@cortexkit/opencode-magic-context 0.46.1 → 0.48.0

package/dist/index-knh4y330.js

@@ -0,0 +1,566 @@
+import {
+  getMagicContextStorageDir
+} from "./index-0sahzkwr.js";
+import {
+  log2
+} from "./index-8j7gqj40.js";
+import {
+  writeStorageFileAtomicSync
+} from "./index-1bc61ans.js";
+
+// src/features/magic-context/memory/project-identity.ts
+import { execFileSync } from "node:child_process";
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync, realpathSync as realpathSync2, statSync } from "node:fs";
+import { homedir } from "node:os";
+import path3 from "node:path";
+
+// src/features/magic-context/memory/project-identity-cache.ts
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import path2 from "node:path";
+
+// src/shared/project-directory-key.ts
+import { realpathSync } from "node:fs";
+import path from "node:path";
+function projectDirectoryKey(directory) {
+  const slashed = directory.replaceAll("\\", "/").replace(/^\/\/\?\/UNC\//i, "//").replace(/^\/\/\?\//, "");
+  if (/^[a-z]:\//i.test(slashed) || slashed.startsWith("//")) {
+    return path.win32.normalize(slashed).replaceAll("\\", "/").replace(/\/$/, "").toLowerCase();
+  }
+  return path.resolve(directory);
+}
+var realpathForCanonicalDirectory = (directory) => realpathSync.native(directory);
+function canonicalProjectDirectory(directory) {
+  let resolved = directory;
+  try {
+    resolved = realpathForCanonicalDirectory(directory);
+  } catch {}
+  return projectDirectoryKey(resolved);
+}
+
+// src/features/magic-context/memory/project-identity-cache.ts
+function cachePath(directory, storageDir = getMagicContextStorageDir()) {
+  const hash = createHash("sha256").update(projectDirectoryKey(directory)).digest("hex");
+  return path2.join(storageDir, "project-identities", `${hash}.json`);
+}
+function rememberGitIdentity(directory, identity) {
+  try {
+    const destination = cachePath(directory);
+    writeStorageFileAtomicSync(destination, JSON.stringify({ directory: projectDirectoryKey(directory), identity }));
+  } catch {}
+}
+function readRememberedGitIdentity(directory, storageDir) {
+  try {
+    const record = JSON.parse(readFileSync(cachePath(directory, storageDir), "utf8"));
+    if (record.directory === projectDirectoryKey(directory) && /^git:[0-9a-f]{7,64}$/.test(record.identity))
+      return record.identity;
+  } catch {}
+  return;
+}
+
+// src/features/magic-context/memory/project-identity.ts
+var GIT_TIMEOUT_MS = 5000;
+var TRANSIENT_FAILURE_COOLDOWN_MS = 5 * 60 * 1000;
+var identityCache = new Map;
+var linkedGitWorktreeCache = new Map;
+var lastKnownGitIdentityCache = new Map;
+var directoryFallbackCache = new Map;
+var transientFailureCooldown = new Map;
+var dubiousOwnershipFallbackDirectories = new Set;
+var dubiousOwnershipLoggedDirectories = new Set;
+var dubiousOwnershipWarnedDirectories = new Set;
+var transientGitIdentityReuseLoggedDirectories = new Set;
+var sessionIdentityCache = new Map;
+var homeProjectPermission = false;
+var homeProjectSkipLogged = false;
+var pausedIdentityReasons = new Map;
+var pausedIdentityLogged = new Set;
+function setHomeProjectPermission(allowed) {
+  homeProjectPermission = allowed;
+}
+function shouldSkipHomeProjectMemory(directory) {
+  try {
+    assertProjectAllowed(directory, homeProjectPermission);
+    return false;
+  } catch (error) {
+    if (!(error instanceof ProjectIdentityError) || error.errorClass !== "home_project_disabled")
+      throw error;
+    if (!homeProjectSkipLogged) {
+      homeProjectSkipLogged = true;
+      log2("[magic-context] home project memory disabled; skipping memory features");
