@dsh-electron/dsh-plugin-multi-root-workspace 0.1.7 → 0.1.9

package/lib/{fs-9JIzGaf3.js → fs-BTXySwSG.js}

@@ -1,9 +1,9 @@
 import { brandMultiRootProvider } from "./providers.js";
 import { dirname, sep } from "node:path";
 import { writableRoots } from "@deepseek-ai/dsh-sandbox";
+import { stat } from "node:fs/promises";
 import { FsError } from "@deepseek-ai/dsh-fs";
 import { LocalFileSystem } from "@deepseek-ai/dsh-fs-local";
-import { stat } from "node:fs/promises";
 //#region src/containment.ts
 const MISSING_CODES = /* @__PURE__ */ new Set(["ENOENT", "ENOTDIR"]);
 function isMissing(error) {
@@ -65,11 +65,7 @@ async function isPathUnder(path, root, caseSensitive = process.platform !== "win
 * roots.
 */
 var MultiRootFileSystem = class extends LocalFileSystem {
-	static inject = [
-		"multiRootCompat",
-		"sandboxPolicy",
-		"multiRootScope"
-	];
+	static inject = ["sandboxPolicy", "multiRootScope"];
 	defaultMode;
 	constructor(ctx, config) {
 		super(ctx, config);

package/lib/fs.js

@@ -1,3 +1,3 @@
 import "./providers.js";
-import { t as MultiRootFileSystem } from "./fs-9JIzGaf3.js";
+import { t as MultiRootFileSystem } from "./fs-BTXySwSG.js";
 export { MultiRootFileSystem, MultiRootFileSystem as default };

