@dsh-electron/dsh-plugin-multi-root-workspace 0.1.8 → 0.1.10

package/lib/index.js

@@ -1,13 +1,14 @@
-import { _ as classifyInstallation, c as agentPtyMarkerVerdict, d as HOST_SERVICE_PACKAGES, f as OPTIONAL_CORE_PACKAGES, g as SUPPORTED_DSH_RELEASES, h as RUNTIME_OPTIONAL_PACKAGES, i as assertSupportedInstallation, l as assertAgentPtyMarker, m as RUNNER_ANCHORED_PACKAGES, n as MultiRootCompatService, o as AGENT_PTY_MARKER, p as REQUIRED_CORE_PACKAGES, s as PtyMarkerContractError, t as DshCompatUnsupportedError, u as CORE_PACKAGES, v as compatEnforcement, y as readInstalledVersion } from "./compat-DR2LvmYZ.js";
-import { a as composeInstructionMessage, c as createInstructionMessage, l as instructionsApi, r as PLUGIN_SOURCE, t as DEFAULT_MAX_BYTES, u as renderInstructions } from "./instructions-D19jRxN0.js";
-import { n as widenConfined, t as MultiRootSandboxProvider } from "./sandbox-CVAcT_gy.js";
-import { a as classifyStoredRoots, c as indexedStatuses, i as canonicalRoot, l as isCanonicallyUnder, m as validateRootCandidate, n as additionalRootId, p as resolveRootRef, r as availableRoots, s as expandRootInput, t as RootValidationError, u as removeStatusAt } from "./roots-B-0l8mNG.js";
+import { i as renderInstructions, n as instructionsApi, t as createInstructionMessage } from "./llm-message-fYORacvh.js";
+import { a as composeInstructionMessage, r as PLUGIN_SOURCE, t as DEFAULT_MAX_BYTES } from "./instructions-MePoRigy.js";
+import { a as classifyStoredRoots, c as indexedStatuses, i as canonicalRoot, l as isCanonicallyUnder, m as validateRootCandidate, n as additionalRootId, p as resolveRootRef, r as availableRoots, s as expandRootInput, t as RootValidationError, u as removeStatusAt } from "./roots-Ca_W1S9n.js";
+import { _ as classifyInstallation, c as agentPtyMarkerVerdict, d as HOST_SERVICE_PACKAGES, f as OPTIONAL_CORE_PACKAGES, g as SUPPORTED_DSH_RELEASES, h as RUNTIME_OPTIONAL_PACKAGES, i as assertSupportedInstallation, l as assertAgentPtyMarker, m as RUNNER_ANCHORED_PACKAGES, n as MultiRootCompatService, o as AGENT_PTY_MARKER, p as REQUIRED_CORE_PACKAGES, s as PtyMarkerContractError, t as DshCompatUnsupportedError, u as CORE_PACKAGES, v as compatEnforcement, y as readInstalledVersion } from "./compat-D-MljsPV.js";
+import { n as widenConfined, t as MultiRootSandboxProvider } from "./sandbox-CXk5h-ct.js";
 import { MULTI_ROOT_PROVIDER_BRAND, MultiRootProviders, brandMultiRootProvider, isMultiRootProvider } from "./providers.js";
-import { t as MultiRootFileSystem } from "./fs-Nlp2AiRX.js";
-import { a as parseRevealedView, i as parsePanelCall, n as PANEL_ENDPOINTS, o as parseRootsView, t as PANEL_CHANNEL } from "./contract-DZ4zczDT.js";
+import { t as MultiRootFileSystem } from "./fs-BTXySwSG.js";
+import { a as parseRevealedView, i as parsePanelCall, n as PANEL_ENDPOINTS, o as parseRootsView, t as PANEL_CHANNEL } from "./contract-CStSEOcK.js";
 import { MultiRootScopeService, renderWorkspaceRootsContext, sanitizeAdditionalRoots } from "./scope.js";
-import { a as MultiRootRegistry, c as multiRootDomainSpec, i as MAX_ALIAS_LENGTH, l as RegistryAuthorityLease, n as DOMAIN_NAME, o as REGISTRY_CONTENDED_MESSAGE, r as MAX_ADDITIONAL_ROOTS_CEILING, t as DEFAULT_MAX_ADDITIONAL_ROOTS, u as RegistryLeaseContendedError } from "./registry-DCxC5Lay.js";
-import { a as renderRootsReport, c as revealArgv, i as parseFoldersCommand, o as resolvePanelPrimaryRoot, t as COMMAND_NAME } from "./command-CESuwlVt.js";
+import { a as MultiRootRegistry, c as multiRootDomainSpec, i as MAX_ALIAS_LENGTH, l as RegistryAuthorityLease, n as DOMAIN_NAME, o as REGISTRY_CONTENDED_MESSAGE, r as MAX_ADDITIONAL_ROOTS_CEILING, t as DEFAULT_MAX_ADDITIONAL_ROOTS, u as RegistryLeaseContendedError } from "./registry-KSsmU393.js";
+import { a as renderRootsReport, c as revealArgv, i as parseFoldersCommand, o as resolvePanelPrimaryRoot, t as COMMAND_NAME } from "./command-BGdz7VBH.js";
 //#region src/index.ts
 /**
 * Carrier plugin face for the bare-package-name loader row (see the module

package/lib/{instructions-D19jRxN0.js → instructions-MePoRigy.js}