+    }
+    return true;
+  }
+}
+var execFileSyncForIdentity = execFileSync;
+var userHomeDirectoryForIdentity = () => homedir();
+var nowMs = () => Date.now();
+var filesystemProbeObserverForTests;
+
+class ProjectIdentityError extends Error {
+  errorClass;
+  rawDirectory;
+  constructor(errorClass, rawDirectory, message, cause) {
+    super(message);
+    this.name = "ProjectIdentityError";
+    this.errorClass = errorClass;
+    this.rawDirectory = rawDirectory;
+    if (cause) {
+      this.cause = cause;
+    }
+  }
+}
+function asError(error) {
+  return error instanceof Error ? error : undefined;
+}
+function getErrorCode(error) {
+  if (error === null || typeof error !== "object" || !("code" in error)) {
+    return;
+  }
+  const code = error.code;
+  return typeof code === "string" ? code : undefined;
+}
+function getErrorSignal(error) {
+  if (error === null || typeof error !== "object" || !("signal" in error)) {
+    return;
+  }
+  const signal = error.signal;
+  return typeof signal === "string" ? signal : undefined;
+}
+function getErrorKilled(error) {
+  if (error === null || typeof error !== "object" || !("killed" in error)) {
+    return false;
+  }
+  return error.killed === true;
+}
+function getErrorStderr(error) {
+  if (error === null || typeof error !== "object" || !("stderr" in error)) {
+    return "";
+  }
+  const stderr = error.stderr;
+  if (typeof stderr === "string") {
+    return stderr;
+  }
+  if (Buffer.isBuffer(stderr)) {
+    return stderr.toString("utf8");
+  }
+  return "";
+}
+function directoryFallback(directory) {
+  const canonical = path3.resolve(directory);
+  const hash = createHash2("md5").update(canonical, "utf8").digest("hex").slice(0, 12);
+  return `dir:${hash}`;
+}
+function rememberedIdentityOrDirectoryFallback(canonical) {
+  return readRememberedGitIdentity(canonical) ?? directoryFallback(canonical);
+}
+function assertDirectoryUsable(canonicalDirectory, rawDirectory) {
+  try {
+    const stat = statSync(canonicalDirectory);
+    if (!stat.isDirectory()) {
+      throw new ProjectIdentityError("unknown", rawDirectory, `Project path is not a directory: ${canonicalDirectory}`);
+    }
+  } catch (error) {
+    if (error instanceof ProjectIdentityError) {
+      throw error;
+    }
+    const code = getErrorCode(error);
+    if (code === "EACCES" || code === "EPERM") {
+      throw new ProjectIdentityError("permission_denied", rawDirectory, `Permission denied while accessing project directory: ${canonicalDirectory}`, asError(error));
+    }
+    throw new ProjectIdentityError("unknown", rawDirectory, `Unable to access project directory: ${canonicalDirectory}`, asError(error));
+  }
+}
+function isGitTimeoutError(error) {
+  const code = getErrorCode(error);
+  const signal = getErrorSignal(error);
+  return code === "ETIMEDOUT" || signal === "SIGTERM" || signal === "SIGKILL" || getErrorKilled(error);
+}
+function hasUnbornHead(directory) {
+  const options = {
+    cwd: directory,
+    encoding: "utf8",
+    env: { ...process.env, LC_ALL: "C", LANG: "C" },
+    stdio: ["ignore", "pipe", "pipe"],
+    timeout: GIT_TIMEOUT_MS,
+    windowsHide: true
+  };
+  try {
+    execFileSyncForIdentity("git", ["rev-parse", "--git-dir"], options);
+    try {
+      execFileSyncForIdentity("git", ["rev-parse", "--verify", "--quiet", "HEAD"], options);
+      return false;
+    } catch (error) {
+      return !isGitTimeoutError(error) && typeof error === "object" && error !== null && "status" in error && error.status === 1 && getErrorStderr(error) === "";
+    }
+  } catch {
+    return false;
+  }
+}
