@sayknow-cli/agent-core 0.3.2 → 0.3.4

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [0.7.7] - 2026-06-28
+
+### Fixed
+
+- Mitigate leaked Anthropic-style `<invoke name="…">` tool-call envelopes across providers, not only `openai-codex`, while keeping Codex `to=functions.*` harmony-header mitigation provider-scoped.
+
 ## [0.7.4] - 2026-06-27
 
 ### Added

package/dist/types/harmony-leak.d.ts

@@ -48,6 +48,7 @@ export interface HarmonyRecoveredToolCall {
  * itself is cheap; the cost of missing a leak on a new model is not.
  */
 export declare function isHarmonyLeakMitigationTarget(model: Model): boolean;
+export declare function shouldMitigateHarmonyLeak(model: Model, detection: HarmonyDetection): boolean;
 export declare function signalListLabel(signals: readonly HarmonySignal[]): string;
 /**
  * Detect harmony-protocol leakage in `text`. Returns undefined if clean.

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@sayknow-cli/agent-core",
-	"version": "0.3.2",
+	"version": "0.3.4",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"homepage": "https://github.com/jaybeyond/Sayknow_CLI",
 	"author": "jaybeyond",
@@ -35,9 +35,9 @@
 		"fmt": "biome format --write ."
 	},
 	"dependencies": {
-		"@sayknow-cli/ai": "0.3.2",
-		"@sayknow-cli/natives": "0.3.2",
-		"@sayknow-cli/utils": "0.3.2",
+		"@sayknow-cli/ai": "0.3.4",
+		"@sayknow-cli/natives": "0.3.4",
+		"@sayknow-cli/utils": "0.3.4",
 		"@opentelemetry/api": "^1.9.0"
 	},
 	"devDependencies": {

package/src/agent-loop.ts

@@ -24,6 +24,7 @@ import {
 	type HarmonyRecoveredToolCall,
 	isHarmonyLeakMitigationTarget,
 	recoverHarmonyToolCall,
+	shouldMitigateHarmonyLeak,
 	signalListLabel,
 } from "./harmony-leak";
 import { type AgentRunCoverage, type AgentRunSummary, ToolCallBlockedError } from "./run-collector";
@@ -515,19 +516,11 @@ async function runLoopBody(
 					streamFn,
 					harmonyRetryAttempt,
 				);
-				// Post-stream harmony-leak detection. The mitigation scaffolding
-				// below (HarmonyLeakInterruption catch + retry/recover/audit,
-				// plus harmonyAbortController) existed but nothing invoked the
-				// detector, so leaks on openai-codex models were never caught.
-				// Detect on the completed message and route recoverable tool-arg
-				// leaks through recovery, everything else through abort-retry.
-				if (isHarmonyLeakMitigationTarget(config.model)) {
-					const detection = detectHarmonyLeakInAssistantMessage(message);
-					if (detection) {
-						const rec = recoverHarmonyToolCall(message, detection);
-						const removed = rec ? rec.removed : extractHarmonyRemoved(message, detection);
-						throw new HarmonyLeakInterruption(detection, removed, rec);
-					}
+				const detection = detectHarmonyLeakInAssistantMessage(message);
+				if (detection && shouldMitigateHarmonyLeak(config.model, detection)) {
+					const rec = recoverHarmonyToolCall(message, detection);
+					const removed = rec ? rec.removed : extractHarmonyRemoved(message, detection);
+					throw new HarmonyLeakInterruption(detection, removed, rec);
 				}
 				harmonyRetryAttempt = 0;
 				harmonyTruncateResumeCount = 0;

package/src/harmony-leak.ts

@@ -127,6 +127,11 @@ export function isHarmonyLeakMitigationTarget(model: Model): boolean {
 	return model.provider === "openai-codex";
 }
 
+export function shouldMitigateHarmonyLeak(model: Model, detection: HarmonyDetection): boolean {
+	if (isHarmonyLeakMitigationTarget(model)) return true;
+	return detection.signals.some(signal => signal.classes.includes("I"));
+}
+
 export function signalListLabel(signals: readonly HarmonySignal[]): string {
 	const seen: string[] = [];
 	for (const signal of signals) {