@cjhyy/code-shell 0.2.0 → 0.3.0

package/dist/client-base-GSFXPP2Y.js

@@ -0,0 +1 @@
+export{a as LLMClientBase}from'./chunk-OWBYLMDD.js';import'./chunk-FU7AHZNN.js';import'./chunk-DI26OUIU.js';import'./chunk-3QP5BQ3L.js';

package/dist/devtools-FBX4HVVY.js

@@ -0,0 +1 @@
+export{a as recordFrame,b as renderDevtools}from'./chunk-GYNO4R7R.js';import'./chunk-3QP5BQ3L.js';

package/dist/engine/engine.d.ts

@@ -51,6 +51,14 @@ export interface EngineConfig {
      * the loop to approve commands.
      */
     sandbox?: SandboxConfig;
+    /**
+     * True when this Engine is itself a sub-agent (spawned by another
+     * Engine's Agent tool). Threaded into ToolContext so the Agent tool can
+     * refuse re-entry — defense in depth against the tool-list strip in
+     * spawn(): if a tool registry regression ever leaks Agent into a child's
+     * pool, the runtime check still blocks the call.
+     */
+    isSubAgent?: boolean;
 }
 export interface EngineHookConfig {
     event: HookEventName;
@@ -98,6 +106,21 @@ export declare class Engine {
     /** Public accessor so UI/clients can read the resolved per-model window. */
     get maxContextTokens(): number;
     private resolveMaxContextTokens;
+    /**
+     * Emit a lifecycle hook with isSubAgent auto-merged into data so handlers
+     * can skip noisy injections for spawned children. All Engine-side hook
+     * emits should go through this wrapper to keep the context envelope
+     * uniform with TurnLoop.emitHook.
+     */
+    private emitHook;
+    /**
+     * Read settings.hooks and register a shell-runner wrapper handler per
+     * entry. Sub-agents skip shell hooks entirely — spawning child processes
+     * per emit for every sub-agent run would multiply token-side overhead
+     * for marginal value; explicit users who want sub-agent observability
+     * should register SDK-side handlers.
+     */
+    private registerSettingsHooks;
     constructor(config: EngineConfig);
     /**
      * Load models[] / providers[] from settings into the active ModelPool and
@@ -137,6 +160,12 @@ export declare class Engine {
         signal?: AbortSignal;
         sessionId?: string;
     }): Promise<EngineResult>;
+    /**
+     * Run the end-of-session memory pipeline as a fire-and-forget background
+     * task. Extracts durable memories from the transcript, saves a session
+     * summary, and conditionally triggers auto-dream consolidation.
+     */
+    private runMemoryPipeline;
     getToolRegistry(): ToolRegistry;
     /**
      * Switch the active model by pool key. Takes effect on the next run() call.

package/dist/engine/turn-loop.d.ts

@@ -40,6 +40,24 @@ export interface TurnLoopDeps {
     ctxOverheadStore: CtxOverheadStore;
     /** Current session id, used to key the overhead store. */
     sessionId: string;
+    /**
+     * Carried into every hook emit's `ctx.data.isSubAgent` so handlers can
+     * skip noisy injections for spawned children. Set by Engine from
+     * EngineConfig.isSubAgent (engine.ts:119).
+     */
+    isSubAgent?: boolean;
+    /**
+     * Reads/clears the most recent compaction event emitted by
+     * ContextManager since the last call. Returns `null` if no compaction
+     * fired since the previous check. The Engine wires this up so the
+     * turn loop can `post_compact` emit + inject hook messages without
+     * the ContextManager itself depending on HookRegistry.
+     */
+    consumePendingCompactInfo?: () => {
+        strategy: string;
+        before: number;
+        after: number;
+    } | null;
 }
 export interface TurnLoopResult {
     text: string;
@@ -62,6 +80,13 @@ export declare class TurnLoop {
     /** Last emitted ctx token estimate; used to skip no-op usage_update events. */
     private lastCtxEmit;
     constructor(deps: TurnLoopDeps, config: TurnLoopConfig);
+    /**
+     * Emit a lifecycle hook with isSubAgent + sessionId auto-merged into data.
+     * Returns the aggregated HookResult so callers can consume `messages` /
+     * `decision` / `stop`. Use this instead of `deps.hooks.emit` directly so
+     * every emit carries the same context envelope.
+     */
+    private emitHook;
     /**
      * Emit a usage_update so the UI ctx bar reflects current message-array
      * size. Called at every point where messages mutate: after a tool_result

package/dist/hooks/events.d.ts

@@ -5,16 +5,72 @@
  * Lifecycle hooks the engine emits.
  *
  * **Currently emitted** (handlers registered here will actually fire):
- *   - on_agent_start / on_agent_end        (engine.ts)
- *   - on_turn_start / on_turn_end          (turn-loop.ts)
- *   - pre_tool_use / post_tool_use         (executor.ts)
+ *   - on_session_start / on_session_end    (engine.ts) — fires once per Engine.run().
+ *                                          on_session_start handlers may return
+ *                                          `messages` to inject a <system-reminder>
+ *                                          at the head of the conversation, before
+ *                                          the current user prompt.
+ *   - on_agent_start / on_agent_end        (engine.ts) — notify-only; returned
+ *                                          messages are NOT consumed (the loop
+ *                                          is already armed by the time these
+ *                                          fire). Use on_session_start instead.
+ *   - user_prompt_submit                   (engine.ts) — fires once per run() for
+ *                                          every new user prompt (cold-start and
+ *                                          resume both qualify). Returned messages
+ *                                          are merged into the same lifecycle
+ *                                          <system-reminder> as on_session_start.
+ *   - on_turn_start / on_turn_end          (turn-loop.ts) — on_turn_start handlers
+ *                                          may return `messages` to inject a
+ *                                          per-turn reminder appended to the
+ *                                          conversation right before the model call.
+ *   - pre_tool_use / post_tool_use         (executor.ts) — pre_tool_use honors
+ *                                          `decision: "deny"` to short-circuit
+ *                                          the call (executor.ts:131).
  *   - on_tool_start / on_tool_end          (executor.ts)
  *   - file_changed                         (executor.ts, Write/Edit only)
+ *   - on_permission_check                  (executor.ts) — fires after the
+ *                                          classifier runs and before its
+ *                                          decision is acted on. Handler can
+ *                                          override via `decision`; the
+ *                                          override is logged as
+ *                                          `permission.hook_override`. ctx.data
+ *                                          carries `classifierDecision` so
+ *                                          handlers can branch on the rule
+ *                                          set's verdict.
+ *   - post_compact                         (turn-loop.ts) — fires after
+ *                                          ContextManager.manageAsync() runs
+ *                                          a non-micro compaction. Handlers
+ *                                          may return `messages` to inject a
+ *                                          <system-reminder> into the same
+ *                                          turn before the model call. ctx.data
+ *                                          carries `strategy` (summary/snip/
+ *                                          window/emergency), `beforeTokens`,
+ *                                          `afterTokens`. Microcompact is
+ *                                          intentionally suppressed.
+ *   - notification                         (agent.ts) — fired when a background
+ *                                          sub-agent transitions to a terminal
+ *                                          state. ctx.data carries `kind`
+ *                                          ("agent_completed" / "agent_failed" /
+ *                                          "agent_cancelled"), `agentId`,
+ *                                          `name`, `description`, plus
+ *                                          `finalText` (completed) or `error`
+ *                                          (failed). Fired void — handler
+ *                                          latency does not block the main
+ *                                          loop. Not consumed by the engine
+ *                                          (bg-agent feed renders the same
+ *                                          info via notificationQueue);
+ *                                          intended for shell hooks (osascript
+ *                                          / desktop notifications).
+ *
+ * All Engine-side emits run through Engine.emitHook / TurnLoop.emitHook, which
+ * auto-merge `isSubAgent` (and sessionId, for turn-loop) into ctx.data so
+ * handlers can skip noisy injections for spawned children.
  *
  * **Reserved / not-yet-emitted** (defined so downstream can register handlers
  * in anticipation; wire the emitter before relying on them):
- *   - on_permission_check / on_session_start / on_session_end
- *   - user_prompt_submit / pre_compact / post_compact / notification
+ *   - pre_compact   — would require pre-flight prediction inside
+ *                     ContextManager; current implementation only knows
+ *                     after-the-fact (use post_compact instead).
  */
 export type HookEventName = "on_agent_start" | "on_agent_end" | "on_turn_start" | "on_turn_end" | "on_tool_start" | "on_tool_end" | "on_permission_check" | "on_session_start" | "on_session_end" | "pre_tool_use" | "post_tool_use" | "user_prompt_submit" | "pre_compact" | "post_compact" | "file_changed" | "notification";
 export interface HookContext {
@@ -32,4 +88,27 @@ export interface HookResult {
     messages?: string[];
     /** Allow/deny/ask override for permission hooks */
     decision?: "allow" | "deny" | "ask";
+    /**
+     * For pre_tool_use: replace the tool's args before execution. Used by
+     * "sanitizer" handlers (e.g. redact secrets in Bash commands, normalize
+     * file paths, inject a default flag). Last handler in the chain wins.
+     * Args are re-validated against the tool's input schema before the
+     * tool runs, so a malformed updatedInput still surfaces as an
+     * "Invalid input" error rather than silently passing through.
+     */
+    updatedInput?: Record<string, unknown>;
+    /**
+     * For post_tool_use: text appended to the tool's content (visible to
+     * the model on the next LLM call). Used by linter/typecheck handlers
+     * to surface results without re-running the tool. Multiple handlers'
+     * additionalContext entries are joined with two newlines.
+     */
+    additionalContext?: string;
+    /**
+     * For user_prompt_submit: replace the most recent user message text
+     * with this string. Last handler wins. Used to auto-prepend project
+     * context, mask secrets, or rewrite shorthand prompts. The original
+     * prompt is logged at info level for audit purposes.
+     */
+    updatedPrompt?: string;
 }

