@arnilo/prism-coding-agent 0.0.15 → 0.0.17

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## [0.0.17] - 2026-07-29
+
+### Added
+- `ShellToolOptions.envAllowlist` restricts the environment the spawn hook and child process see (secret scrubbing without re-implementing the hook).
+
+### Changed
+- Released with exact 0.0.17 graph.
+
+## [0.0.16] - 2026-07-26
+
+### Changed
+- Released with exact 0.0.16 graph.
+
 ## [0.0.15] - 2026-07-26
 
 ## [0.0.14] - 2026-07-26

package/dist/ask-user-decision.js

@@ -210,7 +210,7 @@ export function createAskUserDecisionTool(options) {
                 selectionMode: {
                     type: "string",
                     enum: ["single", "multiple"],
-                    description: 'single (default) or multiple selection',
+                    description: "single (default) or multiple selection",
                 },
                 allowCustom: {
                     type: "boolean",
@@ -387,11 +387,7 @@ export function askUserDecisionResumeSchema(request) {
                 maxLength: DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES,
             },
         },
-        anyOf: [
-            { required: ["selectedId"] },
-            { required: ["selectedIds"] },
-            { required: ["customText"] },
-        ],
+        anyOf: [{ required: ["selectedId"] }, { required: ["selectedIds"] }, { required: ["customText"] }],
     };
 }
 export function toAskUserDecisionSuspendData(request) {
@@ -409,10 +405,10 @@ function isAskUserDecisionSuspendData(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const row = value;
-    return (typeof row.question === "string"
-        && Array.isArray(row.options)
-        && (row.selectionMode === "single" || row.selectionMode === "multiple")
-        && typeof row.allowCustom === "boolean");
+    return (typeof row.question === "string" &&
+        Array.isArray(row.options) &&
+        (row.selectionMode === "single" || row.selectionMode === "multiple") &&
+        typeof row.allowCustom === "boolean");
 }
 /**
  * Return from a workflow node to pause for a user decision (opt-in durable path).
@@ -441,7 +437,10 @@ export function validateAskUserDecisionResume(request, value, limits) {
         throw new Error("resume input must be an ask_user_decision answer object");
     }
     const maxCustomTextBytes = limits?.maxCustomTextBytes ?? DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES;
-    return resolveAskUserDecisionAnswer(value, request.selectionMode, request.options, { allowCustom: request.allowCustom, maxCustomTextBytes });
+    return resolveAskUserDecisionAnswer(value, request.selectionMode, request.options, {
+        allowCustom: request.allowCustom,
+        maxCustomTextBytes,
+    });
 }
 /**
  * Workflow `validateResume` adapter. Reads durable request from `suspension.data`
@@ -464,8 +463,6 @@ export function createAskUserDecisionResumeValidator(limits) {
  * unchanged in 0.0.12). Call after operator supplies an answer.
  */
 export function validateAskUserDecisionAgentResume(input) {
-    return validateAskUserDecisionResume(input.request, input.answer, input.maxCustomTextBytes === undefined
-        ? undefined
-        : { maxCustomTextBytes: input.maxCustomTextBytes });
+    return validateAskUserDecisionResume(input.request, input.answer, input.maxCustomTextBytes === undefined ? undefined : { maxCustomTextBytes: input.maxCustomTextBytes });
 }
 //# sourceMappingURL=ask-user-decision.js.map

package/dist/checks.js

@@ -1,3 +1,6 @@
+/**
+ * Named check tool: host declares fixed executable+args; model selects only a name.
+ */
 import { spawn } from "node:child_process";
 import { rm } from "node:fs/promises";
 import { isAbsolute } from "node:path";

package/dist/coding-checkpoint.js

@@ -8,8 +8,8 @@
 import { createHash } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
-import { DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_PLAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, validateCodingLimit, } from "./limits.js";
 import { sha256Hex } from "./artifacts.js";
+import { DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_PLAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, validateCodingLimit, } from "./limits.js";
 export const CODING_CHECKPOINT_SCHEMA_VERSION = 1;
 /** Workflow shared-state key that holds coding checkpoint metadata. */
 export const CODING_STATE_KEY = "coding";
@@ -217,9 +217,7 @@ export function validateCodingCheckpointMetadata(value, limits) {
     const planPath = requireRelativePath(value.planPath, "planPath");
     const plan = validateArtifactRef(value.plan, resolved, { requireKind: "plan" });
     const worktreePath = value.worktreePath === undefined ? undefined : requireAbsolutePath(value.worktreePath, "worktreePath");
-    const workspaceExport = value.workspaceExport === undefined
-        ? undefined
-        : validateArtifactRef(value.workspaceExport, resolved);
+    const workspaceExport = value.workspaceExport === undefined ? undefined : validateArtifactRef(value.workspaceExport, resolved);
     const artifacts = requireArray(value.artifacts, "artifacts").map((item, index) => validateArtifactRef(item, resolved, { label: `artifacts[${index}]` }));
     if (artifacts.length > resolved.maxArtifacts) {
         throw new CodingCheckpointError(`Coding checkpoint exceeds ${resolved.maxArtifacts} artifact references`);
@@ -270,8 +268,7 @@ export function validateCodingCheckpointMetadata(value, limits) {
 export function assertCodingResumeAllowed(input) {
     const metadata = validateCodingCheckpointMetadata(input.metadata, input.limits);
     assertFingerprintsMatch(metadata.fingerprints, input.expected);
-    if (input.expectedWorkspaceRoot !== undefined &&
-        resolve(input.expectedWorkspaceRoot) !== resolve(metadata.workspaceRoot)) {
+    if (input.expectedWorkspaceRoot !== undefined && resolve(input.expectedWorkspaceRoot) !== resolve(metadata.workspaceRoot)) {
         throw new CodingCheckpointError("Workspace root mismatch on coding resume");
     }
     if (input.expectedBaseBranch !== undefined && input.expectedBaseBranch !== metadata.baseBranch) {
@@ -326,12 +323,8 @@ function validateFingerprints(value) {
     const workflowRevision = requireString(value.workflowRevision, "fingerprints.workflowRevision");
     const toolFingerprint = requireFingerprint(value.toolFingerprint, "fingerprints.toolFingerprint");
     const policyFingerprint = requireFingerprint(value.policyFingerprint, "fingerprints.policyFingerprint");
-    const definitionHash = value.definitionHash === undefined
-        ? undefined
-        : requireFingerprint(value.definitionHash, "fingerprints.definitionHash");
-    const imageDigest = value.imageDigest === undefined
-        ? undefined
-        : requireString(value.imageDigest, "fingerprints.imageDigest");
+    const definitionHash = value.definitionHash === undefined ? undefined : requireFingerprint(value.definitionHash, "fingerprints.definitionHash");
+    const imageDigest = value.imageDigest === undefined ? undefined : requireString(value.imageDigest, "fingerprints.imageDigest");
     if (imageDigest !== undefined && !/sha256:[a-f0-9]{64}/.test(imageDigest) && !SHA256_HEX.test(imageDigest)) {
         // Allow either raw hex or docker digest form.
         if (!imageDigest.includes("@sha256:") && !imageDigest.startsWith("sha256:")) {
@@ -421,9 +414,7 @@ function validateHandoffSummary(value, limits) {
     if (changedPathCount < 0 || checkCount < 0) {
         throw new CodingCheckpointError("handoff counts must be non-negative");
     }
-    const artifact = value.artifact === undefined
-        ? undefined
-        : validateArtifactRef(value.artifact, limits, { label: "handoff.artifact" });
+    const artifact = value.artifact === undefined ? undefined : validateArtifactRef(value.artifact, limits, { label: "handoff.artifact" });
     return { base, head, changedPathCount, checkCount, artifact };
 }
 function requireStatus(value) {

