@code-yeongyu/senpi 2026.8.14 → 2026.8.17

package/dist/core/extensions/builtin/loop-guard/index.js

@@ -1,25 +1,63 @@
+import { CONTINUATION_HOLD_STATE_EVENT, WAKE_SOURCE_STATE_EVENT } from "../monitor-state-event.js";
 import { detectLoop, NoticeGate } from "./detectors.js";
-import { buildLoopGuardReminder, LOOP_GUARD_NOTICE_CUSTOM_TYPE } from "./notice.js";
-import { renderLoopGuardNotice } from "./renderer.js";
+import { IdenticalLoopEscalation } from "./escalation.js";
+import { buildLoopGuardBlockReason, buildLoopGuardHardStopSteer, buildLoopGuardHardStopWarning, buildLoopGuardReminder, LOOP_GUARD_ESCALATION_CUSTOM_TYPE, LOOP_GUARD_NOTICE_CUSTOM_TYPE, LOOP_GUARD_RECOVERY_CUSTOM_TYPE, } from "./notice.js";
+import { renderLoopGuardEscalation, renderLoopGuardNotice } from "./renderer.js";
 import { ToolCallTracker } from "./tracker.js";
+const LOOP_GUARD_HARD_STOP_WAKE_SOURCE = "loop-guard-hard-stop";
 export default function loopGuardExtension(pi) {
     const tracker = new ToolCallTracker();
     const gate = new NoticeGate();
+    const escalation = new IdenticalLoopEscalation();
+    let pendingRecoveryToolName;
+    let recoveryWakeSourceActive = false;
+    let continuationHoldActive = false;
+    const setRecoveryWakeSourceActive = (active) => {
+        if (recoveryWakeSourceActive === active)
+            return;
+        recoveryWakeSourceActive = active;
+        pi.events?.emit(WAKE_SOURCE_STATE_EVENT, {
+            source: LOOP_GUARD_HARD_STOP_WAKE_SOURCE,
+            activeCount: active ? 1 : 0,
+        });
+    };
+    const setContinuationHoldActive = (active) => {
+        if (continuationHoldActive === active)
+            return;
+        continuationHoldActive = active;
+        pi.events?.emit(CONTINUATION_HOLD_STATE_EVENT, {
+            source: LOOP_GUARD_HARD_STOP_WAKE_SOURCE,
+            active,
+        });
+    };
     const reset = () => {
         tracker.reset();
         gate.reset();
+        escalation.reset();
+        pendingRecoveryToolName = undefined;
+        setRecoveryWakeSourceActive(false);
+        setContinuationHoldActive(false);
     };
     pi.registerMessageRenderer(LOOP_GUARD_NOTICE_CUSTOM_TYPE, renderLoopGuardNotice);
+    pi.registerMessageRenderer(LOOP_GUARD_ESCALATION_CUSTOM_TYPE, renderLoopGuardEscalation);
     pi.on("session_start", () => reset());
+    pi.on("session_shutdown", () => reset());
     pi.on("input", (event) => {
         if (event.source !== "extension")
             reset();
     });
     pi.on("tool_execution_start", (event) => {
-        tracker.record(event.toolName, event.args);
+        const record = tracker.record(event.toolName, event.args);
+        const patternChanged = escalation.observeAttempt(event.toolCallId, record);
+        if (patternChanged) {
+            pendingRecoveryToolName = undefined;
+            setRecoveryWakeSourceActive(false);
+            setContinuationHoldActive(false);
+        }
         const detection = detectLoop(tracker.records, gate);
         if (detection === undefined)
             return;
+        escalation.observeNotice(detection);
         pi.sendMessage({
             customType: LOOP_GUARD_NOTICE_CUSTOM_TYPE,
             content: buildLoopGuardReminder(detection),
@@ -27,5 +65,62 @@ export default function loopGuardExtension(pi) {
             details: detection,
         }, { triggerTurn: false, deliverAs: "steer" });
     });
+    pi.on("turn_end", () => {
+        escalation.finishTurn();
+    });
+    pi.on("tool_call", (event, ctx) => {
+        const decision = escalation.consumeToolCall(event.toolCallId);
+        switch (decision.kind) {
+            case "allow":
+                return undefined;
+            case "block":
+                return {
+                    block: true,
+                    reason: buildLoopGuardBlockReason(decision.toolName, decision.blockedCallCount),
+                    terminate: false,
+                };
+            case "hardStop": {
+                const warning = buildLoopGuardHardStopWarning(decision.toolName, decision.blockedCallCount);
+                setRecoveryWakeSourceActive(true);
+                if (!decision.announce)
+                    setContinuationHoldActive(true);
+                if (decision.announce) {
+                    pi.sendMessage({
+                        customType: LOOP_GUARD_ESCALATION_CUSTOM_TYPE,
+                        content: warning,
+                        display: true,
+                        details: {
+                            toolName: decision.toolName,
+                            blockedCallCount: decision.blockedCallCount,
+                        },
+                    }, { triggerTurn: false, deliverAs: "steer" });
+                    if (ctx.hasUI)
+                        ctx.ui.notify(warning, "warning");
+                    pendingRecoveryToolName = decision.toolName;
+                }
+                ctx.abort("system");
+                return {
+                    block: true,
+                    reason: buildLoopGuardBlockReason(decision.toolName, decision.blockedCallCount),
+                    terminate: false,
+                };
+            }
+        }
+    });
+    pi.on("agent_start", () => {
+        setRecoveryWakeSourceActive(false);
+        setContinuationHoldActive(false);
+    });
+    pi.on("agent_settled", () => {
+        const toolName = pendingRecoveryToolName;
+        if (toolName === undefined)
+            return;
+        pendingRecoveryToolName = undefined;
+        pi.sendMessage({
+            customType: LOOP_GUARD_RECOVERY_CUSTOM_TYPE,
+            content: buildLoopGuardHardStopSteer(toolName),
+            display: false,
+        }, { triggerTurn: true });
+    });
 }
 //# sourceMappingURL=index.js.map

