@opencow-ai/opencow-agent-sdk 0.4.23 → 0.4.24

package/dist/sdk.js

@@ -224458,10 +224458,23 @@ function deepOmitNullProps(value) {
   }
   return value;
 }
-function safeParseToolInputWithNullCoercion(schema, input) {
+function containsUnrecognizedKeysIssue(value) {
+  if (Array.isArray(value))
+    return value.some(containsUnrecognizedKeysIssue);
+  if (value === null || typeof value !== "object")
+    return false;
+  const issue2 = value;
+  if (issue2.code === "unrecognized_keys")
+    return true;
+  return containsUnrecognizedKeysIssue(issue2.errors);
+}
+function safeParseToolInputWithNullCoercion(schema, input, unknownKeys = "strip") {
   const first = schema.safeParse(input);
   if (first.success)
     return first;
+  if (unknownKeys === "reject" && containsUnrecognizedKeysIssue(first.error.issues)) {
+    return first;
+  }
   if (input === null || typeof input !== "object") {
     return first;
   }
@@ -233047,6 +233060,12 @@ function mergeAgentsByType(base2, override) {
     byType.set(agent.agentType, agent);
   return [...byType.values()];
 }
+function withDefaultAgentForInvocation(activeAgents, requestedType, defaultAgent) {
+  if (requestedType !== undefined || activeAgents.some((agent) => agent.agentType === defaultAgent.agentType)) {
+    return activeAgents;
+  }
+  return [...activeAgents, defaultAgent];
+}
 
 // src/capabilities/tools/AgentTool/builtInAgents.ts
 var exports_builtInAgents = {};
@@ -233985,11 +234004,62 @@ var init_generators = __esm(() => {
   NO_VALUE = Symbol("NO_VALUE");
 });
 
+// src/controller/dispatch/permissionPreDecision.ts
+function startPermissionPreDecisions(blocks, assistantMessages, canUseTool, toolUseContext) {
+  const existing = toolUseContext.permissionPreDecisions;
+  if (existing && existing.size > 0) {
+    return;
+  }
+  const preDecisions = new Map;
+  toolUseContext.permissionPreDecisions = preDecisions;
+  for (const block2 of blocks) {
+    const tool = findToolRuntimeByName(toolUseContext.options.tools, block2.name);
+    if (!tool) {
+      continue;
+    }
+    const parsedInput = safeParseToolInputWithNullCoercion(tool.inputSchema, block2.input, tool.unknownKeys);
+    if (!parsedInput.success) {
+      continue;
+    }
+    const assistantMessage = assistantMessages.find((message) => message.message.content.some((content) => content.type === "tool_use" && content.id === block2.id));
+    if (!assistantMessage) {
+      continue;
+    }
+    let input = parsedInput.data;
+    if (tool.backfillObservableInput && typeof input === "object" && input !== null) {
+      input = { ...input };
+      tool.backfillObservableInput(input);
+    }
+    const promise3 = canUseTool(tool, input, toolUseContext, assistantMessage, block2.id);
+    promise3.catch(() => {});
+    preDecisions.set(block2.id, { input, promise: promise3 });
+  }
+}
+function consumePermissionPreDecision(toolUseContext, toolUseID, input, fallback) {
+  const cache2 = toolUseContext.permissionPreDecisions;
+  const entry = cache2?.get(toolUseID);
+  if (!cache2 || !entry) {
+    return fallback();
+  }
+  cache2.delete(toolUseID);
+  if (jsonStringify(entry.input) !== jsonStringify(input)) {
+    return fallback();
+  }
+  return entry.promise;
+}
+var init_permissionPreDecision = __esm(() => {
+  init_toolRuntime();
+  init_slowOperations();
+});
+
 // src/controller/dispatch/toolOrchestration.ts
 function getMaxToolUseConcurrency() {
   return parseInt(resolveEnvVar("MAX_TOOL_USE_CONCURRENCY") || "", 10) || 10;
 }
 async function* runTools(toolUseMessages, assistantMessages, canUseTool, toolUseContext) {
+  if (toolUseContext.options.preDecidePermissions) {
+    startPermissionPreDecisions(toolUseMessages, assistantMessages, canUseTool, toolUseContext);
+  }
   let currentContext = toolUseContext;
   for (const { isConcurrencySafe, blocks } of partitionToolCalls(toolUseMessages, currentContext)) {
     if (isConcurrencySafe) {
@@ -234083,6 +234153,7 @@ var init_toolOrchestration = __esm(() => {
   init_toolRuntime();
   init_generators();
   init_toolExecution();
+  init_permissionPreDecision();
   init_state2();
 });
 