package/dist/edit-diff.js

@@ -88,10 +88,7 @@ function applyReplacements(content, replacements, offset = 0) {
     for (let i = replacements.length - 1; i >= 0; i--) {
         const replacement = replacements[i];
         const matchIndex = replacement.matchIndex - offset;
-        result =
-            result.substring(0, matchIndex) +
-                replacement.newText +
-                result.substring(matchIndex + replacement.matchLength);
+        result = result.substring(0, matchIndex) + replacement.newText + result.substring(matchIndex + replacement.matchLength);
     }
     return result;
 }

package/dist/edit.js

@@ -20,14 +20,14 @@
  *    completed, the edit is real and is reported as success rather than a misleading "aborted".
  */
 import { Buffer } from "node:buffer";
-import { access as fsAccess, stat as fsStat, writeFile as fsWriteFile, } from "node:fs/promises";
 import { constants } from "node:fs";
+import { access as fsAccess, stat as fsStat, writeFile as fsWriteFile } from "node:fs/promises";
 import { readFileBounded } from "./bounded-file.js";
+import { applyEditsToNormalizedContent, detectLineEnding, generateDiffString, generateUnifiedPatch, normalizeToLF, restoreLineEndings, stripBom, } from "./edit-diff.js";
 import { enforceExecutionPolicy } from "./execution-policy.js";
-import { resolveToCwd } from "./path-utils.js";
 import { withFileMutationQueue } from "./file-mutation-queue.js";
 import { DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, validateCodingLimit, } from "./limits.js";
-import { applyEditsToNormalizedContent, detectLineEnding, generateDiffString, generateUnifiedPatch, normalizeToLF, restoreLineEndings, stripBom, } from "./edit-diff.js";
+import { resolveToCwd } from "./path-utils.js";
 const defaultEditOperations = {
     readFile: (path, options) => readFileBounded(path, options.maxBytes, options.signal),
     writeFile: (path, content, options) => fsWriteFile(path, content, { encoding: "utf-8", signal: options?.signal }),
@@ -196,9 +196,7 @@ export function createEditTool(cwd, options) {
                     return {
                         toolCallId,
                         name: "edit",
-                        content: [
-                            { type: "text", text: `Successfully replaced ${edits.length} block(s) in ${prepared.path}.` },
-                        ],
+                        content: [{ type: "text", text: `Successfully replaced ${edits.length} block(s) in ${prepared.path}.` }],
                         metadata: {
                             diff: diffResult.diff,
                             patch,

package/dist/execution-policy.d.ts

@@ -1,5 +1,4 @@
-import type { ExecutionAction, ExecutionPolicy } from "@arnilo/prism";
-import type { ToolResult } from "@arnilo/prism";
+import type { ExecutionAction, ExecutionPolicy, ToolResult } from "@arnilo/prism";
 export declare function enforceExecutionPolicy(policy: ExecutionPolicy | undefined, action: ExecutionAction, toolCallId: string, toolName: string): Promise<{
     allowed: true;
     action: ExecutionAction;

package/dist/execution-policy.js

@@ -8,7 +8,7 @@ export async function enforceExecutionPolicy(policy, action, toolCallId, toolNam
     }
     catch (error) {
         const message = error instanceof ExecutionDeniedError
-            ? error.decision.reason ?? error.message
+            ? (error.decision.reason ?? error.message)
             : error instanceof Error
                 ? error.message
                 : String(error);

package/dist/file-mutation-queue.js

@@ -19,8 +19,7 @@ function isMissingPathError(error) {
     return (typeof error === "object" &&
         error !== null &&
         "code" in error &&
-        (error.code === "ENOENT" ||
-            error.code === "ENOTDIR"));
+        (error.code === "ENOENT" || error.code === "ENOTDIR"));
 }
 async function getMutationQueueKey(filePath) {
     const resolvedPath = resolve(filePath);

package/dist/git-exec.js

@@ -6,8 +6,8 @@
  * runner (for example a sandbox `execFile` adapter) without changing tool code.
  */
 import { spawn } from "node:child_process";
-import { access } from "node:fs/promises";
 import { constants as fsConstants } from "node:fs";
+import { access } from "node:fs/promises";
 import { isAbsolute } from "node:path";
 import { DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_GIT_OUTPUT_BYTES, HARD_GIT_TIMEOUT_MS, HARD_MAX_GIT_OUTPUT_BYTES, validateCodingLimit, } from "./limits.js";
 export class GitError extends Error {

package/dist/git-tools.d.ts

@@ -5,8 +5,8 @@
  * Shell is never used internally; all Git invocations go through typed arg arrays.
  */
 import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
-import { type ArtifactWriter, type CreateGitOperationsOptions, type GitOperations } from "./git.js";
 import { type CodingCheckToolOptions, type NamedCheckDefinition } from "./checks.js";
+import { type ArtifactWriter, type CreateGitOperationsOptions, type GitOperations } from "./git.js";
 export interface GitToolsOptions {
     readonly executionPolicy?: ExecutionPolicy;
     readonly gitPath?: string;

package/dist/git-tools.js

@@ -1,6 +1,6 @@
+import { createCodingCheckTool } from "./checks.js";
 import { enforceExecutionPolicy } from "./execution-policy.js";
 import { createGitOperations, GitError, } from "./git.js";
-import { createCodingCheckTool } from "./checks.js";
 function errorResult(toolName, toolCallId, message) {
     return {
         toolCallId,
@@ -250,8 +250,7 @@ export function createGitWorktreeTool(cwd, options) {
                     signal: context.signal,
                 });
                 const text = action === "list"
-                    ? result.worktrees.map((w) => `${w.path}\t${w.branch ?? ""}\t${w.head ?? ""}`).join("\n") ||
-                        "(no worktrees)"
+                    ? result.worktrees.map((w) => `${w.path}\t${w.branch ?? ""}\t${w.head ?? ""}`).join("\n") || "(no worktrees)"
                     : `ok action=${action} path=${result.path ?? ""}`;
                 return {
                     toolCallId,
@@ -430,9 +429,7 @@ export function createGitPrHandoffTool(cwd, options) {
             const base = typeof args.base === "string" ? args.base : "";
             const head = typeof args.head === "string" ? args.head : undefined;
             const includeBundle = args.includeBundle === true;
-            const checks = Array.isArray(args.checks)
-                ? args.checks
-                : undefined;
+            const checks = Array.isArray(args.checks) ? args.checks : undefined;
             const policy = await enforceExecutionPolicy(options?.executionPolicy, {
                 kind: "git",
                 operation: "pr_handoff",