package/dist/hooks/inject.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Hook message injection helper.
+ *
+ * Handlers return raw markdown strings via HookResult.messages. The emit
+ * site uses wrapHookMessages() to package them into a single user-role
+ * <system-reminder> Message so the model sees them as one block instead
+ * of a noisy sequence of separate user turns.
+ *
+ * Contract:
+ *   - Handlers do NOT wrap their own <system-reminder>; emit-site owns the
+ *     wrapper. Keeps formatting consistent and lets us evolve it (e.g. add
+ *     a trailing close-tag, tag attributes) without touching every handler.
+ *   - Empty / whitespace-only messages are dropped before wrapping; if
+ *     nothing remains, returns null (caller skips the injection).
+ *   - Multiple handlers' messages are joined with a blank line between
+ *     blocks so each is visually distinct inside the reminder.
+ */
+import type { Message } from "../types.js";
+export declare function wrapHookMessages(messages: string[] | undefined): Message | null;

package/dist/hooks/shell-runner.d.ts

@@ -0,0 +1,45 @@
+/**
+ * shell-runner — execute a user-configured shell command as a hook handler.
+ *
+ * Protocol (matches Claude Code's shell-hook contract):
+ *
+ *   stdin       JSON.stringify({ eventName, data }) — the full HookContext
+ *               envelope, including ctx.data fields like toolName / args /
+ *               sessionId / isSubAgent.
+ *
+ *   stdout      Either ignored (when exit 0 with no/blank output) or parsed
+ *               as a HookResult JSON document. Unparseable stdout on exit 0
+ *               is logged at warn level and dropped — we do NOT crash the
+ *               turn loop on malformed handler output.
+ *
+ *   exit  0     Normal return. Stdout (if any) becomes the HookResult.
+ *   exit  2     Deny / block. Stderr becomes the human-readable reason and
+ *               is surfaced to the model via HookResult.messages so the LLM
+ *               sees why the action was rejected.
+ *   exit  *     Any other non-zero code = handler error. Logged at error
+ *               level; we return {} (no effect) so a buggy hook never wedges
+ *               the engine.
+ *
+ *   ENV (passed to child):
+ *               CODESHELL_HOOK_EVENT   — event name, also in stdin
+ *               CODESHELL_HOOK_CWD     — repo root for context-aware hooks
+ *               (callers may add more by reading process.env directly)
+ *
+ *   timeout     Defaults to 60_000 ms; settings.timeout_ms overrides.
+ *               On timeout we SIGTERM then SIGKILL, log, and return {}.
+ */
+import type { HookContext, HookResult } from "./events.js";
+import type { SettingsHookConfig } from "../types.js";
+/**
+ * Run one shell-hook command and return the parsed HookResult. Catches
+ * every failure mode (spawn error, timeout, malformed JSON) and
+ * returns an empty result so the registry's chain keeps going.
+ */
+export declare function runShellHook(config: SettingsHookConfig, ctx: HookContext): Promise<HookResult>;
+/**
+ * Check whether the hook should fire for the current ctx, respecting
+ * the optional `matcher` regex. Returns false for non-tool events
+ * when matcher is set (matcher only makes sense when ctx.data has a
+ * toolName field).
+ */
+export declare function shellHookMatches(config: SettingsHookConfig, ctx: HookContext): boolean;

package/dist/index.d.ts

@@ -25,6 +25,7 @@ export { taskManager } from "./tool-system/builtin/task.js";
 export type { Task, TaskStatus } from "./tool-system/builtin/task.js";
 export { HookRegistry } from "./hooks/registry.js";
 export type { HookEventName, HookContext, HookResult } from "./hooks/events.js";
+export { wrapHookMessages } from "./hooks/inject.js";
 export { Transcript } from "./session/transcript.js";
 export { SessionManager } from "./session/session-manager.js";
 export { FileHistory } from "./session/file-history.js";
@@ -43,8 +44,8 @@ export type { MicrocompactOptions } from "./context/compaction.js";
 export type { SummarizeFn, CompactStrategy, OnCompactFn, ContextManagerConfig, } from "./context/manager.js";
 export { applyToolResultPersistence, createContentReplacementState, reconstructContentReplacementState, resolveToolResultsDir, isPersistedReplacement, DEFAULT_PERSIST_THRESHOLD, PER_MESSAGE_AGGREGATE_CAP, PREVIEW_SIZE, } from "./context/tool-result-storage.js";
 export type { ContentReplacementState } from "./context/tool-result-storage.js";
-export { scanSkills, matchSkillsByInput, matchSkillsByTool, buildSkillListing } from "./skills/index.js";
-export type { SkillDefinition, MatchResult } from "./skills/index.js";
+export { scanSkills, invalidateSkillCache } from "./skills/index.js";
+export type { SkillDefinition } from "./skills/index.js";
 export { Arena } from "./arena/arena.js";
 export { MODEL_PRESETS, getMaxOutputTokens } from "./arena/model-presets.js";
 export type { ModelPreset } from "./arena/model-presets.js";

