@code-yeongyu/senpi 2026.7.30 → 2026.7.31-2

package/dist/core/extensions/builtin/loop-guard/detectors.d.ts

@@ -0,0 +1,31 @@
+import type { ToolCallRecord } from "./tracker.ts";
+export type LoopGuardDetection = {
+    readonly kind: "identical";
+    readonly toolName: string;
+    readonly count: number;
+    readonly fingerprint: string;
+} | {
+    readonly kind: "similar";
+    readonly toolName: string;
+    readonly count: number;
+    readonly similarity: number;
+    readonly fingerprint: string;
+} | {
+    readonly kind: "cycle";
+    readonly period: number;
+    readonly count: number;
+    readonly cycleTools: readonly string[];
+    readonly fingerprint: string;
+};
+export type LoopGuardKind = LoopGuardDetection["kind"];
+export declare function detectIdenticalRun(records: readonly ToolCallRecord[]): LoopGuardDetection | undefined;
+export declare function detectSimilarRun(records: readonly ToolCallRecord[]): LoopGuardDetection | undefined;
+export declare function detectCycle(records: readonly ToolCallRecord[]): LoopGuardDetection | undefined;
+export declare class NoticeGate {
+    private entries;
+    admit(detection: LoopGuardDetection): boolean;
+    prune(active: ReadonlyMap<LoopGuardKind, string>): void;
+    reset(): void;
+}
+export declare function detectLoop(records: readonly ToolCallRecord[], gate: NoticeGate): LoopGuardDetection | undefined;
+//# sourceMappingURL=detectors.d.ts.map

package/dist/core/extensions/builtin/loop-guard/detectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectors.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/detectors.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC/G;IACA,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC5B,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEL,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAEvD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,kBAAkB,GAAG,SAAS,CAUrG;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,kBAAkB,GAAG,SAAS,CAcnG;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,kBAAkB,GAAG,SAAS,CA6B9F;AAOD,qBAAa,UAAU;IACtB,OAAO,CAAC,OAAO,CAAuC;IAEtD,KAAK,CAAC,SAAS,EAAE,kBAAkB,GAAG,OAAO,CAW5C;IAED,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,IAAI,CAItD;IAED,KAAK,IAAI,IAAI,CAEZ;CACD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,GAAG,kBAAkB,GAAG,SAAS,CAW/G"}

package/dist/core/extensions/builtin/loop-guard/detectors.js

@@ -0,0 +1,111 @@
+import { CYCLE_MAX_PERIOD, CYCLE_MIN_PERIOD, CYCLE_REPETITION_THRESHOLD, ESCALATION_FACTOR, IDENTICAL_RUN_THRESHOLD, SIMILAR_RUN_THRESHOLD, SIMILARITY_THRESHOLD, } from "./policy.js";
+import { meanAdjacentSimilarity } from "./similarity.js";
+export function detectIdenticalRun(records) {
+    const last = records[records.length - 1];
+    if (last === undefined)
+        return undefined;
+    let run = 1;
+    for (let i = records.length - 2; i >= 0; i--) {
+        if (records[i]?.signature !== last.signature)
+            break;
+        run++;
+    }
+    if (run < IDENTICAL_RUN_THRESHOLD)
+        return undefined;
+    return { kind: "identical", toolName: last.toolName, count: run, fingerprint: last.signature };
+}
+export function detectSimilarRun(records) {
+    const last = records[records.length - 1];
+    if (last === undefined)
+        return undefined;
+    let run = 1;
+    for (let i = records.length - 2; i >= 0; i--) {
+        if (records[i]?.toolName !== last.toolName)
+            break;
+        run++;
+    }
+    if (run < SIMILAR_RUN_THRESHOLD)
+        return undefined;
+    const argStrings = records.slice(records.length - run).map((record) => record.argsJson);
+    if (new Set(argStrings).size === 1)
+        return undefined;
+    const similarity = meanAdjacentSimilarity(argStrings);
+    if (similarity < SIMILARITY_THRESHOLD)
+        return undefined;
+    return { kind: "similar", toolName: last.toolName, count: run, similarity, fingerprint: last.toolName };
+}
+export function detectCycle(records) {
+    const total = records.length;
+    for (let period = CYCLE_MIN_PERIOD; period <= CYCLE_MAX_PERIOD; period++) {
+        if (total < period * CYCLE_REPETITION_THRESHOLD)
+            continue;
+        const cycle = records.slice(total - period);
+        if (new Set(cycle.map((record) => record.signature)).size < 2)
+            continue;
+        let repetitions = 1;
+        while (repetitions * period + period <= total) {
+            const blockStart = total - (repetitions + 1) * period;
+            let matches = true;
+            for (let offset = 0; offset < period; offset++) {
+                if (records[blockStart + offset]?.signature !== cycle[offset]?.signature) {
+                    matches = false;
+                    break;
+                }
+            }
+            if (!matches)
+                break;
+            repetitions++;
+        }
+        if (repetitions < CYCLE_REPETITION_THRESHOLD)
+            continue;
+        return {
+            kind: "cycle",
+            period,
+            count: repetitions,
+            cycleTools: cycle.map((record) => record.toolName),
+            fingerprint: cycle.map((record) => record.signature).join("\u0001"),
+        };
+    }
+    return undefined;
+}
+export class NoticeGate {
+    constructor() {
+        this.entries = new Map();
+    }
+    admit(detection) {
+        const existing = this.entries.get(detection.kind);
+        if (existing === undefined || existing.fingerprint !== detection.fingerprint) {
+            this.entries.set(detection.kind, { fingerprint: detection.fingerprint, lastNotifiedCount: detection.count });
+            return true;
+        }
+        if (detection.count >= existing.lastNotifiedCount * ESCALATION_FACTOR) {
+            existing.lastNotifiedCount = detection.count;
+            return true;
+        }
+        return false;
+    }
+    prune(active) {
+        for (const [kind, entry] of this.entries) {
+            if (active.get(kind) !== entry.fingerprint)
+                this.entries.delete(kind);
+        }
+    }
+    reset() {
+        this.entries.clear();
+    }
+}
+export function detectLoop(records, gate) {
+    const detections = [detectIdenticalRun(records), detectCycle(records), detectSimilarRun(records)];
+    const active = new Map();
+    for (const detection of detections) {
+        if (detection !== undefined)
+            active.set(detection.kind, detection.fingerprint);
+    }
+    gate.prune(active);
+    for (const detection of detections) {
+        if (detection !== undefined && gate.admit(detection))
+            return detection;
+    }
+    return undefined;
+}
+//# sourceMappingURL=detectors.js.map

