@adhdev/daemon-standalone 1.0.40-rc.1 → 1.0.40-rc.3

package/dist/index.js

@@ -36539,10 +36539,10 @@ var require_dist3 = __commonJS({
     }
     function getDaemonBuildInfo() {
       if (cached2) return cached2;
-      const commit = readInjected(true ? "3ac178c61e7ae403ba195b41bed9032cbf510ae6" : void 0) ?? "unknown";
-      const commitShort = readInjected(true ? "3ac178c6" : void 0) ?? (commit !== "unknown" ? commit.slice(0, 7) : "unknown");
-      const version2 = readInjected(true ? "1.0.40-rc.1" : void 0) ?? readInjected(typeof process !== "undefined" ? process.env?.ADHDEV_PKG_VERSION : void 0) ?? "unknown";
-      const builtAt = readInjected(true ? "2026-08-08T08:20:29.989Z" : void 0);
+      const commit = readInjected(true ? "acb6f55e37771396fa029424684127932eb94587" : void 0) ?? "unknown";
+      const commitShort = readInjected(true ? "acb6f55e" : void 0) ?? (commit !== "unknown" ? commit.slice(0, 7) : "unknown");
+      const version2 = readInjected(true ? "1.0.40-rc.3" : void 0) ?? readInjected(typeof process !== "undefined" ? process.env?.ADHDEV_PKG_VERSION : void 0) ?? "unknown";
+      const builtAt = readInjected(true ? "2026-08-08T09:31:44.924Z" : void 0);
       cached2 = builtAt ? { commit, commitShort, version: version2, builtAt } : { commit, commitShort, version: version2 };
       return cached2;
     }
@@ -46492,6 +46492,7 @@ Next step: ${nextStep}`;
       __resetMeshRuntimeStoreForTests: () => __resetMeshRuntimeStoreForTests,
       assertNoDependencyCycle: () => assertNoDependencyCycle,
       buildMeshNodeCapabilityTags: () => buildMeshNodeCapabilityTags,
+      buildMeshTaskModeViolationError: () => buildMeshTaskModeViolationError,
       cancelTask: () => cancelTask,
       claimNextTask: () => claimNextTask,
       cleanupTerminalDirectDispatches: () => cleanupTerminalDirectDispatches,
@@ -46499,6 +46500,7 @@ Next step: ${nextStep}`;
       describeTaskDependencyState: () => describeTaskDependencyState,
       enqueueTask: () => enqueueTask,
       expireTaskTargetPin: () => expireTaskTargetPin,
+      formatMeshTaskModeViolations: () => formatMeshTaskModeViolations,
       getActiveDirectDispatches: () => getActiveDirectDispatches,
       getMeshQueueRevision: () => getMeshQueueRevision,
       getMeshQueueStats: () => getMeshQueueStats,
@@ -46566,6 +46568,25 @@ Next step: ${nextStep}`;
       if (!task) return false;
       return task.readonly === true || task.taskMode === "live_debug_readonly";
     }
+    function formatMeshTaskModeViolations(result) {
+      const details = result.violationDetails;
+      if (!details?.length) return result.violations.join(", ");
+      return details.map((d) => `${d.label}: '${d.match}' at line ${d.line} col ${d.column}`).join("; ");
+    }
+    function buildMeshTaskModeViolationError(result) {
+      return `live_debug_readonly_guardrail_violation: forbidden operations (${result.violations.join(", ")}) \u2014 ${formatMeshTaskModeViolations(result)}`;
+    }
+    function locateOffset(text, index) {
+      const before = text.slice(0, index);
+      const line = before.split("\n").length;
+      const lastNl = before.lastIndexOf("\n");
+      return { line, column: index - lastNl };
+    }
+    function buildViolationDetail(label, text, start, end) {
+      const raw = text.slice(start, end);
+      const match = raw.length > MAX_REPORTED_MATCH_LEN ? `${raw.slice(0, MAX_REPORTED_MATCH_LEN)}\u2026` : raw;
+      return { label, match, ...locateOffset(text, start) };
+    }
     function hasNegationBefore(text, matchIndex) {
       const before = text.slice(0, matchIndex);
       const clauseStart = Math.max(
@@ -46603,12 +46624,51 @@ Next step: ${nextStep}`;
       }
       return false;
     }
+    function stripCommandWrappers(prefix) {
+      const m = /^([\s\S]*(?:&&|\|\||\||;)\s*)([\s\S]*)$/.exec(prefix);
+      const head = m ? m[1] : /^\s*/.exec(prefix)?.[0] ?? "";
+      let rest = m ? m[2] : prefix.slice(head.length);
+      let stripped = false;