package/dist/index.js

@@ -1 +1 @@
-export{a as defineProduct}from'./chunk-Q3RSX66I.js';export{a as createRunManager}from'./chunk-EU3J7TBP.js';export{$ as ArtifactTracker,j as AutoApprovalBackend,J as BUILTIN_AGENT_PRESETS,e as BUILTIN_TOOLS,_ as CheckpointWriter,da as CompositeEvaluator,x as ContextManager,K as DEFAULT_AGENT_PRESET,L as DEFAULT_CLI_PRESET,p as DEFAULT_PERSIST_THRESHOLD,U as Engine,ea as EngineRunner,W as FileRunStore,i as HeadlessApprovalBackend,ba as Heartbeat,o as HookRegistry,ca as NoopEvaluator,q as PER_MESSAGE_AGGREGATE_CAP,r as PREVIEW_SIZE,n as PermissionClassifier,R as PromptComposer,Y as RunApprovalBackend,aa as RunLock,fa as RunManager,X as RunQueue,y as SectionCache,h as ToolExecutor,f as ToolRegistry,V as VALID_TRANSITIONS,v as applyToolResultPersistence,I as availableSections,P as buildPresetSystemPrompt,E as buildSkillListing,A as combineInstructions,s as createContentReplacementState,Z as createRunAskUserFn,w as isPersistedReplacement,N as listPresetNames,G as loadSection,H as loadSections,C as matchSkillsByInput,D as matchSkillsByTool,t as reconstructContentReplacementState,M as registerPreset,F as registerSection,O as resolveAgentPreset,Q as resolveBuiltinToolNames,u as resolveToolResultsDir,z as scanInstructions,B as scanSkills,c as taskManager}from'./chunk-MGP35GKD.js';export{a as ModelPool}from'./chunk-MLCTC53I.js';export{a as FileHistory}from'./chunk-WI6FSWGU.js';import'./chunk-P6JSTIFM.js';import'./chunk-SNFAPSLA.js';export{a as MCPManager}from'./chunk-L7B2ORID.js';import {p}from'./chunk-M7VU4YVY.js';export{e as COMPACTABLE_TOOL_NAMES,k as applySummaryCompaction,i as buildSummarizationPrompt,a as estimateTokens,f as microcompact,h as truncateToolResult,d as windowCompact}from'./chunk-M7VU4YVY.js';export{b as MemoryManager}from'./chunk-T222K6IV.js';export{b as SessionManager,a as Transcript}from'./chunk-QTWU7UNA.js';export{c as SettingsManager,a as SettingsSchema,b as validateSettings}from'./chunk-DTPABBSV.js';export{j as IterativeArena,f as defaultIterateConvergence,i as getIterateFormat,g as iterateCodeFormat,e as iterateDiffRatio,h as iterateDocumentFormat}from'./chunk-RERBX75D.js';export{J as Arena,I as ArenaLedger,e as DiscussionStrategy,Q as MODEL_PRESETS,f as PlanningStrategy,d as ReviewStrategy,z as applyReviewResult,u as buildDigest,n as collectEvidence,b as createLLMClient,v as formatDigest,R as getMaxOutputTokens,k as getStrategy,l as getStrategyForPlan,p as hasTools,B as isTerminal,y as markUnderReview,A as markUnresolved,m as planArena,s as registerClaims,a as registerProvider,x as resolveClaimStatus,t as selectClaimsForReview,o as selectTools,w as transitionClaim,C as validTransitions}from'./chunk-2GJ7H5NC.js';import'./chunk-A4M2Y42L.js';export{a as AnthropicClient}from'./chunk-DEYFK6FP.js';export{a as OpenAIClient}from'./chunk-VKKU4LOM.js';import'./chunk-O5HFCH2U.js';export{a as LLMClientBase}from'./chunk-2EUIMKJA.js';export{l as ConfigError,d as ContextLimitError,a as FrameworkError,b as LLMError,c as LLMRateLimitError,i as PermissionDeniedError,j as SessionError,e as ToolError,g as ToolExecutionError,f as ToolNotFoundError,h as ToolTimeoutError,k as TranscriptError}from'./chunk-FU7AHZNN.js';export{b as logger}from'./chunk-ZSAONDT6.js';import {h,a}from'./chunk-3QP5BQ3L.js';h();p();h();var vt={review:[{patterns:[/\breview\b/i,/\baudit\b/i,/\binspect\b/i,/\bcheck\b/i],weight:2},{patterns:[/\bcode\s*quality\b/i,/\bbug\b/i,/\bvulnerab/i,/\bsecur/i]},{patterns:[/\bpr\b/i,/\bpull\s*request\b/i,/\bdiff\b/i,/\bchanges?\b/i]},{patterns:[/\brefactor/i,/\bclean\s*up\b/i,/\bimprove\b/i]}],discussion:[{patterns:[/\bdiscuss\b/i,/\bdebate\b/i,/\bcompare\b/i],weight:2},{patterns:[/\bpros?\s*(and|&|\/)\s*cons?\b/i,/\btrade\s*-?\s*offs?\b/i]},{patterns:[/\bshould\s+we\b/i,/\bwhich\s+(is|approach|way)\b/i,/\bvs\.?\b/i]},{patterns:[/\bopinion\b/i,/\bthoughts?\b/i,/\badvice\b/i]}],planning:[{patterns:[/\bplan\b/i,/\bplanning\b/i,/\broadmap\b/i,/\bstrategy\b/i],weight:2},{patterns:[/\barchitect/i,/\bdesign\b/i,/\bproposal\b/i]},{patterns:[/\bimplement(ation)?\s+(plan|strategy|approach)\b/i],weight:2},{patterns:[/\bphase\b/i,/\bmilestone\b/i,/\btimeline\b/i,/\bprioritiz/i]},{patterns:[/\bbuild\b/i,/\bcreate\b/i,/\bsetup\b/i,/\bbootstrap\b/i]}]},kt=3,Mt=2;function Pt(m){let a={review:0,discussion:0,planning:0};for(let[n,i]of Object.entries(vt))for(let p of i){let u=p.weight??1;for(let d of p.patterns)d.test(m)&&(a[n]+=u);}let s=Object.entries(a).sort((n,i)=>i[1]-n[1]),[t,e]=s[0],[,l]=s[1],r=e-l;return e>=kt&&r>=Mt?{mode:t,confidence:"high",reason:`Topic strongly matches "${t}" (score: ${e}, lead: +${r})`}:e>0&&r>0?{mode:t,confidence:"low",reason:`Topic weakly matches "${t}" (score: ${e}, lead: +${r})`}:{mode:"review",confidence:"low",reason:"No strong mode signal detected, defaulting to review"}}a(Pt,"detectArenaMode");var wt="0.2.0";export{wt as VERSION,Pt as detectArenaMode};
+export{a as defineProduct}from'./chunk-GGVAOPI7.js';export{a as createRunManager}from'./chunk-5QIVXFCT.js';export{Y as ArtifactTracker,k as AutoApprovalBackend,F as BUILTIN_AGENT_PRESETS,f as BUILTIN_TOOLS,X as CheckpointWriter,aa as CompositeEvaluator,x as ContextManager,G as DEFAULT_AGENT_PRESET,H as DEFAULT_CLI_PRESET,p as DEFAULT_PERSIST_THRESHOLD,R as Engine,fa as EngineRunner,T as FileRunStore,j as HeadlessApprovalBackend,_ as Heartbeat,n as HookRegistry,$ as NoopEvaluator,q as PER_MESSAGE_AGGREGATE_CAP,r as PREVIEW_SIZE,m as PermissionClassifier,N as PromptComposer,V as RunApprovalBackend,Z as RunLock,ga as RunManager,U as RunQueue,y as SectionCache,i as ToolExecutor,g as ToolRegistry,S as VALID_TRANSITIONS,v as applyToolResultPersistence,E as availableSections,L as buildPresetSystemPrompt,A as combineInstructions,s as createContentReplacementState,W as createRunAskUserFn,w as isPersistedReplacement,J as listPresetNames,C as loadSection,D as loadSections,t as reconstructContentReplacementState,I as registerPreset,B as registerSection,K as resolveAgentPreset,M as resolveBuiltinToolNames,u as resolveToolResultsDir,z as scanInstructions,e as taskManager,o as wrapHookMessages}from'./chunk-Z5HKHAO7.js';export{i as invalidateSkillCache,h as scanSkills}from'./chunk-SKIX2M5Z.js';export{a as ModelPool}from'./chunk-MLCTC53I.js';export{a as FileHistory}from'./chunk-WI6FSWGU.js';import'./chunk-P6JSTIFM.js';import'./chunk-SNFAPSLA.js';export{a as MCPManager}from'./chunk-D3TVASD2.js';export{c as SettingsManager,a as SettingsSchema,b as validateSettings}from'./chunk-FZXY554D.js';import {p}from'./chunk-M7VU4YVY.js';export{e as COMPACTABLE_TOOL_NAMES,k as applySummaryCompaction,i as buildSummarizationPrompt,a as estimateTokens,f as microcompact,h as truncateToolResult,d as windowCompact}from'./chunk-M7VU4YVY.js';export{b as MemoryManager}from'./chunk-T222K6IV.js';export{b as SessionManager,a as Transcript}from'./chunk-QTWU7UNA.js';export{j as IterativeArena,f as defaultIterateConvergence,i as getIterateFormat,g as iterateCodeFormat,e as iterateDiffRatio,h as iterateDocumentFormat}from'./chunk-K4HILJ6G.js';export{J as Arena,I as ArenaLedger,e as DiscussionStrategy,S as MODEL_PRESETS,f as PlanningStrategy,d as ReviewStrategy,z as applyReviewResult,u as buildDigest,n as collectEvidence,b as createLLMClient,v as formatDigest,T as getMaxOutputTokens,k as getStrategy,l as getStrategyForPlan,p as hasTools,B as isTerminal,y as markUnderReview,A as markUnresolved,m as planArena,s as registerClaims,a as registerProvider,x as resolveClaimStatus,t as selectClaimsForReview,o as selectTools,w as transitionClaim,C as validTransitions}from'./chunk-WONQHE4P.js';import'./chunk-GKAQH2DG.js';export{a as AnthropicClient}from'./chunk-X2S7ASQ2.js';export{b as OpenAIClient}from'./chunk-SV7H4FKT.js';import'./chunk-O5HFCH2U.js';export{a as LLMClientBase}from'./chunk-OWBYLMDD.js';export{l as ConfigError,d as ContextLimitError,a as FrameworkError,b as LLMError,c as LLMRateLimitError,i as PermissionDeniedError,j as SessionError,e as ToolError,g as ToolExecutionError,f as ToolNotFoundError,h as ToolTimeoutError,k as TranscriptError}from'./chunk-FU7AHZNN.js';export{d as logger}from'./chunk-DI26OUIU.js';import {h,a}from'./chunk-3QP5BQ3L.js';h();p();h();var vt={review:[{patterns:[/\breview\b/i,/\baudit\b/i,/\binspect\b/i,/\bcheck\b/i],weight:2},{patterns:[/\bcode\s*quality\b/i,/\bbug\b/i,/\bvulnerab/i,/\bsecur/i]},{patterns:[/\bpr\b/i,/\bpull\s*request\b/i,/\bdiff\b/i,/\bchanges?\b/i]},{patterns:[/\brefactor/i,/\bclean\s*up\b/i,/\bimprove\b/i]}],discussion:[{patterns:[/\bdiscuss\b/i,/\bdebate\b/i,/\bcompare\b/i],weight:2},{patterns:[/\bpros?\s*(and|&|\/)\s*cons?\b/i,/\btrade\s*-?\s*offs?\b/i]},{patterns:[/\bshould\s+we\b/i,/\bwhich\s+(is|approach|way)\b/i,/\bvs\.?\b/i]},{patterns:[/\bopinion\b/i,/\bthoughts?\b/i,/\badvice\b/i]}],planning:[{patterns:[/\bplan\b/i,/\bplanning\b/i,/\broadmap\b/i,/\bstrategy\b/i],weight:2},{patterns:[/\barchitect/i,/\bdesign\b/i,/\bproposal\b/i]},{patterns:[/\bimplement(ation)?\s+(plan|strategy|approach)\b/i],weight:2},{patterns:[/\bphase\b/i,/\bmilestone\b/i,/\btimeline\b/i,/\bprioritiz/i]},{patterns:[/\bbuild\b/i,/\bcreate\b/i,/\bsetup\b/i,/\bbootstrap\b/i]}]},ht=3,Mt=2;function Pt(m){let a={review:0,discussion:0,planning:0};for(let[n,i]of Object.entries(vt))for(let p of i){let u=p.weight??1;for(let d of p.patterns)d.test(m)&&(a[n]+=u);}let s=Object.entries(a).sort((n,i)=>i[1]-n[1]),[t,e]=s[0],[,l]=s[1],r=e-l;return e>=ht&&r>=Mt?{mode:t,confidence:"high",reason:`Topic strongly matches "${t}" (score: ${e}, lead: +${r})`}:e>0&&r>0?{mode:t,confidence:"low",reason:`Topic weakly matches "${t}" (score: ${e}, lead: +${r})`}:{mode:"review",confidence:"low",reason:"No strong mode signal detected, defaulting to review"}}a(Pt,"detectArenaMode");var Dt="0.2.0";export{Dt as VERSION,Pt as detectArenaMode};

