@aragon-agent/cli 0.6.46 → 0.6.48

package/dist/agent/invocation-card.js

@@ -1,169 +0,0 @@
-/**
- * Invocation cards (tui-invocation-cards): what a transcript shows INSTEAD of the
- * system prompt a command submitted on the user's behalf.
- *
- * Pure and total: no IO, no React, no Ink, nothing but `import type`. ASCII ONLY -
- * `src/agent/**` new files sit inside the `glyphs.test.ts` scan scope.
- *
- * ONE CONSTRUCTOR (I-3). `buildInvocationCard` is the only function that turns raw
- * command-layer material into a card, `App.submitMessage` is its only caller, and
- * `sanitizeInvocationCard` (the session-load path) shares its normaliser so a card
- * written today and a card read back tomorrow cannot drift apart.
- *
- * ORDER IS REDACT -> NORMALISE -> LIMIT, and it is the load-bearing part (I-6). Cut
- * first and a secret that straddles the cut leaves a prefix shorter than the
- * redaction patterns' minimum length: the half-key sails through into the
- * transcript, the session file and the exit replay.
- */
-/**
- * The renderer, the height estimate and the loader all read THESE numbers (I-4).
- * A card's height is a function of its data and these limits, so it is bounded:
- * header + `inputMaxLines` + hidden tail + note.
- */
-export const INVOCATION_LIMITS = {
-    commandLineMaxChars: 2000,
-    inputMaxChars: 480,
-    inputMaxLines: 8,
-    nameMaxChars: 64,
-    factsMax: 5,
-    factMaxChars: 28,
-    noteMaxChars: 140,
-};
-const VARIANTS = ['skill', 'team', 'todo', 'govern'];
-// C0 except TAB (\x09) and LF (\x0a), then DEL and C1 (which includes the 8-bit CSI
-// \x9b). Matches the range `QueueOverlay` strips, so the card is no more permissive.
-// eslint-disable-next-line no-control-regex
-const CONTROL_CHARS = /[\x00-\x08\x0b-\x1f\x7f-\x9f]/g;
-const CAP_MARK = '...';
-/** Cut at a code-point boundary: a surrogate pair is never split. */
-function sliceCodePoints(text, count) {
-    if (count <= 0)
-        return '';
-    if (text.length <= count)
-        return text;
-    let end = count;
-    const last = text.charCodeAt(end - 1);
-    // A high surrogate at the cut would orphan its low half.
-    if (last >= 0xd800 && last <= 0xdbff)
-        end -= 1;
-    return text.slice(0, end);
-}
-function countCodePoints(text) {
-    let count = 0;
-    for (const _ of text)
-        count += 1;
-    return count;
-}
-/** CRLF and bare CR to LF (a bare CR returns Ink's cursor to column 0), then strip controls. */
-function normalizeText(text) {
-    return text.replace(/\r\n?/g, '\n').replace(CONTROL_CHARS, '');
-}
-function capCommandLine(text) {
-    const max = INVOCATION_LIMITS.commandLineMaxChars;
-    if (text.length <= max)
-        return text;
-    return sliceCodePoints(text, max - CAP_MARK.length) + CAP_MARK;
-}
-function capInput(text) {
-    const trimmed = text.trim();
-    if (trimmed === '')
-        return { input: '', hidden: 0 };
-    const lines = trimmed.split('\n');
-    let kept = lines.length > INVOCATION_LIMITS.inputMaxLines
-        ? lines.slice(0, INVOCATION_LIMITS.inputMaxLines).join('\n') : trimmed;
-    kept = sliceCodePoints(kept, INVOCATION_LIMITS.inputMaxChars).trimEnd();
-    return { input: kept, hidden: countCodePoints(trimmed) - countCodePoints(kept) };
-}
-function capSingleLine(text, max) {
-    const flat = text.replace(/\s+/g, ' ').trim();
-    if (countCodePoints(flat) <= max)
-        return flat;
-    return sliceCodePoints(flat, max - CAP_MARK.length) + CAP_MARK;
-}
-function capFacts(facts) {
-    return facts