@@ -1,216 +1,13 @@
 import { t as effectiveDirectory } from "./session-directory-BLOstut1.js";
+import { n as instructionsApi, t as createInstructionMessage } from "./llm-message-fYORacvh.js";
 import { t as aroundTool } from "./tool-context-CpgIFcCB.js";
-import { l as isCanonicallyUnder } from "./roots-B-0l8mNG.js";
-import { createRequire } from "node:module";
-import "@deepseek-ai/cordis";
-import { basename, dirname, isAbsolute, relative, resolve, sep } from "node:path";
+import { l as isCanonicallyUnder } from "./roots-Ca_W1S9n.js";
 import { createHash } from "node:crypto";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { basename, dirname, isAbsolute, relative, resolve, sep } from "node:path";
+import "@deepseek-ai/cordis";
 import { canonicalPath } from "@deepseek-ai/dsh-sandbox";
-//#region src/compat/agent-instructions.ts
-/**
-* Compatibility adapter for upstream's instruction discovery and rendering.
-*
-* `@deepseek-ai/dsh-agent-instructions` renamed its renderer between two
-* releases this plugin supports, without changing its signature:
-*
-* ```text
-* 0.1.5-rc.2     renderWorkspaceContext(files, options)   RenderedWorkspaceContext
-* 0.1.6-alpha.1  renderAgentInstructions(files, options)  RenderedAgentInstructions
-* ```
-*
-* `discoverBaselineInstructionFiles` kept both its name and its signature.
-*
-* All coupling to that package is concentrated here so the business layer
-* (`src/instructions.ts`) only ever calls {@link renderInstructions} and
-* {@link InstructionsApi.discover}. A future rename is one edit in this file,
-* not a version check sprinkled through the provider.
-*
-* The export is picked by NAME rather than by comparing the release string:
-* a structural probe also copes with upstream keeping both names for a release,
-* or reshaping within one, which a version comparison does not.
-*
-* The package is loaded LAZILY, and its genuine ABSENCE is reported as absence
-* rather than thrown. It is an optional peer: the default DSH bundle mounts it,
-* but a minimal composition legitimately has neither it nor an agent, and in
-* that case this plugin's instruction row must simply contribute nothing. A
-* package that is present but cannot be evaluated is a different answer, and
-* one this adapter reports instead of caching as absence.
-*
-* @module @dsh-electron/dsh-plugin-multi-root-workspace/compat/agent-instructions
-*/
-/** Raised when the package is present but carries neither renderer name. */
-var DshInstructionApiError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "DshInstructionApiError";
-	}
-};
-/** Resolution is attempted once per process; `null` records a confirmed absence. */
-let resolution;
-/**
-* Pick the renderer this release exports.
-* @param module - the loaded upstream module.
-* @returns the renderer.
-* @throws {DshInstructionApiError} when neither name is present.
-*/
-function selectRenderer(module) {
-	const render = module.renderAgentInstructions ?? module.renderWorkspaceContext;
-	if (render === void 0) throw new DshInstructionApiError("multi-root workspace: @deepseek-ai/dsh-agent-instructions exports neither renderAgentInstructions (0.1.6 and later) nor renderWorkspaceContext (0.1.5); the additional roots' instruction files cannot be rendered. Adapt src/compat/agent-instructions.ts to the installed release.");
-	return render;
-}
-/**
-* Adapt one loaded upstream module to {@link InstructionsApi}.
-* @param module - the loaded upstream module.
-* @returns the adapted surface.
-* @throws {DshInstructionApiError} when a function this plugin needs is absent.
-*/
-function adaptInstructionsModule(module) {
-	const discover = module.discoverBaselineInstructionFiles;
-	if (discover === void 0) throw new DshInstructionApiError("multi-root workspace: @deepseek-ai/dsh-agent-instructions does not export discoverBaselineInstructionFiles; adapt src/compat/agent-instructions.ts to the installed release.");
-	return {
-		discover: (options) => discover(options),
-		render: selectRenderer(module)
-	};
-}
-/**
-* Whether one package is installed at all, judged WITHOUT evaluating it.