package/lib/index.js

@@ -1,13 +1,13 @@
-import { c as agentPtyMarkerVerdict, d as OPTIONAL_CORE_PACKAGES, f as REQUIRED_CORE_PACKAGES, g as readInstalledVersion, h as compatEnforcement, i as assertSupportedInstallation, l as assertAgentPtyMarker, m as classifyInstallation, n as MultiRootCompatService, o as AGENT_PTY_MARKER, p as SUPPORTED_DSH_RELEASES, s as PtyMarkerContractError, t as DshCompatUnsupportedError, u as CORE_PACKAGES } from "./compat-DF_yL1bB.js";
-import { a as composeInstructionMessage, c as createInstructionMessage, l as instructionsApi, r as PLUGIN_SOURCE, t as DEFAULT_MAX_BYTES, u as renderInstructions } from "./instructions-D19jRxN0.js";
-import { n as widenConfined, t as MultiRootSandboxProvider } from "./sandbox-Kup4_ZIb.js";
-import { a as classifyStoredRoots, c as indexedStatuses, i as canonicalRoot, l as isCanonicallyUnder, m as validateRootCandidate, n as additionalRootId, p as resolveRootRef, r as availableRoots, s as expandRootInput, t as RootValidationError, u as removeStatusAt } from "./roots-B-0l8mNG.js";
+import { a as composeInstructionMessage, c as createInstructionMessage, l as instructionsApi, r as PLUGIN_SOURCE, t as DEFAULT_MAX_BYTES, u as renderInstructions } from "./instructions-CGNS3H0H.js";
+import { a as classifyStoredRoots, c as indexedStatuses, i as canonicalRoot, l as isCanonicallyUnder, m as validateRootCandidate, n as additionalRootId, p as resolveRootRef, r as availableRoots, s as expandRootInput, t as RootValidationError, u as removeStatusAt } from "./roots-Ca_W1S9n.js";
+import { _ as classifyInstallation, c as agentPtyMarkerVerdict, d as HOST_SERVICE_PACKAGES, f as OPTIONAL_CORE_PACKAGES, g as SUPPORTED_DSH_RELEASES, h as RUNTIME_OPTIONAL_PACKAGES, i as assertSupportedInstallation, l as assertAgentPtyMarker, m as RUNNER_ANCHORED_PACKAGES, n as MultiRootCompatService, o as AGENT_PTY_MARKER, p as REQUIRED_CORE_PACKAGES, s as PtyMarkerContractError, t as DshCompatUnsupportedError, u as CORE_PACKAGES, v as compatEnforcement, y as readInstalledVersion } from "./compat-CagUNzRB.js";
+import { n as widenConfined, t as MultiRootSandboxProvider } from "./sandbox-CXk5h-ct.js";
 import { MULTI_ROOT_PROVIDER_BRAND, MultiRootProviders, brandMultiRootProvider, isMultiRootProvider } from "./providers.js";
-import { t as MultiRootFileSystem } from "./fs-9JIzGaf3.js";
+import { t as MultiRootFileSystem } from "./fs-BTXySwSG.js";
 import { a as parseRevealedView, i as parsePanelCall, n as PANEL_ENDPOINTS, o as parseRootsView, t as PANEL_CHANNEL } from "./contract-DZ4zczDT.js";
 import { MultiRootScopeService, renderWorkspaceRootsContext, sanitizeAdditionalRoots } from "./scope.js";
-import { a as MultiRootRegistry, c as multiRootDomainSpec, i as MAX_ALIAS_LENGTH, l as RegistryAuthorityLease, n as DOMAIN_NAME, o as REGISTRY_CONTENDED_MESSAGE, r as MAX_ADDITIONAL_ROOTS_CEILING, t as DEFAULT_MAX_ADDITIONAL_ROOTS, u as RegistryLeaseContendedError } from "./registry-DCxC5Lay.js";
-import { a as renderRootsReport, c as revealArgv, i as parseFoldersCommand, o as resolvePanelPrimaryRoot, t as COMMAND_NAME } from "./command-CESuwlVt.js";
+import { a as MultiRootRegistry, c as multiRootDomainSpec, i as MAX_ALIAS_LENGTH, l as RegistryAuthorityLease, n as DOMAIN_NAME, o as REGISTRY_CONTENDED_MESSAGE, r as MAX_ADDITIONAL_ROOTS_CEILING, t as DEFAULT_MAX_ADDITIONAL_ROOTS, u as RegistryLeaseContendedError } from "./registry-BClm6wfh.js";
+import { a as renderRootsReport, c as revealArgv, i as parseFoldersCommand, o as resolvePanelPrimaryRoot, t as COMMAND_NAME } from "./command-Bwd6EGNV.js";
 //#region src/index.ts
 /**
 * Carrier plugin face for the bare-package-name loader row (see the module
@@ -18,4 +18,4 @@ import { a as renderRootsReport, c as revealArgv, i as parseFoldersCommand, o as
 const inject = [];
 function apply() {}
 //#endregion
-export { AGENT_PTY_MARKER, COMMAND_NAME, CORE_PACKAGES, DEFAULT_MAX_ADDITIONAL_ROOTS, DEFAULT_MAX_BYTES, DOMAIN_NAME, DshCompatUnsupportedError, MAX_ADDITIONAL_ROOTS_CEILING, MAX_ALIAS_LENGTH, MULTI_ROOT_PROVIDER_BRAND, MultiRootCompatService, MultiRootFileSystem, MultiRootProviders, MultiRootRegistry, MultiRootSandboxProvider, MultiRootScopeService, OPTIONAL_CORE_PACKAGES, PANEL_CHANNEL, PANEL_ENDPOINTS, PLUGIN_SOURCE, PtyMarkerContractError, REGISTRY_CONTENDED_MESSAGE, REQUIRED_CORE_PACKAGES, RegistryAuthorityLease, RegistryLeaseContendedError, RootValidationError, SUPPORTED_DSH_RELEASES, additionalRootId, agentPtyMarkerVerdict, apply, assertAgentPtyMarker, assertSupportedInstallation, availableRoots, brandMultiRootProvider, canonicalRoot, classifyInstallation, classifyStoredRoots, compatEnforcement, composeInstructionMessage, createInstructionMessage, expandRootInput, indexedStatuses, inject, instructionsApi, isCanonicallyUnder, isMultiRootProvider, multiRootDomainSpec, parseFoldersCommand, parsePanelCall, parseRevealedView, parseRootsView, readInstalledVersion, removeStatusAt, renderInstructions, renderRootsReport, renderWorkspaceRootsContext, resolvePanelPrimaryRoot, resolveRootRef, revealArgv, sanitizeAdditionalRoots, validateRootCandidate, widenConfined };
+export { AGENT_PTY_MARKER, COMMAND_NAME, CORE_PACKAGES, DEFAULT_MAX_ADDITIONAL_ROOTS, DEFAULT_MAX_BYTES, DOMAIN_NAME, DshCompatUnsupportedError, HOST_SERVICE_PACKAGES, MAX_ADDITIONAL_ROOTS_CEILING, MAX_ALIAS_LENGTH, MULTI_ROOT_PROVIDER_BRAND, MultiRootCompatService, MultiRootFileSystem, MultiRootProviders, MultiRootRegistry, MultiRootSandboxProvider, MultiRootScopeService, OPTIONAL_CORE_PACKAGES, PANEL_CHANNEL, PANEL_ENDPOINTS, PLUGIN_SOURCE, PtyMarkerContractError, REGISTRY_CONTENDED_MESSAGE, REQUIRED_CORE_PACKAGES, RUNNER_ANCHORED_PACKAGES, RUNTIME_OPTIONAL_PACKAGES, RegistryAuthorityLease, RegistryLeaseContendedError, RootValidationError, SUPPORTED_DSH_RELEASES, additionalRootId, agentPtyMarkerVerdict, apply, assertAgentPtyMarker, assertSupportedInstallation, availableRoots, brandMultiRootProvider, canonicalRoot, classifyInstallation, classifyStoredRoots, compatEnforcement, composeInstructionMessage, createInstructionMessage, expandRootInput, indexedStatuses, inject, instructionsApi, isCanonicallyUnder, isMultiRootProvider, multiRootDomainSpec, parseFoldersCommand, parsePanelCall, parseRevealedView, parseRootsView, readInstalledVersion, removeStatusAt, renderInstructions, renderRootsReport, renderWorkspaceRootsContext, resolvePanelPrimaryRoot, resolveRootRef, revealArgv, sanitizeAdditionalRoots, validateRootCandidate, widenConfined };