-        .map((fact) => capSingleLine(fact, INVOCATION_LIMITS.factMaxChars))
-        .filter((fact) => fact !== '')
-        .slice(0, INVOCATION_LIMITS.factsMax);
-}
-function capNote(note) {
-    if (note === undefined)
-        return undefined;
-    const capped = capSingleLine(note, INVOCATION_LIMITS.noteMaxChars);
-    return capped === '' ? undefined : capped;
-}
-/** Shared by the write path and the load path so the two cannot diverge. */
-function assemble(parts) {
-    const { input, hidden } = capInput(normalizeText(parts.input));
-    const note = capNote(normalizeText(parts.note ?? ''));
-    return {
-        variant: parts.variant,
-        name: capSingleLine(normalizeText(parts.name), INVOCATION_LIMITS.nameMaxChars),
-        commandLine: capCommandLine(normalizeText(parts.commandLine).trim()),
-        input,
-        inputHidden: hidden,
-        facts: capFacts(parts.facts.map(normalizeText)),
-        ...(note !== undefined ? { note } : {}),
-    };
-}
-/**
- * Total, never throws. `redact` is injected (the same closure `Command:` echo uses) so
- * this module depends on nothing; the default is the identity for tests and the loader.
- */
-export function buildInvocationCard(input, redact = (text) => text) {
-    const scrub = (text) => {
-        if (text === undefined)
-            return '';
-        try {
-            return redact(text);
-        }
-        catch {
-            return '';
-        }
-    };
-    return assemble({
-        variant: input.variant,
-        name: scrub(input.name),
-        commandLine: scrub(input.commandLine),
-        input: scrub(input.input),
-        facts: (input.facts ?? []).map((fact) => scrub(fact)),
-        note: input.note === undefined ? undefined : scrub(input.note),
-    });
-}
-function asString(value) {
-    return typeof value === 'string' ? value : null;
-}
-/**
- * Session-load path: `null` for anything that is not a plausible card, so the caller
- * drops the field and the entry degrades to a plain user message (I-7). Re-derives
- * `inputHidden` from nothing - it trusts the stored count only when it is a sane integer.
- */
-export function sanitizeInvocationCard(value) {
-    if (typeof value !== 'object' || value === null)
-        return null;
-    const raw = value;
-    const variant = VARIANTS.find((candidate) => candidate === raw.variant);
-    const commandLine = asString(raw.commandLine);
-    if (variant === undefined || commandLine === null)
-        return null;
-    const name = asString(raw.name) ?? '';
-    const input = asString(raw.input) ?? '';
-    const facts = Array.isArray(raw.facts)
-        ? raw.facts.filter((fact) => typeof fact === 'string') : [];
-    const note = asString(raw.note) ?? undefined;
-    const card = assemble({ variant, name, commandLine, input, facts, note });
-    // A stored card that was already capped must keep its recorded `inputHidden`; the
-    // re-cap above can only ever add to it.
-    const stored = raw.inputHidden;
-    const storedHidden = typeof stored === 'number' && Number.isInteger(stored) && stored > 0
-        ? Math.min(stored, 10_000_000) : 0;
-    return { ...card, inputHidden: Math.max(card.inputHidden, storedHidden) };
-}
-/**
- * Emergency kill switch (`ARAGON_NO_INVOCATION_CARDS=1`): every command and the App fall
- * back to the pre-card behaviour. Read at call time, not import time, so a test (or a
- * wrapper script) that sets the variable after load is honoured.
- */
-export function invocationCardsEnabled(env = process.env) {
-    return env.ARAGON_NO_INVOCATION_CARDS !== '1';
-}

