@arnilo/prism-coding-agent 0.0.8 → 0.0.11

package/dist/goal-verify.js

@@ -0,0 +1,283 @@
+import { defineWorkflow, functionNode, resumeWorkflow, runWorkflow, suspend, } from "@arnilo/prism-workflows";
+import { CODING_STATE_KEY, assertCodingResumeAllowed, buildCodingCheckpointMetadata, codingCheckpointStatePatch, codingPlanPathForTask, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, writeCodingPlanFile, } from "./coding-checkpoint.js";
+import { DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_PR_HANDOFF_BYTES } from "./limits.js";
+export const CODING_GOAL_VERIFY_WORKFLOW_ID = "coding-goal-verify";
+export const CODING_GOAL_VERIFY_REVISION = "1";
+export const CODING_GOAL_VERIFY_SUSPEND_REASON = "approve-coding-goal-verify";
+export class CodingGoalVerifyError extends Error {
+    code = "ERR_PRISM_CODING_GOAL_VERIFY";
+    constructor(message) {
+        super(message);
+        this.name = "CodingGoalVerifyError";
+    }
+}
+function requireCoding(state) {
+    const coding = readCodingCheckpointFromState(state);
+    if (!coding)
+        throw new CodingGoalVerifyError("missing state.coding");
+    return coding;
+}
+function clipSummary(summary) {
+    const max = DEFAULT_MAX_CHECK_SUMMARY_BYTES;
+    const bytes = Buffer.from(summary, "utf8");
+    if (bytes.length <= max)
+        return summary;
+    return bytes.subarray(0, max).toString("utf8");
+}
+function normalizeChecks(checks) {
+    return checks.map((check) => ({
+        name: check.name,
+        exitCode: check.exitCode,
+        summary: clipSummary(check.summary),
+    }));
+}
+function assertHandoffBounded(handoff) {
+    const encoded = Buffer.byteLength(JSON.stringify(handoff), "utf8");
+    if (encoded > DEFAULT_MAX_PR_HANDOFF_BYTES) {
+        throw new CodingGoalVerifyError(`handoff exceeds ${DEFAULT_MAX_PR_HANDOFF_BYTES} byte limit (${encoded} bytes)`);
+    }
+}
+function fingerprintsFor(checks) {
+    return {
+        workflowRevision: CODING_GOAL_VERIFY_REVISION,
+        toolFingerprint: fingerprintJson({ tools: ["coding_check", "git_pr_handoff"], checks }),
+        policyFingerprint: fingerprintJson({ requireApproval: [CODING_GOAL_VERIFY_SUSPEND_REASON] }),
+    };
+}
+function defaultTodos(checkNames) {
+    return [
+        { id: "plan", text: "Write goal plan Markdown", done: false },
+        ...checkNames.map((name) => ({ id: `check-${name}`, text: `Run named check ${name}`, done: false })),
+        { id: "handoff", text: "Emit bounded PR handoff", done: false },
+    ];
+}
+function markTodos(todos, doneIds) {
+    return todos.map((todo) => (doneIds.has(todo.id) ? { ...todo, done: true } : todo));
+}
+/** Build the durable DAG used by `runCodingGoalVerify` (exported for hosts that want the definition alone). */
+export function createCodingGoalVerifyWorkflow(options) {
+    const planPath = codingPlanPathForTask(options.taskId);
+    const fps = () => fingerprintsFor(options.checks);
+    const planNode = functionNode({
+        execute: async (ctx) => {
+            const todos = defaultTodos(options.checks);
+            const markdown = createCodingPlanMarkdown({
+                title: options.title,
+                taskId: options.taskId,
+                status: "planned",
+                todos,
+                notes: options.goal,
+            });
+            const plan = await writeCodingPlanFile({
+                workspaceRoot: options.cwd,
+                planPath,
+                markdown,
+            });
+            const metadata = buildCodingCheckpointMetadata({
+                taskId: options.taskId,
+                workspaceRoot: options.cwd,
+                baseBranch: options.baseBranch,
+                branch: options.branch,
+                planPath,
+                plan,
+                fingerprints: fps(),
+                todos: parseCodingPlanTodos(markdown),
+                status: "planned",
+            });
+            await ctx.updateState(codingCheckpointStatePatch(metadata), { mode: "merge" });
+            return { planPath, planSha256: plan.sha256 };
+        },
+    });
+    const verifyNode = functionNode({
+        execute: async (ctx) => {
+            const coding = requireCoding(ctx.state);
+            const checks = normalizeChecks(await Promise.all(options.checks.map((name) => options.runCheck(name))));
+            const failed = checks.some((check) => check.exitCode !== 0);
+            const done = new Set([
+                "plan",
+                ...options.checks.map((name) => `check-${name}`),
+            ]);
+            const todos = markTodos(coding.todos.length ? coding.todos : defaultTodos(options.checks), done);
+            const markdown = createCodingPlanMarkdown({
+                title: options.title,
+                taskId: options.taskId,
+                status: failed ? "awaiting_approval" : "ready_for_handoff",
+                todos,
+                notes: options.goal,
+            });
+            const plan = await writeCodingPlanFile({
+                workspaceRoot: options.cwd,
+                planPath,
