@arnilo/prism-coding-agent 0.2.4 → 0.2.6

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.2.6] - unreleased
+
+### Added
+- **Bounded patch review and diagnostics** (plan 026 Task 6): `createCodingPatchReviewManifest` builds a bounded manifest (repository/worktree identity, base/head, patch digest, changed paths, diffstat, check summaries, diagnostic summaries; caps revisions 8/32, diagnostics 500/5000, manifest 64 KiB/256 KiB) and a structural ArtifactService input embedding it in the artifact preview; `assertCodingPatchAccepted` derives pending/accepted/rejected/superseded bound to the exact artifact revision + digest + identity — any patch/repository/worktree/base/head change supersedes prior acceptance and stale acceptances are refused (newer revision attached after approval); acceptance never applies/commits/pushes/merges; raw patch bodies, commands, env, secrets never persisted (`ERR_PRISM_REVIEW_*`). `normalizeDiagnostics`/`diagnosticDelta` normalize host-parsed check diagnostics and LSP push/pull diagnostics into one bounded shape (`file:source:position:code` identity) with deterministic added/removed/unchanged deltas, per-file caps, containment, control-character stripping, and stale-version rejection. LSP stays opt-in: `LanguageIntelligence.syncDocument` (full-content didChange, monotonic versions) and `.diagnosticDelta` (resultId pull reuse, changed-files-only refresh) extend the standalone host-activated factory — no LSP server spawns from `createCodingTools`/`createAllTools` or any agent assembly.
+
+### Deferred
+- **Forge breadth stays demand-gated** (plan 026 Task 4): no GitLab or Bitbucket adapter ships while no named consumer is recorded in the phase26 freeze manifest demand registry (`scripts/phase26-freeze-manifest.json`); `forge/gitlab.ts`/`bitbucket.ts` remain absent and the forge barrel exports no such adapter.
+
+### Added
+- **Durable process recovery** (plan 026 Task 5): optional `checkpoints`/`leases`/`ownerId` (all three together, partial config fails closed) persist intent before spawn and CAS/fence-write every lifecycle transition under per-record leases (30 s/300 s TTL, monotonic fencing tokens, serialized per-record write chains). `recover()` is attach-if-attested via an optional host `recoveryBackend` (opaque non-secret `ref` on PTY/sandbox handles, bounded attach timeout 30 s/120 s); starting/running records otherwise atomically become `unknown` with exitCode null — no fabricated exit, no PID probing, no duplicate spawn. Two replicas cannot both own/attach/mutate a process (held-lease skip + CAS/fence rejection); `cancelOwned` after recovery reaches the attached backend or records unknown. Durable records (32/128 cap, oldest-terminal eviction) are metadata only — never a handle, output, env, token, or credential; corrupt/forbidden/cross-tenant records fail closed. New errors `ERR_PRISM_RECOVERY_*` (unsupported/limit/ownership/fence/unknown/untrusted/timeout).
+- **Coding workspace lifecycle** (plan 026 Task 3): `createCodingWorkspaceLifecycle` registers host-approved repositories and creates/lists/locks/verifies/removes linked worktrees per task behind durable `CheckpointStore` CAS records (separate `prism.coding-agent.workspace.v1` namespace, schemaVersion 1, 64 KiB/256 KiB) and `LeaseStore` fencing (30 s/300 s TTL, monotonic fencing tokens; stale workers reject with `ERR_PRISM_WORKSPACE_FENCE`). Records carry credential-free remote fingerprints (redacted remote URL + default branch, sha256), base/head shas, worktree id/path, ownership scope, and artifact refs only. `verify` revalidates root/worktree containment, head, and fingerprints before reuse; cleanup refuses dirty/locked/unowned/missing/mismatched trees and the main worktree unless the host policy allows the documented action, persisting partial failure as `unknown` for reconciliation. `GitOperations.worktree` gains `lock`/`unlock` and porcelain `locked`/`lockReason`; new `fingerprint()` reports the redacted remote identity; new errors `ERR_PRISM_WORKSPACE_*` (unknown/limit/ownership/fence/dirty/locked/main/path-escape/fingerprint); caps 4/16 repositories and worktrees, 100/1000 cleanup operations.
+- **Host-indexed repository search** (plan 026 Task 2): `createIndexedRepositoryOperations` composes a host-owned `RepositoryIndexBackend` (`update/remove/search/status/dispose`) with the literal fallback; `repo_search` gains explicit `indexed_literal`/`semantic` modes behind `createRepoSearchTool({ modes })` with literal staying the default. Stale/failed/unsupported indexes fail closed with `ERR_PRISM_INDEX_*` (no silent downgrade); results are containment-checked, score-validated, snippet/result-capped, and labeled `untrusted_index` with provenance/freshness metadata. Update caps 1000 changes / 16 MiB per batch (hard 10000 / 64 MiB), stale window 60 s (hard 300 s), query timeout 30 s (hard 120 s). Benchmark: 100000-file fixture, query p95 ≤ 250 ms, 1000-file update ≤ 1 s, heap +64 MiB.
+
+### Changed
+- **host-selected PTY backend** (plan 026 Task 1): `createProcessSessions` gains an optional `ptyBackend` — `pty: true` delegates only to the host backend with bounded terminal geometry/TERM (120×40 default, hard 500×200), attach timeout (30 s / 120 s), resize rate limit (60/min / 600/min), and backend metadata caps (4 KiB / 16 KiB); absent or `startProcess`-less backends fail closed with `ERR_PRISM_PROCESS_PTY_UNSUPPORTED` before spawn; backend failures surface as `ERR_PRISM_PROCESS_PTY_BACKEND` without embedded backend error text; bounds overflow as `ERR_PRISM_PROCESS_PTY_LIMIT`. Non-PTY sessions are byte-compatible with 0.2.5.
+
 ## [0.1.6] - 2026-08-11
 
 ### Changed

package/README.md

@@ -111,6 +111,16 @@ Factories: `createShellTool`, `createReadTool`, `createWriteTool`, `createEditTo
 
 Helpers: `detectSupportedImageMimeType`, `detectSupportedImageMimeTypeFromFile`, `getShellConfig`, `killProcessTree`, `waitForChildProcess`, `withFileMutationQueue`, `resolveRepositoryLimits`, `matchGlobPattern`, `validateGlobPattern`, `writeCodingPlanFile`, `readCodingPlanFile`, `buildCodingCheckpointMetadata`, `validateCodingCheckpointMetadata`, `assertCodingResumeAllowed`, `fingerprintJson`, `runCodingGoalVerify`, `createCodingGoalVerifyWorkflow`, `suspendAskUserDecision`, `createAskUserDecisionResumeValidator`, `validateAskUserDecisionResume`, `validateAskUserDecisionAgentResume`. Default/hard coding, repository, Git, and plan/checkpoint limit constants are exported for host configuration.
 