package/dist/agent/model-probe-limits.d.ts

@@ -1,39 +0,0 @@
-/**
- * Structural bounds for the profile connection probe (model-profile-connection-test §7).
- *
- * STRUCTURAL, NOT POLICY: nothing here is clamped, persisted or user-tunable. These
- * are the physical limits of one probe - how long a single round trip may take, how
- * many lines and characters a result may occupy, how many models a list page can
- * carry before it must truncate. The user-tunable keys live in `config/schema.ts`.
- *
- * THE OUTPUT-TOKEN CAP IS DELIBERATELY ABSENT. It must come from core's
- * `MIN_MAX_OUTPUT_TOKENS`, or this file becomes a second authority for "how many
- * tokens may this model produce" - which is exactly what `output-limits.ts` exists
- * to prevent.
- *
- * ASCII ONLY: this module lives in `agent/`, which `glyphs.test.ts::inScope` scans.
- */
-export interface ProbeLimits {
-    /** Ceiling on ONE real round trip (`complete`). */
-    testTimeoutMs: number;
-    /**
-     * Sub-budget for the best-effort model list that runs CONCURRENTLY with the
-     * completion. It never decides the verdict (§4.3 / RV-P1-1): a slow `/models`
-     * that ate the adapter's own 15 s discovery timeout would turn a healthy
-     * connection into a false `timeout`.
-     */
-    listModelsBudgetMs: number;
-    /** Ceiling on a discovery (`listModels`) issued from the list page. */
-    discoveryTimeoutMs: number;
-    /** Characters of the model's reply kept for the `Reply:` line. */
-    replyChars: number;
-    /** Characters of a locally composed failure sentence. */
-    detailChars: number;
-    /** Rows a list page may carry before `truncated` becomes true. */
-    maxListedModels: number;
-    /** Above this many rows the list page grows a search line (picker parity). */
-    searchThreshold: number;
-    /** Characters of a model's display name kept in one list row. */
-    maxNameChars: number;
-}
-export declare const PROBE_LIMITS: ProbeLimits;

package/dist/agent/model-probe-limits.js

@@ -1,25 +0,0 @@
-/**
- * Structural bounds for the profile connection probe (model-profile-connection-test §7).
- *
- * STRUCTURAL, NOT POLICY: nothing here is clamped, persisted or user-tunable. These
- * are the physical limits of one probe - how long a single round trip may take, how
- * many lines and characters a result may occupy, how many models a list page can
- * carry before it must truncate. The user-tunable keys live in `config/schema.ts`.
- *
- * THE OUTPUT-TOKEN CAP IS DELIBERATELY ABSENT. It must come from core's
- * `MIN_MAX_OUTPUT_TOKENS`, or this file becomes a second authority for "how many
- * tokens may this model produce" - which is exactly what `output-limits.ts` exists
- * to prevent.
- *
- * ASCII ONLY: this module lives in `agent/`, which `glyphs.test.ts::inScope` scans.
- */
-export const PROBE_LIMITS = {
-    testTimeoutMs: 20_000,
-    listModelsBudgetMs: 5_000,
-    discoveryTimeoutMs: 20_000,
-    replyChars: 60,
-    detailChars: 160,
-    maxListedModels: 400,
-    searchThreshold: 8,
-    maxNameChars: 48,
-};