+      let sawEvidence = false;
+      let sawEvidenceOnlyWrapper = false;
+      for (; ; ) {
+        const tok = /^([^\s]+)\s+/.exec(rest);
+        if (!tok) break;
+        const word = tok[1];
+        const lower = word.toLowerCase();
+        if (COMMAND_WRAPPERS.has(lower)) {
+          rest = rest.slice(tok[0].length);
+          stripped = true;
+          continue;
+        }
+        if (EVIDENCE_ONLY_WRAPPERS.has(lower)) {
+          rest = rest.slice(tok[0].length);
+          stripped = true;
+          sawEvidenceOnlyWrapper = true;
+          continue;
+        }
+        if (stripped && (/^-/.test(word) || /^[A-Za-z_][A-Za-z0-9_]*=/.test(word) || /^\d+$/.test(word))) {
+          rest = rest.slice(tok[0].length);
+          sawEvidence = true;
+          continue;
+        }
+        break;
+      }
+      if (!stripped) return null;
+      if (sawEvidenceOnlyWrapper && !sawEvidence) return null;
+      return head + rest;
+    }
     function isMutationKeywordInCommandContext(text, matchStart, matchEnd) {
       if (isInsideBackticksOrFence(text, matchStart, matchEnd)) return true;
       const lineStart = text.lastIndexOf("\n", matchStart - 1) + 1;
       const linePrefix = text.slice(lineStart, matchStart);
       if (/^\s*[$>]\s/.test(text.slice(lineStart))) return true;
       if (/^\s*$/.test(linePrefix)) return true;
+      const unwrapped = stripCommandWrappers(linePrefix);
+      if (unwrapped !== null) {
+        if (/^\s*$/.test(unwrapped)) return true;
+        if (/(?:&&|\|\||\||;)\s*$/.test(unwrapped)) return true;
+      }
       let tokStart = matchStart;
       while (tokStart > lineStart && !/\s/.test(text[tokStart - 1])) tokStart--;
       const beforeToken = text.slice(lineStart, tokStart);
@@ -46617,7 +46677,6 @@ Next step: ${nextStep}`;
       if (atCmdPos && /^(?:\.\/|\.\.\/|~\/|\/)/.test(tokenLead)) return true;
       if (/(?:&&|\|\||\||;)\s*$/.test(linePrefix)) return true;
       if (/(?:^|[\s,])(?:then|run|first)\s+$/i.test(linePrefix)) return true;
-      if (/,\s*$/.test(linePrefix)) return true;
       return false;
     }
     function isInsideBackticksOrFence(text, matchStart, matchEnd) {
@@ -46709,42 +46768,49 @@ Next step: ${nextStep}`;
       if (isInsideQuotedSpan(text, matchStart, matchEnd)) return false;
       return isMutationKeywordInCommandContext(text, matchStart, matchEnd);
     }
-    function patternHasRealMutation(pattern, text) {
+    function findRealMutation(pattern, text) {
       const re = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g");
       let match;
       while ((match = re.exec(text)) !== null) {
-        if (isRealMutationMatch(text, match.index, match.index + match[0].length)) return true;
+        const start = match.index;
+        const end = match.index + match[0].length;
+        if (isRealMutationMatch(text, start, end)) return { start, end };
         if (match.index === re.lastIndex) re.lastIndex++;
       }
-      return false;
+      return null;
     }
     function detectGitMutation(message) {
       const re = /\bgit\s+([a-z][a-z0-9-]*)/gi;
       let match;
       while ((match = re.exec(message)) !== null) {
         const sub = match[1].toLowerCase();
-        const isReal = () => isRealMutationMatch(message, match.index, match.index + match[0].length);
+        const span = { start: match.index, end: match.index + match[0].length };
+        const isReal = () => isRealMutationMatch(message, span.start, span.end);
         if (GIT_MUTATION_SUBCOMMANDS.has(sub)) {
-          if (isReal()) return true;
+          if (isReal()) return span;
           continue;
         }
         if (sub === "stash") {
           const after = message.slice(re.lastIndex).match(/^\s+([a-z][a-z0-9-]*)/i);
           const next = after ? after[1].toLowerCase() : "";
-          if (!GIT_STASH_READONLY_SUBCOMMANDS.has(next) && isReal()) return true;
+          if (!GIT_STASH_READONLY_SUBCOMMANDS.has(next) && isReal()) return span;
         } else if (sub === "checkout") {
