agent-afk 5.27.0 → 5.27.2

package/dist/agent/providers/anthropic-direct/index.d.ts

@@ -64,6 +64,7 @@ export declare class AnthropicDirectProvider implements ModelProvider {
     close(): void;
     complete(args: ProviderCompleteArgs): Promise<string>;
     private ensureSharedRoots;
+    private readonly grantManager;
     addReadRoot(absPath: string, source?: 'slash' | 'tool', sessionId?: string): void;
     addWriteRoot(absPath: string, source?: 'slash' | 'tool', sessionId?: string): void;
     revokeRoot(absPath: string, source?: 'slash' | 'tool', sessionId?: string): void;
@@ -73,7 +74,6 @@ export declare class AnthropicDirectProvider implements ModelProvider {
         writeRoots: string[];
         allowAll: boolean;
     };
-    private appendProviderAuditLog;
     query(args: ProviderQueryArgs): ProviderQuery;
 }
 export declare const anthropicDirectProvider: ModelProvider;

package/dist/agent/providers/openai-compatible/index.d.ts

@@ -37,6 +37,7 @@ export declare class OpenAICompatibleProvider implements ModelProvider {
     query(args: ProviderQueryArgs): ProviderQuery;
     private buildDispatcher;
     private ensureSharedRoots;
+    private readonly grantManager;
     addReadRoot(absPath: string, source?: 'slash' | 'tool', sessionId?: string): void;
     addWriteRoot(absPath: string, source?: 'slash' | 'tool', sessionId?: string): void;
     revokeRoot(absPath: string, source?: 'slash' | 'tool', sessionId?: string): void;
@@ -46,7 +47,6 @@ export declare class OpenAICompatibleProvider implements ModelProvider {
         writeRoots: string[];
         allowAll: boolean;
     };
-    private appendProviderAuditLog;
     close(): void;
     complete(args: ProviderCompleteArgs): Promise<string>;
 }

package/dist/agent/tools/dispatcher.d.ts

@@ -8,6 +8,7 @@ import type { ComposeExecutor } from './compose-executor.js';
 import type { ToolHandler, ConcurrencyClassifier } from './types.js';
 import { type ToolPermissionConfig } from './permissions.js';
 import type { CanUseTool } from '../types/sdk-types.js';
+import { type GrantSnapshot } from './grant-manager.js';
 import type { TraceWriter } from '../trace/index.js';
 export declare function defaultConcurrencyClassifier(toolName: string): boolean;
 export declare const REPEAT_CIRCUIT_BREAKER_THRESHOLD = 8;
@@ -54,21 +55,16 @@ export declare class SessionToolDispatcher implements ToolDispatcher {
     private readonly traceWriter;
     private readonly readOnlyBash;
     private repeatBreaker;
+    private readonly grantManager;
     constructor(opts: SessionToolDispatcherOptions);
     private get handlerContext();
     private callHandlerContext;
     addReadRoot(absPath: string, source?: 'slash' | 'tool'): void;
     addWriteRoot(absPath: string, source?: 'slash' | 'tool'): void;
     revokeRoot(absPath: string, source?: 'slash' | 'tool'): void;
-    getGrants(): {
-        resolveBase: string | undefined;
-        readRoots: string[];
-        writeRoots: string[];
-        allowAll: boolean;
-    };
+    getGrants(): GrantSnapshot;
     setAllowAll(allow: boolean): void;
     setResolveBase(newCwd: string): void;
-    private appendAuditLog;
     get toolDefs(): readonly AnthropicToolDef[];
     private checkReadOnlyBash;
     private checkRepeatCircuitBreaker;

package/dist/agent/tools/grant-manager.d.ts

@@ -0,0 +1,25 @@
+export type GrantAuditAction = 'grant-read' | 'grant-write' | 'revoke';
+export type GrantSource = 'slash' | 'tool';
+export interface GrantSnapshot {
+    resolveBase: string | undefined;
+    readRoots: string[];
+    writeRoots: string[];
+    allowAll: boolean;
+}
+export interface PathGrantManagerHooks {
+    getReadRoots(): string[] | undefined;
+    getWriteRoots(): string[] | undefined;
+    ensureInitialized?(): void;
+    getProtectedRoot(): string | undefined;
+    getAllowAll(): boolean;
+    getDefaultSessionId?(): string | undefined;
+}
+export declare class PathGrantManager {
+    private readonly hooks;
+    constructor(hooks: PathGrantManagerHooks);
+    addReadRoot(absPath: string, source?: GrantSource, sessionId?: string): void;
+    addWriteRoot(absPath: string, source?: GrantSource, sessionId?: string): void;
+    revokeRoot(absPath: string, source?: GrantSource, sessionId?: string): void;
+    getGrants(): GrantSnapshot;
+    private appendAuditLog;
+}

