agent-afk 5.317.1 → 5.318.1

package/dist/agent/shadow-git-detect.d.ts

@@ -0,0 +1,12 @@
+import type { HookContext, HookDecision } from './hooks.js';
+export declare const SHADOW_GIT_REASON_PREFIX = "shadow-git observe-only";
+export type ShadowGitHit = {
+    kind: 'no-verify';
+    pattern: string;
+} | {
+    kind: 'identity';
+    pattern: string;
+    email: string;
+};
+export declare function detectShadowGit(command: string): ShadowGitHit[];
+export declare function createShadowGitDetect(): (context: HookContext) => HookDecision;

package/dist/agent/tools/dispatcher.hook-block-repeat-gate.d.ts

@@ -0,0 +1,4 @@
+import type { PreDispatchGateDeps, PreDispatchGateMutableState } from './dispatcher.pre-dispatch-gates.js';
+import type { ToolCall, ToolResult } from '../providers/anthropic-direct/types.js';
+export declare function resetHookBlockRepeatBreaker(state: PreDispatchGateMutableState): void;
+export declare function applyHookBlockRepeatGate(call: ToolCall, blockResult: ToolResult, deps: PreDispatchGateDeps, rawReason?: string): ToolResult;

package/dist/agent/tools/dispatcher.pre-dispatch-gates.d.ts

@@ -6,6 +6,7 @@ import type { ToolCall, ToolResult } from '../providers/anthropic-direct/types.j
 import type { CanUseTool } from '../types/sdk-types.js';
 import type { TraceSink } from '../trace/index.js';
 import type { GrantManager } from './grant-manager.js';
+import type { HookBlockRepeatState } from './hook-block-repeat-breaker.js';
 export interface PreDispatchGateMutableState {
     repeatBreaker: {
         fingerprint: string;
@@ -16,6 +17,7 @@ export interface PreDispatchGateMutableState {
         count: number;
         deniedPaths: string[];
     } | null;
+    hookBlockRepeat: HookBlockRepeatState | null;
 }
 export interface PreDispatchGateDeps {
     state: PreDispatchGateMutableState;
@@ -37,6 +39,8 @@ export interface PreDispatchGateDeps {
 }
 export declare function emitPreToolUseBlock(blockedTool: string, reason: string, deps: PreDispatchGateDeps): Promise<void>;
 export declare function resetDenialBreaker(state: PreDispatchGateMutableState): void;
+export { applyHookBlockRepeatGate as applyHookBlockRepeat } from './dispatcher.hook-block-repeat-gate.js';
+export declare function resetProgressBreakers(state: PreDispatchGateMutableState): void;
 export declare function accountDenialBreakerPostGate(call: ToolCall, blockReason: string | undefined, blockResult: ToolResult, deps: PreDispatchGateDeps): ToolResult;
 export declare function replayObserveSuspectedLoopPostGate(call: ToolCall, deps: PreDispatchGateDeps): void;
 export interface RunPreDispatchGatesOpts {

package/dist/agent/tools/hook-block-repeat-breaker.d.ts

@@ -0,0 +1,16 @@
+import type { ToolFailureClass } from '../trace/types.js';
+export declare const HOOK_BLOCK_REPEAT_THRESHOLD = 3;
+export declare const HOOK_BLOCK_REPEAT_FAILURE_CLASS: ToolFailureClass;
+export declare function gateKey(toolName: string): string;
+export interface HookBlockRepeatState {
+    key: string;
+    count: number;
+    escalated: boolean;
+}
+export declare function recordHookBlock(state: HookBlockRepeatState | null, toolName: string): {
+    state: HookBlockRepeatState;
+    count: number;
+};
+export declare function resetHookBlockRepeat(): null;
+export declare function buildHookBlockRepeatMessage(toolName: string, count: number): string;
+export declare function buildHookBlockRepeatEscalation(toolName: string, count: number): string;

