agent-afk 5.181.0 → 5.182.0

package/dist/agent/mcp/client.d.ts

@@ -2,6 +2,7 @@ import { type CallToolResult, type Tool as McpTool } from '@modelcontextprotocol
 import { UnauthorizedError } from '@modelcontextprotocol/sdk/client/auth.js';
 import type { ToolResult } from '../tools/types.js';
 import type { McpServerConfig } from './types.js';
+import type { McpServerLayer } from './env-containment.js';
 export interface McpClientConnectResult {
     tools: McpTool[];
     serverInfo: {
@@ -12,12 +13,14 @@ export interface McpClientConnectResult {
 export declare class McpClient {
     private readonly serverName;
     private readonly config;
+    private readonly layer;
+    private readonly trustedAllowSecretEnv;
     private client;
     private connected;
     private pendingAuthTransport;
     onTransportError?: (err: Error) => void;
     onToolListChanged?: () => void;
-    constructor(serverName: string, config: McpServerConfig);
+    constructor(serverName: string, config: McpServerConfig, layer?: McpServerLayer, trustedAllowSecretEnv?: readonly string[]);
     connect(): Promise<McpClientConnectResult>;
     listTools(): Promise<McpTool[]>;
     refreshTools(): Promise<McpTool[]>;

package/dist/agent/mcp/config-loader.d.ts

@@ -1,4 +1,5 @@
 import type { McpServerConfig } from './types.js';
+import type { McpServerLayer } from './env-containment.js';
 export interface McpConfigFile {
     mcpServers?: Record<string, McpServerConfig>;
 }
@@ -6,6 +7,8 @@ export interface LoadedMcpConfig {
     mcpServers: Record<string, McpServerConfig>;
     sources: string[];
     warnings: string[];
+    serverLayers: Record<string, McpServerLayer>;
+    userAllowSecretEnv: Record<string, string[]>;
 }
 export declare function getMcpConfigPath(): string;
 export declare function getProjectMcpConfigPath(cwd?: string): string | null;

package/dist/agent/mcp/env-containment.d.ts

@@ -0,0 +1,9 @@
+export type McpServerLayer = 'project' | 'user-global' | 'plugin' | 'cli';
+export declare function isSecretPattern(varName: string): boolean;
+export declare function isDangerousInherited(varName: string): boolean;
+export interface SecretCheckResult {
+    allowed: boolean;
+    warning?: string;
+}
+export declare function checkSecretExpansion(varName: string, layer: McpServerLayer, serverName: string, allowSecretEnv?: readonly string[]): SecretCheckResult;
+export declare function scrubDangerousEnv(base: Record<string, string>): string[];

package/dist/agent/mcp/env.d.ts

@@ -1,6 +1,20 @@
+import { type McpServerLayer } from './env-containment.js';
 export interface EnvExpansionResult<T> {
     value: T;
     missing: string[];
+    blocked: string[];
 }
-export declare function expandEnvString(input: string, source?: NodeJS.ProcessEnv): EnvExpansionResult<string>;
-export declare function expandEnvRecord(input: Record<string, string> | undefined, source?: NodeJS.ProcessEnv): EnvExpansionResult<Record<string, string>>;
+export declare function expandEnvString(input: string, source?: NodeJS.ProcessEnv): Omit<EnvExpansionResult<string>, 'blocked'>;
+export declare function expandEnvRecord(input: Record<string, string> | undefined, source?: NodeJS.ProcessEnv): Omit<EnvExpansionResult<Record<string, string>>, 'blocked'>;
+export interface EnvExpansionContext {
+    layer: McpServerLayer;
+    serverName: string;
+    allowSecretEnv?: readonly string[];
+}
+export declare function expandEnvStringForLayer(input: string, ctx: EnvExpansionContext, source?: NodeJS.ProcessEnv, warn?: (msg: string) => void): EnvExpansionResult<string>;
+export declare function expandEnvRecordForLayer(input: Record<string, string> | undefined, ctx: EnvExpansionContext, source?: NodeJS.ProcessEnv, warn?: (msg: string) => void): EnvExpansionResult<Record<string, string>>;
+export declare function expandHeadersForLayer(headers: Record<string, string> | undefined, ctx: EnvExpansionContext, source?: NodeJS.ProcessEnv, warn?: (msg: string) => void): {
+    headers: Record<string, string>;
+    missing: string[];
+    blocked: string[];
+};

package/dist/agent/mcp/manager.d.ts

@@ -1,9 +1,12 @@
 import type { AnthropicToolDef, ToolHandler } from '../tools/types.js';
 import type { McpClientState, McpServerConfig } from './types.js';
 import type { TraceSink } from '../trace/index.js';
+import type { McpServerLayer } from './env-containment.js';
 export interface McpManagerInitOptions {
     warnings?: string[];
     traceWriter?: TraceSink;
+    serverLayers?: Record<string, McpServerLayer>;
+    userAllowSecretEnv?: Record<string, string[]>;
 }
 export declare class McpManager {
     private readonly records;