package/dist/core/extensions/builtin/loop-guard/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,CAAC,OAAO,UAAU,kBAAkB,CAAC,EAAgB;IAC1D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;IAE9B,MAAM,KAAK,GAAG,GAAS,EAAE;QACxB,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,KAAK,EAAE,CAAC;IACd,CAAC,CAAC;IAEF,EAAE,CAAC,uBAAuB,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;IAEjF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAEtC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACxB,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,KAAK,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QACpC,EAAE,CAAC,WAAW,CACb;YACC,UAAU,EAAE,6BAA6B;YACzC,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC;YAC1C,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,SAAS;SAClB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAC1C,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport { detectLoop, NoticeGate } from \"./detectors.ts\";\nimport { buildLoopGuardReminder, LOOP_GUARD_NOTICE_CUSTOM_TYPE } from \"./notice.ts\";\nimport { renderLoopGuardNotice } from \"./renderer.ts\";\nimport { ToolCallTracker } from \"./tracker.ts\";\n\nexport default function loopGuardExtension(pi: ExtensionAPI): void {\n\tconst tracker = new ToolCallTracker();\n\tconst gate = new NoticeGate();\n\n\tconst reset = (): void => {\n\t\ttracker.reset();\n\t\tgate.reset();\n\t};\n\n\tpi.registerMessageRenderer(LOOP_GUARD_NOTICE_CUSTOM_TYPE, renderLoopGuardNotice);\n\n\tpi.on(\"session_start\", () => reset());\n\n\tpi.on(\"input\", (event) => {\n\t\tif (event.source !== \"extension\") reset();\n\t});\n\n\tpi.on(\"tool_execution_start\", (event) => {\n\t\ttracker.record(event.toolName, event.args);\n\t\tconst detection = detectLoop(tracker.records, gate);\n\t\tif (detection === undefined) return;\n\t\tpi.sendMessage(\n\t\t\t{\n\t\t\t\tcustomType: LOOP_GUARD_NOTICE_CUSTOM_TYPE,\n\t\t\t\tcontent: buildLoopGuardReminder(detection),\n\t\t\t\tdisplay: true,\n\t\t\t\tdetails: detection,\n\t\t\t},\n\t\t\t{ triggerTurn: false, deliverAs: \"steer\" },\n\t\t);\n\t});\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACnG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EACN,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,+BAA+B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,gCAAgC,GAAG,sBAAsB,CAAC;AAEhE,MAAM,CAAC,OAAO,UAAU,kBAAkB,CAAC,EAAgB;IAC1D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,uBAAuB,EAAE,CAAC;IACjD,IAAI,uBAA2C,CAAC;IAChD,IAAI,wBAAwB,GAAG,KAAK,CAAC;IACrC,IAAI,sBAAsB,GAAG,KAAK,CAAC;IAEnC,MAAM,2BAA2B,GAAG,CAAC,MAAe,EAAQ,EAAE;QAC7D,IAAI,wBAAwB,KAAK,MAAM;YAAE,OAAO;QAChD,wBAAwB,GAAG,MAAM,CAAC;QAClC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE;YACxC,MAAM,EAAE,gCAAgC;YACxC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC3B,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,yBAAyB,GAAG,CAAC,MAAe,EAAQ,EAAE;QAC3D,IAAI,sBAAsB,KAAK,MAAM;YAAE,OAAO;QAC9C,sBAAsB,GAAG,MAAM,CAAC;QAChC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,6BAA6B,EAAE;YAC9C,MAAM,EAAE,gCAAgC;YACxC,MAAM;SACN,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAS,EAAE;QACxB,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,uBAAuB,GAAG,SAAS,CAAC;QACpC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,EAAE,CAAC,uBAAuB,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;IACjF,EAAE,CAAC,uBAAuB,CAAC,iCAAiC,EAAE,yBAAyB,CAAC,CAAC;IAEzF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IACtC,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAEzC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACxB,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,KAAK,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,cAAc,EAAE,CAAC;YACpB,uBAAuB,GAAG,SAAS,CAAC;YACpC,2BAA2B,CAAC,KAAK,CAAC,CAAC;YACnC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QACpC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACpC,EAAE,CAAC,WAAW,CACb;YACC,UAAU,EAAE,6BAA6B;YACzC,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC;YAC1C,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,SAAS;SAClB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;QACtB,UAAU,CAAC,UAAU,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,OAAO;gBACX,OAAO,SAAS,CAAC;YAClB,KAAK,OAAO;gBACX,OAAO;oBACN,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC;oBAC/E,SAAS,EAAE,KAAK;iBAChB,CAAC;YACH,KAAK,UAAU,CAAC,CAAC,CAAC;gBACjB,MAAM,OAAO,GAAG,6BAA6B,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gBAC5F,2BAA2B,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ;oBAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC;gBACxD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBACvB,EAAE,CAAC,WAAW,CACb;wBACC,UAAU,EAAE,iCAAiC;wBAC7C,OAAO,EAAE,OAAO;wBAChB,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE;4BACR,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;yBAC3C;qBACD,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAC1C,CAAC;oBACF,IAAI,GAAG,CAAC,KAAK;wBAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBACjD,uBAAuB,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBAC7C,CAAC;gBACD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpB,OAAO;oBACN,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC;oBAC/E,SAAS,EAAE,KAAK;iBAChB,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;QACzB,2BAA2B,CAAC,KAAK,CAAC,CAAC;QACnC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;QAC3B,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACzC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QACnC,uBAAuB,GAAG,SAAS,CAAC;QACpC,EAAE,CAAC,WAAW,CACb;YACC,UAAU,EAAE,+BAA+B;YAC3C,OAAO,EAAE,2BAA2B,CAAC,QAAQ,CAAC;YAC9C,OAAO,EAAE,KAAK;SACd,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,CACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport { CONTINUATION_HOLD_STATE_EVENT, WAKE_SOURCE_STATE_EVENT } from \"../monitor-state-event.ts\";\nimport { detectLoop, NoticeGate } from \"./detectors.ts\";\nimport { IdenticalLoopEscalation } from \"./escalation.ts\";\nimport {\n\tbuildLoopGuardBlockReason,\n\tbuildLoopGuardHardStopSteer,\n\tbuildLoopGuardHardStopWarning,\n\tbuildLoopGuardReminder,\n\tLOOP_GUARD_ESCALATION_CUSTOM_TYPE,\n\tLOOP_GUARD_NOTICE_CUSTOM_TYPE,\n\tLOOP_GUARD_RECOVERY_CUSTOM_TYPE,\n} from \"./notice.ts\";\nimport { renderLoopGuardEscalation, renderLoopGuardNotice } from \"./renderer.ts\";\nimport { ToolCallTracker } from \"./tracker.ts\";\n\nconst LOOP_GUARD_HARD_STOP_WAKE_SOURCE = \"loop-guard-hard-stop\";\n\nexport default function loopGuardExtension(pi: ExtensionAPI): void {\n\tconst tracker = new ToolCallTracker();\n\tconst gate = new NoticeGate();\n\tconst escalation = new IdenticalLoopEscalation();\n\tlet pendingRecoveryToolName: string | undefined;\n\tlet recoveryWakeSourceActive = false;\n\tlet continuationHoldActive = false;\n\n\tconst setRecoveryWakeSourceActive = (active: boolean): void => {\n\t\tif (recoveryWakeSourceActive === active) return;\n\t\trecoveryWakeSourceActive = active;\n\t\tpi.events?.emit(WAKE_SOURCE_STATE_EVENT, {\n\t\t\tsource: LOOP_GUARD_HARD_STOP_WAKE_SOURCE,\n\t\t\tactiveCount: active ? 1 : 0,\n\t\t});\n\t};\n\n\tconst setContinuationHoldActive = (active: boolean): void => {\n\t\tif (continuationHoldActive === active) return;\n\t\tcontinuationHoldActive = active;\n\t\tpi.events?.emit(CONTINUATION_HOLD_STATE_EVENT, {\n\t\t\tsource: LOOP_GUARD_HARD_STOP_WAKE_SOURCE,\n\t\t\tactive,\n\t\t});\n\t};\n\n\tconst reset = (): void => {\n\t\ttracker.reset();\n\t\tgate.reset();\n\t\tescalation.reset();\n\t\tpendingRecoveryToolName = undefined;\n\t\tsetRecoveryWakeSourceActive(false);\n\t\tsetContinuationHoldActive(false);\n\t};\n\n\tpi.registerMessageRenderer(LOOP_GUARD_NOTICE_CUSTOM_TYPE, renderLoopGuardNotice);\n\tpi.registerMessageRenderer(LOOP_GUARD_ESCALATION_CUSTOM_TYPE, renderLoopGuardEscalation);\n\n\tpi.on(\"session_start\", () => reset());\n\tpi.on(\"session_shutdown\", () => reset());\n\n\tpi.on(\"input\", (event) => {\n\t\tif (event.source !== \"extension\") reset();\n\t});\n\n\tpi.on(\"tool_execution_start\", (event) => {\n\t\tconst record = tracker.record(event.toolName, event.args);\n\t\tconst patternChanged = escalation.observeAttempt(event.toolCallId, record);\n\t\tif (patternChanged) {\n\t\t\tpendingRecoveryToolName = undefined;\n\t\t\tsetRecoveryWakeSourceActive(false);\n\t\t\tsetContinuationHoldActive(false);\n\t\t}\n\t\tconst detection = detectLoop(tracker.records, gate);\n\t\tif (detection === undefined) return;\n\t\tescalation.observeNotice(detection);\n\t\tpi.sendMessage(\n\t\t\t{\n\t\t\t\tcustomType: LOOP_GUARD_NOTICE_CUSTOM_TYPE,\n\t\t\t\tcontent: buildLoopGuardReminder(detection),\n\t\t\t\tdisplay: true,\n\t\t\t\tdetails: detection,\n\t\t\t},\n\t\t\t{ triggerTurn: false, deliverAs: \"steer\" },\n\t\t);\n\t});\n\n\tpi.on(\"turn_end\", () => {\n\t\tescalation.finishTurn();\n\t});\n\n\tpi.on(\"tool_call\", (event, ctx) => {\n\t\tconst decision = escalation.consumeToolCall(event.toolCallId);\n\t\tswitch (decision.kind) {\n\t\t\tcase \"allow\":\n\t\t\t\treturn undefined;\n\t\t\tcase \"block\":\n\t\t\t\treturn {\n\t\t\t\t\tblock: true,\n\t\t\t\t\treason: buildLoopGuardBlockReason(decision.toolName, decision.blockedCallCount),\n\t\t\t\t\tterminate: false,\n\t\t\t\t};\n\t\t\tcase \"hardStop\": {\n\t\t\t\tconst warning = buildLoopGuardHardStopWarning(decision.toolName, decision.blockedCallCount);\n\t\t\t\tsetRecoveryWakeSourceActive(true);\n\t\t\t\tif (!decision.announce) setContinuationHoldActive(true);\n\t\t\t\tif (decision.announce) {\n\t\t\t\t\tpi.sendMessage(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tcustomType: LOOP_GUARD_ESCALATION_CUSTOM_TYPE,\n\t\t\t\t\t\t\tcontent: warning,\n\t\t\t\t\t\t\tdisplay: true,\n\t\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\t\ttoolName: decision.toolName,\n\t\t\t\t\t\t\t\tblockedCallCount: decision.blockedCallCount,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t{ triggerTurn: false, deliverAs: \"steer\" },\n\t\t\t\t\t);\n\t\t\t\t\tif (ctx.hasUI) ctx.ui.notify(warning, \"warning\");\n\t\t\t\t\tpendingRecoveryToolName = decision.toolName;\n\t\t\t\t}\n\t\t\t\tctx.abort(\"system\");\n\t\t\t\treturn {\n\t\t\t\t\tblock: true,\n\t\t\t\t\treason: buildLoopGuardBlockReason(decision.toolName, decision.blockedCallCount),\n\t\t\t\t\tterminate: false,\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\t});\n\n\tpi.on(\"agent_start\", () => {\n\t\tsetRecoveryWakeSourceActive(false);\n\t\tsetContinuationHoldActive(false);\n\t});\n\n\tpi.on(\"agent_settled\", () => {\n\t\tconst toolName = pendingRecoveryToolName;\n\t\tif (toolName === undefined) return;\n\t\tpendingRecoveryToolName = undefined;\n\t\tpi.sendMessage(\n\t\t\t{\n\t\t\t\tcustomType: LOOP_GUARD_RECOVERY_CUSTOM_TYPE,\n\t\t\t\tcontent: buildLoopGuardHardStopSteer(toolName),\n\t\t\t\tdisplay: false,\n\t\t\t},\n\t\t\t{ triggerTurn: true },\n\t\t);\n\t});\n}\n"]}

package/dist/core/extensions/builtin/loop-guard/notice.d.ts

@@ -1,5 +1,14 @@
 import type { LoopGuardDetection } from "./detectors.ts";
 export declare const LOOP_GUARD_NOTICE_CUSTOM_TYPE = "loop-guard:notice";
+export declare const LOOP_GUARD_ESCALATION_CUSTOM_TYPE = "loop-guard:escalation";
+export declare const LOOP_GUARD_RECOVERY_CUSTOM_TYPE = "loop-guard:recovery";
 export type LoopGuardNoticeDetails = LoopGuardDetection;
+export interface LoopGuardEscalationDetails {
+    readonly toolName: string;
+    readonly blockedCallCount: number;
+}
+export declare function buildLoopGuardBlockReason(toolName: string, blockedCallCount: number): string;
+export declare function buildLoopGuardHardStopWarning(toolName: string, blockedCallCount: number): string;
+export declare function buildLoopGuardHardStopSteer(toolName: string): string;
 export declare function buildLoopGuardReminder(detection: LoopGuardDetection): string;
 //# sourceMappingURL=notice.d.ts.map