package/dist/agent/trace/block-evasion-analyzer.d.ts

@@ -0,0 +1,48 @@
+import type { TraceEvent } from './types.js';
+export type EffectClass = 'write' | 'execute' | 'git' | 'web' | 'other';
+export declare function effectClassOf(toolName: string): EffectClass;
+export interface BlockLedgerKey {
+    week: string;
+    surface: string;
+    blockedTool: string;
+    reason: string;
+}
+export interface BlockLedgerRow extends BlockLedgerKey {
+    count: number;
+}
+export declare function buildBlockLedger(_sessionId: string, events: TraceEvent[], surface: string): BlockLedgerRow[];
+export interface EvasionCandidate {
+    sessionId: string;
+    blockSeq: number;
+    blockTs: string;
+    blockedTool: string;
+    reason: string;
+    effectClass: EffectClass;
+    evasionSeq: number;
+    differentTool: string;
+    toolCallDistance: number;
+    targetMatchUnavailable: true;
+}
+export declare function detectEvasions(sessionId: string, events: TraceEvent[], windowSize?: number): EvasionCandidate[];
+export interface LostWorkCandidate {
+    sessionId: string;
+    blockSeq: number;
+    blockTs: string;
+    blockedTool: string;
+    reason: string;
+    effectClass: EffectClass;
+    closureReason: string;
+    targetMatchUnavailable: true;
+}
+export declare function detectLostWork(sessionId: string, events: TraceEvent[]): LostWorkCandidate[];
+export interface BlockEvasionReport {
+    sessionId: string;
+    surface: string;
+    blockLedger: BlockLedgerRow[];
+    evasions: EvasionCandidate[];
+    lostWork: LostWorkCandidate[];
+}
+export declare function analyzeBlockEvasion(sessionId: string, events: TraceEvent[], opts?: {
+    evasionWindow?: number;
+}): BlockEvasionReport;
+export declare function formatBlockEvasionReport(report: BlockEvasionReport): string;

package/dist/agent/trace/events.d.ts

@@ -35,6 +35,7 @@ export declare const ToolCallCompletedPayloadSchema: z.ZodObject<{
         "denial-breaker": "denial-breaker";
         "repeat-failure": "repeat-failure";
         "no-such-target": "no-such-target";
+        "hook-block-repeat": "hook-block-repeat";
     }>>;
     batchIndex: z.ZodOptional<z.ZodNumber>;
     batchSize: z.ZodOptional<z.ZodNumber>;
@@ -71,6 +72,7 @@ export declare const ToolCallPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         "denial-breaker": "denial-breaker";
         "repeat-failure": "repeat-failure";
         "no-such-target": "no-such-target";
+        "hook-block-repeat": "hook-block-repeat";
     }>>;
     batchIndex: z.ZodOptional<z.ZodNumber>;
     batchSize: z.ZodOptional<z.ZodNumber>;
@@ -305,6 +307,7 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
             "denial-breaker": "denial-breaker";
             "repeat-failure": "repeat-failure";
             "no-such-target": "no-such-target";
+            "hook-block-repeat": "hook-block-repeat";
         }>>;
         batchIndex: z.ZodOptional<z.ZodNumber>;
         batchSize: z.ZodOptional<z.ZodNumber>;
@@ -387,6 +390,7 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
             "denial-breaker": "denial-breaker";
             "repeat-failure": "repeat-failure";
             "no-such-target": "no-such-target";
+            "hook-block-repeat": "hook-block-repeat";
         }>>;
     }, z.core.$strip>, z.ZodObject<{
         transition: z.ZodLiteral<"cancelled">;
@@ -652,6 +656,7 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
             background_process_settled: "background_process_settled";
             compose_recovery_decision: "compose_recovery_decision";
             compose_leaf_tools_stripped: "compose_leaf_tools_stripped";
+            hook_block_repeat_tripped: "hook_block_repeat_tripped";
         }>;
         durationMs: z.ZodOptional<z.ZodNumber>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
@@ -706,6 +711,7 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             "denial-breaker": "denial-breaker";
             "repeat-failure": "repeat-failure";
             "no-such-target": "no-such-target";
+            "hook-block-repeat": "hook-block-repeat";
         }>>;
         batchIndex: z.ZodOptional<z.ZodNumber>;
         batchSize: z.ZodOptional<z.ZodNumber>;
@@ -794,6 +800,7 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             "denial-breaker": "denial-breaker";
             "repeat-failure": "repeat-failure";
             "no-such-target": "no-such-target";
+            "hook-block-repeat": "hook-block-repeat";
         }>>;
     }, z.core.$strip>, z.ZodObject<{
         transition: z.ZodLiteral<"cancelled">;
@@ -1083,6 +1090,7 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             background_process_settled: "background_process_settled";
             compose_recovery_decision: "compose_recovery_decision";
             compose_leaf_tools_stripped: "compose_leaf_tools_stripped";
+            hook_block_repeat_tripped: "hook_block_repeat_tripped";
         }>;
         durationMs: z.ZodOptional<z.ZodNumber>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;