package/dist/agent/tools/skill-executor/fork-child-config.d.ts

@@ -0,0 +1,7 @@
+import { SubagentManager } from '../../subagent.js';
+import type { AgentConfig } from '../../types/config-types.js';
+import type { SkillExecutorInternals } from './types.js';
+export declare function buildForkedChildConfig(internals: SkillExecutorInternals, baseConfig: AgentConfig, signal: AbortSignal, readOnly?: boolean, allowedTools?: string[]): {
+    childConfig: AgentConfig;
+    childManager: SubagentManager | undefined;
+};

package/dist/agent/tools/skill-executor/fork-dispatch.d.ts

@@ -0,0 +1,22 @@
+import { SubagentManager } from '../../subagent.js';
+import type { ToolCall, ToolResult } from '../types.js';
+import type { AgentConfig } from '../../types/config-types.js';
+import type { SkillExecutorInternals } from './types.js';
+export declare function executeForkedRegistrySkill(internals: SkillExecutorInternals, skill: {
+    name: string;
+    context?: 'inline' | 'fork' | 'load';
+    model?: string;
+    readOnly?: boolean;
+}, args: string | undefined, call: ToolCall): Promise<ToolResult>;
+export declare function executePluginSkill(internals: SkillExecutorInternals, skillName: string, body: string, pluginPath: string, args: string | undefined, call: ToolCall, readOnly?: boolean, allowedTools?: string[]): Promise<ToolResult>;
+export declare function runForkedSkillToResult(internals: SkillExecutorInternals, params: {
+    manager: SubagentManager;
+    childManager: SubagentManager | undefined;
+    childConfig: AgentConfig;
+    label: string;
+    idPrefix: string;
+    parentId: string;
+    args: string | undefined;
+    noOutputError: string;
+    errorPrefix: string;
+}): Promise<ToolResult>;

package/dist/agent/tools/skill-executor/load-mode.d.ts

@@ -0,0 +1,11 @@
+import type { ToolCall, ToolResult } from '../types.js';
+import type { SkillExecutorInternals } from './types.js';
+export declare function formatLoadedSkillResult(name: string, body: string, args: string | undefined): ToolResult;
+export declare function emitLoadTelemetry(internals: SkillExecutorInternals, name: string, contentChars: number, durationMs: number, model: string | undefined): void;
+export declare function executeLoadedRegistrySkill(internals: SkillExecutorInternals, skill: {
+    name: string;
+    model?: string;
+    loadBody?: string;
+}, args: string | undefined, call: ToolCall): ToolResult;
+export declare function executeLoadedPluginSkill(internals: SkillExecutorInternals, skillName: string, body: string, args: string | undefined, call: ToolCall): ToolResult;
+export declare function substituteSkillArgs(body: string, args: string | undefined): string;

package/dist/agent/tools/skill-executor/telemetry.d.ts

@@ -0,0 +1,10 @@
+import { type TraceOrigin, type TraceActor } from '../../session/session-identity.js';
+import type { SkillExecutorContext } from './types.js';
+export declare const GATE_SKILLS: Set<string>;
+export declare function isGateSkill(name: string): boolean;
+export declare const MAX_TELEMETRY_ERROR_CHARS = 240;
+export declare function truncateTelemetryString(s: string, max?: number): string;
+export declare function sessionIdentity(ctx: SkillExecutorContext): {
+    origin?: TraceOrigin;
+    actor?: TraceActor;
+};

