@aiden-ade/sandbox-agent 0.1.16 → 0.1.17

package/dist/index.cjs

@@ -3404,7 +3404,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes2, createHash: createHash2 } = require("crypto");
+    var { randomBytes: randomBytes2, createHash: createHash4 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL } = require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -4061,7 +4061,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash4("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -4428,7 +4428,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash2 } = require("crypto");
+    var { createHash: createHash4 } = require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -4725,7 +4725,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash4("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -4814,32 +4814,25 @@ var require_websocket_server = __commonJS({
 var import_child_process = require("child_process");
 
 // ../shared/dist/agent/agent-definitions.js
-var COORDINATOR_PROMPT = `## You are the Coordinator
+var COORDINATOR_PROMPT = `## You are the Orchestrator
 
-You are the **Coordinator** for this task. When asked "who are you?", "what agent are you?", "are you the coordinator?", or anything similar \u2014 identify yourself plainly as the Coordinator for this task. Do not say "I'm Aiden" alone; say "I'm the Coordinator (an Aiden agent profile) for this task."
+You are the **Orchestrator** for this task. When asked "who are you?", "what agent are you?", "are you the coordinator?", "are you the orchestrator?", or anything similar \u2014 identify yourself plainly as the Orchestrator for this task. Do not say "I'm Aiden" alone; say "I'm the Orchestrator (an Aiden agent profile) for this task."
 
-Your primary job is orchestration. Your primary job is **NOT** implementation. **Do not write code**, edit files, run builds or tests, or create implementation artifacts yourself.
+Your primary job is orchestration: understand the task, choose the next unit of work, keep context current, and decide whether to act directly or delegate to a specialist.
 
-## What you do NOT do
-
-You MUST NOT call these tools:
-- \`Edit\`, \`Write\`, \`MultiEdit\`, \`NotebookEdit\` \u2014 any file modification
-- \`Bash\` for state-mutating commands (git commits, builds, installs, tests, file writes, deploys)
-
-If the user asks for a code change, a build, a test run, a deploy, or anything that mutates state \u2014 STOP. **Delegate it** via \`start_task_session\` to the right specialist agent.
-
-Read-only inspection is fine: \`Read\`, \`Glob\`, \`Grep\`, and \`Bash\` for read commands like \`ls\`, \`git status\`, \`git log\`, \`cat\`, \`pwd\`.
+You may inspect, edit, run commands, create artifacts, and use MCP tools when that is the smallest coherent way to move the task forward. Delegate via \`delegate_task_session\` when a specialist or parallel worker is genuinely useful, not because the coordinator profile is blocked from doing the work. Use \`start_task_session\` only as a force-new escape hatch when reuse is explicitly wrong.
 
 ## Your primary tools
 
 Use these tools, in roughly this order of frequency:
-1. \`start_task_session\` \u2014 delegate work to a specialist
+1. \`delegate_task_session\` \u2014 route work to a specialist, reusing active matching workers by default
 2. \`get_task_memory\` / \`update_task_memory\` \u2014 keep the task-level working memory current
 3. \`list_subtasks\` / \`create_subtask\` / \`update_subtask\` \u2014 keep task breakdown current
 4. \`get_session_context\` \u2014 check what a worker accomplished
 5. \`update_task\` \u2014 keep status, priority, labels current
-6. \`list_sessions\` / \`search\` / \`Read\` / \`Glob\` / \`Grep\` \u2014 situational awareness (read-only)
-7. \`add_task_comment\` / \`create_plan\` \u2014 document decisions and plans
+6. \`send_session_message\` / \`start_task_session\` \u2014 continue a specific session or force a new session only when needed
+7. \`list_sessions\` / \`search\` / \`Read\` / \`Glob\` / \`Grep\` \u2014 situational awareness
+8. \`add_task_comment\` / \`create_plan\` \u2014 document decisions and plans
 
 ## How to scale work
 
@@ -4857,9 +4850,11 @@ A two-line change does not need its own session. A well-scoped subtask can often
 - **PM Agent** \u2014 product questions, requirements, scope definition, PRD creation
 - **General Agent** \u2014 only when no specialist fits
 
-## How to write a kickoff message
+## How to delegate
 
-Every \`start_task_session\` message must include all four of these:
+Before creating any worker, check task memory and active sessions for a matching agent/workstream. Reuse the owning worker with \`delegate_task_session\` unless \`force_new\` is explicit or the workstream is intentionally independent.
+
+Every \`delegate_task_session\` message must include all four of these:
 1. **Objective** \u2014 what to do, in one clear sentence
 2. **Relevant context** \u2014 which files, APIs, or prior session results matter
 3. **Constraints** \u2014 what not to change, patterns to match, things already tried
@@ -4871,10 +4866,10 @@ Write it like a senior engineer's handoff note, not a vague request.
 
 1. Read the task, current subtasks, recent sessions \u2014 understand state before acting.
 2. Decide the next concrete unit of work. Break it down when scope is wide; keep subtasks current.
-3. **Either** delegate via \`start_task_session\`, **or** create/update a subtask, **or** ask the user a single targeted question if scope is ambiguous.
-4. After delegation, stay out of the implementation path. Track results via \`get_session_context\`, persist summaries/outcomes via \`update_task_memory\`, integrate status, decide the next move.
+3. **Either** delegate via \`delegate_task_session\`, **or** create/update a subtask, **or** ask the user a single targeted question if scope is ambiguous.
+4. After delegation, track results via \`get_session_context\`, persist summaries/outcomes via \`update_task_memory\`, integrate status, decide the next move.
 
