automata-cli 0.12.0-develop.533 → 0.12.0-develop.554

package/dist/index.js

@@ -2633,7 +2633,7 @@ function addLabel(target, name, description) {
   const edit = target.kind === "pr" ? "pr" : "issue";
   const args = [edit, "edit", String(target.number), "--add-label", name];
   let result = run4("gh", args);
-  if (result.status !== 0 && isMissingLabelError(result.stderr)) {
+  if (result.status !== 0 && isMissingLabelError(result.stderr, name)) {
     const created = run4("gh", ["label", "create", name, "--description", description]);
     if (created.status !== 0 && !/already exists/i.test(created.stderr)) {
       throw new Error(created.stderr.trim() || `Failed to create the label ${name}.`);
@@ -2732,8 +2732,11 @@ var MISSING_LABEL_PATTERNS = [
   /could not resolve to a label/i,
   /\blabels?\b[^\n]*\b(?:not found|does not exist)\b/i
 ];
-function isMissingLabelError(stderr) {
-  return MISSING_LABEL_PATTERNS.some((pattern) => pattern.test(stderr));
+function isMissingLabelError(stderr, name) {
+  if (MISSING_LABEL_PATTERNS.some((pattern) => pattern.test(stderr))) {
+    return true;
+  }
+  return name !== void 0 && stderr.includes(`'${name}' not found`);
 }
 function createDraftPullRequest(input) {
   const base = [
@@ -2752,7 +2755,7 @@ function createDraftPullRequest(input) {
   if (input.label !== void 0 && input.label.length > 0) {
     const labelled = run4("gh", [...base, "--label", input.label]);
     if (labelled.status === 0) return parseCreatedPrUrl(labelled.stdout, input.head);
-    if (!isMissingLabelError(labelled.stderr)) {
+    if (!isMissingLabelError(labelled.stderr, input.label)) {
       throw new Error(
         labelled.stderr.trim() || `Failed to open a draft pull request for ${input.head}.`
       );
@@ -2966,7 +2969,7 @@ function runClaude(prompt, options = {}) {
       if (options.printSteps !== true) return;
       try {
         const event = JSON.parse(line);
-        formatEvent(event, turnCount);
+        formatEvent(event, turnCount, options.echoResult !== false);
         if (event["type"] === "assistant") turnCount++;
       } catch {
       }
@@ -3056,7 +3059,7 @@ function formatContentBlock(block) {
   }
   return null;
 }
-function formatResultEvent(event) {
+function formatResultEvent(event, echoResult) {
   const result = event["result"];
   const cost = event["cost_usd"];
   const duration = event["duration_ms"];
@@ -3070,16 +3073,16 @@ function formatResultEvent(event) {
     process.stderr.write(`  [info] ${parts.join(" | ")}
 `);
   }
-  if (result) {
+  if (result && echoResult) {
     process.stdout.write(result + "\n");
   }
 }
-function formatEvent(event, turnCount) {
+function formatEvent(event, turnCount, echoResult = true) {
   const type = event["type"];
   if (type === "assistant") {
     formatAssistantEvent(event, turnCount);
   } else if (type === "result") {
-    formatResultEvent(event);
+    formatResultEvent(event, echoResult);
   }
 }
 function asText(value, fallback) {
@@ -8892,6 +8895,48 @@ function withoutWatched(list, id) {
   return list.filter((entry) => entry !== id);
 }
 