+function classifyGitError(error, rawDirectory) {
+  if (isGitTimeoutError(error)) {
+    return new ProjectIdentityError("git_timeout", rawDirectory, `git rev-list timed out after ${GIT_TIMEOUT_MS}ms`, asError(error));
+  }
+  const code = getErrorCode(error);
+  if (code === "ENOENT") {
+    return new ProjectIdentityError("git_missing", rawDirectory, "git binary is not available in PATH", asError(error));
+  }
+  if (code === "EACCES" || code === "EPERM") {
+    return new ProjectIdentityError("permission_denied", rawDirectory, "Permission denied while spawning git", asError(error));
+  }
+  const stderr = getErrorStderr(error).toLowerCase();
+  if (stderr.includes("detected dubious ownership")) {
+    return new ProjectIdentityError("dubious_ownership", rawDirectory, "git refused to read the repository because it detected dubious ownership", asError(error));
+  }
+  if (stderr.includes("not a git repository") || stderr.includes("does not have any commits yet") || stderr.includes("ambiguous argument 'head'") || stderr.includes("unknown revision or path")) {
+    return new ProjectIdentityError("not_git_repo", rawDirectory, "Directory has no git root commit; caller may use directory fallback", asError(error));
+  }
+  return new ProjectIdentityError("unknown", rawDirectory, "git rev-list failed while resolving project identity", asError(error));
+}
+function resolveProjectIdentityStrict(directory, allowHomeProject = homeProjectPermission) {
+  assertProjectAllowed(directory, allowHomeProject);
+  const canonical = path3.resolve(directory);
+  const cached = identityCache.get(canonical);
+  if (cached !== undefined) {
+    return cached;
+  }
+  assertDirectoryUsable(canonical, directory);
+  if (!hasGitDir(canonical)) {
+    throw new ProjectIdentityError("not_git_repo", directory, "Directory has no git metadata; caller may use directory fallback");
+  }
+  let output;
+  try {
+    output = execFileSyncForIdentity("git", ["rev-list", "--max-parents=0", "HEAD"], {
+      cwd: canonical,
+      encoding: "utf8",
+      env: { ...process.env, LC_ALL: "C", LANG: "C" },
+      stdio: ["ignore", "pipe", "pipe"],
+      timeout: GIT_TIMEOUT_MS,
+      windowsHide: true
+    });
+  } catch (error) {
+    const classified = classifyGitError(error, directory);
+    if (classified.errorClass === "not_git_repo" && hasUnbornHead(canonical)) {
+      throw new ProjectIdentityError("no_commits", directory, "Git repository has no commits yet");
+    }
+    throw classified;
+  }
+  const rootCommit = output.split(`
+`).map((line) => line.trim().slice(0, 64)).filter((line) => /^[0-9a-f]{7,64}$/.test(line)).sort()[0];
+  if (!rootCommit) {
+    throw new ProjectIdentityError("unknown", directory, "git rev-list returned no valid root commit hash");
+  }
+  const identity = `git:${rootCommit}`;
+  identityCache.set(canonical, identity);
+  lastKnownGitIdentityCache.set(canonical, identity);
+  rememberGitIdentity(canonical, identity);
+  const root = gitRootDirectory(canonical);
+  if (root && root !== canonical)
+    rememberGitIdentity(root, identity);
+  transientFailureCooldown.delete(canonical);
+  dubiousOwnershipFallbackDirectories.delete(canonical);
+  transientGitIdentityReuseLoggedDirectories.delete(canonical);
+  return identity;
+}
+function shouldUseDirectoryFallback(error) {
+  return error.errorClass !== "home_project_disabled";
+}
+function getActiveCooldown(canonical) {
+  const until = transientFailureCooldown.get(canonical);
+  if (until === undefined)
+    return;
+  if (nowMs() < until)
+    return until;
+  transientFailureCooldown.delete(canonical);
+  return;