package/dist/core/extensions/builtin/loop-guard/notice.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notice.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/notice.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,eAAO,MAAM,6BAA6B,sBAAsB,CAAC;AAEjE,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAExD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,kBAAkB,GAAG,MAAM,CAuC5E"}
+{"version":3,"file":"notice.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/notice.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,eAAO,MAAM,6BAA6B,sBAAsB,CAAC;AACjE,eAAO,MAAM,iCAAiC,0BAA0B,CAAC;AACzE,eAAO,MAAM,+BAA+B,wBAAwB,CAAC;AAErE,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAExD,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CAClC;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAK5F;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAEhG;AAED,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKpE;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,kBAAkB,GAAG,MAAM,CAuC5E"}

package/dist/core/extensions/builtin/loop-guard/notice.js

@@ -1,4 +1,21 @@
 export const LOOP_GUARD_NOTICE_CUSTOM_TYPE = "loop-guard:notice";
+export const LOOP_GUARD_ESCALATION_CUSTOM_TYPE = "loop-guard:escalation";
+export const LOOP_GUARD_RECOVERY_CUSTOM_TYPE = "loop-guard:recovery";
+export function buildLoopGuardBlockReason(toolName, blockedCallCount) {
+    return [
+        `Loop guard blocked repeated call ${blockedCallCount} to \`${toolName}\` with arguments that already triggered two identical-call warnings.`,
+        "Reuse the existing result, change an argument deliberately, or choose a different tool.",
+    ].join(" ");
+}
+export function buildLoopGuardHardStopWarning(toolName, blockedCallCount) {
+    return `Loop guard interrupted the turn after blocking ${blockedCallCount} repeated calls to ${toolName}.`;
+}
+export function buildLoopGuardHardStopSteer(toolName) {
+    return [
+        `The loop guard stopped the previous turn because you kept calling \`${toolName}\` with arguments that had already been blocked.`,
+        "Do not repeat that call. Re-plan from the current goal and use a different tool or deliberately changed arguments.",
+    ].join(" ");
+}
 export function buildLoopGuardReminder(detection) {
     switch (detection.kind) {
         case "identical": {

package/dist/core/extensions/builtin/loop-guard/notice.js.map

@@ -1 +1 @@
-{"version":3,"file":"notice.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/notice.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,6BAA6B,GAAG,mBAAmB,CAAC;AAIjE,MAAM,UAAU,sBAAsB,CAAC,SAA6B;IACnE,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;YACtC,OAAO;gBACN,mBAAmB;gBACnB,mDAAmD,QAAQ,MAAM,KAAK,oPAAoP;gBAC1T,+DAA+D;gBAC/D,mJAAmJ;gBACnJ,kIAAkI;gBAClI,iBAAiB,QAAQ,oCAAoC;gBAC7D,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YAC7C,OAAO;gBACN,mBAAmB;gBACnB,qDAAqD,KAAK,eAAe,QAAQ,0BAA0B,OAAO,mKAAmK;gBACrR,oMAAoM;gBACpM,uJAAuJ;gBACvJ,iJAAiJ;gBACjJ,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;YAChD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO;gBACN,mBAAmB;gBACnB,sFAAsF,OAAO,KAAK,KAAK,kBAAkB,MAAM,uJAAuJ;gBACtR,kKAAkK;gBAClK,sMAAsM;gBACtM,yKAAyK;gBACzK,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;IACF,CAAC;AACF,CAAC","sourcesContent":["import type { LoopGuardDetection } from \"./detectors.ts\";\n\nexport const LOOP_GUARD_NOTICE_CUSTOM_TYPE = \"loop-guard:notice\";\n\nexport type LoopGuardNoticeDetails = LoopGuardDetection;\n\nexport function buildLoopGuardReminder(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\": {\n\t\t\tconst { toolName, count } = detection;\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - IDENTICAL TOOL CALLS: you called \\`${toolName}\\` ${count} times in a row with the EXACT same arguments. This is the tool-call stream, not consecutive text - another tool ran between these calls and it changed nothing about your plan. Re-issuing the same call returns the same result. Snap out of it:`,\n\t\t\t\t`- reuse the result you already received from this exact call;`,\n\t\t\t\t`- if you were re-checking for new output or state, switch to the monitor/watch tool or change one parameter deliberately (filter, offset, query);`,\n\t\t\t\t`- if nothing is actually changing, stop calling this tool, state what is blocking you, and try a different tool or ask the user.`,\n\t\t\t\t`Do not call \\`${toolName}\\` again with identical arguments.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t\tcase \"similar\": {\n\t\t\tconst { toolName, count, similarity } = detection;\n\t\t\tconst percent = Math.round(similarity * 100);\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - NEAR-IDENTICAL TOOL CALLS: your last ${count} calls to \\`${toolName}\\` had arguments about ${percent}% identical (bigram similarity over canonical args). This may be legitimate batch work - or it may be a lazy loop that only LOOKS like progress. Attention check:`,\n\t\t\t\t`- if these calls target genuinely different inputs (distinct files, queries, offsets), continue deliberately - but consider batching or widening the scope instead of one call per tiny variation;`,\n\t\t\t\t`- if you are scanning output incrementally (reads, peeks, polls), widen the window once or use the monitor/watch tool rather than nudging parameters;`,\n\t\t\t\t`- if the results keep saying the same thing, change strategy now - a different tool, a wider query, or asking the user beats a sixth near-copy.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t\tcase \"cycle\": {\n\t\t\tconst { period, count, cycleTools } = detection;\n\t\t\tconst pattern = cycleTools.join(\" -> \");\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - REPEATING TOOL-CALL PATTERN: your recent tool calls repeat the cycle [${pattern}] ${count} times (period ${period}), with other calls possibly interleaved between repetitions. A fixed rotation usually means waiting, guessing, or searching without a discriminator:`,\n\t\t\t\t`- if this is a wait/poll rotation (spawn then peek, write then check), replace the rotation with the monitor/watch tool and react to the decisive event instead;`,\n\t\t\t\t`- if this is a search rotation, change ONE axis decisively: broader query, different tool, or a different source - repeating the same rotation at the same parameters will not find new information;`,\n\t\t\t\t`- if the cycle is genuinely progressing (each rotation moves distinct work forward), keep going - but say what each rotation accomplished so the next rotation can end.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t}\n}\n"]}
+{"version":3,"file":"notice.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/notice.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,6BAA6B,GAAG,mBAAmB,CAAC;AACjE,MAAM,CAAC,MAAM,iCAAiC,GAAG,uBAAuB,CAAC;AACzE,MAAM,CAAC,MAAM,+BAA+B,GAAG,qBAAqB,CAAC;AASrE,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,gBAAwB;IACnF,OAAO;QACN,oCAAoC,gBAAgB,SAAS,QAAQ,uEAAuE;QAC5I,yFAAyF;KACzF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAAgB,EAAE,gBAAwB;IACvF,OAAO,kDAAkD,gBAAgB,sBAAsB,QAAQ,GAAG,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,QAAgB;IAC3D,OAAO;QACN,uEAAuE,QAAQ,kDAAkD;QACjI,oHAAoH;KACpH,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAA6B;IACnE,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;YACtC,OAAO;gBACN,mBAAmB;gBACnB,mDAAmD,QAAQ,MAAM,KAAK,oPAAoP;gBAC1T,+DAA+D;gBAC/D,mJAAmJ;gBACnJ,kIAAkI;gBAClI,iBAAiB,QAAQ,oCAAoC;gBAC7D,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YAC7C,OAAO;gBACN,mBAAmB;gBACnB,qDAAqD,KAAK,eAAe,QAAQ,0BAA0B,OAAO,mKAAmK;gBACrR,oMAAoM;gBACpM,uJAAuJ;gBACvJ,iJAAiJ;gBACjJ,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;YAChD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO;gBACN,mBAAmB;gBACnB,sFAAsF,OAAO,KAAK,KAAK,kBAAkB,MAAM,uJAAuJ;gBACtR,kKAAkK;gBAClK,sMAAsM;gBACtM,yKAAyK;gBACzK,oBAAoB;aACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;IACF,CAAC;AACF,CAAC","sourcesContent":["import type { LoopGuardDetection } from \"./detectors.ts\";\n\nexport const LOOP_GUARD_NOTICE_CUSTOM_TYPE = \"loop-guard:notice\";\nexport const LOOP_GUARD_ESCALATION_CUSTOM_TYPE = \"loop-guard:escalation\";\nexport const LOOP_GUARD_RECOVERY_CUSTOM_TYPE = \"loop-guard:recovery\";\n\nexport type LoopGuardNoticeDetails = LoopGuardDetection;\n\nexport interface LoopGuardEscalationDetails {\n\treadonly toolName: string;\n\treadonly blockedCallCount: number;\n}\n\nexport function buildLoopGuardBlockReason(toolName: string, blockedCallCount: number): string {\n\treturn [\n\t\t`Loop guard blocked repeated call ${blockedCallCount} to \\`${toolName}\\` with arguments that already triggered two identical-call warnings.`,\n\t\t\"Reuse the existing result, change an argument deliberately, or choose a different tool.\",\n\t].join(\" \");\n}\n\nexport function buildLoopGuardHardStopWarning(toolName: string, blockedCallCount: number): string {\n\treturn `Loop guard interrupted the turn after blocking ${blockedCallCount} repeated calls to ${toolName}.`;\n}\n\nexport function buildLoopGuardHardStopSteer(toolName: string): string {\n\treturn [\n\t\t`The loop guard stopped the previous turn because you kept calling \\`${toolName}\\` with arguments that had already been blocked.`,\n\t\t\"Do not repeat that call. Re-plan from the current goal and use a different tool or deliberately changed arguments.\",\n\t].join(\" \");\n}\n\nexport function buildLoopGuardReminder(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\": {\n\t\t\tconst { toolName, count } = detection;\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - IDENTICAL TOOL CALLS: you called \\`${toolName}\\` ${count} times in a row with the EXACT same arguments. This is the tool-call stream, not consecutive text - another tool ran between these calls and it changed nothing about your plan. Re-issuing the same call returns the same result. Snap out of it:`,\n\t\t\t\t`- reuse the result you already received from this exact call;`,\n\t\t\t\t`- if you were re-checking for new output or state, switch to the monitor/watch tool or change one parameter deliberately (filter, offset, query);`,\n\t\t\t\t`- if nothing is actually changing, stop calling this tool, state what is blocking you, and try a different tool or ask the user.`,\n\t\t\t\t`Do not call \\`${toolName}\\` again with identical arguments.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t\tcase \"similar\": {\n\t\t\tconst { toolName, count, similarity } = detection;\n\t\t\tconst percent = Math.round(similarity * 100);\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - NEAR-IDENTICAL TOOL CALLS: your last ${count} calls to \\`${toolName}\\` had arguments about ${percent}% identical (bigram similarity over canonical args). This may be legitimate batch work - or it may be a lazy loop that only LOOKS like progress. Attention check:`,\n\t\t\t\t`- if these calls target genuinely different inputs (distinct files, queries, offsets), continue deliberately - but consider batching or widening the scope instead of one call per tiny variation;`,\n\t\t\t\t`- if you are scanning output incrementally (reads, peeks, polls), widen the window once or use the monitor/watch tool rather than nudging parameters;`,\n\t\t\t\t`- if the results keep saying the same thing, change strategy now - a different tool, a wider query, or asking the user beats a sixth near-copy.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t\tcase \"cycle\": {\n\t\t\tconst { period, count, cycleTools } = detection;\n\t\t\tconst pattern = cycleTools.join(\" -> \");\n\t\t\treturn [\n\t\t\t\t`<system-reminder>`,\n\t\t\t\t`LOOP GUARD - REPEATING TOOL-CALL PATTERN: your recent tool calls repeat the cycle [${pattern}] ${count} times (period ${period}), with other calls possibly interleaved between repetitions. A fixed rotation usually means waiting, guessing, or searching without a discriminator:`,\n\t\t\t\t`- if this is a wait/poll rotation (spawn then peek, write then check), replace the rotation with the monitor/watch tool and react to the decisive event instead;`,\n\t\t\t\t`- if this is a search rotation, change ONE axis decisively: broader query, different tool, or a different source - repeating the same rotation at the same parameters will not find new information;`,\n\t\t\t\t`- if the cycle is genuinely progressing (each rotation moves distinct work forward), keep going - but say what each rotation accomplished so the next rotation can end.`,\n\t\t\t\t`</system-reminder>`,\n\t\t\t].join(\"\\n\");\n\t\t}\n\t}\n}\n"]}