@@ -236316,6 +236387,31 @@ async function* runAgent({
       level: "warn"
     });
   });
+  let partialBaseMessage = null;
+  const partialTextByIndex = new Map;
+  const PARTIAL_PROGRESS_INTERVAL_MS = 50;
+  let lastPartialAssistantAt = 0;
+  let lastPartialProgressHookAt = 0;
+  let foregroundSkipped = 0;
+  let backgroundSkipped = 0;
+  const logPartialProgress = (reason, chars, foregroundEmitted, backgroundEmitted) => {
+    logForDebugging(`[StreamThrottle:SubAgent] ${JSON.stringify({
+      reason,
+      agentId,
+      agentType: agentDefinition.agentType,
+      messageId: partialBaseMessage?.id ?? null,
+      intervalMs: PARTIAL_PROGRESS_INTERVAL_MS,
+      chars,
+      foregroundEmitted,
+      foregroundSkipped,
+      backgroundEmitted,
+      backgroundSkipped
+    })}`);
+    if (foregroundEmitted)
+      foregroundSkipped = 0;
+    if (backgroundEmitted)
+      backgroundSkipped = 0;
+  };
   try {
     const additionalContexts = [];
     for await (const hookResult of executeSubagentStartHooks(agentId, agentDefinition.agentType, agentAbortController.signal, undefined, toolUseContext.toolUseId, isAsync2)) {
@@ -236423,10 +236519,6 @@ async function* runAgent({
       ...description && { description }
     }).catch((_err) => logForDebugging(`Failed to write agent metadata: ${_err}`));
     let lastRecordedUuid = initialMessages.at(-1)?.uuid ?? null;
-    let partialBaseMessage = null;
-    const partialTextByIndex = new Map;
-    const PARTIAL_PROGRESS_HOOK_INTERVAL_MS = 100;
-    let lastPartialProgressHookAt = 0;
     const agentExtraBody = agentDefinition.extraBody;
     const agentQuery = query({
       messages: initialMessages,
@@ -236451,6 +236543,11 @@ async function* runAgent({
       if (message.type === "stream_event") {
         const ev = message.event;
         if (ev.type === "message_start") {
+          if (foregroundSkipped > 0 || backgroundSkipped > 0) {
+            logPartialProgress("message-start", 0, false, false);
+            foregroundSkipped = 0;
+            backgroundSkipped = 0;
+          }
           if (message.ttftMs != null) {
             toolUseContext.pushApiMetricsEntry?.(message.ttftMs);
           }
@@ -236462,22 +236559,36 @@ async function* runAgent({
           const idx = ev.index ?? 0;
           const acc = (partialTextByIndex.get(idx) ?? "") + ev.delta.text;
           partialTextByIndex.set(idx, acc);
-          onPartialAssistant?.({
-            type: "assistant",
-            message: {
-              ...partialBaseMessage,
-              content: [{ type: "text", text: acc, citations: null }]
-            },
-            uuid: randomUUID6(),
-            timestamp: new Date().toISOString()
-          });
+          const now = Date.now();
+          let foregroundEmitted = false;
+          let backgroundEmitted = false;
+          if (onPartialAssistant && now - lastPartialAssistantAt >= PARTIAL_PROGRESS_INTERVAL_MS) {
+            lastPartialAssistantAt = now;
+            foregroundEmitted = true;
+            onPartialAssistant({
+              type: "assistant",
+              message: {
+                ...partialBaseMessage,
+                content: [{ type: "text", text: acc, citations: null }]
+              },
+              uuid: randomUUID6(),
+              timestamp: new Date().toISOString()
+            });
+          } else if (onPartialAssistant) {
+            foregroundSkipped += 1;
+          }
           if (isAsync2) {
-            const now = Date.now();
-            if (now - lastPartialProgressHookAt >= PARTIAL_PROGRESS_HOOK_INTERVAL_MS) {