package/dist/git.d.ts

@@ -133,7 +133,7 @@ export interface CreateGitOperationsOptions extends CreateGitRunnerOptions, GitL
     };
 }
 export declare function createGitOperations(options: CreateGitOperationsOptions): Promise<GitOperations>;
+export type { BoundGitRunner, CreateGitRunnerOptions, GitExecRequest, GitExecResult, GitRunner } from "./git-exec.js";
+export { createBoundGitRunner, GitError, runGitCli, SAFE_GIT_CONFIG_ARGS, SAFE_GIT_ENV, } from "./git-exec.js";
+export type { GitStatusBranch, GitStatusEntry, GitStatusEntryKind, GitStatusResult } from "./git-status.js";
 export { parsePorcelainV2 } from "./git-status.js";
-export type { GitStatusResult, GitStatusEntry, GitStatusBranch, GitStatusEntryKind } from "./git-status.js";
-export { GitError, SAFE_GIT_ENV, SAFE_GIT_CONFIG_ARGS, createBoundGitRunner, runGitCli, } from "./git-exec.js";
-export type { GitRunner, GitExecRequest, GitExecResult, BoundGitRunner, CreateGitRunnerOptions } from "./git-exec.js";

package/dist/git.js

@@ -5,12 +5,12 @@
  * `git check-ref-format` for refs, and safe config that disables hooks,
  * external diff/textconv, pagers, and credential prompts by default.
  */
-import { mkdtemp, writeFile, rm } from "node:fs/promises";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, validateCodingLimit, } from "./limits.js";
 import { createBoundGitRunner, GitError, gitRequireOk, gitText, } from "./git-exec.js";
 import { parsePorcelainV2 } from "./git-status.js";
+import { DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, validateCodingLimit, } from "./limits.js";
 import { resolveToCwd } from "./path-utils.js";
 export function resolveGitLimits(options) {
     return {
@@ -77,7 +77,7 @@ function truncateLines(text, maxLines) {
     const lineCount = lines.length;
     if (lineCount <= maxLines)
         return { text, truncated: false, lineCount };
-    const kept = lines.slice(0, maxLines).join("\n") + "\n";
+    const kept = `${lines.slice(0, maxLines).join("\n")}\n`;
     return { text: kept, truncated: true, lineCount };
 }
 async function withTempFile(prefix, contents, fn) {
@@ -292,9 +292,7 @@ export async function createGitOperations(options) {
                 ? await ensureCleanOrCheckpoint(request.createCheckpoint, request.signal, `git apply ${request.action}`)
                 : undefined;
             // Always check first for apply/reverse.
-            const checkArgs = request.action === "reverse"
-                ? ["apply", "--reverse", "--check"]
-                : ["apply", "--check"];
+            const checkArgs = request.action === "reverse" ? ["apply", "--reverse", "--check"] : ["apply", "--check"];
             const check = await runApply(checkArgs, filePath);
             if (check.exitCode !== 0) {
                 const output = (gitText(check, "stderr") || gitText(check)).trim();
@@ -302,9 +300,7 @@ export async function createGitOperations(options) {
                     await restoreCheckpoint(checkpoint, request.signal).catch(() => undefined);
                 return { ok: false, checkpoint, restored: Boolean(checkpoint), output: output || "patch check failed" };
             }
-            const applyArgs = request.action === "reverse"
-                ? ["apply", "--reverse"]
-                : ["apply"];
+            const applyArgs = request.action === "reverse" ? ["apply", "--reverse"] : ["apply"];
             const result = await runApply(applyArgs, filePath);
             if (result.exitCode !== 0) {
                 const output = (gitText(result, "stderr") || gitText(result)).trim();
@@ -314,12 +310,14 @@ export async function createGitOperations(options) {
                 }
                 else {
                     // Best-effort restore of tracked files when no checkpoint was taken (clean tree).
-                    await runner.exec({
+                    await runner
+                        .exec({
                         args: ["checkout", "--", "."],
                         cwd,
                         signal: request.signal,
                         maxOutputBytes: limits.maxOutputBytes,
-                    }).catch(() => undefined);
+                    })
+                        .catch(() => undefined);
                     restored = true;
                 }
                 return { ok: false, checkpoint, restored, output: output || `apply failed with exit ${result.exitCode}` };
@@ -378,12 +376,14 @@ export async function createGitOperations(options) {
         }
         catch (error) {
             // Reset index for the attempted paths; never drop pre-existing dirty work unless checkpointed.
-            await runner.exec({
+            await runner
+                .exec({
                 args: ["reset", "-q", "HEAD", "--", ...paths],
                 cwd,
                 signal: request.signal,
                 maxOutputBytes: limits.maxOutputBytes,
-            }).catch(() => undefined);
+            })
+                .catch(() => undefined);
             if (checkpoint)
                 await restoreCheckpoint(checkpoint, request.signal).catch(() => undefined);
             throw error;
@@ -490,6 +490,6 @@ export async function createGitOperations(options) {
     }
     return { status, diff, branch, worktree, apply, commit, prHandoff };
 }
+export { createBoundGitRunner, GitError, runGitCli, SAFE_GIT_CONFIG_ARGS, SAFE_GIT_ENV, } from "./git-exec.js";
 export { parsePorcelainV2 } from "./git-status.js";
-export { GitError, SAFE_GIT_ENV, SAFE_GIT_CONFIG_ARGS, createBoundGitRunner, runGitCli, } from "./git-exec.js";
 //# sourceMappingURL=git.js.map

package/dist/goal-verify.d.ts

@@ -4,7 +4,7 @@
  */
 import type { OwnershipScope, SecretRedactor } from "@arnilo/prism";
 import { type WorkflowCheckpointAdapter, type WorkflowEvent, type WorkflowResumeValidator, type WorkflowRunResult } from "@arnilo/prism-workflows";
-import { type CodingCheckSummary, type CodingCheckpointMetadata, type CodingHandoffSummary } from "./coding-checkpoint.js";
+import { type CodingCheckpointMetadata, type CodingCheckSummary, type CodingHandoffSummary } from "./coding-checkpoint.js";
 export declare const CODING_GOAL_VERIFY_WORKFLOW_ID: "coding-goal-verify";
 export declare const CODING_GOAL_VERIFY_REVISION: "1";
 export declare const CODING_GOAL_VERIFY_SUSPEND_REASON: "approve-coding-goal-verify";

package/dist/goal-verify.js

@@ -1,5 +1,5 @@
 import { defineWorkflow, functionNode, resumeWorkflow, runWorkflow, suspend, } from "@arnilo/prism-workflows";
-import { CODING_STATE_KEY, assertCodingResumeAllowed, buildCodingCheckpointMetadata, codingCheckpointStatePatch, codingPlanPathForTask, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, writeCodingPlanFile, } from "./coding-checkpoint.js";
+import { assertCodingResumeAllowed, buildCodingCheckpointMetadata, CODING_STATE_KEY, codingCheckpointStatePatch, codingPlanPathForTask, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, writeCodingPlanFile, } from "./coding-checkpoint.js";
 import { DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_PR_HANDOFF_BYTES } from "./limits.js";
 export const CODING_GOAL_VERIFY_WORKFLOW_ID = "coding-goal-verify";
 export const CODING_GOAL_VERIFY_REVISION = "1";
@@ -93,10 +93,7 @@ export function createCodingGoalVerifyWorkflow(options) {
             const coding = requireCoding(ctx.state);
             const checks = normalizeChecks(await Promise.all(options.checks.map((name) => options.runCheck(name))));
             const failed = checks.some((check) => check.exitCode !== 0);
-            const done = new Set([
-                "plan",
-                ...options.checks.map((name) => `check-${name}`),
-            ]);
+            const done = new Set(["plan", ...options.checks.map((name) => `check-${name}`)]);
             const todos = markTodos(coding.todos.length ? coding.todos : defaultTodos(options.checks), done);
             const markdown = createCodingPlanMarkdown({
                 title: options.title,