package/dist/core/extensions/builtin/loop-guard/policy.d.ts

@@ -16,6 +16,10 @@
 export declare const TRACK_WINDOW = 64;
 /** Consecutive byte-identical (tool + canonical args) calls before the firm reminder fires. */
 export declare const IDENTICAL_RUN_THRESHOLD = 3;
+/** Admitted identical-loop reminders ignored before the next same call is blocked. */
+export declare const IDENTICAL_BLOCK_NOTICE_THRESHOLD = 2;
+/** Loop-guard-owned blocked calls before the active turn is interrupted. */
+export declare const IDENTICAL_HARD_STOP_BLOCK_THRESHOLD = 3;
 /** Consecutive same-tool calls with near-identical args before the caution fires. */
 export declare const SIMILAR_RUN_THRESHOLD = 5;
 /** Mean adjacent bigram-Dice similarity over canonical args that counts as "near-identical". */

package/dist/core/extensions/builtin/loop-guard/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iGAAiG;AACjG,eAAO,MAAM,YAAY,KAAK,CAAC;AAE/B,+FAA+F;AAC/F,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,IAAI,CAAC"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iGAAiG;AACjG,eAAO,MAAM,YAAY,KAAK,CAAC;AAE/B,+FAA+F;AAC/F,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,sFAAsF;AACtF,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD,4EAA4E;AAC5E,eAAO,MAAM,mCAAmC,IAAI,CAAC;AAErD,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,IAAI,CAAC"}

package/dist/core/extensions/builtin/loop-guard/policy.js

@@ -16,6 +16,10 @@
 export const TRACK_WINDOW = 64;
 /** Consecutive byte-identical (tool + canonical args) calls before the firm reminder fires. */
 export const IDENTICAL_RUN_THRESHOLD = 3;
+/** Admitted identical-loop reminders ignored before the next same call is blocked. */
+export const IDENTICAL_BLOCK_NOTICE_THRESHOLD = 2;
+/** Loop-guard-owned blocked calls before the active turn is interrupted. */
+export const IDENTICAL_HARD_STOP_BLOCK_THRESHOLD = 3;
 /** Consecutive same-tool calls with near-identical args before the caution fires. */
 export const SIMILAR_RUN_THRESHOLD = 5;
 /** Mean adjacent bigram-Dice similarity over canonical args that counts as "near-identical". */

package/dist/core/extensions/builtin/loop-guard/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC","sourcesContent":["/**\n * Loop-guard thresholds.\n *\n * Evidence base (see changes.md for the full rationale):\n * - gemini-cli LoopDetectionService: sha256(name+args) signatures, cycle periods 1..5,\n *   threshold 5 repetitions — but it HALTS the run. Loop-guard only steers a reminder,\n *   so it can afford to fire earlier.\n * - OpenHands stuck detector: 4+ identical action-observation pairs, 3+ error cycles,\n *   6+ alternating ping-pong cycles — also halting behavior.\n * - Corpus of 400 real senpi sessions: productive same-tool runs (bash/eval/edit/todo)\n *   show mean adjacent-args bigram-Dice ~0.52-0.55 (p90 <= 0.72), while repetitive\n *   classes (read pagination, bash_output/task_output polling) sit at 0.84-0.93.\n *   0.85 cleanly separates distinct work from near-identical repetition.\n */\n\n/** Max tool-call records kept per prompt segment. Covers 6-period cycles at escalated counts. */\nexport const TRACK_WINDOW = 64;\n\n/** Consecutive byte-identical (tool + canonical args) calls before the firm reminder fires. */\nexport const IDENTICAL_RUN_THRESHOLD = 3;\n\n/** Consecutive same-tool calls with near-identical args before the caution fires. */\nexport const SIMILAR_RUN_THRESHOLD = 5;\n\n/** Mean adjacent bigram-Dice similarity over canonical args that counts as \"near-identical\". */\nexport const SIMILARITY_THRESHOLD = 0.85;\n\n/** Cycle period bounds (period 1 is the identical detector's job). */\nexport const CYCLE_MIN_PERIOD = 2;\nexport const CYCLE_MAX_PERIOD = 6;\n\n/** Full cycle repetitions before the pattern notice fires. */\nexport const CYCLE_REPETITION_THRESHOLD = 3;\n\n/** A pattern that keeps growing re-notifies only when its count reaches this multiple of the last notice. */\nexport const ESCALATION_FACTOR = 2;\n"]}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,sFAAsF;AACtF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAElD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAErD,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC","sourcesContent":["/**\n * Loop-guard thresholds.\n *\n * Evidence base (see changes.md for the full rationale):\n * - gemini-cli LoopDetectionService: sha256(name+args) signatures, cycle periods 1..5,\n *   threshold 5 repetitions — but it HALTS the run. Loop-guard only steers a reminder,\n *   so it can afford to fire earlier.\n * - OpenHands stuck detector: 4+ identical action-observation pairs, 3+ error cycles,\n *   6+ alternating ping-pong cycles — also halting behavior.\n * - Corpus of 400 real senpi sessions: productive same-tool runs (bash/eval/edit/todo)\n *   show mean adjacent-args bigram-Dice ~0.52-0.55 (p90 <= 0.72), while repetitive\n *   classes (read pagination, bash_output/task_output polling) sit at 0.84-0.93.\n *   0.85 cleanly separates distinct work from near-identical repetition.\n */\n\n/** Max tool-call records kept per prompt segment. Covers 6-period cycles at escalated counts. */\nexport const TRACK_WINDOW = 64;\n\n/** Consecutive byte-identical (tool + canonical args) calls before the firm reminder fires. */\nexport const IDENTICAL_RUN_THRESHOLD = 3;\n\n/** Admitted identical-loop reminders ignored before the next same call is blocked. */\nexport const IDENTICAL_BLOCK_NOTICE_THRESHOLD = 2;\n\n/** Loop-guard-owned blocked calls before the active turn is interrupted. */\nexport const IDENTICAL_HARD_STOP_BLOCK_THRESHOLD = 3;\n\n/** Consecutive same-tool calls with near-identical args before the caution fires. */\nexport const SIMILAR_RUN_THRESHOLD = 5;\n\n/** Mean adjacent bigram-Dice similarity over canonical args that counts as \"near-identical\". */\nexport const SIMILARITY_THRESHOLD = 0.85;\n\n/** Cycle period bounds (period 1 is the identical detector's job). */\nexport const CYCLE_MIN_PERIOD = 2;\nexport const CYCLE_MAX_PERIOD = 6;\n\n/** Full cycle repetitions before the pattern notice fires. */\nexport const CYCLE_REPETITION_THRESHOLD = 3;\n\n/** A pattern that keeps growing re-notifies only when its count reaches this multiple of the last notice. */\nexport const ESCALATION_FACTOR = 2;\n"]}

package/dist/core/extensions/builtin/loop-guard/renderer.d.ts

@@ -1,4 +1,6 @@
 import type { MessageRenderer } from "../../types.ts";
 import type { LoopGuardDetection } from "./detectors.ts";
+import type { LoopGuardEscalationDetails } from "./notice.ts";
 export declare const renderLoopGuardNotice: MessageRenderer<LoopGuardDetection>;
+export declare const renderLoopGuardEscalation: MessageRenderer<LoopGuardEscalationDetails>;
 //# sourceMappingURL=renderer.d.ts.map