+Interactive terminals (0.2.6, plan 026): `createProcessSessions` takes an optional host-selected PTY `ptyBackend` — `pty: true` delegates only to it (bounded geometry/TERM, attach timeout, resize rate limit, backend metadata caps; `ERR_PRISM_PROCESS_PTY_*`); without a backend, PTY fails closed as unsupported before spawn and the non-PTY path is unchanged.
+
+Host-indexed search (0.2.6, plan 026): `createIndexedRepositoryOperations` composes a host index with the literal fallback; `indexed_literal`/`semantic` modes are explicit, stale/failed/unsupported indexes fail closed with `ERR_PRISM_INDEX_*` (no silent downgrade), and results are containment-checked and labeled `untrusted_index`. See docs/indexed-code-search.md.
+
+Durable workspace lifecycle (0.2.6, plan 026): `createCodingWorkspaceLifecycle` registers host repositories and creates/locks/verifies/removes linked worktrees per task, with CheckpointStore CAS records, LeaseStore fencing, credential-free remote fingerprints, and a cleanup policy refusing dirty/locked/unowned/mismatched trees unless allowed. See docs/coding-workspaces.md.
+
+Bounded patch review and diagnostics (0.2.6, plan 026): `createCodingPatchReviewManifest` + `assertCodingPatchAccepted` bind review decisions to patch digest + artifact revision + repository/worktree/base/head identity (pending/accepted/rejected/superseded, composed over the server ArtifactService, never applying or committing automatically); `normalizeDiagnostics`/`diagnosticDelta` normalize host-parsed check output and LSP push/pull results into one bounded shape with deterministic added/removed/unchanged deltas; `LanguageIntelligence.syncDocument`/`diagnosticDelta` stay opt-in (standalone factory, never baked into tool construction). See docs/coding-review-and-diagnostics.md.
+
+Durable process recovery (0.2.6, plan 026): with `checkpoints` + `leases` + `ownerId`, `createProcessSessions` persists intent before spawn and CAS/fence-writes every transition; `recover()` is attach-if-attested via a host `recoveryBackend`, otherwise starting/running records atomically become `unknown` — no fabricated exit, no PID probing, replica-fenced so two replicas cannot both own a process. See docs/process-sessions.md.
+
 Option/operation types: `ToolsOptions`, `ShellToolOptions`/`BashOperations`, `ReadToolOptions`/`ReadOperations`/`ReadTextOptions`/`ReadTextResult`, `WriteToolOptions`/`WriteOperations`, `EditToolOptions`/`EditOperations`/`EditToolDetails`, `DeleteToolOptions`/`DeleteOperations`, `MoveToolOptions`/`MoveOperations`, `GlobToolOptions`, `ReadPathSet`.
 
 Text reads stop after one page or `maxScanBytes` instead of loading the file. Custom `ReadOperations` must implement bounded `readText` and `statFile`; custom `EditOperations` must implement `statFile` and honor the supplied read cap/signal. Successful truncated shell output is retained in an exclusive Unix `0600` temp file owned by the host; timeout, abort, output-limit, and spill failures remove unpublished spill files. Hosts should delete published `metadata.fullOutputPath` files after use.

package/dist/coding-checkpoint.js

@@ -178,6 +178,10 @@ export async function readCodingPlanFile(input) {
     };
 }
 export function buildCodingCheckpointMetadata(input) {
+    // Durable multi-repository workspace identity (worktree paths, heads,
+    // remote fingerprints, lease fencing) lives in the versioned
+    // CodingWorkspaceRecord (plan 026 Task 3, workspace-lifecycle.ts), not in
+    // this v1 metadata; resume revalidates that workspace before reuse.
     const metadata = {
         schemaVersion: CODING_CHECKPOINT_SCHEMA_VERSION,
         taskId: input.taskId,

package/dist/diagnostics.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Bounded normalization of host-parsed check diagnostics and deterministic
+ * added/removed/unchanged deltas between generations. No language/tool-
+ * specific parser catalog: hosts parse check output into RawDiagnostic and
+ * this module validates, bounds, and fingerprints it.
+ */
+export interface ResolvedDiagnosticsLimits {
+    readonly maxDiagnosticsPerFile: number;
+    readonly maxMessageBytes: number;
+}
+export declare function resolveDiagnosticsLimits(options?: {
+    readonly maxDiagnosticsPerFile?: number;
+    readonly maxMessageBytes?: number;
+}): ResolvedDiagnosticsLimits;
+export type DiagnosticSeverity = "error" | "warning" | "info" | "hint";
+export interface RawDiagnostic {
+    readonly file: string;
+    readonly line?: number;
+    readonly character?: number;
+    readonly endLine?: number;
+    readonly endCharacter?: number;
+    readonly severity?: DiagnosticSeverity;
+    readonly message: string;
+    readonly source?: string;
+    readonly code?: string | number;
+}
+/** Normalized diagnostic: workspace-relative file, bounded fields, generation tag. */
+export interface NormalizedDiagnostic {
+    readonly file: string;
+    readonly line: number;
+    readonly character: number;
+    readonly endLine: number;
+    readonly endCharacter: number;
+    readonly severity: DiagnosticSeverity;
+    readonly message: string;
+    readonly source: string;
+    readonly code?: string | number;
+    /** Monotonic producer generation (document version for LSP, host counter for checks). */
+    readonly generation: number;
+}
+export interface NormalizeDiagnosticsOptions {
+    /** Workspace root for containment; host-supplied, absolute. */
+    readonly workspaceRoot: string;
+    /** Diagnostics per file cap (default/hard 500/5000). */
+    readonly maxDiagnosticsPerFile?: number;
+    /** Message byte cap (default/hard 4096/16384). */
+    readonly maxMessageBytes?: number;
+    /** Generation stamped onto every normalized diagnostic. */
+    readonly generation: number;
+}
+export interface DiagnosticDelta {
+    readonly generation: number;
+    readonly added: readonly NormalizedDiagnostic[];
+    readonly removed: readonly NormalizedDiagnostic[];
+    readonly unchanged: readonly NormalizedDiagnostic[];
+    /** True when every input was deduplicated/truncated to the caps. */
+    readonly truncated: boolean;
+}
+export interface DiagnosticDeltaRequest {
+    /** Newest diagnostics, already normalized (generation must be >= previous). */
+    readonly next: readonly NormalizedDiagnostic[];
+    /** Prior generation view; entries older than next's generation are stale. */
+    readonly previous?: readonly NormalizedDiagnostic[];
+    /** Deterministic identity: file:source:line:character:code (default) or custom key. */
+    readonly identity?: (diagnostic: NormalizedDiagnostic) => string;
+}
+/** Stable identity key; the delta treats two diagnostics with the same key as one item. */
+export declare function diagnosticIdentity(diagnostic: NormalizedDiagnostic): string;
+/**
+ * Validate and bound host-parsed diagnostics. Throws nothing on malformed
+ * entries: each is dropped fail-closed (never partially normalized).
+ * Out-of-workspace paths, control characters, and non-finite positions are
+ * rejected per entry; overflow charges the per-file cap.
+ */
+export declare function normalizeDiagnostics(raw: readonly RawDiagnostic[], options: NormalizeDiagnosticsOptions): readonly NormalizedDiagnostic[];
+/**
+ * Deterministic added/removed/unchanged delta between two diagnostic
+ * generations. Identity is `diagnosticIdentity` (file:source:position:code);
+ * message/severity changes keep the same identity and count as unchanged —
+ * the delta tracks presence, not content edits (hosts diff content on demand).
+ * Stale previous entries (generation >= next's generation) are ignored.
+ */
+export declare function diagnosticDelta(request: DiagnosticDeltaRequest): DiagnosticDelta;