-*
-* This is what separates "the optional peer is absent" from "the optional peer
-* is installed but its evaluation fails" (a missing transitive dependency, a
-* broken build). Only a genuine resolvability failure counts as absence: a
-* resolution that fails for another reason (an `exports` map with no `require`
-* condition, say) leaves the verdict to the `import()` below, which is the
-* authority on whether the module can actually be loaded.
-* @param specifier - the bare package specifier to probe.
-* @returns whether the package resolves from this module.
-*/
-function isPackageInstalled(specifier) {
-	try {
-		createRequire(import.meta.url).resolve(specifier);
-		return true;
-	} catch (error) {
-		const code = error?.code;
-		return code !== "MODULE_NOT_FOUND" && code !== "ERR_MODULE_NOT_FOUND";
-	}
-}
-/**
-* Load and adapt the upstream instruction surface, once.
-*
-* @returns the adapted surface, or `undefined` when the package is not
-*   installed. A package that IS installed but exports neither renderer throws
-*   instead: that is a compatibility break to fix, not an optional seam. So
-*   does one that is installed but cannot be evaluated at all — a missing
-*   transitive dependency, a broken build — because reporting that as absence
-*   would drop every additional root's instructions for the rest of the
-*   process. See {@link isPackageInstalled} for how the two are told apart.
-*/
-async function instructionsApi() {
-	resolution ??= (async () => {
-		if (!isPackageInstalled("@deepseek-ai/dsh-agent-instructions")) return null;
-		return adaptInstructionsModule(await import("@deepseek-ai/dsh-agent-instructions"));
-	})();
-	return await resolution ?? void 0;
-}
-/**
-* Render loaded instruction files within a byte budget, through whichever
-* renderer the installed release exports.
-*
-* This is the only rendering entry point the business layer uses.
-* @param files - loaded files, ordered broadest to most specific.
-* @param options - the byte budget.
-* @returns the rendered text and its budget diagnostics.
-* @throws {DshInstructionApiError} when no usable renderer is installed.
-*/
-async function renderInstructions(files, options) {
-	const api = await instructionsApi();
-	if (api === void 0) throw new DshInstructionApiError("multi-root workspace: @deepseek-ai/dsh-agent-instructions is not installed, so instruction files cannot be rendered. Check for its presence with instructionsApi() before calling renderInstructions().");
-	return api.render(files, options);
-}
-//#endregion
-//#region src/compat/llm-message.ts
-/**
-* This plugin's own producer kind.
-*
-* Session format 4 rejects the shared `kind: 'plugin'` (`format v4 message
-* requires a producer-owned source kind`). The kind is ours, not
-* `agent-instructions`: upstream treats that kind's `changes` array as its
-* own reconciliation authority.
-*/
-const PRODUCER_SOURCE_KIND = "multi-root-workspace";
-/**
-* The first session format whose encoder refuses `kind: 'plugin'`.
-* Earlier formats declare that kind on `MessageSourceMap` and require it.
-*/
-const PRODUCER_OWNED_FORMAT = 4;
-/**
-* Which source kind the installed session format will persist.
-* @param formatVersion - `SESSION_FORMAT_VERSION`, when the session package is installed.
-* @returns `plugin` through format 3, and this plugin's own kind from format 4 on.
-*/
-function instructionSourceKind(formatVersion) {
-	return formatVersion !== void 0 && formatVersion >= PRODUCER_OWNED_FORMAT ? PRODUCER_SOURCE_KIND : "plugin";
-}
-/**
-* The installed session format, when that package is present.
-*
-* A composition that never persists a session can omit the package; format 3
-* is then the spelling that still declares `kind: 'plugin'`. Any other failure
-* is a broken install and must surface.
-* @returns the format version, or `undefined` when the package is not installed.
-*/
-async function installedFormatVersion() {
-	try {
-		const session = await import("@deepseek-ai/dsh-session");
-		return typeof session.SESSION_FORMAT_VERSION === "number" ? session.SESSION_FORMAT_VERSION : void 0;
-	} catch (error) {
-		const code = error.code;
-		if (code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND") return void 0;
-		throw error;
-	}
-}
-/**
-* Build one user-role instruction message.
-*
-* Format 3 and earlier: `{ kind: 'plugin', plugin, form: 'instructions' }`.
-* Format 4 and later: `{ kind: 'multi-root-workspace', plugin, form: 'instructions' }`.