package/dist/agent/mcp/transport.d.ts

@@ -1,6 +1,7 @@
 import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 import type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';
 import type { McpServerConfig } from './types.js';
+import { type McpServerLayer } from './env-containment.js';
 export declare function expandHeaders(headers: Record<string, string> | undefined, source?: NodeJS.ProcessEnv): {
     headers: Record<string, string>;
     missing: string[];
@@ -9,4 +10,4 @@ export interface CreateTransportResult {
     transport: Transport;
     isSSE: boolean;
 }
-export declare function createTransport(serverName: string, config: McpServerConfig, oauthProvider?: OAuthClientProvider): CreateTransportResult;
+export declare function createTransport(serverName: string, config: McpServerConfig, oauthProvider?: OAuthClientProvider, layer?: McpServerLayer, trustedAllowSecretEnv?: readonly string[]): CreateTransportResult;

package/dist/agent/mcp/types.d.ts

@@ -10,6 +10,7 @@ export interface McpServerConfig {
     disabled?: boolean;
     alwaysLoad?: boolean;
     timeout?: number;
+    allowSecretEnv?: string[];
 }
 export type McpClientStatus = 'connecting' | 'connected' | 'error' | 'disabled' | 'oauth_pending';
 export interface McpClientState {

package/dist/agent/providers/anthropic-direct/build-dispatcher.d.ts

@@ -3,6 +3,7 @@ import type { PlanExitControls } from '../../types/config-types.js';
 import type { HookRegistry } from '../../hooks.js';
 import type { MemoryStore } from '../../memory/index.js';
 import type { WorkspaceStore } from '../../workspace/workspace-store.js';
+import type { StateStore } from '../../state/state-store.js';
 import type { SubagentExecutor } from '../../tools/subagent-executor.js';
 import type { SkillExecutor } from '../../tools/skill-executor.js';
 import type { ComposeExecutor } from '../../tools/compose-executor.js';
@@ -32,6 +33,7 @@ export interface BuildDispatcherOptions {
 export interface BuildDispatcherDeps {
     memoryStore: MemoryStore;
     workspaceStore?: WorkspaceStore;
+    stateStore?: StateStore;
     surface: string;
     readOnlyMemory: boolean;
     readOnlyBash: boolean;

package/dist/agent/providers/anthropic-direct/provider-options.d.ts

@@ -3,6 +3,7 @@ import type { CanUseTool } from '../../types/sdk-types.js';
 import type { HookRegistry } from '../../hooks.js';
 import type { MemoryStore } from '../../memory/index.js';
 import type { WorkspaceStore } from '../../workspace/workspace-store.js';
+import type { StateStore } from '../../state/state-store.js';
 import type { SubagentExecutor } from '../../tools/subagent-executor.js';
 import type { SkillExecutor } from '../../tools/skill-executor.js';
 import type { ComposeExecutor } from '../../tools/compose-executor.js';
@@ -31,6 +32,7 @@ export interface AnthropicDirectProviderOptions {
     composeExecutor?: ComposeExecutor;
     memoryStore?: MemoryStore;
     workspaceStore?: WorkspaceStore;
+    stateStore?: StateStore;
     surface?: string;
     readOnlyMemory?: boolean;
     readOnlyBash?: boolean;

package/dist/agent/providers/anthropic-direct/provider-runtime.d.ts

@@ -9,6 +9,7 @@ export declare class AnthropicDirectProvider implements ModelProvider {
     private readonly externalTools;
     private readonly memoryStore;
     private readonly workspaceStore;
+    private readonly stateStore;
     private readonly providerFactory?;
     private readonly skillExecutor?;
     private readonly schemas;

package/dist/agent/providers/openai-compatible/index.d.ts

@@ -8,6 +8,7 @@ import type { CanUseTool } from '../../types/sdk-types.js';
 import type { ToolDispatcher } from '../anthropic-direct/tool-dispatcher.js';
 import { MemoryStore } from '../../memory/index.js';
 import { WorkspaceStore } from '../../workspace/index.js';
+import { StateStore } from '../../state/state-store.js';
 export interface OpenAICompatibleProviderOptions {
     baseURL?: string;
     defaultHeaders?: Record<string, string>;
@@ -19,6 +20,7 @@ export interface OpenAICompatibleProviderOptions {
     composeExecutor?: ComposeExecutor;
     memoryStore?: MemoryStore;
     workspaceStore?: WorkspaceStore;
+    stateStore?: StateStore;
     surface?: string;
     readOnlyMemory?: boolean;
     readOnlyBash?: boolean;
@@ -31,6 +33,7 @@ export declare class OpenAICompatibleProvider implements ModelProvider {
     private readonly providerOpts;
     private readonly memoryStore;
     private readonly workspaceStore;
+    private readonly stateStore;
     private readonly schemas;
     private _defaultHeaders;
     private _sharedReadRoots;