package/lib/{instructions-D19jRxN0.js → instructions-CGNS3H0H.js}

@@ -1,12 +1,13 @@
 import { t as effectiveDirectory } from "./session-directory-BLOstut1.js";
 import { t as aroundTool } from "./tool-context-CpgIFcCB.js";
-import { l as isCanonicallyUnder } from "./roots-B-0l8mNG.js";
+import { l as isCanonicallyUnder } from "./roots-Ca_W1S9n.js";
 import { createRequire } from "node:module";
-import "@deepseek-ai/cordis";
-import { basename, dirname, isAbsolute, relative, resolve, sep } from "node:path";
 import { createHash } from "node:crypto";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { basename, dirname, isAbsolute, relative, resolve, sep } from "node:path";
+import "@deepseek-ai/cordis";
 import { canonicalPath } from "@deepseek-ai/dsh-sandbox";
+import { stat } from "node:fs/promises";
+import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/compat/agent-instructions.ts
 /**
 * Compatibility adapter for upstream's instruction discovery and rendering.
@@ -224,6 +225,95 @@ function toolResultFailed(message) {
 	return block.isError === true;
 }
 //#endregion
+//#region src/compat/instruction-activity.ts
+/** Public durable file activity, normalized without loading an optional tool runtime. */
+function ptcFileActivity(event) {
+	const row = event;
+	const data = row.data;
+	if (typeof data?.subCallId !== "string") return void 0;
+	const id = `ptc:${data.subCallId}`;
+	if (row.type === "tool/ptc-dispatch-start" && typeof data.name === "string") {
+		const args = JSON.stringify(data.arguments);
+		if (args === void 0) throw new Error("review-context: incomplete durable PTC action");
+		return {
+			kind: "start",
+			id,
+			name: data.name,
+			arguments: args
+		};
+	}
+	if (row.type === "tool/ptc-dispatch") return {
+		kind: "end",
+		id,
+		failed: data.isError !== false || data.error !== void 0
+	};
+}
+/** Rebuild read-only discovery candidates from successful durable activity after resume. */
+function replayedInstructionTargets(events, origin) {
+	let cwd = origin;
+	const pending = /* @__PURE__ */ new Map();
+	const paths = /* @__PURE__ */ new Set();
+	for (const raw of events) {
+		const event = raw;
+		if (event.type === "working-directory/change" && typeof event.data.cwd === "string") {
+			cwd = event.data.cwd;
+			for (const call of pending.values()) call.directories.add(cwd);
+			continue;
+		}
+		const ptc = ptcFileActivity(event);
+		if (event.type === "tool/call" || ptc?.kind === "start") {
+			const call = ptc?.kind === "start" ? {
+				callId: ptc.id,
+				name: ptc.name,
+				arguments: ptc.arguments
+			} : event.data;
+			if (typeof call.callId !== "string" || typeof call.name !== "string" || typeof call.arguments !== "string") throw new Error("review-context: incomplete durable file activity");
+			pending.set(call.callId, {
+				name: call.name,
+				arguments: call.arguments,
+				directories: new Set(cwd === void 0 ? [] : [cwd])
+			});
+			if (pending.size > 512) throw new Error("review-context: durable activity index exceeded");
+			continue;
+		}
+		if (event.type !== "tool/result" && ptc?.kind !== "end") continue;
+		const message = event.data.message;
+		const id = ptc?.kind === "end" ? ptc.id : message?.source?.callId;
+		if (typeof id !== "string") throw new Error("review-context: incomplete durable result");
+		const call = pending.get(id);
+		pending.delete(id);
+		if (call === void 0) continue;
+		if (ptc?.kind === "end" ? ptc.failed : event.data.error !== void 0 || toolResultFailed(message ?? {})) continue;
+		const path = touchedPathOfToolCall(call.name, call.arguments);
+		if (path === void 0) continue;
+		if (isAbsolute(path)) paths.add(path);
+		else {
+			if (call.directories.size === 0) throw new Error("review-context: durable file activity has no cwd");
+			for (const directory of call.directories) paths.add(resolve(directory, path));
+		}
+		if (paths.size > 512) throw new Error("review-context: durable work index exceeded");
+	}
+	return [...paths];
+}
+/** fs tools whose success touches the file at their `file_path` argument. */
+const FILE_TOUCH_TOOL_NAMES = {
+	read: true,
+	write: true,
+	edit: true
+};
+/** One explicit fs-tool target, shared with live touch capture. */
+function touchedPathOfToolCall(name, argumentsJson) {
+	if (FILE_TOUCH_TOOL_NAMES[name] !== true) return void 0;
+	let parsed;
+	try {
+		parsed = JSON.parse(argumentsJson);
+	} catch {
+		return;
+	}
+	if (typeof parsed !== "object" || parsed === null || !("file_path" in parsed) || typeof parsed.file_path !== "string") return void 0;
+	return parsed.file_path.trim() || void 0;
+}
+//#endregion
 //#region src/compat/instruction-overlap.ts
 /** Recognize files already represented by the native instruction baseline in this step. */
 function nativeInstructionCopies(messages, cwd) {
@@ -327,12 +417,6 @@ const PLUGIN_SOURCE = "@dsh-electron/dsh-plugin-multi-root-workspace";