-* @param input - the body and the plugin attribution.
-* @returns the frozen message upstream's helper produced.
-* @throws {Error} when the optional peer is absent: a step that has instruction
-*   text to deliver cannot be served without it, and staying silent would drop
-*   user-visible context instead of reporting a misconfigured composition.
-*/
-async function createInstructionMessage(input) {
-	let module;
-	try {
-		module = await import("@deepseek-ai/dsh-llm");
-	} catch (error) {
-		throw new Error(`multi-root workspace: @deepseek-ai/dsh-llm is not installed, so additional roots' instruction files cannot be delivered as messages (${error instanceof Error ? error.message : String(error)}).`);
-	}
-	const create = module.createUserMessage;
-	return create({
-		content: [{
-			type: "text",
-			text: input.text
-		}],
-		source: instructionSource(input.plugin, await installedFormatVersion())
-	});
-}
-/** The source object the installed format will persist. */
-function instructionSource(plugin, formatVersion) {
-	const kind = instructionSourceKind(formatVersion);
-	if (kind === "plugin") return {
-		kind,
-		plugin,
-		form: "instructions"
-	};
-	return {
-		kind,
-		plugin,
-		form: "instructions"
-	};
-}
-//#endregion
+import { stat } from "node:fs/promises";
+import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/compat/tool-result.ts
 /**
 * Whether a tool-result message reports failure, on every supported release.
@@ -224,6 +21,95 @@ function toolResultFailed(message) {
 	return block.isError === true;
 }
 //#endregion
+//#region src/compat/instruction-activity.ts
+/** Public durable file activity, normalized without loading an optional tool runtime. */
+function ptcFileActivity(event) {
+	const row = event;
+	const data = row.data;
+	if (typeof data?.subCallId !== "string") return void 0;
+	const id = `ptc:${data.subCallId}`;
+	if (row.type === "tool/ptc-dispatch-start" && typeof data.name === "string") {
+		const args = JSON.stringify(data.arguments);
+		if (args === void 0) throw new Error("review-context: incomplete durable PTC action");
+		return {
+			kind: "start",
+			id,
+			name: data.name,
+			arguments: args
+		};
+	}
+	if (row.type === "tool/ptc-dispatch") return {
+		kind: "end",
+		id,
+		failed: data.isError !== false || data.error !== void 0
+	};
+}
+/** Rebuild read-only discovery candidates from successful durable activity after resume. */
+function replayedInstructionTargets(events, origin) {
+	let cwd = origin;
+	const pending = /* @__PURE__ */ new Map();
+	const paths = /* @__PURE__ */ new Set();
+	for (const raw of events) {
+		const event = raw;
+		if (event.type === "working-directory/change" && typeof event.data.cwd === "string") {
+			cwd = event.data.cwd;
+			for (const call of pending.values()) call.directories.add(cwd);
+			continue;
+		}
+		const ptc = ptcFileActivity(event);
+		if (event.type === "tool/call" || ptc?.kind === "start") {
+			const call = ptc?.kind === "start" ? {
+				callId: ptc.id,
+				name: ptc.name,
+				arguments: ptc.arguments
+			} : event.data;
+			if (typeof call.callId !== "string" || typeof call.name !== "string" || typeof call.arguments !== "string") throw new Error("review-context: incomplete durable file activity");
+			pending.set(call.callId, {
+				name: call.name,
+				arguments: call.arguments,
+				directories: new Set(cwd === void 0 ? [] : [cwd])
+			});
+			if (pending.size > 512) throw new Error("review-context: durable activity index exceeded");
+			continue;
+		}
+		if (event.type !== "tool/result" && ptc?.kind !== "end") continue;
+		const message = event.data.message;
+		const id = ptc?.kind === "end" ? ptc.id : message?.source?.callId;
+		if (typeof id !== "string") throw new Error("review-context: incomplete durable result");
+		const call = pending.get(id);
+		pending.delete(id);
+		if (call === void 0) continue;
+		if (ptc?.kind === "end" ? ptc.failed : event.data.error !== void 0 || toolResultFailed(message ?? {})) continue;
+		const path = touchedPathOfToolCall(call.name, call.arguments);
+		if (path === void 0) continue;
+		if (isAbsolute(path)) paths.add(path);
+		else {
+			if (call.directories.size === 0) throw new Error("review-context: durable file activity has no cwd");
+			for (const directory of call.directories) paths.add(resolve(directory, path));
+		}
+		if (paths.size > 512) throw new Error("review-context: durable work index exceeded");
+	}
+	return [...paths];
+}