package/dist/diagnostics.js

@@ -0,0 +1,179 @@
+/**
+ * Bounded normalization of host-parsed check diagnostics and deterministic
+ * added/removed/unchanged deltas between generations. No language/tool-
+ * specific parser catalog: hosts parse check output into RawDiagnostic and
+ * this module validates, bounds, and fingerprints it.
+ */
+import { isAbsolute, relative, resolve } from "node:path";
+import { DEFAULT_MAX_DIAGNOSTIC_MESSAGE_BYTES, DEFAULT_MAX_REVIEW_DIAGNOSTICS, HARD_MAX_DIAGNOSTIC_MESSAGE_BYTES, HARD_MAX_REVIEW_DIAGNOSTICS, validateCodingLimit, } from "./limits.js";
+export function resolveDiagnosticsLimits(options) {
+    return {
+        maxDiagnosticsPerFile: validateCodingLimit("maxDiagnosticsPerFile", options?.maxDiagnosticsPerFile ?? DEFAULT_MAX_REVIEW_DIAGNOSTICS, HARD_MAX_REVIEW_DIAGNOSTICS),
+        maxMessageBytes: validateCodingLimit("maxMessageBytes", options?.maxMessageBytes ?? DEFAULT_MAX_DIAGNOSTIC_MESSAGE_BYTES, HARD_MAX_DIAGNOSTIC_MESSAGE_BYTES),
+    };
+}
+const CONTROL_PATTERN = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g;
+const TRUNCATE_SUFFIX = "…";
+/** Stable identity key; the delta treats two diagnostics with the same key as one item. */
+export function diagnosticIdentity(diagnostic) {
+    const code = diagnostic.code === undefined ? "" : String(diagnostic.code);
+    return `${diagnostic.file}:${diagnostic.source}:${diagnostic.line}:${diagnostic.character}:${code}`;
+}
+/**
+ * Validate and bound host-parsed diagnostics. Throws nothing on malformed
+ * entries: each is dropped fail-closed (never partially normalized).
+ * Out-of-workspace paths, control characters, and non-finite positions are
+ * rejected per entry; overflow charges the per-file cap.
+ */
+export function normalizeDiagnostics(raw, options) {
+    const limits = resolveDiagnosticsLimits({
+        maxDiagnosticsPerFile: options.maxDiagnosticsPerFile,
+        maxMessageBytes: options.maxMessageBytes,
+    });
+    const root = resolve(options.workspaceRoot);
+    const perFileCounts = {};
+    const out = [];
+    for (const entry of raw) {
+        if (!entry || typeof entry !== "object") {
+            continue;
+        }
+        const file = normalizeFile(root, entry.file);
+        if (!file) {
+            continue;
+        }
+        if (typeof entry.message !== "string" || entry.message.length === 0) {
+            continue;
+        }
+        const severity = entry.severity ?? "error";
+        if (severity !== "error" && severity !== "warning" && severity !== "info" && severity !== "hint") {
+            continue;
+        }
+        const line = finiteInt(entry.line, 0);
+        const character = finiteInt(entry.character, 0);
+        const endLine = finiteInt(entry.endLine, line);
+        const endCharacter = finiteInt(entry.endCharacter, character);
+        // negative or non-finite positions are rejected, never clamped
+        if (!Number.isSafeInteger(line) ||
+            !Number.isSafeInteger(character) ||
+            !Number.isSafeInteger(endLine) ||
+            !Number.isSafeInteger(endCharacter)) {
+            continue;
+        }
+        if (endLine < line || (endLine === line && endCharacter < character)) {
+            continue;
+        }
+        const message = truncateUtf8(entry.message.replace(CONTROL_PATTERN, ""), limits.maxMessageBytes);
+        if (message.length === 0) {
+            continue;
+        }
+        const code = validCode(entry.code) ? entry.code : undefined;
+        const source = truncateUtf8(String(entry.source ?? "check"), limits.maxMessageBytes);
+        const diagnostic = {
+            file,
+            line,
+            character,
+            endLine,
+            endCharacter,
+            severity,
+            message,
+            source,
+            code,
+            generation: options.generation,
+        };
+        const count = perFileCounts[file] ?? 0;
+        if (count >= limits.maxDiagnosticsPerFile) {
+            continue;
+        }
+        perFileCounts[file] = count + 1;
+        out.push(diagnostic);
+    }
+    return out;
+}
+/**
+ * Deterministic added/removed/unchanged delta between two diagnostic
+ * generations. Identity is `diagnosticIdentity` (file:source:position:code);
+ * message/severity changes keep the same identity and count as unchanged —
+ * the delta tracks presence, not content edits (hosts diff content on demand).
+ * Stale previous entries (generation >= next's generation) are ignored.
+ */
+export function diagnosticDelta(request) {
+    const identity = request.identity ?? diagnosticIdentity;
+    const nextGeneration = request.next[0]?.generation ?? 0;
+    const nextKeys = new Map();
+    const previousKeys = new Map();
+    let truncated = false;
+    for (const d of request.next) {
+        if (!d || typeof d !== "object") {
+            truncated = true;
+            continue;
+        }
+        const key = identity(d);
+        if (nextKeys.has(key)) {
+            truncated = true;
+            continue;
+        }
+        nextKeys.set(key, d);
+    }
+    for (const d of request.previous ?? []) {
+        if (!d || typeof d !== "object")
+            continue;
+        if (d.generation > nextGeneration)
+            continue; // stale: newer than the new view
+        const key = identity(d);
+        if (!previousKeys.has(key))
+            previousKeys.set(key, d);
+    }
+    const added = [];
+    const unchanged = [];
+    for (const d of nextKeys.values()) {
+        (previousKeys.has(identity(d)) ? unchanged : added).push(d);
+    }
+    const removed = [];
+    for (const d of previousKeys.values()) {
+        if (!nextKeys.has(identity(d)))
+            removed.push(d);
+    }
+    return { generation: nextGeneration, added, removed, unchanged, truncated };
+}
+function normalizeFile(root, file) {
+    if (typeof file !== "string" || file.length === 0)
+        return undefined;
+    if (file.includes("\0"))
+        return undefined;
+    if (isAbsolute(file)) {
+        const rel = relative(root, file);
+        if (rel.startsWith("..") || isAbsolute(rel))
+            return undefined;
+        return rel.split("\\").join("/");
+    }
+    const abs = resolve(root, file);
+    const rel = relative(root, abs);
+    if (rel.startsWith("..") || isAbsolute(rel))
+        return undefined;
+    return rel.split("\\").join("/");
+}
+function finiteInt(value, fallback) {
+    if (value === undefined)
+        return fallback; // absent position defaults
+    if (typeof value !== "number" || !Number.isFinite(value))
+        return Number.NaN; // malformed rejected
+    const floored = Math.floor(value);
+    if (floored < 0)
+        return Number.NaN; // negative positions rejected
+    return floored;
+}
+function validCode(value) {
+    return typeof value === "string" || (typeof value === "number" && Number.isFinite(value));
+}
+function truncateUtf8(text, maxBytes) {
+    let bytes = Buffer.byteLength(text, "utf8");
+    if (bytes <= maxBytes)
+        return text;
+    let result = text;
+    while (bytes > maxBytes && result.length > 0) {
+        result = result.slice(0, result.length - 1);
+        bytes = Buffer.byteLength(result, "utf8");
+    }
+    return result + TRUNCATE_SUFFIX;
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/git.d.ts

