agent-afk 5.343.0 → 5.344.0

package/dist/agent/artifact-registry/store.d.ts

@@ -1,8 +1,8 @@
 import type { ArtifactListFilter, ArtifactPutOptions, ArtifactRecord } from './types.js';
 export declare function artifactPut(opts: ArtifactPutOptions, _storeDir?: string, _indexPath?: string): Promise<ArtifactRecord>;
-export declare function artifactGet(id: string, _indexPath?: string): ArtifactRecord | undefined;
-export declare function artifactList(filter?: ArtifactListFilter, _indexPath?: string): ArtifactRecord[];
+export declare function artifactGet(id: string, _indexPath?: string, maxIndexBytes?: number): ArtifactRecord | undefined;
+export declare function artifactList(filter?: ArtifactListFilter, _indexPath?: string, maxIndexBytes?: number): ArtifactRecord[];
 export declare function artifactRead(id: string, _indexPath?: string): Promise<Buffer>;
-export declare function artifactCount(_indexPath?: string): number;
+export declare function artifactCount(_indexPath?: string, maxIndexBytes?: number): number;
 export declare function compactIndex(_indexPath?: string): Promise<void>;
 export declare function listStoreBlobs(_storeDir?: string): string[];

package/dist/agent/daemon-instance.lock.d.ts

@@ -0,0 +1,6 @@
+export declare class DaemonAlreadyRunningError extends Error {
+    readonly ownerPid: number | null;
+    constructor(lockPath: string, ownerPid: number | null);
+}
+export declare function getDaemonLockPath(instanceId?: string): string;
+export declare function acquireDaemonLock(lockPath?: string, platform?: string): Promise<() => Promise<void>>;

package/dist/agent/daemon.oauth-timer.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_OAUTH_REFRESH_INTERVAL_MS: number;
+export declare function startOAuthRefreshTimer(refresher: (() => Promise<unknown>) | undefined, intervalMs?: number): ReturnType<typeof setInterval> | undefined;

package/dist/agent/effect-ledger/remote-idempotency.d.ts

@@ -0,0 +1,5 @@
+import type { EffectRecord } from './types.js';
+export declare function remoteIdempotencyInput(toolName: string, input: unknown, prior: EffectRecord | null): {
+    updatedInput?: Record<string, unknown>;
+    remoteIdempotencyKey?: string;
+};

package/dist/agent/effect-ledger/store.d.ts

@@ -1,5 +1,5 @@
 import { type InputBudget } from '../outcomes/outcomes-input.js';
-import type { EffectRecord, EffectQuery, PendingEffectInput, ExecuteEffectInput } from './types.js';
+import type { EffectRecord, EffectQuery, PendingEffectInput, ExecuteEffectInput, EffectRemoteRead } from './types.js';
 export declare class EffectStore {
     private readonly path;
     private cachedRecords;
@@ -8,6 +8,7 @@ export declare class EffectStore {
     private invalidateCache;
     writePending(input: PendingEffectInput): EffectRecord;
     updateStatus(input: ExecuteEffectInput): Promise<EffectRecord>;
+    reconcile(id: string, readRemote: EffectRemoteRead): Promise<EffectRecord>;
     acknowledgeRetry(id: string): Promise<EffectRecord>;
     findByIdempotencyKey(key: string, sessionId?: string): Promise<EffectRecord | null>;
     query(filters?: EffectQuery): Promise<EffectRecord[]>;

package/dist/agent/effect-ledger/types.d.ts

@@ -10,6 +10,7 @@ export interface EffectRecord {
     taskId?: string;
     timestamp: number;
     retryOf?: string;
+    remoteIdempotencyKey?: string;
     retryAcknowledgedAt?: number;
     result?: unknown;
     reconciledAt?: number;
@@ -27,7 +28,12 @@ export interface PendingEffectInput {
     sessionId?: string;
     taskId?: string;
     retryOf?: string;
+    remoteIdempotencyKey?: string;
 }
+export type EffectRemoteRead = (record: Readonly<EffectRecord>) => Promise<{
+    matched: boolean;
+    evidence: unknown;
+}>;
 export interface ExecuteEffectInput {
     id: string;
     status: Exclude<EffectStatus, 'pending'>;

