@moxxy/sdk 0.43.0 → 0.45.0

package/src/tool.ts

@@ -1,10 +1,11 @@
-import type { z } from 'zod';
+import type { z } from 'zod/v3';
 import type { EventLogReader } from './log.js';
 import type { ToolIcon } from './tool-icon.js';
 import type { PermissionRule } from './permission.js';
 import type { SessionId, ToolCallId, TurnId } from './ids.js';
 import type { SubagentSpawner } from './subagent.js';
 import type { ToolIsolationSpec } from './isolation.js';
+import type { QuestionItem, QuestionOutcome } from './question.js';
 
 /**
  * A tool the active model provider can execute on its own infrastructure.
@@ -158,6 +159,13 @@ export interface ToolContext {
    * then read it here, e.g. `const key = await ctx.getSecret('ELEVENLABS_API_KEY')`.
    */
   readonly getSecret?: (name: string) => Promise<string | null>;
+  /**
+   * Ask the person a Question and wait for the answer. Present when the tool
+   * runs inside a session turn; the outcome says `unanswerable` when no surface
+   * that can show a question is attached (a headless run), so the tool can tell
+   * the agent to decide on its own.
+   */
+  readonly ask?: (questions: ReadonlyArray<QuestionItem>) => Promise<QuestionOutcome>;
 }
 
 /**
@@ -230,6 +238,11 @@ export interface ToolDef {
    * a task in a mode that never asked for it. See `toolsForMode`.
    */
   readonly modes?: ReadonlyArray<string>;
+  /**
+   * The modes this tool is left out of; the opposite of `modes`. For a tool
+   * that cannot work there (`ask_user` in goal mode, which runs unattended).
+   */
+  readonly notInModes?: ReadonlyArray<string>;
   /**
    * The user's refusal of this tool ends the turn, with this text as its last
    * message, instead of letting the model try another way round it. For tools

package/src/tunnel.ts

@@ -1,6 +1,6 @@
 /**
- * A swappable way to expose a locally-bound surface (the web channel, the mobile
- * bridge, the webhooks listener) to the user over the public internet — so an
+ * A swappable way to expose a locally-bound surface (the web channel, the
+ * webhooks listener) to the user over the public internet — so an
  * agent on Telegram/TUI can hand the user a URL they can open. One provider is
  * active per session (registered via plugins, like every other block); core
  * seeds a `localhost` no-op provider so `getActive()` is non-null.
@@ -23,7 +23,7 @@ export interface TunnelOpenOptions {
 }
 
 export interface TunnelHandle {
-  /** The publicly reachable base URL (e.g. https://abc123.proxy.moxxy.ai/mobile). */
+  /** The publicly reachable base URL (e.g. https://abc123.proxy.moxxy.ai/web). */
   readonly url: string;
   /** Tear the tunnel down (deregister the target / close the connection). */
   close(): Promise<void>;

package/src/workflow-approval.ts

@@ -21,7 +21,7 @@ export interface WorkflowApprovalsView {
   revoke(id: string): Promise<void>;
   cancel(id: string): Promise<void>;
 }
-import { z } from 'zod';
+import { z } from 'zod/v3';
 
 export const workflowApprovalItemSchema = z
   .object({