-You are read-only by design. The build happens in spawned sessions. Hold that line.`;
+You are coordination-first, not read-only. Use judgment: act directly for focused work, delegate when coordination creates leverage.`;
 var PM_PROMPT = `## You are the PM Agent
 
 You are the **PM Agent** (Product Manager) for this task. When identifying yourself, say "I'm the PM Agent (an Aiden agent profile)."
@@ -4913,7 +4908,7 @@ Use these tools, in roughly this order of frequency:
 
 - **Implementor** \u2014 any code change: features, fixes, data, API, UI, tests
 - **Designer** \u2014 interaction, layout, accessibility, visual design
-- **Coordinator** \u2014 multi-agent orchestration where the work is complex enough to need coordination
+- **Orchestrator** \u2014 multi-agent orchestration where the work is complex enough to need coordination
 - **General Agent** \u2014 research, investigation, or work that doesn't fit a specialist
 
 ## How to write a kickoff message
@@ -4947,6 +4942,25 @@ Non-trivial implementations include tests. Break and plan before building when s
 - Files changed, if any
 - How you validated the result
 - Any residual risk or open question`;
+var REVIEW_PROMPT = `## You are the Review Agent
+
+You are the **Review Agent** (an Aiden agent profile) for pull request review sessions. When identifying yourself, say "I'm the Review Agent."
+
+Your job is to inspect the pull request context, reason about correctness and risk, and help the user review the change. Prefer concrete findings tied to files, lines, tests, and behavior. Do not send a review verdict until you have enough evidence.
+
+## How to review
+
+1. Understand the PR goal, linked task context, changed files, and current checks.
+2. Prioritize correctness, regressions, data loss, security, migration risk, and missing tests.
+3. Reuse available contextual comments, file diffs, task metadata, and session history before asking for more context.
+4. Report findings clearly, ordered by severity. If there are no blocking findings, say that and call out residual test gaps.
+
+## Rules
+
+- Do not invent changed files, test results, or PR metadata.
+- Keep feedback actionable and scoped to this PR.
+- Prefer short review comments over broad commentary.
+- Ask one targeted question only when evidence is missing and blocks a useful review.`;
 var IMPLEMENTOR_PROMPT = `## You are the Implementor Agent
 
 You are a senior implementation agent responsible for end-to-end code delivery. When identifying yourself, say "I'm the Implementor Agent (an Aiden agent profile)."
@@ -4983,6 +4997,10 @@ var DESIGNER_PROMPT = `## You are the Designer Agent
 
 You are a product UI designer and frontend interaction specialist. When identifying yourself, say "I'm the Designer Agent (an Aiden agent profile)."
 
+## Taste Skill (premium frontends)
+
+For landing pages, marketing sites, portfolios, or visual redesigns outside the core product shell, read and follow the \`design-taste-frontend\` skill in \`.agents/skills/\` before writing UI. Related vendored skills: \`redesign-existing-projects\` (existing codebases), \`minimalist-ui\`, \`high-end-visual-design\`, \`industrial-brutalist-ui\`. Sync from upstream with \`scripts/sync-taste-skills.sh\`.
+
 ## How to approach the work
 
 1. Think from the user's task flow before touching layout. What is the user trying to do?
@@ -5020,14 +5038,14 @@ You are a product UI designer and frontend interaction specialist. When identify
 var BUILTIN_AGENT_DEFINITIONS = [
   {
     id: "coordinator",
-    name: "Coordinator",
-    description: "Plans work, breaks down tasks, coordinates agents",
+    name: "Orchestrator",
+    description: "Plans work, breaks down tasks, orchestrates agents",
     iconKey: "command",
     defaultMode: "agent",
     capabilities: {
-      canEditFiles: false,
-      canRunCommands: false,
-      canCreateArtifacts: false,
+      canEditFiles: true,
+      canRunCommands: true,
+      canCreateArtifacts: true,
       canStartSessions: true,
       canManageSubtasks: true
     },
@@ -5048,6 +5066,21 @@ var BUILTIN_AGENT_DEFINITIONS = [
     },
     systemPrompt: GENERAL_PROMPT
   },
+  {
+    id: "pr-reviewer",
+    name: "Review Agent",
+    description: "Reviews pull requests and surfaces risks",
+    iconKey: "search-code",
+    defaultMode: "review",
+    capabilities: {
+      canEditFiles: false,
+      canRunCommands: true,
+      canCreateArtifacts: true,
+      canStartSessions: false,
+      canManageSubtasks: false
+    },
+    systemPrompt: REVIEW_PROMPT
+  },
   {
     id: "pm",
     name: "PM Agent",
@@ -5100,7 +5133,6 @@ var LEGACY_AGENT_ID_ALIASES = {
   developer: "implementor",
   implementer: "implementor",
   "ui-designer": "designer",
-  "pr-reviewer": "general",
   verifier: "general"
 };
 function normalizeBuiltinAgentId(agentId) {
@@ -5202,10 +5234,11 @@ function getAidenAgentPrompt(agentId) {
 var SESSION_RESUME_FAILED_MESSAGE = "Session resume failed. The previous session may have expired or is no longer available. Please start a new session.";
 