package/dist/core/extensions/builtin/loop-guard/detectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectors.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/detectors.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,gBAAgB,EAChB,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAsBzD,MAAM,UAAU,kBAAkB,CAAC,OAAkC;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,MAAM;QACpD,GAAG,EAAE,CAAC;IACP,CAAC;IACD,IAAI,GAAG,GAAG,uBAAuB;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAkC;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,MAAM;QAClD,GAAG,EAAE,CAAC;IACP,CAAC;IACD,IAAI,GAAG,GAAG,qBAAqB;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxF,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,UAAU,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,UAAU,GAAG,oBAAoB;QAAE,OAAO,SAAS,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAkC;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,KAAK,IAAI,MAAM,GAAG,gBAAgB,EAAE,MAAM,IAAI,gBAAgB,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1E,IAAI,KAAK,GAAG,MAAM,GAAG,0BAA0B;YAAE,SAAS;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAAE,SAAS;QACxE,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,OAAO,WAAW,GAAG,MAAM,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;YACtD,IAAI,OAAO,GAAG,IAAI,CAAC;YACnB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;gBAChD,IAAI,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;oBAC1E,OAAO,GAAG,KAAK,CAAC;oBAChB,MAAM;gBACP,CAAC;YACF,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,MAAM;YACpB,WAAW,EAAE,CAAC;QACf,CAAC;QACD,IAAI,WAAW,GAAG,0BAA0B;YAAE,SAAS;QACvD,OAAO;YACN,IAAI,EAAE,OAAO;YACb,MAAM;YACN,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClD,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;SACnE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAOD,MAAM,OAAO,UAAU;IAAvB;QACS,YAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAwBvD,CAAC;IAtBA,KAAK,CAAC,SAA6B;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;YAC9E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,iBAAiB,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7G,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,SAAS,CAAC,KAAK,IAAI,QAAQ,CAAC,iBAAiB,GAAG,iBAAiB,EAAE,CAAC;YACvE,QAAQ,CAAC,iBAAiB,GAAG,SAAS,CAAC,KAAK,CAAC;YAC7C,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAA0C;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,WAAW;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC;IACF,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACD;AAED,MAAM,UAAU,UAAU,CAAC,OAAkC,EAAE,IAAgB;IAC9E,MAAM,UAAU,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC","sourcesContent":["import {\n\tCYCLE_MAX_PERIOD,\n\tCYCLE_MIN_PERIOD,\n\tCYCLE_REPETITION_THRESHOLD,\n\tESCALATION_FACTOR,\n\tIDENTICAL_RUN_THRESHOLD,\n\tSIMILAR_RUN_THRESHOLD,\n\tSIMILARITY_THRESHOLD,\n} from \"./policy.ts\";\nimport { meanAdjacentSimilarity } from \"./similarity.ts\";\nimport type { ToolCallRecord } from \"./tracker.ts\";\n\nexport type LoopGuardDetection =\n\t| { readonly kind: \"identical\"; readonly toolName: string; readonly count: number; readonly fingerprint: string }\n\t| {\n\t\t\treadonly kind: \"similar\";\n\t\t\treadonly toolName: string;\n\t\t\treadonly count: number;\n\t\t\treadonly similarity: number;\n\t\t\treadonly fingerprint: string;\n\t  }\n\t| {\n\t\t\treadonly kind: \"cycle\";\n\t\t\treadonly period: number;\n\t\t\treadonly count: number;\n\t\t\treadonly cycleTools: readonly string[];\n\t\t\treadonly fingerprint: string;\n\t  };\n\nexport type LoopGuardKind = LoopGuardDetection[\"kind\"];\n\nexport function detectIdenticalRun(records: readonly ToolCallRecord[]): LoopGuardDetection | undefined {\n\tconst last = records[records.length - 1];\n\tif (last === undefined) return undefined;\n\tlet run = 1;\n\tfor (let i = records.length - 2; i >= 0; i--) {\n\t\tif (records[i]?.signature !== last.signature) break;\n\t\trun++;\n\t}\n\tif (run < IDENTICAL_RUN_THRESHOLD) return undefined;\n\treturn { kind: \"identical\", toolName: last.toolName, count: run, fingerprint: last.signature };\n}\n\nexport function detectSimilarRun(records: readonly ToolCallRecord[]): LoopGuardDetection | undefined {\n\tconst last = records[records.length - 1];\n\tif (last === undefined) return undefined;\n\tlet run = 1;\n\tfor (let i = records.length - 2; i >= 0; i--) {\n\t\tif (records[i]?.toolName !== last.toolName) break;\n\t\trun++;\n\t}\n\tif (run < SIMILAR_RUN_THRESHOLD) return undefined;\n\tconst argStrings = records.slice(records.length - run).map((record) => record.argsJson);\n\tif (new Set(argStrings).size === 1) return undefined;\n\tconst similarity = meanAdjacentSimilarity(argStrings);\n\tif (similarity < SIMILARITY_THRESHOLD) return undefined;\n\treturn { kind: \"similar\", toolName: last.toolName, count: run, similarity, fingerprint: last.toolName };\n}\n\nexport function detectCycle(records: readonly ToolCallRecord[]): LoopGuardDetection | undefined {\n\tconst total = records.length;\n\tfor (let period = CYCLE_MIN_PERIOD; period <= CYCLE_MAX_PERIOD; period++) {\n\t\tif (total < period * CYCLE_REPETITION_THRESHOLD) continue;\n\t\tconst cycle = records.slice(total - period);\n\t\tif (new Set(cycle.map((record) => record.signature)).size < 2) continue;\n\t\tlet repetitions = 1;\n\t\twhile (repetitions * period + period <= total) {\n\t\t\tconst blockStart = total - (repetitions + 1) * period;\n\t\t\tlet matches = true;\n\t\t\tfor (let offset = 0; offset < period; offset++) {\n\t\t\t\tif (records[blockStart + offset]?.signature !== cycle[offset]?.signature) {\n\t\t\t\t\tmatches = false;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (!matches) break;\n\t\t\trepetitions++;\n\t\t}\n\t\tif (repetitions < CYCLE_REPETITION_THRESHOLD) continue;\n\t\treturn {\n\t\t\tkind: \"cycle\",\n\t\t\tperiod,\n\t\t\tcount: repetitions,\n\t\t\tcycleTools: cycle.map((record) => record.toolName),\n\t\t\tfingerprint: cycle.map((record) => record.signature).join(\"\\u0001\"),\n\t\t};\n\t}\n\treturn undefined;\n}\n\ninterface GateEntry {\n\tfingerprint: string;\n\tlastNotifiedCount: number;\n}\n\nexport class NoticeGate {\n\tprivate entries = new Map<LoopGuardKind, GateEntry>();\n\n\tadmit(detection: LoopGuardDetection): boolean {\n\t\tconst existing = this.entries.get(detection.kind);\n\t\tif (existing === undefined || existing.fingerprint !== detection.fingerprint) {\n\t\t\tthis.entries.set(detection.kind, { fingerprint: detection.fingerprint, lastNotifiedCount: detection.count });\n\t\t\treturn true;\n\t\t}\n\t\tif (detection.count >= existing.lastNotifiedCount * ESCALATION_FACTOR) {\n\t\t\texisting.lastNotifiedCount = detection.count;\n\t\t\treturn true;\n\t\t}\n\t\treturn false;\n\t}\n\n\tprune(active: ReadonlyMap<LoopGuardKind, string>): void {\n\t\tfor (const [kind, entry] of this.entries) {\n\t\t\tif (active.get(kind) !== entry.fingerprint) this.entries.delete(kind);\n\t\t}\n\t}\n\n\treset(): void {\n\t\tthis.entries.clear();\n\t}\n}\n\nexport function detectLoop(records: readonly ToolCallRecord[], gate: NoticeGate): LoopGuardDetection | undefined {\n\tconst detections = [detectIdenticalRun(records), detectCycle(records), detectSimilarRun(records)];\n\tconst active = new Map<LoopGuardKind, string>();\n\tfor (const detection of detections) {\n\t\tif (detection !== undefined) active.set(detection.kind, detection.fingerprint);\n\t}\n\tgate.prune(active);\n\tfor (const detection of detections) {\n\t\tif (detection !== undefined && gate.admit(detection)) return detection;\n\t}\n\treturn undefined;\n}\n"]}