package/dist/llm/api-key-sanitize.d.ts

@@ -0,0 +1,22 @@
+/**
+ * sanitizeApiKey — defensive cleanup for API keys pasted via the wizard.
+ *
+ * Windows terminals (ConPTY, legacy cmd.exe, IME-active states) are the main
+ * source of breakage: bracketed-paste residue, CR endings, zero-width chars
+ * pulled in from rich-text sources (Notion / OneNote / web pages), full-width
+ * spaces from CJK IME, smart quotes from word processors. None of these are
+ * valid in any real provider's API key, so we strip them and warn.
+ */
+export type SanitizeResult = {
+    value: string;
+    changed: boolean;
+    warnings: string[];
+};
+export declare function sanitizeApiKey(raw: string): SanitizeResult;
+/**
+ * Returns true when the sanitized key contains any non-ASCII-printable
+ * character. Real provider keys are uniformly ASCII (`[A-Za-z0-9_\-.]`-ish),
+ * so a stray non-ASCII char almost certainly means the user pasted the wrong
+ * thing (e.g. the surrounding sentence in Chinese).
+ */
+export declare function hasNonAsciiPrintable(s: string): boolean;

package/dist/llm/providers/openai.d.ts

@@ -10,6 +10,28 @@
 import type { LLMConfig, LLMResponse } from "../../types.js";
 import type { CreateMessageOptions } from "../types.js";
 import { LLMClientBase } from "../client-base.js";
+interface RunStreamOpts {
+    idleTimeoutMs?: number;
+    requestId?: string;
+    /**
+     * Per-chunk handler — invoked synchronously with the raw chunk for the
+     * provider to do its own parsing. Returns the text delta (or "") for
+     * the watchdog-side text accumulator used in tests.
+     */
+    onChunk?: (chunk: any) => string;
+}
+/**
+ * Consume an async iterable of stream chunks with an idle watchdog.
+ * Returns the accumulated text — either from onChunk return values, or
+ * by extracting choices[0].delta.content from raw chunks (useful in tests
+ * that call runStreamWithWatchdog directly without an onChunk handler).
+ *
+ * The watchdog is active whenever opts.idleTimeoutMs is explicitly provided,
+ * or when STREAM_WATCHDOG_CONFIG.enabled is true. When active, each call to
+ * iterator.next() races against an idle deadline; if the deadline fires first
+ * the function rejects with StreamIdleTimeoutError.
+ */
+export declare function runStreamWithWatchdog<T = any>(stream: AsyncIterable<T>, opts?: RunStreamOpts): Promise<string>;
 export declare class OpenAIClient extends LLMClientBase {
     private _client;
     private _forceMaxCompletionTokens;
@@ -39,3 +61,4 @@ export declare class OpenAIClient extends LLMClientBase {
     private convertTools;
     private handleApiError;
 }
+export {};