+                markdown,
+            });
+            const next = buildCodingCheckpointMetadata({
+                ...coding,
+                plan,
+                checks,
+                todos: parseCodingPlanTodos(markdown),
+                status: failed ? "awaiting_approval" : "ready_for_handoff",
+                fingerprints: fps(),
+                updatedAt: new Date().toISOString(),
+            });
+            await ctx.updateState(codingCheckpointStatePatch(next), { mode: "merge" });
+            return { checks, failed };
+        },
+    });
+    const reviewNode = functionNode({
+        execute: async (ctx) => {
+            const coding = requireCoding(ctx.state);
+            const failed = coding.checks.some((check) => check.exitCode !== 0);
+            if (!failed)
+                return { approved: true, skipped: true };
+            if (!ctx.resume) {
+                return suspend({
+                    reason: options.suspendReason,
+                    data: {
+                        taskId: coding.taskId,
+                        branch: coding.branch,
+                        planSha256: coding.plan.sha256,
+                        checks: coding.checks,
+                    },
+                    resumeSchema: {
+                        type: "object",
+                        required: ["reviewer"],
+                        properties: { reviewer: { type: "string" } },
+                    },
+                });
+            }
+            const reviewer = ctx.resume.input?.reviewer ?? "unknown";
+            return { approved: true, reviewer, planSha256: coding.plan.sha256 };
+        },
+    });
+    const handoffNode = functionNode({
+        execute: async (ctx) => {
+            const coding = requireCoding(ctx.state);
+            const planFile = await readCodingPlanFile({
+                workspaceRoot: options.cwd,
+                planPath: coding.planPath,
+                expected: coding.plan,
+            });
+            assertCodingResumeAllowed({
+                metadata: coding,
+                expected: fps(),
+                expectedWorkspaceRoot: options.cwd,
+                expectedBaseBranch: options.baseBranch,
+                planBytes: Buffer.from(planFile.markdown, "utf8"),
+            });
+            const handoff = await options.buildHandoff({ coding, checks: coding.checks });
+            assertHandoffBounded(handoff);
+            const todos = markTodos(coding.todos.length ? coding.todos : defaultTodos(options.checks), new Set(["plan", "handoff", ...options.checks.map((name) => `check-${name}`)]));
+            const markdown = createCodingPlanMarkdown({
+                title: options.title,
+                taskId: options.taskId,
+                status: "completed",
+                todos,
+                notes: options.goal,
+            });
+            const plan = await writeCodingPlanFile({
+                workspaceRoot: options.cwd,
+                planPath,
+                markdown,
+            });
+            const next = buildCodingCheckpointMetadata({
+                ...coding,
+                plan,
+                handoff,
+                todos: parseCodingPlanTodos(markdown),
+                status: "completed",
+                fingerprints: fps(),
+                updatedAt: new Date().toISOString(),
+            });
+            await ctx.updateState(codingCheckpointStatePatch(next), { mode: "merge" });
+            return { handoff, codingStatus: next.status };
+        },
+    });
+    return defineWorkflow({
+        revision: CODING_GOAL_VERIFY_REVISION,
+        id: CODING_GOAL_VERIFY_WORKFLOW_ID,
+        nodes: {
+            plan: planNode,
+            verify: verifyNode,
+            review: reviewNode,
+            handoff: handoffNode,
+        },
+        edges: [
+            ["plan", "verify"],
+            ["verify", "review"],
+            ["review", "handoff"],
+        ],
+        limits: { maxConcurrency: 1, maxStateBytes: 64 * 1024 },
+    });
+}
+/**
+ * Run (or resume) a thin goal→verify coding composition.
+ * Fails closed when `approval` / `approval.validateResume` is missing.
+ */
+export async function runCodingGoalVerify(options) {
+    if (!options.approval?.validateResume) {
+        throw new CodingGoalVerifyError("approval.validateResume is required");
+    }
+    if (!Array.isArray(options.checks) || options.checks.length < 1) {
+        throw new CodingGoalVerifyError("checks must declare at least one named check");
+    }
+    for (const name of options.checks) {
+        if (typeof name !== "string" || !/^[A-Za-z][A-Za-z0-9_-]{0,63}$/.test(name)) {
+            throw new CodingGoalVerifyError(`invalid check name: ${String(name)}`);
+        }
+    }
+    if (typeof options.runCheck !== "function") {
+        throw new CodingGoalVerifyError("runCheck is required");
+    }
+    if (typeof options.buildHandoff !== "function") {
+        throw new CodingGoalVerifyError("buildHandoff is required");
+    }
+    if (typeof options.goal !== "string" || options.goal.trim().length < 1) {