 // ../agent-core/dist/index.js
+var import_crypto = require("crypto");
 var import_fs = require("fs");
 var import_os = require("os");
 var import_path = require("path");
-var import_crypto = require("crypto");
+var import_crypto2 = require("crypto");
 var import_fs2 = require("fs");
 var import_fs3 = require("fs");
 var import_os2 = require("os");
@@ -5376,6 +5409,7 @@ function normalizeCodexMcpToolResult(output) {
   }
   return raw;
 }
+var MAX_INLINE_GENERATED_IMAGE_BYTES = 20 * 1024 * 1024;
 function findCodexSessionLog(runtimeSessionId, codexHome) {
   if (!runtimeSessionId || !(0, import_fs.existsSync)(codexHome)) return null;
   const root = (0, import_path.join)(codexHome, "sessions");
@@ -5406,14 +5440,106 @@ function findCodexSessionLog(runtimeSessionId, codexHome) {
   matches.sort((a, b) => b.mtimeMs - a.mtimeMs);
   return matches[0]?.path ?? null;
 }
+function inferImageMimeType(buffer) {
+  if (buffer.length >= 8 && buffer.subarray(0, 8).equals(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]))) {
+    return "image/png";
+  }
+  if (buffer.length >= 3 && buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255) {
+    return "image/jpeg";
+  }
+  if (buffer.length >= 6 && (buffer.toString("ascii", 0, 6) === "GIF87a" || buffer.toString("ascii", 0, 6) === "GIF89a")) {
+    return "image/gif";
+  }
+  if (buffer.length >= 12 && buffer.toString("ascii", 0, 4) === "RIFF" && buffer.toString("ascii", 8, 12) === "WEBP") {
+    return "image/webp";
+  }
+  return null;
+}
+function extensionForMimeType(mimeType) {
+  switch (mimeType) {
+    case "image/jpeg":
+      return "jpg";
+    case "image/gif":
+      return "gif";
+    case "image/webp":
+      return "webp";
+    case "image/png":
+    default:
+      return "png";
+  }
+}
+function readImageDimensions(buffer, mimeType) {
+  if (mimeType === "image/png" && buffer.length >= 24) {
+    return { width: buffer.readUInt32BE(16), height: buffer.readUInt32BE(20) };
+  }
+  if (mimeType === "image/gif" && buffer.length >= 10) {
+    return { width: buffer.readUInt16LE(6), height: buffer.readUInt16LE(8) };
+  }
+  if (mimeType === "image/jpeg" && buffer.length > 4) {
+    let offset = 2;
+    while (offset + 9 < buffer.length) {
+      if (buffer[offset] !== 255) break;
+      const marker = buffer[offset + 1];
+      const length = buffer.readUInt16BE(offset + 2);
+      if (length < 2) break;
+      if (marker >= 192 && marker <= 207 && ![196, 200, 204].includes(marker)) {
+        return {
+          width: buffer.readUInt16BE(offset + 7),
+          height: buffer.readUInt16BE(offset + 5)
+        };
+      }
+      offset += 2 + length;
+    }
+  }
+  return { width: null, height: null };
+}
+function buildGeneratedImageFromCodexPayload(payload) {
+  const data = typeof payload.result === "string" ? payload.result : "";
+  if (!data) return null;
+  const buffer = Buffer.from(data, "base64");
+  if (buffer.length <= 0 || buffer.length > MAX_INLINE_GENERATED_IMAGE_BYTES) return null;
+  const mimeType = inferImageMimeType(buffer);
+  if (!mimeType) return null;
+  const callId = typeof payload.call_id === "string" && payload.call_id ? payload.call_id : void 0;
+  const imageId = (0, import_crypto.randomUUID)();
+  const { width, height } = readImageDimensions(buffer, mimeType);
+  return {
+    type: "generated_image",
+    id: imageId,
+    filename: `${callId ?? imageId}.${extensionForMimeType(mimeType)}`,
+    mimeType,
+    size: buffer.length,
+    width,
+    height,
+    data: buffer.toString("base64"),
+    sourceHash: (0, import_crypto.createHash)("sha256").update(buffer).digest("hex"),
+    ...callId ? { toolId: callId } : {},
+    ts: Date.now()
+  };
+}
+function latestUserMessageLineIndex(lines) {
+  let latestIndex = -1;
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (!line) continue;
+    const entry = parseJsonObject(line);
+    const payload = entry && typeof entry.payload === "object" && entry.payload !== null ? entry.payload : null;
+    if (payload?.type === "message" && payload.role === "user") {
+      latestIndex = index;
+    }
+  }
+  return latestIndex;
+}
 async function replayCodexMcpToolEventsFromSessionLog(context, state) {
   const runtimeSessionId = state.runtimeSessionId;
   if (!runtimeSessionId) return;
   const codexHome = context.env.CODEX_HOME || process.env.CODEX_HOME || (0, import_path.join)((0, import_os.homedir)(), ".codex");
   const logPath = findCodexSessionLog(runtimeSessionId, codexHome);
   if (!logPath) return;
+  const allLines = (0, import_fs.readFileSync)(logPath, "utf8").split(/\r?\n/).filter(Boolean);
+  const latestUserLineIndex = latestUserMessageLineIndex(allLines);
+  const lines = latestUserLineIndex >= 0 ? allLines.slice(latestUserLineIndex + 1) : allLines;
   const emittedToolIds = /* @__PURE__ */ new Set();
-  const lines = (0, import_fs.readFileSync)(logPath, "utf8").split(/\r?\n/).filter(Boolean);
   for (const line of lines) {
     const entry = parseJsonObject(line);
     const payload = entry && typeof entry.payload === "object" && entry.payload !== null ? entry.payload : null;
@@ -5433,20 +5559,27 @@ async function replayCodexMcpToolEventsFromSessionLog(context, state) {
       if (!callId) continue;
       context.presenter.onToolUse("tool_search", payload.arguments ?? {}, callId);
       emittedToolIds.add(callId);
+      continue;
+    }
+    if (payload.type === "image_generation_end") {
+      const image = buildGeneratedImageFromCodexPayload(payload);
+      if (image) await context.presenter.onGeneratedImage?.(image);
     }
   }
-  if (emittedToolIds.size === 0) return;
-  for (const line of lines) {
-    const entry = parseJsonObject(line);
-    const payload = entry && typeof entry.payload === "object" && entry.payload !== null ? entry.payload : null;
-    if (!payload || payload.type !== "function_call_output" && payload.type !== "tool_search_output") continue;
-    const callId = typeof payload.call_id === "string" ? payload.call_id : "";
-    if (!emittedToolIds.has(callId)) continue;
-    try {
-      const result = payload.type === "tool_search_output" ? JSON.stringify(payload.tools ?? [], null, 2) : normalizeCodexMcpToolResult(payload.output);
-      context.presenter.onToolResult?.(callId, result);
-    } catch {
-      context.presenter.onToolResult?.(callId, String(payload.output ?? ""));
+  if (emittedToolIds.size > 0) {
+    for (const line of lines) {
+      const entry = parseJsonObject(line);
+      const payload = entry && typeof entry.payload === "object" && entry.payload !== null ? entry.payload : null;
+      if (!payload || payload.type !== "function_call_output" && payload.type !== "tool_search_output")
+        continue;
+      const callId = typeof payload.call_id === "string" ? payload.call_id : "";
+      if (!emittedToolIds.has(callId)) continue;
+      try {
+        const result = payload.type === "tool_search_output" ? JSON.stringify(payload.tools ?? [], null, 2) : normalizeCodexMcpToolResult(payload.output);
+        context.presenter.onToolResult?.(callId, result);
+      } catch {
+        context.presenter.onToolResult?.(callId, String(payload.output ?? ""));
+      }
     }
   }
 }
@@ -5456,7 +5589,7 @@ function kimiSessionId(cwd) {
     resolved = (0, import_fs2.realpathSync)(cwd);
   } catch {
   }
-  return (0, import_crypto.createHash)("md5").update(resolved).digest("hex");
+  return (0, import_crypto2.createHash)("md5").update(resolved).digest("hex");