+}
+function lastKnownGitIdentity(canonical) {
+  return lastKnownGitIdentityCache.get(canonical) ?? identityCache.get(canonical) ?? readRememberedGitIdentity(canonical);
+}
+function nearestLastKnownGitIdentity(canonical) {
+  const visited = new Set;
+  const walk = (start) => {
+    let current = start;
+    while (!visited.has(current)) {
+      visited.add(current);
+      const cached = lastKnownGitIdentity(current);
+      if (cached !== undefined)
+        return { identity: cached, source: current };
+      if (existsSync(path3.join(current, ".git")))
+        break;
+      const parent = path3.dirname(current);
+      if (parent === current)
+        break;
+      current = parent;
+    }
+    return;
+  };
+  const exactOrAncestor = walk(canonical);
+  if (exactOrAncestor)
+    return exactOrAncestor;
+  try {
+    const realCanonical = realpathSync2.native(canonical);
+    if (realCanonical !== canonical)
+      return walk(realCanonical);
+  } catch {}
+  return;
+}
+function reuseLastKnownGitIdentity(canonical) {
+  const cached = nearestLastKnownGitIdentity(canonical);
+  if (cached === undefined)
+    return;
+  if (!transientGitIdentityReuseLoggedDirectories.has(canonical)) {
+    transientGitIdentityReuseLoggedDirectories.add(canonical);
+    const sourceNote = cached.source === canonical ? "" : ` from ancestor ${cached.source}`;
+    log2(`[magic-context] git identity resolution is temporarily unavailable for ${canonical}; reusing the last successful project identity${sourceNote} to avoid splitting project-scoped memory`);
+  }
+  return cached.identity;
+}
+function formatDubiousOwnershipWarning(canonical) {
+  return `Magic Context: git refused to read ${canonical} (dubious ownership — the repo is owned by a different user). Memory features are paused unless a previous git identity is available. Fix: git config --global --add safe.directory ${canonical}`;
+}
+function recordDubiousOwnershipFallback(canonical) {
+  dubiousOwnershipFallbackDirectories.add(canonical);
+  if (dubiousOwnershipLoggedDirectories.has(canonical))
+    return;
+  dubiousOwnershipLoggedDirectories.add(canonical);
+  log2(`[magic-context] ${formatDubiousOwnershipWarning(canonical)}`);
+}
+function takeDubiousOwnershipProjectIdentityWarning(directory) {
+  const canonical = path3.resolve(directory);
+  if (!dubiousOwnershipFallbackDirectories.has(canonical))
+    return null;
+  if (dubiousOwnershipWarnedDirectories.has(canonical))
+    return null;
+  dubiousOwnershipWarnedDirectories.add(canonical);
+  return formatDubiousOwnershipWarning(canonical);
+}
+function canonicalUserHomeDirectory() {
+  const homeDirectory = userHomeDirectoryForIdentity();
+  try {
+    return realpathSync2.native(homeDirectory);
+  } catch {
+    return homeDirectory;
+  }
+}
+function isUserHomeDirectory(directory) {
+  if (projectDirectoryKey(directory) === projectDirectoryKey(userHomeDirectoryForIdentity()))
+    return true;
+  try {
+    return projectDirectoryKey(realpathSync2.native(path3.resolve(directory))) === projectDirectoryKey(canonicalUserHomeDirectory());
+  } catch {
+    return false;
+  }
+}
+function assertProjectAllowed(directory, allowHomeProject) {
+  const canonical = path3.resolve(directory);
+  if (!allowHomeProject && (isUserHomeDirectory(directory) || isUserHomeDirectory(gitRootDirectory(canonical) ?? canonical))) {
+    throw new ProjectIdentityError("home_project_disabled", directory, "Home project memory is disabled; set allow_home_project to opt in");
+  }
+}
+function resolveProjectIdentity(directory, allowHomeProject = homeProjectPermission) {