+        throw new CodingGoalVerifyError("goal is required");
+    }
+    if (typeof options.cwd !== "string" || options.cwd.length < 1) {
+        throw new CodingGoalVerifyError("cwd is required");
+    }
+    const taskId = options.taskId ?? "goal";
+    const title = options.title ?? options.goal.slice(0, 120);
+    const baseBranch = options.baseBranch ?? "main";
+    const branch = options.branch ?? `codex/${taskId}`;
+    const suspendReason = options.approval.reason ?? CODING_GOAL_VERIFY_SUSPEND_REASON;
+    const workflow = createCodingGoalVerifyWorkflow({
+        goal: options.goal,
+        cwd: options.cwd,
+        taskId,
+        title,
+        baseBranch,
+        branch,
+        checks: options.checks,
+        runCheck: options.runCheck,
+        buildHandoff: options.buildHandoff,
+        suspendReason,
+    });
+    const validateState = async (input) => {
+        if (CODING_STATE_KEY in input.value) {
+            readCodingCheckpointFromState(input.value);
+        }
+    };
+    const shared = {
+        checkpoints: options.checkpoints,
+        redactor: options.redactor,
+        ownership: options.ownership,
+        validateState,
+        validateResume: options.approval.validateResume,
+        signal: options.signal,
+        onEvent: options.onEvent,
+    };
+    if (options.resume) {
+        return resumeWorkflow(workflow, { runId: options.resume.runId, workflowId: workflow.id }, {
+            ...shared,
+            resume: {
+                decision: options.resume.decision,
+                expectedVersion: options.resume.expectedVersion,
+                input: options.resume.input,
+            },
+        });
+    }
+    return runWorkflow(workflow, { goal: options.goal, baseBranch }, shared);
+}
+//# sourceMappingURL=goal-verify.js.map

package/dist/index.d.ts

@@ -6,14 +6,36 @@ export { createWriteTool } from "./write.js";
 export type { WriteToolOptions, WriteOperations } from "./write.js";
 export { createEditTool } from "./edit.js";
 export type { EditToolOptions, EditOperations, EditToolDetails, Edit } from "./edit.js";
+export { createRepoListTool } from "./list.js";
+export type { ListToolOptions } from "./list.js";
+export { createRepoSearchTool } from "./search.js";
+export type { SearchToolOptions } from "./search.js";
+export { createLocalRepositoryOperations, resolveRepositoryLimits, compileSearchPattern, isBinaryBuffer, resolveRepoPath, toRepoRelative, RepositoryError, DEFAULT_REPO_EXCLUDE, } from "./repository.js";
+export type { RepoEntryKind, RepoListEntry, RepositoryListRequest, RepositoryListResult, RepositorySearchMatch, RepositorySearchRequest, RepositorySearchResult, RepositoryOperations, RepositoryLimitOptions, ResolvedRepositoryLimits, } from "./repository.js";
+export { createGitOperations, resolveGitLimits, parsePorcelainV2, GitError, SAFE_GIT_ENV, SAFE_GIT_CONFIG_ARGS, createBoundGitRunner, runGitCli, } from "./git.js";
+export type { GitOperations, GitLimitOptions, ResolvedGitLimits, ArtifactReference, ArtifactWriter, PrHandoff, CreateGitOperationsOptions, GitStatusResult, GitStatusEntry, GitStatusBranch, GitStatusEntryKind, GitRunner, GitExecRequest, GitExecResult, BoundGitRunner, CreateGitRunnerOptions, } from "./git.js";
+export { createGitTools, createGitStatusTool, createGitDiffTool, createGitBranchTool, createGitWorktreeTool, createGitApplyTool, createGitCommitTool, createGitPrHandoffTool, } from "./git-tools.js";
+export type { GitToolsOptions } from "./git-tools.js";
+export { createCodingCheckTool } from "./checks.js";
+export type { CodingCheckToolOptions, NamedCheckDefinition } from "./checks.js";
+export { ASK_USER_DECISION_RATIONALE_COUNT, ASK_USER_DECISION_SUSPEND_REASON, ASK_USER_DECISION_TOOL_NAME, DEFAULT_MAX_ASK_USER_DECISION_BULLET_BYTES, DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES, DEFAULT_MAX_ASK_USER_DECISION_LABEL_BYTES, DEFAULT_MAX_ASK_USER_DECISION_OPTIONS, DEFAULT_MAX_ASK_USER_DECISION_QUESTION_BYTES, HARD_MAX_ASK_USER_DECISION_BULLET_BYTES, HARD_MAX_ASK_USER_DECISION_CUSTOM_BYTES, HARD_MAX_ASK_USER_DECISION_LABEL_BYTES, HARD_MAX_ASK_USER_DECISION_OPTIONS, HARD_MAX_ASK_USER_DECISION_QUESTION_BYTES, askUserDecisionResumeSchema, createAskUserDecisionResumeValidator, createAskUserDecisionTool, parseAskUserDecisionArgs, resolveAskUserDecisionAnswer, resolveAskUserDecisionLimits, suspendAskUserDecision, toAskUserDecisionSuspendData, validateAskUserDecisionAgentResume, validateAskUserDecisionResume, } from "./ask-user-decision.js";
+export type { AskUserDecisionAnswer, AskUserDecisionHandler, AskUserDecisionOption, AskUserDecisionRequest, AskUserDecisionSelectionMode, AskUserDecisionSuspendData, AskUserDecisionToolOptions, ResolvedAskUserDecisionAnswer, ResolvedAskUserDecisionLimits, SuspendAskUserDecisionOptions, } from "./ask-user-decision.js";
+export { createDirectoryArtifactWriter, createTempArtifactWriter, sha256Hex } from "./artifacts.js";