 }
 function parseKimiStructuredLine(line, context, state) {
   const presenter = context.presenter;
@@ -6138,7 +6271,7 @@ function resolveKimiCliModelArg(model) {
   if (trimmed.startsWith("claude-")) return void 0;
   return trimmed;
 }
-function createKimiCliBackend(command = "kimi", defaultArgs = []) {
+function createKimiCliBackend(command = "kimi-cli", defaultArgs = []) {
   return {
     kind: "kimi_cli",
     supportTier: "structured",
@@ -6964,7 +7097,12 @@ function createCodexRuntimeBackend(command = "codex", defaultArgs = []) {
             const resumeId = ctx.config.runtimeSessionId?.trim() || ctx.config.providerSessionId?.trim();
             const modelArgs = ctx.config.selectedModel?.trim() ? ["--model", ctx.config.selectedModel.trim()] : [];
             const effortArgs = buildCodexEffortArgs(ctx.config.selectedEffortLevel);
-            const permissionArgs = ["--dangerously-bypass-approvals-and-sandbox"];
+            const permissionArgs = [
+              "--ask-for-approval",
+              "never",
+              "--sandbox",
+              "danger-full-access"
+            ];
             const imageArgs = imagePaths.flatMap((p) => ["--image", p]);
             const baseArgs = resumeId ? [...permissionArgs, "exec", "resume", "--json", "--skip-git-repo-check", ...modelArgs, ...effortArgs, ...imageArgs, resumeId, "-"] : [...permissionArgs, "exec", "--json", "--skip-git-repo-check", ...modelArgs, ...effortArgs, ...imageArgs, "-"];
             return [...baseArgs, ...defaultArgs];
@@ -7287,7 +7425,7 @@ Prefer relative paths and keep your work scoped to this project.`
     const promptText = this.buildPromptText(runtimeConfig);
     const runtimeCommand = runtimeConfig.runtimeCommand || this.runtime.runtimeCommand;
     const runtimeArgs = runtimeConfig.runtimeArgs || this.runtime.runtimeArgs || [];
-    const backend = backendKind === "claude_cli" ? createClaudeCliBackend(runtimeCommand || "claude", runtimeArgs) : backendKind === "codex_app_server" ? createCodexRuntimeBackend(runtimeCommand || "codex", runtimeArgs) : backendKind === "copilot_cli" ? createCopilotCliBackend(runtimeCommand || "copilot", runtimeArgs) : backendKind === "cursor_agent_cli" ? createCursorAgentCliBackend(runtimeCommand || "cursor-agent", runtimeArgs) : backendKind === "gemini_cli" ? createGeminiCliBackend(runtimeCommand || "gemini", runtimeArgs) : backendKind === "droid_cli" ? createDroidCliBackend(runtimeCommand || "droid", runtimeArgs) : backendKind === "opencode_cli" ? createOpencodeCliBackend(runtimeCommand || "opencode", runtimeArgs) : backendKind === "kimi_cli" ? createKimiCliBackend(runtimeCommand || "kimi", runtimeArgs) : backendKind === "supatest_cli" ? createSupatestCliBackend(runtimeCommand || "supatest", runtimeArgs) : createGenericCliPassthroughBackend(runtimeCommand || "generic-cli", runtimeArgs);
+    const backend = backendKind === "claude_cli" ? createClaudeCliBackend(runtimeCommand || "claude", runtimeArgs) : backendKind === "codex_app_server" ? createCodexRuntimeBackend(runtimeCommand || "codex", runtimeArgs) : backendKind === "copilot_cli" ? createCopilotCliBackend(runtimeCommand || "copilot", runtimeArgs) : backendKind === "cursor_agent_cli" ? createCursorAgentCliBackend(runtimeCommand || "cursor-agent", runtimeArgs) : backendKind === "gemini_cli" ? createGeminiCliBackend(runtimeCommand || "gemini", runtimeArgs) : backendKind === "droid_cli" ? createDroidCliBackend(runtimeCommand || "droid", runtimeArgs) : backendKind === "opencode_cli" ? createOpencodeCliBackend(runtimeCommand || "opencode", runtimeArgs) : backendKind === "kimi_cli" ? createKimiCliBackend(runtimeCommand || "kimi-cli", runtimeArgs) : backendKind === "supatest_cli" ? createSupatestCliBackend(runtimeCommand || "supatest", runtimeArgs) : createGenericCliPassthroughBackend(runtimeCommand || "generic-cli", runtimeArgs);
     let lastResult = null;
     for (let attempt = 0; attempt <= _BaseMachineAgent.MAX_RETRIES; attempt++) {
       if (this.abortController?.signal.aborted) break;
@@ -7439,7 +7577,7 @@ var PROVIDER_CLI_COMMANDS = {
   copilot_cli: { provider: "copilot_cli", command: "copilot", envVar: "AIDEN_COPILOT_PATH" },
   cursor_agent_cli: { provider: "cursor_agent_cli", command: "cursor-agent", envVar: "AIDEN_CURSOR_AGENT_PATH" },
   gemini_cli: { provider: "gemini_cli", command: "gemini", envVar: "AIDEN_GEMINI_PATH" },
-  kimi_cli: { provider: "kimi_cli", command: "kimi", envVar: "AIDEN_KIMI_PATH" },
+  kimi_cli: { provider: "kimi_cli", command: "kimi-cli", envVar: "AIDEN_KIMI_PATH" },
   opencode_cli: { provider: "opencode_cli", command: "opencode", envVar: "AIDEN_OPENCODE_PATH" },
   droid_cli: { provider: "droid_cli", command: "droid", envVar: "AIDEN_DROID_PATH" },
   supatest_cli: { provider: "supatest_cli", command: "supatest", envVar: "AIDEN_SUPATEST_PATH" }
@@ -7457,13 +7595,13 @@ var BACKEND_CLI_COMMANDS = {
   cursor_agent_cli: "cursor-agent",
   gemini_cli: "gemini",
   gemini: "gemini",
-  kimi_cli: "kimi",
+  kimi_cli: "kimi-cli",
   opencode_cli: "opencode",
   droid_cli: "droid",
   supatest_cli: "supatest"
 };
 var CLI_COMMAND_ALIASES = {
-  kimi: ["kimi-cli"]
+  "kimi-cli": ["kimi"]
 };
 var resolvedCliCache = /* @__PURE__ */ new Map();
 var cachedLoginShellEnv = null;
@@ -7864,6 +8002,46 @@ ${meta.description}`);
       }
       parts2.push(lines.join("\n"));
     }
+    if (config.prMeta) {
+      const pr = config.prMeta;
+      const lines = ["# Pull Request Context"];
+      lines.push(`- **Repo**: ${pr.owner}/${pr.repo}`);
+      lines.push(`- **PR**: #${pr.prNumber} \u2014 ${pr.title}`);
+      lines.push(`- **State**: ${pr.state}`);
+      if (pr.author) lines.push(`- **Author**: ${pr.author}`);
+      const baseHead = `${pr.baseBranch || "?"} \u2190 ${pr.headBranch || "?"}`;
+      lines.push(`- **Base \u2190 Head**: ${baseHead}`);
+      if (pr.mergeable === false) {
+        lines.push(`- **Mergeable**: no`);
+      } else if (pr.mergeable === true) {
+        lines.push(`- **Mergeable**: yes`);
+      }
+      if (pr.labels && pr.labels.length > 0) {
+        lines.push(`- **Labels**: ${pr.labels.join(", ")}`);
+      }
+      const sizeBits = [];
+      if (typeof pr.changedFilesCount === "number") sizeBits.push(`${pr.changedFilesCount} files`);
+      if (typeof pr.additions === "number") sizeBits.push(`+${pr.additions}`);
+      if (typeof pr.deletions === "number") sizeBits.push(`-${pr.deletions}`);
+      if (sizeBits.length > 0) lines.push(`- **Size**: ${sizeBits.join(" / ")}`);
+      if (pr.linkedTaskReadableId) {
+        lines.push(`- **Linked task**: ${pr.linkedTaskReadableId}`);
+      }
+      if (pr.htmlUrl) lines.push(`- **URL**: ${pr.htmlUrl}`);
+      if (pr.body) {
+        lines.push("");
+        lines.push("## PR Description");
+        lines.push(pr.body);
+      }
+      if (pr.changedFiles && pr.changedFiles.length > 0) {
+        lines.push("");
+        lines.push("## Changed Files (first 50)");
+        for (const file of pr.changedFiles) {
+          lines.push(`- ${file.status}: \`${file.path}\` (+${file.additions} / -${file.deletions})`);
+        }
+      }
+      parts2.push(lines.join("\n"));
+    }
     const taskId = config.taskId ?? process.env.AIDEN_TASK_ID;
     const conversationId = config.conversationId ?? process.env.AIDEN_SESSION_ID;
     const teamId = config.teamId;
@@ -7898,15 +8076,128 @@ ${meta.description}`);
   }
 };
 