 const DEFAULT_MAX_BYTES = 65536;
 /** Largest instruction file this row will read; larger files are ignored. */
 const DEFAULT_MAX_SOURCE_BYTES = 32768;
-/** Tools whose SUCCESS makes the directories on the path to the file relevant. */
-const FILE_TOUCH_TOOL_NAMES = {
-	read: true,
-	write: true,
-	edit: true
-};
 /** Cap on unanswered `tool/call` records remembered per session. */
 const MAX_PENDING_CALLS = 128;
 /** Cap on touched paths remembered per session; beyond it, touches are dropped. */
@@ -362,31 +446,6 @@ function relativeDirectoryOf(root, directory) {
 	return suffix.length === 0 ? "." : suffix;
 }
 /**
-* The path one RAW tool call touched.
-*
-* `arguments` is the model-produced JSON string, so the path is only known after
-* parsing it; a call that names no `file_path`, or is not one of the tools whose
-* success makes a directory relevant, touched nothing this row cares about.
-* @param name - the tool name the model called.
-* @param argumentsJson - the tool call's raw arguments, exactly as produced.
-* @returns the trimmed absolute-or-relative path, or `undefined`.
-*/
-function touchedPathOfToolCall(name, argumentsJson) {
-	if (FILE_TOUCH_TOOL_NAMES[name] !== true) return void 0;
-	let parsed;
-	try {
-		parsed = JSON.parse(argumentsJson);
-	} catch {
-		return;
-	}
-	if (typeof parsed !== "object" || parsed === null) return void 0;
-	if (!("file_path" in parsed)) return void 0;
-	const path = parsed.file_path;
-	if (typeof path !== "string") return void 0;
-	const trimmed = path.trim();
-	return trimmed.length > 0 ? trimmed : void 0;
-}
-/**
 * The directory a touched path's instructions would live in.
 *
 * Tool arguments are the model's raw input, so a relative `file_path` is
@@ -460,7 +519,9 @@ function apply(ctx, config = {}) {
 		if (existing !== void 0) return existing;
 		const created = {
 			scopes: /* @__PURE__ */ new Map(),
-			touched: /* @__PURE__ */ new Set()
+			provenanceRoots: /* @__PURE__ */ new Set(),
+			touched: /* @__PURE__ */ new Set(),
+			worked: /* @__PURE__ */ new Set()
 		};
 		states.set(session, created);
 		return created;
@@ -468,36 +529,88 @@ function apply(ctx, config = {}) {
 	ctx.on("session/event", (session, event) => {
 		const pendingCalls = callsBySession.get(session) ?? /* @__PURE__ */ new Map();
 		callsBySession.set(session, pendingCalls);
-		if (event.type === "tool/call") {
+		const ptc = ptcFileActivity(event);
+		if (event.type === "tool/call" || ptc?.kind === "start") {
 			if (pendingCalls.size >= MAX_PENDING_CALLS) {
 				const oldest = pendingCalls.keys().next();
 				if (!oldest.done) pendingCalls.delete(oldest.value);
 			}
-			pendingCalls.set(event.data.callId, {
-				name: event.data.name,
-				arguments: event.data.arguments,
+			const call = ptc?.kind === "start" ? {
+				callId: ptc.id,
+				name: ptc.name,
+				arguments: ptc.arguments
+			} : event.type === "tool/call" ? event.data : void 0;
+			if (call !== void 0) pendingCalls.set(call.callId, {
+				name: call.name,
+				arguments: call.arguments,
 				cwd: effectiveDirectory(ctx, session)
 			});
 			return;
 		}
-		if (event.type !== "tool/result") return;
-		const callId = event.data.message.source.callId;
+		if (event.type !== "tool/result" && ptc?.kind !== "end") return;
+		const callId = ptc?.kind === "end" ? ptc.id : event.type === "tool/result" ? event.data.message.source.callId : "";
 		const call = pendingCalls.get(callId);
 		pendingCalls.delete(callId);
 		if (call === void 0) return;
-		if (event.data.error !== void 0 || toolResultFailed(event.data.message)) return;
+		if (ptc?.kind === "end" ? ptc.failed : event.type === "tool/result" && (event.data.error !== void 0 || toolResultFailed(event.data.message))) return;
 		const path = call.observedPath ?? touchedPathOfToolCall(call.name, call.arguments);
 		if (path === void 0) return;
 		const state = stateOf(session);
+		const absolute = isAbsolute(path) ? path : call.cwd === void 0 ? void 0 : resolve(call.cwd, path);
+		if (absolute !== void 0) {
+			if (state.worked.size >= MAX_DELIVERED_SCOPES && !state.worked.has(absolute)) state.overflow = true;
+			else state.worked.add(absolute);
+		}
 		if (state.touched.size >= MAX_TOUCHED_PATHS) return;
 		if (isAbsolute(path)) state.touched.add(path);
 		else if (call.cwd !== void 0) state.touched.add(resolve(call.cwd, path));
 	});
 	ctx.inject(["fs"], (scope) => {
+		scope.provide("multiRootInstructions", {
+			knownRoots(session) {
+				return [...states.get(session)?.provenanceRoots ?? []];
+			},
+			async snapshot(agent, roots, target, signal) {
+				signal.throwIfAborted();
+				if (roots.length === 0) return [];
+				const api = await instructionsApi();
+				if (api === void 0) throw new Error("review-context: instruction discovery unavailable");
+				const existing = states.get(agent.session);
