Skip to content

fix: propagate maxPermissionDenied config field to all layers #4257

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lpcox merged 2 commits into from
Jun 3, 2026
Merged

fix: propagate maxPermissionDenied config field to all layers #4257

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5d82ff0
fix: propagate maxPermissionDenied to cli-options and spec
github-actions[bot] Jun 3, 2026
29210eb
Potential fix for pull request finding
lpcox Jun 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions docs/awf-config-spec.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,6 +103,7 @@ the corresponding CLI flag.
- `apiProxy.defaultModelMultiplier` → *(config-only; maps to `AWF_EFFECTIVE_TOKEN_DEFAULT_MODEL_MULTIPLIER`)*
- `apiProxy.maxRuns` → *(config-only; no CLI equivalent)*
- `apiProxy.maxModelMultiplierCap` → `--max-model-multiplier-cap <number>`
- `apiProxy.maxPermissionDenied` → `--max-permission-denied <number>`
- `apiProxy.requestedModel` → *(config-only; maps to `AWF_REQUESTED_MODEL` for pre-startup validation)*
- `apiProxy.modelFallback` → *(config-only; model fallback strategy)*
- `apiProxy.models` → *(config-only; model alias rewriting)*
Expand Down
8 changes: 8 additions & 0 deletions src/cli-options.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -345,6 +345,14 @@ program
' are rejected with HTTP 400 and error type model_multiplier_cap_exceeded.\n' +
' Must be a positive number.',
)
.option(
'--max-permission-denied <number>',
'Maximum number of upstream 401/403 responses allowed per run (requires --enable-api-proxy).\n' +
' When reached, the API proxy rejects all subsequent requests with HTTP 403\n' +
' and error type permission_denied_limit_exceeded, stopping the run to avoid\n' +
' wasting tokens on misconfigured credentials.\n' +
' Must be a positive integer.',
)
.option(
'--enable-token-steering',
'Enable effective token budget steering in the API proxy (requires --enable-api-proxy).\n' +
Expand Down
Loading