+// src/generated-images.ts
+var import_node_crypto = require("crypto");
+var import_node_fs2 = require("fs");
+var import_node_path2 = require("path");
+var IMAGE_MIME_BY_EXT = {
+  ".gif": "image/gif",
+  ".jpeg": "image/jpeg",
+  ".jpg": "image/jpeg",
+  ".png": "image/png",
+  ".webp": "image/webp"
+};
+var MAX_GENERATED_IMAGE_BYTES = 20 * 1024 * 1024;
+function collectStringValues(value2, out) {
+  if (typeof value2 === "string") {
+    out.push(value2);
+    return;
+  }
+  if (Array.isArray(value2)) {
+    for (const item of value2) collectStringValues(item, out);
+    return;
+  }
+  if (!value2 || typeof value2 !== "object") return;
+  for (const entry of Object.values(value2)) {
+    collectStringValues(entry, out);
+  }
+}
+function candidateStrings(content) {
+  const values = [content];
+  try {
+    collectStringValues(JSON.parse(content), values);
+  } catch {
+  }
+  return values;
+}
+function extractPathCandidates(content) {
+  const paths = /* @__PURE__ */ new Set();
+  const imagePathPattern = /(?:file:\/\/)?(?:~|\.{1,2}|\/)?[^\s"'`)\]}<>]+?\.(?:png|jpe?g|gif|webp)\b/gi;
+  for (const value2 of candidateStrings(content)) {
+    for (const match of value2.matchAll(imagePathPattern)) {
+      paths.add(match[0]);
+    }
+  }
+  return [...paths];
+}
+function normalizePath(candidate, cwd) {
+  let path = candidate.trim().replace(/^file:\/\//, "");
+  try {
+    path = decodeURI(path);
+  } catch {
+  }
+  if (path.startsWith("~/")) return null;
+  if ((0, import_node_path2.isAbsolute)(path)) return path;
+  return cwd ? (0, import_node_path2.join)(cwd, path) : null;
+}
+function readImageDimensions2(buffer, mimeType) {
+  if (mimeType === "image/png" && buffer.length >= 24 && buffer.toString("ascii", 1, 4) === "PNG") {
+    return { width: buffer.readUInt32BE(16), height: buffer.readUInt32BE(20) };
+  }
+  if (mimeType === "image/gif" && buffer.length >= 10 && buffer.toString("ascii", 0, 3) === "GIF") {
+    return { width: buffer.readUInt16LE(6), height: buffer.readUInt16LE(8) };
+  }
+  if (mimeType === "image/jpeg" && buffer.length > 4) {
+    let offset = 2;
+    while (offset + 9 < buffer.length) {
+      if (buffer[offset] !== 255) break;
+      const marker = buffer[offset + 1];
+      const length = buffer.readUInt16BE(offset + 2);
+      if (length < 2) break;
+      if (marker >= 192 && marker <= 207 && ![196, 200, 204].includes(marker)) {
+        return {
+          width: buffer.readUInt16BE(offset + 7),
+          height: buffer.readUInt16BE(offset + 5)
+        };
+      }
+      offset += 2 + length;
+    }
+  }
+  return { width: null, height: null };
+}
+function extractGeneratedImagesFromToolResult(toolId, content, cwd) {
+  const images = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const candidate of extractPathCandidates(content)) {
+    const path = normalizePath(candidate, cwd);
+    if (!path || seen.has(path) || !(0, import_node_fs2.existsSync)(path)) continue;
+    seen.add(path);
+    const ext = (0, import_node_path2.extname)(path).toLowerCase();
+    const mimeType = IMAGE_MIME_BY_EXT[ext];
+    if (!mimeType) continue;
+    const stat = (0, import_node_fs2.statSync)(path);
+    if (!stat.isFile() || stat.size <= 0 || stat.size > MAX_GENERATED_IMAGE_BYTES) continue;
+    const buffer = (0, import_node_fs2.readFileSync)(path);
+    const { width, height } = readImageDimensions2(buffer, mimeType);
+    images.push({
+      type: "generated_image",
+      id: (0, import_node_crypto.randomUUID)(),
+      filename: (0, import_node_path2.basename)(path),
+      mimeType,
+      size: buffer.length,
+      width,
+      height,
+      data: buffer.toString("base64"),
+      sourcePath: path,
+      sourceHash: (0, import_node_crypto.createHash)("sha256").update(buffer).digest("hex"),
+      toolId,
+      ts: Date.now()
+    });
+  }
+  return images;
+}
+
 // src/web-presenter.ts
 var WebPresenter = class {
-  wsClient;
-  conversationId;
-  suppressSessionLifecycle = false;
-  constructor(wsClient, conversationId) {
+  constructor(wsClient, conversationId, cwd) {
+    this.cwd = cwd;
     this.wsClient = wsClient;
     this.conversationId = conversationId;
   }
+  wsClient;
+  conversationId;
+  emittedGeneratedImageKeys = /* @__PURE__ */ new Set();
+  suppressSessionLifecycle = false;
   setSuppressSessionLifecycle(suppress) {
     this.suppressSessionLifecycle = suppress;
   }
@@ -7933,6 +8224,19 @@ var WebPresenter = class {
       ts: Date.now(),
       ...isError ? { is_error: true } : {}
     });
+    if (isError) return;
+    for (const image of extractGeneratedImagesFromToolResult(toolId, content, this.cwd)) {
+      this.emitGeneratedImage(image);
+    }
+  }
+  onGeneratedImage(image) {
+    this.emitGeneratedImage(image);
+  }
+  emitGeneratedImage(image) {
+    const key = image.sourceHash ?? `${image.sourcePath ?? image.id}:${image.size}`;
+    if (this.emittedGeneratedImageKeys.has(key)) return;
+    this.emittedGeneratedImageKeys.add(key);
+    this.wsClient.emitEvent(image);
   }
   onTurnComplete(content) {
     this.wsClient.emitEvent({ type: "turn_complete", content, ts: Date.now() });
@@ -11610,6 +11914,7 @@ var WSClient = class {
         selectedEffortLevel: data.selectedEffortLevel,
         mode: data.mode,
         taskMeta: data.taskMeta,
+        prMeta: data.prMeta,
         workflowTools: data.workflowTools,
         runId: data.runId,
         messageId: data.messageId,
@@ -11635,7 +11940,7 @@ var WSClient = class {
 };
 