+export { CODING_CHECKPOINT_SCHEMA_VERSION, CODING_STATE_KEY, CodingCheckpointError, assertCodingResumeAllowed, buildCodingCheckpointMetadata, codingCheckpointStatePatch, codingPlanPathForTask, createCodingArtifactRef, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, resolveCodingCheckpointLimits, validateCodingCheckpointMetadata, verifyCodingArtifactBytes, writeCodingPlanFile, } from "./coding-checkpoint.js";
+export type { CodingArtifactKind, CodingArtifactRef, CodingCheckSummary, CodingCheckpointLimitOptions, CodingCheckpointMetadata, CodingFingerprints, CodingHandoffSummary, CodingTaskStatus, CodingTodoItem, ResolvedCodingCheckpointLimits, } from "./coding-checkpoint.js";
+export { CODING_GOAL_VERIFY_REVISION, CODING_GOAL_VERIFY_SUSPEND_REASON, CODING_GOAL_VERIFY_WORKFLOW_ID, CodingGoalVerifyError, createCodingGoalVerifyWorkflow, runCodingGoalVerify, } from "./goal-verify.js";
+export type { CodingGoalVerifyApproval, RunCodingGoalVerifyOptions, } from "./goal-verify.js";
 export { withFileMutationQueue } from "./file-mutation-queue.js";
 export { enforceExecutionPolicy } from "./execution-policy.js";
-export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_SHELL_TIMEOUT_SECONDS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_BYTES, HARD_MAX_LINES, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_IMAGE_BYTES, HARD_MAX_WRITE_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_SHELL_TIMEOUT_SECONDS, HARD_MAX_TOTAL_OUTPUT_BYTES, } from "./limits.js";
+export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_SHELL_TIMEOUT_SECONDS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_BYTES, HARD_MAX_LINES, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_IMAGE_BYTES, HARD_MAX_WRITE_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_SHELL_TIMEOUT_SECONDS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_WORKTREES, HARD_GIT_TIMEOUT_MS, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_CONCURRENCY, HARD_CHECK_TIMEOUT_MS, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PLAN_BYTES, HARD_MAX_TODOS, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_CHECKPOINT_BYTES, } from "./limits.js";
 import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
 import type { ShellToolOptions } from "./shell.js";
 import type { ReadToolOptions } from "./read.js";
 import type { WriteToolOptions } from "./write.js";
 import type { EditToolOptions } from "./edit.js";
+import type { ListToolOptions } from "./list.js";
+import type { SearchToolOptions } from "./search.js";
+import type { RepositoryLimitOptions, RepositoryOperations } from "./repository.js";
 /** Per-tool options combined for the aggregator factories. */
 export interface ToolsOptions {
     /** Shared execution policy applied to every coding tool unless overridden per tool. */
@@ -22,12 +44,26 @@ export interface ToolsOptions {
     read?: ReadToolOptions;
     write?: WriteToolOptions;
     edit?: EditToolOptions;
+    list?: ListToolOptions;
+    search?: SearchToolOptions;
+    /**
+     * Shared repository limits/backends for `repo_list` / `repo_search`.
+     * Per-tool `list` / `search` options override these when both are set.
+     */
+    repository?: RepositoryLimitOptions & {
+        operations?: RepositoryOperations;
+    };
 }
 /**
- * The four coding tools: `shell`, `read`, `write`, `edit`. Register all of them for a coding agent.
+ * Full coding tool set: `shell`, `read`, `write`, `edit`, `repo_list`, `repo_search`.
+ * Opt-in tools (`createGitTools`, `createAskUserDecisionTool`, `createCodingCheckTool`)
+ * stay out — hosts register them explicitly.
  */
 export declare function createCodingTools(cwd: string, options?: ToolsOptions): readonly ToolDefinition[];
-/** Read-only subset: `read` only (this package ships no grep/find/ls). */
+/**
+ * Read-only subset: `read`, `repo_list`, `repo_search`.
+ * Deliberate 0.0.9 expansion from the previous `read`-only set.
+ */
 export declare function createReadOnlyTools(cwd: string, options?: ToolsOptions): readonly ToolDefinition[];
-/** Every tool this package provides — identical to {@link createCodingTools} for now. */
+/** Every tool this package provides — identical to {@link createCodingTools}. */
 export declare function createAllTools(cwd: string, options?: ToolsOptions): readonly ToolDefinition[];

package/dist/index.js

@@ -8,36 +8,74 @@ export { createShellTool, createLocalBashOperations, getShellConfig, killProcess
 export { createReadTool, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, DEFAULT_MAX_IMAGE_BYTES, } from "./read.js";
 export { createWriteTool } from "./write.js";
 export { createEditTool } from "./edit.js";
+export { createRepoListTool } from "./list.js";
+export { createRepoSearchTool } from "./search.js";
+export { createLocalRepositoryOperations, resolveRepositoryLimits, compileSearchPattern, isBinaryBuffer, resolveRepoPath, toRepoRelative, RepositoryError, DEFAULT_REPO_EXCLUDE, } from "./repository.js";
+export { createGitOperations, resolveGitLimits, parsePorcelainV2, GitError, SAFE_GIT_ENV, SAFE_GIT_CONFIG_ARGS, createBoundGitRunner, runGitCli, } from "./git.js";
+export { createGitTools, createGitStatusTool, createGitDiffTool, createGitBranchTool, createGitWorktreeTool, createGitApplyTool, createGitCommitTool, createGitPrHandoffTool, } from "./git-tools.js";