package/dist/core/extensions/builtin/loop-guard/index.d.ts

@@ -0,0 +1,3 @@
+import type { ExtensionAPI } from "../../types.ts";
+export default function loopGuardExtension(pi: ExtensionAPI): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/extensions/builtin/loop-guard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAMnD,MAAM,CAAC,OAAO,UAAU,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA+BjE"}

package/dist/core/extensions/builtin/loop-guard/index.js

@@ -0,0 +1,31 @@
+import { detectLoop, NoticeGate } from "./detectors.js";
+import { buildLoopGuardReminder, LOOP_GUARD_NOTICE_CUSTOM_TYPE } from "./notice.js";
+import { renderLoopGuardNotice } from "./renderer.js";
+import { ToolCallTracker } from "./tracker.js";
+export default function loopGuardExtension(pi) {
+    const tracker = new ToolCallTracker();
+    const gate = new NoticeGate();
+    const reset = () => {
+        tracker.reset();
+        gate.reset();
+    };
+    pi.registerMessageRenderer(LOOP_GUARD_NOTICE_CUSTOM_TYPE, renderLoopGuardNotice);
+    pi.on("session_start", () => reset());
+    pi.on("input", (event) => {
+        if (event.source !== "extension")
+            reset();
+    });
+    pi.on("tool_execution_start", (event) => {
+        tracker.record(event.toolName, event.args);
+        const detection = detectLoop(tracker.records, gate);
+        if (detection === undefined)
+            return;
+        pi.sendMessage({
+            customType: LOOP_GUARD_NOTICE_CUSTOM_TYPE,
+            content: buildLoopGuardReminder(detection),
+            display: true,
+            details: detection,
+        }, { triggerTurn: false, deliverAs: "steer" });
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/core/extensions/builtin/loop-guard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,CAAC,OAAO,UAAU,kBAAkB,CAAC,EAAgB;IAC1D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;IAE9B,MAAM,KAAK,GAAG,GAAS,EAAE;QACxB,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,KAAK,EAAE,CAAC;IACd,CAAC,CAAC;IAEF,EAAE,CAAC,uBAAuB,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;IAEjF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAEtC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACxB,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,KAAK,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QACpC,EAAE,CAAC,WAAW,CACb;YACC,UAAU,EAAE,6BAA6B;YACzC,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC;YAC1C,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,SAAS;SAClB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAC1C,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport { detectLoop, NoticeGate } from \"./detectors.ts\";\nimport { buildLoopGuardReminder, LOOP_GUARD_NOTICE_CUSTOM_TYPE } from \"./notice.ts\";\nimport { renderLoopGuardNotice } from \"./renderer.ts\";\nimport { ToolCallTracker } from \"./tracker.ts\";\n\nexport default function loopGuardExtension(pi: ExtensionAPI): void {\n\tconst tracker = new ToolCallTracker();\n\tconst gate = new NoticeGate();\n\n\tconst reset = (): void => {\n\t\ttracker.reset();\n\t\tgate.reset();\n\t};\n\n\tpi.registerMessageRenderer(LOOP_GUARD_NOTICE_CUSTOM_TYPE, renderLoopGuardNotice);\n\n\tpi.on(\"session_start\", () => reset());\n\n\tpi.on(\"input\", (event) => {\n\t\tif (event.source !== \"extension\") reset();\n\t});\n\n\tpi.on(\"tool_execution_start\", (event) => {\n\t\ttracker.record(event.toolName, event.args);\n\t\tconst detection = detectLoop(tracker.records, gate);\n\t\tif (detection === undefined) return;\n\t\tpi.sendMessage(\n\t\t\t{\n\t\t\t\tcustomType: LOOP_GUARD_NOTICE_CUSTOM_TYPE,\n\t\t\t\tcontent: buildLoopGuardReminder(detection),\n\t\t\t\tdisplay: true,\n\t\t\t\tdetails: detection,\n\t\t\t},\n\t\t\t{ triggerTurn: false, deliverAs: \"steer\" },\n\t\t);\n\t});\n}\n"]}

package/dist/core/extensions/builtin/loop-guard/notice.d.ts

@@ -0,0 +1,5 @@
+import type { LoopGuardDetection } from "./detectors.ts";
+export declare const LOOP_GUARD_NOTICE_CUSTOM_TYPE = "loop-guard:notice";
+export type LoopGuardNoticeDetails = LoopGuardDetection;
+export declare function buildLoopGuardReminder(detection: LoopGuardDetection): string;
+//# sourceMappingURL=notice.d.ts.map

package/dist/core/extensions/builtin/loop-guard/notice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/notice.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,eAAO,MAAM,6BAA6B,sBAAsB,CAAC;AAEjE,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAExD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,kBAAkB,GAAG,MAAM,CAuC5E"}

