@openacp/cli 2026.403.3 → 2026.403.5

package/dist/index.d.ts

@@ -653,10 +653,28 @@ declare const ConfigSchema: z.ZodObject<{
     defaultAgent: z.ZodString;
     workspace: z.ZodDefault<z.ZodObject<{
         baseDir: z.ZodDefault<z.ZodString>;
+        security: z.ZodDefault<z.ZodObject<{
+            allowedPaths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            envWhitelist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            allowedPaths: string[];
+            envWhitelist: string[];
+        }, {
+            allowedPaths?: string[] | undefined;
+            envWhitelist?: string[] | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         baseDir: string;
+        security: {
+            allowedPaths: string[];
+            envWhitelist: string[];
+        };
     }, {
         baseDir?: string | undefined;
+        security?: {
+            allowedPaths?: string[] | undefined;
+            envWhitelist?: string[] | undefined;
+        } | undefined;
     }>>;
     security: z.ZodDefault<z.ZodObject<{
         allowedUserIds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -907,14 +925,18 @@ declare const ConfigSchema: z.ZodObject<{
         monthlyBudget?: number | undefined;
     };
     defaultAgent: string;
-    workspace: {
-        baseDir: string;
-    };
     security: {
         allowedUserIds: string[];
         maxConcurrentSessions: number;
         sessionTimeoutMinutes: number;
     };
+    workspace: {
+        baseDir: string;
+        security: {
+            allowedPaths: string[];
+            envWhitelist: string[];
+        };
+    };
     logging: {
         level: "fatal" | "error" | "warn" | "info" | "debug" | "silent";
         logDir: string;
@@ -1001,14 +1023,18 @@ declare const ConfigSchema: z.ZodObject<{
         currency?: string | undefined;
         retentionDays?: number | undefined;
     } | undefined;
-    workspace?: {
-        baseDir?: string | undefined;
-    } | undefined;
     security?: {
         allowedUserIds?: string[] | undefined;
         maxConcurrentSessions?: number | undefined;
         sessionTimeoutMinutes?: number | undefined;
     } | undefined;
+    workspace?: {
+        baseDir?: string | undefined;
+        security?: {
+            allowedPaths?: string[] | undefined;
+            envWhitelist?: string[] | undefined;
+        } | undefined;
+    } | undefined;
     logging?: {
         level?: "fatal" | "error" | "warn" | "info" | "debug" | "silent" | undefined;
         logDir?: string | undefined;
@@ -1196,6 +1222,7 @@ declare class AgentInstance extends TypedEmitter<AgentInstanceEvents> {
     private terminalManager;
     private static mcpManager;
     private _destroying;
+    private pathGuard;
     sessionId: string;
     agentName: string;
     promptCapabilities?: {
@@ -1211,6 +1238,8 @@ declare class AgentInstance extends TypedEmitter<AgentInstanceEvents> {
     };
     middlewareChain?: MiddlewareChain;
     debugTracer: DebugTracer | null;
+    /** Allow external callers (e.g. SessionFactory) to whitelist additional read paths */
+    addAllowedPath(p: string): void;
     onPermissionRequest: (request: PermissionRequest) => Promise<string>;
     private constructor();
     private static spawnSubprocess;
@@ -1261,6 +1290,12 @@ declare class AgentCatalog {
     getAvailable(): AgentListItem[];
     checkAvailability(keyOrId: string): AvailabilityResult;
     install(keyOrId: string, progress?: InstallProgress, force?: boolean): Promise<InstallResult>;
+    /**
+     * Register an agent directly into the catalog store without going through
+     * the registry installer. Used to pre-register bundled agents (e.g. Claude)
+     * when their CLI dependency is not yet installed.
+     */
+    registerFallbackAgent(key: string, data: InstalledAgent): void;
     uninstall(key: string): Promise<{
         ok: boolean;
         error?: string;
@@ -1677,7 +1712,7 @@ declare class SessionBridge {
     private persistAcpState;
     /** Resolve a permission request through the full pipeline: middleware -> auto-approve -> ask user */
     private resolvePermission;
-    /** Check if a permission request should be auto-approved (openacp commands or bypass mode) */
+    /** Check if a permission request should be auto-approved (bypass mode only) */
     private checkAutoApprove;
     /** Emit permission:afterResolve middleware hook (fire-and-forget) */
     private emitAfterResolve;
@@ -1958,6 +1993,10 @@ declare class SessionFactory {
     agentCatalog?: AgentCatalog;
     /** Injected by Core — needed for context-aware session creation */
     getContextManager?: () => ContextManager | undefined;
+    /** Injected by Core — returns extra filesystem paths the agent is allowed to read.
+     *  Used to whitelist the file-service upload directory so agents can read attachments
+     *  saved outside the workspace (e.g. ~/.openacp/instances/main/files/). */
+    getAgentAllowedPaths?: () => string[];
     constructor(agentManager: AgentManager, sessionManager: SessionManager, speechServiceAccessor: SpeechService | (() => SpeechService), eventBus: EventBus, instanceRoot?: string | undefined);
     private get speechService();
     create(params: SessionCreateParams): Promise<Session>;
@@ -2394,7 +2433,7 @@ declare function uninstallAutoStart(): {
 declare function isAutoStartInstalled(): boolean;
 
 declare class FileService {
-    private baseDir;
+    readonly baseDir: string;
     constructor(baseDir: string);
     /**
      * Remove session file directories older than maxAgeDays.
@@ -3016,6 +3055,8 @@ declare class TelegramAdapter extends MessagingAdapter {
     private _pendingSkillCommands;
     /** Control message IDs per session (for updating status text/buttons) */
     private controlMsgIds;
+    private _threadReadyHandler?;
+    private _configChangedHandler?;
     /** Store control message ID in memory + persist to session record */
     private storeControlMsgId;
     /** Get control message ID (from Map, with fallback to session record) */