package/dist/agent/hooks.d.ts

@@ -6,6 +6,7 @@ export interface HookDecision {
     continue?: boolean;
     decision?: 'block' | 'approve';
     reason?: string;
+    ruleId?: string;
     riskCategory?: import('./risk-classifier.js').RiskCategory;
     injectContext?: string;
     updatedInput?: Record<string, unknown>;

package/dist/agent/lsp/repo-map.d.ts

@@ -0,0 +1,11 @@
+import { type LspServerPool } from './pool.js';
+export declare const MAX_SYMBOLS = 200;
+export declare const MAX_LINES = 80;
+export interface RepoMapOptions {
+    readonly rootDir?: string;
+    readonly timeoutMs?: number;
+    readonly pool?: LspServerPool;
+    readonly serverCmd?: readonly string[];
+    readonly signal?: AbortSignal;
+}
+export declare function buildRepoMap(opts?: RepoMapOptions): Promise<string>;

package/dist/agent/tools/compose-executor.node-build.d.ts

@@ -6,6 +6,10 @@ export type ComposeNodeBuildResult = SubagentDAGNode | {
     attachmentError: true;
     nodeId: string;
     error: Error;
+} | {
+    usageBlocked: true;
+    nodeId: string;
+    notice: string;
 };
 export interface BuildComposeDagNodeArgs {
     node: ComposeNodeInput;

package/dist/agent/tools/compose-node-results.d.ts

@@ -3,6 +3,10 @@ type BuildResult = SubagentDAGNode | {
     attachmentError: true;
     nodeId: string;
     error: Error;
+} | {
+    usageBlocked: true;
+    nodeId: string;
+    notice: string;
 };
 export declare function splitComposeNodeResults(results: BuildResult[]): {
     dagNodes: SubagentDAGNode[];
@@ -10,5 +14,9 @@ export declare function splitComposeNodeResults(results: BuildResult[]): {
         id: string;
         error: Error;
     }>;
+    usageBlocks: Array<{
+        id: string;
+        notice: string;
+    }>;
 };
 export {};

package/dist/agent/tools/handlers/artifact.d.ts

@@ -0,0 +1,8 @@
+import type { ToolHandler } from '../types.js';
+interface ArtifactHandlerOptions {
+    cwd?: string;
+    storeDir?: string;
+    indexPath?: string;
+}
+export declare function createArtifactHandlers(opts?: ArtifactHandlerOptions): Map<string, ToolHandler>;
+export {};

package/dist/agent/tools/handlers/bash-sandbox.d.ts

@@ -0,0 +1,12 @@
+export type SandboxPolicy = 'workspace-write' | 'read-only' | 'off';
+export interface SandboxedCommand {
+    readonly shell: string;
+    readonly args: readonly string[];
+    readonly command: string;
+    readonly sandboxed: boolean;
+}
+export declare function parseSandboxPolicy(): SandboxPolicy | undefined;
+export declare function _resetBwrapCacheForTests(): void;
+export declare function _forceBwrapUnavailableForTests(): void;
+export declare function buildSandboxedCommand(command: string, policy: SandboxPolicy, cwd: string | undefined, childTemp?: string): SandboxedCommand;
+export declare function sandboxDescription(policy: SandboxPolicy): string;

package/dist/agent/tools/handlers/bash-sandbox.paths.d.ts

@@ -0,0 +1,5 @@
+export declare function canonicalSandboxPath(input: string): string;
+export declare function sandboxWriteFloor(): readonly string[];
+export declare function sandboxFloorAncestors(floor: readonly string[]): readonly string[];
+export declare function assertDisjointSandboxGrants(grants: readonly string[], floor: readonly string[]): void;
+export declare function sandboxSchemeString(value: string): string;

package/dist/agent/tools/handlers/worktree-managed.d.ts

@@ -5,7 +5,7 @@ export interface RepoContext {
     repoRoot: string;
     afkWorktreesRoot: string;
 }
-export declare function resolveRepoContext(execFile: ExecFileFn, cwd: string): Promise<RepoContext>;
+export declare function resolveRepoContext(execFile: ExecFileFn, cwd: string, explicitRepo?: string): Promise<RepoContext>;
 export declare function sanitizeSlug(name: string): string;
 export declare function detectRemoteDefaultRef(execFile: ExecFileFn, repoRoot: string): Promise<string | undefined>;
 export declare function resolveAnchorBaseRef(execFile: ExecFileFn, anchor: string): Promise<string>;