package/dist/llm/retry.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Retry classification — which errors trigger an automatic retry of the
+ * streaming LLM call?
+ *
+ * Stream-idle timeouts are retried — the upstream may have just recovered.
+ * User-initiated aborts (AbortError) are never retried — the user explicitly
+ * asked for the work to stop.
+ *
+ * Other transient errors (5xx, 429, ECONNRESET) are out of scope for this
+ * iteration; add them here as they become observed.
+ */
+export declare function isRetryable(err: unknown): boolean;

package/dist/llm/stream-watchdog.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Stream Idle Watchdog — guarantees an upper bound on the time a streaming
+ * LLM call can spend with no bytes arriving. Without this, a wedged HTTP/2
+ * connection can hang the session indefinitely; the SDK's request timeout
+ * only covers the initial fetch, not the streaming body.
+ *
+ * Disabled by default. Enabled via env CODESHELL_ENABLE_STREAM_WATCHDOG=1.
+ */
+export interface StreamWatchdogOptions {
+    /** Abort the stream when no chunks arrive within this window. */
+    idleTimeoutMs: number;
+    /** Called when the watchdog decides to abort. */
+    onTimeout: () => void;
+    /**
+     * Called at idleTimeoutMs/2 (or warningMs if provided). Logging only —
+     * the watchdog does not abort on warning. The argument is the configured
+     * warning threshold (NOT real-time elapsed) so callers can format the log
+     * without re-deriving it.
+     */
+    onWarning?: (warnThresholdMs: number) => void;
+    /** Override the warning trigger; defaults to idleTimeoutMs / 2. */
+    warningMs?: number;
+}
+export interface StreamWatchdog {
+    /** Re-arm both timers — call after every chunk. */
+    reset(): void;
+    /** Clear all timers permanently — call in finally. */
+    dispose(): void;
+}
+export declare class StreamIdleTimeoutError extends Error {
+    idleMs: number;
+    requestId?: string | undefined;
+    readonly kind = "stream-idle-timeout";
+    constructor(idleMs: number, requestId?: string | undefined);
+}
+export declare function createStreamWatchdog(opts: StreamWatchdogOptions): StreamWatchdog;
+/** Environment-driven defaults. Read once at import time is fine — these never change inside a process. */
+export declare const STREAM_WATCHDOG_CONFIG: {
+    enabled: boolean;
+    idleTimeoutMs: number;
+    retries: number;
+};

package/dist/logging/logger.d.ts

@@ -24,6 +24,20 @@
 export type LogLevel = "debug" | "info" | "warn" | "error";
 export declare function setCurrentSid(sid: string): void;
 export declare function getCurrentSid(): string;
+/**
+ * Run `fn` inside an ALS scope tagged with `sid`. All log lines emitted
+ * synchronously or via `await` inside `fn` resolve `getCurrentSid()` to
+ * this `sid` — concurrent Engine.run invocations no longer race on a
+ * module global.
+ */
+export declare function runWithSid<T>(sid: string, fn: () => T | Promise<T>): T | Promise<T>;
+/**
+ * Bind `sid` to the *current* async context without needing a callback.
+ * The binding lasts until the current async stack unwinds; concurrent
+ * sibling async chains keep their own bindings. Engine.run uses this so
+ * we don't have to indent the entire (long) method body into a callback.
+ */
+export declare function enterSid(sid: string): void;
 export declare function getInMemoryErrors(): ReadonlyArray<{
     msg: string;
     t: string;

package/dist/manager-4XKLZHKE.js

@@ -0,0 +1 @@
+export{c as SettingsManager}from'./chunk-FZXY554D.js';import'./chunk-3QP5BQ3L.js';

package/dist/mcp-manager-3JGHEJO3.js

@@ -0,0 +1 @@
+export{a as MCPManager}from'./chunk-D3TVASD2.js';import'./chunk-DI26OUIU.js';import'./chunk-3QP5BQ3L.js';

package/dist/openai-OQ6LLN5J.js

@@ -0,0 +1 @@
+export{b as OpenAIClient,a as runStreamWithWatchdog}from'./chunk-SV7H4FKT.js';import'./chunk-O5HFCH2U.js';import'./chunk-OWBYLMDD.js';import'./chunk-FU7AHZNN.js';import'./chunk-DI26OUIU.js';import'./chunk-3QP5BQ3L.js';

package/dist/{openrouter-models-GZVCRWD2.js → openrouter-models-ZT4R2AE3.js}

@@ -1 +1 @@
-export{d as findOpenRouterModel,c as getOpenRouterModels,b as getOpenRouterSnapshot,e as listOpenRouterModelsByVendor,a as setOpenRouterSnapshot}from'./chunk-A4M2Y42L.js';import'./chunk-3QP5BQ3L.js';
+export{d as findOpenRouterModel,c as getOpenRouterModels,b as getOpenRouterSnapshot,e as listOpenRouterModelsByVendor,a as setOpenRouterSnapshot}from'./chunk-GKAQH2DG.js';import'./chunk-3QP5BQ3L.js';

package/dist/openrouter-sync-ARMVWY7S.js

@@ -0,0 +1 @@
+export{a as syncOpenRouterCatalog}from'./chunk-AFMP73YP.js';export{b as getOpenRouterSnapshot}from'./chunk-GKAQH2DG.js';import'./chunk-3QP5BQ3L.js';