@@ -52,6 +52,21 @@ export interface PrHandoff {
     }[];
     readonly artifact?: ArtifactReference;
 }
+/** One entry from `git worktree list --porcelain -z` (plan 026 Task 3). */
+export interface GitWorktreeEntry {
+    path: string;
+    head?: string;
+    branch?: string;
+    /** Porcelain `locked` record present. */
+    locked?: boolean;
+    /** Lock reason text when the porcelain record carries one. */
+    lockReason?: string;
+}
+export interface GitFingerprint {
+    /** SHA-256 of the credential-free remote URL plus default branch; never the URL itself. */
+    readonly remoteFingerprint: string;
+    readonly defaultBranch?: string;
+}
 export interface GitOperations {
     status(options?: {
         includeIgnored?: boolean;
@@ -78,19 +93,23 @@ export interface GitOperations {
         checkpoint?: string;
     }>;
     worktree(options: {
-        action: "list" | "add" | "remove";
+        action: "list" | "add" | "remove" | "lock" | "unlock";
         path?: string;
         branch?: string;
         force?: boolean;
+        reason?: string;
         signal?: AbortSignal;
     }): Promise<{
-        worktrees: readonly {
-            path: string;
-            head?: string;
-            branch?: string;
-        }[];
+        worktrees: readonly GitWorktreeEntry[];
         path?: string;
     }>;
+    /**
+     * Repository identity for durable correlation: credential-free remote
+     * fingerprint plus default branch. Runs bounded read-only git queries only.
+     */
+    fingerprint(options?: {
+        signal?: AbortSignal;
+    }): Promise<GitFingerprint>;
     apply(options: {
         patch: string;
         action: "check" | "apply" | "reverse";
@@ -133,6 +152,8 @@ export interface CreateGitOperationsOptions extends CreateGitRunnerOptions, GitL
     };
 }
 export declare function createGitOperations(options: CreateGitOperationsOptions): Promise<GitOperations>;
+/** Strip credentials from a remote URL, keeping scheme and host/path (plan 026 Task 3). */
+export declare function redactRemoteUrl(url: string): string;
 export type { BoundGitRunner, CreateGitRunnerOptions, GitExecRequest, GitExecResult, GitRunner } from "./git-exec.js";
 export { createBoundGitRunner, GitError, runGitCli, SAFE_GIT_CONFIG_ARGS, SAFE_GIT_ENV, } from "./git-exec.js";
 export type { GitStatusBranch, GitStatusEntry, GitStatusEntryKind, GitStatusResult } from "./git-status.js";

package/dist/git.js

@@ -8,6 +8,7 @@
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { sha256Hex } from "./artifacts.js";
 import { createBoundGitRunner, GitError, gitRequireOk, gitText, } from "./git-exec.js";
 import { parsePorcelainV2 } from "./git-status.js";
 import { DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, validateCodingLimit, } from "./limits.js";
@@ -227,6 +228,12 @@ export async function createGitOperations(options) {
                 else if (current && record.startsWith("branch ")) {
                     current.branch = record.slice("branch ".length);
                 }
+                else if (current && record.startsWith("locked")) {
+                    current.locked = true;
+                    const reason = record.slice("locked".length).trim();
+                    if (reason)
+                        current.lockReason = reason;
+                }
             }
             if (current)
                 worktrees.push(current);
@@ -235,6 +242,23 @@ export async function createGitOperations(options) {
             }
             return { worktrees };
         }
+        if (request.action === "lock" || request.action === "unlock") {
+            if (!request.path)
+                throw new GitError("worktree path is required");
+            if (request.path.includes("\0") || request.path.startsWith("-")) {
+                throw new GitError("worktree path must not start with '-' or contain NUL");
+            }
+            const args = ["worktree", request.action];
+            if (request.action === "lock" && request.reason) {
+                if (request.reason.includes("\0") || Buffer.byteLength(request.reason, "utf8") > 1024) {
+                    throw new GitError("worktree lock reason must be bounded and NUL-free");
+                }
+                args.push("--reason", request.reason);
+            }
+            args.push("--", request.path);
+            await gitRequireOk(runner, { args, cwd, signal: request.signal, maxOutputBytes: limits.maxOutputBytes }, `git worktree ${request.action}`);
+            return { worktrees: (await worktree({ action: "list", signal: request.signal })).worktrees, path: request.path };
+        }
         if (request.action === "add") {
             const existing = await worktree({ action: "list", signal: request.signal });
             if (existing.worktrees.length >= limits.maxWorktrees) {
@@ -264,6 +288,22 @@ export async function createGitOperations(options) {
         await gitRequireOk(runner, { args, cwd, signal: request.signal, maxOutputBytes: limits.maxOutputBytes }, "git worktree remove");
         return { worktrees: (await worktree({ action: "list", signal: request.signal })).worktrees, path: request.path };
     }
+    async function fingerprint(options) {
+        const optional = async (args) => {
+            const result = await runner.exec({ args, cwd, signal: options?.signal, maxOutputBytes: 64 * 1024 });
+            if (result.exitCode !== 0)
+                return undefined;
+            const text = gitText(result).trim();
+            return text.length > 0 ? text : undefined;
+        };
+        const remoteUrl = await optional(["config", "--get", "remote.origin.url"]);
+        const originHead = await optional(["symbolic-ref", "-q", "--short", "refs/remotes/origin/HEAD"]);
+        const initDefault = await optional(["config", "--get", "init.defaultBranch"]);
+        const defaultBranch = originHead ? originHead.replace(/^origin\//, "") : initDefault;
+        const redacted = redactRemoteUrl(remoteUrl ?? "");
+        const fingerprintSource = Buffer.from(`${redacted}\0${defaultBranch ?? ""}`, "utf8");
+        return { remoteFingerprint: sha256Hex(fingerprintSource), defaultBranch };
+    }
     async function apply(request) {
         if (typeof request.patch !== "string")
             throw new GitError("patch must be a string");
@@ -488,7 +528,24 @@ export async function createGitOperations(options) {
         }
         return handoff;
     }
-    return { status, diff, branch, worktree, apply, commit, prHandoff };
+    return { status, diff, branch, worktree, fingerprint, apply, commit, prHandoff };
+}
+/** Strip credentials from a remote URL, keeping scheme and host/path (plan 026 Task 3). */
+export function redactRemoteUrl(url) {
+    if (typeof url !== "string" || url.length === 0)
+        return "";
+    let rest = url;
+    let scheme = "";
+    const schemeMatch = /^([a-z][a-z0-9+.-]*:\/\/)/i.exec(url);
+    if (schemeMatch) {
+        scheme = schemeMatch[1];
+        rest = url.slice(scheme.length);
+    }
+    const at = rest.lastIndexOf("@");
+    const slash = rest.indexOf("/");
+    if (at >= 0 && (slash < 0 || at < slash))
+        rest = rest.slice(at + 1);
+    return scheme + rest;
 }
 export { createBoundGitRunner, GitError, runGitCli, SAFE_GIT_CONFIG_ARGS, SAFE_GIT_ENV, } from "./git-exec.js";
 export { parsePorcelainV2 } from "./git-status.js";