+				if (existing?.overflow) throw new Error("review-context: successful work index exceeded");
+				const state = {
+					scopes: new Map([...existing?.scopes ?? []].map(([key, value]) => [key, {
+						...value,
+						digest: void 0
+					}])),
+					provenanceRoots: new Set(existing?.provenanceRoots),
+					touched: /* @__PURE__ */ new Set([...existing?.touched ?? [], ...existing?.worked ?? []]),
+					worked: /* @__PURE__ */ new Set()
+				};
+				for (const path of replayedInstructionTargets(agent.session.snapshotEvents(), agent.session.header.cwd)) state.touched.add(path);
+				if (target !== void 0) state.touched.add(target);
+				const cwd = effectiveDirectory(scope, agent.session);
+				const reviewCwd = cwd === void 0 ? void 0 : canonicalPath(cwd);
+				const result = [];
+				for (const root of roots) {
+					const plan = await planRoot(scope, api, root, config, state, signal, true, reviewCwd);
+					for (const { file } of plan.deliveries) result.push({
+						root,
+						path: file.absolutePath,
+						relativeDirectory: relativeDirectoryOf(root, dirname(file.absolutePath)),
+						digest: digestOf(file.content),
+						text: file.content
+					});
+				}
+				signal.throwIfAborted();
+				if (Buffer.byteLength(JSON.stringify(result), "utf8") > maxBytes) throw new Error("review-context: instruction budget exceeded");
+				return result;
+			}
+		});
 		scope.on("fs/observed", (target, _observation, actor) => {
 			const exec = executions.getStore();
 			if (exec?.agent === void 0 || FILE_TOUCH_TOOL_NAMES[exec.name] !== true || actor !== exec) return;
-			const call = callsBySession.get(exec.agent.session)?.get(exec.callId);
+			const calls = callsBySession.get(exec.agent.session);
+			const call = calls?.get(exec.callId) ?? calls?.get(`ptc:${exec.callId}`);
 			if (call !== void 0) call.observedPath = scope.fs.processPath(target);
 		});
 		scope.on("agent/pre-step", async ({ agent, messages, signal }, next) => {
@@ -531,7 +644,9 @@ async function pending(ctx, states, agent, config, maxBytes, signal, messages) {
 	const session = agent.session;
 	const state = states.get(session) ?? {
 		scopes: /* @__PURE__ */ new Map(),
-		touched: /* @__PURE__ */ new Set()
+		provenanceRoots: /* @__PURE__ */ new Set(),
+		touched: /* @__PURE__ */ new Set(),
+		worked: /* @__PURE__ */ new Set()
 	};
 	states.set(session, state);
 	const evaluatedTouches = new Set(state.touched);
@@ -610,7 +725,10 @@ async function pending(ctx, states, agent, config, maxBytes, signal, messages) {
 	if (text !== void 0 || liveUpdates.length > 0) {
 		for (const root of revoked) for (const [key, entry] of state.scopes) if (entry.root === root) state.scopes.delete(key);
 		for (const entry of gone) state.scopes.delete(entry.key);
-		for (const entry of liveUpdates) state.scopes.set(entry.key, entry.scope);
+		for (const entry of liveUpdates) {
+			state.scopes.set(entry.key, entry.scope);
+			state.provenanceRoots.add(entry.scope.root);
+		}
 	}
 	return message;
 }
@@ -626,15 +744,19 @@ async function pending(ctx, states, agent, config, maxBytes, signal, messages) {
 * of that directory's ancestors up to the root, because discovery reports an
 * intermediate directory's file but only the exact directory's candidates
 * survive the filter below.
+* A strict review can also seed its effective cwd chain without recording a
+* successful touch; ordinary pre-step delivery never supplies that seed.
 * @param ctx - the row's context, for `fs` and the logger.
 * @param api - the adapted upstream instruction surface.
 * @param root - the canonical additional root.
 * @param config - the row's configuration.
 * @param state - the session's delivery state.
 * @param signal - the turn's cancellation signal.
+* @param strict - fail on incomplete review discovery instead of deferring delivery.
+* @param reviewCwd - review-only directory seed; never a successful touch.
 * @returns the files to send and the deliveries to withdraw.
 */
-async function planRoot(ctx, api, root, config, state, signal) {
+async function planRoot(ctx, api, root, config, state, signal, strict = false, reviewCwd) {
 	const delivered = /* @__PURE__ */ new Map();
 	for (const [key, entry] of state.scopes) if (entry.root === root) delivered.set(key, entry);
 	const dirs = /* @__PURE__ */ new Set([root]);
@@ -642,8 +764,9 @@ async function planRoot(ctx, api, root, config, state, signal) {
 		const dir = dirname(entry.path);
 		if (dir !== root) dirs.add(dir);
 	}
-	for (const touched of state.touched) {
-		const parent = parentDirectoryOf(touched);
+	const parents = [...state.touched].map(parentDirectoryOf);
+	if (reviewCwd !== void 0) parents.push(reviewCwd);
+	for (const parent of parents) {
 		if (parent === void 0 || !isCanonicallyUnder(parent, root)) continue;
 		let dir = parent;
 		for (;;) {