package/dist/agent/state/state-schemas.d.ts

@@ -0,0 +1,8 @@
+import type { AnthropicToolDef } from '../tools/types.js';
+export declare const stateGetTool: AnthropicToolDef;
+export declare const statePutTool: AnthropicToolDef;
+export declare const stateCasTool: AnthropicToolDef;
+export declare const stateDeleteTool: AnthropicToolDef;
+export declare const stateQueryTool: AnthropicToolDef;
+export declare const stateToolSchemas: AnthropicToolDef[];
+export declare const stateReadToolSchemas: AnthropicToolDef[];

package/dist/agent/state/state-store.d.ts

@@ -0,0 +1,38 @@
+export interface PutResult {
+    version: number;
+    created: boolean;
+}
+export interface CasResult {
+    matched: boolean;
+    newVersion?: number;
+}
+export interface DelResult {
+    deleted: boolean;
+}
+export interface QueryRow {
+    key: string;
+    value: unknown;
+    version: number;
+    updated_at: number;
+}
+export interface PutOpts {
+    ttl_ms?: number;
+    metadata?: unknown;
+}
+export declare class StateStore {
+    private db;
+    constructor(dbPath: string);
+    private enableWalMode;
+    private initSchema;
+    private runTtlGc;
+    get(namespace: string, key: string): QueryRow | null;
+    put(namespace: string, key: string, value: unknown, opts?: PutOpts, producer?: string): PutResult;
+    cas(namespace: string, key: string, expectedVersion: number, value: unknown, opts?: PutOpts, producer?: string): CasResult;
+    del(namespace: string, key: string): DelResult;
+    query(namespace: string, opts?: {
+        key_prefix?: string;
+        limit?: number;
+        offset?: number;
+    }): QueryRow[];
+    close(): void;
+}

package/dist/agent/state/state-tools.d.ts

@@ -0,0 +1,4 @@
+import type { ToolHandler } from '../tools/types.js';
+import { StateStore } from './state-store.js';
+export declare const STATE_TOOL_NAMES: readonly ["state_get", "state_put", "state_cas", "state_delete", "state_query"];
+export declare function createStateHandlers(store: StateStore, sessionId?: string): Map<string, ToolHandler>;

package/dist/agent/tools/handlers/clipboard.d.ts

@@ -0,0 +1,12 @@
+import type { ToolHandler } from '../types.js';
+export type ClipboardReadFn = () => string | null;
+export type ClipboardWriteFn = (text: string) => boolean;
+export interface ClipboardHandlerOpts {
+    readFn?: ClipboardReadFn;
+    writeFn?: ClipboardWriteFn;
+}
+export declare function readFromClipboard(platform?: NodeJS.Platform): string | null;
+export declare function createClipboardWriteHandler(opts?: ClipboardHandlerOpts): ToolHandler;
+export declare const clipboardWriteHandler: ToolHandler;
+export declare function createClipboardReadHandler(opts?: ClipboardHandlerOpts): ToolHandler;
+export declare const clipboardReadHandler: ToolHandler;

package/dist/agent/tools/handlers/index.d.ts

@@ -25,5 +25,6 @@ import { patchApplyHandler } from './patch-apply.js';
 import { testRunHandler } from './test-run.js';
 import { getFacetHandler } from './get-facet.js';
 import { jsonQueryHandler, createJsonQueryHandler } from './json-query.js';
+import { clipboardWriteHandler, clipboardReadHandler, createClipboardWriteHandler, createClipboardReadHandler } from './clipboard.js';
 export declare function createBuiltinHandlers(permissionMode?: string, cwd?: string): Map<string, ToolHandler>;
-export { bashHandler, readFileHandler, extractDocumentHandler, writeFileHandler, editFileHandler, globHandler, grepHandler, listDirectoryHandler, sendTelegramHandler, webScrapeHandler, webRequestHandler, createScheduleHandler, listSchedulesHandler, getScheduleHistoryHandler, cancelScheduleHandler, terminalFontSizeHandler, createWorktreeHandler, configGetHandler, configSetHandler, askQuestionHandler, waitForHandler, patchApplyHandler, browserOpenHandler, browserObserveHandler, browserActHandler, browserScreenshotHandler, browserCloseHandler, testRunHandler, getFacetHandler, jsonQueryHandler, createJsonQueryHandler, };
+export { bashHandler, readFileHandler, extractDocumentHandler, writeFileHandler, editFileHandler, globHandler, grepHandler, listDirectoryHandler, sendTelegramHandler, webScrapeHandler, webRequestHandler, createScheduleHandler, listSchedulesHandler, getScheduleHistoryHandler, cancelScheduleHandler, terminalFontSizeHandler, createWorktreeHandler, configGetHandler, configSetHandler, askQuestionHandler, waitForHandler, patchApplyHandler, browserOpenHandler, browserObserveHandler, browserActHandler, browserScreenshotHandler, browserCloseHandler, testRunHandler, getFacetHandler, jsonQueryHandler, createJsonQueryHandler, clipboardWriteHandler, clipboardReadHandler, createClipboardWriteHandler, createClipboardReadHandler, };

