@deepwhale/coding-agent 1.0.11 → 1.0.12

package/dist/repl.js

@@ -1,780 +0,0 @@
-/**
- * deepwhale REPL — Sprint 1a 接入 tool loop + session
- *
- * Sprint 0.3 范围：单轮 chat + 内建命令。
- * Sprint 1a 扩展：
- *   - 接 Session JSONL：启动时 load(可选路径)，退出时 close(flush)
- *   - 接 runToolLoop：每轮 user → tool loop → 持久化 steps
- *   - 流式：onChunk 实时打印 final.content（assistant 增量）
- *   - 命令：保留 /help / /exit / exit / quit
- *
- * Sprint 1a 简化：
- *   - 不做 plan mode、recovery、自动压缩
- *   - 不做 multi-session 切换
- *   - 错误用 i18n + 不污染 messages
- *
- * 文件职责：
- *   - runOneTurn: 仍保留为低层单轮 API（不持久化，无 tool loop）
- *   - startRepl: 接 tool loop + session 的入口
- */
-import { createInterface } from 'node:readline';
-import { stdin, stdout, stderr } from 'node:process';
-import { t } from '@deepwhale/core';
-import { SessionReader, SessionWriter } from '@deepwhale/core';
-import { APIKeyMissingError, isLLMError, LLMAuthError, LLMNetworkError, LLMRateLimitError, LLMStreamError, LLMUnknownError, } from '@deepwhale/llm';
-import { isToolLoopError, loadSession, persistToolLoopSteps, runToolLoop, runToolLoopWithCompaction, appendVerificationEvent, ToolLoopLimitError, } from './agent/index.js';
-import { CompactionState } from '@deepwhale/core';
-import { createDefaultRegistry } from './tools/registry.js';
-import { createDefaultClient } from './llm-factory.js';
-import { buildSummaryAndNext, formatReport, runVerify } from './verify/index.js';
-import { resolveSandboxRunnerFromEnv } from './sandbox/env-gate.js';
-import { staticToolPolicy } from './policy/static-rules.js';
-import { createReplConfirm } from './repl/repl-confirm.js'; // D-15: REPL y/N confirm 工厂
-export { createReplConfirm } from './repl/repl-confirm.js'; // Sprint 1c-revive-2-D-24.2: re-export for tui-ink
-const VERSION = '0.1.0';
-/**
- * 单轮 chat 工具函数：把 user 输入 → LLM chat → 输出 assistant 文本。
- * 不修改 messages；不调工具；不持久化。
- *
- * Sprint 1a 保留作为低层 API。Sprint 1a 之后 REPL 入口推荐用 startRepl +
- * enableToolLoop=true 走完整 agent loop。
- */
-export async function runOneTurn(client, line, messages, options = {}) {
-    const trimmed = line.trim();
-    if (trimmed === '')
-        return { kind: 'empty' };
-    const userMessage = { role: 'user', content: trimmed };
-    const allMessages = [...messages, userMessage];
-    try {
-        const result = await client.chat(allMessages, options.signal !== undefined ? { signal: options.signal } : {});
-        return { kind: 'chat', assistant: result.content };
-    }
-    catch (e) {
-        return { kind: 'error', error: formatError(e) };
-    }
-}
-/**
- * 启动 REPL。返回 Promise，resolve 时为退出码。
- */
-export async function startRepl(options = {}) {
-    const out = options.output ?? stdout;
-    const err = options.errorOutput ?? stderr;
-    // Sprint 1b.5 Step 2 (2.5 C3 拍板): provider 由 options.client / options.provider / env 推断
-    // - client 显式给 → 走 client (单测路径)
-    // - client 未给 + provider 显式给 → 走 createDefaultClient({provider})
-    // - client 未给 + provider 未给 → 走 createDefaultClient() (env 推断 + 双设报错)
-    // 任何抛 APIKeyMissingError 都被 catch 后写到 stderr (跟 1b 时代行为一致)
-    //
-    // Sprint 1c-revive-2-D-11-4 review P1 修复 (2026-06-04): **lazy** client 初始化.
-    // 之前 146 行抢创 createDefaultClient() 在无 LLM key 时抛 APIKeyMissingError,
-    // REPL 根本进不去 → 跟 README "/verify 不依赖 key" 承诺冲突. 修复:
-    //   1. options.client 显式给 → 立即 bind (单测路径不变)
-    //   2. options.client 未给 → 走 tryCreateClient, 失败存 clientError, 不抛
-    //   3. /verify 路径完全跳过 client 引用 (跟 deepwhale --verify 同语义)
-    //   4. chat 路径首次调 getClient() 时才真创, clientError 走 i18n 输出
-    const clientFromOptions = options.client;
-    let client = clientFromOptions ?? null;
-    let clientError = clientFromOptions ? null : null;
-    // Sprint 1c-revive-2-D-21.1 (2026-06-06, 修默认走 Anthropic 误判 bug):
-    // tryCreateClient 之前 catch 静默存 clientError, stderr 啥都不说, 用户根本
-    // 不知道. 现在 catch 时显式 stderr 写一行 [deepwhale] init error, 跟 chat
-    // 路径 (L494 error.api_key_missing) 互补. 走 createDefaultClient → resolveProvider
-    // "Both set" 错时, 显式 message 让用户立刻看到 "改用 --provider 决断".
-    let initErrorReported = false;
-    const tryCreateClient = () => {
-        if (clientFromOptions)
-            return { client: clientFromOptions, error: null };
-        if (client !== null || clientError !== null) {
-            return { client, error: clientError };
-        }
-        try {
-            const c = createDefaultClient({
-                ...(options.provider !== undefined ? { provider: options.provider } : {}),
-                ...(options.model !== undefined ? { model: options.model } : {}),
-            });
-            client = c;
-            clientError = null;
-            return { client: c, error: null };
-        }
-        catch (e) {
-            const err = e instanceof Error ? e : new Error(String(e));
-            clientError = err;
-            if (!initErrorReported) {
-                initErrorReported = true;
-                // 走 stderr, 跟 chat 路径保持一致, 避免用户看不到. 拍板: message 含
-                // 原始 err.message (有 "Both set" 关键信息), 不强行套 i18n (i18n 太泛
-                // 用户看不出是 Both set 还是 No key).