package/dist/agent/model-probe.d.ts

@@ -1,104 +0,0 @@
-/**
- * The connection probe behind `Test connection` and `Discover models`
- * (model-profile-connection-test §4.2-§4.8).
- *
- * WHY THIS IS NOT `ModelRegistry.discoverModels()`: that path folds every exception
- * into `[]` and stores the result in a five-minute process-wide cache. Using it here
- * would (a) collapse "wrong key", "wrong URL" and "this account owns no models" into
- * one sentence, and (b) let a probe of an UNSAVED draft endpoint poison `/model`,
- * `/context` and the main session's window resolution for five minutes. So the probe
- * talks to the adapter directly and classifies by `LLMError.errorType`.
- *
- * WHY `complete()` AND NOT ONLY `listModels()`: a model can be listed and still be
- * unable to generate (gateway aliases, permission layers). One real round trip is the
- * only honest answer to "does this work right now", and it is also the only evidence
- * that can produce `model_not_found`.
- *
- * ASCII ONLY: `agent/` is inside `glyphs.test.ts::inScope`.
- */
-import { type ProviderRegistry } from '@aragon-agent/core';
-/** Every way a probe can fail, once and for all (§7). */
-export type ProbeFailureKind = 'missing_key' | 'unsupported_provider' | 'invalid_base_url' | 'auth' | 'model_not_found' | 'invalid_request' | 'rate_limit' | 'provider_unavailable' | 'network' | 'timeout' | 'cancelled' | 'unknown';
-export interface ProbeTarget {
-    provider: string;
-    /** `''` means "no model typed yet" - the probe then only lists models. */
-    model: string;
-    baseUrl: string | null;
-    /** The RESOLVED plaintext key from `resolveDraftKey()`, never `editor.apiKey`. */
-    apiKey: string | null;
-}
-export interface ProbeRequest extends ProbeTarget {
-    signal?: AbortSignal;
-}
-export interface ProbeOutcome {
-    ok: boolean;
-    /** Fingerprint of the target this outcome describes (§4.6). */
-    targetId: string;
-    latencyMs: number;
-    kind?: ProbeFailureKind;
-    /** Locally composed, already redacted sentence. Never provider response text. */
-    detail?: string;
-    reply?: string;
-    usage?: {
-        inputTokens: number;
-        outputTokens: number;
-    };
-    availableModels?: number;
-    modelListed?: boolean;
-}
-export interface ModelCandidate {
-    id: string;
-    name: string;
-    contextWindow?: number;
-    supportsTools: boolean;
-}
-export interface DiscoveryOutcome {
-    ok: boolean;
-    connectionId: string;
-    kind?: ProbeFailureKind;
-    detail?: string;
-    models: ModelCandidate[];
-    truncated: boolean;
-    /**
-     * How many models the endpoint returned BEFORE truncation. The truncation line
-     * needs the real number ("Showing first 400 of 960"), and re-deriving it from a
-     * clamped array is impossible.
-     */
-    total?: number;
-}
-export interface ModelProbe {
-    test(request: ProbeRequest): Promise<ProbeOutcome>;
-    discover(request: ProbeRequest): Promise<DiscoveryOutcome>;
-    targetFingerprint(target: ProbeTarget): string;
-    connectionFingerprint(target: ProbeTarget): string;
-}
-export interface ProbeDeps {
-    registry: Pick<ProviderRegistry, 'get'>;
-    /** Injected clock; tests pin `latencyMs` through it. */
-    now?: () => number;
-}
-/**
- * Which key this draft would actually use (§4.2.1).
- *
- * The editor's `apiKey` field is ALWAYS the empty string: it is the replacement
- * input, not the live credential. `finishProfileEditor` resolves `keep` to the
- * saved entry key and `shared` to `null`, and the runtime then falls back to the
- * shared per-provider key. Without this table the most common path - editing an
- * existing profile, whose credential mode defaults to `keep` - would report
- * `(no key)` for a profile that has one.
- */
-export declare function resolveDraftKey(input: {
-    credentialMode: 'keep' | 'replace' | 'shared';
-    draftKey: string;
-    existingKey: string | null;
-    sharedKey?: string;
-}): string | null;
-/**
- * The host a failure sentence names - same four clauses as
- * `profileEndpointSummary()` in `ui/overlays/ModelProfilePicker.tsx`, which this
- * layer may not import (agent -> ui would invert the layering). `model-probe.test.ts`
- * asserts the two agree, so the duplication cannot drift silently.
- */
-export declare function endpointHost(baseUrl: string | null): string;
-/** Create the probe port. One instance per App; `SettingsScreen` only passes it down. */
-export declare function createModelProbe(deps: ProbeDeps): ModelProbe;