package/dist/index.d.ts

@@ -30,17 +30,26 @@ export type { ReadOperations, ReadTextOptions, ReadTextResult, ReadToolOptions,
 export { createReadTool, DEFAULT_MAX_IMAGE_BYTES, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, } from "./read.js";
 export type { ReadPathSet } from "./read-path-set.js";
 export { createReadPathSet, createReadPathSetPersistence, DEFAULT_MAX_PERSISTED_READ_PATHS, DEFAULT_MAX_PERSISTED_READ_PATH_CHARS, READ_PATH_SET_NAMESPACE, } from "./read-path-set.js";
-export type { RepoEntryKind, RepoListEntry, RepositoryGlobRequest, RepositoryGlobResult, RepositoryLimitOptions, RepositoryListRequest, RepositoryListResult, RepositoryOperations, RepoSearchOutputMode, RepositorySearchMatch, RepositorySearchRequest, RepositorySearchResult, ResolvedRepositoryLimits, RepositoryWalk, RepositoryWalkEvent, RepositoryWalkLimits, } from "./repository.js";
-export { compileSearchPattern, createLocalRepositoryOperations, DEFAULT_REPO_EXCLUDE, isBinaryBuffer, RepositoryError, resolveRepoPath, resolveRepositoryLimits, toRepoRelative, } from "./repository.js";
+export type { RepoEntryKind, RepoListEntry, RepoSearchMode, IndexFileChange, IndexFacade, IndexLimitOptions, IndexResourceDiagnostics, IndexSearchHit, IndexState, IndexedRepositoryOptions, RepositoryGlobRequest, RepositoryGlobResult, RepositoryIndexBackend, RepositoryIndexQueryRequest, RepositoryIndexQueryResult, RepositoryIndexRemoveRequest, RepositoryIndexStatus, RepositoryIndexUpdateRequest, RepositoryLimitOptions, RepositoryListRequest, RepositoryListResult, RepositoryOperations, RepoSearchOutputMode, RepositorySearchMatch, RepositorySearchRequest, RepositorySearchResult, ResolvedIndexLimits, ResolvedRepositoryLimits, RepositoryWalk, RepositoryWalkEvent, RepositoryWalkLimits, } from "./repository.js";
+export { compileSearchPattern, createLocalRepositoryOperations, DEFAULT_REPO_EXCLUDE, IndexError, isBinaryBuffer, RepositoryError, resolveRepoPath, resolveRepositoryLimits, toRepoRelative, } from "./repository.js";
+export { createIndexedRepositoryOperations, resolveIndexLimits } from "./repository.js";
 export type { GitAwareRepositoryOptions } from "./git-aware-repository.js";
 export { createGitAwareRepositoryOperations, parseGitLsFilesZ } from "./git-aware-repository.js";
+export { createCodingWorkspaceLifecycle, resolveWorkspaceLimits, WORKSPACE_LOCK_REASON_PREFIX, WORKSPACE_NAMESPACE, WORKSPACE_SCHEMA_VERSION, WORKSPACE_STATES, WorkspaceError, } from "./workspace-lifecycle.js";
+export type { CodingWorkspaceLifecycle, CodingWorkspaceRecord, CreateCodingWorkspaceLifecycleOptions, ResolvedWorkspaceLimits, WorkspaceCleanupPolicy, WorkspaceCreateRequest, WorkspaceErrorCode, WorkspaceLimitOptions, WorkspaceRepositoryRecord, WorkspaceRepositoryRegistration, WorkspaceRepositoryState, WorkspaceState, } from "./workspace-lifecycle.js";
 export type { CreateLanguageIntelligenceOptions, LanguageDiagnostic, LanguageIntelligence, LanguageIntelligenceLimits, LanguageLocation, LanguageServerSpec, LanguageSymbol, LanguageTextEdit, LanguageWorkspaceEdit, } from "./language/index.js";
 export { applyTextEdits, createLanguageIntelligence, encodeLspFrame, LanguageIntelligenceError, LspFrameError, LspFrameReader, resolveLanguageIntelligenceLimits, } from "./language/index.js";
 export type { CreateGitHubForgeOptions, ForgeCheck, ForgeCredential, ForgeCredentialResolver, ForgeCredentialResolverSource, ForgeErrorCode, ForgeHandoffReport, ForgeIssueContext, ForgeLimits, ForgeOperations, ForgePullRequest, ResolvedForgeLimits, } from "./forge/index.js";
 export { createGitHubForge, ForgeError, resolveForgeLimits } from "./forge/index.js";
-export type { CodingProcessEvent, CreateProcessSessionsOptions, ProcessExitResult, ProcessOutputChunk, ProcessSandboxBackend, ProcessSandboxHandle, ProcessSandboxStartRequest, ProcessSession, ProcessSessionLimits, ProcessSessionMetadata, ProcessSessions, ProcessSessionState, ProcessStartRequest, ResolvedProcessSessionLimits, } from "./process/index.js";
+export type { CodingProcessEvent, CreateProcessSessionsOptions, ProcessExitResult, ProcessOutputChunk, ProcessPtyBackend, ProcessPtyHandle, ProcessPtyStartRequest, ProcessSandboxBackend, ProcessSandboxHandle, ProcessSandboxStartRequest, ProcessSession, ProcessSessionLimits, ProcessSessionMetadata, ProcessSessions, ProcessSessionState, ProcessStartRequest, ProcessTerminalRequest, ProcessTerminalResize, ResolvedProcessSessionLimits, } from "./process/index.js";
 export { createProcessSessions, ProcessSessionError, resolveProcessSessionLimits, } from "./process/index.js";
+export { PROCESS_RECOVERY_CATEGORY, PROCESS_RECOVERY_LEASE_NAMESPACE, PROCESS_RECOVERY_NAMESPACE, PROCESS_RECOVERY_SCHEMA_VERSION, ProcessRecoveryError, resolveProcessRecoveryLimits, validateBackendRef, validateProcessRecoveryRecord, } from "./process/index.js";
+export type { ProcessRecoveryBackend, ProcessRecoveryErrorCode, ProcessRecoveryLimits, ProcessRecoveryOutcome, ProcessRecoveryRecord, ProcessRecoveryRecordReport, ProcessRecoveryReport, ResolvedProcessRecoveryLimits, } from "./process/index.js";
 export type { SearchToolOptions } from "./search.js";
+export { CodingPatchReviewError, assertCodingPatchAccepted, createCodingPatchReviewManifest, resolveCodingReviewLimits, } from "./review.js";
+export type { AssertCodingPatchAcceptedInput, AssertCodingPatchAcceptedResult, CodingPatchReview, CodingPatchReviewCheckSummary, CodingPatchReviewDiagnosticSummary, CodingPatchReviewDiffstatEntry, CodingPatchReviewErrorCode, CodingPatchReviewIdentity, CodingPatchReviewState, CodingReviewArtifactInput, CodingReviewLimits, CreateCodingPatchReviewInput, ResolvedCodingReviewLimits, ReviewDiagnosticSeverity, } from "./review.js";
+export { diagnosticDelta, diagnosticIdentity, normalizeDiagnostics, resolveDiagnosticsLimits } from "./diagnostics.js";
+export type { DiagnosticDelta, DiagnosticDeltaRequest, DiagnosticSeverity, NormalizeDiagnosticsOptions, NormalizedDiagnostic, RawDiagnostic, ResolvedDiagnosticsLimits, } from "./diagnostics.js";
 export { createRepoSearchTool } from "./search.js";
 export type { BashExecOptions, BashOperations, BashSpawnContext, BashSpawnHook, ShellConfig, ShellToolOptions, } from "./shell.js";
 export { createLocalBashOperations, createShellTool, getShellConfig, killProcessTree, waitForChildProcess, } from "./shell.js";
@@ -48,7 +57,7 @@ export type { WriteOperations, WriteToolOptions } from "./write.js";
 export { createWriteTool } from "./write.js";
 export { enforceExecutionPolicy } from "./execution-policy.js";
 export { withFileMutationQueue } from "./file-mutation-queue.js";
-export { DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_BYTES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_MAX_FORGE_COMMENTS_PER_REVIEW, DEFAULT_MAX_FORGE_PAGES_PER_OPERATION, DEFAULT_MAX_FORGE_PAYLOAD_BYTES, DEFAULT_MAX_FORGE_REQUEST_CONCURRENCY, DEFAULT_MAX_FORGE_REQUEST_TIMEOUT_MS, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_LS_FILES_OUTPUT_BYTES, DEFAULT_MAX_LSP_DIAGNOSTICS_PER_FILE, DEFAULT_MAX_LSP_MESSAGE_BYTES, DEFAULT_MAX_LSP_PENDING_REQUESTS, DEFAULT_MAX_LSP_RESULTS_PER_QUERY, DEFAULT_MAX_LSP_SERVERS, DEFAULT_MAX_LSP_TIMEOUT_MS, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_LINES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_PROCESS_INPUT_BYTES, DEFAULT_MAX_PROCESS_LIFETIME_MS, DEFAULT_MAX_PROCESS_OUTPUT_CHUNK_BYTES, DEFAULT_MAX_PROCESS_SESSIONS, DEFAULT_MAX_PROCESS_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_CHECK_TIMEOUT_MS, HARD_GIT_TIMEOUT_MS, HARD_MAX_BYTES, HARD_MAX_CHECK_CONCURRENCY, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_MAX_FORGE_COMMENTS_PER_REVIEW, HARD_MAX_FORGE_PAGES_PER_OPERATION, HARD_MAX_FORGE_PAYLOAD_BYTES, HARD_MAX_FORGE_REQUEST_CONCURRENCY, HARD_MAX_FORGE_REQUEST_TIMEOUT_MS, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_LS_FILES_OUTPUT_BYTES, HARD_MAX_LSP_DIAGNOSTICS_PER_FILE, HARD_MAX_LSP_MESSAGE_BYTES, HARD_MAX_LSP_PENDING_REQUESTS, HARD_MAX_LSP_RESULTS_PER_QUERY, HARD_MAX_LSP_SERVERS, HARD_MAX_LSP_TIMEOUT_MS, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_PLAN_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_PROCESS_INPUT_BYTES, HARD_MAX_PROCESS_LIFETIME_MS, HARD_MAX_PROCESS_OUTPUT_CHUNK_BYTES, HARD_MAX_PROCESS_SESSIONS, HARD_MAX_PROCESS_TOTAL_OUTPUT_BYTES, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_WRITE_BYTES, HARD_SHELL_TIMEOUT_SECONDS, LSP_RESTARTS_PER_SERVER, } from "./limits.js";
+export { DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_BYTES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_MAX_FORGE_COMMENTS_PER_REVIEW, DEFAULT_MAX_FORGE_PAGES_PER_OPERATION, DEFAULT_MAX_FORGE_PAYLOAD_BYTES, DEFAULT_MAX_FORGE_REQUEST_CONCURRENCY, DEFAULT_MAX_FORGE_REQUEST_TIMEOUT_MS, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_LS_FILES_OUTPUT_BYTES, DEFAULT_MAX_LSP_DIAGNOSTICS_PER_FILE, DEFAULT_MAX_LSP_MESSAGE_BYTES, DEFAULT_MAX_LSP_PENDING_REQUESTS, DEFAULT_MAX_LSP_RESULTS_PER_QUERY, DEFAULT_MAX_LSP_SERVERS, DEFAULT_MAX_LSP_TIMEOUT_MS, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_LINES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_PROCESS_INPUT_BYTES, DEFAULT_MAX_PROCESS_LIFETIME_MS, DEFAULT_MAX_PROCESS_OUTPUT_CHUNK_BYTES, DEFAULT_MAX_PROCESS_SESSIONS, DEFAULT_MAX_PROCESS_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_PTY_ATTACH_TIMEOUT_MS, DEFAULT_MAX_PTY_BACKEND_METADATA_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_TERMINAL_COLUMNS, DEFAULT_MAX_TERMINAL_RESIZES_PER_MINUTE, DEFAULT_MAX_TERMINAL_ROWS, DEFAULT_MAX_TERMINAL_TERM_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_CHECK_TIMEOUT_MS, HARD_GIT_TIMEOUT_MS, HARD_MAX_BYTES, HARD_MAX_CHECK_CONCURRENCY, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_MAX_FORGE_COMMENTS_PER_REVIEW, HARD_MAX_FORGE_PAGES_PER_OPERATION, HARD_MAX_FORGE_PAYLOAD_BYTES, HARD_MAX_FORGE_REQUEST_CONCURRENCY, HARD_MAX_FORGE_REQUEST_TIMEOUT_MS, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_LS_FILES_OUTPUT_BYTES, HARD_MAX_LSP_DIAGNOSTICS_PER_FILE, HARD_MAX_LSP_MESSAGE_BYTES, HARD_MAX_LSP_PENDING_REQUESTS, HARD_MAX_LSP_RESULTS_PER_QUERY, HARD_MAX_LSP_SERVERS, HARD_MAX_LSP_TIMEOUT_MS, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_PLAN_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_PROCESS_INPUT_BYTES, HARD_MAX_PROCESS_LIFETIME_MS, HARD_MAX_PROCESS_OUTPUT_CHUNK_BYTES, HARD_MAX_PROCESS_SESSIONS, HARD_MAX_PROCESS_TOTAL_OUTPUT_BYTES, HARD_MAX_PTY_ATTACH_TIMEOUT_MS, HARD_MAX_PTY_BACKEND_METADATA_BYTES, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_TERMINAL_COLUMNS, HARD_MAX_TERMINAL_RESIZES_PER_MINUTE, HARD_MAX_TERMINAL_ROWS, HARD_MAX_TERMINAL_TERM_BYTES, HARD_MAX_WRITE_BYTES, HARD_SHELL_TIMEOUT_SECONDS, LSP_RESTARTS_PER_SERVER, } from "./limits.js";
 import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
 import type { DeleteToolOptions } from "./delete.js";
 import type { EditToolOptions } from "./edit.js";