package/dist/plugin-handler-GJISMH5Q.js

@@ -0,0 +1,11 @@
+import {g,f,e,d,i}from'./chunk-SKIX2M5Z.js';import {h,a,b}from'./chunk-3QP5BQ3L.js';import {existsSync,readFileSync,mkdirSync,writeFileSync,rmSync,readdirSync,statSync,cpSync,mkdtempSync}from'fs';import {join,dirname,isAbsolute,resolve}from'path';import {homedir,tmpdir}from'os';import {spawn}from'child_process';h();h();function H(e){let r=e.trim();if(r==="")return null;if((r.startsWith("/")||/^[a-zA-Z]:[\\/]/.test(r))&&r.endsWith(".git"))return {source:"git",url:r};if(r.match(/^[a-zA-Z0-9._-]+@[^:\s]+:[^\s]+$/))return {source:"git",url:r};if(r.startsWith("https://")||r.startsWith("http://")){let i;try{i=new URL(r);}catch{return null}return i.hostname==="github.com"||i.hostname==="www.github.com"?i.pathname.match(/^\/([^/]+\/[^/]+?)(\/|\.git|$)/)?{source:"git",url:r.endsWith(".git")?r:`${r}.git`}:null:r.endsWith(".git")?{source:"git",url:r}:null}let n=r.match(/^([A-Za-z0-9][A-Za-z0-9._-]*)\/([A-Za-z0-9._-]+?)(\.git)?$/);if(n){let i=n[1],s=n[2];return {source:"github",repo:`${i}/${s}`}}return null}a(H,"parseMarketplaceInput");function q(e){if(e.source==="github"){let i=e.repo.split("/");return i[i.length-1].toLowerCase()}let t=e.url.replace(/\.git$/,"").split(/[/:]/).filter(Boolean);return (t[t.length-1]??"marketplace").toLowerCase()}a(q,"deriveMarketplaceName");h();h();async function x(e,r,t=6e4){return new Promise(n=>{let i=spawn("git",e,{cwd:r,stdio:["ignore","pipe","pipe"]}),s="",o="";i.stdout.on("data",l=>s+=l.toString()),i.stderr.on("data",l=>o+=l.toString());let a=setTimeout(()=>{i.kill("SIGKILL"),n({ok:false,error:`git ${e.join(" ")} timed out after ${t}ms`});},t);i.on("close",l=>{clearTimeout(a),n(l===0?{ok:true,stdout:s.trim()}:{ok:false,error:`git ${e.join(" ")} exited ${l}: ${o.trim()||"unknown error"}`});}),i.on("error",l=>{clearTimeout(a),n({ok:false,error:`git ${e.join(" ")} failed: ${l.message}`});});})}a(x,"runGit");async function $(e,r,t){let n=["clone","--depth","1"];return t?.ref&&n.push("--branch",t.ref),n.push("--",e,r),x(n)}a($,"gitClone");async function C(e){return x(["rev-parse","HEAD"],e)}a(C,"gitRevParseHead");async function z(e,r){let t=["fetch","--depth","1","origin"];r&&t.push(r);let n=await x(t,e);return n.ok?x(["reset","--hard",r?`origin/${r}`:"FETCH_HEAD"],e):n}a(z,"gitFetchAndReset");function j(e){return `https://github.com/${e}.git`}a(j,"githubRepoToCloneUrl");h();function Se(){return process.env.HOME??homedir()}a(Se,"userHome");function V(){return join(Se(),".code-shell","plugins","known_marketplaces.json")}a(V,"knownMarketplacesPath");function m(){let e=V();if(!existsSync(e))return {};try{let r=JSON.parse(readFileSync(e,"utf-8"));if(r&&typeof r=="object"&&!Array.isArray(r))return r}catch{}return {}}a(m,"readKnownMarketplaces");function J(e){let r=V();mkdirSync(dirname(r),{recursive:true}),writeFileSync(r,JSON.stringify(e,null,2)+`
+`,"utf-8");}a(J,"writeKnownMarketplaces");function B(e,r){let t=m();t[e]=r,J(t);}a(B,"upsertKnownMarketplace");function N(e){let r=m();return e in r?(delete r[e],J(r),true):false}a(N,"removeKnownMarketplace");h();function S(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}a(S,"isObject");function Me(e,r){if(typeof e=="string")return e.length===0?{ok:false,error:`${r}: source string is empty`}:{ok:true,value:e};if(!S(e))return {ok:false,error:`${r}: source must be a string or object`};let t=e.source;return t==="git"?typeof e.url!="string"||!e.url?{ok:false,error:`${r}: git source requires url`}:{ok:true,value:{source:"git",url:e.url,ref:typeof e.ref=="string"?e.ref:void 0,sha:typeof e.sha=="string"?e.sha:void 0}}:t==="github"?typeof e.repo!="string"||!e.repo.includes("/")?{ok:false,error:`${r}: github source requires repo "owner/name"`}:{ok:true,value:{source:"github",repo:e.repo,ref:typeof e.ref=="string"?e.ref:void 0,sha:typeof e.sha=="string"?e.sha:void 0}}:t==="git-subdir"?typeof e.url!="string"||!e.url?{ok:false,error:`${r}: git-subdir source requires url`}:typeof e.path!="string"||!e.path?{ok:false,error:`${r}: git-subdir source requires path`}:{ok:true,value:{source:"git-subdir",url:e.url,path:e.path,ref:typeof e.ref=="string"?e.ref:void 0,sha:typeof e.sha=="string"?e.sha:void 0}}:{ok:false,error:`${r}: unsupported source type "${String(t)}" (MVP supports git, github, git-subdir, or a string path)`}}a(Me,"validatePluginEntrySource");function be(e,r){let t=`plugins[${r}]`;if(!S(e))return {ok:false,error:`${t}: must be an object`};if(typeof e.name!="string"||!e.name)return {ok:false,error:`${t}: name is required`};if(e.source===void 0)return {ok:false,error:`${t}: source is required`};let n=Me(e.source,`${t}.source`);if(!n.ok)return n;let i;if(e.author!==void 0){if(!S(e.author)||typeof e.author.name!="string")return {ok:false,error:`${t}.author: must be an object with name`};i={name:e.author.name,email:typeof e.author.email=="string"?e.author.email:void 0};}return {ok:true,value:{name:e.name,description:typeof e.description=="string"?e.description:void 0,author:i,category:typeof e.category=="string"?e.category:void 0,source:n.value,homepage:typeof e.homepage=="string"?e.homepage:void 0}}}a(be,"validatePluginEntry");function L(e){if(!S(e))return {ok:false,error:"marketplace.json: not an object"};if(typeof e.name!="string"||!e.name)return {ok:false,error:"marketplace.json: name is required"};if(!S(e.owner)||typeof e.owner.name!="string")return {ok:false,error:"marketplace.json: owner.name is required"};if(!Array.isArray(e.plugins))return {ok:false,error:"marketplace.json: plugins must be an array"};let r=[];for(let t=0;t<e.plugins.length;t++){let n=be(e.plugins[t],t);if(!n.ok)return n;r.push(n.value);}return {ok:true,value:{name:e.name,description:typeof e.description=="string"?e.description:void 0,owner:{name:e.owner.name,email:typeof e.owner.email=="string"?e.owner.email:void 0},plugins:r}}}a(L,"validateMarketplace");function Re(){return process.env.HOME??homedir()}a(Re,"userHome");function W(){return join(Re(),".code-shell","plugins","marketplaces")}a(W,"marketplacesRoot");function D(e){return join(W(),e)}a(D,"marketplaceDir");function Z(e){return join(D(e),".claude-plugin","marketplace.json")}a(Z,"marketplaceJsonPath");function xe(e){return e.source==="github"?j(e.repo):e.url}a(xe,"sourceToCloneUrl");async function Y(e,r){let t=D(e),i=m()[e];if(i&&JSON.stringify(i.source)===JSON.stringify(r)&&existsSync(t)){let g=(r.source==="git",void 0);await z(t,g);}else {existsSync(t)&&rmSync(t,{recursive:true,force:true}),mkdirSync(W(),{recursive:true});let g=await $(xe(r),t);if(!g.ok)return {ok:false,error:g.error}}let o=Z(e);if(!existsSync(o))return rmSync(t,{recursive:true,force:true}),{ok:false,error:`Marketplace ${e}: .claude-plugin/marketplace.json not found in the cloned repository.`};let a;try{a=JSON.parse(readFileSync(o,"utf-8"));}catch(g){return rmSync(t,{recursive:true,force:true}),{ok:false,error:`Marketplace ${e}: failed to parse marketplace.json: ${g.message}`}}let l=L(a);if(!l.ok)return rmSync(t,{recursive:true,force:true}),{ok:false,error:`Marketplace ${e}: ${l.error}`};let d={source:r,installLocation:t,lastUpdated:new Date().toISOString()};return B(e,d),{ok:true,name:e,marketplace:l.value,replaced:!!i}}a(Y,"addMarketplace");function Q(e){let r=N(e),t=D(e);return existsSync(t)&&rmSync(t,{recursive:true,force:true}),r}a(Q,"removeMarketplace");function F(e){if(!m()[e])return null;let t=Z(e);if(!existsSync(t))return null;let n;try{n=JSON.parse(readFileSync(t,"utf-8"));}catch{return null}let i=L(n);return i.ok?i.value:null}a(F,"loadMarketplace");function X(){let e=m(),r=[];for(let[t,n]of Object.entries(e)){let i=F(t);r.push({name:t,source:n.source,installLocation:n.installLocation,lastUpdated:n.lastUpdated,pluginCount:i?i.plugins.length:-1});}return r.sort((t,n)=>t.name.localeCompare(n.name))}a(X,"listMarketplaces");h();h();var K="CLAUDE_PLUGIN_ROOT",te="CODESHELL_PLUGIN_ROOT",Ie=8192;function Oe(e){let r=Math.min(e.length,Ie);for(let t=0;t<r;t++)if(e[t]===0)return  true;return  false}a(Oe,"isLikelyBinary");function ne(e,r){let t;try{t=readdirSync(e,{withFileTypes:!0});}catch{return}for(let n of t){let i=join(e,n.name);if(n.isSymbolicLink())continue;if(n.isDirectory()){if(n.name===".git")continue;ne(i,r);continue}if(!n.isFile())continue;let s;try{s=readFileSync(i);}catch{continue}if(r.filesScanned+=1,Oe(s))continue;let o=s.toString("utf8");if(!o.includes(K))continue;let a=o.split(K).join(te);try{writeFileSync(i,a,"utf8"),r.filesRewritten+=1,r.rewrittenPaths.push(i);}catch{}}}a(ne,"walkAndRewrite");function ie(e){let r={filesScanned:0,filesRewritten:0,rewrittenPaths:[]},t=false;try{t=statSync(e).isDirectory();}catch{t=false;}if(!t)return r;ne(e,r);let n={rewrittenAt:new Date().toISOString(),from:K,to:te,filesScanned:r.filesScanned,filesRewritten:r.filesRewritten,note:"codeshell rewrote plugin files at install time so ${CLAUDE_PLUGIN_ROOT} placeholders use codeshell's native env var. Upstream plugin sources are unchanged; only this local copy was modified."};try{writeFileSync(join(e,".code-shell-installed.json"),JSON.stringify(n,null,2)+`