+  assertProjectAllowed(directory, allowHomeProject);
+  const canonical = path3.resolve(directory);
+  const cachedFallback = directoryFallbackCache.get(canonical);
+  if (cachedFallback !== undefined) {
+    if (!hasGitDir(canonical)) {
+      return cachedFallback;
+    }
+    directoryFallbackCache.delete(canonical);
+  }
+  if (getActiveCooldown(canonical) !== undefined) {
+    if (hasGitDir(canonical)) {
+      const cachedGitIdentity = reuseLastKnownGitIdentity(canonical);
+      if (cachedGitIdentity !== undefined) {
+        return cachedGitIdentity;
+      }
+      throw new ProjectIdentityError("git_identity_unavailable", directory, "Git identity unavailable; memory features paused until the retry cooldown expires");
+    }
+    return rememberedIdentityOrDirectoryFallback(canonical);
+  }
+  try {
+    return resolveProjectIdentityStrict(directory, allowHomeProject);
+  } catch (error) {
+    if (error instanceof ProjectIdentityError && shouldUseDirectoryFallback(error)) {
+      if (error.errorClass === "no_commits")
+        return directoryFallback(canonical);
+      if (!hasGitDir(canonical)) {
+        if (error.errorClass === "permission_denied")
+          throw error;
+        const resolved = rememberedIdentityOrDirectoryFallback(canonical);
+        directoryFallbackCache.set(canonical, resolved);
+        transientFailureCooldown.delete(canonical);
+        return resolved;
+      }
+      transientFailureCooldown.set(canonical, nowMs() + TRANSIENT_FAILURE_COOLDOWN_MS);
+      const cachedGitIdentity = reuseLastKnownGitIdentity(canonical);
+      if (error.errorClass === "dubious_ownership")
+        recordDubiousOwnershipFallback(canonical);
+      if (cachedGitIdentity !== undefined) {
+        return cachedGitIdentity;
+      }
+      throw error;
+    }
+    throw error;
+  }
+}
+function resolveProjectIdentityOrFallback(directory, allowHomeProject = homeProjectPermission) {
+  try {
+    return resolveProjectIdentity(directory, allowHomeProject);
+  } catch (error) {
+    const canonical = path3.resolve(directory);
+    if (hasGitDir(canonical) || error instanceof ProjectIdentityError && error.errorClass === "home_project_disabled")
+      throw error;
+    const fallback = rememberedIdentityOrDirectoryFallback(canonical);
+    const message = error instanceof Error ? error.message : String(error);
+    log2(`[magic-context] project identity resolution failed for ${canonical}; using directory fallback ${fallback}: ${message}`);
+    return fallback;
+  }
+}
+function hasGitDir(canonical) {
+  if (hasGitDirInAncestorChain(canonical)) {
+    return true;
+  }
+  try {
+    const realCanonical = realpathSync2.native(canonical);
+    return realCanonical !== canonical && hasGitDirInAncestorChain(realCanonical);
+  } catch {
+    return false;
+  }
+}
+function gitRootInAncestorChain(startDirectory) {
+  let current = startDirectory;
+  while (true) {
+    if (existsSync(path3.join(current, ".git"))) {
+      try {
+        return realpathSync2.native(current);
+      } catch {
+        return path3.resolve(current);
+      }
+    }
+    const parent = path3.dirname(current);
+    if (parent === current) {
+      return null;
+    }
+    current = parent;
+  }
+}
+function hasGitDirInAncestorChain(startDirectory) {
+  return gitRootInAncestorChain(startDirectory) !== null;
+}
+function gitRootDirectory(canonical) {
+  const direct = gitRootInAncestorChain(canonical);
+  if (direct)
+    return direct;
+  try {
+    const realCanonical = realpathSync2.native(canonical);
+    return realCanonical === canonical ? null : gitRootInAncestorChain(realCanonical);