+            if (now - lastPartialProgressHookAt >= PARTIAL_PROGRESS_INTERVAL_MS) {
               lastPartialProgressHookAt = now;
+              backgroundEmitted = true;
               executeSubagentProgressHooks(agentId, agentDefinition.agentType, partialBaseMessage.id, toolUseContext.toolUseId, [{ type: "text", text: acc }]).catch(() => {});
+            } else {
+              backgroundSkipped += 1;
             }
           }
+          if (foregroundEmitted || backgroundEmitted) {
+            logPartialProgress("emit", acc.length, foregroundEmitted, backgroundEmitted);
+          }
         }
         continue;
       }
@@ -236526,6 +236637,9 @@ async function* runAgent({
     agentRunError = err2;
     throw err2;
   } finally {
+    if (foregroundSkipped > 0 || backgroundSkipped > 0) {
+      logPartialProgress("finalize", 0, false, false);
+    }
     await finalizeLifecycle([
       async () => {
         const naturalStopAlreadyFired = isAsync2 && hasSubagentStopFired(agentId);
@@ -251625,7 +251739,7 @@ var init_AgentTool = __esm(() => {
         }
         selectedAgent = FORK_AGENT;
       } else {
-        const allAgents = toolUseContext.options.agentDefinitions.activeAgents;
+        const allAgents = withDefaultAgentForInvocation(toolUseContext.options.agentDefinitions.activeAgents, subagent_type, GENERAL_PURPOSE_AGENT);
         const {
           allowedAgentTypes
         } = toolUseContext.options.agentDefinitions;
@@ -284597,7 +284711,7 @@ async function resolveHookPermissionDecision(hookPermissionResult, tool, input,
     if (requiresInteraction && !interactionSatisfied || requireCanUseTool) {
       logForDebugging(`Hook approved tool use for ${tool.name}, but canUseTool is required`);
       return {
-        decision: await canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID),
+        decision: await consumePermissionPreDecision(toolUseContext, toolUseID, hookInput, () => canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID)),
         input: hookInput
       };
     }
@@ -284612,7 +284726,7 @@ async function resolveHookPermissionDecision(hookPermissionResult, tool, input,
     }
     logForDebugging(`Hook approved tool use for ${tool.name}, but ask rule requires prompt`);
     return {
-      decision: await canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID),
+      decision: await consumePermissionPreDecision(toolUseContext, toolUseID, hookInput, () => canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID)),
       input: hookInput
     };
   }
@@ -284622,8 +284736,9 @@ async function resolveHookPermissionDecision(hookPermissionResult, tool, input,
   }
   const forceDecision = hookPermissionResult?.behavior === "ask" ? hookPermissionResult : undefined;
   const askInput = hookPermissionResult?.behavior === "ask" && hookPermissionResult.updatedInput ? hookPermissionResult.updatedInput : input;
+  const decision = forceDecision ? await canUseTool(tool, askInput, toolUseContext, assistantMessage, toolUseID, forceDecision) : await consumePermissionPreDecision(toolUseContext, toolUseID, askInput, () => canUseTool(tool, askInput, toolUseContext, assistantMessage, toolUseID));
   return {
-    decision: await canUseTool(tool, askInput, toolUseContext, assistantMessage, toolUseID, forceDecision),
+    decision,
     input: askInput
   };
 }
@@ -284784,6 +284899,7 @@ var init_toolHooks = __esm(() => {
   init_permissions2();
   init_toolErrors();
   init_utils5();
+  init_permissionPreDecision();
 });
 