-                stderr.write(`[deepwhale] init error: ${err.message}\n`);
-            }
-            return { client: null, error: err };
-        }
-    };
-    // Sprint 1c-revive-2-D-6 (review P2 修复, 2026-06-04): 拿掉 anthropic × tool loop
-    // 温柔降级. 拍板: D-4 (commit 80d3fd7/bbf1bf6) 已实装 AnthropicClient tool
-    // schema 转换 (toAnthropicMessages 合并连续 tool 消息), --provider anthropic
-    // 选了 anthropic 就该跑 tool loop. 旧 1b.5 Step 2.5 时代 'Sprint 1b.5 does not
-    // support tool loop' 拍板已废 (Step 2.5 → 1c, Anthropic tool protocol 已 ship).
-    // 兜底: requestedToolLoop 默认 true, caller 显式 false 才不跑.
-    const enableToolLoop = options.enableToolLoop ?? true;
-    const sessionPath = options.sessionPath;
-    // Sprint 1c-revive-3-D-12 review P1 修复 (2026-06-05): 入口解析 sandbox env.
-    // 未知值 throw (fail-closed), 由 CLI `main().catch` 写到 stderr + exit 1.
-    const sandboxRunner = resolveSandboxRunnerFromEnv({ sandboxRoot: process.cwd() });
-    // Sprint 1c-revive-3-D-13: REPL = 交互模式 (isInteractive=true), --yes 标志透传.
-    const policyYes = options.yes ?? false;
-    // Sprint 1c-revive-3-D-19 (2026-06-05): P1 修法 — 不再开第二个 readline 抢同一 input.
-    // createReplConfirm 现在返回 controller (confirm + offerLine + hasPending + dismiss),
-    // 主 rl.on('line') 是 stdin 唯一消费者, 确认期间用 offerLine() 串行化.
-    // 拍板 (D-19): 单 readline 路径, 删 D-15 R-1 "子 rl 短窗口" 妥协.
-    // 拍板红线: --yes 永远先于 confirm (D-13.5 P1 重排), replPolicy.confirm 只在 yes=false
-    // 才被 tool-loop 调. runAgentTurn 加可选 policy 参数透传 (默认 staticToolPolicy 向后兼容).
-    const confirmController = createReplConfirm({
-        output: options.output ?? stdout,
-    });
-    const replPolicy = {
-        ...staticToolPolicy,
-        confirm: confirmController.confirm,
-    };
-    // greeting — Sprint 1c-revive-2-D-11-4 review P1 修复: 不依赖 client.model (lazy 化后
-    // client 可能未创). 真创只在 chat 首次发生; 创失败 i18n 错误到 stderr. 这里 greeting
-    // 只显示 ready + 版本号, 跟 1b.5 时代 'model 在 greeting 显示' 比, 牺牲一点 UX
-    // (用户得 chat 一次才能看到 model 名) 换 REPL 可在无 key 状态启动.
-    const initialClientState = tryCreateClient();
-    out.write(`${t('cli.greeting', VERSION, initialClientState.client?.model ?? 'not-configured')}\n`);
-    if (initialClientState.error) {
-        // 无 key 提示沿用 1b.5 时代 163-166 行的 stderr 警告语义, 但挪到 lazy create 之后
-        err.write(`${t('error.api_key_missing')}\n`);
-    }
-    out.write(`${t('cli.no_api_key_hint')}\n\n`);
-    // session 加载
-    let workingMessages = [];
-    // Sprint 1c-revive-2-D-21.1 (2026-06-06, 修 cache 96%↔85% 跳变 footer 焦虑):
-    // EMA 平滑闭包 state. appendUsageStatus 每 turn in-place 更新, formatUsageStatus
-    // 读 ema 显示 (avg NN%). 跨 turn 累积, 闭包内 mutable, 不持久化 (session reload
-    // 后 sampleCount 重置为 0, 避免误导 — user 看到 avg 段消失就知道 reload 过了).
-    const emaState = { sampleCount: 0 };
-    const writer = sessionPath ? new SessionWriter(sessionPath) : null;
-    const reader = sessionPath ? new SessionReader(sessionPath) : null;
-    if (writer && reader) {
-        try {
-            await writer.open();
-            const loaded = await loadSession(reader);
-            workingMessages = [...loaded.messages];
-            if (workingMessages.length > 0) {
-                out.write(`${t('cli.session_resumed', workingMessages.length, sessionPath)}\n\n`);
-            }
-        }
-        catch (e) {
-            err.write(`${t('cli.session_load_warning', String(e))}\n\n`);
-        }
-    }
-    // Sprint 1c-revive-2-D-6 (review P1 修复, 2026-06-04): CompactionState 闭包持有,
-    // 跨 turn 持续累计 failures (paused 状态跨 turn 生效, 跟 test 1c-revive-2-D-5-2 拍板).