package/dist/agent/tools/skill-executor/types.d.ts

@@ -0,0 +1,35 @@
+import type { AgentModelInput, IAgentSession } from '../../types.js';
+import type { ModelProvider } from '../../provider.js';
+import type { TraceWriter } from '../../trace/index.js';
+import type { BackgroundAgentRegistry } from '../../background-registry.js';
+import type { SdkPluginConfig } from '../../types/sdk-types.js';
+import type { ChildProviderFactoryArgs } from '../nesting.js';
+import type { Surface } from '../../awareness/types.js';
+import type { SkillExecutor } from '../skill-executor.js';
+export interface SkillExecutorContext {
+    parentSession: Pick<IAgentSession, 'sessionId' | 'getInputStreamRef' | 'abortSignal'> & Partial<Pick<IAgentSession, 'hookRegistry'>>;
+    defaultModel?: string;
+    surface?: Surface;
+    defaultSubagentModel?: AgentModelInput;
+    apiKey?: string;
+    resolveApiKeyForModel?: (model: string) => string | undefined;
+    baseUrl?: string;
+    openaiBaseUrl?: string;
+    pluginConfigs?: SdkPluginConfig[];
+    depth?: number;
+    maxDepth?: number;
+    childProviderFactory?: (args: ChildProviderFactoryArgs) => ModelProvider;
+    childSkillExecutorFactory?: (depth: number, maxDepth: number, signal: AbortSignal, inheritedCwd?: string) => SkillExecutor;
+    traceWriter?: TraceWriter;
+    backgroundRegistry?: BackgroundAgentRegistry;
+    cwd?: string;
+    agentRegistry?: import('../../agents/index.js').AgentRegistry;
+}
+export interface SkillInput {
+    name: string;
+    arguments?: string;
+}
+export interface SkillExecutorInternals {
+    readonly ctx: SkillExecutorContext;
+    readonly currentCwd: string | undefined;
+}

package/dist/agent/tools/skill-executor.d.ts

@@ -1,48 +1,15 @@
-import type { AgentModelInput, IAgentSession } from '../types.js';
-import type { ModelProvider } from '../provider.js';
 import type { ToolCall, ToolResult } from './types.js';
-import type { TraceWriter } from '../trace/index.js';
-import type { BackgroundAgentRegistry } from '../background-registry.js';
-import type { SdkPluginConfig } from '../types/sdk-types.js';
-import { type ChildProviderFactoryArgs } from './nesting.js';
-import type { Surface } from '../awareness/types.js';
-export interface SkillExecutorContext {
-    parentSession: Pick<IAgentSession, 'sessionId' | 'getInputStreamRef' | 'abortSignal'> & Partial<Pick<IAgentSession, 'hookRegistry'>>;
-    defaultModel?: string;
-    surface?: Surface;
-    defaultSubagentModel?: AgentModelInput;
-    apiKey?: string;
-    resolveApiKeyForModel?: (model: string) => string | undefined;
-    baseUrl?: string;
-    openaiBaseUrl?: string;
-    pluginConfigs?: SdkPluginConfig[];
-    depth?: number;
-    maxDepth?: number;
-    childProviderFactory?: (args: ChildProviderFactoryArgs) => ModelProvider;
-    childSkillExecutorFactory?: (depth: number, maxDepth: number, signal: AbortSignal, inheritedCwd?: string) => SkillExecutor;
-    traceWriter?: TraceWriter;
-    backgroundRegistry?: BackgroundAgentRegistry;
-    cwd?: string;
-    agentRegistry?: import('../agents/index.js').AgentRegistry;
-}
+import type { SkillExecutorContext } from './skill-executor/types.js';
+export type { SkillExecutorContext } from './skill-executor/types.js';
 export declare class SkillExecutor {
     private readonly ctx;
     private pluginBodies;
     private currentCwd;
     constructor(ctx: SkillExecutorContext);
     setCwd(cwd: string): void;
-    private sessionIdentity;
+    private internals;
     execute(call: ToolCall): Promise<ToolResult>;
     private executeRegistrySkill;
-    private buildForkedChildConfig;
-    private executeForkedRegistrySkill;
-    private formatLoadedSkillResult;
-    private emitLoadTelemetry;
-    private executeLoadedRegistrySkill;
-    private executeLoadedPluginSkill;
-    private substituteSkillArgs;
-    private executePluginSkill;
-    private runForkedSkillToResult;
     private getPluginSkillBody;
     private createDispatchSkillCallback;
 }

package/dist/cli/config/afk-md-tier.d.ts

@@ -0,0 +1,5 @@
+export declare function resetAfkMdCache(): void;
+export declare function loadAfkMd(): {
+    content: string;
+    path: string;
+} | null;

