@t2000/engine 0.46.13 → 0.46.15

package/dist/index.d.ts

@@ -1460,6 +1460,13 @@ declare class EarlyToolDispatcher {
     hasPending(): boolean;
     /** List of call IDs that were early-dispatched. */
     dispatchedIds(): Set<string>;
+    /**
+     * Look up the original tool input by `tool_use_id`. Used by the engine to
+     * feed `updateGuardStateAfterToolResult` (which needs the call input to
+     * record swap_quote → swap_execute pairing, etc.) for tools that were
+     * dispatched here instead of going through the normal post-stream loop.
+     */
+    getInputById(toolUseId: string): unknown | undefined;
     /**
      * Collect all results in original dispatch order.
      * Yields `tool_result` events as each promise resolves.

package/dist/index.js

@@ -4608,6 +4608,15 @@ var EarlyToolDispatcher = class {
   dispatchedIds() {
     return new Set(this.entries.map((e) => e.call.id));
   }
+  /**
+   * Look up the original tool input by `tool_use_id`. Used by the engine to
+   * feed `updateGuardStateAfterToolResult` (which needs the call input to
+   * record swap_quote → swap_execute pairing, etc.) for tools that were
+   * dispatched here instead of going through the normal post-stream loop.
+   */
+  getInputById(toolUseId) {
+    return this.entries.find((e) => e.call.id === toolUseId)?.call.input;
+  }
   /**
    * Collect all results in original dispatch order.
    * Yields `tool_result` events as each promise resolves.
@@ -5163,10 +5172,11 @@ ${recipeCtx}`;
               }
             }
             const tool = findTool(this.tools, earlyEvent.toolName);
+            const earlyInput = dispatcher.getInputById(earlyEvent.toolUseId) ?? null;
             updateGuardStateAfterToolResult(
               earlyEvent.toolName,
               tool,
-              null,
+              earlyInput,
               earlyEvent.result,
               earlyEvent.isError,
               this.guardState
@@ -5251,6 +5261,9 @@ ${recipeCtx}`;
         const needsConfirmation = (() => {
           if (!tool || tool.isReadOnly) return false;
           if (tool.permissionLevel === "explicit") return true;
+          if (tool.permissionLevel === "auto" && !toolNameToOperation(call.name)) {
+            return false;
+          }
           if (!context.agent && !tool.isReadOnly) return true;
           if (context.permissionConfig && context.priceCache) {
             const operation = toolNameToOperation(call.name);