package/dist/agent/tools/schemas.d.ts

@@ -29,6 +29,8 @@ export declare const browserObserveTool: AnthropicToolDef;
 export declare const browserActTool: AnthropicToolDef;
 export declare const browserScreenshotTool: AnthropicToolDef;
 export declare const browserCloseTool: AnthropicToolDef;
+export declare const clipboardWriteTool: AnthropicToolDef;
+export declare const clipboardReadTool: AnthropicToolDef;
 export declare const builtinToolSchemas: readonly AnthropicToolDef[];
 export declare const BUILTIN_TOOL_NAMES: string[];
 export declare const ALL_TOOL_SCHEMAS: readonly AnthropicToolDef[];

package/dist/cli/commands/interactive/bootstrap-hooks.d.ts

@@ -1,5 +1,6 @@
 import type { HookRegistry } from '../../../agent/hooks.js';
 import type { MemoryStore } from '../../../agent/memory/index.js';
+import type { StateStore } from '../../../agent/state/state-store.js';
 import type { TraceSink } from '../../../agent/trace/index.js';
 import type { SessionStats } from '../../slash/types.js';
 import type { CompletionWriter } from './shared.js';
@@ -7,6 +8,7 @@ import type { PreviewDiffRef } from '../../../agent/tools/hooks/edit-preview-hoo
 export declare function createReplHookRegistry(a: {
     completionWriter: CompletionWriter;
     memoryStore: MemoryStore;
+    stateStore?: StateStore;
     stats: SessionStats;
     effectiveCwd: string | undefined;
     traceWriter: TraceSink | undefined;

package/dist/cli/commands/interactive/bootstrap-providers.d.ts

@@ -1,5 +1,6 @@
 import type { ModelProvider } from '../../../agent/provider.js';
 import type { MemoryStore } from '../../../agent/memory/index.js';
+import type { StateStore } from '../../../agent/state/state-store.js';
 import type { WorkspaceStore } from '../../../agent/workspace/workspace-store.js';
 import type { SubagentExecutor } from '../../../agent/tools/subagent-executor.js';
 import type { SkillExecutor } from '../../../agent/tools/skill-executor.js';
@@ -16,6 +17,7 @@ export declare function createReplProviders(a: {
     skillExecutor: SkillExecutor;
     composeExecutor: ComposeExecutor;
     memoryStore: MemoryStore;
+    stateStore?: StateStore;
     workspaceStore?: WorkspaceStore;
     mcpManager: McpManager | undefined;
     fastModeController: FastModeController;

package/dist/cli/commands/interactive/shared.d.ts

@@ -3,6 +3,7 @@ import type { HookRegistry } from '../../../agent/hooks.js';
 import type { PreviewDiffRef } from '../../../agent/tools/hooks/edit-preview-hook.js';
 import type { SessionRef } from '../../../agent/session-ref.js';
 import type { MemoryStore } from '../../../agent/memory/index.js';
+import type { StateStore } from '../../../agent/state/state-store.js';
 import type { AgentModelInput } from '../../../agent/types.js';
 import type { BackgroundAgentRegistry } from '../../../agent/background-registry.js';
 import type { BackgroundSummarizer } from '../../../agent/background-summarizer.js';
@@ -44,6 +45,7 @@ export interface CliOptions {
 export interface InteractiveCtx {
     session: SessionRef;
     memoryStore: MemoryStore;
+    stateStore?: StateStore;
     stats: SessionStats;
     statusLine: StatusLine;
     contextSampler: ContextSampler;

package/dist/cli/provider-parser.d.ts

@@ -4,6 +4,7 @@ export type ParseProviderOptions = {
     skillExecutor?: import('../agent/tools/skill-executor.js').SkillExecutor;
     composeExecutor?: import('../agent/tools/compose-executor.js').ComposeExecutor;
     memoryStore?: import('../agent/memory/index.js').MemoryStore;
+    stateStore?: import('../agent/state/state-store.js').StateStore;
     workspaceStore?: import('../agent/workspace/workspace-store.js').WorkspaceStore;
     mcpManager?: import('../agent/mcp/index.js').McpManager;
     model?: string;