package/dist/agent/trace/events.session-phase.d.ts

@@ -48,6 +48,7 @@ export declare const SessionPhaseNameSchema: z.ZodEnum<{
     background_process_settled: "background_process_settled";
     compose_recovery_decision: "compose_recovery_decision";
     compose_leaf_tools_stripped: "compose_leaf_tools_stripped";
+    hook_block_repeat_tripped: "hook_block_repeat_tripped";
 }>;
 export declare const SessionPhasePayloadSchema: z.ZodObject<{
     phase: z.ZodEnum<{
@@ -99,6 +100,7 @@ export declare const SessionPhasePayloadSchema: z.ZodObject<{
         background_process_settled: "background_process_settled";
         compose_recovery_decision: "compose_recovery_decision";
         compose_leaf_tools_stripped: "compose_leaf_tools_stripped";
+        hook_block_repeat_tripped: "hook_block_repeat_tripped";
     }>;
     durationMs: z.ZodOptional<z.ZodNumber>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;

package/dist/agent/trace/events.subagent-lifecycle.d.ts

@@ -10,6 +10,7 @@ export declare const ToolFailureClassSchema: z.ZodEnum<{
     "denial-breaker": "denial-breaker";
     "repeat-failure": "repeat-failure";
     "no-such-target": "no-such-target";
+    "hook-block-repeat": "hook-block-repeat";
 }>;
 export declare const SubagentStartedPayloadSchema: z.ZodObject<{
     transition: z.ZodLiteral<"started">;
@@ -49,6 +50,7 @@ export declare const SubagentFailedPayloadSchema: z.ZodObject<{
         "denial-breaker": "denial-breaker";
         "repeat-failure": "repeat-failure";
         "no-such-target": "no-such-target";
+        "hook-block-repeat": "hook-block-repeat";
     }>>;
 }, z.core.$strip>;
 export declare const SubagentCancelledPayloadSchema: z.ZodObject<{
@@ -96,6 +98,7 @@ export declare const SubagentLifecyclePayloadSchema: z.ZodDiscriminatedUnion<[z.
         "denial-breaker": "denial-breaker";
         "repeat-failure": "repeat-failure";
         "no-such-target": "no-such-target";
+        "hook-block-repeat": "hook-block-repeat";
     }>>;
 }, z.core.$strip>, z.ZodObject<{
     transition: z.ZodLiteral<"cancelled">;

package/dist/agent/trace/types.d.ts

@@ -8,7 +8,7 @@ export interface ToolCallStartedPayload {
     resourceFingerprint?: string;
     subagentId?: string;
 }
-export declare const TOOL_FAILURE_CLASSES: readonly ["policy-refusal", "timeout", "budget", "permission-denied", "hook-block", "abort", "elicitation-declined", "denial-breaker", "repeat-failure", "no-such-target"];
+export declare const TOOL_FAILURE_CLASSES: readonly ["policy-refusal", "timeout", "budget", "permission-denied", "hook-block", "abort", "elicitation-declined", "denial-breaker", "repeat-failure", "no-such-target", "hook-block-repeat"];
 export type ToolFailureClass = (typeof TOOL_FAILURE_CLASSES)[number];
 export declare const BENIGN_FAILURE_CLASSES: ReadonlySet<ToolFailureClass>;
 export interface ToolCallCompletedPayload {