package/dist/index.js

@@ -21,18 +21,29 @@ export { createRepoListTool } from "./list.js";
 export { createMoveTool } from "./move.js";
 export { createReadTool, DEFAULT_MAX_IMAGE_BYTES, detectSupportedImageMimeType, detectSupportedImageMimeTypeFromFile, } from "./read.js";
 export { createReadPathSet, createReadPathSetPersistence, DEFAULT_MAX_PERSISTED_READ_PATHS, DEFAULT_MAX_PERSISTED_READ_PATH_CHARS, READ_PATH_SET_NAMESPACE, } from "./read-path-set.js";
-export { compileSearchPattern, createLocalRepositoryOperations, DEFAULT_REPO_EXCLUDE, isBinaryBuffer, RepositoryError, resolveRepoPath, resolveRepositoryLimits, toRepoRelative, } from "./repository.js";
+export { compileSearchPattern, createLocalRepositoryOperations, DEFAULT_REPO_EXCLUDE, IndexError, isBinaryBuffer, RepositoryError, resolveRepoPath, resolveRepositoryLimits, toRepoRelative, } from "./repository.js";
+// host-indexed search seam (plan 026 Task 2): compose a host index with the
+// literal fallback; indexed_literal/semantic never fall back silently
+export { createIndexedRepositoryOperations, resolveIndexLimits } from "./repository.js";
 export { createGitAwareRepositoryOperations, parseGitLsFilesZ } from "./git-aware-repository.js";
+export { createCodingWorkspaceLifecycle, resolveWorkspaceLimits, WORKSPACE_LOCK_REASON_PREFIX, WORKSPACE_NAMESPACE, WORKSPACE_SCHEMA_VERSION, WORKSPACE_STATES, WorkspaceError, } from "./workspace-lifecycle.js";
 export { applyTextEdits, createLanguageIntelligence, encodeLspFrame, LanguageIntelligenceError, LspFrameError, LspFrameReader, resolveLanguageIntelligenceLimits, } from "./language/index.js";
 export { createGitHubForge, ForgeError, resolveForgeLimits } from "./forge/index.js";
 export { createProcessSessions, ProcessSessionError, resolveProcessSessionLimits, } from "./process/index.js";
+// durable process/ACP recovery seam (plan 026 Task 5): recover() is
+// attach-if-attested and never fabricates an exit code; exports below
+export { PROCESS_RECOVERY_CATEGORY, PROCESS_RECOVERY_LEASE_NAMESPACE, PROCESS_RECOVERY_NAMESPACE, PROCESS_RECOVERY_SCHEMA_VERSION, ProcessRecoveryError, resolveProcessRecoveryLimits, validateBackendRef, validateProcessRecoveryRecord, } from "./process/index.js";
+// bounded patch review (plan 026 Task 6): createCodingPatchReviewManifest +
+// assertCodingPatchAccepted bind decisions to digest + revision + identity
+export { CodingPatchReviewError, assertCodingPatchAccepted, createCodingPatchReviewManifest, resolveCodingReviewLimits, } from "./review.js";
+export { diagnosticDelta, diagnosticIdentity, normalizeDiagnostics, resolveDiagnosticsLimits } from "./diagnostics.js";
 export { createRepoSearchTool } from "./search.js";
 export { createLocalBashOperations, createShellTool, getShellConfig, killProcessTree, waitForChildProcess, } from "./shell.js";
 export { createWriteTool } from "./write.js";
 // --- generic primitives (re-exported for hosts that want them) ---
 export { enforceExecutionPolicy } from "./execution-policy.js";
 export { withFileMutationQueue } from "./file-mutation-queue.js";
-export { DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_BYTES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_MAX_FORGE_COMMENTS_PER_REVIEW, DEFAULT_MAX_FORGE_PAGES_PER_OPERATION, DEFAULT_MAX_FORGE_PAYLOAD_BYTES, DEFAULT_MAX_FORGE_REQUEST_CONCURRENCY, DEFAULT_MAX_FORGE_REQUEST_TIMEOUT_MS, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_LS_FILES_OUTPUT_BYTES, DEFAULT_MAX_LSP_DIAGNOSTICS_PER_FILE, DEFAULT_MAX_LSP_MESSAGE_BYTES, DEFAULT_MAX_LSP_PENDING_REQUESTS, DEFAULT_MAX_LSP_RESULTS_PER_QUERY, DEFAULT_MAX_LSP_SERVERS, DEFAULT_MAX_LSP_TIMEOUT_MS, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_LINES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_PROCESS_INPUT_BYTES, DEFAULT_MAX_PROCESS_LIFETIME_MS, DEFAULT_MAX_PROCESS_OUTPUT_CHUNK_BYTES, DEFAULT_MAX_PROCESS_SESSIONS, DEFAULT_MAX_PROCESS_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_CHECK_TIMEOUT_MS, HARD_GIT_TIMEOUT_MS, HARD_MAX_BYTES, HARD_MAX_CHECK_CONCURRENCY, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_MAX_FORGE_COMMENTS_PER_REVIEW, HARD_MAX_FORGE_PAGES_PER_OPERATION, HARD_MAX_FORGE_PAYLOAD_BYTES, HARD_MAX_FORGE_REQUEST_CONCURRENCY, HARD_MAX_FORGE_REQUEST_TIMEOUT_MS, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_LS_FILES_OUTPUT_BYTES, HARD_MAX_LSP_DIAGNOSTICS_PER_FILE, HARD_MAX_LSP_MESSAGE_BYTES, HARD_MAX_LSP_PENDING_REQUESTS, HARD_MAX_LSP_RESULTS_PER_QUERY, HARD_MAX_LSP_SERVERS, HARD_MAX_LSP_TIMEOUT_MS, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_PLAN_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_PROCESS_INPUT_BYTES, HARD_MAX_PROCESS_LIFETIME_MS, HARD_MAX_PROCESS_OUTPUT_CHUNK_BYTES, HARD_MAX_PROCESS_SESSIONS, HARD_MAX_PROCESS_TOTAL_OUTPUT_BYTES, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_WRITE_BYTES, HARD_SHELL_TIMEOUT_SECONDS, LSP_RESTARTS_PER_SERVER, } from "./limits.js";