@@ -659,7 +782,7 @@ async function planRoot(ctx, api, root, config, state, signal) {
 		signal.throwIfAborted();
 		walks.push({
 			relativeDirectory: relativeDirectoryOf(root, dir),
-			read: await loadDirectory(ctx.fs, api, root, config, signal, dir)
+			read: await loadDirectory(ctx.fs, api, root, config, signal, dir, strict)
 		});
 	}
 	walks.sort((left, right) => left.relativeDirectory.split(sep).length - right.relativeDirectory.split(sep).length || (left.relativeDirectory < right.relativeDirectory ? -1 : left.relativeDirectory > right.relativeDirectory ? 1 : 0));
@@ -678,7 +801,7 @@ async function planRoot(ctx, api, root, config, state, signal) {
 			const previous = delivered.get(key);
 			if (previous !== void 0 && previous.digest === digestOf(file.content)) continue;
 			if (previous === void 0 && walk.relativeDirectory !== ".") {
-				if (state.scopes.size >= MAX_DELIVERED_SCOPES) {
+				if (!strict && state.scopes.size >= MAX_DELIVERED_SCOPES) {
 					if (!scopeCapWarned) {
 						scopeCapWarned = true;
 						ctx.logger.warn("multi-root workspace: additional-root instruction scopes capped at %d", MAX_DELIVERED_SCOPES);
@@ -708,6 +831,18 @@ async function planRoot(ctx, api, root, config, state, signal) {
 		gone
 	};
 }
+/** Bounded provider read; an over-budget source never becomes a partial constraint. */
+async function readReviewInstruction(fs, target, signal, maxBytes) {
+	const chunks = [];
+	let bytes = 0;
+	for await (const chunk of await fs.streamText(target, signal)) {
+		signal.throwIfAborted();
+		bytes += Buffer.byteLength(chunk, "utf8");
+		if (bytes > maxBytes) throw new Error("review-context: instruction source budget exceeded");
+		chunks.push(chunk);
+	}
+	return chunks.join("");
+}
 /**
 * Walk from `cwd` up to `root` and read the instruction candidates it reports.
 *
@@ -734,9 +869,21 @@ async function planRoot(ctx, api, root, config, state, signal) {
 * @param cwd - the directory the walk starts from; always inside `root`.
 * @returns the directory read.
 */
-async function loadDirectory(fs, api, root, config, signal, cwd) {
-	const maxSourceBytes = config.maxSourceBytes ?? 32768;
+async function loadDirectory(fs, api, root, config, signal, cwd, strict = false) {
+	const configuredSourceBytes = config.maxSourceBytes ?? 32768;
+	if (strict && (!Number.isFinite(configuredSourceBytes) || configuredSourceBytes <= 0)) throw new Error("review-context: invalid source budget");
+	const maxSourceBytes = strict ? Math.min(configuredSourceBytes, DEFAULT_MAX_BYTES) : configuredSourceBytes;
 	let candidates;
+	if (strict) for (const name of [...config.instructionFileCandidates ?? ["AGENTS.md", "CLAUDE.md"], ...config.localInstructionFileCandidates ?? ["AGENTS.local.md", "CLAUDE.local.md"]]) {
+		if (basename(name) !== name || name === "." || name === "..") throw new Error("review-context: invalid instruction candidate");
+		signal.throwIfAborted();
+		try {
+			await stat(resolve(cwd, name));
+		} catch (error) {
+			const code = error.code;
+			if (code !== "ENOENT" && code !== "ENOTDIR") throw new Error("review-context: instruction probe failed");
+		}
+	}
 	try {
 		candidates = await api.discover({
 			cwd,
@@ -745,7 +892,8 @@ async function loadDirectory(fs, api, root, config, signal, cwd) {
 			...config.instructionFileCandidates === void 0 ? {} : { instructionFileCandidates: config.instructionFileCandidates },
 			...config.localInstructionFileCandidates === void 0 ? {} : { localInstructionFileCandidates: config.localInstructionFileCandidates }
 		});
-	} catch {
+	} catch (error) {
+		if (strict) throw error;
 		return {
 			candidates: [],
 			files: [],
@@ -762,15 +910,21 @@ async function loadDirectory(fs, api, root, config, signal, cwd) {
 			if (!isCanonicallyUnder(path, root)) continue;
 			const info = await fs.stat(target, signal);
 			if (info === void 0 || info.type !== "file") continue;
-			if (info.size !== void 0 && info.size > maxSourceBytes) continue;
-			const content = await fs.readText(target, signal);
+			if (info.size !== void 0 && info.size > maxSourceBytes) {
+				if (strict) throw new Error("review-context: instruction source budget exceeded");
+				continue;
+			}
+			const content = strict ? await readReviewInstruction(fs, target, signal, maxSourceBytes) : await fs.readText(target, signal);
+			if (strict && Buffer.byteLength(content, "utf8") > maxSourceBytes) throw new Error("review-context: instruction source budget exceeded");
+			if (strict && canonicalPath(candidate.absolutePath) !== path) throw new Error("review-context: instruction identity changed");
 			if (canonicalPath(candidate.absolutePath) !== path || !isCanonicallyUnder(path, root)) continue;
 			files.push({
 				...candidate,
 				displayPath: candidate.absolutePath,
 				content
 			});
-		} catch {
+		} catch (error) {
+			if (strict) throw error;
 			continue;
 		}
 	}