-          if (isReal()) return true;
+          if (isReal()) return span;
         } else if (sub === "submodule") {
           const after = message.slice(re.lastIndex).match(/^\s+([a-z][a-z0-9-]*)/i);
           const next = after ? after[1].toLowerCase() : "";
-          if ((next === "update" || next === "add" || next === "sync" || next === "deinit") && isReal()) return true;
+          if ((next === "update" || next === "add" || next === "sync" || next === "deinit") && isReal()) {
+            return { start: span.start, end: re.lastIndex + after[0].length };
+          }
         } else if (sub === "worktree") {
           const after = message.slice(re.lastIndex).match(/^\s+([a-z][a-z0-9-]*)/i);
           const next = after ? after[1].toLowerCase() : "";
-          if ((next === "add" || next === "remove" || next === "move" || next === "prune") && isReal()) return true;
+          if ((next === "add" || next === "remove" || next === "move" || next === "prune") && isReal()) {
+            return { start: span.start, end: re.lastIndex + after[0].length };
+          }
         }
       }
-      return false;
+      return null;
     }
     function normalizeMeshTaskMode(value) {
       if (typeof value !== "string") return void 0;
@@ -46758,14 +46824,21 @@ Next step: ${nextStep}`;
         return taskMode ? { valid: true, taskMode, violations: [] } : { valid: true, violations: [] };
       }
       const text = message || "";
-      const violations = LIVE_DEBUG_READONLY_FORBIDDEN.filter((rule) => patternHasRealMutation(rule.pattern, text)).map((rule) => rule.label);
-      if (detectGitMutation(text)) {
-        violations.push("git_mutation");
+      const violationDetails = [];
+      for (const rule of LIVE_DEBUG_READONLY_FORBIDDEN) {
+        const hit = findRealMutation(rule.pattern, text);
+        if (hit) violationDetails.push(buildViolationDetail(rule.label, text, hit.start, hit.end));
+      }
+      const gitHit = detectGitMutation(text);
+      if (gitHit) {
+        violationDetails.push(buildViolationDetail("git_mutation", text, gitHit.start, gitHit.end));
       }
+      const violations = violationDetails.map((d) => d.label);
       return {
         valid: violations.length === 0,
         taskMode,
         violations,
+        ...violationDetails.length ? { violationDetails } : {},
         allowedOperations: [
           "process/log/window/port/session inspection",
           "read-only filesystem listing/reading",
@@ -46901,7 +46974,7 @@ Next step: ${nextStep}`;
       const readonly2 = opts?.readonly === true;
       const modeValidation = validateMeshTaskModeRequest(opts?.taskMode, message, readonly2);
       if (!modeValidation.valid) {
-        throw new Error(`live_debug_readonly_guardrail_violation: forbidden operations (${modeValidation.violations.join(", ")})`);
+        throw new Error(buildMeshTaskModeViolationError(modeValidation));
       }
       const id = typeof opts?.id === "string" && opts.id.trim() ? opts.id.trim() : (0, import_crypto8.randomUUID)();
       const dependsOn = normalizeDependsOn(opts?.dependsOn);
@@ -46984,7 +47057,7 @@ Next step: ${nextStep}`;
       const readonly2 = opts.readonly === true;
       const modeValidation = validateMeshTaskModeRequest(opts.taskMode, message, readonly2);
       if (!modeValidation.valid) {
-        throw new Error(`live_debug_readonly_guardrail_violation: forbidden operations (${modeValidation.violations.join(", ")})`);
+        throw new Error(buildMeshTaskModeViolationError(modeValidation));
       }
       const now = opts.dispatchedAt && opts.dispatchedAt.trim() ? opts.dispatchedAt : (/* @__PURE__ */ new Date()).toISOString();
       return withQueueLock(meshId, () => {
@@ -47412,9 +47485,12 @@ Next step: ${nextStep}`;
     var MESH_TASK_MODES;
     var MESH_TASK_PRIORITIES;
     var NOT_BEFORE_RELATIVE_THRESHOLD_MS;
+    var MAX_REPORTED_MATCH_LEN;
     var LIVE_DEBUG_READONLY_FORBIDDEN;
     var NEGATION_CUES;
     var NEGATION_WINDOW_TOKENS;
