@cline/core 0.0.69 → 0.0.70

package/dist/extensions/config/runtime-commands.d.ts

@@ -7,5 +7,6 @@ export type AvailableRuntimeCommand = {
     description?: string;
     kind: RuntimeCommandKind;
 };
+export declare function normalizeRuntimeCommandName(name: string): string;
 export declare function listAvailableRuntimeCommandsFromWatcher(watcher: UserInstructionConfigWatcher): AvailableRuntimeCommand[];
 export declare function resolveRuntimeSlashCommandFromWatcher(input: string, watcher: UserInstructionConfigWatcher): string;

package/dist/extensions/context/compaction.d.ts

@@ -11,6 +11,14 @@ export interface ContextPipelinePrepareTurnInput {
     systemPrompt: string;
     tools: unknown[];
     model: CoreCompactionContext["model"];
+    /**
+     * Set by the runtime when the provider rejected the previous request as
+     * exceeding the model's context window. Forces a compaction regardless of
+     * the token-estimate trigger (the estimate just proved wrong) and uses the
+     * deterministic basic strategy — recovery must not depend on another
+     * successful LLM request.
+     */
+    overflowRecovery?: boolean;
     emitStatusNotice?: (message: string, metadata?: Record<string, unknown>) => void;
 }
 export interface ContextPipelinePrepareTurnResult {

package/dist/extensions/index.d.ts

@@ -1,5 +1,5 @@
 export type { ResolveAgentPluginPathsOptions } from "./plugin/plugin-config-loader";
-export { discoverPluginModulePaths, resolveAgentPluginPaths, resolveAndLoadAgentPlugins, resolvePluginConfigSearchPaths, resolvePluginSkillDirectoriesFromPaths, } from "./plugin/plugin-config-loader";
+export { discoverPluginModulePaths, getPluginDisplayName, resolveAgentPluginPaths, resolveAndLoadAgentPlugins, resolvePluginConfigSearchPaths, resolvePluginSkillDirectoriesFromPaths, } from "./plugin/plugin-config-loader";
 export type { PluginInitializationFailure, PluginInitializationWarning, PluginLoadDiagnostics, } from "./plugin/plugin-load-report";
 export type { LoadAgentPluginFromPathOptions } from "./plugin/plugin-loader";
 export { loadAgentPluginFromPath, loadAgentPluginsFromPaths, loadAgentPluginsFromPathsWithDiagnostics, } from "./plugin/plugin-loader";

package/dist/extensions/plugin/plugin-config-loader.d.ts

@@ -1,6 +1,7 @@
 import type { AgentConfig, PluginSetupContext, WorkspaceInfo } from "@cline/shared";
 import type { PluginLoadDiagnostics } from "./plugin-load-report";
 import type { PluginTargeting } from "./plugin-targeting";
+export { getPluginDisplayName } from "@cline/shared/storage";
 type AgentPlugin = NonNullable<AgentConfig["extensions"]>[number];
 export declare function resolvePluginConfigSearchPaths(workspacePath?: string): string[];
 export declare function discoverPluginModulePaths(directoryPath: string): string[];
@@ -40,4 +41,3 @@ export declare function resolveAndLoadAgentPlugins(options?: ResolveAndLoadAgent
     pluginPaths: string[];
     shutdown?: () => Promise<void>;
 } & PluginLoadDiagnostics>;
-export {};

package/dist/extensions/tools/command-guard-extension.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Plan-Mode Command Guard Extension
+ *
+ * Runtime extension that enforces the plan-mode command blacklist
+ * (./command-guard.ts) as a `beforeTool` hook. The runtime builder registers
+ * it for plan-mode sessions, making command blocking session policy in one
+ * shared place: the hook fires for every `run_commands` tool in the runtime —
+ * the SDK built-in and host-provided replacements like the VS Code
+ * extension's terminal-backed tool — without threading a flag through each
+ * layer.
+ *
+ * Because `beforeTool` hooks run before tool policies and user approval,
+ * a blocked call is rejected up front: the user is never asked to approve a
+ * command that would only fail, and the model receives the plan-mode error
+ * as the tool result (`skip`, not `stop`, so the run continues).
+ */
+import type { AgentExtension, ITelemetryService } from "@cline/shared";
+export declare const PLAN_MODE_COMMAND_GUARD_EXTENSION_NAME = "core.plan-mode-command-guard";
+export interface PlanModeCommandGuardOptions {
+    telemetry?: ITelemetryService;
+}
+export declare function createPlanModeCommandGuardExtension(options?: PlanModeCommandGuardOptions): AgentExtension;