+  } catch {
+    return null;
+  }
+}
+function directoryHasGitMetadata(directory) {
+  return gitRootDirectory(path3.resolve(directory)) !== null;
+}
+function describeUnresolvedProjectIdentity(directory) {
+  const resolvedDirectory = path3.resolve(directory);
+  const canonicalHome = canonicalUserHomeDirectory();
+  const canonicalDirectory = (() => {
+    try {
+      return realpathSync2.native(resolvedDirectory);
+    } catch {
+      return resolvedDirectory;
+    }
+  })();
+  if (isUserHomeDirectory(directory) || gitRootDirectory(canonicalDirectory) === canonicalHome) {
+    return `this session runs in your home directory (${canonicalHome}), which Magic Context does not treat as a project. ` + "Start OpenCode inside a project folder, or set `allow_home_project: true` in the user-level " + "magic-context.jsonc (~/.config/cortexkit/) to give home sessions their own memory.";
+  }
+  if (hasGitDir(resolvedDirectory))
+    return `git identity resolution for ${resolvedDirectory} is temporarily unavailable. Memory features are paused; retry after git access recovers.`;
+  return `the session directory ${resolvedDirectory} could not be read as a project.`;
+}
+function isUsableProjectIdentity(identity) {
+  return typeof identity === "string" && identity.trim().length > 0;
+}
+function resolveProjectIdentityForSession(directory, allowHomeProject = homeProjectPermission) {
+  const resolvedDirectory = path3.resolve(directory);
+  const cacheKey = `${allowHomeProject ? "1" : "0"}\x00${resolvedDirectory}`;
+  const cached = sessionIdentityCache.get(cacheKey);
+  if (cached && (cached.revalidateAt === null || nowMs() < cached.revalidateAt) && !(cached.identity?.startsWith("dir:") && hasGitDir(resolvedDirectory))) {
+    return cached.identity;
+  }
+  sessionIdentityCache.delete(cacheKey);
+  filesystemProbeObserverForTests?.();
+  const canonicalDirectory = (() => {
+    try {
+      filesystemProbeObserverForTests?.();
+      return realpathSync2.native(resolvedDirectory);
+    } catch {
+      return resolvedDirectory;
+    }
+  })();
+  filesystemProbeObserverForTests?.();
+  const homeRoot = gitRootDirectory(canonicalDirectory);
+  const inheritsHomeRepository = homeRoot !== null && isUserHomeDirectory(homeRoot);
+  let identity;
+  if (!allowHomeProject && (isUserHomeDirectory(directory) || inheritsHomeRepository)) {
+    identity = undefined;
+  } else {
+    try {
+      identity = resolveProjectIdentityOrFallback(isUserHomeDirectory(directory) ? canonicalUserHomeDirectory() : directory, allowHomeProject);
+    } catch (error) {
+      if (!(error instanceof ProjectIdentityError))
+        throw error;
+      const reason = error.errorClass === "git_identity_unavailable" ? pausedIdentityReasons.get(resolvedDirectory) ?? error.errorClass : error.errorClass;
+      pausedIdentityReasons.set(resolvedDirectory, reason);
+      const logKey = `${resolvedDirectory}\x00${reason}`;
+      if (!pausedIdentityLogged.has(logKey)) {
+        pausedIdentityLogged.add(logKey);
+        log2(`[magic-context] memory features paused for ${resolvedDirectory}: ${reason}`);
+      }
+      identity = undefined;
+    }
+  }
+  if (identity !== undefined)
+    pausedIdentityReasons.delete(resolvedDirectory);
+  sessionIdentityCache.set(cacheKey, {
+    identity,
+    revalidateAt: identity?.startsWith("git:") === true ? null : nowMs() + TRANSIENT_FAILURE_COOLDOWN_MS
+  });
+  return identity;
+}
+function normalizeStoredProjectPath(rawOrStored) {
+  if (rawOrStored.startsWith("git:") || rawOrStored.startsWith("dir:")) {
+    return rawOrStored;
+  }
+  try {