+/** fs tools whose success touches the file at their `file_path` argument. */
+const FILE_TOUCH_TOOL_NAMES = {
+	read: true,
+	write: true,
+	edit: true
+};
+/** One explicit fs-tool target, shared with live touch capture. */
+function touchedPathOfToolCall(name, argumentsJson) {
+	if (FILE_TOUCH_TOOL_NAMES[name] !== true) return void 0;
+	let parsed;
+	try {
+		parsed = JSON.parse(argumentsJson);
+	} catch {
+		return;
+	}
+	if (typeof parsed !== "object" || parsed === null || !("file_path" in parsed) || typeof parsed.file_path !== "string") return void 0;
+	return parsed.file_path.trim() || void 0;
+}
+//#endregion
 //#region src/compat/instruction-overlap.ts
 /** Recognize files already represented by the native instruction baseline in this step. */
 function nativeInstructionCopies(messages, cwd) {
@@ -327,12 +213,6 @@ const PLUGIN_SOURCE = "@dsh-electron/dsh-plugin-multi-root-workspace";
 const DEFAULT_MAX_BYTES = 65536;
 /** Largest instruction file this row will read; larger files are ignored. */
 const DEFAULT_MAX_SOURCE_BYTES = 32768;
-/** Tools whose SUCCESS makes the directories on the path to the file relevant. */
-const FILE_TOUCH_TOOL_NAMES = {
-	read: true,
-	write: true,
-	edit: true
-};
 /** Cap on unanswered `tool/call` records remembered per session. */
 const MAX_PENDING_CALLS = 128;
 /** Cap on touched paths remembered per session; beyond it, touches are dropped. */
@@ -362,31 +242,6 @@ function relativeDirectoryOf(root, directory) {
 	return suffix.length === 0 ? "." : suffix;
 }
 /**
-* The path one RAW tool call touched.
-*
-* `arguments` is the model-produced JSON string, so the path is only known after
-* parsing it; a call that names no `file_path`, or is not one of the tools whose
-* success makes a directory relevant, touched nothing this row cares about.
-* @param name - the tool name the model called.
-* @param argumentsJson - the tool call's raw arguments, exactly as produced.
-* @returns the trimmed absolute-or-relative path, or `undefined`.
-*/
-function touchedPathOfToolCall(name, argumentsJson) {
-	if (FILE_TOUCH_TOOL_NAMES[name] !== true) return void 0;
-	let parsed;
-	try {
-		parsed = JSON.parse(argumentsJson);
-	} catch {
-		return;
-	}
-	if (typeof parsed !== "object" || parsed === null) return void 0;
-	if (!("file_path" in parsed)) return void 0;
-	const path = parsed.file_path;
-	if (typeof path !== "string") return void 0;
-	const trimmed = path.trim();
-	return trimmed.length > 0 ? trimmed : void 0;
-}
-/**
 * The directory a touched path's instructions would live in.
 *
 * Tool arguments are the model's raw input, so a relative `file_path` is
@@ -460,7 +315,9 @@ function apply(ctx, config = {}) {
 		if (existing !== void 0) return existing;
 		const created = {
 			scopes: /* @__PURE__ */ new Map(),
-			touched: /* @__PURE__ */ new Set()
+			provenanceRoots: /* @__PURE__ */ new Set(),
+			touched: /* @__PURE__ */ new Set(),
+			worked: /* @__PURE__ */ new Set()
 		};
 		states.set(session, created);
 		return created;
@@ -468,36 +325,88 @@ function apply(ctx, config = {}) {
 	ctx.on("session/event", (session, event) => {
 		const pendingCalls = callsBySession.get(session) ?? /* @__PURE__ */ new Map();
 		callsBySession.set(session, pendingCalls);
-		if (event.type === "tool/call") {
+		const ptc = ptcFileActivity(event);
+		if (event.type === "tool/call" || ptc?.kind === "start") {
 			if (pendingCalls.size >= MAX_PENDING_CALLS) {
 				const oldest = pendingCalls.keys().next();
 				if (!oldest.done) pendingCalls.delete(oldest.value);
 			}
-			pendingCalls.set(event.data.callId, {
-				name: event.data.name,
-				arguments: event.data.arguments,
+			const call = ptc?.kind === "start" ? {
+				callId: ptc.id,
+				name: ptc.name,
+				arguments: ptc.arguments
+			} : event.type === "tool/call" ? event.data : void 0;
+			if (call !== void 0) pendingCalls.set(call.callId, {
+				name: call.name,
+				arguments: call.arguments,
 				cwd: effectiveDirectory(ctx, session)
 			});
 			return;
 		}
-		if (event.type !== "tool/result") return;
-		const callId = event.data.message.source.callId;
+		if (event.type !== "tool/result" && ptc?.kind !== "end") return;
+		const callId = ptc?.kind === "end" ? ptc.id : event.type === "tool/result" ? event.data.message.source.callId : "";
 		const call = pendingCalls.get(callId);
 		pendingCalls.delete(callId);
 		if (call === void 0) return;
-		if (event.data.error !== void 0 || toolResultFailed(event.data.message)) return;