-    // - 传 options.compactionConfig + writer 存在 → 构造完整 AgentCompactionConfig 注入
-    // - 不传 / writer 缺失 → 走 baseline 行为, compactionConfig = null
-    let compactionConfig = null;
-    if (options.compactionConfig && writer) {
-        compactionConfig = {
-            ...options.compactionConfig,
-            writer,
-            state: new CompactionState(options.compactionConfig.pauseAfterFailures ?? 2),
-        };
-    }
-    else if (options.compactionConfig && !writer) {
-        err.write('warning: compactionConfig requires sessionPath; falling back to baseline (no compaction).\n');
-    }
-    const rl = createInterface({
-        input: options.input ?? stdin,
-        terminal: false,
-        output: options.output ?? stdout,
-    });
-    return new Promise((resolve) => {
-        let exiting = false;
-        // === Sprint 1c-revive-3-D-19.5 (2026-06-05): P2-SIGINT 修法 — finish 移除全局 listener ===
-        // 拍板 (D-19.5, user review 2026-06-05 P2): repl.ts:307 每次 startRepl() 挂全局
-        // process.on('SIGINT'), finish() 没 process.off, 嵌入式/测试多次启动 REPL → 累积
-        // listener. 后 Ctrl+C 触发已退出 REPL 的闭包. 修法: finish() 入口先 .off 一次.
-        // 顺序: .off 必须在 rl.close() 之前, 否则 close 派发 'close' event 期间 Ctrl+C 还能
-        // 触达 onSigint 闭包. 红线: 跟 D-19 P2-Ctrl+C 拍板不冲突 — finish 才清理, SIGINT
-        // 触发的 dismiss + abort 仍由 onSigint 兜底 (D-19 行为不变).
-        const finish = async (code) => {
-            if (exiting)
-                return;
-            exiting = true;
-            // === Sprint 1c-revive-3-D-19.6 (2026-06-05): 清 exitTimer 防止 P1 兜底 timer 泄漏 ===
-            if (exitTimer) {
-                clearTimeout(exitTimer);
-                exitTimer = null;
-            }
-            process.off('SIGINT', onSigint);
-            rl.close();
-            if (writer) {
-                try {
-                    await writer.close();
-                }
-                catch {
-                    /* 关闭失败 best-effort,REPL 退出码仍按 caller 决定 */
-                }
-            }
-            out.write(`${t('cli.goodbye')}\n`);
-            resolve(code);
-        };
-        // === Sprint 1c-revive-3-D-19.5 (2026-06-05): P1 turn guard + 排队 + SIGINT/dismiss 链路 ===
-        // 拍板 (D-19.5, user review 2026-06-05 P1): 旧 line handler 在 confirm settle 之后, 紧
-        // 跟的下一行 (e.g. /exit\n) 立刻 leak 到 main chat/builtin 分支, /exit 提前 close
-        // writer, 第二轮 chat 用旧 workingMessages 并发跑. 修法: turnInFlight 闭包标志 +
-        // lineQueue 排队, 关键时序:
-        //   - 派发前检查 turnInFlight, true → 入队不入 chat
-        //   - turn 跑完在 finally 块: 检查 pendingExit (走 finish) → 否则 drain 下一条
-        //   - /exit fast-path: turn 在跑时只标 pendingExit, finally 兜底; turn 不在跑时直接
-        //     finish (exiting 守卫幂等)
-        //   - confirm 期间: 旧 D-19 offerLine 派发仍走, 但 line 不能 leak 到 chat 分支
-        //   - drain 用 setImmediate 避免同步递归爆栈 (P-verify-4 实测, 同步 emit 在大量排队
-        //     时撞 V8 10000 帧限制)
-        let turnInFlight = false;
-        let pendingExit = false;
-        // === Sprint 1c-revive-3-D-19.6 (2026-06-05): P1 close-during-turn 30s 兜底 timer ===
-        // 拍板 (D-19.6, user review 2026-06-05 P1): close handler 走 pendingExit + finally
-        // 兜底 finish() 后, 若 in-flight turn 永远不收束 (e.g. 网络卡死/无限 retry), REPL
-        // 永远不退出. exitTimer 启动 30s 硬 timeout, 触发时 stderr warning (i18n) +
-        // 强制 finish. 变量与 pendingExit 同 scope (Q2=方案 2): REPL 单次生命周期状态,
-        // 模块级会让嵌入式/并行多 REPL 实例互相污染. 仅 turnInFlight=true 启动 (Q3=b):
-        // 没有 in-flight turn 时直接 finish, 不需要兜底.
-        let exitTimer = null;
-        const lineQueue = [];
-        // === Sprint 1c-revive-3-D-19 (2026-06-05): P2-Ctrl+C 修法 — turn AbortController ===
-        // 拍板 (D-19): turnAbortController 闭包共享, 让 SIGINT handler 能 abort 它,
-        // 透传到 runToolLoop → executeToolCall → policy.confirm 的 signal 参数.
-        // 注意: plan R-1 实测 — terminal:false rl 不自动派发 SIGINT 事件, 必须挂 process.
-        // 单测用 mock 的 process, 通过 rl.input (PassThrough) 触发不了 SIGINT; 测 Ctrl+C
-        // 行为走 turnAbortController.abort() 直接调 (见 repl-shared-stdin / tool-loop-policy test).
-        //
-        // turn 生命周期: 每次 chat 入口 new 一个新 controller, 旧的引用还在闭包里
-        // (供 SIGINT handler 用). 拍板 (D-19): AbortController 单次 abort 语义, 一次
-        // turn SIGINT 之后, 下一个 turn 用新 controller + 重新挂 SIGINT (drain old handler).
-        let turnAbortController = new AbortController();
-        const onSigint = () => {
-            // Ctrl+C: dismiss in-flight confirm first (落 user_denied), 然后 abort turn.
-            // 拍板 (D-19): 进程不退出, 用户可继续. finish() 仍由 /exit 或 EOF 触发.
-            if (confirmController.hasPending()) {
-                confirmController.dismiss();
-            }
-            if (!turnAbortController.signal.aborted) {
-                turnAbortController.abort();
-            }
-        };
-        process.on('SIGINT', onSigint);
-        rl.on('line', async (rawLine) => {
-            const line = rawLine.trim();
-            // === Sprint 1c-revive-3-D-19 (2026-06-05): P1 修法 — 串行化 confirm 期间 line 消费 ===
-            // 拍板 (D-19): 主 rl 是 stdin 唯一消费者. 确认期间收到的 line 必须喂给 confirm
-            // resolver, 不能入 chat. 修 D-15 P1 (同流双 readline 抢同一行 → y 被当新 chat turn).