+export { createCodingCheckTool } from "./checks.js";
+export { ASK_USER_DECISION_RATIONALE_COUNT, ASK_USER_DECISION_SUSPEND_REASON, ASK_USER_DECISION_TOOL_NAME, DEFAULT_MAX_ASK_USER_DECISION_BULLET_BYTES, DEFAULT_MAX_ASK_USER_DECISION_CUSTOM_BYTES, DEFAULT_MAX_ASK_USER_DECISION_LABEL_BYTES, DEFAULT_MAX_ASK_USER_DECISION_OPTIONS, DEFAULT_MAX_ASK_USER_DECISION_QUESTION_BYTES, HARD_MAX_ASK_USER_DECISION_BULLET_BYTES, HARD_MAX_ASK_USER_DECISION_CUSTOM_BYTES, HARD_MAX_ASK_USER_DECISION_LABEL_BYTES, HARD_MAX_ASK_USER_DECISION_OPTIONS, HARD_MAX_ASK_USER_DECISION_QUESTION_BYTES, askUserDecisionResumeSchema, createAskUserDecisionResumeValidator, createAskUserDecisionTool, parseAskUserDecisionArgs, resolveAskUserDecisionAnswer, resolveAskUserDecisionLimits, suspendAskUserDecision, toAskUserDecisionSuspendData, validateAskUserDecisionAgentResume, validateAskUserDecisionResume, } from "./ask-user-decision.js";
+export { createDirectoryArtifactWriter, createTempArtifactWriter, sha256Hex } from "./artifacts.js";
+export { CODING_CHECKPOINT_SCHEMA_VERSION, CODING_STATE_KEY, CodingCheckpointError, assertCodingResumeAllowed, buildCodingCheckpointMetadata, codingCheckpointStatePatch, codingPlanPathForTask, createCodingArtifactRef, createCodingPlanMarkdown, fingerprintJson, parseCodingPlanTodos, readCodingCheckpointFromState, readCodingPlanFile, resolveCodingCheckpointLimits, validateCodingCheckpointMetadata, verifyCodingArtifactBytes, writeCodingPlanFile, } from "./coding-checkpoint.js";
+export { CODING_GOAL_VERIFY_REVISION, CODING_GOAL_VERIFY_SUSPEND_REASON, CODING_GOAL_VERIFY_WORKFLOW_ID, CodingGoalVerifyError, createCodingGoalVerifyWorkflow, runCodingGoalVerify, } from "./goal-verify.js";
 // --- generic primitives (re-exported for hosts that want them) ---
 export { withFileMutationQueue } from "./file-mutation-queue.js";
 export { enforceExecutionPolicy } from "./execution-policy.js";
-export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_SHELL_TIMEOUT_SECONDS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_BYTES, HARD_MAX_LINES, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_IMAGE_BYTES, HARD_MAX_WRITE_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_SHELL_TIMEOUT_SECONDS, HARD_MAX_TOTAL_OUTPUT_BYTES, } from "./limits.js";
+export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_SHELL_TIMEOUT_SECONDS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_BYTES, HARD_MAX_LINES, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_IMAGE_BYTES, HARD_MAX_WRITE_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_SHELL_TIMEOUT_SECONDS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_WORKTREES, HARD_GIT_TIMEOUT_MS, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_CONCURRENCY, HARD_CHECK_TIMEOUT_MS, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PLAN_BYTES, HARD_MAX_TODOS, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_CHECKPOINT_BYTES, } from "./limits.js";
 import { createShellTool } from "./shell.js";
 import { createReadTool } from "./read.js";
 import { createWriteTool } from "./write.js";
 import { createEditTool } from "./edit.js";
+import { createRepoListTool } from "./list.js";
+import { createRepoSearchTool } from "./search.js";
 function withSharedExecutionPolicy(toolOptions, shared) {
     if (!shared)
         return (toolOptions ?? {});
     return { ...(toolOptions ?? {}), executionPolicy: toolOptions?.executionPolicy ?? shared };
 }
+function withRepositoryDefaults(toolOptions, shared) {
+    if (!shared && !toolOptions)
+        return {};
+    return {
+        ...(toolOptions ?? {}),
+        repository: toolOptions?.repository ?? shared,
+        operations: toolOptions?.operations ?? shared?.operations,
+        exclude: toolOptions?.exclude ?? shared?.exclude,
+    };
+}
 /**
- * The four coding tools: `shell`, `read`, `write`, `edit`. Register all of them for a coding agent.
+ * Full coding tool set: `shell`, `read`, `write`, `edit`, `repo_list`, `repo_search`.
+ * Opt-in tools (`createGitTools`, `createAskUserDecisionTool`, `createCodingCheckTool`)
+ * stay out — hosts register them explicitly.
  */
 export function createCodingTools(cwd, options) {
     const policy = options?.executionPolicy;
+    const listOpts = withRepositoryDefaults(options?.list, options?.repository);
+    const searchOpts = withRepositoryDefaults(options?.search, options?.repository);
     return [
         createShellTool(cwd, withSharedExecutionPolicy(options?.shell, policy)),
         createReadTool(cwd, withSharedExecutionPolicy(options?.read, policy)),
         createWriteTool(cwd, withSharedExecutionPolicy(options?.write, policy)),
         createEditTool(cwd, withSharedExecutionPolicy(options?.edit, policy)),
+        createRepoListTool(cwd, withSharedExecutionPolicy(listOpts, policy)),
+        createRepoSearchTool(cwd, withSharedExecutionPolicy(searchOpts, policy)),
     ];
 }
-/** Read-only subset: `read` only (this package ships no grep/find/ls). */
+/**
+ * Read-only subset: `read`, `repo_list`, `repo_search`.
