readonly win;
+    /** Windows + baseDir '/': the VFS root is the machine (drives as first segment), not a directory. */
+    private readonly drives;
     constructor(baseDir: string, opts?: {
         denySymlinks?: boolean;
     });
     /** Ensure the root dir exists. */
     init(): Promise<void>;
     private real;
+    /** Windows machine root ('/' when baseDir is '/'): a synthetic directory listing the drives. */
+    private isDriveRoot;
+    /** Windows: refuse an 8.3 short name (`ENV~1` opens `.env`) — the only alias that needs the disk to
+     *  detect. Only segments that look like one (`~<digit>`) cost a lookup: the OS's long name for that
+     *  component must be the name that was asked for. */
+    private assertLongNames;
     private verified;
     private static VERIFY_TTL_MS;
     /** Throw if any existing component of `real` is a symlink (escape vector). */
@@ -57,6 +72,8 @@ declare class NodeDiskFilesystem implements IFilesystem {
     stat(path: string): Promise<FileMetadata>;
     isDirectory(path: string): Promise<boolean>;
     isFile(path: string): Promise<boolean>;
+    /** Windows machine root: the drive letters that are mounted (`/c`, `/d`, …). */
+    private listDrives;
 }
 
 /**
@@ -119,6 +136,8 @@ declare class JailedFilesystem implements IFilesystem {
     private roRe;
     private confineRe?;
     constructor(inner: IFilesystem, options?: Partial<JailOptions>);
+    /** Resolved VFS path — host-path syntax (Windows `C:\…`, backslashes) is normalized FIRST, so the
+     *  deny/readonly/confine globs always match the path that is actually opened. */
     private abs;
     /** Throw if reading `path` is not permitted (denied or out of confinement). */
     private guardRead;
@@ -1133,6 +1152,11 @@ declare class DuplexAgent {
     /** Lazily resolved memory tools (async loadMemory runs in initMemory). */
     private memoryReady;
     constructor(options?: Partial<DuplexAgentOptions>);
+    /** A claude-code/* reflex (the keyless stand-in when the fast model's provider has no key): Claude Code runs its own
+     *  tool loop and takes no host tool schemas, so the reflex's tools (Act/Think/Hold…) reach it through the in-process
+     *  `agentx` MCP bridge (ccBridge 'all', which needs a warm session), with Claude Code's OWN tools off (`tools: []`) and
+     *  no other MCP server — the reflex only talks and routes; real work still goes through Act and its policy. */
+    private claudeCodeReflex;
     /** Resolve memory tools + inject index into voice system prompt (once). */
     private initMemory;
     /** Forward what the reflex's spoken-stream gates allow (text_delta → host/TTS; forwarded audio can't be unsent):
@@ -1197,6 +1221,7 @@ declare class DuplexAgent {
      *  hosts/tests key on it. */
     private static readonly FALLBACK_ACKS;
     private static readonly FALLBACK_RETRY;
+    private static readonly FALLBACK_ERROR;
     private static readonly FALLBACK_OWN;
     private lastFallback;
     /** One user turn: the voice agent streams the reply (and may Act/Think). Serialized with re-voice turns.