 // src/controller/dispatch/toolExecution.ts
@@ -285026,9 +285142,8 @@ function streamedCheckPermissionsAndCallTool(tool, toolUseID, input, toolUseCont
   return stream4;
 }
 async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContext, canUseTool, assistantMessage, messageId, requestId, mcpServerType, mcpServerBaseUrl, onToolProgress) {
-  const parsedInput = safeParseToolInputWithNullCoercion(tool.inputSchema, input);
-  if (!parsedInput.success) {
-    let errorContent = formatZodValidationError(tool.name, parsedInput.error);
+  const inputValidationFailure = (error41) => {
+    let errorContent = formatZodValidationError(tool.name, error41);
     const schemaHint = buildSchemaNotSentHint(tool, toolUseContext.messages, toolUseContext.options.tools);
     if (schemaHint) {
       logEvent("tengu_deferred_tool_schema_not_sent", {
@@ -285068,11 +285183,15 @@ async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContex
               tool_use_id: toolUseID
             }
           ],
-          toolUseResult: `InputValidationError: ${parsedInput.error.message}`,
+          toolUseResult: `InputValidationError: ${error41.message}`,
           sourceToolAssistantUUID: assistantMessage.uuid
         })
       }
     ];
+  };
+  const parsedInput = safeParseToolInputWithNullCoercion(tool.inputSchema, input, tool.unknownKeys);
+  if (!parsedInput.success) {
+    return inputValidationFailure(parsedInput.error);
   }
   const isValidCall = await tool.validateInput?.(parsedInput.data, toolUseContext);
   if (isValidCall?.result === false) {
@@ -285308,6 +285427,16 @@ async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContex
   if (permissionDecision.updatedInput !== undefined) {
     processedInput = permissionDecision.updatedInput;
   }
+  if (tool.unknownKeys === "reject") {
+    const finalInput = safeParseToolInputWithNullCoercion(tool.inputSchema, processedInput, tool.unknownKeys);
+    if (!finalInput.success) {
+      endToolBlockedOnUserSpan("reject", "input-validation");
+      endToolSpan();
+      resultingMessages.push(...inputValidationFailure(finalInput.error));
+      return resultingMessages;
+    }
+    processedInput = finalInput.data;
+  }
   const telemetryToolInput = extractToolInputForTelemetry(processedInput);
   let toolParameters = {};
   if (isToolDetailsLoggingEnabled()) {
@@ -287656,7 +287785,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-08-28T10:03:59.640Z").getTime();
+  const buildTime = new Date("2026-09-03T09:12:13.936Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -288167,6 +288296,7 @@ function createSubagentContext(parentContext, overrides) {
     dynamicSkillDirTriggers: new Set,
     discoveredSkillNames: new Set,
     toolDecisions: undefined,
+    permissionPreDecisions: undefined,
     contentReplacementState: overrides?.contentReplacementState ?? (parentContext.contentReplacementState ? cloneContentReplacementState(parentContext.contentReplacementState) : undefined),
     abortController,
     getAppState,
@@ -332397,6 +332527,7 @@ class QueryEngine {
       includePartialMessages = false,
       agents = [],
       setSDKStatus,
+      preDecidePermissions,
       onToolInvoke,
       uploadMedia,
       orphanedPermission
@@ -332474,7 +332605,8 @@ class QueryEngine {
         maxOutputTokensLimit,
         contextWindow,
         modelProviders: this.config.modelProviders,
-        subagentDisallowedTools: this.config.subagentDisallowedTools
+        subagentDisallowedTools: this.config.subagentDisallowedTools,
+        preDecidePermissions
       },
       getAppState,
       setAppState,
@@ -332572,7 +332704,8 @@ class QueryEngine {
         maxOutputTokensLimit,
         contextWindow,
         modelProviders: this.config.modelProviders,
-        subagentDisallowedTools: this.config.subagentDisallowedTools
+        subagentDisallowedTools: this.config.subagentDisallowedTools,
+        preDecidePermissions
       },
       getAppState,
       setAppState,
@@ -333089,6 +333222,7 @@ async function* ask({
   handleElicitation,
   agents = [],
   setSDKStatus,
+  preDecidePermissions,
   onToolInvoke,
   uploadMedia,
   orphanedPermission
@@ -333123,6 +333257,7 @@ async function* ask({
     replayUserMessages,
     includePartialMessages,
     setSDKStatus,
+    preDecidePermissions,
     onToolInvoke,
     uploadMedia,
     abortController,
@@ -334528,11 +334663,12 @@ init_callToolResultAdapter();
 init_toolRuntime();
 import { randomUUID as randomUUID20 } from "node:crypto";
 function toInternalTool(sdkTool) {
-  const zodObjectInputSchema = exports_external2.object(sdkTool.inputSchema);
+  const zodObjectInputSchema = sdkTool.unknownKeys === "reject" ? exports_external2.strictObject(sdkTool.inputSchema) : exports_external2.object(sdkTool.inputSchema);
   const internalTool = buildToolRuntime({
     name: sdkTool.name,
     maxResultSizeChars: 1e5,
     inputSchema: zodObjectInputSchema,
+    unknownKeys: sdkTool.unknownKeys,
     isMcp: false,
     shouldDefer: sdkTool.shouldDefer,
     isReadOnly: () => sdkTool.isReadOnly ?? false,
@@ -340705,6 +340841,7 @@ function runSdkQueryRuntime(params) {
           taskBudget: options2.taskBudget,
           subagentDisallowedTools: options2.subagentDisallowedTools,
           canUseTool,
+          preDecidePermissions: options2.preDecidePermissions === true,
           mutableMessages,
           getReadFileCache: () => readFileCache,
           setReadFileCache: (cache3) => {
@@ -342043,4 +342180,4 @@ export {
   watchScheduledTasks
 };
 