-            // === Sprint 1c-revive-3-D-19.5 (2026-06-05): 补 — confirm 期间 /exit 不入 chat, dismiss 兜底 ===
-            // 拍板 (D-19.5, user review 2026-06-05 P1): 旧逻辑 confirm 期间 /exit 走到下面
-            // /exit 分支直接 await finish(0), 但 confirm 还在 pending → finish 里 rl.close
-            // 后 confirm Promise 永远悬空 (跟 P2-dismiss 同源). 修法: confirm 期间 /exit 先
-            // dismiss confirm 再标记 pendingExit, finally 兜底 finish. 顺序: dismiss 先
-            // (让 runToolLoop 走 user_denied 审计), 再标 pendingExit.
-            if (confirmController.hasPending()) {
-                if (line === 'exit' || line === 'quit' || line === '/exit' || line === '/quit') {
-                    confirmController.dismiss();
-                    pendingExit = true;
-                    return;
-                }
-                const consumed = confirmController.offerLine(line);
-                if (consumed) {
-                    // confirm resolver 已 settle, 等待 promise 走完; 调 prompt() 让用户看见下一轮.
-                    // 注意: confirmController 内部在 offerLine 同步 settle, 但 await 仍在 tool-loop 端.
-                    // 拍板 (D-19): 不在这里 await confirm 本身, 避免阻塞 rl 内部 line queue.
-                    return;
-                }
-            }
-            // === Sprint 1c-revive-3-D-19.6 (2026-06-05): P2 turn guard deny 非 /exit builtin ===
-            // === Sprint 1c-revive-3-D-19.6.1 (2026-06-05): 加 line.startsWith('/') 限制, 不拦普通 chat line ===
-            // 拍板 (D-19.6, user review 2026-06-05 P2): 老逻辑 L373 注释"内建命令全部
-            // fast-path, 不走 turnInFlight"在 turn 正在跑时仍然跑 builtin, e.g. /verify
-            // 调 runVerify + 写 verification event, /help 写 out + prompt, /unknown
-            // 写 out + prompt, 都跟 in-flight chat turn 输出/session 交错, 违背
-            // "turn running 时下一行不进入 builtin/chat" 的 review 语义.
-            // === Sprint 1c-revive-3-D-19.6.1 (2026-06-05): Q2 修法 — 加 line.startsWith('/') 限制 ===
-            // 拍板 (D-19.6.1, user review 2026-06-05 P1.2): D-19.6 守卫条件缺 slash
-            // 限制, 普通 chat line 也会被 deny, 跟 D-19.5 lineQueue "只排 chat line"
-            // 红线冲突, 永远到不了 lineQueue. 修法: 加 `line.startsWith('/')` 限制, 只
-            // deny slash builtin. 普通 chat line 继续走 L408 lineQueue 排队 (D-19.5 拍板
-            // 不变). 守卫名改成"slash builtin guard"以反映新语义.
-            //
-            // 修复: turnInFlight 时, 除 /exit /quit /exit /quit /'' 之外的 **slash builtin**
-            // (/verify /help /unknown slash) 走 deny, 输出 i18n 提示
-            // (cli.turn_in_flight_deny) + prompt + return, 不入 lineQueue.
-            // 选择 deny 而非 defer, 因为 lineQueue 在 D-19.5 已有红线 (L407):
-            // "lineQueue 只排 chat line", defer 会让 finally drain 还要判 builtin vs chat.
-            //
-            // 位置红线: 必须 confirm 守卫 (L341-358) 之后, 内建命令 dispatcher (L373 起始)
-            // 之前. confirm 期间 /exit 走 dismiss+pendingExit (D-19.5 P1), 不应被本守卫拦.
-            // /exit /quit /exit /quit 走 fast-path (L378), 也不应被拦. 空行 L374 调
-            // prompt() 也不应被拦 (空行 ≠ 内建命令).
-            if (turnInFlight &&
-                line.startsWith('/') &&
-                line !== '/exit' &&
-                line !== '/quit') {
-                out.write(`${t('cli.turn_in_flight_deny')}\n\n`);
-                prompt();
-                return;
-            }
-            // 内建命令 — 全部 fast-path, 不走 turnInFlight (内建不等 chat turn)
-            if (line === '') {
-                prompt();
-                return;
-            }
-            if (line === 'exit' || line === 'quit' || line === '/exit' || line === '/quit') {
-                // 拍板 (D-19.5): turn 不在跑直接 finish; 在跑标 pendingExit, finally 兜底.
-                if (turnInFlight) {
-                    pendingExit = true;
-                    return;
-                }
-                await finish(0);
-                return;
-            }
-            if (line === '/help') {
-                out.write(`${t('cli.builtin_help')}\n`);
-                prompt();
-                return;
-            }
-            if (line === '/verify') {
-                // Sprint 1c-revive-2-D-11-4 (2026-06-04): REPL `/verify` 内建命令.
-                // 跟 CLI `deepwhale --verify` 走同一 runVerify() — 不走 LLM / tool loop.
-                // 拍板 (D-11-4 review, 2026-06-04): REPL 里 /verify 走**异步** runVerify,
-                // 跑完打 formatReport 到 out (跟其它内建命令风格一致), 然后**写 verification
-                // event 到 session JSONL** (因为用户在 REPL 里跑了 verify, session 走 audit
-                // 轨迹, 跟 CLI 不写 session 形成差异).
-                // 退出: REPL 不退, 跑完回到 prompt 继续.