+    return resolveProjectIdentity(rawOrStored);
+  } catch {
+    return rawOrStored;
+  }
+}
+function storedPathBelongsToIdentity(storedProjectPath, projectIdentity) {
+  return storedProjectPath === projectIdentity || normalizeStoredProjectPath(storedProjectPath) === projectIdentity;
+}
+
+// src/plugin/boot-quiet.ts
+var BOOT_QUIET_MS = 120000;
+var bootQuietUntilMs = 0;
+function beginBootQuietPeriod(now = Date.now()) {
+  if (bootQuietUntilMs === 0)
+    bootQuietUntilMs = now + BOOT_QUIET_MS;
+}
+function bootQuietRemainingMs(now = Date.now()) {
+  return Math.max(0, bootQuietUntilMs - now);
+}
+function scheduleAfterBootQuiet(task, additionalDelayMs = 0) {
+  const timer = setTimeout(task, bootQuietRemainingMs() + Math.max(0, additionalDelayMs));
+  timer.unref?.();
+  return timer;
+}
+function setBootQuietPeriodForTests(startAtMs) {
+  bootQuietUntilMs = startAtMs === null ? 0 : startAtMs + BOOT_QUIET_MS;
+}
+
+export { canonicalProjectDirectory, setHomeProjectPermission, shouldSkipHomeProjectMemory, ProjectIdentityError, resolveProjectIdentityStrict, takeDubiousOwnershipProjectIdentityWarning, isUserHomeDirectory, resolveProjectIdentity, directoryHasGitMetadata, describeUnresolvedProjectIdentity, isUsableProjectIdentity, resolveProjectIdentityForSession, normalizeStoredProjectPath, storedPathBelongsToIdentity, beginBootQuietPeriod, bootQuietRemainingMs, scheduleAfterBootQuiet, setBootQuietPeriodForTests };

package/dist/{index-q4yp4b52.js → index-mfkzp7qj.js}

@@ -1,18 +1,3 @@
-// src/shared/protected-tools-policy.ts
-var DEFAULT_PROTECTED_TOOLS = {
-  todowrite: 1,
-  ctx_reduce: 3
-};
-function normalizeProtectedToolName(name) {
-  return (name ?? "").toLowerCase().replace(/^mcp_/, "");
-}
-function mergeProtectedTools(...maps) {
-  return Object.fromEntries([DEFAULT_PROTECTED_TOOLS, ...maps].flatMap((map) => Object.entries(map ?? {}).map(([name, count]) => [
-    normalizeProtectedToolName(name),
-    count
-  ])));
-}
-
 // src/shared/historian-tool-template.ts
 class Parser {
   source;
@@ -92,7 +77,7 @@ class Parser {
       } else
         break;
     }
-    const expression = { steps, cap: 300 };
+    const expression = { steps };
     if (this.take(".each(")) {
       if (relative)
         return this.error();
@@ -159,9 +144,23 @@ function compiled(source) {
 function oneLine(value) {
   return value.replace(/[\r\n\u2028\u2029]+/g, " ");
 }
-function truncate(value, cap) {
+function truncate(value, cap, legacyPreview = false) {
   const chars = Array.from(oneLine(value));
-  return chars.length > cap ? `${chars.slice(0, cap).join("")}…` : chars.join("");
+  if (cap === undefined || chars.length <= cap)
+    return chars.join("");
+  if (legacyPreview)
+    return `${chars.slice(0, cap).join("")}…`;
+  let end = 0;
+  for (let i = 0;i < Math.min(cap, chars.length); i++) {
+    if (!".!?。！？".includes(chars[i]))
+      continue;
+    let next = i + 1;
+    while (next < chars.length && `"'”’)]`.includes(chars[next]))
+      next++;
+    if (next <= cap && ("。！？".includes(chars[i]) || next === chars.length || /[ \t]/.test(chars[next])))
+      end = next;
+  }
+  return `${end ? `${chars.slice(0, end).join("")} ` : ""}[… ${chars.length - end} more characters]`;
 }
 function scalar(value) {
   if (value === undefined)
@@ -178,10 +177,11 @@ function compactJson(value) {
 function field(value, key) {
   return value !== null && typeof value === "object" && !Array.isArray(value) && Object.hasOwn(value, key) ? value[key] : undefined;
 }
-function render(nodes, root) {
+function render(nodes, root, legacyPreview) {
   return nodes.map((node) => {