+		if (ptc?.kind === "end" ? ptc.failed : event.type === "tool/result" && (event.data.error !== void 0 || toolResultFailed(event.data.message))) return;
 		const path = call.observedPath ?? touchedPathOfToolCall(call.name, call.arguments);
 		if (path === void 0) return;
 		const state = stateOf(session);
+		const absolute = isAbsolute(path) ? path : call.cwd === void 0 ? void 0 : resolve(call.cwd, path);
+		if (absolute !== void 0) {
+			if (state.worked.size >= MAX_DELIVERED_SCOPES && !state.worked.has(absolute)) state.overflow = true;
+			else state.worked.add(absolute);
+		}
 		if (state.touched.size >= MAX_TOUCHED_PATHS) return;
 		if (isAbsolute(path)) state.touched.add(path);
 		else if (call.cwd !== void 0) state.touched.add(resolve(call.cwd, path));
 	});
 	ctx.inject(["fs"], (scope) => {
+		scope.provide("multiRootInstructions", {
+			knownRoots(session) {
+				return [...states.get(session)?.provenanceRoots ?? []];
+			},
+			async snapshot(agent, roots, target, signal) {
+				signal.throwIfAborted();
+				if (roots.length === 0) return [];
+				const api = await instructionsApi();
+				if (api === void 0) throw new Error("review-context: instruction discovery unavailable");
+				const existing = states.get(agent.session);
+				if (existing?.overflow) throw new Error("review-context: successful work index exceeded");
+				const state = {
+					scopes: new Map([...existing?.scopes ?? []].map(([key, value]) => [key, {
+						...value,
+						digest: void 0
+					}])),
+					provenanceRoots: new Set(existing?.provenanceRoots),
+					touched: /* @__PURE__ */ new Set([...existing?.touched ?? [], ...existing?.worked ?? []]),
+					worked: /* @__PURE__ */ new Set()
+				};
+				for (const path of replayedInstructionTargets(agent.session.snapshotEvents(), agent.session.header.cwd)) state.touched.add(path);
+				if (target !== void 0) state.touched.add(target);
+				const cwd = effectiveDirectory(scope, agent.session);
+				const reviewCwd = cwd === void 0 ? void 0 : canonicalPath(cwd);
+				const result = [];
+				for (const root of roots) {
+					const plan = await planRoot(scope, api, root, config, state, signal, true, reviewCwd);
+					for (const { file } of plan.deliveries) result.push({
+						root,
+						path: file.absolutePath,
+						relativeDirectory: relativeDirectoryOf(root, dirname(file.absolutePath)),
+						digest: digestOf(file.content),
+						text: file.content
+					});
+				}
+				signal.throwIfAborted();
+				if (Buffer.byteLength(JSON.stringify(result), "utf8") > maxBytes) throw new Error("review-context: instruction budget exceeded");
+				return result;
+			}
+		});
 		scope.on("fs/observed", (target, _observation, actor) => {
 			const exec = executions.getStore();
 			if (exec?.agent === void 0 || FILE_TOUCH_TOOL_NAMES[exec.name] !== true || actor !== exec) return;
-			const call = callsBySession.get(exec.agent.session)?.get(exec.callId);
+			const calls = callsBySession.get(exec.agent.session);
+			const call = calls?.get(exec.callId) ?? calls?.get(`ptc:${exec.callId}`);
 			if (call !== void 0) call.observedPath = scope.fs.processPath(target);
 		});
 		scope.on("agent/pre-step", async ({ agent, messages, signal }, next) => {
@@ -531,7 +440,9 @@ async function pending(ctx, states, agent, config, maxBytes, signal, messages) {
 	const session = agent.session;
 	const state = states.get(session) ?? {
 		scopes: /* @__PURE__ */ new Map(),
-		touched: /* @__PURE__ */ new Set()
+		provenanceRoots: /* @__PURE__ */ new Set(),
+		touched: /* @__PURE__ */ new Set(),
+		worked: /* @__PURE__ */ new Set()
 	};
 	states.set(session, state);
 	const evaluatedTouches = new Set(state.touched);
@@ -610,7 +521,10 @@ async function pending(ctx, states, agent, config, maxBytes, signal, messages) {
 	if (text !== void 0 || liveUpdates.length > 0) {
 		for (const root of revoked) for (const [key, entry] of state.scopes) if (entry.root === root) state.scopes.delete(key);
 		for (const entry of gone) state.scopes.delete(entry.key);
-		for (const entry of liveUpdates) state.scopes.set(entry.key, entry.scope);
+		for (const entry of liveUpdates) {
+			state.scopes.set(entry.key, entry.scope);
+			state.provenanceRoots.add(entry.scope.root);
+		}
 	}
 	return message;
 }
@@ -626,15 +540,19 @@ async function pending(ctx, states, agent, config, maxBytes, signal, messages) {
 * of that directory's ancestors up to the root, because discovery reports an
 * intermediate directory's file but only the exact directory's candidates
 * survive the filter below.