package/dist/agent/tools/handlers/worktree.d.ts

@@ -4,4 +4,4 @@ export interface WorktreeHandlerDeps {
     execFile?: ExecFileFn;
     generateSuffix?: () => string;
 }
-export declare function createWorktreeHandler(cwd?: string, deps?: WorktreeHandlerDeps): ToolHandler;
+export declare function createWorktreeHandler(cwdFallback?: string, deps?: WorktreeHandlerDeps): ToolHandler;

package/dist/agent/tools/handlers/write-denylist.d.ts

@@ -1,4 +1,5 @@
 export declare const BUILTIN_WRITE_DENYLIST: readonly string[];
+export declare function getUnresolvedWriteDenylist(): readonly string[];
 export declare function getWriteDenylist(): readonly string[];
 export declare function _resetWriteDenylistCacheForTests(): void;
 export declare function safeRealpath(p: string): string;

package/dist/agent/tools/schemas.artifact.d.ts

@@ -0,0 +1,5 @@
+import type { AnthropicToolDef } from './types.js';
+export declare const artifactGetTool: AnthropicToolDef;
+export declare const artifactListTool: AnthropicToolDef;
+export declare const artifactReadTool: AnthropicToolDef;
+export declare const artifactToolSchemas: readonly [AnthropicToolDef, AnthropicToolDef, AnthropicToolDef];

package/dist/agent/trace/events.d.ts

@@ -137,6 +137,7 @@ export declare const HookDecisionPayloadSchema: z.ZodObject<{
         "outbound-message": "outbound-message";
         "release-boundary": "release-boundary";
     }>>;
+    ruleId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const HookSummaryPayloadSchema: z.ZodObject<{
     scope: z.ZodLiteral<"root-session-including-subagents">;
@@ -415,6 +416,7 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
             "outbound-message": "outbound-message";
             "release-boundary": "release-boundary";
         }>>;
+        ruleId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
     kind: z.ZodLiteral<"hook_summary">;
@@ -874,6 +876,7 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             "outbound-message": "outbound-message";
             "release-boundary": "release-boundary";
         }>>;
+        ruleId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
     ts: z.ZodString;

package/dist/agent/trace/receipt.types.d.ts

@@ -19,6 +19,7 @@ export interface RunReceipt {
     witnessLabel: string;
     tracePath: string;
     sessionId?: string;
+    cwd?: string;
     endReason?: string;
     status: 'succeeded' | 'failed' | 'cancelled' | 'unknown';
     closureReason?: ClosureReason;
@@ -72,6 +73,7 @@ export interface ReceiptMeta {
     tracePath: string;
     witnessLabel: string;
     sessionId?: string;
+    cwd?: string;
     endReason?: string;
     now?: Date;
     journalSummary?: JournalSummary;

package/dist/agent/trace/types.d.ts

@@ -42,6 +42,7 @@ export interface HookDecisionPayload {
     durationMs?: number;
     approvalOutcome?: AfkApprovalOutcome;
     riskCategory?: import('../risk-classifier.js').RiskCategory;
+    ruleId?: string;
 }
 export interface HookSummaryPayload {
     scope: 'root-session-including-subagents';

package/dist/cli/errors/classifier.d.ts

@@ -1,4 +1,4 @@
-type ErrorKind = 'auth' | 'rate_limit' | 'usage_limit' | 'overloaded' | 'budget_exceeded' | 'unsupported_config' | 'hook_blocked' | 'timeout' | 'network' | 'not_git_repo' | 'unknown';
+type ErrorKind = 'auth' | 'rate_limit' | 'usage_limit' | 'overloaded' | 'budget_exceeded' | 'unsupported_config' | 'hook_blocked' | 'timeout' | 'network' | 'not_git_repo' | 'daemon_already_running' | 'unknown';
 export interface ClassifiedError {
     kind: ErrorKind;
     userMessage: string;