package/lib/instructions.js

@@ -1,2 +1,2 @@
-import { a as composeInstructionMessage, i as apply, n as DEFAULT_MAX_SOURCE_BYTES, o as inject, r as PLUGIN_SOURCE, s as touchedPathOfToolCall, t as DEFAULT_MAX_BYTES } from "./instructions-D19jRxN0.js";
+import { a as composeInstructionMessage, i as apply, n as DEFAULT_MAX_SOURCE_BYTES, o as inject, r as PLUGIN_SOURCE, s as touchedPathOfToolCall, t as DEFAULT_MAX_BYTES } from "./instructions-CGNS3H0H.js";
 export { DEFAULT_MAX_BYTES, DEFAULT_MAX_SOURCE_BYTES, PLUGIN_SOURCE, apply, composeInstructionMessage, inject, touchedPathOfToolCall };

package/lib/lsp.js

@@ -1,6 +1,6 @@
+import { t as wrapMethod } from "./method-wrapper-CFY3p3j2.js";
 import { t as aroundTool } from "./tool-context-CpgIFcCB.js";
 import { t as routeWorkspacePath } from "./workspace-routing-YPxaQ4V3.js";
-import { t as wrapMethod } from "./method-wrapper-CFY3p3j2.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/lsp.ts
 const inject = [

package/lib/{registry-DCxC5Lay.js → registry-BClm6wfh.js}

@@ -1,10 +1,10 @@
-import { i as isWindowsNetworkOrDevicePath } from "./windows-runner-contract-CEfmZzu0.js";
-import { a as classifyStoredRoots, d as reservedRootBoundary, f as resolveRootIndex, i as canonicalRoot, m as validateRootCandidate, n as additionalRootId, r as availableRoots, s as expandRootInput, t as RootValidationError, u as removeStatusAt } from "./roots-B-0l8mNG.js";
+import { i as isWindowsNetworkOrDevicePath } from "./windows-runner-contract-B5R2K3mM.js";
+import { a as classifyStoredRoots, d as reservedRootBoundary, f as resolveRootIndex, i as canonicalRoot, m as validateRootCandidate, n as additionalRootId, r as availableRoots, s as expandRootInput, t as RootValidationError, u as removeStatusAt } from "./roots-Ca_W1S9n.js";
 import { createRequire } from "node:module";
-import { Service } from "@deepseek-ai/cordis";
 import { closeSync, fstatSync, mkdirSync, openSync, statSync } from "node:fs";
-import { dirname, isAbsolute } from "node:path";
 import { randomUUID } from "node:crypto";
+import { dirname, isAbsolute } from "node:path";
+import { Service } from "@deepseek-ai/cordis";
 import { defineDomain, domainTable } from "@deepseek-ai/dsh-storage-domain";
 import { tryLockExclusive } from "@deepseek-ai/node-addon-system/flock";
 //#region src/compat/storage-zod.ts
@@ -123,7 +123,7 @@ var RegistryAuthorityLease = class RegistryAuthorityLease {
 			mode: 448
 		});
 		if (process.platform === "win32") {
-			const { acquireLockHandleWin32 } = await import("./registry-lease-win32-DTO6QpT9.js");
+			const { acquireLockHandleWin32 } = await import("./registry-lease-win32-DVTq9d4D.js");
 			let handle;
 			try {
 				handle = await acquireLockHandleWin32(leasePath);
@@ -175,7 +175,7 @@ var RegistryAuthorityLease = class RegistryAuthorityLease {
 		if (this.released) return;
 		this.released = true;
 		if (this.held.kind === "win32") {
-			const { releaseLockHandleWin32 } = await import("./registry-lease-win32-DTO6QpT9.js");
+			const { releaseLockHandleWin32 } = await import("./registry-lease-win32-DVTq9d4D.js");
 			await releaseLockHandleWin32(this.held.handle);
 			return;
 		}

package/lib/registry.js

@@ -1,2 +1,2 @@
-import { a as MultiRootRegistry, c as multiRootDomainSpec, i as MAX_ALIAS_LENGTH, n as DOMAIN_NAME, o as REGISTRY_CONTENDED_MESSAGE, r as MAX_ADDITIONAL_ROOTS_CEILING, s as TABLE_NAME, t as DEFAULT_MAX_ADDITIONAL_ROOTS } from "./registry-DCxC5Lay.js";
+import { a as MultiRootRegistry, c as multiRootDomainSpec, i as MAX_ALIAS_LENGTH, n as DOMAIN_NAME, o as REGISTRY_CONTENDED_MESSAGE, r as MAX_ADDITIONAL_ROOTS_CEILING, s as TABLE_NAME, t as DEFAULT_MAX_ADDITIONAL_ROOTS } from "./registry-BClm6wfh.js";
 export { DEFAULT_MAX_ADDITIONAL_ROOTS, DOMAIN_NAME, MAX_ADDITIONAL_ROOTS_CEILING, MAX_ALIAS_LENGTH, MultiRootRegistry, MultiRootRegistry as default, REGISTRY_CONTENDED_MESSAGE, TABLE_NAME, multiRootDomainSpec };