package/dist/index.d.ts

@@ -1,41 +1,41 @@
-export { createShellTool, createLocalBashOperations, getShellConfig, killProcessTree, waitForChildProcess, } from "./shell.js";
-export type { ShellToolOptions, ShellConfig, BashOperations, BashExecOptions, BashSpawnContext, BashSpawnHook, } from "./shell.js";
-export { createReadTool, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, DEFAULT_MAX_IMAGE_BYTES, } from "./read.js";
-export type { ReadToolOptions, ReadOperations, ReadTextOptions, ReadTextResult, TransformImage, TransformImageInput, } from "./read.js";
-export { createWriteTool } from "./write.js";
-export type { WriteToolOptions, WriteOperations } from "./write.js";
+export { createDirectoryArtifactWriter, createTempArtifactWriter, sha256Hex } from "./artifacts.js";
+export type { AskUserDecisionAnswer, AskUserDecisionHandler, AskUserDecisionOption, AskUserDecisionRequest, AskUserDecisionSelectionMode, AskUserDecisionSuspendData, AskUserDecisionToolOptions, ResolvedAskUserDecisionAnswer, ResolvedAskUserDecisionLimits, SuspendAskUserDecisionOptions, } from "./ask-user-decision.js";
+export { ASK_USER_DECISION_RATIONALE_COUNT, ASK_USER_DECISION_SUSPEND_REASON, ASK_USER_DECISION_TOOL_NAME, askUserDecisionResumeSchema, createAskUserDecisionResumeValidator, createAskUserDecisionTool, DEFAULT_MAX_ASK_USER_DECISION_BULLET_BYTES, DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES, DEFAULT_MAX_ASK_USER_DECISION_LABEL_BYTES, DEFAULT_MAX_ASK_USER_DECISION_OPTIONS, DEFAULT_MAX_ASK_USER_DECISION_QUESTION_BYTES, HARD_MAX_ASK_USER_DECISION_BULLET_BYTES, HARD_MAX_ASK_USER_DECISION_CUSTOM_BYTES, HARD_MAX_ASK_USER_DECISION_LABEL_BYTES, HARD_MAX_ASK_USER_DECISION_OPTIONS, HARD_MAX_ASK_USER_DECISION_QUESTION_BYTES, parseAskUserDecisionArgs, resolveAskUserDecisionAnswer, resolveAskUserDecisionLimits, suspendAskUserDecision, toAskUserDecisionSuspendData, validateAskUserDecisionAgentResume, validateAskUserDecisionResume, } from "./ask-user-decision.js";
+export type { CodingCheckToolOptions, NamedCheckDefinition } from "./checks.js";
+export { createCodingCheckTool } from "./checks.js";
+export type { CodingArtifactKind, CodingArtifactRef, CodingCheckpointLimitOptions, CodingCheckpointMetadata, CodingCheckSummary, CodingFingerprints, CodingHandoffSummary, CodingTaskStatus, CodingTodoItem, ResolvedCodingCheckpointLimits, } from "./coding-checkpoint.js";
+export { assertCodingResumeAllowed, buildCodingCheckpointMetadata, CODING_CHECKPOINT_SCHEMA_VERSION, CODING_STATE_KEY, CodingCheckpointError, codingCheckpointStatePatch, codingPlanPathForTask, createCodingArtifactRef, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, resolveCodingCheckpointLimits, validateCodingCheckpointMetadata, verifyCodingArtifactBytes, writeCodingPlanFile, } from "./coding-checkpoint.js";
+export type { Edit, EditOperations, EditToolDetails, EditToolOptions } from "./edit.js";
 export { createEditTool } from "./edit.js";
-export type { EditToolOptions, EditOperations, EditToolDetails, Edit } from "./edit.js";
-export { createRepoListTool } from "./list.js";
-export type { ListToolOptions } from "./list.js";
-export { createRepoSearchTool } from "./search.js";
-export type { SearchToolOptions } from "./search.js";
-export { createLocalRepositoryOperations, resolveRepositoryLimits, compileSearchPattern, isBinaryBuffer, resolveRepoPath, toRepoRelative, RepositoryError, DEFAULT_REPO_EXCLUDE, } from "./repository.js";
-export type { RepoEntryKind, RepoListEntry, RepositoryListRequest, RepositoryListResult, RepositorySearchMatch, RepositorySearchRequest, RepositorySearchResult, RepositoryOperations, RepositoryLimitOptions, ResolvedRepositoryLimits, } from "./repository.js";
-export { createGitOperations, resolveGitLimits, parsePorcelainV2, GitError, SAFE_GIT_ENV, SAFE_GIT_CONFIG_ARGS, createBoundGitRunner, runGitCli, } from "./git.js";
-export type { GitOperations, GitLimitOptions, ResolvedGitLimits, ArtifactReference, ArtifactWriter, PrHandoff, CreateGitOperationsOptions, GitStatusResult, GitStatusEntry, GitStatusBranch, GitStatusEntryKind, GitRunner, GitExecRequest, GitExecResult, BoundGitRunner, CreateGitRunnerOptions, } from "./git.js";
-export { createGitTools, createGitStatusTool, createGitDiffTool, createGitBranchTool, createGitWorktreeTool, createGitApplyTool, createGitCommitTool, createGitPrHandoffTool, } from "./git-tools.js";
+export type { ArtifactReference, ArtifactWriter, BoundGitRunner, CreateGitOperationsOptions, CreateGitRunnerOptions, GitExecRequest, GitExecResult, GitLimitOptions, GitOperations, GitRunner, GitStatusBranch, GitStatusEntry, GitStatusEntryKind, GitStatusResult, PrHandoff, ResolvedGitLimits, } from "./git.js";
+export { createBoundGitRunner, createGitOperations, GitError, parsePorcelainV2, resolveGitLimits, runGitCli, SAFE_GIT_CONFIG_ARGS, SAFE_GIT_ENV, } from "./git.js";
 export type { GitToolsOptions } from "./git-tools.js";
-export { createCodingCheckTool } from "./checks.js";
-export type { CodingCheckToolOptions, NamedCheckDefinition } from "./checks.js";
-export { ASK_USER_DECISION_RATIONALE_COUNT, ASK_USER_DECISION_SUSPEND_REASON, ASK_USER_DECISION_TOOL_NAME, DEFAULT_MAX_ASK_USER_DECISION_BULLET_BYTES, DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES, DEFAULT_MAX_ASK_USER_DECISION_LABEL_BYTES, DEFAULT_MAX_ASK_USER_DECISION_OPTIONS, DEFAULT_MAX_ASK_USER_DECISION_QUESTION_BYTES, HARD_MAX_ASK_USER_DECISION_BULLET_BYTES, HARD_MAX_ASK_USER_DECISION_CUSTOM_BYTES, HARD_MAX_ASK_USER_DECISION_LABEL_BYTES, HARD_MAX_ASK_USER_DECISION_OPTIONS, HARD_MAX_ASK_USER_DECISION_QUESTION_BYTES, askUserDecisionResumeSchema, createAskUserDecisionResumeValidator, createAskUserDecisionTool, parseAskUserDecisionArgs, resolveAskUserDecisionAnswer, resolveAskUserDecisionLimits, suspendAskUserDecision, toAskUserDecisionSuspendData, validateAskUserDecisionAgentResume, validateAskUserDecisionResume, } from "./ask-user-decision.js";