-                try {
-                    const report = await runVerify(options.verifyChecks !== undefined ? { checks: options.verifyChecks } : {});
-                    const filled = buildSummaryAndNext(report);
-                    const text = formatReport({
-                        ...report,
-                        summary: filled.summary,
-                        nextSuggestedAction: filled.nextSuggestedAction,
-                    });
-                    out.write(`${text}\n`);
-                    if (writer) {
-                        // 写 verification event 到 session (跟 CLI 不同: REPL 用户有 session, 应该审计)
-                        const failedCount = report.checks.filter((c) => c.status !== 'passed').length;
-                        await appendVerificationEvent(writer, {
-                            status: report.overallStatus,
-                            durationMs: report.durationMs,
-                            commandCount: report.checks.length,
-                            failedCount,
-                            summary: filled.summary,
-                        });
-                    }
-                }
-                catch (e) {
-                    err.write(`error: verify failed to start: ${e instanceof Error ? e.message : String(e)}\n\n`);
-                }
-                prompt();
-                return;
-            }
-            if (line.startsWith('/')) {
-                out.write(`${t('cli.builtin_unknown', line)}\n`);
-                prompt();
-                return;
-            }
-            // === Sprint 1c-revive-3-D-19.5 (2026-06-05): P1 turn guard — 排队 turnInFlight 期间 line ===
-            // 拍板 (D-19.5, user review 2026-06-05 P1): 旧逻辑紧跟 chat turn 的下一行 (紧贴
-            // y\n 或 turn 还没跑完时 stdin 排队的行) 立刻进 chat 分支, 用旧 workingMessages
-            // 并发跑第二轮, /exit 提前 close writer. 修法: 派发前检查 turnInFlight, true
-            // → 入队不入 chat. finally 块跑完 turn, 检查 pendingExit (走 finish) → 否则
-            // drain lineQueue 下一条 (setImmediate 避免爆栈). 红线: pendingExit 优先级高于
-            // drain, 因为 /exit 应该是"不处理后续, 立刻走"语义, 不应该 drain 排队行.
-            if (turnInFlight) {
-                lineQueue.push(line);
-                return;
-            }
-            turnInFlight = true;
-            // chat — Sprint 1c-revive-2-D-11-4 review P1 修复: client lazy 化后, chat
-            // 路径首次调 tryCreateClient() 真创. 创失败 (无 key) → i18n stderr 提示 + 跳
-            // 过本次 turn (不退出 REPL, 用户可继续 /verify 或 /exit).
-            // Sprint 1c-revive-3-D-19 (2026-06-05): 续命 turnAbortController. 上一个 turn 已被
-            // SIGINT abort, 复用同一个 controller 第二次 abort 无效, new 一个新的. onSigint
-            // 闭包持有的是变量名 (let), 新 controller 一被赋值, 下次 SIGINT 自动 abort 新的,
-            // 不需要重建 handler. 红线: 不要 add 多份 SIGINT listener 重复触发.
-            turnAbortController = new AbortController();
-            const c = clientFromOptions ? { client: clientFromOptions, error: null } : tryCreateClient();
-            if (c.client === null) {
-                err.write(`${t('error.api_key_missing')}\n\n`);
-                turnInFlight = false;
-                prompt();
-                return;
-            }
-            const liveClient = c.client;
-            try {
-                if (enableToolLoop) {
-                    await runAgentTurn(liveClient, line, workingMessages, writer, out, err, turnAbortController.signal, compactionConfig, sandboxRunner, policyYes, replPolicy, // D-15: 注入 y/N confirm; 默认 staticToolPolicy 向后兼容
-                    emaState);
-                }
-                else {
-                    const turn = await runOneTurn(liveClient, line, [], { signal: turnAbortController.signal });
-                    if (turn.kind === 'error') {
-                        err.write(`${turn.error}\n\n`);
-                    }
-                    else if (turn.kind === 'chat') {
-                        out.write(`${turn.assistant}\n\n`);
-                    }
-                }
-            }
-            finally {
-                // === Sprint 1c-revive-3-D-19.5 (2026-06-05): drain lineQueue / 走 pendingExit ===
-                // 拍板 (D-19.5): turn 跑完 → 1) pendingExit=true 走 finish (丢弃排队);
-                // 2) 否则 drain 下一条 line (setImmediate 避免同步递归爆栈);
-                // 3) 都 false → prompt 继续. 顺序: pendingExit 优先, 不然用户 /exit 后还跑排队行.
-                // 红线: finally 不能 return (no-unsafe-finally), 用 if/else if/else 链.
-                turnInFlight = false;
-                if (pendingExit) {
-                    pendingExit = false;
-                    void finish(0);
-                }
-                else if (lineQueue.length > 0 && !exiting) {
-                    const next = lineQueue.shift();
-                    setImmediate(() => rl.emit('line', next));
-                }
-                else {
-                    prompt();
-                }
-            }
-        });
-        rl.on('close', () => {
-            // stdin EOF（管道/Ctrl-D）→ 优雅退出
-            // === Sprint 1c-revive-3-D-19.5 (2026-06-05): P2-dismiss 修法 — close 期间清理 pending confirm + abort turn ===
-            // 拍板 (D-19.5, user review 2026-06-05 P2): 旧逻辑只调 finish(0), 忽略两种悬空:
-            //   1) confirm 还在 pending → policy.confirm() Promise 永远不 resolve, turn 不会
-            //      走 finally, session 不会落 user_denied 审计.
-            //   2) turn 还在跑 → LLM stream / tool exec 还在 await, 进程表面已关但内部链未断.
-            // 修法: close 时先 dismiss pending confirm (resolve null → tool 走 user_denied 落审计),
-            // 再 abort turnAbortController 让 runAgentTurn 走 finally 收束. 顺序: dismiss 先于
-            // abort, 因为 confirm resolve 后 runToolLoop 才检查 signal, 调换会丢 audit 路径.
