@t2000/engine 0.46.14 → 0.46.16

package/dist/index.js

@@ -4436,7 +4436,7 @@ function resolvePermissionTier(operation, amountUsd, config, sessionSpendUsd, se
   if (tier === "auto" && typeof sessionSpendUsd === "number" && sessionSpendUsd + amountUsd > config.autonomousDailyLimit) {
     tier = "confirm";
   }
-  if (tier === "auto" && operation === "send" && sendContext?.to && !isKnownContactAddress(sendContext.to, sendContext.contacts ?? [])) {
+  if (tier === "auto" && operation === "send" && sendContext?.to && sendContext.to.startsWith("0x") && !isKnownContactAddress(sendContext.to, sendContext.contacts ?? [])) {
     tier = "confirm";
   }
   return tier;
@@ -4869,6 +4869,16 @@ var QueryEngine = class {
       permissionConfig: this.permissionConfig,
       sessionSpendUsd: this.sessionSpendUsd
     };
+    if (!signal.aborted) {
+      await new Promise((resolve) => {
+        const t = setTimeout(resolve, 1500);
+        signal.addEventListener("abort", () => {
+          clearTimeout(t);
+          resolve();
+        }, { once: true });
+      });
+    }
+    if (signal.aborted) return;
     const idStem = `pwr_${action.toolUseId.slice(-6)}`;
     const refreshes = await Promise.all(
       refreshTools.map(async (tool, idx) => {
@@ -5261,6 +5271,9 @@ ${recipeCtx}`;
         const needsConfirmation = (() => {
           if (!tool || tool.isReadOnly) return false;
           if (tool.permissionLevel === "explicit") return true;
+          if (tool.permissionLevel === "auto" && !toolNameToOperation(call.name)) {
+            return false;
+          }
           if (!context.agent && !tool.isReadOnly) return true;
           if (context.permissionConfig && context.priceCache) {
             const operation = toolNameToOperation(call.name);