+`,"utf8");}catch{}return r}a(ie,"rewritePluginVars");function Ke(){return process.env.HOME??homedir()}a(Ke,"userHome");function se(){return join(Ke(),".code-shell","plugins","cache")}a(se,"pluginCacheRoot");function E(e,r,t){return join(se(),e,r,t)}a(E,"pluginCacheDir");async function _e(e,r,t){let n=isAbsolute(r)?r:resolve(e,r);return existsSync(n)?(mkdirSync(dirname(t),{recursive:true}),existsSync(t)&&rmSync(t,{recursive:true,force:true}),cpSync(n,t,{recursive:true}),{ok:true,sha:void 0}):{ok:false,error:`plugin source path "${r}" not found in marketplace`}}a(_e,"materializePath");async function Ge(e,r,t){mkdirSync(dirname(t),{recursive:true}),existsSync(t)&&rmSync(t,{recursive:true,force:true});let n=await $(e,t,r?{ref:r}:void 0);if(!n.ok)return {ok:false,error:n.error};let i=await C(t);return i.ok?{ok:true,sha:i.stdout}:{ok:false,error:i.error}}a(Ge,"materializeGit");async function He(e,r,t,n){let i=mkdtempSync(join(tmpdir(),"plugin-clone-"));try{let s=await $(e,i+"/repo",t?{ref:t}:void 0);if(!s.ok)return {ok:!1,error:s.error};let o=await C(i+"/repo");if(!o.ok)return {ok:!1,error:o.error};let a=join(i,"repo",r);return existsSync(a)?(mkdirSync(dirname(n),{recursive:!0}),existsSync(n)&&rmSync(n,{recursive:!0,force:!0}),cpSync(a,n,{recursive:!0}),{ok:!0,sha:o.stdout}):{ok:!1,error:`git-subdir path "${r}" not found in cloned repository`}}finally{rmSync(i,{recursive:true,force:true});}}a(He,"materializeGitSubdir");function oe(e){return e?e.slice(0,12):"unknown"}a(oe,"shortSha");async function qe(e,r,t,n){let i=E(t,n,"_pending_");if(typeof e=="string"){let s=await _e(r,e,i);if(!s.ok)return s;let o=E(t,n,"local");return existsSync(o)&&rmSync(o,{recursive:true,force:true}),mkdirSync(dirname(o),{recursive:true}),cpSync(i,o,{recursive:true}),rmSync(i,{recursive:true,force:true}),{ok:true,cacheDir:o,version:"local",sha:void 0}}if(e.source==="git"||e.source==="github"){let s=e.source==="github"?j(e.repo):e.url,o=await Ge(s,e.ref,i);if(!o.ok)return existsSync(i)&&rmSync(i,{recursive:true,force:true}),o;let a=oe(o.sha),l=E(t,n,a);return existsSync(l)&&rmSync(l,{recursive:true,force:true}),mkdirSync(dirname(l),{recursive:true}),cpSync(i,l,{recursive:true}),rmSync(i,{recursive:true,force:true}),{ok:true,cacheDir:l,version:a,sha:o.sha}}if(e.source==="git-subdir"){let s=await He(e.url,e.path,e.ref,i);if(!s.ok)return existsSync(i)&&rmSync(i,{recursive:true,force:true}),s;let o=oe(s.sha),a=E(t,n,o);return existsSync(a)&&rmSync(a,{recursive:true,force:true}),mkdirSync(dirname(a),{recursive:true}),cpSync(i,a,{recursive:true}),rmSync(i,{recursive:true,force:true}),{ok:true,cacheDir:a,version:o,sha:s.sha}}return {ok:false,error:`unsupported source type "${e.source}"`}}a(qe,"materialize");async function ue(e$1,r){let n=m()[r];if(!n)return {ok:false,error:`marketplace "${r}" not found. Run /plugin marketplace add first.`};let i=F(r);if(!i)return {ok:false,error:`marketplace "${r}" is registered but its manifest could not be loaded.`};let s=i.plugins.find(fe=>fe.name===e$1);if(!s)return {ok:false,error:`plugin "${e$1}" not found in marketplace "${r}".`};let o=await qe(s.source,n.installLocation,r,e$1);if(!o.ok)return o;let a=ie(o.cacheDir),l=g(e$1,r);f(l);let d=new Date().toISOString(),g$1={scope:"user",installPath:o.cacheDir,version:o.version,installedAt:d,lastUpdated:d,...o.sha?{gitCommitSha:o.sha}:{}};return e(l,g$1),{ok:true,entry:g$1,freshlyCloned:true,varRewrite:{filesScanned:a.filesScanned,filesRewritten:a.filesRewritten}}}a(ue,"installPlugin");function ae(e,r){let t=g(e,r),i=d().plugins[t],s=false;if(i){for(let l of i)l.installPath&&existsSync(l.installPath)&&(rmSync(l.installPath,{recursive:true,force:true}),s=true);let a=join(se(),r,e);try{b("fs").rmdirSync(a);}catch{}}let o=f(t);return {ok:o||s,removedFromManifest:o,removedFromDisk:s}}a(ae,"uninstallPlugin");function le(){let e=d(),r=[];for(let[t,n]of Object.entries(e.plugins))for(let i of n)r.push({key:t,entry:i});return r.sort((t,n)=>t.key.localeCompare(n.key)),r}a(le,"listInstalled");var _=["Usage:","  /plugin marketplace add <git-url-or-owner/repo>","  /plugin marketplace remove <name>","  /plugin marketplace list","  /plugin install <plugin>@<marketplace>","  /plugin uninstall <plugin>@<marketplace>","  /plugin list"].join(`
+`);function ce(e){let r=e.lastIndexOf("@");return r<=0||r===e.length-1?null:{plugin:e.slice(0,r),marketplace:e.slice(r+1)}}a(ce,"splitInstallKey");async function Ar(e){let r=e.trim().split(/\s+/).filter(Boolean);if(r.length===0)return _;let t=r[0];if(t==="marketplace"){let n=r[1];if(n==="add"){let i=r.slice(2).join(" ").trim();if(!i)return "Usage: /plugin marketplace add <git-url-or-owner/repo>";let s=H(i);if(!s)return `Cannot parse "${i}" as a marketplace source.
+Supported forms: owner/repo, https://...git, git@host:owner/repo[.git], /abs/path/to/repo.git`;let o=q(s),a=await Y(o,s);if(!a.ok)return `Failed to add marketplace "${o}": ${a.error}`;let l=[a.replaced?`Refreshed marketplace "${a.name}"`:`Added marketplace "${a.name}"`,`  plugins available: ${a.marketplace.plugins.length}`];for(let d of a.marketplace.plugins.slice(0,10))l.push(`    - ${d.name}${d.description?`: ${d.description}`:""}`);return a.marketplace.plugins.length>10&&l.push(`    ... (${a.marketplace.plugins.length-10} more)`),l.join(`
+`)}if(n==="remove"){let i$1=r[2];if(!i$1)return "Usage: /plugin marketplace remove <name>";let s=Q(i$1);return i(),s?`Removed marketplace "${i$1}"`:`Marketplace "${i$1}" not found`}if(n==="list"||n===void 0){let i=X();if(i.length===0)return "No marketplaces. Use /plugin marketplace add <url>.";let s=[`Marketplaces (${i.length}):`];for(let o of i){let a=o.source.source==="github"?`github:${o.source.repo}`:o.source.url,l=o.pluginCount>=0?`${o.pluginCount} plugins`:"manifest unreadable";s.push(`  ${o.name}  (${a})  \u2014 ${l}`);}return s.join(`
+`)}return `Unknown subcommand "marketplace ${n}".
+${_}`}if(t==="install"){let n=r[1];if(!n)return "Usage: /plugin install <plugin>@<marketplace>";let i$1=ce(n);if(!i$1)return `Expected <plugin>@<marketplace>, got "${n}"`;let s=await ue(i$1.plugin,i$1.marketplace);if(!s.ok)return `Failed to install ${n}: ${s.error}`;i();let o=[`Installed ${n}`,`  version: ${s.entry.version}`,`  path:    ${s.entry.installPath}`];return s.varRewrite.filesRewritten>0&&o.push(`  rewrote: ${s.varRewrite.filesRewritten} file(s) \u2014 \${CLAUDE_PLUGIN_ROOT} \u2192 \${CODESHELL_PLUGIN_ROOT}`),o.join(`
+`)}if(t==="uninstall"){let n=r[1];if(!n)return "Usage: /plugin uninstall <plugin>@<marketplace>";let i$1=ce(n);if(!i$1)return `Expected <plugin>@<marketplace>, got "${n}"`;let s=ae(i$1.plugin,i$1.marketplace);if(i(),!s.removedFromManifest&&!s.removedFromDisk)return `${n} was not installed`;let o=[];return s.removedFromManifest&&o.push("manifest entry"),s.removedFromDisk&&o.push("cache dir"),`Uninstalled ${n} (removed ${o.join(" + ")})`}if(t==="list"){let n=le();if(n.length===0)return "No plugins installed.";let i=[`Installed plugins (${n.length}):`];for(let{key:s,entry:o}of n)i.push(`  ${s}  v${o.version}  ${o.installPath}`);return i.join(`
+`)}return `Unknown subcommand "${t}".
+${_}`}a(Ar,"runPluginCommand");export{Ar as runPluginCommand};