package/dist/cli/config/env-tier.d.ts

@@ -0,0 +1,6 @@
+import type { CliConfig } from './types.js';
+export declare function loadCredential(): string | undefined;
+export declare function normalizeOpenAIBaseUrl(raw: string): string;
+export declare function _resetOpenAIBaseUrlWarnCache(): void;
+export declare function loadEnvConfig(): Partial<CliConfig>;
+export declare function resetEnvConfigCache(): void;

package/dist/cli/config/json-tier.d.ts

@@ -0,0 +1,8 @@
+import { type ModelSlotBinding, type SlotName } from '../../agent/session/model-slots.js';
+import type { CliConfig } from './types.js';
+export declare function resetJsonConfigCache(): void;
+export declare function loadJsonConfig(): {
+    config: Partial<CliConfig>;
+    sourcePath: string | undefined;
+    modelsPartial: Partial<Record<SlotName, ModelSlotBinding>>;
+};

package/dist/cli/config/types.d.ts

@@ -0,0 +1,121 @@
+import type { ModelSlots } from '../../agent/session/model-slots.js';
+import type { AgentModelInput } from '../../agent/types.js';
+import type { PermissionMode } from '../../agent/types/sdk-types.js';
+import type { RawHooksConfig } from '../../agent/hooks/config-loader.js';
+import type { ImportFromConfig, ImportSourceBinary } from '../../config/import-sources.js';
+export interface AutoRoutingConfig {
+    interactive?: boolean;
+    chat?: boolean;
+    telegram?: boolean;
+    daemon?: boolean;
+}
+export interface CliConfig {
+    apiKey?: string;
+    baseUrl?: string;
+    model: AgentModelInput;
+    models?: ModelSlots;
+    maxTokens: number;
+    temperature: number;
+    openaiBaseUrl?: string;
+    systemPrompt?: string;
+    systemPromptSource?: string;
+    permissionMode?: PermissionMode;
+    autoRouting?: AutoRoutingConfig;
+    daemon?: {
+        task?: string;
+        taskId?: string;
+        worktreePrune?: {
+            enabled: boolean;
+            cron: string;
+            maxAgeDaysClean: number;
+            maxAgeDaysDirty: number;
+            scope: string;
+        };
+    };
+    telegram?: {
+        notify?: {
+            mode?: 'primary' | 'broadcast' | 'custom';
+            primaryChatId?: number;
+            targets?: number[];
+        };
+        verifyDone?: boolean;
+    };
+    interactive?: {
+        worktreeAutoname?: boolean;
+        worktreeBranchPrefix?: string;
+        worktreeBase?: string;
+        suggestGhost?: boolean;
+        thinkingUi?: 'summary' | 'live' | 'digest' | 'off';
+    };
+    updatePolicy: 'notify' | 'auto' | 'off';
+    autoResumeOnUsageLimit?: boolean;
+    bgSummaries?: boolean;
+    maxSummaryCallsPerSession?: number;
+    hooks?: RawHooksConfig;
+    enableShellHooks?: boolean;
+    importFrom?: ImportFromConfig;
+}
+export interface ModelSlotConfigEntry {
+    id?: string;
+    name?: string;
+    provider?: string;
+    baseUrl?: string;
+    apiKey?: string;
+}
+export interface ConfigFileSchema {
+    model?: string;
+    models?: {
+        small?: string | ModelSlotConfigEntry;
+        medium?: string | ModelSlotConfigEntry;
+        large?: string | ModelSlotConfigEntry;
+    };
+    maxTokens?: number;
+    temperature?: number;
+    systemPrompt?: string;
+    permissionMode?: string;
+    autoRouting?: {
+        interactive?: boolean;
+        chat?: boolean;
+        telegram?: boolean;
+        daemon?: boolean;
+    };
+    daemon?: {
+        task?: string;
+        taskId?: string;
+        worktreePrune?: {
+            enabled?: boolean;
+            cron?: string;
+            maxAgeDaysClean?: number;
+            maxAgeDaysDirty?: number;
+            scope?: string;
+        };
+    };
+    telegram?: {
+        notify?: {
+            mode?: 'primary' | 'broadcast' | 'custom';
+            primaryChatId?: number;
+            targets?: number[];
+        };
+        verifyDone?: boolean;
+    };
+    interactive?: {
+        worktreeAutoname?: boolean;
+        worktreeBranchPrefix?: string;
+        worktreeBase?: string;
+        suggestGhost?: boolean;
+        thinkingUi?: 'summary' | 'live' | 'digest' | 'off';
+    };
+    updatePolicy?: 'notify' | 'auto' | 'off';
+    autoResumeOnUsageLimit?: boolean;
+    bgSummaries?: boolean;
+    maxSummaryCallsPerSession?: number;
+    hooks?: RawHooksConfig;
+    enableShellHooks?: boolean;
+    importFrom?: Partial<Record<ImportSourceBinary, boolean | {
+        plugins?: boolean;
+        skills?: boolean;
+        mcp?: boolean;
+    }>>;
+}
+export declare const DEFAULT_CONFIG: Omit<CliConfig, 'apiKey'>;
+export declare const DEFAULT_CLI_PERMISSION_MODE: PermissionMode;