package/dist/core/extensions/builtin/loop-guard/renderer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"renderer.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/renderer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,eAAO,MAAM,qBAAqB,EAAE,eAAe,CAAC,kBAAkB,CAIpE,CAAC"}
+{"version":3,"file":"renderer.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/renderer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAE9D,eAAO,MAAM,qBAAqB,EAAE,eAAe,CAAC,kBAAkB,CAIpE,CAAC;AAEH,eAAO,MAAM,yBAAyB,EAAE,eAAe,CAAC,0BAA0B,CAWjF,CAAC"}

package/dist/core/extensions/builtin/loop-guard/renderer.js

@@ -5,6 +5,17 @@ export const renderLoopGuardNotice = noticeMessageRenderer((message) => {
         return undefined;
     return { title: titleLine(details), why: whyLine(details), expandedLine: expandedLine(details) };
 });
+export const renderLoopGuardEscalation = noticeMessageRenderer((message) => {
+    const details = message.details;
+    if (details === undefined)
+        return undefined;
+    return {
+        title: `! Loop guard · turn interrupted (${details.toolName})`,
+        tone: "error",
+        why: `The agent ignored two warnings and repeated ${details.blockedCallCount} calls after blocking began.`,
+        expandedLine: "A user-role recovery message was queued and the active turn was stopped by a system abort.",
+    };
+});
 function titleLine(detection) {
     switch (detection.kind) {
         case "identical":

package/dist/core/extensions/builtin/loop-guard/renderer.js.map

@@ -1 +1 @@
-{"version":3,"file":"renderer.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/renderer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAI9D,MAAM,CAAC,MAAM,qBAAqB,GAAwC,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE;IAC3G,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,SAA6B;IAC/C,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,mCAAmC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,QAAQ,GAAG,CAAC;QACrF,KAAK,SAAS;YACb,OAAO,wCAAwC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,QAAQ,GAAG,CAAC;QAC1F,KAAK,OAAO;YACX,OAAO,qCAAqC,SAAS,CAAC,KAAK,YAAY,SAAS,CAAC,MAAM,GAAG,CAAC;IAC7F,CAAC;AACF,CAAC;AAED,SAAS,OAAO,CAAC,SAA6B;IAC7C,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,8FAA8F,CAAC;QACvG,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YACvD,OAAO,wBAAwB,OAAO,yEAAyE,CAAC;QACjH,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,oBAAoB,OAAO,sEAAsE,CAAC;QAC1G,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,SAA6B;IAClD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,QAAQ,SAAS,CAAC,QAAQ,MAAM,SAAS,CAAC,KAAK,sDAAsD,CAAC;QAC9G,KAAK,SAAS;YACb,OAAO,QAAQ,SAAS,CAAC,QAAQ,MAAM,SAAS,CAAC,KAAK,oCAAoC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACrJ,KAAK,OAAO;YACX,OAAO,SAAS,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,KAAK,yCAAyC,CAAC;IAClH,CAAC;AACF,CAAC","sourcesContent":["import { noticeMessageRenderer } from \"../../notice/index.ts\";\nimport type { MessageRenderer } from \"../../types.ts\";\nimport type { LoopGuardDetection } from \"./detectors.ts\";\n\nexport const renderLoopGuardNotice: MessageRenderer<LoopGuardDetection> = noticeMessageRenderer((message) => {\n\tconst details = message.details;\n\tif (details === undefined) return undefined;\n\treturn { title: titleLine(details), why: whyLine(details), expandedLine: expandedLine(details) };\n});\n\nfunction titleLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn `⚠ Loop guard · identical calls ×${detection.count} (${detection.toolName})`;\n\t\tcase \"similar\":\n\t\t\treturn `⚠ Loop guard · near-identical calls ×${detection.count} (${detection.toolName})`;\n\t\tcase \"cycle\":\n\t\t\treturn `⚠ Loop guard · repeating pattern ×${detection.count} (period ${detection.period})`;\n\t}\n}\n\nfunction whyLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn \"Same tool, same arguments, again. The agent was told to reuse the result or change the call.\";\n\t\tcase \"similar\": {\n\t\t\tconst percent = Math.round(detection.similarity * 100);\n\t\t\treturn `Argument similarity ~${percent}%. The agent was told to verify this is distinct work, not a lazy loop.`;\n\t\t}\n\t\tcase \"cycle\": {\n\t\t\tconst pattern = detection.cycleTools.join(\" -> \");\n\t\t\treturn `Tool-call cycle [${pattern}]. The agent was told to break the rotation or justify the progress.`;\n\t\t}\n\t}\n}\n\nfunction expandedLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn `tool ${detection.toolName} · ${detection.count} consecutive identical calls when the reminder fired`;\n\t\tcase \"similar\":\n\t\t\treturn `tool ${detection.toolName} · ${detection.count} consecutive same-tool calls at ~${Math.round(detection.similarity * 100)}% args similarity`;\n\t\tcase \"cycle\":\n\t\t\treturn `cycle ${detection.cycleTools.join(\" -> \")} · ${detection.count} full repetitions in the tracked window`;\n\t}\n}\n"]}
+{"version":3,"file":"renderer.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/renderer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAK9D,MAAM,CAAC,MAAM,qBAAqB,GAAwC,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE;IAC3G,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAgD,qBAAqB,CAC1G,CAAC,OAAO,EAAE,EAAE;IACX,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO;QACN,KAAK,EAAE,oCAAoC,OAAO,CAAC,QAAQ,GAAG;QAC9D,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,+CAA+C,OAAO,CAAC,gBAAgB,8BAA8B;QAC1G,YAAY,EAAE,4FAA4F;KAC1G,CAAC;AACH,CAAC,CACD,CAAC;AAEF,SAAS,SAAS,CAAC,SAA6B;IAC/C,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,mCAAmC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,QAAQ,GAAG,CAAC;QACrF,KAAK,SAAS;YACb,OAAO,wCAAwC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,QAAQ,GAAG,CAAC;QAC1F,KAAK,OAAO;YACX,OAAO,qCAAqC,SAAS,CAAC,KAAK,YAAY,SAAS,CAAC,MAAM,GAAG,CAAC;IAC7F,CAAC;AACF,CAAC;AAED,SAAS,OAAO,CAAC,SAA6B;IAC7C,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,8FAA8F,CAAC;QACvG,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YACvD,OAAO,wBAAwB,OAAO,yEAAyE,CAAC;QACjH,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,oBAAoB,OAAO,sEAAsE,CAAC;QAC1G,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,SAA6B;IAClD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACf,OAAO,QAAQ,SAAS,CAAC,QAAQ,MAAM,SAAS,CAAC,KAAK,sDAAsD,CAAC;QAC9G,KAAK,SAAS;YACb,OAAO,QAAQ,SAAS,CAAC,QAAQ,MAAM,SAAS,CAAC,KAAK,oCAAoC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACrJ,KAAK,OAAO;YACX,OAAO,SAAS,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,KAAK,yCAAyC,CAAC;IAClH,CAAC;AACF,CAAC","sourcesContent":["import { noticeMessageRenderer } from \"../../notice/index.ts\";\nimport type { MessageRenderer } from \"../../types.ts\";\nimport type { LoopGuardDetection } from \"./detectors.ts\";\nimport type { LoopGuardEscalationDetails } from \"./notice.ts\";\n\nexport const renderLoopGuardNotice: MessageRenderer<LoopGuardDetection> = noticeMessageRenderer((message) => {\n\tconst details = message.details;\n\tif (details === undefined) return undefined;\n\treturn { title: titleLine(details), why: whyLine(details), expandedLine: expandedLine(details) };\n});\n\nexport const renderLoopGuardEscalation: MessageRenderer<LoopGuardEscalationDetails> = noticeMessageRenderer(\n\t(message) => {\n\t\tconst details = message.details;\n\t\tif (details === undefined) return undefined;\n\t\treturn {\n\t\t\ttitle: `! Loop guard · turn interrupted (${details.toolName})`,\n\t\t\ttone: \"error\",\n\t\t\twhy: `The agent ignored two warnings and repeated ${details.blockedCallCount} calls after blocking began.`,\n\t\t\texpandedLine: \"A user-role recovery message was queued and the active turn was stopped by a system abort.\",\n\t\t};\n\t},\n);\n\nfunction titleLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn `⚠ Loop guard · identical calls ×${detection.count} (${detection.toolName})`;\n\t\tcase \"similar\":\n\t\t\treturn `⚠ Loop guard · near-identical calls ×${detection.count} (${detection.toolName})`;\n\t\tcase \"cycle\":\n\t\t\treturn `⚠ Loop guard · repeating pattern ×${detection.count} (period ${detection.period})`;\n\t}\n}\n\nfunction whyLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn \"Same tool, same arguments, again. The agent was told to reuse the result or change the call.\";\n\t\tcase \"similar\": {\n\t\t\tconst percent = Math.round(detection.similarity * 100);\n\t\t\treturn `Argument similarity ~${percent}%. The agent was told to verify this is distinct work, not a lazy loop.`;\n\t\t}\n\t\tcase \"cycle\": {\n\t\t\tconst pattern = detection.cycleTools.join(\" -> \");\n\t\t\treturn `Tool-call cycle [${pattern}]. The agent was told to break the rotation or justify the progress.`;\n\t\t}\n\t}\n}\n\nfunction expandedLine(detection: LoopGuardDetection): string {\n\tswitch (detection.kind) {\n\t\tcase \"identical\":\n\t\t\treturn `tool ${detection.toolName} · ${detection.count} consecutive identical calls when the reminder fired`;\n\t\tcase \"similar\":\n\t\t\treturn `tool ${detection.toolName} · ${detection.count} consecutive same-tool calls at ~${Math.round(detection.similarity * 100)}% args similarity`;\n\t\tcase \"cycle\":\n\t\t\treturn `cycle ${detection.cycleTools.join(\" -> \")} · ${detection.count} full repetitions in the tracked window`;\n\t}\n}\n"]}