package/dist/core/extensions/builtin/loop-guard/notice.js

@@ -0,0 +1,42 @@
+export const LOOP_GUARD_NOTICE_CUSTOM_TYPE = "loop-guard:notice";
+export function buildLoopGuardReminder(detection) {
+    switch (detection.kind) {
+        case "identical": {
+            const { toolName, count } = detection;
+            return [
+                `<system-reminder>`,
+                `LOOP GUARD - IDENTICAL TOOL CALLS: you called \`${toolName}\` ${count} times in a row with the EXACT same arguments. This is the tool-call stream, not consecutive text - another tool ran between these calls and it changed nothing about your plan. Re-issuing the same call returns the same result. Snap out of it:`,
+                `- reuse the result you already received from this exact call;`,
+                `- if you were re-checking for new output or state, switch to the monitor/watch tool or change one parameter deliberately (filter, offset, query);`,
+                `- if nothing is actually changing, stop calling this tool, state what is blocking you, and try a different tool or ask the user.`,
+                `Do not call \`${toolName}\` again with identical arguments.`,
+                `</system-reminder>`,
+            ].join("\n");
+        }
+        case "similar": {
+            const { toolName, count, similarity } = detection;
+            const percent = Math.round(similarity * 100);
+            return [
+                `<system-reminder>`,
+                `LOOP GUARD - NEAR-IDENTICAL TOOL CALLS: your last ${count} calls to \`${toolName}\` had arguments about ${percent}% identical (bigram similarity over canonical args). This may be legitimate batch work - or it may be a lazy loop that only LOOKS like progress. Attention check:`,
+                `- if these calls target genuinely different inputs (distinct files, queries, offsets), continue deliberately - but consider batching or widening the scope instead of one call per tiny variation;`,
+                `- if you are scanning output incrementally (reads, peeks, polls), widen the window once or use the monitor/watch tool rather than nudging parameters;`,
+                `- if the results keep saying the same thing, change strategy now - a different tool, a wider query, or asking the user beats a sixth near-copy.`,
+                `</system-reminder>`,
+            ].join("\n");
+        }
+        case "cycle": {
+            const { period, count, cycleTools } = detection;
+            const pattern = cycleTools.join(" -> ");
+            return [
+                `<system-reminder>`,
+                `LOOP GUARD - REPEATING TOOL-CALL PATTERN: your recent tool calls repeat the cycle [${pattern}] ${count} times (period ${period}), with other calls possibly interleaved between repetitions. A fixed rotation usually means waiting, guessing, or searching without a discriminator:`,
+                `- if this is a wait/poll rotation (spawn then peek, write then check), replace the rotation with the monitor/watch tool and react to the decisive event instead;`,
+                `- if this is a search rotation, change ONE axis decisively: broader query, different tool, or a different source - repeating the same rotation at the same parameters will not find new information;`,
+                `- if the cycle is genuinely progressing (each rotation moves distinct work forward), keep going - but say what each rotation accomplished so the next rotation can end.`,
+                `</system-reminder>`,
+            ].join("\n");
+        }
+    }
+}
+//# sourceMappingURL=notice.js.map

package/dist/core/extensions/builtin/loop-guard/notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/notice.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,6BAA6B,GAAG,mBAAmB,CAAC;AAIjE,MAAM,UAAU,sBAAsB,CAAC,SAA6B;IACnE,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW,EAAE,CAAC;YAClB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;YACtC,OAAO;gBACN,mBAAmB;gBACnB,mDAAmD,QAAQ,MAAM,KAAK,oPAAoP;gBAC1T,+DAA+D;gBAC/D,mJAAmJ;gBACnJ,kIAAkI;gBAClI,iBAAiB,QAAQ,oCAAoC;gBAC7D,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YAChB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YAC7C,OAAO;gBACN,mBAAmB;gBACnB,qDAAqD,KAAK,eAAe,QAAQ,0BAA0B,OAAO,mKAAmK;gBACrR,oMAAoM;gBACpM,uJAAuJ;gBACvJ,iJAAiJ;gBACjJ,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACd,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;YAChD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO;gBACN,mBAAmB;gBACnB,sFAAsF,OAAO,KAAK,KAAK,kBAAkB,MAAM,uJAAuJ;gBACtR,kKAAkK;gBAClK,sMAAsM;gBACtM,yKAAyK;gBACzK,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;IACF,CAAC;AACF,CAAC","sourcesContent":["import type { LoopGuardDetection } from \"./detectors.ts\";\n\nexport const LOOP_GUARD_NOTICE_CUSTOM_TYPE = \"loop-guard:notice\";\n\nexport type LoopGuardNoticeDetails = LoopGuardDetection;\n\nexport function buildLoopGuardReminder(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\": {\n\t\t\tconst { toolName, count } = detection;\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - IDENTICAL TOOL CALLS: you called \\`${toolName}\\` ${count} times in a row with the EXACT same arguments. This is the tool-call stream, not consecutive text - another tool ran between these calls and it changed nothing about your plan. Re-issuing the same call returns the same result. Snap out of it:`,\n\t\t\t\t`- reuse the result you already received from this exact call;`,\n\t\t\t\t`- if you were re-checking for new output or state, switch to the monitor/watch tool or change one parameter deliberately (filter, offset, query);`,\n\t\t\t\t`- if nothing is actually changing, stop calling this tool, state what is blocking you, and try a different tool or ask the user.`,\n\t\t\t\t`Do not call \\`${toolName}\\` again with identical arguments.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t\tcase \"similar\": {\n\t\t\tconst { toolName, count, similarity } = detection;\n\t\t\tconst percent = Math.round(similarity * 100);\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - NEAR-IDENTICAL TOOL CALLS: your last ${count} calls to \\`${toolName}\\` had arguments about ${percent}% identical (bigram similarity over canonical args). This may be legitimate batch work - or it may be a lazy loop that only LOOKS like progress. Attention check:`,\n\t\t\t\t`- if these calls target genuinely different inputs (distinct files, queries, offsets), continue deliberately - but consider batching or widening the scope instead of one call per tiny variation;`,\n\t\t\t\t`- if you are scanning output incrementally (reads, peeks, polls), widen the window once or use the monitor/watch tool rather than nudging parameters;`,\n\t\t\t\t`- if the results keep saying the same thing, change strategy now - a different tool, a wider query, or asking the user beats a sixth near-copy.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t\tcase \"cycle\": {\n\t\t\tconst { period, count, cycleTools } = detection;\n\t\t\tconst pattern = cycleTools.join(\" -> \");\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - REPEATING TOOL-CALL PATTERN: your recent tool calls repeat the cycle [${pattern}] ${count} times (period ${period}), with other calls possibly interleaved between repetitions. A fixed rotation usually means waiting, guessing, or searching without a discriminator:`,\n\t\t\t\t`- if this is a wait/poll rotation (spawn then peek, write then check), replace the rotation with the monitor/watch tool and react to the decisive event instead;`,\n\t\t\t\t`- if this is a search rotation, change ONE axis decisively: broader query, different tool, or a different source - repeating the same rotation at the same parameters will not find new information;`,\n\t\t\t\t`- if the cycle is genuinely progressing (each rotation moves distinct work forward), keep going - but say what each rotation accomplished so the next rotation can end.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t}\n}\n"]}