     if (typeof node === "string")
       return node;
+    const cap = node.cap ?? (legacyPreview ? 300 : undefined);
     let value = root;
     let list = false;
     for (const step of node.steps) {
@@ -195,19 +195,19 @@ function render(nodes, root) {
       }
     }
     if (node.count)
-      return truncate(Array.isArray(value) ? String(value.length) : "", node.cap);
+      return truncate(Array.isArray(value) ? String(value.length) : "", cap, legacyPreview);
     if (node.each || list || node.join !== undefined) {
       if (!Array.isArray(value))
         return "";
-      const elements = value.slice(0, 10).map((item) => truncate(node.each ? render(node.each, item) : scalar(item), 300));
-      if (value.length > 10)
+      const elements = value.slice(0, legacyPreview ? 10 : undefined).map((item) => truncate(node.each ? render(node.each, item, legacyPreview) : scalar(item), legacyPreview ? 300 : undefined, legacyPreview));
+      if (legacyPreview && value.length > 10)
         elements.push(`… +${value.length - 10} more`);
-      return truncate(elements.join(node.join ?? (node.each ? "; " : ", ")), node.cap);
+      return truncate(elements.join(node.join ?? (node.each ? "; " : ", ")), cap, legacyPreview);
     }
-    return truncate(scalar(value), node.cap);
+    return truncate(scalar(value), cap, legacyPreview);
   }).join("");
 }
-function renderToolTemplate(source, input, output) {
+function renderToolTemplate(source, input, output, legacyPreview = false) {
   const nodes = compiled(source);
   if (!nodes)
     return null;
@@ -222,8 +222,8 @@ function renderToolTemplate(source, input, output) {
     }
   }
   const root = { input, output: structured };
-  const bareOutputNodes = nodes.map((node) => typeof node !== "string" && node.steps.length === 1 && ("field" in node.steps[0]) && node.steps[0].field === "output" && !node.each && !node.count && node.join === undefined ? truncate(text ?? "", node.cap) : node);
-  return truncate(render(bareOutputNodes, root), 1000);
+  const bareOutputNodes = nodes.map((node) => typeof node !== "string" && node.steps.length === 1 && ("field" in node.steps[0]) && node.steps[0].field === "output" && !node.each && !node.count && node.join === undefined ? truncate(text ?? "", node.cap ?? (legacyPreview ? 300 : undefined), legacyPreview) : node);
+  return truncate(render(bareOutputNodes, root, legacyPreview), legacyPreview ? 1000 : undefined, legacyPreview);
 }
 
-export { toolTemplateError, renderToolTemplate, DEFAULT_PROTECTED_TOOLS, normalizeProtectedToolName, mergeProtectedTools };
+export { toolTemplateError, renderToolTemplate };

package/dist/{index-sgthv3f7.js → index-mmyh6d8f.js}

@@ -1,13 +1,13 @@
 import {
-  sessionLog
-} from "./index-hybnrwq0.js";
+  sessionLog2
+} from "./index-8j7gqj40.js";
 import {
   renderUserFacingFailure,
   userFacingFailureCode,
   clearEmergencyRecovery,
   dropSlot,
   executeContextRecomp
-} from "./index-sjthx78w.js";
+} from "./index-692jzy0p.js";
 
 // src/hooks/magic-context/recomp-orchestrator.ts
 function resolveLiveModelKey(liveSessionState, sessionId) {
@@ -126,7 +126,7 @@ async function runManagedRecomp2(ctx, sessionId, options) {
     return message;
   } catch (error) {
     const failure = renderUserFacingFailure("recomp_unavailable");
-    sessionLog(sessionId, `recomp failed code=${userFacingFailureCode("recomp_unavailable")}`, error);
+    sessionLog2(sessionId, `recomp failed code=${userFacingFailureCode("recomp_unavailable")}`, error);
     setRecompTerminal2(ctx.liveSessionState, sessionId, "failed", failure);
     return `## Magic Recomp — Failed