package/dist/agent/trace/types.session-phase.d.ts

@@ -1,4 +1,4 @@
-export type SessionPhaseName = 'bootstrap_start' | 'bootstrap_done' | 'session_init_start' | 'session_init_done' | 'mcp_connect_start' | 'mcp_connect_done' | 'mcp_server_start' | 'mcp_server_done' | 'loop_start' | 'loop_end' | 'model_ttfb' | 'context_pressure_wind_down' | 'catalog_model_upgrade' | 'interrupt_halt' | 'rate_limit' | 'ttfb_timeout' | 'usage_limit_pause' | 'usage_limit_resume' | 'overload_pause' | 'overload_resume' | 'idle_watchdog_fired' | 'pause_extension_granted' | 'suspected_loop' | 'compaction_disabled' | 'boot_warning' | 'workspace_subscribed' | 'workspace_delivery' | 'gate_shape' | 'session_id_assigned' | 'many_image_degraded' | 'stream_accepted_after_drop' | 'connection_retry' | 'connection_retry_exhausted' | 'connection_failure' | 'connection_recovered' | 'connection_budget_exhausted' | 'usage_notice' | 'tool_degraded' | 'strategy_nudge_fired' | 'stop_inject_dropped' | 'stop_hook_continuation' | 'stop_hook_cap_reached' | 'orphan_repair' | 'thinking_block_dropped' | 'background_process_started' | 'background_process_settled' | 'compose_recovery_decision' | 'compose_leaf_tools_stripped';
+export type SessionPhaseName = 'bootstrap_start' | 'bootstrap_done' | 'session_init_start' | 'session_init_done' | 'mcp_connect_start' | 'mcp_connect_done' | 'mcp_server_start' | 'mcp_server_done' | 'loop_start' | 'loop_end' | 'model_ttfb' | 'context_pressure_wind_down' | 'catalog_model_upgrade' | 'interrupt_halt' | 'rate_limit' | 'ttfb_timeout' | 'usage_limit_pause' | 'usage_limit_resume' | 'overload_pause' | 'overload_resume' | 'idle_watchdog_fired' | 'pause_extension_granted' | 'suspected_loop' | 'compaction_disabled' | 'boot_warning' | 'workspace_subscribed' | 'workspace_delivery' | 'gate_shape' | 'session_id_assigned' | 'many_image_degraded' | 'stream_accepted_after_drop' | 'connection_retry' | 'connection_retry_exhausted' | 'connection_failure' | 'connection_recovered' | 'connection_budget_exhausted' | 'usage_notice' | 'tool_degraded' | 'strategy_nudge_fired' | 'stop_inject_dropped' | 'stop_hook_continuation' | 'stop_hook_cap_reached' | 'orphan_repair' | 'thinking_block_dropped' | 'background_process_started' | 'background_process_settled' | 'compose_recovery_decision' | 'compose_leaf_tools_stripped' | 'hook_block_repeat_tripped';
 export interface SessionPhasePayload {
     phase: SessionPhaseName;
     durationMs?: number;

package/dist/browser/playwright/egress-proxy.d.ts

@@ -10,6 +10,7 @@ export interface EgressProxyDeps {
     }[]>;
     isBlocked?: (ip: string, port: number) => boolean;
     connectTimeoutMs?: number;
+    responseInactivityMs?: number;
     drainTimeoutMs?: number;
 }
 export declare function targetKey(host: string, port: number | string): string;
@@ -23,6 +24,7 @@ export declare class EgressProxy {
     private readonly lookupFn;
     private readonly isBlocked;
     private readonly connectTimeoutMs;
+    private readonly responseInactivityMs;
     private readonly drainTimeoutMs;
     constructor(deps?: EgressProxyDeps);
     listen(): Promise<number>;
@@ -32,8 +34,8 @@ export declare class EgressProxy {
     private lookupGuarded;
     private record;
     private track;
-    private dial;
     private openUpstream;
+    private raceAddresses;
     private onForward;
     private relayResponse;
     private onTunnel;

package/dist/browser/playwright/egress-proxy.race.d.ts

@@ -0,0 +1,8 @@
+import net from 'node:net';
+export interface RaceAddressesDeps {
+    port: number;
+    connectTimeoutMs: number;
+    track: (s: net.Socket) => void;
+    gone: () => boolean;
+}
+export declare function raceAddresses(addresses: string[], deps: RaceAddressesDeps): Promise<net.Socket>;