package/dist/core/extensions/builtin/loop-guard/policy.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Loop-guard thresholds.
+ *
+ * Evidence base (see changes.md for the full rationale):
+ * - gemini-cli LoopDetectionService: sha256(name+args) signatures, cycle periods 1..5,
+ *   threshold 5 repetitions — but it HALTS the run. Loop-guard only steers a reminder,
+ *   so it can afford to fire earlier.
+ * - OpenHands stuck detector: 4+ identical action-observation pairs, 3+ error cycles,
+ *   6+ alternating ping-pong cycles — also halting behavior.
+ * - Corpus of 400 real senpi sessions: productive same-tool runs (bash/eval/edit/todo)
+ *   show mean adjacent-args bigram-Dice ~0.52-0.55 (p90 <= 0.72), while repetitive
+ *   classes (read pagination, bash_output/task_output polling) sit at 0.84-0.93.
+ *   0.85 cleanly separates distinct work from near-identical repetition.
+ */
+/** Max tool-call records kept per prompt segment. Covers 6-period cycles at escalated counts. */
+export declare const TRACK_WINDOW = 64;
+/** Consecutive byte-identical (tool + canonical args) calls before the firm reminder fires. */
+export declare const IDENTICAL_RUN_THRESHOLD = 3;
+/** Consecutive same-tool calls with near-identical args before the caution fires. */
+export declare const SIMILAR_RUN_THRESHOLD = 5;
+/** Mean adjacent bigram-Dice similarity over canonical args that counts as "near-identical". */
+export declare const SIMILARITY_THRESHOLD = 0.85;
+/** Cycle period bounds (period 1 is the identical detector's job). */
+export declare const CYCLE_MIN_PERIOD = 2;
+export declare const CYCLE_MAX_PERIOD = 6;
+/** Full cycle repetitions before the pattern notice fires. */
+export declare const CYCLE_REPETITION_THRESHOLD = 3;
+/** A pattern that keeps growing re-notifies only when its count reaches this multiple of the last notice. */
+export declare const ESCALATION_FACTOR = 2;
+//# sourceMappingURL=policy.d.ts.map

package/dist/core/extensions/builtin/loop-guard/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iGAAiG;AACjG,eAAO,MAAM,YAAY,KAAK,CAAC;AAE/B,+FAA+F;AAC/F,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,IAAI,CAAC"}

package/dist/core/extensions/builtin/loop-guard/policy.js

@@ -0,0 +1,30 @@
+/**
+ * Loop-guard thresholds.
+ *
+ * Evidence base (see changes.md for the full rationale):
+ * - gemini-cli LoopDetectionService: sha256(name+args) signatures, cycle periods 1..5,
+ *   threshold 5 repetitions — but it HALTS the run. Loop-guard only steers a reminder,
+ *   so it can afford to fire earlier.
+ * - OpenHands stuck detector: 4+ identical action-observation pairs, 3+ error cycles,
+ *   6+ alternating ping-pong cycles — also halting behavior.
+ * - Corpus of 400 real senpi sessions: productive same-tool runs (bash/eval/edit/todo)
+ *   show mean adjacent-args bigram-Dice ~0.52-0.55 (p90 <= 0.72), while repetitive
+ *   classes (read pagination, bash_output/task_output polling) sit at 0.84-0.93.
+ *   0.85 cleanly separates distinct work from near-identical repetition.
+ */
+/** Max tool-call records kept per prompt segment. Covers 6-period cycles at escalated counts. */
+export const TRACK_WINDOW = 64;
+/** Consecutive byte-identical (tool + canonical args) calls before the firm reminder fires. */
+export const IDENTICAL_RUN_THRESHOLD = 3;
+/** Consecutive same-tool calls with near-identical args before the caution fires. */
+export const SIMILAR_RUN_THRESHOLD = 5;
+/** Mean adjacent bigram-Dice similarity over canonical args that counts as "near-identical". */
+export const SIMILARITY_THRESHOLD = 0.85;
+/** Cycle period bounds (period 1 is the identical detector's job). */
+export const CYCLE_MIN_PERIOD = 2;
+export const CYCLE_MAX_PERIOD = 6;
+/** Full cycle repetitions before the pattern notice fires. */
+export const CYCLE_REPETITION_THRESHOLD = 3;
+/** A pattern that keeps growing re-notifies only when its count reaches this multiple of the last notice. */
+export const ESCALATION_FACTOR = 2;
+//# sourceMappingURL=policy.js.map

package/dist/core/extensions/builtin/loop-guard/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC","sourcesContent":["/**\n * Loop-guard thresholds.\n *\n * Evidence base (see changes.md for the full rationale):\n * - gemini-cli LoopDetectionService: sha256(name+args) signatures, cycle periods 1..5,\n *   threshold 5 repetitions — but it HALTS the run. Loop-guard only steers a reminder,\n *   so it can afford to fire earlier.\n * - OpenHands stuck detector: 4+ identical action-observation pairs, 3+ error cycles,\n *   6+ alternating ping-pong cycles — also halting behavior.\n * - Corpus of 400 real senpi sessions: productive same-tool runs (bash/eval/edit/todo)\n *   show mean adjacent-args bigram-Dice ~0.52-0.55 (p90 <= 0.72), while repetitive\n *   classes (read pagination, bash_output/task_output polling) sit at 0.84-0.93.\n *   0.85 cleanly separates distinct work from near-identical repetition.\n */\n\n/** Max tool-call records kept per prompt segment. Covers 6-period cycles at escalated counts. */\nexport const TRACK_WINDOW = 64;\n\n/** Consecutive byte-identical (tool + canonical args) calls before the firm reminder fires. */\nexport const IDENTICAL_RUN_THRESHOLD = 3;\n\n/** Consecutive same-tool calls with near-identical args before the caution fires. */\nexport const SIMILAR_RUN_THRESHOLD = 5;\n\n/** Mean adjacent bigram-Dice similarity over canonical args that counts as \"near-identical\". */\nexport const SIMILARITY_THRESHOLD = 0.85;\n\n/** Cycle period bounds (period 1 is the identical detector's job). */\nexport const CYCLE_MIN_PERIOD = 2;\nexport const CYCLE_MAX_PERIOD = 6;\n\n/** Full cycle repetitions before the pattern notice fires. */\nexport const CYCLE_REPETITION_THRESHOLD = 3;\n\n/** A pattern that keeps growing re-notifies only when its count reaches this multiple of the last notice. */\nexport const ESCALATION_FACTOR = 2;\n"]}

package/dist/core/extensions/builtin/loop-guard/renderer.d.ts

@@ -0,0 +1,4 @@
+import type { MessageRenderer } from "../../types.ts";
+import type { LoopGuardDetection } from "./detectors.ts";
+export declare const renderLoopGuardNotice: MessageRenderer<LoopGuardDetection>;
+//# sourceMappingURL=renderer.d.ts.map

package/dist/core/extensions/builtin/loop-guard/renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/renderer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAKzD,eAAO,MAAM,qBAAqB,EAAE,eAAe,CAAC,kBAAkB,CAUrE,CAAC"}