-export type { AskUserDecisionAnswer, AskUserDecisionHandler, AskUserDecisionOption, AskUserDecisionRequest, AskUserDecisionSelectionMode, AskUserDecisionSuspendData, AskUserDecisionToolOptions, ResolvedAskUserDecisionAnswer, ResolvedAskUserDecisionLimits, SuspendAskUserDecisionOptions, } from "./ask-user-decision.js";
-export { createDirectoryArtifactWriter, createTempArtifactWriter, sha256Hex } from "./artifacts.js";
-export { CODING_CHECKPOINT_SCHEMA_VERSION, CODING_STATE_KEY, CodingCheckpointError, assertCodingResumeAllowed, buildCodingCheckpointMetadata, codingCheckpointStatePatch, codingPlanPathForTask, createCodingArtifactRef, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, resolveCodingCheckpointLimits, validateCodingCheckpointMetadata, verifyCodingArtifactBytes, writeCodingPlanFile, } from "./coding-checkpoint.js";
-export type { CodingArtifactKind, CodingArtifactRef, CodingCheckSummary, CodingCheckpointLimitOptions, CodingCheckpointMetadata, CodingFingerprints, CodingHandoffSummary, CodingTaskStatus, CodingTodoItem, ResolvedCodingCheckpointLimits, } from "./coding-checkpoint.js";
-export { CODING_GOAL_VERIFY_REVISION, CODING_GOAL_VERIFY_SUSPEND_REASON, CODING_GOAL_VERIFY_WORKFLOW_ID, CodingGoalVerifyError, createCodingGoalVerifyWorkflow, runCodingGoalVerify, } from "./goal-verify.js";
+export { createGitApplyTool, createGitBranchTool, createGitCommitTool, createGitDiffTool, createGitPrHandoffTool, createGitStatusTool, createGitTools, createGitWorktreeTool, } from "./git-tools.js";
 export type { CodingGoalVerifyApproval, RunCodingGoalVerifyOptions, } from "./goal-verify.js";
-export { withFileMutationQueue } from "./file-mutation-queue.js";
+export { CODING_GOAL_VERIFY_REVISION, CODING_GOAL_VERIFY_SUSPEND_REASON, CODING_GOAL_VERIFY_WORKFLOW_ID, CodingGoalVerifyError, createCodingGoalVerifyWorkflow, runCodingGoalVerify, } from "./goal-verify.js";
+export type { ListToolOptions } from "./list.js";
+export { createRepoListTool } from "./list.js";
+export type { ReadOperations, ReadTextOptions, ReadTextResult, ReadToolOptions, TransformImage, TransformImageInput, } from "./read.js";
+export { createReadTool, DEFAULT_MAX_IMAGE_BYTES, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, } from "./read.js";
+export type { RepoEntryKind, RepoListEntry, RepositoryLimitOptions, RepositoryListRequest, RepositoryListResult, RepositoryOperations, RepositorySearchMatch, RepositorySearchRequest, RepositorySearchResult, ResolvedRepositoryLimits, } from "./repository.js";
+export { compileSearchPattern, createLocalRepositoryOperations, DEFAULT_REPO_EXCLUDE, isBinaryBuffer, RepositoryError, resolveRepoPath, resolveRepositoryLimits, toRepoRelative, } from "./repository.js";
+export type { SearchToolOptions } from "./search.js";
+export { createRepoSearchTool } from "./search.js";
+export type { BashExecOptions, BashOperations, BashSpawnContext, BashSpawnHook, ShellConfig, ShellToolOptions, } from "./shell.js";
+export { createLocalBashOperations, createShellTool, getShellConfig, killProcessTree, waitForChildProcess, } from "./shell.js";
+export type { WriteOperations, WriteToolOptions } from "./write.js";
+export { createWriteTool } from "./write.js";
 export { enforceExecutionPolicy } from "./execution-policy.js";
-export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_SHELL_TIMEOUT_SECONDS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_BYTES, HARD_MAX_LINES, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_IMAGE_BYTES, HARD_MAX_WRITE_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_SHELL_TIMEOUT_SECONDS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_WORKTREES, HARD_GIT_TIMEOUT_MS, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_CONCURRENCY, HARD_CHECK_TIMEOUT_MS, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PLAN_BYTES, HARD_MAX_TODOS, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_CHECKPOINT_BYTES, } from "./limits.js";
+export { withFileMutationQueue } from "./file-mutation-queue.js";
+export { DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_BYTES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_LINES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_CHECK_TIMEOUT_MS, HARD_GIT_TIMEOUT_MS, HARD_MAX_BYTES, HARD_MAX_CHECK_CONCURRENCY, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_PLAN_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_WRITE_BYTES, HARD_SHELL_TIMEOUT_SECONDS, } from "./limits.js";
 import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
-import type { ShellToolOptions } from "./shell.js";
-import type { ReadToolOptions } from "./read.js";
-import type { WriteToolOptions } from "./write.js";
 import type { EditToolOptions } from "./edit.js";
 import type { ListToolOptions } from "./list.js";
-import type { SearchToolOptions } from "./search.js";
+import type { ReadToolOptions } from "./read.js";
 import type { RepositoryLimitOptions, RepositoryOperations } from "./repository.js";
+import type { SearchToolOptions } from "./search.js";
+import type { ShellToolOptions } from "./shell.js";
+import type { WriteToolOptions } from "./write.js";
 /** Per-tool options combined for the aggregator factories. */
 export interface ToolsOptions {
     /** Shared execution policy applied to every coding tool unless overridden per tool. */

