@autohq/cli 0.1.340 → 0.1.342

package/dist/agent-bridge.js

@@ -19426,6 +19426,49 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// ../../packages/protocol/src/content-sanitizer.ts
+function sanitizeUnstorableStrings(value2) {
+  return sanitizeValue(value2);
+}
+var UNSTORABLE_STRING_CONTENT = (
+  // biome-ignore lint/suspicious/noControlCharactersInRegex: matching NUL is the point
+  /\u0000|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g
+);
+var REPLACEMENT_CHARACTER = "\uFFFD";
+function sanitizeString(value2) {
+  UNSTORABLE_STRING_CONTENT.lastIndex = 0;
+  if (!UNSTORABLE_STRING_CONTENT.test(value2)) {
+    return value2;
+  }
+  return value2.replace(UNSTORABLE_STRING_CONTENT, REPLACEMENT_CHARACTER);
+}
+function sanitizeValue(value2) {
+  if (typeof value2 === "string") {
+    return sanitizeString(value2);
+  }
+  if (Array.isArray(value2)) {
+    let changed = false;
+    const next = value2.map((item) => {
+      const sanitized = sanitizeValue(item);
+      changed ||= sanitized !== item;
+      return sanitized;
+    });
+    return changed ? next : value2;
+  }
+  if (typeof value2 === "object" && value2 !== null) {
+    let changed = false;
+    const next = {};
+    for (const [key, item] of Object.entries(value2)) {
+      const sanitizedKey = sanitizeString(key);
+      const sanitizedItem = sanitizeValue(item);
+      changed ||= sanitizedKey !== key || sanitizedItem !== item;
+      next[sanitizedKey] = sanitizedItem;
+    }
+    return changed ? next : value2;
+  }
+  return value2;
+}
+
 // ../../packages/protocol/src/index.ts
 var OpaqueIdSchema = external_exports.string().trim().min(1);
 var SessionIdSchema = OpaqueIdSchema.brand();
@@ -19797,6 +19840,9 @@ var RuntimeBridgeOutputEnvelopeSchema = external_exports.union([
   RuntimeBridgeOutputUiMessagePartEnvelopeSchema,
   RuntimeBridgeOutputUiMessageCompletedEnvelopeSchema
 ]);
+function isLiveOnlyRuntimeOutputEnvelope(envelope) {
+  return envelope.type === "ui.message.chunk" || envelope.type === "conversation.delta";
+}
 function legacyRuntimeTurnStatus(entry, sessionStatusAfter) {
   if (sessionStatusAfter === "failed" || entry.status === "failed") {
     return "failed";
@@ -23434,7 +23480,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.340",
+  version: "0.1.342",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -44776,6 +44822,16 @@ var AgentBridgeOutputBuffer = class {
         return;
       } catch (error51) {
         if (!(error51 instanceof AgentBridgeOutputAckTimeoutError)) {
+          this.input.runtimeLogger?.error(
+            "agent_bridge_output_buffer_emit_rejected_definitively",
+            this.outputLogContext(output, {
+              error: error51 instanceof Error ? error51.message : String(error51),
+              socket_cycle: this.input.cycleSocket ? "requested" : "unavailable",
+              pending_count: this.pendingOutputs.size
+            })
+          );
+          this.quarantineAfterRepeatedExhausts(output);
+          this.input.cycleSocket?.();
           throw error51;
         }
         const backoffMs = AGENT_BRIDGE_OUTPUT_ACK_RETRY_BACKOFF_MS[attempt];
@@ -44851,7 +44907,16 @@ var AgentBridgeOutputBuffer = class {
     await this.drainPendingOutputs();
   }
   enqueueOutput(output) {
-    const bounded = boundOutputEnvelope(output);
+    const sanitized = isLiveOnlyRuntimeOutputEnvelope(output) ? output : sanitizeUnstorableStrings(output);
+    if (sanitized !== output) {
+      this.input.runtimeLogger?.warn(
+        "agent_bridge_output_envelope_sanitized",
+        this.outputLogContext(sanitized, {
+          pending_count: this.pendingOutputs.size
+        })
+      );
+    }
+    const bounded = boundOutputEnvelope(sanitized);
     if (bounded.truncated) {
       this.input.runtimeLogger?.warn(
         "agent_bridge_output_envelope_truncated",

package/dist/index.js

@@ -30499,7 +30499,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.340",
+      version: "0.1.342",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -40350,6 +40350,51 @@ async function readStream(stream) {
 