-            // === Sprint 1c-revive-3-D-19.6 (2026-06-05): P1 close-during-turn 收束 — 不再直接 finish() ===
-            // 拍板 (D-19.6, user review 2026-06-05 P1): dismiss + abort 之后, 老 finish() 立即
-            // 关 writer, 后续 turn 内部 writer.append (user_denied / 其它 audit event) 撞
-            // 'file closed' (stderr "Unexpected error: Error: file closed").
-            // 修复: 设 pendingExit=true 让 finally 块 (L490 附近) 兜底调 finish. 如果 in-flight
-            // turn 30s 内没 finally, exitTimer 触发 stderr warning (i18n) + 强制 finish.
-            // 红线: dismiss 先于 abort (D-19.5 P2-dismiss); finally 块 if/else if/else 链
-            // pendingExit 优先 (D-19.5 P1); exitTimer 仅 turnInFlight 时启动 (Q3=b).
-            if (confirmController.hasPending()) {
-                confirmController.dismiss();
-            }
-            if (turnInFlight && !turnAbortController.signal.aborted) {
-                turnAbortController.abort();
-            }
-            pendingExit = true;
-            if (turnInFlight) {
-                if (exitTimer)
-                    clearTimeout(exitTimer);
-                exitTimer = setTimeout(() => {
-                    // 30s 兜底: turn 卡死时强制 finish, stderr warning 走 i18n (Q1=A).
-                    // 注: t() 是位置参数, 模板用 {0}, 不是 {ms}.
-                    if (exiting)
-                        return;
-                    err.write(`${t('cli.repl_force_exit_timeout', 30000)}\n`);
-                    void finish(0);
-                }, 30_000);
-                // unref: 不让 timer 阻止进程退出 (finish 自己会调 process.exit / resolve).
-                exitTimer.unref?.();
-            }
-            else {
-                // turn 没在跑, 直接 finish (Q3=b 的 else 分支).
-                void finish(0);
-            }
-        });
-        const prompt = () => {
-            if (exiting)
-                return;
-            out.write(t('cli.prompt'));
-        };
-        // 第一个 prompt
-        prompt();
-    });
-}
-/**
- * 跑一轮 agent turn:append user → runToolLoop → 持久化 → 打印 final content。
- *
- * workingMessages 由 caller 持有（startRepl 闭包），turn 跑完后 caller 用新 messages 覆盖。
- *
- * Sprint 1a 修 P1:user 必须进 LLM。Sprint 1a 修 P2-A:流式不再重复打印 final content。
- * Sprint 1c-revive-2-D-6 (review P1 修复, 2026-06-04): 可选 compactionConfig — 传
- * 时调 runToolLoopWithCompaction (入口测 token, 触发则 compact + 写 event),
- * 不传 = 走裸 runToolLoop (向后兼容, 单测 baseline 244 不变). summaryFn 内部
- * 用 client + 固定 prompt 模板生成, 跟 test 1c-revive-2-D-5 cluster 拍板一致.
- * 单测通过 export 暴露,直接注入 mock LLMClient + WritableStream 验证行为。
- */
-export async function runAgentTurn(client, userInput, workingMessages, writer, out, err, signal, compactionConfig = null, 
-// Sprint 1c-revive-3-D-12 review P1 修复: startRepl 把 env 解析的 runner
-// 传进来, 工具注册表跟 env 状态对齐. 不传 = 用 LocalSandboxRunner (向后兼容).
-sandboxRunner, 
-// Sprint 1c-revive-3-D-13: 透传 yes 进 turn.
-yes, 
-// Sprint 1c-revive-3-D-15: 透传 policy 进 turn (REPL 注入 replPolicy; 单测传
-// staticToolPolicy 走 baseline). undefined = 默认 staticToolPolicy (向后兼容).
-policy, 
-// Sprint 1c-revive-2-D-21.1 (2026-06-06, 修 cache 96%↔85% 跳变 footer 焦虑):
-// EMA state 透传 (闭包持有). 旧 caller 不传 = 默认 EMPTY_EMA, 行为兼容
-// (不显示 avg 段). REPL 路径必传, 跨 turn 累积.
-emaState) {
-    // 1) 持久化 user 输入
-    if (writer) {
-        const userEvent = {
-            kind: 'user',
-            ts: Date.now(),
-            content: userInput,
-        };
-        await writer.append(userEvent);
-    }
-    // 2) 构造 turn 消息:历史 + 本轮 user。Sprint 1a 修 P1 — user 必须进 LLM。
-    const turnMessages = [...workingMessages, { role: 'user', content: userInput }];
-    // 3) 调 tool loop. Sprint 1c-revive-2-D-6: 传 compactionConfig 时走
-    //    runToolLoopWithCompaction (带入口 compaction + 写 compaction event),
-    //    不传 = 裸 runToolLoop (向后兼容, baseline 244 不变).
-    const summaryFn = compactionConfig
-        ? makeLlmSummarizeFn(client, compactionConfig.protocol)
-        : null;
-    // 拍板 (D-15, 2026-06-05): REPL 注入 replPolicy; 显式传 policy 也用, 默认 staticToolPolicy.
-    // 拍板红线 (D-13.5 P1 重排): --yes 永远先于 confirm, replPolicy.confirm 只在 yes=false 才被调.