package/dist/index.js

@@ -4,30 +4,30 @@
 // `ToolDefinition`s that hosts register into a `ToolRegistry` (e.g.
 // `createToolRegistry(createCodingTools(cwd))`). No tools are auto-registered — import what you need.
 // --- per-tool factories & types ---
-export { createShellTool, createLocalBashOperations, getShellConfig, killProcessTree, waitForChildProcess, } from "./shell.js";
-export { createReadTool, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, DEFAULT_MAX_IMAGE_BYTES, } from "./read.js";
-export { createWriteTool } from "./write.js";
+export { createDirectoryArtifactWriter, createTempArtifactWriter, sha256Hex } from "./artifacts.js";
+export { ASK_USER_DECISION_RATIONALE_COUNT, ASK_USER_DECISION_SUSPEND_REASON, ASK_USER_DECISION_TOOL_NAME, askUserDecisionResumeSchema, createAskUserDecisionResumeValidator, createAskUserDecisionTool, DEFAULT_MAX_ASK_USER_DECISION_BULLET_BYTES, DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES, DEFAULT_MAX_ASK_USER_DECISION_LABEL_BYTES, DEFAULT_MAX_ASK_USER_DECISION_OPTIONS, DEFAULT_MAX_ASK_USER_DECISION_QUESTION_BYTES, HARD_MAX_ASK_USER_DECISION_BULLET_BYTES, HARD_MAX_ASK_USER_DECISION_CUSTOM_BYTES, HARD_MAX_ASK_USER_DECISION_LABEL_BYTES, HARD_MAX_ASK_USER_DECISION_OPTIONS, HARD_MAX_ASK_USER_DECISION_QUESTION_BYTES, parseAskUserDecisionArgs, resolveAskUserDecisionAnswer, resolveAskUserDecisionLimits, suspendAskUserDecision, toAskUserDecisionSuspendData, validateAskUserDecisionAgentResume, validateAskUserDecisionResume, } from "./ask-user-decision.js";
+export { createCodingCheckTool } from "./checks.js";
+export { assertCodingResumeAllowed, buildCodingCheckpointMetadata, CODING_CHECKPOINT_SCHEMA_VERSION, CODING_STATE_KEY, CodingCheckpointError, codingCheckpointStatePatch, codingPlanPathForTask, createCodingArtifactRef, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, resolveCodingCheckpointLimits, validateCodingCheckpointMetadata, verifyCodingArtifactBytes, writeCodingPlanFile, } from "./coding-checkpoint.js";
 export { createEditTool } from "./edit.js";
+export { createBoundGitRunner, createGitOperations, GitError, parsePorcelainV2, resolveGitLimits, runGitCli, SAFE_GIT_CONFIG_ARGS, SAFE_GIT_ENV, } from "./git.js";
+export { createGitApplyTool, createGitBranchTool, createGitCommitTool, createGitDiffTool, createGitPrHandoffTool, createGitStatusTool, createGitTools, createGitWorktreeTool, } from "./git-tools.js";
+export { CODING_GOAL_VERIFY_REVISION, CODING_GOAL_VERIFY_SUSPEND_REASON, CODING_GOAL_VERIFY_WORKFLOW_ID, CodingGoalVerifyError, createCodingGoalVerifyWorkflow, runCodingGoalVerify, } from "./goal-verify.js";
 export { createRepoListTool } from "./list.js";
+export { createReadTool, DEFAULT_MAX_IMAGE_BYTES, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, } from "./read.js";
+export { compileSearchPattern, createLocalRepositoryOperations, DEFAULT_REPO_EXCLUDE, isBinaryBuffer, RepositoryError, resolveRepoPath, resolveRepositoryLimits, toRepoRelative, } from "./repository.js";
 export { createRepoSearchTool } from "./search.js";
-export { createLocalRepositoryOperations, resolveRepositoryLimits, compileSearchPattern, isBinaryBuffer, resolveRepoPath, toRepoRelative, RepositoryError, DEFAULT_REPO_EXCLUDE, } from "./repository.js";
-export { createGitOperations, resolveGitLimits, parsePorcelainV2, GitError, SAFE_GIT_ENV, SAFE_GIT_CONFIG_ARGS, createBoundGitRunner, runGitCli, } from "./git.js";
-export { createGitTools, createGitStatusTool, createGitDiffTool, createGitBranchTool, createGitWorktreeTool, createGitApplyTool, createGitCommitTool, createGitPrHandoffTool, } from "./git-tools.js";
-export { createCodingCheckTool } from "./checks.js";
-export { ASK_USER_DECISION_RATIONALE_COUNT, ASK_USER_DECISION_SUSPEND_REASON, ASK_USER_DECISION_TOOL_NAME, DEFAULT_MAX_ASK_USER_DECISION_BULLET_BYTES, DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES, DEFAULT_MAX_ASK_USER_DECISION_LABEL_BYTES, DEFAULT_MAX_ASK_USER_DECISION_OPTIONS, DEFAULT_MAX_ASK_USER_DECISION_QUESTION_BYTES, HARD_MAX_ASK_USER_DECISION_BULLET_BYTES, HARD_MAX_ASK_USER_DECISION_CUSTOM_BYTES, HARD_MAX_ASK_USER_DECISION_LABEL_BYTES, HARD_MAX_ASK_USER_DECISION_OPTIONS, HARD_MAX_ASK_USER_DECISION_QUESTION_BYTES, askUserDecisionResumeSchema, createAskUserDecisionResumeValidator, createAskUserDecisionTool, parseAskUserDecisionArgs, resolveAskUserDecisionAnswer, resolveAskUserDecisionLimits, suspendAskUserDecision, toAskUserDecisionSuspendData, validateAskUserDecisionAgentResume, validateAskUserDecisionResume, } from "./ask-user-decision.js";
-export { createDirectoryArtifactWriter, createTempArtifactWriter, sha256Hex } from "./artifacts.js";
-export { CODING_CHECKPOINT_SCHEMA_VERSION, CODING_STATE_KEY, CodingCheckpointError, assertCodingResumeAllowed, buildCodingCheckpointMetadata, codingCheckpointStatePatch, codingPlanPathForTask, createCodingArtifactRef, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, resolveCodingCheckpointLimits, validateCodingCheckpointMetadata, verifyCodingArtifactBytes, writeCodingPlanFile, } from "./coding-checkpoint.js";
-export { CODING_GOAL_VERIFY_REVISION, CODING_GOAL_VERIFY_SUSPEND_REASON, CODING_GOAL_VERIFY_WORKFLOW_ID, CodingGoalVerifyError, createCodingGoalVerifyWorkflow, runCodingGoalVerify, } from "./goal-verify.js";
+export { createLocalBashOperations, createShellTool, getShellConfig, killProcessTree, waitForChildProcess, } from "./shell.js";
+export { createWriteTool } from "./write.js";
 // --- generic primitives (re-exported for hosts that want them) ---
-export { withFileMutationQueue } from "./file-mutation-queue.js";
 export { enforceExecutionPolicy } from "./execution-policy.js";
-export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_SHELL_TIMEOUT_SECONDS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_BYTES, HARD_MAX_LINES, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_IMAGE_BYTES, HARD_MAX_WRITE_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_SHELL_TIMEOUT_SECONDS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_WORKTREES, HARD_GIT_TIMEOUT_MS, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_CONCURRENCY, HARD_CHECK_TIMEOUT_MS, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PLAN_BYTES, HARD_MAX_TODOS, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_CHECKPOINT_BYTES, } from "./limits.js";
-import { createShellTool } from "./shell.js";
-import { createReadTool } from "./read.js";
-import { createWriteTool } from "./write.js";
+export { withFileMutationQueue } from "./file-mutation-queue.js";
+export { DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_BYTES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_LINES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_CHECK_TIMEOUT_MS, HARD_GIT_TIMEOUT_MS, HARD_MAX_BYTES, HARD_MAX_CHECK_CONCURRENCY, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_PLAN_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_WRITE_BYTES, HARD_SHELL_TIMEOUT_SECONDS, } from "./limits.js";
 import { createEditTool } from "./edit.js";
 import { createRepoListTool } from "./list.js";
+import { createReadTool } from "./read.js";
 import { createRepoSearchTool } from "./search.js";
+import { createShellTool } from "./shell.js";
+import { createWriteTool } from "./write.js";
 function withSharedExecutionPolicy(toolOptions, shared) {
     if (!shared)
         return (toolOptions ?? {});