 // ../../packages/protocol/src/index.ts
 init_zod();
+
+// ../../packages/protocol/src/content-sanitizer.ts
+function sanitizeUnstorableStrings(value) {
+  return sanitizeValue(value);
+}
+var UNSTORABLE_STRING_CONTENT = (
+  // biome-ignore lint/suspicious/noControlCharactersInRegex: matching NUL is the point
+  /\u0000|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g
+);
+var REPLACEMENT_CHARACTER = "\uFFFD";
+function sanitizeString(value) {
+  UNSTORABLE_STRING_CONTENT.lastIndex = 0;
+  if (!UNSTORABLE_STRING_CONTENT.test(value)) {
+    return value;
+  }
+  return value.replace(UNSTORABLE_STRING_CONTENT, REPLACEMENT_CHARACTER);
+}
+function sanitizeValue(value) {
+  if (typeof value === "string") {
+    return sanitizeString(value);
+  }
+  if (Array.isArray(value)) {
+    let changed = false;
+    const next = value.map((item) => {
+      const sanitized = sanitizeValue(item);
+      changed ||= sanitized !== item;
+      return sanitized;
+    });
+    return changed ? next : value;
+  }
+  if (typeof value === "object" && value !== null) {
+    let changed = false;
+    const next = {};
+    for (const [key, item] of Object.entries(value)) {
+      const sanitizedKey = sanitizeString(key);
+      const sanitizedItem = sanitizeValue(item);
+      changed ||= sanitizedKey !== key || sanitizedItem !== item;
+      next[sanitizedKey] = sanitizedItem;
+    }
+    return changed ? next : value;
+  }
+  return value;
+}
+
+// ../../packages/protocol/src/index.ts
 var OpaqueIdSchema2 = external_exports.string().trim().min(1);
 var SessionIdSchema2 = OpaqueIdSchema2.brand();
 var SessionCommandIdSchema2 = OpaqueIdSchema2.brand();
@@ -40720,6 +40765,9 @@ var RuntimeBridgeOutputEnvelopeSchema = external_exports.union([
   RuntimeBridgeOutputUiMessagePartEnvelopeSchema,
   RuntimeBridgeOutputUiMessageCompletedEnvelopeSchema
 ]);
+function isLiveOnlyRuntimeOutputEnvelope(envelope) {
+  return envelope.type === "ui.message.chunk" || envelope.type === "conversation.delta";
+}
 function legacyRuntimeTurnStatus(entry, sessionStatusAfter) {
   if (sessionStatusAfter === "failed" || entry.status === "failed") {
     return "failed";
@@ -41990,6 +42038,16 @@ var AgentBridgeOutputBuffer = class {
         return;
       } catch (error51) {
         if (!(error51 instanceof AgentBridgeOutputAckTimeoutError)) {
+          this.input.runtimeLogger?.error(
+            "agent_bridge_output_buffer_emit_rejected_definitively",
+            this.outputLogContext(output, {
+              error: error51 instanceof Error ? error51.message : String(error51),
+              socket_cycle: this.input.cycleSocket ? "requested" : "unavailable",
+              pending_count: this.pendingOutputs.size
+            })
+          );
+          this.quarantineAfterRepeatedExhausts(output);
+          this.input.cycleSocket?.();
           throw error51;
         }
         const backoffMs = AGENT_BRIDGE_OUTPUT_ACK_RETRY_BACKOFF_MS[attempt];
@@ -42065,7 +42123,16 @@ var AgentBridgeOutputBuffer = class {
     await this.drainPendingOutputs();
   }
   enqueueOutput(output) {
-    const bounded = boundOutputEnvelope(output);
+    const sanitized = isLiveOnlyRuntimeOutputEnvelope(output) ? output : sanitizeUnstorableStrings(output);
+    if (sanitized !== output) {
+      this.input.runtimeLogger?.warn(
+        "agent_bridge_output_envelope_sanitized",
+        this.outputLogContext(sanitized, {
+          pending_count: this.pendingOutputs.size
+        })
+      );
+    }
+    const bounded = boundOutputEnvelope(sanitized);
     if (bounded.truncated) {
       this.input.runtimeLogger?.warn(
         "agent_bridge_output_envelope_truncated",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.340",
+  "version": "0.1.342",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"