package/dist/core/extensions/builtin/loop-guard/renderer.js

@@ -0,0 +1,50 @@
+import { Box, Text } from "@earendil-works/pi-tui";
+const BOLD = "\u001b[1m";
+const BOLD_OFF = "\u001b[22m";
+export const renderLoopGuardNotice = (message, options, theme) => {
+    const details = message.details;
+    if (details === undefined)
+        return undefined;
+    const box = new Box(1, 1, (text) => theme.bg("customMessageBg", text));
+    box.addChild(new Text(theme.fg("accent", `${BOLD}${titleLine(details)}${BOLD_OFF}`), 0, 0));
+    box.addChild(new Text(theme.fg("dim", whyLine(details)), 0, 0));
+    if (options.expanded) {
+        box.addChild(new Text(theme.fg("dim", expandedLine(details)), 0, 0));
+    }
+    return box;
+};
+function titleLine(detection) {
+    switch (detection.kind) {
+        case "identical":
+            return `⚠ Loop guard · identical calls ×${detection.count} (${detection.toolName})`;
+        case "similar":
+            return `⚠ Loop guard · near-identical calls ×${detection.count} (${detection.toolName})`;
+        case "cycle":
+            return `⚠ Loop guard · repeating pattern ×${detection.count} (period ${detection.period})`;
+    }
+}
+function whyLine(detection) {
+    switch (detection.kind) {
+        case "identical":
+            return "Same tool, same arguments, again. The agent was told to reuse the result or change the call.";
+        case "similar": {
+            const percent = Math.round(detection.similarity * 100);
+            return `Argument similarity ~${percent}%. The agent was told to verify this is distinct work, not a lazy loop.`;
+        }
+        case "cycle": {
+            const pattern = detection.cycleTools.join(" -> ");
+            return `Tool-call cycle [${pattern}]. The agent was told to break the rotation or justify the progress.`;
+        }
+    }
+}
+function expandedLine(detection) {
+    switch (detection.kind) {
+        case "identical":
+            return `tool ${detection.toolName} · ${detection.count} consecutive identical calls when the reminder fired`;
+        case "similar":
+            return `tool ${detection.toolName} · ${detection.count} consecutive same-tool calls at ~${Math.round(detection.similarity * 100)}% args similarity`;
+        case "cycle":
+            return `cycle ${detection.cycleTools.join(" -> ")} · ${detection.count} full repetitions in the tracked window`;
+    }
+}
+//# sourceMappingURL=renderer.js.map

package/dist/core/extensions/builtin/loop-guard/renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/renderer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAInD,MAAM,IAAI,GAAG,WAAW,CAAC;AACzB,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,CAAC,MAAM,qBAAqB,GAAwC,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;IACrG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAEF,SAAS,SAAS,CAAC,SAA6B;IAC/C,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,mCAAmC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,QAAQ,GAAG,CAAC;QACrF,KAAK,SAAS;YACb,OAAO,wCAAwC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,QAAQ,GAAG,CAAC;QAC1F,KAAK,OAAO;YACX,OAAO,qCAAqC,SAAS,CAAC,KAAK,YAAY,SAAS,CAAC,MAAM,GAAG,CAAC;IAC7F,CAAC;AACF,CAAC;AAED,SAAS,OAAO,CAAC,SAA6B;IAC7C,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,8FAA8F,CAAC;QACvG,KAAK,SAAS,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YACvD,OAAO,wBAAwB,OAAO,yEAAyE,CAAC;QACjH,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,oBAAoB,OAAO,sEAAsE,CAAC;QAC1G,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,SAA6B;IAClD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,QAAQ,SAAS,CAAC,QAAQ,MAAM,SAAS,CAAC,KAAK,sDAAsD,CAAC;QAC9G,KAAK,SAAS;YACb,OAAO,QAAQ,SAAS,CAAC,QAAQ,MAAM,SAAS,CAAC,KAAK,oCAAoC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACrJ,KAAK,OAAO;YACX,OAAO,SAAS,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,KAAK,yCAAyC,CAAC;IAClH,CAAC;AACF,CAAC","sourcesContent":["import { Box, Text } from \"@earendil-works/pi-tui\";\nimport type { MessageRenderer } from \"../../types.ts\";\nimport type { LoopGuardDetection } from \"./detectors.ts\";\n\nconst BOLD = \"\\u001b[1m\";\nconst BOLD_OFF = \"\\u001b[22m\";\n\nexport const renderLoopGuardNotice: MessageRenderer<LoopGuardDetection> = (message, options, theme) => {\n\tconst details = message.details;\n\tif (details === undefined) return undefined;\n\tconst box = new Box(1, 1, (text) => theme.bg(\"customMessageBg\", text));\n\tbox.addChild(new Text(theme.fg(\"accent\", `${BOLD}${titleLine(details)}${BOLD_OFF}`), 0, 0));\n\tbox.addChild(new Text(theme.fg(\"dim\", whyLine(details)), 0, 0));\n\tif (options.expanded) {\n\t\tbox.addChild(new Text(theme.fg(\"dim\", expandedLine(details)), 0, 0));\n\t}\n\treturn box;\n};\n\nfunction titleLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn `⚠ Loop guard · identical calls ×${detection.count} (${detection.toolName})`;\n\t\tcase \"similar\":\n\t\t\treturn `⚠ Loop guard · near-identical calls ×${detection.count} (${detection.toolName})`;\n\t\tcase \"cycle\":\n\t\t\treturn `⚠ Loop guard · repeating pattern ×${detection.count} (period ${detection.period})`;\n\t}\n}\n\nfunction whyLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn \"Same tool, same arguments, again. The agent was told to reuse the result or change the call.\";\n\t\tcase \"similar\": {\n\t\t\tconst percent = Math.round(detection.similarity * 100);\n\t\t\treturn `Argument similarity ~${percent}%. The agent was told to verify this is distinct work, not a lazy loop.`;\n\t\t}\n\t\tcase \"cycle\": {\n\t\t\tconst pattern = detection.cycleTools.join(\" -> \");\n\t\t\treturn `Tool-call cycle [${pattern}]. The agent was told to break the rotation or justify the progress.`;\n\t\t}\n\t}\n}\n\nfunction expandedLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn `tool ${detection.toolName} · ${detection.count} consecutive identical calls when the reminder fired`;\n\t\tcase \"similar\":\n\t\t\treturn `tool ${detection.toolName} · ${detection.count} consecutive same-tool calls at ~${Math.round(detection.similarity * 100)}% args similarity`;\n\t\tcase \"cycle\":\n\t\t\treturn `cycle ${detection.cycleTools.join(\" -> \")} · ${detection.count} full repetitions in the tracked window`;\n\t}\n}\n"]}