package/dist/core/extensions/builtin/loop-guard/tracker.d.ts

@@ -6,7 +6,7 @@ export interface ToolCallRecord {
 export declare function canonicalizeArgs(args: unknown): string;
 export declare class ToolCallTracker {
     private calls;
-    record(toolName: string, args: unknown): void;
+    record(toolName: string, args: unknown): ToolCallRecord;
     get records(): readonly ToolCallRecord[];
     reset(): void;
 }

package/dist/core/extensions/builtin/loop-guard/tracker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/tracker.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEtD;AAgBD,qBAAa,eAAe;IAC3B,OAAO,CAAC,KAAK,CAAwB;IAErC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;IAQ7C,IAAI,OAAO,IAAI,SAAS,cAAc,EAAE,CAEvC;IAED,KAAK,IAAI,IAAI;CAGb"}
+{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/tracker.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEtD;AAgBD,qBAAa,eAAe;IAC3B,OAAO,CAAC,KAAK,CAAwB;IAErC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,cAAc;IAUvD,IAAI,OAAO,IAAI,SAAS,cAAc,EAAE,CAEvC;IAED,KAAK,IAAI,IAAI;CAGb"}

package/dist/core/extensions/builtin/loop-guard/tracker.js

@@ -24,10 +24,12 @@ export class ToolCallTracker {
     }
     record(toolName, args) {
         const argsJson = canonicalizeArgs(args);
-        this.calls.push({ toolName, argsJson, signature: `${toolName}\u0000${argsJson}` });
+        const record = { toolName, argsJson, signature: `${toolName}\u0000${argsJson}` };
+        this.calls.push(record);
         if (this.calls.length > TRACK_WINDOW) {
             this.calls = this.calls.slice(-TRACK_WINDOW);
         }
+        return record;
     }
     get records() {
         return this.calls;

package/dist/core/extensions/builtin/loop-guard/tracker.js.map

@@ -1 +1 @@
-{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC7C,OAAO,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,eAAe;IAA5B;QACS,UAAK,GAAqB,EAAE,CAAC;IAiBtC,CAAC;IAfA,MAAM,CAAC,QAAgB,EAAE,IAAa;QACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,SAAS,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;IACjB,CAAC;CACD","sourcesContent":["import { TRACK_WINDOW } from \"./policy.ts\";\n\nexport interface ToolCallRecord {\n\treadonly toolName: string;\n\treadonly argsJson: string;\n\treadonly signature: string;\n}\n\nexport function canonicalizeArgs(args: unknown): string {\n\treturn stableStringify(args ?? {});\n}\n\nfunction stableStringify(value: unknown): string {\n\tif (value === null || typeof value !== \"object\") return JSON.stringify(value) ?? \"null\";\n\tif (Array.isArray(value)) return `[${value.map((item) => stableStringify(item)).join(\",\")}]`;\n\tconst record = value as Record<string, unknown>;\n\tconst keys = Object.keys(record).sort();\n\tconst parts: string[] = [];\n\tfor (const key of keys) {\n\t\tconst entry = record[key];\n\t\tif (entry === undefined) continue;\n\t\tparts.push(`${JSON.stringify(key)}:${stableStringify(entry)}`);\n\t}\n\treturn `{${parts.join(\",\")}}`;\n}\n\nexport class ToolCallTracker {\n\tprivate calls: ToolCallRecord[] = [];\n\n\trecord(toolName: string, args: unknown): void {\n\t\tconst argsJson = canonicalizeArgs(args);\n\t\tthis.calls.push({ toolName, argsJson, signature: `${toolName}\\u0000${argsJson}` });\n\t\tif (this.calls.length > TRACK_WINDOW) {\n\t\t\tthis.calls = this.calls.slice(-TRACK_WINDOW);\n\t\t}\n\t}\n\n\tget records(): readonly ToolCallRecord[] {\n\t\treturn this.calls;\n\t}\n\n\treset(): void {\n\t\tthis.calls = [];\n\t}\n}\n"]}
+{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/loop-guard/tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC7C,OAAO,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,eAAe;IAA5B;QACS,UAAK,GAAqB,EAAE,CAAC;IAmBtC,CAAC;IAjBA,MAAM,CAAC,QAAgB,EAAE,IAAa;QACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,SAAS,QAAQ,EAAE,EAAE,CAAC;QACjF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;IACjB,CAAC;CACD","sourcesContent":["import { TRACK_WINDOW } from \"./policy.ts\";\n\nexport interface ToolCallRecord {\n\treadonly toolName: string;\n\treadonly argsJson: string;\n\treadonly signature: string;\n}\n\nexport function canonicalizeArgs(args: unknown): string {\n\treturn stableStringify(args ?? {});\n}\n\nfunction stableStringify(value: unknown): string {\n\tif (value === null || typeof value !== \"object\") return JSON.stringify(value) ?? \"null\";\n\tif (Array.isArray(value)) return `[${value.map((item) => stableStringify(item)).join(\",\")}]`;\n\tconst record = value as Record<string, unknown>;\n\tconst keys = Object.keys(record).sort();\n\tconst parts: string[] = [];\n\tfor (const key of keys) {\n\t\tconst entry = record[key];\n\t\tif (entry === undefined) continue;\n\t\tparts.push(`${JSON.stringify(key)}:${stableStringify(entry)}`);\n\t}\n\treturn `{${parts.join(\",\")}}`;\n}\n\nexport class ToolCallTracker {\n\tprivate calls: ToolCallRecord[] = [];\n\n\trecord(toolName: string, args: unknown): ToolCallRecord {\n\t\tconst argsJson = canonicalizeArgs(args);\n\t\tconst record = { toolName, argsJson, signature: `${toolName}\\u0000${argsJson}` };\n\t\tthis.calls.push(record);\n\t\tif (this.calls.length > TRACK_WINDOW) {\n\t\t\tthis.calls = this.calls.slice(-TRACK_WINDOW);\n\t\t}\n\t\treturn record;\n\t}\n\n\tget records(): readonly ToolCallRecord[] {\n\t\treturn this.calls;\n\t}\n\n\treset(): void {\n\t\tthis.calls = [];\n\t}\n}\n"]}

package/dist/core/extensions/builtin/mcp/process-tree.js

@@ -47,7 +47,7 @@ async function childPids(parentPid) {
     if (!["darwin", "linux"].includes(process.platform))
         return [];
     try {
-        const { stdout } = await execFileAsync("pgrep", ["-P", String(parentPid)], { timeout: 1000 });
+        const { stdout } = await execFileAsync("pgrep", ["-P", String(parentPid), "."], { timeout: 1000 });
         return stdout
             .split(/\s+/)
             .map(Number)
@@ -60,6 +60,11 @@ async function childPids(parentPid) {
 }
 function killPids(pids, signal) {
     for (const pid of [...pids].reverse()) {
+        // Defense in depth: never signal PID 1 (or a non-positive pid), even if a
+        // broken or substituted discovery executable returns it. A legitimate MCP
+        // child can never be PID 1.
+        if (!Number.isInteger(pid) || pid <= 1)
+            continue;
         try {
             process.kill(pid, signal);
         }