+export { DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_GIT_TIMEOUT_MS, DEFAULT_MAX_BYTES, DEFAULT_MAX_CHECK_CONCURRENCY, DEFAULT_MAX_CHECK_DIAGNOSTIC_LINES, DEFAULT_MAX_CHECK_NAMES, DEFAULT_MAX_CHECK_OUTPUT_BYTES, DEFAULT_MAX_CHECK_SUMMARY_BYTES, DEFAULT_MAX_CODING_ARTIFACT_BYTES, DEFAULT_MAX_CODING_ARTIFACTS, DEFAULT_MAX_CODING_CHECKPOINT_BYTES, DEFAULT_MAX_EDIT_FILE_BYTES, DEFAULT_MAX_EDIT_INPUT_BYTES, DEFAULT_MAX_EDITS, DEFAULT_MAX_FORGE_COMMENTS_PER_REVIEW, DEFAULT_MAX_FORGE_PAGES_PER_OPERATION, DEFAULT_MAX_FORGE_PAYLOAD_BYTES, DEFAULT_MAX_FORGE_REQUEST_CONCURRENCY, DEFAULT_MAX_FORGE_REQUEST_TIMEOUT_MS, DEFAULT_MAX_GIT_CHANGED_FILES, DEFAULT_MAX_GIT_DIFF_LINES, DEFAULT_MAX_GIT_MESSAGE_BYTES, DEFAULT_MAX_GIT_OUTPUT_BYTES, DEFAULT_MAX_LS_FILES_OUTPUT_BYTES, DEFAULT_MAX_LSP_DIAGNOSTICS_PER_FILE, DEFAULT_MAX_LSP_MESSAGE_BYTES, DEFAULT_MAX_LSP_PENDING_REQUESTS, DEFAULT_MAX_LSP_RESULTS_PER_QUERY, DEFAULT_MAX_LSP_SERVERS, DEFAULT_MAX_LSP_TIMEOUT_MS, DEFAULT_MAX_GIT_PATCH_BYTES, DEFAULT_MAX_GIT_PATHS, DEFAULT_MAX_GIT_REF_BYTES, DEFAULT_MAX_GIT_WORKTREES, DEFAULT_MAX_LINES, DEFAULT_MAX_PLAN_BYTES, DEFAULT_MAX_PR_COMMITS, DEFAULT_MAX_PR_HANDOFF_BYTES, DEFAULT_MAX_PROCESS_INPUT_BYTES, DEFAULT_MAX_PROCESS_LIFETIME_MS, DEFAULT_MAX_PROCESS_OUTPUT_CHUNK_BYTES, DEFAULT_MAX_PROCESS_SESSIONS, DEFAULT_MAX_PROCESS_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_PTY_ATTACH_TIMEOUT_MS, DEFAULT_MAX_PTY_BACKEND_METADATA_BYTES, DEFAULT_MAX_REPO_CONCURRENCY, DEFAULT_MAX_REPO_DEPTH, DEFAULT_MAX_REPO_ENTRIES, DEFAULT_MAX_REPO_FILES, DEFAULT_MAX_REPO_RESULTS, DEFAULT_MAX_SEARCH_CONTEXT_LINES, DEFAULT_MAX_SEARCH_FILE_BYTES, DEFAULT_MAX_SEARCH_LINE_BYTES, DEFAULT_MAX_SEARCH_MATCHES, DEFAULT_MAX_SEARCH_PATTERN_BYTES, DEFAULT_MAX_SEARCH_SCAN_BYTES, DEFAULT_MAX_SEARCH_TIME_MS, DEFAULT_MAX_TEXT_SCAN_BYTES, DEFAULT_MAX_TODO_TEXT_BYTES, DEFAULT_MAX_TODOS, DEFAULT_MAX_TOTAL_OUTPUT_BYTES, DEFAULT_MAX_TERMINAL_COLUMNS, DEFAULT_MAX_TERMINAL_RESIZES_PER_MINUTE, DEFAULT_MAX_TERMINAL_ROWS, DEFAULT_MAX_TERMINAL_TERM_BYTES, DEFAULT_MAX_WRITE_BYTES, DEFAULT_SHELL_TIMEOUT_SECONDS, HARD_CHECK_TIMEOUT_MS, HARD_GIT_TIMEOUT_MS, HARD_MAX_BYTES, HARD_MAX_CHECK_CONCURRENCY, HARD_MAX_CHECK_DIAGNOSTIC_LINES, HARD_MAX_CHECK_NAMES, HARD_MAX_CHECK_OUTPUT_BYTES, HARD_MAX_CHECK_SUMMARY_BYTES, HARD_MAX_CODING_ARTIFACT_BYTES, HARD_MAX_CODING_ARTIFACTS, HARD_MAX_CODING_CHECKPOINT_BYTES, HARD_MAX_EDIT_FILE_BYTES, HARD_MAX_EDIT_INPUT_BYTES, HARD_MAX_EDITS, HARD_MAX_FORGE_COMMENTS_PER_REVIEW, HARD_MAX_FORGE_PAGES_PER_OPERATION, HARD_MAX_FORGE_PAYLOAD_BYTES, HARD_MAX_FORGE_REQUEST_CONCURRENCY, HARD_MAX_FORGE_REQUEST_TIMEOUT_MS, HARD_MAX_GIT_CHANGED_FILES, HARD_MAX_GIT_DIFF_LINES, HARD_MAX_GIT_MESSAGE_BYTES, HARD_MAX_GIT_OUTPUT_BYTES, HARD_MAX_LS_FILES_OUTPUT_BYTES, HARD_MAX_LSP_DIAGNOSTICS_PER_FILE, HARD_MAX_LSP_MESSAGE_BYTES, HARD_MAX_LSP_PENDING_REQUESTS, HARD_MAX_LSP_RESULTS_PER_QUERY, HARD_MAX_LSP_SERVERS, HARD_MAX_LSP_TIMEOUT_MS, HARD_MAX_GIT_PATCH_BYTES, HARD_MAX_GIT_PATHS, HARD_MAX_GIT_REF_BYTES, HARD_MAX_GIT_WORKTREES, HARD_MAX_IMAGE_BYTES, HARD_MAX_LINES, HARD_MAX_PLAN_BYTES, HARD_MAX_PR_COMMITS, HARD_MAX_PR_HANDOFF_BYTES, HARD_MAX_PROCESS_INPUT_BYTES, HARD_MAX_PROCESS_LIFETIME_MS, HARD_MAX_PROCESS_OUTPUT_CHUNK_BYTES, HARD_MAX_PROCESS_SESSIONS, HARD_MAX_PROCESS_TOTAL_OUTPUT_BYTES, HARD_MAX_PTY_ATTACH_TIMEOUT_MS, HARD_MAX_PTY_BACKEND_METADATA_BYTES, HARD_MAX_REPO_CONCURRENCY, HARD_MAX_REPO_DEPTH, HARD_MAX_REPO_ENTRIES, HARD_MAX_REPO_FILES, HARD_MAX_REPO_RESULTS, HARD_MAX_SEARCH_CONTEXT_LINES, HARD_MAX_SEARCH_FILE_BYTES, HARD_MAX_SEARCH_LINE_BYTES, HARD_MAX_SEARCH_MATCHES, HARD_MAX_SEARCH_PATTERN_BYTES, HARD_MAX_SEARCH_SCAN_BYTES, HARD_MAX_SEARCH_TIME_MS, HARD_MAX_TEXT_SCAN_BYTES, HARD_MAX_TODO_TEXT_BYTES, HARD_MAX_TODOS, HARD_MAX_TOTAL_OUTPUT_BYTES, HARD_MAX_TERMINAL_COLUMNS, HARD_MAX_TERMINAL_RESIZES_PER_MINUTE, HARD_MAX_TERMINAL_ROWS, HARD_MAX_TERMINAL_TERM_BYTES, HARD_MAX_WRITE_BYTES, HARD_SHELL_TIMEOUT_SECONDS, LSP_RESTARTS_PER_SERVER, } from "./limits.js";
 import { createDeleteTool } from "./delete.js";
 import { createEditTool } from "./edit.js";
 import { createGlobTool } from "./glob.js";