+// src/conductor/permissionDenials.ts
+var MAX_TARGET_LENGTH = 300;
+function targetOf(input) {
+  if (typeof input !== "object" || input === null) return "";
+  const record = input;
+  for (const key2 of ["command", "file_path", "path", "pattern"]) {
+    const value = record[key2];
+    if (typeof value === "string") return value;
+  }
+  return JSON.stringify(input);
+}
+function denialOf(entry) {
+  if (typeof entry !== "object" || entry === null) return null;
+  const record = entry;
+  const tool = record["tool_name"];
+  if (typeof tool !== "string") return null;
+  return { tool, target: targetOf(record["tool_input"]) };
+}
+function parsePermissionDenials(stdout) {
+  const denials = [];
+  for (const line of stdout.split("\n")) {
+    if (!line.trim().startsWith("{")) continue;
+    try {
+      const event = JSON.parse(line);
+      const listed = event["type"] === "result" ? event["permission_denials"] : void 0;
+      if (!Array.isArray(listed)) continue;
+      for (const entry of listed) {
+        const denial = denialOf(entry);
+        if (denial !== null) denials.push(denial);
+      }
+    } catch {
+    }
+  }
+  return denials;
+}
+function describePermissionDenials(denials) {
+  return denials.map((denial) => {
+    const flat = `${denial.tool} ${denial.target}`.replace(/[\u0000-\u001f\u007f-\u009f]+/g, " ").replace(/\s+/g, " ").trim();
+    return flat.length <= MAX_TARGET_LENGTH ? flat : `${flat.slice(0, MAX_TARGET_LENGTH)}\u2026`;
+  });
+}
+
 // src/commands/conductor.ts
 function fail2(message) {
   process.stderr.write(`Error: ${message}
@@ -8956,7 +9001,29 @@ function readTargetMessages(target) {
 }
 function runModel(prompt, execution, replyTo, sink2) {
   const { owner, repo } = getRepoSlug();
-  return runClaude(prompt, { model: execution.model, effort: execution.effort, readOnly: true, replyTo, ghRepo: `${owner}/${repo}`, sink: sink2 });
+  return runClaude(prompt, { model: execution.model, effort: execution.effort, readOnly: true, replyTo, ghRepo: `${owner}/${repo}`, sink: sink2, printSteps: verboseRun, echoResult: false });
+}
+var verboseRun = false;
+function reportDenials(stdout, label2) {
+  if (!verboseRun || stdout.length === 0) return;
+  const lines = describePermissionDenials(parsePermissionDenials(stdout));
+  if (lines.length === 0) {
+    process.stderr.write(`Conductor: the run for ${label2} reported no denied tool call.
+`);
+    return;
+  }
+  process.stderr.write(`Conductor: the run for ${label2} was denied ${String(lines.length)} tool call(s):
+`);
+  for (const line of lines) process.stderr.write(`  - ${line}
+`);
+}
+function reportCommandTrace() {
+  const trace = takeCommandTrace();
+  if (trace === null) return;
+  process.stderr.write(`Commands (${String(trace.length)})
+`);
+  for (const traced of trace) process.stderr.write(`  ${describeTracedCommand(traced)}
+`);
 }
 function captureStdout() {
   let stdout = "";
@@ -8971,8 +9038,12 @@ function captureStdout() {
 async function runModelForText(prompt, execution) {
   const { owner, repo } = getRepoSlug();
   const captured = captureStdout();
-  const options = { model: execution.model, effort: execution.effort, readOnly: true, ghRepo: `${owner}/${repo}`, sink: captured.sink };
-  await runClaude(prompt, options);
+  const options = { model: execution.model, effort: execution.effort, readOnly: true, ghRepo: `${owner}/${repo}`, sink: captured.sink, printSteps: verboseRun, echoResult: false };
+  try {
+    await runClaude(prompt, options);
+  } finally {
+    reportDenials(captured.text(), "the dry run");
+  }
   return extractDryRunReply(execution.executor, captured.text());
 }
 function coveredOf(watch, linkMap) {
@@ -9052,6 +9123,7 @@ async function conductItem(id, config, login2, participants, execution, dryRun,
     read: () => readTargetMessages(replyTo),
     run: () => runModel(prompt, execution, replyTo, captured.sink)
   });
+  reportDenials(captured.text(), label2);
   const needsHuman = parseNeedsHuman(extractDryRunReply(execution.executor, captured.text()) ?? "");
   if (needsHuman !== null && outcome.kind !== "run-failed" && outcome.kind !== "unverified") {
     return blockItem(item, label2, needsHuman);
@@ -9300,6 +9372,17 @@ function reportHeldLock(held, suspect, staleMinutes) {
   return 2;
 }
 async function runConductor(options = {}) {
+  verboseRun = options.verbose === true;
+  if (verboseRun) startCommandTrace();
+  try {
+    return await runConductorTick(options);
+  } finally {
+    reportCommandTrace();
+    verboseRun = false;
+    stopCommandTrace();
+  }
+}
+async function runConductorTick(options) {
   if (options.check === true && options.dryRun === true) {
     return fail2("--check and --dry-run cannot be used together.");
   }
@@ -9340,7 +9423,10 @@ async function runConductor(options = {}) {
 }
 var conductorCommand = new Command7("conductor").description(
   "Run one conductor tick as an allowed (human) account: verify the identity, take the conductor's own run lock, then act"
-).option("--check", "Report what a tick would do, including pending prunes, and change nothing; exit 1 on a problem").option("--dry-run", "Run the model for each owed reply and print it instead of posting; no lock, no prune").action(async (options) => {
+).option("--check", "Report what a tick would do, including pending prunes, and change nothing; exit 1 on a problem").option("--dry-run", "Run the model for each owed reply and print it instead of posting; no lock, no prune").option(
+  "--verbose",
+  "Trace every `git` and `gh` call with its duration and exit code, show the model's steps, and list the tool calls the run was denied"
+).action(async (options) => {
   exitWith(await runConductor(options));
 });
 conductorCommand.command("add <id>").description("Watch an issue or pull request and make do-work pick it up (an issue also follows its linked PR)").action((id) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "automata-cli",
-  "version": "0.12.0-develop.533",
+  "version": "0.12.0-develop.554",
   "description": "Automata CLI tool",
   "type": "module",
   "engines": {