deepagents 1.11.0 → 1.11.1

package/dist/{langsmith-DDhVumyX.cjs → langsmith-DhbsxI45.cjs}

@@ -1526,19 +1526,46 @@ const FilesystemStateSchema = new _langchain_langgraph.StateSchema({ files: new
 	inputSchema: zod_v4.z.record(zod_v4.z.string(), FileDataSchema.nullable()).optional(),
 	reducer: fileDataReducer
 }) });
+/** Extract a message string from an unknown thrown value without `instanceof`. */
+function getErrorMessage$1(error) {
+	if (typeof error === "object" && error !== null && "message" in error && typeof error.message === "string") return error.message;
+	return String(error);
+}
 /**
-* Throw a permission-denied error if `path` is denied under `rules`.
+* Check whether `path` is permitted under `rules` for `operation`, returning an
+* error string to surface to the model (or `undefined` when allowed).
 *
-* No-op when `rules` is empty (permissive default). Paths that fail
-* `validatePath` are silently skipped — the tool's own input validation
-* will surface a better error.
+* Never throws: an invalid path (non-absolute, or containing `..` or `~`) or a
+* denied path is a recoverable tool error, not a fatal run-ending one. Such
+* paths are rejected, never normalized, so they cannot bypass a deny rule or
+* reach the backend.
 *
 * @internal
 */
-function enforcePermission(rules, operation, path) {
+function checkPermission(rules, operation, path) {
 	if (rules.length === 0) return;
-	const canonical = validatePath(path);
-	if (decidePathAccess(rules, operation, canonical) === "deny") throw new Error(`Error: permission denied for ${operation} on ${canonical}`);
+	let canonical;
+	try {
+		canonical = validatePath(path);
+	} catch (error) {
+		return `Error: ${getErrorMessage$1(error)}`;
+	}
+	if (decidePathAccess(rules, operation, canonical) === "deny") return `Error: permission denied for ${operation} on ${canonical}`;
+}
+/**
+* Build an error {@link ToolMessage} for a rejected or denied path. Returning a
+* bare string would be wrapped as a `status: "success"` message whose content
+* merely starts with "Error:"; marking `status: "error"` reports the failure
+* accurately so callers and the model can distinguish a real failure from a
+* successful result.
+*/
+function toolError(runtime, toolName, message) {
+	return new langchain.ToolMessage({
+		content: message,
+		name: toolName,
+		tool_call_id: runtime.toolCall?.id,
+		status: "error"
+	});
 }
 /**
 * Filter a list of filesystem entries to those the rules permit.
@@ -1709,7 +1736,8 @@ const EXECUTION_SYSTEM_PROMPT = langchain.context`
 function createLsTool(backend, options) {
 	const { customDescription, permissions } = options;
 	return (0, langchain.tool)(async (input, runtime) => {
-		enforcePermission(permissions, "read", input.path ?? "/");
+		const permissionError = checkPermission(permissions, "read", input.path ?? "/");
+		if (permissionError !== void 0) return toolError(runtime, "ls", permissionError);
 		const resolvedBackend = await resolveBackend(backend, runtime);
 		const path = input.path || "/";
 		const lsResult = await resolvedBackend.ls(path);
@@ -1737,7 +1765,8 @@ function createLsTool(backend, options) {
 function createReadFileTool(backend, options) {
 	const { customDescription, toolTokenLimitBeforeEvict, permissions } = options;
 	return (0, langchain.tool)(async (input, runtime) => {
-		enforcePermission(permissions, "read", input.file_path);
+		const permissionError = checkPermission(permissions, "read", input.file_path);
+		if (permissionError !== void 0) return toolError(runtime, "read_file", permissionError);
 		const resolvedBackend = await resolveBackend(backend, runtime);
 		const { file_path, offset = 0, limit = 100 } = input;
 		const readResult = await resolvedBackend.read(file_path, offset, limit);
@@ -1814,7 +1843,8 @@ function createReadFileTool(backend, options) {
 function createWriteFileTool(backend, options) {
 	const { customDescription, permissions } = options;
 	return (0, langchain.tool)(async (input, runtime) => {
-		enforcePermission(permissions, "write", input.file_path);
+		const permissionError = checkPermission(permissions, "write", input.file_path);
+		if (permissionError !== void 0) return toolError(runtime, "write_file", permissionError);
 		const resolvedBackend = await resolveBackend(backend, runtime);
 		const { file_path, content } = input;
 		const result = await resolvedBackend.write(file_path, content);
@@ -1845,7 +1875,8 @@ function createWriteFileTool(backend, options) {
 function createEditFileTool(backend, options) {
 	const { customDescription, permissions } = options;
 	return (0, langchain.tool)(async (input, runtime) => {
-		enforcePermission(permissions, "write", input.file_path);
+		const permissionError = checkPermission(permissions, "write", input.file_path);
+		if (permissionError !== void 0) return toolError(runtime, "edit_file", permissionError);
 		const resolvedBackend = await resolveBackend(backend, runtime);
 		const { file_path, old_string, new_string, replace_all = false } = input;
 		const result = await resolvedBackend.edit(file_path, old_string, new_string, replace_all);
@@ -1878,7 +1909,8 @@ function createEditFileTool(backend, options) {
 function createGlobTool(backend, options) {
 	const { customDescription, permissions } = options;
 	return (0, langchain.tool)(async (input, runtime) => {
-		enforcePermission(permissions, "read", input.path ?? "/");
+		const permissionError = checkPermission(permissions, "read", input.path ?? "/");
+		if (permissionError !== void 0) return toolError(runtime, "glob", permissionError);
 		const resolvedBackend = await resolveBackend(backend, runtime);
 		const { pattern, path = "/" } = input;
 		const globResult = await resolvedBackend.glob(pattern, path);
@@ -1903,7 +1935,8 @@ function createGlobTool(backend, options) {
 function createGrepTool(backend, options) {
 	const { customDescription, permissions } = options;
 	return (0, langchain.tool)(async (input, runtime) => {
-		enforcePermission(permissions, "read", input.path ?? "/");
+		const permissionError = checkPermission(permissions, "read", input.path ?? "/");
+		if (permissionError !== void 0) return toolError(runtime, "grep", permissionError);
 		const resolvedBackend = await resolveBackend(backend, runtime);
 		const { pattern, path = "/", glob = null } = input;
 		const result = await resolvedBackend.grep(pattern, path, glob);
@@ -7878,4 +7911,4 @@ Object.defineProperty(exports, "serializeProfile", {
 	}
 });
 
-//# sourceMappingURL=langsmith-DDhVumyX.cjs.map
+//# sourceMappingURL=langsmith-DhbsxI45.cjs.map