package/dist/core/extensions/builtin/mcp/process-tree.js.map

@@ -1 +1 @@
-{"version":3,"file":"process-tree.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/mcp/process-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,QAAQ,IAAI,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAAe,EACf,OAAqE;IAErE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO;IAEzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/B,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,MAAM,kBAAkB,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO;IAEzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/B,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACzC,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,EAAU;IAC/B,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB;IACzC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/D,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,OAAO,MAAM;aACX,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAsB,EAAE,MAA6B;IACtE,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;IACF,CAAC;AACF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAsB,EAAE,SAAiB;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO;QACpC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAsB;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAChD,KAAK,KAAK,CAAC;AACZ,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { safeDelay } from \"./wrap.ts\";\n\nconst execFileAsync = promisify(execFile);\n\nexport async function collectProcessTree(rootPid: number): Promise<number[]> {\n\tconst seen = new Set<number>();\n\tconst queue = [rootPid];\n\tfor (let index = 0; index < queue.length; index++) {\n\t\tconst pid = queue[index];\n\t\tif (seen.has(pid)) continue;\n\t\tseen.add(pid);\n\t\tfor (const childPid of await childPids(pid)) {\n\t\t\tif (!seen.has(childPid)) queue.push(childPid);\n\t\t}\n\t}\n\treturn [...seen];\n}\n\nexport async function reapProcessTree(\n\trootPid: number,\n\toptions: { readonly termWaitMs: number; readonly killWaitMs: number },\n): Promise<void> {\n\tconst knownPids = new Set(await collectProcessTree(rootPid));\n\tif (!someProcessAlive(knownPids)) return;\n\n\tkillPids(knownPids, \"SIGTERM\");\n\tawait waitForDead(knownPids, options.termWaitMs);\n\n\tfor (const pid of await collectProcessTree(rootPid)) knownPids.add(pid);\n\tif (!someProcessAlive(knownPids)) return;\n\n\tkillPids(knownPids, \"SIGKILL\");\n\tawait waitForDead(knownPids, options.killWaitMs);\n}\n\nexport function isProcessAlive(pid: number): boolean {\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (error) {\n\t\tignoreExpectedProcessRace(error);\n\t\treturn false;\n\t}\n}\n\nexport function delay(ms: number): Promise<void> {\n\treturn safeDelay(ms);\n}\n\nasync function childPids(parentPid: number): Promise<number[]> {\n\tif (![\"darwin\", \"linux\"].includes(process.platform)) return [];\n\ttry {\n\t\tconst { stdout } = await execFileAsync(\"pgrep\", [\"-P\", String(parentPid)], { timeout: 1000 });\n\t\treturn stdout\n\t\t\t.split(/\\s+/)\n\t\t\t.map(Number)\n\t\t\t.filter((pid) => Number.isInteger(pid) && pid > 0);\n\t} catch (error) {\n\t\tignoreExpectedProcessRace(error);\n\t\treturn [];\n\t}\n}\n\nfunction killPids(pids: Iterable<number>, signal: \"SIGTERM\" | \"SIGKILL\"): void {\n\tfor (const pid of [...pids].reverse()) {\n\t\ttry {\n\t\t\tprocess.kill(pid, signal);\n\t\t} catch (error) {\n\t\t\tignoreExpectedProcessRace(error);\n\t\t}\n\t}\n}\n\nasync function waitForDead(pids: Iterable<number>, timeoutMs: number): Promise<void> {\n\tconst deadline = Date.now() + timeoutMs;\n\twhile (Date.now() < deadline) {\n\t\tif (!someProcessAlive(pids)) return;\n\t\tawait delay(25);\n\t}\n}\n\nfunction someProcessAlive(pids: Iterable<number>): boolean {\n\tfor (const pid of pids) {\n\t\tif (isProcessAlive(pid)) return true;\n\t}\n\treturn false;\n}\n\nfunction ignoreExpectedProcessRace(error: unknown): void {\n\tvoid error;\n}\n"]}
+{"version":3,"file":"process-tree.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/mcp/process-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,QAAQ,IAAI,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAAe,EACf,OAAqE;IAErE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO;IAEzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/B,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,MAAM,kBAAkB,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO;IAEzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/B,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACzC,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,EAAU;IAC/B,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB;IACzC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/D,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnG,OAAO,MAAM;aACX,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAsB,EAAE,MAA6B;IACtE,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,0EAA0E;QAC1E,0EAA0E;QAC1E,4BAA4B;QAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,SAAS;QACjD,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;IACF,CAAC;AACF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAsB,EAAE,SAAiB;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO;QACpC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAsB;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAChD,KAAK,KAAK,CAAC;AACZ,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { safeDelay } from \"./wrap.ts\";\n\nconst execFileAsync = promisify(execFile);\n\nexport async function collectProcessTree(rootPid: number): Promise<number[]> {\n\tconst seen = new Set<number>();\n\tconst queue = [rootPid];\n\tfor (let index = 0; index < queue.length; index++) {\n\t\tconst pid = queue[index];\n\t\tif (seen.has(pid)) continue;\n\t\tseen.add(pid);\n\t\tfor (const childPid of await childPids(pid)) {\n\t\t\tif (!seen.has(childPid)) queue.push(childPid);\n\t\t}\n\t}\n\treturn [...seen];\n}\n\nexport async function reapProcessTree(\n\trootPid: number,\n\toptions: { readonly termWaitMs: number; readonly killWaitMs: number },\n): Promise<void> {\n\tconst knownPids = new Set(await collectProcessTree(rootPid));\n\tif (!someProcessAlive(knownPids)) return;\n\n\tkillPids(knownPids, \"SIGTERM\");\n\tawait waitForDead(knownPids, options.termWaitMs);\n\n\tfor (const pid of await collectProcessTree(rootPid)) knownPids.add(pid);\n\tif (!someProcessAlive(knownPids)) return;\n\n\tkillPids(knownPids, \"SIGKILL\");\n\tawait waitForDead(knownPids, options.killWaitMs);\n}\n\nexport function isProcessAlive(pid: number): boolean {\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (error) {\n\t\tignoreExpectedProcessRace(error);\n\t\treturn false;\n\t}\n}\n\nexport function delay(ms: number): Promise<void> {\n\treturn safeDelay(ms);\n}\n\nasync function childPids(parentPid: number): Promise<number[]> {\n\tif (![\"darwin\", \"linux\"].includes(process.platform)) return [];\n\ttry {\n\t\tconst { stdout } = await execFileAsync(\"pgrep\", [\"-P\", String(parentPid), \".\"], { timeout: 1000 });\n\t\treturn stdout\n\t\t\t.split(/\\s+/)\n\t\t\t.map(Number)\n\t\t\t.filter((pid) => Number.isInteger(pid) && pid > 0);\n\t} catch (error) {\n\t\tignoreExpectedProcessRace(error);\n\t\treturn [];\n\t}\n}\n\nfunction killPids(pids: Iterable<number>, signal: \"SIGTERM\" | \"SIGKILL\"): void {\n\tfor (const pid of [...pids].reverse()) {\n\t\t// Defense in depth: never signal PID 1 (or a non-positive pid), even if a\n\t\t// broken or substituted discovery executable returns it. A legitimate MCP\n\t\t// child can never be PID 1.\n\t\tif (!Number.isInteger(pid) || pid <= 1) continue;\n\t\ttry {\n\t\t\tprocess.kill(pid, signal);\n\t\t} catch (error) {\n\t\t\tignoreExpectedProcessRace(error);\n\t\t}\n\t}\n}\n\nasync function waitForDead(pids: Iterable<number>, timeoutMs: number): Promise<void> {\n\tconst deadline = Date.now() + timeoutMs;\n\twhile (Date.now() < deadline) {\n\t\tif (!someProcessAlive(pids)) return;\n\t\tawait delay(25);\n\t}\n}\n\nfunction someProcessAlive(pids: Iterable<number>): boolean {\n\tfor (const pid of pids) {\n\t\tif (isProcessAlive(pid)) return true;\n\t}\n\treturn false;\n}\n\nfunction ignoreExpectedProcessRace(error: unknown): void {\n\tvoid error;\n}\n"]}

package/dist/core/extensions/builtin/monitor-state-event.d.ts

@@ -1,5 +1,6 @@
 export declare const TERMINAL_MONITOR_STATE_EVENT = "terminal_monitor_state";
 export declare const WAKE_SOURCE_STATE_EVENT = "wake_source_state";
+export declare const CONTINUATION_HOLD_STATE_EVENT = "continuation_hold_state";
 export interface WakeSourceStateItem {
     readonly id: string;
     readonly description?: string;
@@ -10,11 +11,16 @@ export interface WakeSourceStateEvent {
     readonly activeCount: number;
     readonly items?: readonly WakeSourceStateItem[];
 }
+export interface ContinuationHoldStateEvent {
+    readonly source: string;
+    readonly active: boolean;
+}
 /**
  * Deliberately validates only the shared cross-package fields. Emitters may add
  * source-specific details such as `channels` or `monitors`.
  */
 export declare function isWakeSourceStateEvent(data: unknown): data is WakeSourceStateEvent;
+export declare function isContinuationHoldStateEvent(data: unknown): data is ContinuationHoldStateEvent;
 /** One live watch as broadcast on the monitor state event; mirrors MonitorSnapshotEntry. */
 export interface TerminalMonitorStateMonitorEntry {
     readonly id: string;

package/dist/core/extensions/builtin/monitor-state-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"monitor-state-event.d.ts","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/monitor-state-event.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AACrE,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAWlF;AAED,4FAA4F;AAC5F,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,oGAAoG;IACpG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uGAAuG;IACvG,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,gCAAgC,EAAE,CAAC;CAChE;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,yBAAyB,CAS5F"}
+{"version":3,"file":"monitor-state-event.d.ts","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/monitor-state-event.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AACrE,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAC3D,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,oBAAoB,CAWlF;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,0BAA0B,CAU9F;AAED,4FAA4F;AAC5F,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,oGAAoG;IACpG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uGAAuG;IACvG,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,gCAAgC,EAAE,CAAC;CAChE;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,yBAAyB,CAS5F"}

package/dist/core/extensions/builtin/monitor-state-event.js

@@ -1,5 +1,6 @@
 export const TERMINAL_MONITOR_STATE_EVENT = "terminal_monitor_state";
 export const WAKE_SOURCE_STATE_EVENT = "wake_source_state";
+export const CONTINUATION_HOLD_STATE_EVENT = "continuation_hold_state";
 /**
  * Deliberately validates only the shared cross-package fields. Emitters may add
  * source-specific details such as `channels` or `monitors`.
@@ -14,6 +15,15 @@ export function isWakeSourceStateEvent(data) {
         typeof data.activeCount === "number" &&
         Number.isFinite(data.activeCount));
 }
+export function isContinuationHoldStateEvent(data) {
+    return (typeof data === "object" &&
+        data !== null &&
+        "source" in data &&
+        typeof data.source === "string" &&
+        data.source.length > 0 &&
+        "active" in data &&
+        typeof data.active === "boolean");
+}
 export function isTerminalMonitorStateEvent(data) {
     return (typeof data === "object" &&
         data !== null &&