+* A strict review can also seed its effective cwd chain without recording a
+* successful touch; ordinary pre-step delivery never supplies that seed.
 * @param ctx - the row's context, for `fs` and the logger.
 * @param api - the adapted upstream instruction surface.
 * @param root - the canonical additional root.
 * @param config - the row's configuration.
 * @param state - the session's delivery state.
 * @param signal - the turn's cancellation signal.
+* @param strict - fail on incomplete review discovery instead of deferring delivery.
+* @param reviewCwd - review-only directory seed; never a successful touch.
 * @returns the files to send and the deliveries to withdraw.
 */
-async function planRoot(ctx, api, root, config, state, signal) {
+async function planRoot(ctx, api, root, config, state, signal, strict = false, reviewCwd) {
 	const delivered = /* @__PURE__ */ new Map();
 	for (const [key, entry] of state.scopes) if (entry.root === root) delivered.set(key, entry);
 	const dirs = /* @__PURE__ */ new Set([root]);
@@ -642,8 +560,9 @@ async function planRoot(ctx, api, root, config, state, signal) {
 		const dir = dirname(entry.path);
 		if (dir !== root) dirs.add(dir);
 	}
-	for (const touched of state.touched) {
-		const parent = parentDirectoryOf(touched);
+	const parents = [...state.touched].map(parentDirectoryOf);
+	if (reviewCwd !== void 0) parents.push(reviewCwd);
+	for (const parent of parents) {
 		if (parent === void 0 || !isCanonicallyUnder(parent, root)) continue;
 		let dir = parent;
 		for (;;) {
@@ -659,7 +578,7 @@ async function planRoot(ctx, api, root, config, state, signal) {
 		signal.throwIfAborted();
 		walks.push({
 			relativeDirectory: relativeDirectoryOf(root, dir),
-			read: await loadDirectory(ctx.fs, api, root, config, signal, dir)
+			read: await loadDirectory(ctx.fs, api, root, config, signal, dir, strict)
 		});
 	}
 	walks.sort((left, right) => left.relativeDirectory.split(sep).length - right.relativeDirectory.split(sep).length || (left.relativeDirectory < right.relativeDirectory ? -1 : left.relativeDirectory > right.relativeDirectory ? 1 : 0));
@@ -678,7 +597,7 @@ async function planRoot(ctx, api, root, config, state, signal) {
 			const previous = delivered.get(key);
 			if (previous !== void 0 && previous.digest === digestOf(file.content)) continue;
 			if (previous === void 0 && walk.relativeDirectory !== ".") {
-				if (state.scopes.size >= MAX_DELIVERED_SCOPES) {
+				if (!strict && state.scopes.size >= MAX_DELIVERED_SCOPES) {
 					if (!scopeCapWarned) {
 						scopeCapWarned = true;
 						ctx.logger.warn("multi-root workspace: additional-root instruction scopes capped at %d", MAX_DELIVERED_SCOPES);
@@ -708,6 +627,18 @@ async function planRoot(ctx, api, root, config, state, signal) {
 		gone
 	};
 }
+/** Bounded provider read; an over-budget source never becomes a partial constraint. */
+async function readReviewInstruction(fs, target, signal, maxBytes) {
+	const chunks = [];
+	let bytes = 0;
+	for await (const chunk of await fs.streamText(target, signal)) {
+		signal.throwIfAborted();
+		bytes += Buffer.byteLength(chunk, "utf8");
+		if (bytes > maxBytes) throw new Error("review-context: instruction source budget exceeded");
+		chunks.push(chunk);
+	}
+	return chunks.join("");
+}
 /**
 * Walk from `cwd` up to `root` and read the instruction candidates it reports.
 *
@@ -734,9 +665,21 @@ async function planRoot(ctx, api, root, config, state, signal) {
 * @param cwd - the directory the walk starts from; always inside `root`.
 * @returns the directory read.