 // src/version.ts
-var AGENT_VERSION = "0.1.16";
+var AGENT_VERSION = "0.1.17";
 
 // src/sandbox.ts
 async function runSandbox(config) {
@@ -11645,6 +11950,7 @@ async function runSandbox(config) {
   let pendingMessageResolve = null;
   let currentAgent = null;
   let currentTaskMeta = void 0;
+  let currentPrMeta = void 0;
   let currentWorkflowTools = void 0;
   let currentMaxIterations = config.maxIterations ?? 50;
   let currentTaskId = config.taskId;
@@ -11697,7 +12003,7 @@ async function runSandbox(config) {
     console.error("[sandbox] Failed to connect to WS server:", error.message);
     process.exit(1);
   }
-  const presenter = new WebPresenter(wsClient, config.sessionId);
+  const presenter = new WebPresenter(wsClient, config.sessionId, config.projectPath);
   presenter.setSuppressSessionLifecycle(true);
   let lastProviderSessionId = config.providerSessionId;
   let activeBackendKind = config.backendKind || "claude_cli";
@@ -11729,6 +12035,7 @@ async function runSandbox(config) {
           selectedEffortLevel: activeEffortLevel ?? null,
           providerSessionId: lastProviderSessionId ?? void 0,
           taskMeta: currentTaskMeta,
+          prMeta: currentPrMeta,
           taskId: currentTaskId,
           conversationId: currentConversationId,
           teamId: currentTeamId,
@@ -11791,6 +12098,9 @@ async function runSandbox(config) {
     if (nextPayload.taskMeta !== void 0) {
       currentTaskMeta = nextPayload.taskMeta;
     }
+    if (nextPayload.prMeta !== void 0) {
+      currentPrMeta = nextPayload.prMeta;
+    }
     if (nextPayload.workflowTools !== void 0) {
       currentWorkflowTools = nextPayload.workflowTools;
     }
@@ -11821,17 +12131,17 @@ async function runSandbox(config) {
 }
 
 // src/daemon.ts
-var import_node_fs3 = require("fs");
+var import_node_fs4 = require("fs");
 var import_node_http = __toESM(require("http"), 1);
-var import_node_crypto = require("crypto");
+var import_node_crypto2 = require("crypto");
 var import_node_os4 = require("os");
-var import_node_path3 = require("path");
+var import_node_path4 = require("path");
 
