@opencow-ai/opencow-agent-sdk 0.4.23 → 0.4.25

package/dist/session/forkedAgent.d.ts

@@ -181,7 +181,8 @@ export type SubagentContextOverrides = {
  * - abortController: new controller linked to parent (parent abort propagates)
  * - getAppState: wrapped to set shouldAvoidPermissionPrompts
  * - All mutation callbacks (setAppState, etc.): no-op
- * - Fresh collections: nestedMemoryAttachmentTriggers, toolDecisions
+ * - Fresh collections: nestedMemoryAttachmentTriggers, toolDecisions,
+ *   permissionPreDecisions
  *
  * Callers can:
  * - Override specific fields via the overrides parameter

package/dist/session/tokens.d.ts

@@ -50,7 +50,8 @@ export declare function doesMostRecentAssistantMessageExceed200k(messages: Messa
  * - thinking (thinking_delta)
  * - redacted_thinking data
  * - tool_use input (input_json_delta)
- * Note: signature_delta is excluded from streaming counts (not model output).
+ * Note: signature_delta and replay_state_delta are excluded from streaming
+ * counts (not model output).
  */
 export declare function getAssistantMessageContentLength(message: AssistantMessage): number;
 /**

package/dist/types/replayState.d.ts

@@ -0,0 +1,13 @@
+import type { CanonicalThinkingBlock } from '../session/canonical/index.js';
+/**
+ * Opaque reasoning-replay token issued by the gateway for non-Anthropic
+ * providers. The SDK only stores it on the thinking block and sends it back
+ * with the history; only the gateway can decode it.
+ */
+export type ReplayStateThinkingBlock = CanonicalThinkingBlock & {
+    replay_state?: string;
+};
+export type ReplayStateDelta = {
+    type: 'replay_state_delta';
+    replay_state: string;
+};

package/dist/types/toolRuntime.d.ts

@@ -130,6 +130,12 @@ export type ToolRuntimeContext = {
          * nested subagents via agentOptions; the main loop never filters on it.
          */
         subagentDisallowedTools?: string[];
+        /**
+         * 权限决策前置开关（见 Options.preDecidePermissions）。开启后 runTools() 入口
+         * 对同批 tool_use 并发预调 canUseTool 并缓存到 permissionPreDecisions；
+         * 默认 undefined（关），由 host 显式开启。
+         */
+        preDecidePermissions?: boolean;
     };
     abortController: AbortController;
     readFileState: FileStateCache;
@@ -184,6 +190,17 @@ export type ToolRuntimeContext = {
         decision: 'accept' | 'reject';
         timestamp: number;
     }>;
+    /**
+     * 权限预决策缓存（options.preDecidePermissions 开启时由 runTools() 入口填充，
+     * 键为 tool_use id）。与 toolDecisions 审计快照不同：本缓存是一次性消费——
+     * 执行期 resolveHookPermissionDecision 取出即删，且仅当执行期 input 与缓存
+     * input 深比较一致时才采用缓存 promise，否则回退内联询问。预决策拿不到
+     * PreToolUse hook 的改写/ask 消息，故 hook 改写 input 后必然 miss 回退。
+     */
+    permissionPreDecisions?: Map<string, {
+        input: Record<string, unknown>;
+        promise: Promise<PermissionResult>;
+    }>;
     queryTracking?: QueryChainTracking;
     requestPrompt?: (sourceName: string, toolInputSummary?: string | null) => (request: PromptRequest) => Promise<PromptResponse>;
     toolUseId?: string;
@@ -233,6 +250,7 @@ export type ToolRuntime<Input extends AnyObject = AnyObject, Output = unknown, P
     readonly shouldDefer?: boolean;
     readonly alwaysLoad?: boolean;
     readonly strict?: boolean;
+    readonly unknownKeys?: 'strip' | 'reject';
     readonly inputSchema: Input;
     readonly inputJSONSchema?: ToolInputJSONSchema;
     outputSchema?: z.ZodType<unknown>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencow-ai/opencow-agent-sdk",
-  "version": "0.4.23",
+  "version": "0.4.25",
   "description": "Claude Code opened to any LLM — OpenAI, Gemini, DeepSeek, Ollama, and 200+ models",
   "type": "module",
   "main": "./dist/sdk.js",