@m6d/cortex-cli 0.25.0 → 0.25.1

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@m6d/cortex-cli",
-    "version": "0.25.0",
+    "version": "0.25.1",
     "description": "Scaffold Cortex projects and manage a Cortex deployment",
     "license": "MIT",
     "type": "module",

package/src/contracts/management/procedures.generated.ts

@@ -3853,7 +3853,7 @@ export type ManagementProcedures = {
       id: string;
       kind: "turn" | "subagent" | "tool";
       status: "running" | "waiting" | "completed" | "failed" | "cancelled";
-      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | "output_limit" | null;
       createdAt: string;
       finishedAt: string | null;
       source: "user" | "trigger" | "schedule" | "run" | null;
@@ -4029,7 +4029,7 @@ export type ManagementProcedures = {
         id: string;
         kind: "turn" | "subagent" | "tool";
         status: "running" | "waiting" | "completed" | "failed" | "cancelled";
-        reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+        reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | "output_limit" | null;
         createdAt: string;
         finishedAt: string | null;
         source: "user" | "trigger" | "schedule" | "run" | null;
@@ -6208,7 +6208,7 @@ export type ManagementProcedures = {
       kind: "turn" | "subagent" | "tool";
       subagentRunId: string | null;
       status: "running" | "waiting" | "completed" | "failed" | "cancelled";
-      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | "output_limit" | null;
       result: unknown;
       waits: Array<{
         kind: "approval" | "client_tool";
@@ -6292,7 +6292,7 @@ export type ManagementProcedures = {
       kind: "turn" | "subagent" | "tool";
       subagentRunId: string | null;
       status: "running" | "waiting" | "completed" | "failed" | "cancelled";
-      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | "output_limit" | null;
       result: unknown;
       waits: Array<{
         kind: "approval" | "client_tool";

package/src/contracts/runs/index.ts

@@ -14,7 +14,8 @@ export type RunStatus = (typeof RUN_STATUSES)[number];
 /**
  * Why a run ended as it did: a trigger's answer that never came or never
  * fit its schema, a stop, a cancel (its own, or its parent's), a producer
- * that died (`lost`), or one that ran out of time.
+ * that died (`lost`), one that ran out of time, or a model answer the
+ * output limit cut off (`output_limit`).
  */
 export const RUN_REASONS = [
     "no_output",
@@ -24,6 +25,7 @@ export const RUN_REASONS = [
     "parent_cancelled",
     "lost",
     "timeout",
+    "output_limit",
 ] as const;
 export type RunReason = (typeof RUN_REASONS)[number];
 

package/src/contracts/wire/index.ts

@@ -8,6 +8,7 @@
  * alike.
  */
 
+import { isRecord } from "../json/index";
 import type { RunReason, RunStatus } from "../runs/index";
 
 /** The UI locales every localized value is keyed by; the console's message catalogs follow it. */
@@ -335,6 +336,58 @@ export function approvalTitleOf(input: unknown) {
     return modelLineOf(input, APPROVAL_TITLE_FIELD);
 }
 
+/** One input field an approval tool's schema declares (`ApprovalInput`). */
+export type ApprovalField = {
+    name: string;
+    /** The field may carry a secret: it, anything inside it, or anything containing it is marked `x-sensitive`. */
+    sensitive?: true;
+    /** Cortex fills the field itself and refuses a call that writes it, so no card shows it. */
+    sourced?: true;
+};
+
+/** How the calls of a tool that waits for the user's approval show their input (`ToolCallMetadata.approvalInput`). */
+export type ApprovalInput = {
+    /** The fields its schema declares, in its order. */
+    fields: ApprovalField[];
+    /** Any other key the model writes may carry a secret, as the schemas that would admit it say. */
+    extraSensitive?: true;
+};
+
+/**
+ * Each key of a call's input as its tool's `approval` classes it, with its
+ * value: the declared fields the input holds, in the tool's order, then the
+ * keys the model added, in its. The title, which the card shows apart, is
+ * none of them.
+ */
+export function approvalKeysOf(input: unknown, approval: ApprovalInput | undefined) {
+    if (!isRecord(input) || !approval) return [];
+    const declared = new Set(approval.fields.map(({ name }) => name));
+    const extra = Object.keys(input).filter(
+        (name) => !declared.has(name) && name !== APPROVAL_TITLE_FIELD,
+    );
+    return approval.fields
+        .filter(({ name }) => Object.hasOwn(input, name))
+        .concat(
+            extra.map((name) => ({
+                name,
+                ...(approval.extraSensitive && { sensitive: true as const }),
+            })),
+        )
+        .map((field) => ({ ...field, value: input[field.name] }));
+}
+
+/**
+ * What a call the user decides on will run with: every key it forwards
+ * (`approvalKeysOf`) but the fields Cortex fills. A sensitive one says only
+ * that it is set (`hidden`), never its value.
+ */
+export function approvalEntriesOf(input: unknown, approval: ApprovalInput | undefined) {
+    return approvalKeysOf(input, approval).flatMap(({ name, value, sensitive, sourced }) => {
+        if (sourced) return [];
+        return [sensitive ? { name, hidden: true as const } : { name, value }];
+    });
+}
+
 /**
  * What Cortex stamps on a tool call's `metadata.cortex` from its first chunk,
  * so the live part and the stored one agree.
@@ -355,6 +408,12 @@ export type ToolCallMetadata = {
      * live run asked it.
      */
     paused?: { runId: string; interrupt: RunInterrupt };
+    /**
+     * Set on a call of a tool that waits for the user's approval: how its card shows the
+     * input (`approvalEntriesOf`) while the call waits. Every view of the call leaves a
+     * sensitive key's value out.
+     */
+    approvalInput?: ApprovalInput;
 };
 
 /** An interrupt as a paused run raises it on its end, in AG-UI's shape. */

package/src/scaffold/files.ts

@@ -28,7 +28,7 @@ import { applyPorts, type Ports } from "@/scaffold/ports";
  * `@m6d/cortex` range below are stamped by scripts/sync-package-versions.ts
  * before the CLI publishes, so a scaffold pins what was current then.
  */
-const CORTEX_VERSION = "0.24.0";
+const CORTEX_VERSION = "0.24.1";
 
 /** This machine as Cortex's containers name it: the one private host the stack's egress policy admits. */
 export const DOCKER_HOST = "host.docker.internal";
@@ -147,7 +147,7 @@ function packageJson({ name, datasets, setup }: Project) {
                 verify: "bun run format:check && bun run lint && bun run spellcheck && bun run check && bun run audit",
             },
             dependencies: {
-                "@m6d/cortex": "~0.12.0",
+                "@m6d/cortex": "~0.12.1",
                 // drizzle 1.0 is in beta; this is the build `@m6d/cortex/drizzle` is tested against.
                 ...(datasets ? { "drizzle-orm": "1.0.0-beta.15-859cf75" } : {}),
                 hono: "^4.12.3",