package/dist/extensions/tools/command-guard.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Plan-mode command blacklist for run_commands.
+ *
+ * Plan mode keeps run_commands available for read-only investigation, but
+ * models (especially weaker ones) use it to edit files anyway. When the plan
+ * preset sets `blockFileEditingCommands`, createShellTool checks each command
+ * against this blacklist before executing and returns a tool error instead of
+ * running anything that looks like a file modification.
+ *
+ * This is a simple blacklist, not a shell interpreter. Commands are lightly
+ * preprocessed (quoted text, heredoc bodies, escapes, and comments are masked
+ * so they cannot false-positive), split on shell separators, and the leading
+ * command word of each part is compared against the lists below; output
+ * redirection to files is also rejected. It will not catch every possible
+ * mutation (e.g. `python -c "open(..., 'w')"` or commands hidden inside a
+ * quoted `bash -c` string) — it exists to stop the common ways models edit
+ * files from the shell, and entries are easy to add.
+ */
+import type { StructuredCommandInput } from "./schemas";
+/**
+ * Inspect a run_commands entry and return a short description of the first
+ * file-modifying construct found, or undefined when the command looks
+ * read-only.
+ */
+export declare function findFileEditingCommand(command: string | StructuredCommandInput): string | undefined;
+/**
+ * Tool error returned in place of executing a blocked command in plan mode.
+ */
+export declare function formatPlanModeBlockedCommandError(reason: string): string;

package/dist/extensions/tools/index.d.ts

@@ -4,6 +4,7 @@
  * This module provides a set of configurable default tools for agents.
  */
 export { validateWithZod, zodToJsonSchema } from "@cline/shared";
+export { createPlanModeCommandGuardExtension, PLAN_MODE_COMMAND_GUARD_EXTENSION_NAME, type PlanModeCommandGuardOptions, } from "./command-guard-extension";
 export { ALL_DEFAULT_TOOL_NAMES, DefaultToolNames } from "./constants";
 export { createApplyPatchTool, createAskQuestionTool, createDefaultTools, createEditorTool, createReadFilesTool, createSearchTool, createShellTool, createSkillsTool, createSubmitAndExitTool, createWebFetchTool, } from "./definitions";
 export { type ApplyPatchExecutorOptions, CommandExitError, computePatchChanges, createApplyPatchExecutor, createDefaultExecutors, createDefaultShellExecutor, createEditorExecutor, createFileReadExecutor, createSearchExecutor, createShellExecutor, createWebFetchExecutor, type DefaultExecutorsOptions, type EditorExecutorOptions, type FileReadExecutorOptions, PATCH_MARKERS, PatchActionType, type PatchFileChange, type SearchExecutorOptions, type ShellExecutorOptions, type WebFetchExecutorOptions, } from "./executors/index";

package/dist/extensions/tools/presets.d.ts

@@ -31,8 +31,10 @@ export declare const ToolPresets: {
         readonly enableAgentTeams: true;
     };
     /**
-     * Plan mode (read-only, no shell access)
-     * Good for analysis and documentation agents
+     * Plan mode (read-only)
+     * Good for analysis and documentation agents. Shell access stays enabled
+     * for read-only investigation; file-editing commands are hard-blocked by
+     * the plan-mode command-guard hook the runtime builder registers.
      */
     readonly plan: {
         readonly enableReadFiles: true;

package/dist/hub/client/session-client.d.ts

@@ -17,6 +17,8 @@ export interface HubSessionClientOptions {
 export interface HubSessionRow {
     sessionId: string;
     parentSessionId?: string;
+    /** Hub runtime status when the server provided one. */
+    status?: string;
     metadata?: Record<string, unknown>;
     messagesPath?: string;
 }