package/dist/plugins/gitOps.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Minimal `git` subprocess wrappers used by the plugin marketplace. Each
+ * function returns a discriminated union so callers can produce useful
+ * error messages without try/catching. Mirrors Claude Code's
+ * utils/plugins/marketplaceManager.ts:loadAndCacheMarketplace at the
+ * subset we need for the MVP.
+ */
+export type GitResult = {
+    ok: true;
+    stdout: string;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function gitClone(url: string, destDir: string, options?: {
+    ref?: string;
+}): Promise<GitResult>;
+export declare function gitRevParseHead(repoDir: string): Promise<GitResult>;
+export declare function gitFetchAndReset(repoDir: string, ref?: string): Promise<GitResult>;
+/**
+ * Github source helper: convert "owner/repo" to an https clone URL.
+ */
+export declare function githubRepoToCloneUrl(repo: string): string;

package/dist/plugins/installedPlugins.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Read/write ~/.code-shell/plugins/installed_plugins.json (V2 format).
+ * Byte-compatible with Claude Code's analogous file.
+ */
+import type { InstalledPluginsV2, PluginInstallEntry } from "./types.js";
+export declare function installedPluginsPath(): string;
+export declare function readInstalledPlugins(): InstalledPluginsV2;
+export declare function writeInstalledPlugins(data: InstalledPluginsV2): void;
+/**
+ * Append an install entry for `<plugin>@<marketplace>`. Multiple entries
+ * for the same key are allowed (different scopes); MVP only writes scope:"user".
+ */
+export declare function appendInstallEntry(key: string, entry: PluginInstallEntry): void;
+export declare function removeInstallEntries(key: string): boolean;
+export declare function pluginInstallKey(plugin: string, marketplace: string): string;

package/dist/plugins/knownMarketplaces.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Read/write ~/.code-shell/plugins/known_marketplaces.json.
+ * File format is byte-compatible with Claude Code's analogous file.
+ */
+import type { KnownMarketplaces, KnownMarketplace } from "./types.js";
+export declare function knownMarketplacesPath(): string;
+export declare function readKnownMarketplaces(): KnownMarketplaces;
+export declare function writeKnownMarketplaces(data: KnownMarketplaces): void;
+export declare function upsertKnownMarketplace(name: string, entry: KnownMarketplace): void;
+export declare function removeKnownMarketplace(name: string): boolean;

package/dist/plugins/loadPluginHooks.d.ts

@@ -0,0 +1,52 @@
+/**
+ * loadPluginHooks — scan every installed plugin's hooks/hooks.json and
+ * register the command-type hooks with the engine's HookRegistry.
+ *
+ * Plugin hooks.json schema (Claude Code-compatible):
+ *
+ *   {
+ *     "hooks": {
+ *       "<EventName>": [
+ *         {
+ *           "matcher": "<regex>",      // optional; semantics depend on event
+ *           "hooks": [
+ *             {
+ *               "type": "command",
+ *               "command": "...",      // ${CODESHELL_PLUGIN_ROOT} placeholder
+ *               "async": false,        // currently ignored (always sync await)
+ *               "timeout_ms": 60000    // optional override
+ *             }
+ *           ]
+ *         }
+ *       ]
+ *     }
+ *   }
+ *
+ * Event-name mapping (CC PascalCase → codeshell snake_case):
+ *   SessionStart       → on_session_start
+ *   UserPromptSubmit   → user_prompt_submit
+ *   PreToolUse         → pre_tool_use
+ *   PostToolUse        → post_tool_use
+ *   PreCompact         → pre_compact
+ *   Notification       → notification
+ *   Stop               → on_session_end
+ *   SubagentStop       → (skipped — codeshell sub-agents don't surface this event)
+ *
+ * matcher semantics:
+ *   SessionStart    — matches against ctx.data.source ("startup"|"resume"|"clear"|"compact")
+ *   PreToolUse /
+ *   PostToolUse     — matches against ctx.data.toolName
+ *   other events    — matcher is currently ignored (the CC spec doesn't
+ *                     define matcher semantics for them either)
+ *
+ * Errors are swallowed per-plugin: a malformed hooks.json from one plugin
+ * must not block other plugins from loading.
+ */
+import type { HookRegistry } from "../hooks/registry.js";
+/**
+ * Walk installed plugins and register their command hooks. Safe to call
+ * multiple times — the caller is responsible for not double-registering
+ * (HookRegistry has no de-dup; the engine constructor calls this exactly
+ * once after creating the registry).
+ */
+export declare function loadPluginHooks(registry: HookRegistry): void;