package/dist/core/extensions/builtin/loop-guard/similarity.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Character-bigram Sørensen–Dice similarity over canonical argument JSON.
+ *
+ * Chosen over token-level or edit-distance metrics because canonical JSON keeps
+ * structure stable (sorted keys, fixed separators), making bigram overlap a cheap
+ * and order-insensitive-enough proxy for "same call shape, slightly different values".
+ */
+export type BigramCounts = Map<string, number>;
+export declare function bigramCounts(text: string): BigramCounts;
+export declare function diceSimilarity(a: BigramCounts, b: BigramCounts): number;
+/** Mean similarity between each adjacent pair of argument strings. */
+export declare function meanAdjacentSimilarity(argStrings: readonly string[]): number;
+//# sourceMappingURL=similarity.d.ts.map

package/dist/core/extensions/builtin/loop-guard/similarity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"similarity.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/similarity.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAOvD;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,MAAM,CAcvE;AAED,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAW5E"}

package/dist/core/extensions/builtin/loop-guard/similarity.js

@@ -0,0 +1,51 @@
+/**
+ * Character-bigram Sørensen–Dice similarity over canonical argument JSON.
+ *
+ * Chosen over token-level or edit-distance metrics because canonical JSON keeps
+ * structure stable (sorted keys, fixed separators), making bigram overlap a cheap
+ * and order-insensitive-enough proxy for "same call shape, slightly different values".
+ */
+export function bigramCounts(text) {
+    const counts = new Map();
+    for (let i = 0; i < text.length - 1; i++) {
+        const gram = text.slice(i, i + 2);
+        counts.set(gram, (counts.get(gram) ?? 0) + 1);
+    }
+    return counts;
+}
+export function diceSimilarity(a, b) {
+    let totalA = 0;
+    for (const count of a.values())
+        totalA += count;
+    let totalB = 0;
+    for (const count of b.values())
+        totalB += count;
+    if (totalA === 0 && totalB === 0)
+        return 1;
+    if (totalA === 0 || totalB === 0)
+        return 0;
+    let intersection = 0;
+    const [small, large] = a.size <= b.size ? [a, b] : [b, a];
+    for (const [gram, count] of small) {
+        const other = large.get(gram);
+        if (other !== undefined)
+            intersection += Math.min(count, other);
+    }
+    return (2 * intersection) / (totalA + totalB);
+}
+/** Mean similarity between each adjacent pair of argument strings. */
+export function meanAdjacentSimilarity(argStrings) {
+    if (argStrings.length < 2)
+        return 1;
+    const grams = argStrings.map(bigramCounts);
+    let total = 0;
+    for (let i = 0; i < grams.length - 1; i++) {
+        const current = grams[i];
+        const next = grams[i + 1];
+        if (current === undefined || next === undefined)
+            continue;
+        total += diceSimilarity(current, next);
+    }
+    return total / (grams.length - 1);
+}
+//# sourceMappingURL=similarity.js.map

package/dist/core/extensions/builtin/loop-guard/similarity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"similarity.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/similarity.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,UAAU,YAAY,CAAC,IAAY;IACxC,MAAM,MAAM,GAAiB,IAAI,GAAG,EAAE,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAe,EAAE,CAAe;IAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC;IAChD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC;IAChD,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,UAA6B;IACnE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QAC1D,KAAK,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC","sourcesContent":["/**\n * Character-bigram Sørensen–Dice similarity over canonical argument JSON.\n *\n * Chosen over token-level or edit-distance metrics because canonical JSON keeps\n * structure stable (sorted keys, fixed separators), making bigram overlap a cheap\n * and order-insensitive-enough proxy for \"same call shape, slightly different values\".\n */\n\nexport type BigramCounts = Map<string, number>;\n\nexport function bigramCounts(text: string): BigramCounts {\n\tconst counts: BigramCounts = new Map();\n\tfor (let i = 0; i < text.length - 1; i++) {\n\t\tconst gram = text.slice(i, i + 2);\n\t\tcounts.set(gram, (counts.get(gram) ?? 0) + 1);\n\t}\n\treturn counts;\n}\n\nexport function diceSimilarity(a: BigramCounts, b: BigramCounts): number {\n\tlet totalA = 0;\n\tfor (const count of a.values()) totalA += count;\n\tlet totalB = 0;\n\tfor (const count of b.values()) totalB += count;\n\tif (totalA === 0 && totalB === 0) return 1;\n\tif (totalA === 0 || totalB === 0) return 0;\n\tlet intersection = 0;\n\tconst [small, large] = a.size <= b.size ? [a, b] : [b, a];\n\tfor (const [gram, count] of small) {\n\t\tconst other = large.get(gram);\n\t\tif (other !== undefined) intersection += Math.min(count, other);\n\t}\n\treturn (2 * intersection) / (totalA + totalB);\n}\n\n/** Mean similarity between each adjacent pair of argument strings. */\nexport function meanAdjacentSimilarity(argStrings: readonly string[]): number {\n\tif (argStrings.length < 2) return 1;\n\tconst grams = argStrings.map(bigramCounts);\n\tlet total = 0;\n\tfor (let i = 0; i < grams.length - 1; i++) {\n\t\tconst current = grams[i];\n\t\tconst next = grams[i + 1];\n\t\tif (current === undefined || next === undefined) continue;\n\t\ttotal += diceSimilarity(current, next);\n\t}\n\treturn total / (grams.length - 1);\n}\n"]}

package/dist/core/extensions/builtin/loop-guard/tracker.d.ts

@@ -0,0 +1,13 @@
+export interface ToolCallRecord {
+    readonly toolName: string;
+    readonly argsJson: string;
+    readonly signature: string;
+}
+export declare function canonicalizeArgs(args: unknown): string;
+export declare class ToolCallTracker {
+    private calls;
+    record(toolName: string, args: unknown): void;
+    get records(): readonly ToolCallRecord[];
+    reset(): void;
+}
+//# sourceMappingURL=tracker.d.ts.map

package/dist/core/extensions/builtin/loop-guard/tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/tracker.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEtD;AAgBD,qBAAa,eAAe;IAC3B,OAAO,CAAC,KAAK,CAAwB;IAErC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAM5C;IAED,IAAI,OAAO,IAAI,SAAS,cAAc,EAAE,CAEvC;IAED,KAAK,IAAI,IAAI,CAEZ;CACD"}

package/dist/core/extensions/builtin/loop-guard/tracker.js

@@ -0,0 +1,39 @@
+import { TRACK_WINDOW } from "./policy.js";
+export function canonicalizeArgs(args) {
+    return stableStringify(args ?? {});
+}
+function stableStringify(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value) ?? "null";
+    if (Array.isArray(value))
+        return `[${value.map((item) => stableStringify(item)).join(",")}]`;
+    const record = value;
+    const keys = Object.keys(record).sort();
+    const parts = [];
+    for (const key of keys) {
+        const entry = record[key];
+        if (entry === undefined)
+            continue;
+        parts.push(`${JSON.stringify(key)}:${stableStringify(entry)}`);
+    }
+    return `{${parts.join(",")}}`;
+}
+export class ToolCallTracker {
+    constructor() {
+        this.calls = [];
+    }
+    record(toolName, args) {
+        const argsJson = canonicalizeArgs(args);
+        this.calls.push({ toolName, argsJson, signature: `${toolName}\u0000${argsJson}` });
+        if (this.calls.length > TRACK_WINDOW) {
+            this.calls = this.calls.slice(-TRACK_WINDOW);
+        }
+    }
+    get records() {
+        return this.calls;
+    }
+    reset() {
+        this.calls = [];
+    }
+}
+//# sourceMappingURL=tracker.js.map