+ * Deliberate 0.0.9 expansion from the previous `read`-only set.
+ */
 export function createReadOnlyTools(cwd, options) {
-    return [createReadTool(cwd, withSharedExecutionPolicy(options?.read, options?.executionPolicy))];
+    const policy = options?.executionPolicy;
+    const listOpts = withRepositoryDefaults(options?.list, options?.repository);
+    const searchOpts = withRepositoryDefaults(options?.search, options?.repository);
+    return [
+        createReadTool(cwd, withSharedExecutionPolicy(options?.read, policy)),
+        createRepoListTool(cwd, withSharedExecutionPolicy(listOpts, policy)),
+        createRepoSearchTool(cwd, withSharedExecutionPolicy(searchOpts, policy)),
+    ];
 }
-/** Every tool this package provides — identical to {@link createCodingTools} for now. */
+/** Every tool this package provides — identical to {@link createCodingTools}. */
 export function createAllTools(cwd, options) {
     return createCodingTools(cwd, options);
 }

package/dist/limits.d.ts

@@ -18,5 +18,81 @@ export declare const DEFAULT_SHELL_TIMEOUT_SECONDS = 600;
 export declare const HARD_SHELL_TIMEOUT_SECONDS = 3600;
 export declare const DEFAULT_MAX_TOTAL_OUTPUT_BYTES: number;
 export declare const HARD_MAX_TOTAL_OUTPUT_BYTES: number;
+/** Repository list/search defaults and hard caps (Phase 4 / review-coverage). */
+export declare const DEFAULT_MAX_REPO_DEPTH = 32;
+export declare const HARD_MAX_REPO_DEPTH = 128;
+export declare const DEFAULT_MAX_REPO_ENTRIES = 10000;
+export declare const HARD_MAX_REPO_ENTRIES = 100000;
+export declare const DEFAULT_MAX_REPO_FILES = 10000;
+export declare const HARD_MAX_REPO_FILES = 100000;
+export declare const DEFAULT_MAX_REPO_RESULTS = 1000;
+export declare const HARD_MAX_REPO_RESULTS = 10000;
+export declare const DEFAULT_MAX_REPO_CONCURRENCY = 8;
+export declare const HARD_MAX_REPO_CONCURRENCY = 32;
+export declare const DEFAULT_MAX_SEARCH_SCAN_BYTES: number;
+export declare const HARD_MAX_SEARCH_SCAN_BYTES: number;
+export declare const DEFAULT_MAX_SEARCH_FILE_BYTES: number;
+export declare const HARD_MAX_SEARCH_FILE_BYTES: number;
+export declare const DEFAULT_MAX_SEARCH_MATCHES = 1000;
+export declare const HARD_MAX_SEARCH_MATCHES = 10000;
+export declare const DEFAULT_MAX_SEARCH_PATTERN_BYTES = 512;
+export declare const HARD_MAX_SEARCH_PATTERN_BYTES = 4096;
+export declare const DEFAULT_MAX_SEARCH_LINE_BYTES: number;
+export declare const HARD_MAX_SEARCH_LINE_BYTES: number;
+export declare const DEFAULT_MAX_SEARCH_CONTEXT_LINES = 5;
+export declare const HARD_MAX_SEARCH_CONTEXT_LINES = 20;
+export declare const DEFAULT_MAX_SEARCH_TIME_MS = 30000;
+export declare const HARD_MAX_SEARCH_TIME_MS = 300000;
+export declare const DEFAULT_BINARY_SNIFF_BYTES = 8192;
+/** Structured Git / named-check / PR-handoff defaults and hard caps (Phase 4). */
+export declare const DEFAULT_MAX_GIT_PATHS = 1000;
+export declare const HARD_MAX_GIT_PATHS = 10000;
+export declare const DEFAULT_MAX_GIT_REF_BYTES = 1024;
+export declare const HARD_MAX_GIT_REF_BYTES = 4096;
+export declare const DEFAULT_MAX_GIT_MESSAGE_BYTES: number;
+export declare const HARD_MAX_GIT_MESSAGE_BYTES: number;
+export declare const DEFAULT_MAX_GIT_OUTPUT_BYTES: number;
+export declare const HARD_MAX_GIT_OUTPUT_BYTES: number;
+export declare const DEFAULT_MAX_GIT_DIFF_LINES = 10000;
+export declare const HARD_MAX_GIT_DIFF_LINES = 100000;
+export declare const DEFAULT_MAX_GIT_CHANGED_FILES = 1000;
+export declare const HARD_MAX_GIT_CHANGED_FILES = 10000;
+export declare const DEFAULT_MAX_GIT_PATCH_BYTES: number;
+export declare const HARD_MAX_GIT_PATCH_BYTES: number;
+export declare const DEFAULT_MAX_GIT_WORKTREES = 4;
+export declare const HARD_MAX_GIT_WORKTREES = 16;
+export declare const DEFAULT_GIT_TIMEOUT_MS = 120000;
+export declare const HARD_GIT_TIMEOUT_MS = 600000;
