agent-afk 5.42.1 → 5.43.1

package/dist/agent/providers/openai-compatible/query/dispatch-append.d.ts

@@ -1,6 +1,7 @@
 import type { TraceWriter } from '../../../trace/index.js';
 import type { ProviderEvent } from '../../../provider.js';
 import type { ToolDispatcher } from '../../anthropic-direct/tool-dispatcher.js';
+import type { ToolResult } from '../../anthropic-direct/types.js';
 import type { OpenAIMessage } from '../messages.js';
 import type { StreamState } from '../translate.js';
 export interface DispatchAndAppendInput {
@@ -12,4 +13,4 @@ export interface DispatchAndAppendInput {
     priorTurns: OpenAIMessage[];
     sessionId: string;
 }
-export declare function dispatchAndAppendToolCalls({ state, signal, vision, toolDispatcher, traceWriter, priorTurns, sessionId, }: DispatchAndAppendInput): AsyncGenerator<ProviderEvent>;
+export declare function dispatchAndAppendToolCalls({ state, signal, vision, toolDispatcher, traceWriter, priorTurns, sessionId, }: DispatchAndAppendInput): AsyncGenerator<ProviderEvent, ToolResult | undefined>;

package/dist/agent/tools/denial-circuit-breaker.d.ts

@@ -0,0 +1,9 @@
+import type { ToolCall } from '../providers/anthropic-direct/types.js';
+import type { ToolFailureClass } from '../trace/types.js';
+export declare const DENIAL_CIRCUIT_BREAKER_THRESHOLD = 5;
+export declare const DENIAL_BREAKER_FAILURE_CLASS: ToolFailureClass;
+export declare const READ_PATH_TOOLS: ReadonlySet<string>;
+export declare const SUBAGENT_PATH_DENIAL_REASON_PREFIX = "Sub-agent path access denied:";
+export declare function isSubagentContainmentDenial(reason: string | undefined): boolean;
+export declare function extractDeniedReadPath(call: ToolCall): string;
+export declare function buildDenialBreakerMessage(deniedPaths: readonly string[], count: number): string;

package/dist/agent/tools/dispatcher.d.ts

@@ -58,6 +58,7 @@ export declare class SessionToolDispatcher implements ToolDispatcher {
     private readonly traceWriter;
     private readonly readOnlyBash;
     private repeatBreaker;
+    private denialBreaker;
     private readonly grantManager;
     constructor(opts: SessionToolDispatcherOptions);
     private get handlerContext();
@@ -71,6 +72,8 @@ export declare class SessionToolDispatcher implements ToolDispatcher {
     get toolDefs(): readonly AnthropicToolDef[];
     private checkReadOnlyBash;
     private checkRepeatCircuitBreaker;
+    private recordForkReadDenial;
+    private resetDenialBreaker;
     private runCanUseTool;
     execute(call: ToolCall): Promise<ToolResult>;
     executeBatch(calls: ToolCall[]): Promise<ToolResult[]>;

package/dist/agent/trace/events.d.ts

@@ -13,6 +13,7 @@ export declare const ToolFailureClassSchema: z.ZodEnum<{
     "permission-denied": "permission-denied";
     "hook-block": "hook-block";
     "elicitation-declined": "elicitation-declined";
+    "denial-breaker": "denial-breaker";
 }>;
 export declare const ToolCallCompletedPayloadSchema: z.ZodObject<{
     phase: z.ZodLiteral<"completed">;
@@ -30,6 +31,7 @@ export declare const ToolCallCompletedPayloadSchema: z.ZodObject<{
         "permission-denied": "permission-denied";
         "hook-block": "hook-block";
         "elicitation-declined": "elicitation-declined";
+        "denial-breaker": "denial-breaker";
     }>>;
     batchIndex: z.ZodOptional<z.ZodNumber>;
     batchSize: z.ZodOptional<z.ZodNumber>;
@@ -57,6 +59,7 @@ export declare const ToolCallPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         "permission-denied": "permission-denied";
         "hook-block": "hook-block";
         "elicitation-declined": "elicitation-declined";
+        "denial-breaker": "denial-breaker";
     }>>;
     batchIndex: z.ZodOptional<z.ZodNumber>;
     batchSize: z.ZodOptional<z.ZodNumber>;
@@ -527,6 +530,7 @@ export declare const TraceEventInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject
             "permission-denied": "permission-denied";
             "hook-block": "hook-block";
             "elicitation-declined": "elicitation-declined";
+            "denial-breaker": "denial-breaker";
         }>>;
         batchIndex: z.ZodOptional<z.ZodNumber>;
         batchSize: z.ZodOptional<z.ZodNumber>;
@@ -818,6 +822,7 @@ export declare const TraceEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             "permission-denied": "permission-denied";
             "hook-block": "hook-block";
             "elicitation-declined": "elicitation-declined";
+            "denial-breaker": "denial-breaker";
         }>>;
         batchIndex: z.ZodOptional<z.ZodNumber>;
         batchSize: z.ZodOptional<z.ZodNumber>;

package/dist/agent/trace/types.d.ts

@@ -6,7 +6,7 @@ export interface ToolCallStartedPayload {
     inputBytes: number;
     subagentId?: string;
 }
-export declare const TOOL_FAILURE_CLASSES: readonly ["policy-refusal", "timeout", "permission-denied", "hook-block", "abort", "elicitation-declined"];
+export declare const TOOL_FAILURE_CLASSES: readonly ["policy-refusal", "timeout", "permission-denied", "hook-block", "abort", "elicitation-declined", "denial-breaker"];
 export type ToolFailureClass = (typeof TOOL_FAILURE_CLASSES)[number];
 export interface ToolCallCompletedPayload {
     phase: 'completed';

package/dist/cli/elicitation/repl-shared.d.ts

@@ -15,7 +15,6 @@ export interface ReplElicitationDeps {
     }) => Promise<readonly string[] | null>;
     readTextOverlay?: (opts: {
         header: readonly string[];
-        initial?: string;
         help?: string;
         validate?: (value: string) => string | null;
         signal: AbortSignal;