praxis-agent 0.45.1 → 0.45.3

package/dist/application/session-service.js

@@ -2990,11 +2990,13 @@ export class ClaudeSessionService {
                 let projectMemoryRecallMessages = [];
                 let observeModelRequestUsage = () => undefined;
                 const durableFollowUps = new DurableFollowUpTracker();
+                const claimedToolCallIds = new Set();
                 const observer = {
                     ...(nativeLease
                         ? {
                             toolExecutionStarted: async (call) => {
                                 await nativeLease.beginToolExecution(call.id);
+                                claimedToolCallIds.add(call.id);
                             },
                         }
                         : {}),
@@ -3087,6 +3089,10 @@ export class ClaudeSessionService {
                                 await refreshRuntimeContext();
                         }
                         if (nativeLease) {
+                            if (!claimedToolCallIds.has(call.id) && !signal?.aborted) {
+                                await nativeLease.beginToolExecution(call.id);
+                                claimedToolCallIds.add(call.id);
+                            }
                             await nativeLease.appendToolCompletion({
                                 callId: call.id,
                                 result: toolResult,

package/dist/cli/tui/permission-settings.js

@@ -3,7 +3,7 @@ import { join } from 'node:path';
 import { writeFileAtomically } from '../../platform/atomic-write.js';
 import { resolveDataPlaneRoot } from '../../persistence/data-plane.js';
 import { loadNativeSharedResources } from '../../persistence/native-resources.js';
-import { permissionRuleValueFromString, permissionRuleValueToString, } from '../../permissions/permission-updates.js';
+import { permissionRuleStringIsValid, permissionRuleValueFromString, permissionRuleValueToString, } from '../../permissions/permission-updates.js';
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -60,7 +60,7 @@ async function sourceUnchanged(path, source) {
     }
 }
 export async function addTuiPermissionRule({ cwd, behavior, rule, scope, configRoot, }) {
-    if (!/^([A-Za-z][\w-]*)(?:\(.*\))?$/u.test(rule))
+    if (!permissionRuleStringIsValid(rule))
         throw new Error(`Invalid permission rule: ${rule}`);
     const path = settingsPath(configRoot ?? configRootPath(), cwd, scope);
     for (let attempt = 0; attempt < 3; attempt += 1) {

package/dist/permissions/claude-permission-resolver.js

@@ -10,7 +10,7 @@ import { shellPermissionMatchCandidates } from './bash-normalization.js';
 import { pathIsInsideRoots, validateBashPathSafety, } from './bash-path-safety.js';
 import { validateSedSafety } from './sed-safety.js';
 import { parseShellRule, shellRuleMatches } from './shell-rule-matching.js';
-import { effectiveAdditionalDirectories, effectivePermissionMode, filePermissionSuggestions, permissionRuleValueFromString, permissionRuleValueToString, shellInputIsReadOnly, shellPermissionSuggestions, shellSubcommands, skillPermissionSuggestions, } from './permission-updates.js';
+import { effectiveAdditionalDirectories, effectivePermissionMode, filePermissionSuggestions, permissionRuleValueFromString, permissionRuleStringIsValid, permissionRuleValueToString, shellInputIsReadOnly, shellPermissionSuggestions, shellSubcommands, skillPermissionSuggestions, } from './permission-updates.js';
 const DEFAULT_BEHAVIOR = {
     Agent: 'allow',
     SendMessage: 'allow',
@@ -144,7 +144,7 @@ export function validateClaudePermissionSettings(settings) {
                 throw new Error(`permissions.${field} must be an array of strings: ${resource.path}`);
             }
             for (const rule of rules) {
-                if (!/^([A-Za-z][\w-]*)(?:\(.*\))?$/.test(rule)) {
+                if (!permissionRuleStringIsValid(rule)) {
                     throw new Error(`Invalid permission rule in ${resource.path}: ${rule}`);
                 }
             }

package/dist/permissions/permission-updates.d.ts

@@ -1,5 +1,6 @@
 import type { PermissionMode, PermissionRuleValue, PermissionUpdate } from '../core/runtime.js';
 export declare function permissionRuleValueToString(rule: PermissionRuleValue): string;
+export declare function permissionRuleStringIsValid(value: string): boolean;
 export declare function permissionRuleValueFromString(value: string): PermissionRuleValue;
 export declare function parsePermissionUpdates(value: unknown): readonly PermissionUpdate[] | undefined;
 export declare function extractPermissionRules(updates: readonly PermissionUpdate[] | undefined): readonly PermissionRuleValue[];

package/dist/permissions/permission-updates.js

@@ -10,6 +10,9 @@ export function permissionRuleValueToString(rule) {
         .replaceAll(')', '\\)');
     return `${rule.toolName}(${content})`;
 }
+export function permissionRuleStringIsValid(value) {
+    return /^([A-Za-z][\w-]*)(?:\(.*\))?$/su.test(value);
+}
 function unescapedIndex(value, character, fromEnd = false) {
     const start = fromEnd ? value.length - 1 : 0;
     const end = fromEnd ? -1 : value.length;

package/dist/tools/claude-workflow-tools.js

@@ -9,7 +9,7 @@ function workflowDefinition() {
         name: 'Workflow',
         description: `Run an explicitly requested, sandboxed JavaScript workflow in the background. Use only when the user asks for a workflow or named saved workflow; for ordinary delegation use Agent.
 
-Every script starts with a pure-literal \`export const meta = { name, description, phases? }\`. Its async body may use \`args\`, \`agent(prompt, options?)\`, \`parallel(thunks)\`, \`pipeline(items, ...stages)\`, \`workflow(nameOrScriptPath, args)\`, \`phase(title)\`, \`log(message)\`, and \`budget.{total,spent(),remaining()}\`. Agent options are \`label\`, \`phase\`, \`model\`, \`effort\`, \`agentType\`, \`schema\`, and \`isolation: 'worktree'\`. Pipeline stages receive \`(previousResult, originalItem, index)\`; failed parallel or pipeline items become null. Nested workflows are limited to one level.
+Every script starts with a pure-literal \`export const meta = { name, description, phases? }\`. \`phases\` is optional and must be an array of objects shaped \`{ title: string, detail?: string, model?: string }\`, never an array of strings. Its async body may use \`args\`, \`agent(prompt, options?)\`, \`parallel(thunks)\`, \`pipeline(items, ...stages)\`, \`workflow(nameOrScriptPath, args)\`, \`phase(title)\`, \`log(message)\`, and \`budget.{total,spent(),remaining()}\`. Agent options are \`label\`, \`phase\`, \`model\`, \`effort\`, \`agentType\`, \`schema\`, and \`isolation: 'worktree'\`. Pipeline stages receive \`(previousResult, originalItem, index)\`; failed parallel or pipeline items become null. Nested workflows are limited to one level.
 
 Provide one source: \`scriptPath\` takes precedence over \`script\`, which takes precedence over \`name\`. Saved names resolve from project \`${projectDirectory}/workflows\`, then user workflows, followed by built-ins. The call returns a task ID immediately; use TaskOutput/TaskStop for lifecycle. Resume a terminal or interrupted run with its script path and \`resumeFromRunId\`; completed matching agents replay from journal. Workflows allow at most 1000 agents, 4096 collection items, and bounded concurrency. Scripts have no Node.js, filesystem, network, ambient time, or randomness.`,
         inputSchema: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "praxis-agent",
-  "version": "0.45.1",
+  "version": "0.45.3",
   "description": "Local-first, single-user general agent for the command line.",
   "license": "MIT",
   "author": "wuqisen",