-    const resolvedPolicy = policy ?? staticToolPolicy;
-    let result;
-    try {
-        if (compactionConfig !== null && summaryFn !== null) {
-            result = await runToolLoopWithCompaction(client, turnMessages, {
-                registry: createDefaultRegistry({
-                    ...(sandboxRunner !== undefined ? { sandboxRunner } : {}),
-                }),
-                onChunk: (chunk) => {
-                    if (chunk.content)
-                        out.write(chunk.content);
-                },
-                signal,
-                policy: resolvedPolicy,
-                isInteractive: true, // REPL = 交互模式 (D-13 拍板)
-                yes: yes ?? false,
-                ...(writer ? { writer } : {}),
-            }, compactionConfig, summaryFn);
-        }
-        else {
-            result = await runToolLoop(client, turnMessages, {
-                registry: createDefaultRegistry({
-                    ...(sandboxRunner !== undefined ? { sandboxRunner } : {}),
-                }),
-                onChunk: (chunk) => {
-                    if (chunk.content)
-                        out.write(chunk.content);
-                },
-                signal,
-                policy: resolvedPolicy,
-                isInteractive: true, // REPL = 交互模式 (D-13 拍板)
-                yes: yes ?? false,
-                ...(writer ? { writer } : {}),
-            });
-        }
-    }
-    catch (e) {
-        // === Sprint 1c-revive-3-D-19.6.1 (2026-06-05): Q3 修法 — abort-aware 分支 ===
-        // 拍板 (D-19.6.1, user review 2026-06-05 P2.1): D-19.6 P1 修法让 close 路径 abort
-        // in-flight turn, runToolLoop 内部 throw "Tool loop aborted by caller", 老 catch
-        // 走 cli.error.unknown ("Unexpected error: {0}") 污染 stderr 为 unexpected error.
-        // 修法: 检测 signal.aborted 优先于 isToolLoopError/isLLMError, 走专门 i18n key
-        // (cli.turn_aborted_shutdown). 文案 "no audit gap" 强调 user_denied 该落的都
-        // 落了 (D-19.6 P1 dismiss+abort+pendingExit 链路已保审计). 不走 unexpected
-        // 路径, stderr 不再被 intentional shutdown 污染.
-        //
-        // 顺序红线: signal.aborted 检查必须在 isToolLoopError 之前 — runToolLoop 内部
-        // abort 时 throw Error('Tool loop aborted by caller'), 这 Error 满足 isToolLoopError
-        // 的某些宽松判定 (e.g. 有 .message 但无 .steps) 是不稳的. signal.aborted 是
-        // 最直接的真相, 优先.
-        if (signal.aborted) {
-            err.write(`${t('cli.turn_aborted_shutdown')}\n\n`);
-        }
-        else if (isToolLoopError(e)) {
-            err.write(`${t('cli.tool_loop_limit', e.steps)}\n\n`);
-        }
-        else if (isLLMError(e)) {
-            err.write(`${formatError(e)}\n\n`);
-        }
-        else {
-            err.write(`${t('cli.error.unknown', String(e))}\n\n`);
-        }
-        return;
-    }
-    // 4) 流式已实时打印;非流式分支此处补打印 final content(给上层 caller 留 fallback)。
-    //    Sprint 1a REPL 总是传 onChunk 走流式,所以这里不再重复打印。
-    // 4) 持久化 steps
-    if (writer) {
-        try {
-            await persistToolLoopSteps(writer, result.steps);
-        }
-        catch (e) {
-            err.write(`${t('cli.session_write_warning', String(e))}\n`);
-        }
-    }
-    // 5) 更新 working messages（startRepl 闭包会保留新值）
-    workingMessages.length = 0;
-    workingMessages.push(...result.messages);
-    // 6) Step summary（人类可读）
-    for (const step of result.steps) {
-        appendStepSummary(step, out, err);
-    }
-    // 7) Sprint 1b: Prefix-cache 可观测性 — 每 turn 打印一行 status 到 stderr
-    // 风格: 分两行(跟 plan 拍板), 不污染 stdout 流式输出, 不打 prompt 前面
-    // 字段: cache_hit_rate / cost_turn / prompt / completion, 多字段同值时去冗余(Hermes footer 教训)
-    // Sprint 1c-revive-2-D-21.1 (2026-06-06, 修 cache 96%↔85% 跳变 footer 焦虑):
-    // 加 EMA 滚动平均 5-turn 平滑, 显示 "cache: 90% (avg 85%)". per-turn 数字
-    // 仍是真实值, avg 是过去 5 turn 平滑趋势. user 不会被单 turn 抖动骗.
-    appendUsageStatus(result.final.usage, err, emaState ?? EMPTY_EMA);
-}
-function appendStepSummary(step, out, err) {
-    if (step.kind === 'tool') {
-        const status = step.result.success ? '✓' : '✗';
-        out.write(`  ${status} ${step.tool_call.name} (${step.duration_ms}ms)\n`);
-        if (!step.result.success && step.result.error) {
-            err.write(`    ${step.result.error}\n`);
-        }
-    }
-    // 'assistant' / 'limit' / 'error' 的 summary 留 Sprint 1b（不污染 Sprint 1a 验收面）
-}
-const EMPTY_EMA = { sampleCount: 0 };
-export function formatUsageStatus(usage, emaState = EMPTY_EMA) {
-    if (usage === undefined)
-        return null;
-    const { prompt_tokens, completion_tokens } = usage;
-    // 无 cached_tokens: 简版
-    if (usage.cached_tokens === undefined) {
-        return `usage: ${formatTokens(prompt_tokens)} prompt / ${formatTokens(completion_tokens)} completion`;
-    }
-    // 满 usage: 完整 status
-    const hitRatePct = ((usage.cache_hit_rate ?? 0) * 100).toFixed(0);
-    const uncached = formatTokens(usage.tokens_uncached ?? prompt_tokens);
-    // Sprint 1c-revive-2-D-21.1: EMA 平滑尾部段. sampleCount >= 3 才显示 avg
-    // (样本太少趋势不稳). 不更新 caller state, 只读 (state update 在
-    // appendUsageStatus, 这是纯函数好测).
-    const avgSegment = emaState.sampleCount >= 3 && emaState.hitRateEMA !== undefined
-        ? ` (avg ${(emaState.hitRateEMA * 100).toFixed(0)}%)`
-        : '';
-    // Sprint 1b.5 Step 2.5 (F5 拍板, review 2026-06-03 找到): cost_turn/cost_currency 都 absent
-    // (R7 中间路径 / F4 保守) → 安静少显示字段, **不**显示 'cost ?'. 跟 1b 拍板 "absent 安静"
-    // 一致. user 视角看 'cost ?/turn' 是 'UI 不知道' 不是 '这次没算', 显示 '?' 反而误导.