package/dist/core/extensions/builtin/monitor-state-event.js.map

@@ -1 +1 @@
-{"version":3,"file":"monitor-state-event.js","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/monitor-state-event.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAc3D;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAa;IACnD,OAAO,CACN,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,QAAQ,IAAI,IAAI;QAChB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,aAAa,IAAI,IAAI;QACrB,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CACjC,CAAC;AACH,CAAC;AAiBD,MAAM,UAAU,2BAA2B,CAAC,IAAa;IACxD,OAAO,CACN,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,aAAa,IAAI,IAAI;QACrB,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,IAAI,CAAC,WAAW,IAAI,CAAC,CACrB,CAAC;AACH,CAAC","sourcesContent":["export const TERMINAL_MONITOR_STATE_EVENT = \"terminal_monitor_state\";\nexport const WAKE_SOURCE_STATE_EVENT = \"wake_source_state\";\n\nexport interface WakeSourceStateItem {\n\treadonly id: string;\n\treadonly description?: string;\n\treadonly startedAtMs?: number;\n}\n\nexport interface WakeSourceStateEvent {\n\treadonly source: string;\n\treadonly activeCount: number;\n\treadonly items?: readonly WakeSourceStateItem[];\n}\n\n/**\n * Deliberately validates only the shared cross-package fields. Emitters may add\n * source-specific details such as `channels` or `monitors`.\n */\nexport function isWakeSourceStateEvent(data: unknown): data is WakeSourceStateEvent {\n\treturn (\n\t\ttypeof data === \"object\" &&\n\t\tdata !== null &&\n\t\t\"source\" in data &&\n\t\ttypeof data.source === \"string\" &&\n\t\tdata.source.length > 0 &&\n\t\t\"activeCount\" in data &&\n\t\ttypeof data.activeCount === \"number\" &&\n\t\tNumber.isFinite(data.activeCount)\n\t);\n}\n\n/** One live watch as broadcast on the monitor state event; mirrors MonitorSnapshotEntry. */\nexport interface TerminalMonitorStateMonitorEntry {\n\treadonly id: string;\n\treadonly description: string;\n\treadonly paused: boolean;\n\t/** Epoch milliseconds when the watch registered; lets consumers render their own elapsed labels. */\n\treadonly startedAtMs: number;\n}\n\nexport interface TerminalMonitorStateEvent {\n\treadonly activeCount: number;\n\t/** Per-watch detail for consumers that need more than the count; absent in pre-enrichment payloads. */\n\treadonly monitors?: readonly TerminalMonitorStateMonitorEntry[];\n}\n\nexport function isTerminalMonitorStateEvent(data: unknown): data is TerminalMonitorStateEvent {\n\treturn (\n\t\ttypeof data === \"object\" &&\n\t\tdata !== null &&\n\t\t\"activeCount\" in data &&\n\t\ttypeof data.activeCount === \"number\" &&\n\t\tNumber.isInteger(data.activeCount) &&\n\t\tdata.activeCount >= 0\n\t);\n}\n"]}
+{"version":3,"file":"monitor-state-event.js","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/monitor-state-event.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAC3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AAmBvE;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAa;IACnD,OAAO,CACN,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,QAAQ,IAAI,IAAI;QAChB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,aAAa,IAAI,IAAI;QACrB,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CACjC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACzD,OAAO,CACN,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,QAAQ,IAAI,IAAI;QAChB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,QAAQ,IAAI,IAAI;QAChB,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAChC,CAAC;AACH,CAAC;AAiBD,MAAM,UAAU,2BAA2B,CAAC,IAAa;IACxD,OAAO,CACN,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,aAAa,IAAI,IAAI;QACrB,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,IAAI,CAAC,WAAW,IAAI,CAAC,CACrB,CAAC;AACH,CAAC","sourcesContent":["export const TERMINAL_MONITOR_STATE_EVENT = \"terminal_monitor_state\";\nexport const WAKE_SOURCE_STATE_EVENT = \"wake_source_state\";\nexport const CONTINUATION_HOLD_STATE_EVENT = \"continuation_hold_state\";\n\nexport interface WakeSourceStateItem {\n\treadonly id: string;\n\treadonly description?: string;\n\treadonly startedAtMs?: number;\n}\n\nexport interface WakeSourceStateEvent {\n\treadonly source: string;\n\treadonly activeCount: number;\n\treadonly items?: readonly WakeSourceStateItem[];\n}\n\nexport interface ContinuationHoldStateEvent {\n\treadonly source: string;\n\treadonly active: boolean;\n}\n\n/**\n * Deliberately validates only the shared cross-package fields. Emitters may add\n * source-specific details such as `channels` or `monitors`.\n */\nexport function isWakeSourceStateEvent(data: unknown): data is WakeSourceStateEvent {\n\treturn (\n\t\ttypeof data === \"object\" &&\n\t\tdata !== null &&\n\t\t\"source\" in data &&\n\t\ttypeof data.source === \"string\" &&\n\t\tdata.source.length > 0 &&\n\t\t\"activeCount\" in data &&\n\t\ttypeof data.activeCount === \"number\" &&\n\t\tNumber.isFinite(data.activeCount)\n\t);\n}\n\nexport function isContinuationHoldStateEvent(data: unknown): data is ContinuationHoldStateEvent {\n\treturn (\n\t\ttypeof data === \"object\" &&\n\t\tdata !== null &&\n\t\t\"source\" in data &&\n\t\ttypeof data.source === \"string\" &&\n\t\tdata.source.length > 0 &&\n\t\t\"active\" in data &&\n\t\ttypeof data.active === \"boolean\"\n\t);\n}\n\n/** One live watch as broadcast on the monitor state event; mirrors MonitorSnapshotEntry. */\nexport interface TerminalMonitorStateMonitorEntry {\n\treadonly id: string;\n\treadonly description: string;\n\treadonly paused: boolean;\n\t/** Epoch milliseconds when the watch registered; lets consumers render their own elapsed labels. */\n\treadonly startedAtMs: number;\n}\n\nexport interface TerminalMonitorStateEvent {\n\treadonly activeCount: number;\n\t/** Per-watch detail for consumers that need more than the count; absent in pre-enrichment payloads. */\n\treadonly monitors?: readonly TerminalMonitorStateMonitorEntry[];\n}\n\nexport function isTerminalMonitorStateEvent(data: unknown): data is TerminalMonitorStateEvent {\n\treturn (\n\t\ttypeof data === \"object\" &&\n\t\tdata !== null &&\n\t\t\"activeCount\" in data &&\n\t\ttypeof data.activeCount === \"number\" &&\n\t\tNumber.isInteger(data.activeCount) &&\n\t\tdata.activeCount >= 0\n\t);\n}\n"]}

package/dist/core/extensions/builtin/prompt-preset/glm-5-3.d.ts

@@ -0,0 +1,3 @@
+import { type BuildDynamicSystemPromptOptions } from "../../../dynamic-prompt/build.ts";
+export declare function buildGlm53Prompt(options: BuildDynamicSystemPromptOptions): string;
+//# sourceMappingURL=glm-5-3.d.ts.map

package/dist/core/extensions/builtin/prompt-preset/glm-5-3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glm-5-3.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/glm-5-3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,+BAA+B,EAA4B,MAAM,kCAAkC,CAAC;AAYlH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,+BAA+B,GAAG,MAAM,CAEjF"}

package/dist/core/extensions/builtin/prompt-preset/glm-5-3.js

@@ -0,0 +1,14 @@
+import { buildDynamicSystemPrompt } from "../../../dynamic-prompt/build.js";
+function buildGlm53Tuning() {
+    return `You are running on GLM 5.3: Opus 4.6-class agent behavior tuned toward Fable 5 decisiveness and GPT 5.5 outcome-first coding. Apply literal scopes literally - "every", "all", and "for each" mean the full set. Prefer sufficient context over exhaustive context, pick minor decisions and note them, and use matching tools or skills immediately instead of under-reaching.
+
+Calibrate deliberation. Use extended reasoning only for genuine multi-step uncertainty; routine classification, file edits, and lookups should be decided directly. A cheap tool call beats long internal debate: act, inspect evidence, and verify.
+
+Code toward the destination: define the outcome, constraints, and stopping condition, then work without mechanical step-by-step recitation. In ultrawork mode, maintain absolute certainty discipline: preserve the goal, prove completion with evidence, and do not deliver partial work.
+
+The intent gate routing line is non-optional every turn. For non-trivial tasks, call todo with atomic items before starting, keep exactly one item in progress, and complete each item immediately when done.`;
+}
+export function buildGlm53Prompt(options) {
+    return buildDynamicSystemPrompt({ ...options, tuningSection: buildGlm53Tuning(), workstationDialect: "claude" });
+}
+//# sourceMappingURL=glm-5-3.js.map

package/dist/core/extensions/builtin/prompt-preset/glm-5-3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glm-5-3.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/glm-5-3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAElH,SAAS,gBAAgB;IACxB,OAAO;;;;;;8MAMsM,CAAC;AAC/M,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwC;IACxE,OAAO,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,CAAC;AAClH,CAAC","sourcesContent":["import { type BuildDynamicSystemPromptOptions, buildDynamicSystemPrompt } from \"../../../dynamic-prompt/build.ts\";\n\nfunction buildGlm53Tuning(): string {\n\treturn `You are running on GLM 5.3: Opus 4.6-class agent behavior tuned toward Fable 5 decisiveness and GPT 5.5 outcome-first coding. Apply literal scopes literally - \"every\", \"all\", and \"for each\" mean the full set. Prefer sufficient context over exhaustive context, pick minor decisions and note them, and use matching tools or skills immediately instead of under-reaching.\n\nCalibrate deliberation. Use extended reasoning only for genuine multi-step uncertainty; routine classification, file edits, and lookups should be decided directly. A cheap tool call beats long internal debate: act, inspect evidence, and verify.\n\nCode toward the destination: define the outcome, constraints, and stopping condition, then work without mechanical step-by-step recitation. In ultrawork mode, maintain absolute certainty discipline: preserve the goal, prove completion with evidence, and do not deliver partial work.\n\nThe intent gate routing line is non-optional every turn. For non-trivial tasks, call todo with atomic items before starting, keep exactly one item in progress, and complete each item immediately when done.`;\n}\n\nexport function buildGlm53Prompt(options: BuildDynamicSystemPromptOptions): string {\n\treturn buildDynamicSystemPrompt({ ...options, tuningSection: buildGlm53Tuning(), workstationDialect: \"claude\" });\n}\n"]}

package/dist/core/extensions/builtin/prompt-preset/grok-4.6.d.ts

@@ -0,0 +1,3 @@
+import { type BuildDynamicSystemPromptOptions } from "../../../dynamic-prompt/build.ts";
+export declare function buildGrok46Prompt(options: BuildDynamicSystemPromptOptions): string;
+//# sourceMappingURL=grok-4.6.d.ts.map

package/dist/core/extensions/builtin/prompt-preset/grok-4.6.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-4.6.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/grok-4.6.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,KAAK,+BAA+B,EAA4B,MAAM,kCAAkC,CAAC;AA+DlH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,+BAA+B,GAAG,MAAM,CAElF"}