+export declare const DEFAULT_MAX_CHECK_NAMES = 8;
+export declare const HARD_MAX_CHECK_NAMES = 32;
+export declare const DEFAULT_MAX_CHECK_CONCURRENCY = 1;
+export declare const HARD_MAX_CHECK_CONCURRENCY = 4;
+export declare const DEFAULT_CHECK_TIMEOUT_MS: number;
+export declare const HARD_CHECK_TIMEOUT_MS: number;
+export declare const DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES = 2000;
+export declare const HARD_MAX_CHECK_DIAGNOSTIC_LINES = 100000;
+export declare const DEFAULT_MAX_CHECK_OUTPUT_BYTES: number;
+export declare const HARD_MAX_CHECK_OUTPUT_BYTES: number;
+export declare const DEFAULT_MAX_PR_HANDOFF_BYTES: number;
+export declare const HARD_MAX_PR_HANDOFF_BYTES: number;
+export declare const DEFAULT_MAX_PR_COMMITS = 100;
+export declare const HARD_MAX_PR_COMMITS = 1000;
+/** Durable coding plan / checkpoint metadata defaults and hard caps (Phase 4 Task 4). */
+export declare const DEFAULT_MAX_PLAN_BYTES: number;
+export declare const HARD_MAX_PLAN_BYTES: number;
+export declare const DEFAULT_MAX_TODOS = 1000;
+export declare const HARD_MAX_TODOS = 10000;
+export declare const DEFAULT_MAX_TODO_TEXT_BYTES = 512;
+export declare const HARD_MAX_TODO_TEXT_BYTES = 4096;
+export declare const DEFAULT_MAX_CODING_ARTIFACTS = 16;
+export declare const HARD_MAX_CODING_ARTIFACTS = 64;
+export declare const DEFAULT_MAX_CODING_ARTIFACT_BYTES: number;
+export declare const HARD_MAX_CODING_ARTIFACT_BYTES: number;
+export declare const DEFAULT_MAX_CHECK_SUMMARY_BYTES = 1024;
+export declare const HARD_MAX_CHECK_SUMMARY_BYTES = 8192;
+export declare const DEFAULT_MAX_CODING_CHECKPOINT_BYTES: number;
+export declare const HARD_MAX_CODING_CHECKPOINT_BYTES: number;
 /** Validate one configurable coding resource limit. Invalid values fail instead of clamping. */
 export declare function validateCodingLimit(name: string, value: number, hardCap: number): number;
+/** Validate a non-negative integer limit (0 allowed), still capped. */
+export declare function validateCodingLimitAllowZero(name: string, value: number, hardCap: number): number;

package/dist/limits.js

@@ -18,6 +18,80 @@ export const DEFAULT_SHELL_TIMEOUT_SECONDS = 600;
 export const HARD_SHELL_TIMEOUT_SECONDS = 3_600;
 export const DEFAULT_MAX_TOTAL_OUTPUT_BYTES = 64 * 1024 * 1024;
 export const HARD_MAX_TOTAL_OUTPUT_BYTES = 1024 * 1024 * 1024;
+/** Repository list/search defaults and hard caps (Phase 4 / review-coverage). */
+export const DEFAULT_MAX_REPO_DEPTH = 32;
+export const HARD_MAX_REPO_DEPTH = 128;
+export const DEFAULT_MAX_REPO_ENTRIES = 10_000;
+export const HARD_MAX_REPO_ENTRIES = 100_000;
+export const DEFAULT_MAX_REPO_FILES = 10_000;
+export const HARD_MAX_REPO_FILES = 100_000;
+export const DEFAULT_MAX_REPO_RESULTS = 1_000;
+export const HARD_MAX_REPO_RESULTS = 10_000;
+export const DEFAULT_MAX_REPO_CONCURRENCY = 8;
+export const HARD_MAX_REPO_CONCURRENCY = 32;
+export const DEFAULT_MAX_SEARCH_SCAN_BYTES = 64 * 1024 * 1024;
+export const HARD_MAX_SEARCH_SCAN_BYTES = 1024 * 1024 * 1024;
+export const DEFAULT_MAX_SEARCH_FILE_BYTES = 8 * 1024 * 1024;
+export const HARD_MAX_SEARCH_FILE_BYTES = 64 * 1024 * 1024;
+export const DEFAULT_MAX_SEARCH_MATCHES = 1_000;
+export const HARD_MAX_SEARCH_MATCHES = 10_000;
+export const DEFAULT_MAX_SEARCH_PATTERN_BYTES = 512;
+export const HARD_MAX_SEARCH_PATTERN_BYTES = 4_096;
+export const DEFAULT_MAX_SEARCH_LINE_BYTES = 50 * 1024;
+export const HARD_MAX_SEARCH_LINE_BYTES = 1024 * 1024;
+export const DEFAULT_MAX_SEARCH_CONTEXT_LINES = 5;
+export const HARD_MAX_SEARCH_CONTEXT_LINES = 20;
+export const DEFAULT_MAX_SEARCH_TIME_MS = 30_000;
+export const HARD_MAX_SEARCH_TIME_MS = 300_000;
+export const DEFAULT_BINARY_SNIFF_BYTES = 8_192;
+/** Structured Git / named-check / PR-handoff defaults and hard caps (Phase 4). */