package/dist/language/client.d.ts

@@ -24,6 +24,10 @@ export declare class LspClient {
     private capabilities;
     /** file URI → latest diagnostics payload from publishDiagnostics */
     readonly diagnosticsByUri: Map<string, unknown>;
+    /** file URI → monotonic document version (didOpen=1, each didChange += 1) */
+    readonly documentVersions: Map<string, number>;
+    /** file URI → last pull-diagnostic resultId (textDocument/diagnostic) */
+    readonly pullResultIds: Map<string, string>;
     private readonly onUnexpectedExit;
     constructor(spec: LspServerSpec, limits: ResolvedLanguageIntelligenceLimits, hooks?: {
         onUnexpectedExit?: () => void;
@@ -32,6 +36,27 @@ export declare class LspClient {
     ensureStarted(signal?: AbortSignal): Promise<void>;
     request(method: string, params: unknown, signal?: AbortSignal): Promise<unknown>;
     notify(method: string, params: unknown): void;
+    /**
+     * Full-content textDocument/didChange (LSP 3.17; protocol-valid, no diff
+     * engine needed). Monotonic version: didOpen stamps 1, each didChange
+     * increments. No-op when the document was never opened.
+     */
+    didChange(uri: string, text: string): void;
+    /** true when the server advertises textDocument/diagnostic (pull diagnostics). */
+    hasPullDiagnostics(): boolean;
+    /**
+     * Pull diagnostics for one opened document (textDocument/diagnostic) with
+     * resultId reuse: `kind: "full"` replaces the set, `kind: "unchanged"`
+     * reuses the previous payload. Returns the version at request time so the
+     * caller can drop stale responses. Falls back to the push cache when the
+     * server has no pull support.
+     */
+    pullDiagnostics(uri: string, signal?: AbortSignal): Promise<{
+        kind: "full" | "unchanged";
+        diagnostics: unknown;
+        resultId?: string;
+        version: number;
+    }>;
     hasCapability(key: string): boolean;
     dispose(): Promise<void>;
     private write;