package/lib/review-context-D-ohSVmA.js

@@ -0,0 +1,98 @@
+import { t as effectiveDirectory } from "./session-directory-BLOstut1.js";
+import { s as touchedPathOfToolCall } from "./instructions-CGNS3H0H.js";
+import { l as isCanonicallyUnder } from "./roots-Ca_W1S9n.js";
+import { createHash } from "node:crypto";
+import { resolve } from "node:path";
+import { Service } from "@deepseek-ai/cordis";
+import { canonicalPath } from "@deepseek-ai/dsh-sandbox";
+//#region src/compat/auto-review-contract.ts
+/** The companion's joint support contract is deliberately narrower than the ordinary bundle. */
+const AUTO_REVIEW_RELEASE = "0.2.1-rc.2";
+function assertAutoReviewRelease(release) {
+	if (release !== "0.2.1-rc.2") throw new Error(`multi-root Auto Review requires exactly DSH ${AUTO_REVIEW_RELEASE}`);
+}
+//#endregion
+//#region src/compat/review-session.ts
+/** Fingerprint only the native instruction producer's visible authority data. */
+function nativeInstructionFingerprint(session) {
+	const rows = [];
+	for (const seq of session.surface.nodes) {
+		const event = session.eventAt(seq);
+		if (event?.type === "user/message" && event.data.source.kind === "agent-instructions") rows.push(event.data);
+	}
+	return createHash("sha256").update(JSON.stringify(rows)).digest("hex");
+}
+//#endregion
+//#region src/review-context.ts
+/** Read-only, current host context for the optional Auto Review companion. */
+/** All authority remains in the existing Registry/scope and instruction index. */
+var MultiRootReviewContext = class extends Service {
+	static inject = [
+		"multiRootCompat",
+		"multiRootProviders",
+		"multiRootScope",
+		"multiRootRegistry",
+		"multiRootInstructions",
+		"sandboxPolicy",
+		"workingDirectory",
+		"fs"
+	];
+	constructor(ctx) {
+		super(ctx, "multiRootReviewContext");
+	}
+	assertCompatible() {
+		assertAutoReviewRelease(this.ctx.multiRootCompat.release);
+	}
+	async build(exec, signal) {
+		signal.throwIfAborted();
+		const agent = exec.agent;
+		if (agent === void 0) throw new Error("review-context: missing session");
+		const policy = this.ctx.sandboxPolicy.resolve({ session: agent.session });
+		const primary = canonicalPath(policy.workspaceRoot);
+		if (agent.session.header.cwd !== void 0 && canonicalPath(agent.session.header.cwd) !== primary) throw new Error("review-context: inconsistent session origin");
+		await this.ctx.multiRootRegistry.refresh(primary);
+		signal.throwIfAborted();
+		const cwd = effectiveDirectory(this.ctx, agent.session);
+		if (cwd === void 0) throw new Error("review-context: missing effective cwd");
+		const scope = this.ctx.multiRootScope.previewForTool(policy, exec.name);
+		const environment = {
+			sessionOrigin: scope.primaryRoot,
+			effectiveCwd: cwd,
+			sandboxMode: policy.mode,
+			registryAuthority: scope.authority,
+			roots: scope.roots.map((root) => ({
+				path: root.path,
+				access: root.access,
+				effectiveWritable: scope.writableRoots.includes(root.path) && !scope.deniedRoots.some((deny) => isCanonicallyUnder(root.path, deny))
+			})),
+			writableRoots: scope.writableRoots,
+			deniedRoots: scope.deniedRoots,
+			...scope.protectedHome === void 0 ? {} : { protectedHome: scope.protectedHome },
+			ambientWrites: policy.mode === "danger-full-access" && scope.authority === "available",
+			readConfinement: false,
+			primaryRootWritable: policy.mode !== "read-only" && !scope.deniedRoots.some((deny) => isCanonicallyUnder(scope.primaryRoot, deny)),
+			writeBoundary: scope.authority === "unavailable" && policy.mode !== "read-only" ? "primary-root-only; no shared temp grants; explicit denies take precedence" : policy.mode === "danger-full-access" ? "ambient host writes minus explicit deny boundaries; membership is not an access allowlist" : policy.mode === "workspace-write" ? "primary root, effective writable additional roots and upstream host temp grants; explicit denies take precedence" : "only effective writable additional roots; explicit denies take precedence"
+		};
+		const path = touchedPathOfToolCall(exec.name, JSON.stringify(exec.arguments));
+		const target = path === void 0 ? void 0 : this.ctx.fs.processPath(await this.ctx.fs.resolve(resolve(cwd, path), { signal }));
+		const constraints = await this.ctx.multiRootInstructions.snapshot(agent, scope.authority === "available" ? scope.additionalRoots : [], target, signal);
+		signal.throwIfAborted();
+		const payload = {
+			schemaVersion: 1,
+			environment,
+			instructionProvenanceRoots: [.../* @__PURE__ */ new Set([...scope.additionalRoots, ...this.ctx.multiRootInstructions.knownRoots(agent.session)])],
+			constraints,
+			completeness: "complete"
+		};
+		if (Buffer.byteLength(JSON.stringify(payload), "utf8") > 65536) throw new Error("review-context: context budget exceeded");
+		return {
+			...payload,
+			fingerprint: createHash("sha256").update(JSON.stringify([payload, nativeInstructionFingerprint(agent.session)])).digest("hex")
+		};
+	}
+	async assertCurrent(exec, snapshot, signal) {
+		if ((await this.build(exec, signal)).fingerprint !== snapshot.fingerprint) throw new Error("review-context: snapshot changed; retry the tool call");
+	}
+};
+//#endregion
+export { assertAutoReviewRelease as n, MultiRootReviewContext as t };

package/lib/review-context.js

@@ -0,0 +1,2 @@
+import { t as MultiRootReviewContext } from "./review-context-D-ohSVmA.js";
+export { MultiRootReviewContext, MultiRootReviewContext as default };

package/lib/{roots-B-0l8mNG.js → roots-Ca_W1S9n.js}

@@ -1,4 +1,4 @@
-import { i as isWindowsNetworkOrDevicePath } from "./windows-runner-contract-CEfmZzu0.js";
+import { i as isWindowsNetworkOrDevicePath } from "./windows-runner-contract-B5R2K3mM.js";
 import { statSync } from "node:fs";
 import { isAbsolute, join, sep } from "node:path";
 import { canonicalPath } from "@deepseek-ai/dsh-sandbox";