+    var COMMAND_WRAPPERS;
+    var EVIDENCE_ONLY_WRAPPERS;
     var GIT_MUTATION_SUBCOMMANDS;
     var GIT_STASH_READONLY_SUBCOMMANDS;
     var DEPENDENCY_FAILURE_TERMINALS;
@@ -47442,6 +47518,7 @@ Next step: ${nextStep}`;
         MESH_TASK_MODES = ["code_change", "validation", "live_debug_readonly", "launch_app", "convergence"];
         MESH_TASK_PRIORITIES = ["low", "normal", "high"];
         NOT_BEFORE_RELATIVE_THRESHOLD_MS = 365 * 24 * 60 * 60 * 1e3;
+        MAX_REPORTED_MATCH_LEN = 40;
         LIVE_DEBUG_READONLY_FORBIDDEN = [
           { label: "source_edit", pattern: /\b(edit|modify|patch|apply\s+patch|write\s+(?:to\s+)?(?:file|source)|overwrite|delete\s+file|remove\s+file|create\s+file|touch\s+file)\b/i },
           { label: "checkpoint", pattern: /\b(checkpoint|mesh_checkpoint)\b/i },
@@ -47467,6 +47544,8 @@ Next step: ${nextStep}`;
           "\uC54A"
         ];
         NEGATION_WINDOW_TOKENS = 6;
+        COMMAND_WRAPPERS = /* @__PURE__ */ new Set(["xargs", "sudo", "doas", "nohup", "sh", "bash", "zsh"]);
+        EVIDENCE_ONLY_WRAPPERS = /* @__PURE__ */ new Set(["time", "command", "env", "nice", "exec", "builtin", "timeout"]);
         GIT_MUTATION_SUBCOMMANDS = /* @__PURE__ */ new Set([
           "add",
           "commit",
@@ -60203,12 +60282,19 @@ The mesh has no work in flight. For each mission, decide its outcome: continue i
             kind: "dispatch_failed",
             nodeId: ctx.nodeId,
             sessionId: ctx.sessionId,
-            payload: { taskId: ctx.task.id, deliveryId: delivery.id, error: e?.message, retryable: true, transport: ctx.transport }
+            payload: { taskId: ctx.task.id, deliveryId: delivery.id, error: e?.message, retryable: isRetryableDispatchFailure(e), transport: ctx.transport }
           });
         } catch {
         }
       });
     }
+    function isRetryableDispatchFailure(e) {
+      if (e && typeof e === "object") {
+        if (e.retryRecommended === false) return false;
+        if (e.recoverable === false) return false;
+      }
+      return true;
+    }
     function resolveClaimingSessionTranscriptProfile(components, sessionId) {
       try {
         const instances = components.instanceManager?.getByCategory?.("cli") || [];
@@ -60352,7 +60438,7 @@ The mesh has no work in flight. For each mission, decide its outcome: continue i
       const silentIdlePushOnDispatch = resolveCoordinatorIdlePushPolicy(mesh?.policy) === "auto_silent_on_dispatch";
       const remoteDaemonId = readMeshNodeDaemonId(node ?? {});
       if (remoteDaemonId && components.dispatchMeshCommand) {
-        const isLocalNode = components.cliManager.adapters.has(sessionId);
+        const isLocalNode = isLocalAutoLaunchNode(node) || components.cliManager.adapters.has(sessionId);
         if (!isLocalNode) {
           const localDaemonIdForDispatch = localCoordinatorDaemonId();
           const sourceCoordinatorSessionId = readNonEmptyString(task.sourceCoordinatorSessionId) || void 0;
@@ -77320,6 +77406,7 @@ ${lastSnapshot}`;
       buildMeshNodeDataFreshness: () => buildMeshNodeDataFreshness,
       buildMeshNodeProbeFreshness: () => buildMeshNodeProbeFreshness,
       buildMeshSchedulingRuntime: () => buildMeshSchedulingRuntime,
+      buildMeshTaskModeViolationError: () => buildMeshTaskModeViolationError,
       buildMissionPromptSection: () => buildMissionPromptSection,
       buildP2pRelayFailurePayload: () => buildP2pRelayFailurePayload,
       buildPinnedGlobalInstallCommand: () => buildPinnedGlobalInstallCommand,
@@ -77400,6 +77487,7 @@ ${lastSnapshot}`;
       flattenMessageParts: () => flattenMessageParts,
       foldUsageRecords: () => foldUsageRecords,
       formatManifestValidationIssues: () => formatManifestValidationIssues,
+      formatMeshTaskModeViolations: () => formatMeshTaskModeViolations,
       forwardAgentStreamsToIdeInstance: () => forwardAgentStreamsToIdeInstance2,
       getAIExtensions: () => getAIExtensions,
       getActiveDirectDispatches: () => getActiveDirectDispatches,