package/dist/list.js

@@ -1,6 +1,6 @@
 import { enforceExecutionPolicy } from "./execution-policy.js";
-import { createLocalRepositoryOperations, resolveRepositoryLimits, RepositoryError, } from "./repository.js";
 import { HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_RESULTS, validateCodingLimit, validateCodingLimitAllowZero } from "./limits.js";
+import { createLocalRepositoryOperations, RepositoryError, resolveRepositoryLimits, } from "./repository.js";
 function errorResult(toolCallId, message) {
     return {
         toolCallId,
@@ -11,9 +11,7 @@ function errorResult(toolCallId, message) {
 }
 function formatListText(result) {
     if (result.entries.length === 0) {
-        return result.truncated
-            ? `[truncated by ${result.truncatedBy ?? "limit"} before any entries]`
-            : "(no entries)";
+        return result.truncated ? `[truncated by ${result.truncatedBy ?? "limit"} before any entries]` : "(no entries)";
     }
     const lines = result.entries.map((entry) => {
         const size = entry.size !== undefined ? `\t${entry.size}` : "";
@@ -131,11 +129,7 @@ export function createRepoListTool(cwd, options) {
                 };
             }
             catch (error) {
-                const message = error instanceof RepositoryError
-                    ? error.message
-                    : error instanceof Error
-                        ? error.message
-                        : String(error);
+                const message = error instanceof RepositoryError ? error.message : error instanceof Error ? error.message : String(error);
                 return errorResult(toolCallId, message);
             }
         },

package/dist/path-utils.js

@@ -98,7 +98,7 @@ export function resolveReadPath(filePath, cwd) {
 }
 export async function resolveReadPathAsync(filePath, cwd) {
     const resolved = resolveToCwd(filePath, cwd);
-    if ((await pathExists(resolved)))
+    if (await pathExists(resolved))
         return resolved;
     const amPmVariant = tryMacOSScreenshotPath(resolved);
     if (amPmVariant !== resolved && (await pathExists(amPmVariant)))

package/dist/read.js

@@ -21,11 +21,11 @@
  */
 import { Buffer } from "node:buffer";
 import { constants } from "node:fs";
-import { access as fsAccess, open, stat as fsStat } from "node:fs/promises";
+import { access as fsAccess, stat as fsStat, open } from "node:fs/promises";
 import { readFileBounded } from "./bounded-file.js";
 import { enforceExecutionPolicy } from "./execution-policy.js";
-import { resolveReadPathAsync } from "./path-utils.js";
 import { DEFAULT_MAX_BYTES, DEFAULT_MAX_IMAGE_BYTES, DEFAULT_MAX_LINES, DEFAULT_MAX_TEXT_SCAN_BYTES, HARD_MAX_BYTES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_TEXT_SCAN_BYTES, validateCodingLimit, } from "./limits.js";
+import { resolveReadPathAsync } from "./path-utils.js";
 import { formatSize } from "./truncate.js";
 // --- magic-byte image MIME detection (faithful port of pi utils/mime.js, pure JS, no deps) ---
 const IMAGE_TYPE_SNIFF_BYTES = 4100;
@@ -64,9 +64,7 @@ export async function detectSupportedImageMimeTypeFromFile(filePath) {
 }
 function isPng(buffer) {
     // First chunk after the 8-byte signature must be a 13-byte IHDR.
-    return (buffer.length >= 16 &&
-        readUint32BE(buffer, PNG_SIGNATURE.length) === 13 &&
-        startsWithAscii(buffer, 12, "IHDR"));
+    return buffer.length >= 16 && readUint32BE(buffer, PNG_SIGNATURE.length) === 13 && startsWithAscii(buffer, 12, "IHDR");
 }
 function isAnimatedPng(buffer) {
     // Walk PNG chunks; an acTL chunk before the first IDAT marks an animated (APNG) image.
@@ -118,16 +116,10 @@ function readUint16LE(buffer, offset) {
     return (buffer[offset] ?? 0) + ((buffer[offset + 1] ?? 0) << 8);
 }
 function readUint32BE(buffer, offset) {
-    return ((buffer[offset] ?? 0) * 0x1000000 +
-        ((buffer[offset + 1] ?? 0) << 16) +
-        ((buffer[offset + 2] ?? 0) << 8) +
-        (buffer[offset + 3] ?? 0));
+    return ((buffer[offset] ?? 0) * 0x1000000 + ((buffer[offset + 1] ?? 0) << 16) + ((buffer[offset + 2] ?? 0) << 8) + (buffer[offset + 3] ?? 0));
 }
 function readUint32LE(buffer, offset) {
-    return ((buffer[offset] ?? 0) +
-        ((buffer[offset + 1] ?? 0) << 8) +
-        ((buffer[offset + 2] ?? 0) << 16) +
-        (buffer[offset + 3] ?? 0) * 0x1000000);
+    return ((buffer[offset] ?? 0) + ((buffer[offset + 1] ?? 0) << 8) + ((buffer[offset + 2] ?? 0) << 16) + (buffer[offset + 3] ?? 0) * 0x1000000);
 }
 function startsWith(buffer, bytes) {
     if (buffer.length < bytes.length)
@@ -339,9 +331,7 @@ export function createReadTool(cwd, options) {
             }
             try {
                 const startLine = validateCodingLimit("offset", offset ?? 1, Number.MAX_SAFE_INTEGER);
-                const requestedLines = limit === undefined
-                    ? undefined
-                    : validateCodingLimit("limit", limit, HARD_MAX_LINES);
+                const requestedLines = limit === undefined ? undefined : validateCodingLimit("limit", limit, HARD_MAX_LINES);
                 const absolutePath = await resolveReadPathAsync(path, cwd);
                 const policyCheck = await enforceExecutionPolicy(options?.executionPolicy, {
                     kind: "read",

package/dist/repository.d.ts

@@ -1,3 +1,10 @@
+/**
+ * Bounded repository walk primitives for list/search tools.
+ *
+ * Streams the tree with Node `opendir` / `lstat`; never follows symlink escapes,
+ * rejects devices/FIFOs/sockets for descent, and charges finite depth/entry/file
+ * limits before retaining the next result. No glob/index/watcher dependency.
+ */
 export type RepoEntryKind = "file" | "directory" | "symlink" | "other";
 export interface RepoListEntry {
     readonly path: string;

package/dist/repository.js

@@ -5,7 +5,7 @@
  * rejects devices/FIFOs/sockets for descent, and charges finite depth/entry/file
  * limits before retaining the next result. No glob/index/watcher dependency.
  */
-import { open, opendir, lstat, realpath } from "node:fs/promises";
+import { lstat, open, opendir, realpath } from "node:fs/promises";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { DEFAULT_BINARY_SNIFF_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, validateCodingLimit, validateCodingLimitAllowZero, } from "./limits.js";
 import { resolveToCwd } from "./path-utils.js";
@@ -278,9 +278,7 @@ async function listLocal(request, defaults) {
                 kind = "symlink";
             else if (startStat.isFile())
                 kind = "file";
-            const entry = kind === "file"
-                ? { path: resolved.relative, kind, size: startStat.size }
-                : { path: resolved.relative, kind };
+            const entry = kind === "file" ? { path: resolved.relative, kind, size: startStat.size } : { path: resolved.relative, kind };
             scannedEntries = 1;
             scannedFiles = kind === "file" ? 1 : 0;
             if (offset === 0 && maxResults > 0)