package/dist/cli/config.d.ts

@@ -1,68 +1,13 @@
 import { getModelId, isValidModel } from '../agent/session/model-resolution.js';
-import { type ModelSlots } from '../agent/session/model-slots.js';
 import { type BundledProviderName } from '../agent/providers/index.js';
-import type { AgentModelInput } from '../agent/types.js';
 import type { PermissionMode } from '../agent/types/sdk-types.js';
-import type { RawHooksConfig } from '../agent/hooks/config-loader.js';
-import { type ImportFromConfig, type ImportSourceBinary } from '../config/import-sources.js';
+import type { ImportFromConfig, ImportSourceBinary } from '../config/import-sources.js';
+import { type CliConfig } from './config/types.js';
 export type { ImportFromConfig, ImportSourceBinary };
 export { getModelId, isValidModel };
-export interface AutoRoutingConfig {
-    interactive?: boolean;
-    chat?: boolean;
-    telegram?: boolean;
-    daemon?: boolean;
-}
-export interface CliConfig {
-    apiKey?: string;
-    baseUrl?: string;
-    model: AgentModelInput;
-    models?: ModelSlots;
-    maxTokens: number;
-    temperature: number;
-    openaiBaseUrl?: string;
-    systemPrompt?: string;
-    systemPromptSource?: string;
-    permissionMode?: PermissionMode;
-    autoRouting?: AutoRoutingConfig;
-    daemon?: {
-        task?: string;
-        taskId?: string;
-        worktreePrune?: {
-            enabled: boolean;
-            cron: string;
-            maxAgeDaysClean: number;
-            maxAgeDaysDirty: number;
-            scope: string;
-        };
-    };
-    telegram?: {
-        notify?: {
-            mode?: 'primary' | 'broadcast' | 'custom';
-            primaryChatId?: number;
-            targets?: number[];
-        };
-        verifyDone?: boolean;
-    };
-    interactive?: {
-        worktreeAutoname?: boolean;
-        worktreeBranchPrefix?: string;
-        worktreeBase?: string;
-        suggestGhost?: boolean;
-        thinkingUi?: 'summary' | 'live' | 'digest' | 'off';
-    };
-    updatePolicy: 'notify' | 'auto' | 'off';
-    autoResumeOnUsageLimit?: boolean;
-    bgSummaries?: boolean;
-    maxSummaryCallsPerSession?: number;
-    hooks?: RawHooksConfig;
-    enableShellHooks?: boolean;
-    importFrom?: ImportFromConfig;
-}
-export declare const DEFAULT_CLI_PERMISSION_MODE: PermissionMode;
-export declare function loadCredential(): string | undefined;
-export declare function normalizeOpenAIBaseUrl(raw: string): string;
-export declare function _resetOpenAIBaseUrlWarnCache(): void;
+export type { AutoRoutingConfig, CliConfig } from './config/types.js';
+export { DEFAULT_CLI_PERMISSION_MODE } from './config/types.js';
+export { loadCredential, normalizeOpenAIBaseUrl, _resetOpenAIBaseUrlWarnCache, } from './config/env-tier.js';
 export declare function _resetConfigCache(): void;
 export declare function loadTelegramConfig(): NonNullable<CliConfig['telegram']>;
 export declare function resolveCliPermissionMode(): PermissionMode;