-    if (usage.cost_turn === undefined || usage.cost_currency === undefined) {
-        return `cache: ${hitRatePct}%${avgSegment} | prompt ${formatTokens(prompt_tokens)} (${uncached} new)`;
-    }
-    // cost 字段齐: 读 cost_currency 决 symbol
-    const symbol = formatCostSymbol(usage.cost_currency);
-    const cost = usage.cost_turn; // narrowed by 上面 if guard (cost_turn !== undefined)
-    const costStr = cost < 0.01 ? `${symbol}${cost.toFixed(4)}` : `${symbol}${cost.toFixed(3)}`;
-    return `cache: ${hitRatePct}%${avgSegment} | ${costStr}/turn | prompt ${formatTokens(prompt_tokens)} (${uncached} new)`;
-}
-/** cost_currency → 显示 symbol. 不在 UI 层做汇率换算. */
-function formatCostSymbol(currency) {
-    switch (currency) {
-        case 'CNY':
-            return '¥';
-        case 'USD':
-            return '$';
-        case undefined:
-            return '?';
-    }
-}
-function formatTokens(n) {
-    if (n >= 1000)
-        return `${(n / 1000).toFixed(1)}k`;
-    return String(n);
-}
-/**
- * Sprint 1c-revive-2-D-21.1 (2026-06-06): emaState 接受 mutable 引用 (闭包),
- * 在 sampleCount < 5 用 cold-start EMA (直接赋值), 之后 α=0.5 平滑:
- *   newEMA = α * current + (1 - α) * oldEMA = 0.5 * current + 0.5 * oldEMA
- * α=0.5 是 "等权平滑" (5-turn 半衰期 ≈ 1 turn, 快速响应 + 适度平滑).
- * 数学: sampleCount=5 时, 5 turn 前的数据权重 = 0.5^5 = 3.1% (基本忘掉),
- * 跟 5-turn rolling window 趋势一致, 但 EMA 实现更轻.
- *
- * export 出来供单测 (test/unit/usage-ema.test.ts) 验证 state machine.
- * 之前是 local function, D-21.1 改成 export — 单测需要直接调它验 in-place update.
- */
-export function appendUsageStatus(usage, err, emaState) {
-    // 同步更新 EMA state (in-place). 调 formatUsageStatus 之前先 update,
-    // 防止 "刚 sample 1 个, display 当 turn 仍显示 sample 0 的 ema".
-    if (usage !== undefined && usage.cached_tokens !== undefined) {
-        const current = usage.cache_hit_rate ?? 0;
-        if (emaState.hitRateEMA === undefined) {
-            emaState.hitRateEMA = current;
-        }
-        else {
-            emaState.hitRateEMA = 0.5 * current + 0.5 * emaState.hitRateEMA;
-        }
-        emaState.sampleCount += 1;
-    }
-    const line = formatUsageStatus(usage, emaState);
-    if (line !== null) {
-        err.write(`  ${line}\n`);
-    }
-}
-function formatError(e) {
-    if (e instanceof APIKeyMissingError)
-        return t('error.api_key_missing');
-    if (e instanceof LLMAuthError) {
-        // Sprint 1b.5 Step 2.5 修: tsc strict 看 LLMAuthError.status 在 .status 上
-        return t('cli.error.auth', String(e.status));
-    }
-    if (e instanceof LLMRateLimitError)
-        return t('cli.error.rate_limit');
-    if (e instanceof LLMNetworkError) {
-        const err = e;
-        const msg = err.cause instanceof Error ? err.cause.message : err.message;
-        return t('cli.error.network', msg);
-    }
-    if (e instanceof LLMStreamError) {
-        return t('cli.error.stream', e.message);
-    }
-    if (e instanceof LLMUnknownError) {
-        const err = e;
-        const detail = err.status !== undefined ? `HTTP ${err.status}` : err.message;
-        return t('cli.error.unknown', detail);
-    }
-    if (e instanceof ToolLoopLimitError) {
-        return t('cli.tool_loop_limit', e.steps);
-    }
-    if (isLLMError(e))
-        return t('cli.error.unknown', e.message);
-    if (e instanceof Error)
-        return t('cli.error.unknown', e.message);
-    return t('cli.error.unknown', String(e));
-}
-/**
- * 生成 LLM summary callback (Sprint 1c-revive-2-D-6).
- *
- * 跟 1c-revive-2-D-5 cluster test (compaction-cross-protocol-2d5.test.ts:231)
- * 拍板一致: 走 client.chat 调 LLM 生成 1 short paragraph summary. 跨
- * openai/anthropic 同形态, 因为 client.chat 是 LLMClient 契约的统一入口.
- *
- * 不**在**这里拼 protocol-specific system prompt: Anthropic protocol
- * 走 client.chat 时已由 client 内部加 (跟 agent-compaction.ts protocol
- * 字段对齐). 1c-revive-2-D-6 拍板: protocol 字段保留供未来 system
- * prompt 模板差异化用, 当前 D-6 默认用同 system prompt 模板 (跨协议一致).
- */
-function makeLlmSummarizeFn(client, _protocol) {
-    return async (toSummarize) => {
-        const summaryMessages = [
-            {
-                role: 'system',
-                content: 'You are a concise summarizer. Compress the following conversation into 1 short paragraph ' +
-                    '(max 200 words). Preserve key arithmetic results, tool calls, and final answers.',
-            },
-            {
-                role: 'user',
-                content: toSummarize
-                    .map((m, i) => `[${i}] ${m.role}: ${m.content ?? '(empty)'}`)
-                    .join('\n'),
-            },
-        ];
-        const r = await client.chat(summaryMessages, {});
-        return r.content;
-    };
-}
-//# sourceMappingURL=repl.js.map