 */
-async function loadDirectory(fs, api, root, config, signal, cwd) {
-	const maxSourceBytes = config.maxSourceBytes ?? 32768;
+async function loadDirectory(fs, api, root, config, signal, cwd, strict = false) {
+	const configuredSourceBytes = config.maxSourceBytes ?? 32768;
+	if (strict && (!Number.isFinite(configuredSourceBytes) || configuredSourceBytes <= 0)) throw new Error("review-context: invalid source budget");
+	const maxSourceBytes = strict ? Math.min(configuredSourceBytes, DEFAULT_MAX_BYTES) : configuredSourceBytes;
 	let candidates;
+	if (strict) for (const name of [...config.instructionFileCandidates ?? ["AGENTS.md", "CLAUDE.md"], ...config.localInstructionFileCandidates ?? ["AGENTS.local.md", "CLAUDE.local.md"]]) {
+		if (basename(name) !== name || name === "." || name === "..") throw new Error("review-context: invalid instruction candidate");
+		signal.throwIfAborted();
+		try {
+			await stat(resolve(cwd, name));
+		} catch (error) {
+			const code = error.code;
+			if (code !== "ENOENT" && code !== "ENOTDIR") throw new Error("review-context: instruction probe failed");
+		}
+	}
 	try {
 		candidates = await api.discover({
 			cwd,
@@ -745,7 +688,8 @@ async function loadDirectory(fs, api, root, config, signal, cwd) {
 			...config.instructionFileCandidates === void 0 ? {} : { instructionFileCandidates: config.instructionFileCandidates },
 			...config.localInstructionFileCandidates === void 0 ? {} : { localInstructionFileCandidates: config.localInstructionFileCandidates }
 		});
-	} catch {
+	} catch (error) {
+		if (strict) throw error;
 		return {
 			candidates: [],
 			files: [],
@@ -762,15 +706,21 @@ async function loadDirectory(fs, api, root, config, signal, cwd) {
 			if (!isCanonicallyUnder(path, root)) continue;
 			const info = await fs.stat(target, signal);
 			if (info === void 0 || info.type !== "file") continue;
-			if (info.size !== void 0 && info.size > maxSourceBytes) continue;
-			const content = await fs.readText(target, signal);
+			if (info.size !== void 0 && info.size > maxSourceBytes) {
+				if (strict) throw new Error("review-context: instruction source budget exceeded");
+				continue;
+			}
+			const content = strict ? await readReviewInstruction(fs, target, signal, maxSourceBytes) : await fs.readText(target, signal);
+			if (strict && Buffer.byteLength(content, "utf8") > maxSourceBytes) throw new Error("review-context: instruction source budget exceeded");
+			if (strict && canonicalPath(candidate.absolutePath) !== path) throw new Error("review-context: instruction identity changed");
 			if (canonicalPath(candidate.absolutePath) !== path || !isCanonicallyUnder(path, root)) continue;
 			files.push({
 				...candidate,
 				displayPath: candidate.absolutePath,
 				content
 			});
-		} catch {
+		} catch (error) {
+			if (strict) throw error;
 			continue;
 		}
 	}
@@ -781,4 +731,4 @@ async function loadDirectory(fs, api, root, config, signal, cwd) {
 	};
 }
 //#endregion
-export { composeInstructionMessage as a, createInstructionMessage as c, apply as i, instructionsApi as l, DEFAULT_MAX_SOURCE_BYTES as n, inject as o, PLUGIN_SOURCE as r, touchedPathOfToolCall as s, DEFAULT_MAX_BYTES as t, renderInstructions as u };
+export { composeInstructionMessage as a, apply as i, DEFAULT_MAX_SOURCE_BYTES as n, inject as o, PLUGIN_SOURCE as r, touchedPathOfToolCall as s, DEFAULT_MAX_BYTES as t };

package/lib/instructions.js

@@ -1,2 +1,2 @@
-import { a as composeInstructionMessage, i as apply, n as DEFAULT_MAX_SOURCE_BYTES, o as inject, r as PLUGIN_SOURCE, s as touchedPathOfToolCall, t as DEFAULT_MAX_BYTES } from "./instructions-D19jRxN0.js";
+import { a as composeInstructionMessage, i as apply, n as DEFAULT_MAX_SOURCE_BYTES, o as inject, r as PLUGIN_SOURCE, s as touchedPathOfToolCall, t as DEFAULT_MAX_BYTES } from "./instructions-MePoRigy.js";
 export { DEFAULT_MAX_BYTES, DEFAULT_MAX_SOURCE_BYTES, PLUGIN_SOURCE, apply, composeInstructionMessage, inject, touchedPathOfToolCall };