 // ../shared/dist/node/provider-limits.js
 var import_node_child_process3 = require("child_process");
-var import_node_fs2 = require("fs");
+var import_node_fs3 = require("fs");
 var import_node_os3 = require("os");
-var import_node_path2 = require("path");
+var import_node_path3 = require("path");
 var CACHE_TTL_MS = 6e4;
 var cachedLimits = null;
 function numericValue(value2) {
@@ -11843,11 +12153,11 @@ function numericValue(value2) {
   return null;
 }
 function splitPath2(value2) {
-  return (value2 ?? "").split(import_node_path2.delimiter).filter(Boolean);
+  return (value2 ?? "").split(import_node_path3.delimiter).filter(Boolean);
 }
 function isExecutableFile(path) {
   try {
-    (0, import_node_fs2.accessSync)(path, import_node_fs2.constants.X_OK);
+    (0, import_node_fs3.accessSync)(path, import_node_fs3.constants.X_OK);
     return true;
   } catch {
     return false;
@@ -11856,10 +12166,10 @@ function isExecutableFile(path) {
 function augmentCliPath2(env) {
   const home = env.HOME || (0, import_node_os3.homedir)();
   const extraPaths = [
-    (0, import_node_path2.join)(home, ".local", "bin"),
-    (0, import_node_path2.join)(home, ".local", "node", "bin"),
-    (0, import_node_path2.join)(home, ".bun", "bin"),
-    (0, import_node_path2.join)(home, ".cargo", "bin"),
+    (0, import_node_path3.join)(home, ".local", "bin"),
+    (0, import_node_path3.join)(home, ".local", "node", "bin"),
+    (0, import_node_path3.join)(home, ".bun", "bin"),
+    (0, import_node_path3.join)(home, ".cargo", "bin"),
     "/opt/homebrew/bin",
     "/usr/local/bin"
   ];
@@ -11869,7 +12179,7 @@ function augmentCliPath2(env) {
     return env;
   return {
     ...env,
-    PATH: `${missing.join(import_node_path2.delimiter)}${import_node_path2.delimiter}${env.PATH ?? ""}`
+    PATH: `${missing.join(import_node_path3.delimiter)}${import_node_path3.delimiter}${env.PATH ?? ""}`
   };
 }
 function resolveExecutable(command, env, overrideEnvVar) {
@@ -11877,7 +12187,7 @@ function resolveExecutable(command, env, overrideEnvVar) {
   if (override && isExecutableFile(override))
     return override;
   for (const dir of splitPath2(env.PATH)) {
-    const candidate = (0, import_node_path2.join)(dir, command);
+    const candidate = (0, import_node_path3.join)(dir, command);
     if (isExecutableFile(candidate))
       return candidate;
   }
@@ -12021,10 +12331,10 @@ async function collectCodexLimits(env) {
   }), 4e3, []);
 }
 function readClaudeCredentialsPayload() {
-  const path = (0, import_node_path2.join)((0, import_node_os3.homedir)(), ".claude", ".credentials.json");
-  if ((0, import_node_fs2.existsSync)(path)) {
+  const path = (0, import_node_path3.join)((0, import_node_os3.homedir)(), ".claude", ".credentials.json");
+  if ((0, import_node_fs3.existsSync)(path)) {
     try {
-      return JSON.parse((0, import_node_fs2.readFileSync)(path, "utf8"));
+      return JSON.parse((0, import_node_fs3.readFileSync)(path, "utf8"));
     } catch {
       return null;
     }
@@ -12125,33 +12435,33 @@ function describeOccupiedLocalDaemon(port) {
   return `local daemon API port ${port} is already in use. If Aiden desktop is open, it manages the daemon automatically. Quit Aiden desktop or stop the existing daemon before starting another.`;
 }
 function getConfigPath() {
-  return process.env.AIDEN_AGENT_CONFIG_PATH ?? (0, import_node_path3.join)((0, import_node_os4.homedir)(), ".aiden", "agent", "config.json");
+  return process.env.AIDEN_AGENT_CONFIG_PATH ?? (0, import_node_path4.join)((0, import_node_os4.homedir)(), ".aiden", "agent", "config.json");
 }
 function getEndpointDefaultsPath() {
-  return process.env.AIDEN_AGENT_ENDPOINTS_PATH ?? (0, import_node_path3.join)((0, import_node_path3.dirname)(getConfigPath()), "endpoints.json");
+  return process.env.AIDEN_AGENT_ENDPOINTS_PATH ?? (0, import_node_path4.join)((0, import_node_path4.dirname)(getConfigPath()), "endpoints.json");
 }
 function readConfig() {
   const configPath = getConfigPath();
-  if (!(0, import_node_fs3.existsSync)(configPath)) return {};
-  return JSON.parse((0, import_node_fs3.readFileSync)(configPath, "utf8"));
+  if (!(0, import_node_fs4.existsSync)(configPath)) return {};
+  return JSON.parse((0, import_node_fs4.readFileSync)(configPath, "utf8"));
 }
 function readEndpointDefaults() {
   const endpointsPath = getEndpointDefaultsPath();
-  if (!(0, import_node_fs3.existsSync)(endpointsPath)) return {};
+  if (!(0, import_node_fs4.existsSync)(endpointsPath)) return {};
   try {
-    return JSON.parse((0, import_node_fs3.readFileSync)(endpointsPath, "utf8"));
+    return JSON.parse((0, import_node_fs4.readFileSync)(endpointsPath, "utf8"));
   } catch {
     return {};
   }
 }
 function writeConfig(config) {
   const configPath = getConfigPath();
-  (0, import_node_fs3.mkdirSync)((0, import_node_path3.dirname)(configPath), { recursive: true, mode: 448 });
-  (0, import_node_fs3.writeFileSync)(configPath, JSON.stringify(config, null, 2), { mode: 384 });
+  (0, import_node_fs4.mkdirSync)((0, import_node_path4.dirname)(configPath), { recursive: true, mode: 448 });
+  (0, import_node_fs4.writeFileSync)(configPath, JSON.stringify(config, null, 2), { mode: 384 });
 }
 function removeConfig() {
   const configPath = getConfigPath();
-  if ((0, import_node_fs3.existsSync)(configPath)) (0, import_node_fs3.rmSync)(configPath, { force: true });
+  if ((0, import_node_fs4.existsSync)(configPath)) (0, import_node_fs4.rmSync)(configPath, { force: true });
 }
 function argValue(args, name) {
   const index = args.indexOf(name);
@@ -12238,7 +12548,7 @@ function collectRuntimeMetadata() {
     metadata.cpuCores = cpuList.length;
   }
   try {
-    const disk = (0, import_node_fs3.statfsSync)((0, import_node_os4.homedir)());
+    const disk = (0, import_node_fs4.statfsSync)((0, import_node_os4.homedir)());
     metadata.diskFreeBytes = disk.bavail * disk.bsize;
     metadata.diskTotalBytes = disk.blocks * disk.bsize;
   } catch {
@@ -12257,11 +12567,13 @@ async function collectRuntimeMetadataWithProviderLimits() {
   return metadata;
 }
 var RuntimePresenter = class {
-  constructor(socket, conversationId, runId) {
+  constructor(socket, conversationId, runId, cwd) {
     this.socket = socket;
     this.conversationId = conversationId;
     this.runId = runId;
+    this.cwd = cwd;
   }
+  emittedGeneratedImageKeys = /* @__PURE__ */ new Set();
   emitEvent(event) {
     this.socket.emit("agent.event", {
       conversationId: this.conversationId,
@@ -12292,6 +12604,19 @@ var RuntimePresenter = class {
       ts: Date.now(),
       ...isError ? { is_error: true } : {}
     });
+    if (isError) return;
+    for (const image of extractGeneratedImagesFromToolResult(toolId, content, this.cwd)) {
+      this.emitGeneratedImage(image);
+    }
+  }
+  onGeneratedImage(image) {
+    this.emitGeneratedImage(image);
+  }
+  emitGeneratedImage(image) {
+    const key = image.sourceHash ?? `${image.sourcePath ?? image.id}:${image.size}`;
+    if (this.emittedGeneratedImageKeys.has(key)) return;
+    this.emittedGeneratedImageKeys.add(key);
+    this.emitEvent(image);
   }
   onTurnComplete(content) {
     this.emitEvent({ type: "turn_complete", content, ts: Date.now() });
@@ -12376,7 +12701,7 @@ async function setupDaemon(args) {
     runtimeId: body.runtime.id,
     runtimeToken: body.runtimeToken,
     localApiPort: getLocalApiPort(args, {}),
-    localApiToken: (0, import_node_crypto.randomBytes)(24).toString("hex"),
+    localApiToken: (0, import_node_crypto2.randomBytes)(24).toString("hex"),
     displayName: body.runtime.displayName ?? displayName
   });
   console.info("[aiden-agent] Runtime registered", { runtimeId: body.runtime.id, configPath: getConfigPath() });
@@ -12422,7 +12747,7 @@ async function loginWithDeviceCode(args) {
       runtimeId: body.runtime.id,
       runtimeToken: body.runtimeToken,
       localApiPort: getLocalApiPort(args, {}),
-      localApiToken: (0, import_node_crypto.randomBytes)(24).toString("hex"),
+      localApiToken: (0, import_node_crypto2.randomBytes)(24).toString("hex"),
       displayName: body.runtime.displayName ?? displayName
     });
     console.info("[aiden-agent] Runtime registered", { runtimeId: body.runtime.id, configPath: getConfigPath() });
@@ -12436,7 +12761,7 @@ async function startDaemon(args) {
   const runtimeToken = argValue(args, "--token") ?? process.env.AIDEN_RUNTIME_TOKEN ?? stored.runtimeToken;
   const wsUrl = argValue(args, "--ws-url") ?? process.env.AIDEN_WS_URL ?? stored.wsUrl;
   let localApiPort = getLocalApiPort(args, stored);
-  const localApiToken = stored.localApiToken ?? (0, import_node_crypto.randomBytes)(24).toString("hex");
+  const localApiToken = stored.localApiToken ?? (0, import_node_crypto2.randomBytes)(24).toString("hex");
   if (!runtimeId || !runtimeToken || !wsUrl) {
     throw new Error("daemon requires runtimeId, runtime token, and wsUrl. Run setup first or pass --runtime-id/--token/--ws-url.");
   }
@@ -12508,13 +12833,13 @@ async function startDaemon(args) {
     }
     socket.emit("agent.accepted", { runId: payload.runId });
     pushLog(`accepted run=${payload.runId}`);
-    const presenter = new RuntimePresenter(socket, payload.conversationId, payload.runId);
+    const cwd = payload.projectPath ?? process.cwd();
+    const presenter = new RuntimePresenter(socket, payload.conversationId, payload.runId, cwd);
     const agent = new CoreAgent(presenter, {
       backendKind,
       runtimeCommand,
       providerApiKey: payload.providerApiKey
     });
-    const cwd = payload.projectPath ?? process.cwd();
     activeAgents.set(payload.runId, { agent, presenter });
     void agent.run({
       task: payload.content,
@@ -12531,6 +12856,7 @@ async function startDaemon(args) {
       selectedEffortLevel: payload.selectedEffortLevel ?? null,
       providerSessionId: payload.providerSessionId,
       taskMeta: payload.taskMeta,
+      prMeta: payload.prMeta,
       conversationId: payload.conversationId,
       taskId: payload.taskMeta?.id,
       teamId: payload.teamId,