+export const DEFAULT_MAX_GIT_PATHS = 1_000;
+export const HARD_MAX_GIT_PATHS = 10_000;
+export const DEFAULT_MAX_GIT_REF_BYTES = 1_024;
+export const HARD_MAX_GIT_REF_BYTES = 4_096;
+export const DEFAULT_MAX_GIT_MESSAGE_BYTES = 64 * 1024;
+export const HARD_MAX_GIT_MESSAGE_BYTES = 256 * 1024;
+export const DEFAULT_MAX_GIT_OUTPUT_BYTES = 4 * 1024 * 1024;
+export const HARD_MAX_GIT_OUTPUT_BYTES = 64 * 1024 * 1024;
+export const DEFAULT_MAX_GIT_DIFF_LINES = 10_000;
+export const HARD_MAX_GIT_DIFF_LINES = 100_000;
+export const DEFAULT_MAX_GIT_CHANGED_FILES = 1_000;
+export const HARD_MAX_GIT_CHANGED_FILES = 10_000;
+export const DEFAULT_MAX_GIT_PATCH_BYTES = 16 * 1024 * 1024;
+export const HARD_MAX_GIT_PATCH_BYTES = 64 * 1024 * 1024;
+export const DEFAULT_MAX_GIT_WORKTREES = 4;
+export const HARD_MAX_GIT_WORKTREES = 16;
+export const DEFAULT_GIT_TIMEOUT_MS = 120_000;
+export const HARD_GIT_TIMEOUT_MS = 600_000;
+export const DEFAULT_MAX_CHECK_NAMES = 8;
+export const HARD_MAX_CHECK_NAMES = 32;
+export const DEFAULT_MAX_CHECK_CONCURRENCY = 1;
+export const HARD_MAX_CHECK_CONCURRENCY = 4;
+export const DEFAULT_CHECK_TIMEOUT_MS = 10 * 60_000;
+export const HARD_CHECK_TIMEOUT_MS = 60 * 60_000;
+export const DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES = 2_000;
+export const HARD_MAX_CHECK_DIAGNOSTIC_LINES = 100_000;
+export const DEFAULT_MAX_CHECK_OUTPUT_BYTES = 4 * 1024 * 1024;
+export const HARD_MAX_CHECK_OUTPUT_BYTES = 64 * 1024 * 1024;
+export const DEFAULT_MAX_PR_HANDOFF_BYTES = 256 * 1024;
+export const HARD_MAX_PR_HANDOFF_BYTES = 1024 * 1024;
+export const DEFAULT_MAX_PR_COMMITS = 100;
+export const HARD_MAX_PR_COMMITS = 1_000;
+/** Durable coding plan / checkpoint metadata defaults and hard caps (Phase 4 Task 4). */
+export const DEFAULT_MAX_PLAN_BYTES = 256 * 1024;
+export const HARD_MAX_PLAN_BYTES = 1024 * 1024;
+export const DEFAULT_MAX_TODOS = 1_000;
+export const HARD_MAX_TODOS = 10_000;
+export const DEFAULT_MAX_TODO_TEXT_BYTES = 512;
+export const HARD_MAX_TODO_TEXT_BYTES = 4_096;
+export const DEFAULT_MAX_CODING_ARTIFACTS = 16;
+export const HARD_MAX_CODING_ARTIFACTS = 64;
+export const DEFAULT_MAX_CODING_ARTIFACT_BYTES = 256 * 1024 * 1024;
+export const HARD_MAX_CODING_ARTIFACT_BYTES = 2 * 1024 * 1024 * 1024;
+export const DEFAULT_MAX_CHECK_SUMMARY_BYTES = 1_024;
+export const HARD_MAX_CHECK_SUMMARY_BYTES = 8_192;
+export const DEFAULT_MAX_CODING_CHECKPOINT_BYTES = 64 * 1024;
+export const HARD_MAX_CODING_CHECKPOINT_BYTES = 512 * 1024;
 /** Validate one configurable coding resource limit. Invalid values fail instead of clamping. */
 export function validateCodingLimit(name, value, hardCap) {
     if (!Number.isSafeInteger(value) || value < 1 || value > hardCap) {
@@ -25,4 +99,11 @@ export function validateCodingLimit(name, value, hardCap) {
     }
     return value;
 }
+/** Validate a non-negative integer limit (0 allowed), still capped. */
+export function validateCodingLimitAllowZero(name, value, hardCap) {
+    if (!Number.isSafeInteger(value) || value < 0 || value > hardCap) {
+        throw new Error(`${name} must be a non-negative safe integer at most ${hardCap}`);
+    }
+    return value;
+}
 //# sourceMappingURL=limits.js.map

package/dist/list.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `repo_list` tool: bounded native repository listing.
+ */
+import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
+import { type RepositoryLimitOptions, type RepositoryOperations } from "./repository.js";
+export interface ListToolOptions {
+    executionPolicy?: ExecutionPolicy;
+    operations?: RepositoryOperations;
+    repository?: RepositoryLimitOptions;
+    maxDepth?: number;
+    maxResults?: number;
+    exclude?: readonly string[];
+}
+export declare function createRepoListTool(cwd: string, options?: ListToolOptions): ToolDefinition;