package/dist/search.js

@@ -1,6 +1,6 @@
 import { enforceExecutionPolicy } from "./execution-policy.js";
-import { HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_MATCHES, validateCodingLimit, validateCodingLimitAllowZero, } from "./limits.js";
-import { createLocalRepositoryOperations, resolveRepositoryLimits, RepositoryError, } from "./repository.js";
+import { HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_MATCHES, validateCodingLimit, validateCodingLimitAllowZero } from "./limits.js";
+import { createLocalRepositoryOperations, RepositoryError, resolveRepositoryLimits, } from "./repository.js";
 import { truncateLine } from "./truncate.js";
 function errorResult(toolCallId, message) {
     return {
@@ -26,9 +26,7 @@ function formatMatch(match) {
 }
 function formatSearchText(result) {
     if (result.matches.length === 0) {
-        return result.truncated
-            ? `[truncated by ${result.truncatedBy ?? "limit"} before any matches]`
-            : "(no matches)";
+        return result.truncated ? `[truncated by ${result.truncatedBy ?? "limit"} before any matches]` : "(no matches)";
     }
     const body = result.matches.map(formatMatch).join("\n");
     if (!result.truncated)
@@ -153,11 +151,7 @@ export function createRepoSearchTool(cwd, options) {
                 };
             }
             catch (error) {
-                const message = error instanceof RepositoryError
-                    ? error.message
-                    : error instanceof Error
-                        ? error.message
-                        : String(error);
+                const message = error instanceof RepositoryError ? error.message : error instanceof Error ? error.message : String(error);
                 return errorResult(toolCallId, message);
             }
         },

package/dist/shell.d.ts

@@ -55,6 +55,9 @@ export interface ShellToolOptions {
     shellPath?: string;
     /** Hook to adjust command, cwd, or env before execution. */
     spawnHook?: BashSpawnHook;
+    /** Restrict the process environment cloned for the spawn hook / child process to these
+     *  names (e.g. scrub secrets). Unset keeps the full `process.env` clone. */
+    envAllowlist?: readonly string[];
     /** Max lines kept in the tail snapshot (default 2000). */
     maxLines?: number;
     /** Max bytes kept in the tail snapshot (default 50KB). */

package/dist/shell.js

@@ -24,11 +24,23 @@ import { spawn } from "node:child_process";
 import { constants, existsSync } from "node:fs";
 import { access as fsAccess } from "node:fs/promises";
 import { enforceExecutionPolicy } from "./execution-policy.js";
-import { OutputAccumulator } from "./output-accumulator.js";
 import { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_MAX_BYTES, HARD_MAX_LINES, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_SHELL_TIMEOUT_SECONDS, validateCodingLimit, } from "./limits.js";
+import { OutputAccumulator } from "./output-accumulator.js";
 import { formatSize } from "./truncate.js";
 const EXIT_STDIO_GRACE_MS = 100;
 // --- spawn internals (re-ported from pi utils/shell.js + utils/child-process.js) ---
+/** Clone the process environment, optionally restricted to an allowlist of names. */
+function pickSpawnEnv(allowlist) {
+    if (!allowlist)
+        return { ...process.env };
+    const env = {};
+    for (const name of allowlist) {
+        const value = process.env[name];
+        if (value !== undefined)
+            env[name] = value;
+    }
+    return env;
+}
 /** Resolve the shell binary + args. shellPath → SHELL env → /bin/bash → sh. */
 export function getShellConfig(customShellPath) {
     if (customShellPath) {
@@ -284,9 +296,10 @@ export function createShellTool(cwd, options) {
                 return { toolCallId, name: "shell", content: [{ type: "text", text: message }], error: { message } };
             }
             const resolvedCommand = commandPrefix ? `${commandPrefix}\n${command}` : command;
+            const baseEnv = pickSpawnEnv(options?.envAllowlist);
             let spawnContext = spawnHook
-                ? spawnHook({ command: resolvedCommand, cwd, env: { ...process.env } })
-                : { command: resolvedCommand, cwd, env: { ...process.env } };
+                ? spawnHook({ command: resolvedCommand, cwd, env: baseEnv })
+                : { command: resolvedCommand, cwd, env: baseEnv };
             const policyCheck = await enforceExecutionPolicy(options?.executionPolicy, {
                 kind: "shell",
                 operation: "execute",
@@ -309,9 +322,7 @@ export function createShellTool(cwd, options) {
                 onLimit: () => outputAbort.abort("output-limit"),
                 onStorageError: () => outputAbort.abort("output-storage-error"),
             });
-            const signal = context.signal
-                ? AbortSignal.any([context.signal, outputAbort.signal])
-                : outputAbort.signal;
+            const signal = context.signal ? AbortSignal.any([context.signal, outputAbort.signal]) : outputAbort.signal;
             let acceptingOutput = true;
             const handleData = (data) => {
                 if (acceptingOutput)
@@ -399,7 +410,9 @@ export function createShellTool(cwd, options) {
                 try {
                     await output.cleanupTempFile();
                 }
-                catch { /* retain primary error */ }
+                catch {
+                    /* retain primary error */
+                }
                 const message = err instanceof Error ? err.message : String(err);
                 return { toolCallId, name: "shell", content: [{ type: "text", text: message }], error: { message } };
             }

package/dist/truncate.js

@@ -9,7 +9,7 @@
  *
  * Never returns partial lines (except the documented tail single-line edge case).
  */
-import { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, HARD_MAX_BYTES, HARD_MAX_LINES, validateCodingLimit, } from "./limits.js";
+import { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, HARD_MAX_BYTES, HARD_MAX_LINES, validateCodingLimit } from "./limits.js";
 export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES } from "./limits.js";
 /**
  * Default char cap for {@link truncateLine}. pi names this GREP_MAX_LINE_LENGTH

package/dist/write.js

@@ -18,9 +18,9 @@ import { Buffer } from "node:buffer";
 import { mkdir as fsMkdir, writeFile as fsWriteFile } from "node:fs/promises";
 import { dirname } from "node:path";
 import { enforceExecutionPolicy } from "./execution-policy.js";
-import { resolveToCwd } from "./path-utils.js";
 import { withFileMutationQueue } from "./file-mutation-queue.js";
-import { DEFAULT_MAX_WRITE_BYTES, HARD_MAX_WRITE_BYTES, validateCodingLimit, } from "./limits.js";
+import { DEFAULT_MAX_WRITE_BYTES, HARD_MAX_WRITE_BYTES, validateCodingLimit } from "./limits.js";
+import { resolveToCwd } from "./path-utils.js";
 const defaultWriteOperations = {
     writeFile: (path, content, options) => fsWriteFile(path, content, { encoding: "utf-8", signal: options?.signal }),
     mkdir: (dir) => fsMkdir(dir, { recursive: true }).then(() => { }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arnilo/prism-coding-agent",
-  "version": "0.0.15",
+  "version": "0.0.17",
   "description": "Optional coding-agent tools (shell, read, write, edit, repo_list, repo_search, opt-in Git/check/ask-user-decision, and durable plan/checkpoint helpers) package for Prism.",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,8 +28,8 @@
     "diff": "^9.0.0"
   },
   "peerDependencies": {
-    "@arnilo/prism": "0.0.15",
-    "@arnilo/prism-workflows": "0.0.15"
+    "@arnilo/prism": "0.0.17",
+    "@arnilo/prism-workflows": "0.0.17"
   },
   "devDependencies": {
     "@arnilo/prism": "file:../..",