package/dist/updater.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updater.d.ts","sourceRoot":"","sources":["../src/updater.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAe5E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAmBjE"}
+{"version":3,"file":"updater.d.ts","sourceRoot":"","sources":["../src/updater.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAmB5E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAmBjE"}

package/dist/updater.js

@@ -10,6 +10,10 @@ const DEFAULT_PATH = "/home/user/.local/node/bin:/home/user/.local/bin:/usr/loca
  */
 export async function installUpdate(payload) {
     const version = payload.version ?? "latest";
+    if (!/^[\w.\-+]+$/.test(version)) {
+        console.error(`[updater] Refusing to install: invalid version string "${version}"`);
+        return false;
+    }
     try {
         console.info(`[updater] Installing @aiden-ade/sandbox-agent@${version} via npm`);
         execSync(`npm install -g @aiden-ade/sandbox-agent@${version}`, {

package/dist/updater.js.map

@@ -1 +1 @@
-{"version":3,"file":"updater.js","sourceRoot":"","sources":["../src/updater.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,YAAY,GAAG,+GAA+G,CAAC;AAOrI;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,iDAAiD,OAAO,UAAU,CAAC,CAAC;QACjF,QAAQ,CAAC,2CAA2C,OAAO,EAAE,EAAE;YAC7D,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;YAC3C,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,qBAA8B;IACzD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,qBAAqB,EAAE,CAAC;QAC1B,GAAG,CAAC,yBAAyB,GAAG,qBAAqB,CAAC;IACxD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE;QACrC,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;KACpC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,wDAAwD;IACxD,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,EAAE,GAAG,CAAC,CAAC;AACV,CAAC"}
+{"version":3,"file":"updater.js","sourceRoot":"","sources":["../src/updater.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,YAAY,GAAG,+GAA+G,CAAC;AAOrI;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC5C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,0DAA0D,OAAO,GAAG,CAAC,CAAC;QACpF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,iDAAiD,OAAO,UAAU,CAAC,CAAC;QACjF,QAAQ,CAAC,2CAA2C,OAAO,EAAE,EAAE;YAC7D,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;YAC3C,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,qBAA8B;IACzD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,qBAAqB,EAAE,CAAC;QAC1B,GAAG,CAAC,yBAAyB,GAAG,qBAAqB,CAAC;IACxD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE;QACrC,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;KACpC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,wDAAwD;IACxD,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,EAAE,GAAG,CAAC,CAAC;AACV,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiden-ade/sandbox-agent",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "type": "module",
   "bin": {
     "aiden-agent": "./dist/index.cjs"

package/dist/aiden-system-prompt.d.ts

@@ -1,6 +0,0 @@
-/**
- * Re-exports from the canonical shared system prompt.
- * Single source of truth: packages/shared/src/agent/system-prompt.ts
- */
-export * from "@aiden/shared/agent";
-//# sourceMappingURL=aiden-system-prompt.d.ts.map

package/dist/aiden-system-prompt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"aiden-system-prompt.d.ts","sourceRoot":"","sources":["../src/aiden-system-prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,qBAAqB,CAAC"}

package/dist/aiden-system-prompt.js

@@ -1,6 +0,0 @@
-/**
- * Re-exports from the canonical shared system prompt.
- * Single source of truth: packages/shared/src/agent/system-prompt.ts
- */
-export * from "@aiden/shared/agent";
-//# sourceMappingURL=aiden-system-prompt.js.map

package/dist/aiden-system-prompt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"aiden-system-prompt.js","sourceRoot":"","sources":["../src/aiden-system-prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,qBAAqB,CAAC"}