-//# debugId=C4D90047AD77BED164756E2164756E21
+//# debugId=7B58D43EDA533A1B64756E2164756E21

package/dist/session/forkedAgent.d.ts

@@ -181,7 +181,8 @@ export type SubagentContextOverrides = {
  * - abortController: new controller linked to parent (parent abort propagates)
  * - getAppState: wrapped to set shouldAvoidPermissionPrompts
  * - All mutation callbacks (setAppState, etc.): no-op
- * - Fresh collections: nestedMemoryAttachmentTriggers, toolDecisions
+ * - Fresh collections: nestedMemoryAttachmentTriggers, toolDecisions,
+ *   permissionPreDecisions
  *
  * Callers can:
  * - Override specific fields via the overrides parameter

package/dist/types/toolRuntime.d.ts

@@ -130,6 +130,12 @@ export type ToolRuntimeContext = {
          * nested subagents via agentOptions; the main loop never filters on it.
          */
         subagentDisallowedTools?: string[];
+        /**
+         * 权限决策前置开关（见 Options.preDecidePermissions）。开启后 runTools() 入口
+         * 对同批 tool_use 并发预调 canUseTool 并缓存到 permissionPreDecisions；
+         * 默认 undefined（关），由 host 显式开启。
+         */
+        preDecidePermissions?: boolean;
     };
     abortController: AbortController;
     readFileState: FileStateCache;
@@ -184,6 +190,17 @@ export type ToolRuntimeContext = {
         decision: 'accept' | 'reject';
         timestamp: number;
     }>;
+    /**
+     * 权限预决策缓存（options.preDecidePermissions 开启时由 runTools() 入口填充，
+     * 键为 tool_use id）。与 toolDecisions 审计快照不同：本缓存是一次性消费——
+     * 执行期 resolveHookPermissionDecision 取出即删，且仅当执行期 input 与缓存
+     * input 深比较一致时才采用缓存 promise，否则回退内联询问。预决策拿不到
+     * PreToolUse hook 的改写/ask 消息，故 hook 改写 input 后必然 miss 回退。
+     */
+    permissionPreDecisions?: Map<string, {
+        input: Record<string, unknown>;
+        promise: Promise<PermissionResult>;
+    }>;
     queryTracking?: QueryChainTracking;
     requestPrompt?: (sourceName: string, toolInputSummary?: string | null) => (request: PromptRequest) => Promise<PromptResponse>;
     toolUseId?: string;
@@ -233,6 +250,7 @@ export type ToolRuntime<Input extends AnyObject = AnyObject, Output = unknown, P
     readonly shouldDefer?: boolean;
     readonly alwaysLoad?: boolean;
     readonly strict?: boolean;
+    readonly unknownKeys?: 'strip' | 'reject';
     readonly inputSchema: Input;
     readonly inputJSONSchema?: ToolInputJSONSchema;
     outputSchema?: z.ZodType<unknown>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencow-ai/opencow-agent-sdk",
-  "version": "0.4.23",
+  "version": "0.4.24",
   "description": "Claude Code opened to any LLM — OpenAI, Gemini, DeepSeek, Ollama, and 200+ models",
   "type": "module",
   "main": "./dist/sdk.js",