package/dist/core/extensions/builtin/loop-guard/tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC7C,OAAO,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,eAAe;IAA5B;QACS,UAAK,GAAqB,EAAE,CAAC;IAiBtC,CAAC;IAfA,MAAM,CAAC,QAAgB,EAAE,IAAa;QACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,SAAS,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;IACjB,CAAC;CACD","sourcesContent":["import { TRACK_WINDOW } from \"./policy.ts\";\n\nexport interface ToolCallRecord {\n\treadonly toolName: string;\n\treadonly argsJson: string;\n\treadonly signature: string;\n}\n\nexport function canonicalizeArgs(args: unknown): string {\n\treturn stableStringify(args ?? {});\n}\n\nfunction stableStringify(value: unknown): string {\n\tif (value === null || typeof value !== \"object\") return JSON.stringify(value) ?? \"null\";\n\tif (Array.isArray(value)) return `[${value.map((item) => stableStringify(item)).join(\",\")}]`;\n\tconst record = value as Record<string, unknown>;\n\tconst keys = Object.keys(record).sort();\n\tconst parts: string[] = [];\n\tfor (const key of keys) {\n\t\tconst entry = record[key];\n\t\tif (entry === undefined) continue;\n\t\tparts.push(`${JSON.stringify(key)}:${stableStringify(entry)}`);\n\t}\n\treturn `{${parts.join(\",\")}}`;\n}\n\nexport class ToolCallTracker {\n\tprivate calls: ToolCallRecord[] = [];\n\n\trecord(toolName: string, args: unknown): void {\n\t\tconst argsJson = canonicalizeArgs(args);\n\t\tthis.calls.push({ toolName, argsJson, signature: `${toolName}\\u0000${argsJson}` });\n\t\tif (this.calls.length > TRACK_WINDOW) {\n\t\t\tthis.calls = this.calls.slice(-TRACK_WINDOW);\n\t\t}\n\t}\n\n\tget records(): readonly ToolCallRecord[] {\n\t\treturn this.calls;\n\t}\n\n\treset(): void {\n\t\tthis.calls = [];\n\t}\n}\n"]}

package/dist/core/extensions/builtin/monitor-state-event.d.ts

@@ -1,6 +1,16 @@
 export declare const TERMINAL_MONITOR_STATE_EVENT = "terminal_monitor_state";
+/** One live watch as broadcast on the monitor state event; mirrors MonitorSnapshotEntry. */
+export interface TerminalMonitorStateMonitorEntry {
+    readonly id: string;
+    readonly description: string;
+    readonly paused: boolean;
+    /** Epoch milliseconds when the watch registered; lets consumers render their own elapsed labels. */
+    readonly startedAtMs: number;
+}
 export interface TerminalMonitorStateEvent {
     readonly activeCount: number;
+    /** Per-watch detail for consumers that need more than the count; absent in pre-enrichment payloads. */
+    readonly monitors?: readonly TerminalMonitorStateMonitorEntry[];
 }
 export declare function isTerminalMonitorStateEvent(data: unknown): data is TerminalMonitorStateEvent;
 //# sourceMappingURL=monitor-state-event.d.ts.map

package/dist/core/extensions/builtin/monitor-state-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"monitor-state-event.d.ts","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/monitor-state-event.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AAErE,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,yBAAyB,CAS5F"}
+{"version":3,"file":"monitor-state-event.d.ts","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/monitor-state-event.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AAErE,4FAA4F;AAC5F,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,oGAAoG;IACpG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uGAAuG;IACvG,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,gCAAgC,EAAE,CAAC;CAChE;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,yBAAyB,CAS5F"}

package/dist/core/extensions/builtin/monitor-state-event.js.map

@@ -1 +1 @@
-{"version":3,"file":"monitor-state-event.js","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/monitor-state-event.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAMrE,MAAM,UAAU,2BAA2B,CAAC,IAAa;IACxD,OAAO,CACN,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,aAAa,IAAI,IAAI;QACrB,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,IAAI,CAAC,WAAW,IAAI,CAAC,CACrB,CAAC;AACH,CAAC","sourcesContent":["export const TERMINAL_MONITOR_STATE_EVENT = \"terminal_monitor_state\";\n\nexport interface TerminalMonitorStateEvent {\n\treadonly activeCount: number;\n}\n\nexport function isTerminalMonitorStateEvent(data: unknown): data is TerminalMonitorStateEvent {\n\treturn (\n\t\ttypeof data === \"object\" &&\n\t\tdata !== null &&\n\t\t\"activeCount\" in data &&\n\t\ttypeof data.activeCount === \"number\" &&\n\t\tNumber.isInteger(data.activeCount) &&\n\t\tdata.activeCount >= 0\n\t);\n}\n"]}
+{"version":3,"file":"monitor-state-event.js","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/monitor-state-event.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAiBrE,MAAM,UAAU,2BAA2B,CAAC,IAAa;IACxD,OAAO,CACN,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,aAAa,IAAI,IAAI;QACrB,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,IAAI,CAAC,WAAW,IAAI,CAAC,CACrB,CAAC;AACH,CAAC","sourcesContent":["export const TERMINAL_MONITOR_STATE_EVENT = \"terminal_monitor_state\";\n\n/** One live watch as broadcast on the monitor state event; mirrors MonitorSnapshotEntry. */\nexport interface TerminalMonitorStateMonitorEntry {\n\treadonly id: string;\n\treadonly description: string;\n\treadonly paused: boolean;\n\t/** Epoch milliseconds when the watch registered; lets consumers render their own elapsed labels. */\n\treadonly startedAtMs: number;\n}\n\nexport interface TerminalMonitorStateEvent {\n\treadonly activeCount: number;\n\t/** Per-watch detail for consumers that need more than the count; absent in pre-enrichment payloads. */\n\treadonly monitors?: readonly TerminalMonitorStateMonitorEntry[];\n}\n\nexport function isTerminalMonitorStateEvent(data: unknown): data is TerminalMonitorStateEvent {\n\treturn (\n\t\ttypeof data === \"object\" &&\n\t\tdata !== null &&\n\t\t\"activeCount\" in data &&\n\t\ttypeof data.activeCount === \"number\" &&\n\t\tNumber.isInteger(data.activeCount) &&\n\t\tdata.activeCount >= 0\n\t);\n}\n"]}