@flowdular/sandbox 0.2.5 → 0.2.6

package/README.md

@@ -146,6 +146,12 @@ browser. An empty key field preserves the existing key only when the provider
 and destination are unchanged. The settings also let you clear the key or
 remove BYOK entirely.
 
+Provider conversations are scoped to the current specialist, module, task skill,
+write permissions, approved specification and model. A handoff that changes
+that scope starts a fresh conversation with the brief and recent messages;
+continuing the same scope resumes its existing conversation. Legacy shared
+conversations are replaced on the next turn.
+
 For a long CLI conversation, select **Fresh agent context** before sending the
 next message. It starts a new CLI conversation with the original brief and
 recent sandbox messages, preserving draft files, the approved specification
@@ -155,6 +161,10 @@ Claude activity is shown from the start of streamed response blocks, with
 completed reasoning and tool events following as they arrive. This does not
 reduce provider queue or inference time.
 
+Source-change logs group repeated saves into a short summary such as
+`Draft blog (96a64f10) · 4 files changed`. These report file changes, not a
+successful build. Use `--verbose` to see individual paths.
+
 ## Sessions
 
 The home dashboard lists the operator's ideas, current stages, recorded token

package/bin/flowdular-sandbox.mjs

@@ -2,6 +2,62 @@
 
 // ../sandbox/bin/flowdular-sandbox.mjs
 import "./register-types.mjs";
+
+// ../sandbox/src/server/reload-log.ts
+import { relative } from "node:path";
+function watchSandboxReloads(server, appRoot2, write, verbose = false) {
+  const groups = /* @__PURE__ */ new Map();
+  let timer;
+  let pendingFiles = 0;
+  const flush = () => {
+    if (timer) clearTimeout(timer);
+    timer = void 0;
+    for (const [label, files] of groups) {
+      if (verbose) {
+        for (const path of files) write(path);
+      } else {
+        write(
+          `${label} \xB7 ${files.size} ${files.size === 1 ? "file" : "files"} changed`
+        );
+      }
+    }
+    groups.clear();
+    pendingFiles = 0;
+  };
+  const changed = (event, path) => {
+    if (!["add", "change", "unlink"].includes(event)) return;
+    const normalized = path.replaceAll("\\", "/");
+    const draft = normalized.match(
+      /\/(?:\.flowdular|\.coreloom)\/sandbox\/sessions\/([^/]+)\/workspace\/modules\/([^/]+)\//
+    );
+    const local = relative(appRoot2, path);
+    if (!draft && (local === ".." || local.startsWith("../") || local.startsWith("..\\")))
+      return;
+    const label = draft ? `Draft ${draft[2]} (${draft[1].slice(0, 8)})` : "Sandbox";
+    const files = groups.get(label) ?? /* @__PURE__ */ new Set();
+    if (!files.has(path)) pendingFiles += 1;
+    files.add(path);
+    groups.set(label, files);
+    if (!timer) {
+      timer = setTimeout(flush, 750);
+      timer.unref?.();
+    }
+    if (pendingFiles >= 256) flush();
+  };
+  const dispose = () => {
+    if (timer) clearTimeout(timer);
+    timer = void 0;
+    groups.clear();
+    pendingFiles = 0;
+    server.watcher.off("all", changed);
+    server.httpServer?.off("close", dispose);
+  };
+  server.watcher.on("all", changed);
+  server.httpServer?.once("close", dispose);
+  return dispose;
+}
+
+// ../sandbox/bin/flowdular-sandbox.mjs
 import process2 from "node:process";
 import { realpathSync } from "node:fs";
 import { dirname, resolve } from "node:path";
@@ -168,18 +224,6 @@ function installOctaneConsoleBridge(verbose, useColor) {
     console.error = originalError;
   };
 }
-function watchReloads(server, root, useColor) {
-  let lastChange = "";
-  let lastChangeAt = 0;
-  server.watcher.on("change", (path) => {
-    const changed = path.startsWith(root) ? path.slice(root.length + 1) : path;
-    const now = Date.now();
-    if (changed === lastChange && now - lastChangeAt < 100) return;
-    lastChange = changed;
-    lastChangeAt = now;
-    console.log(formatDevEvent("reload", changed, useColor));
-  });
-}
 
 // ../sandbox/bin/flowdular-sandbox.mjs
 var appRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
@@ -362,7 +406,12 @@ async function startSandbox(argv = process2.argv.slice(2)) {
       ]
     ]
   });
-  watchReloads(server, appRoot, useColor);
+  watchSandboxReloads(
+    server,
+    appRoot,
+    (message) => console.log(formatDevEvent("reload", message, useColor)),
+    options.verbose
+  );
   const close = async () => {
     console.log(`
 ${formatDevEvent("process", "Sandbox stopped.", useColor)}`);

package/internal/coding-agent/src/roles/contract.ts

@@ -3,6 +3,7 @@ export const SANDBOX_AGENT_CONTRACT = `You are one coding specialist in a Flowdu
 
 Always-active invariants
 - Write only to the active module and the allowed Session paths. reference/ is read-only. Preserve unrelated work. Never edit platform composition or flowdular.json.
+- Implement only the portions of the selected skill that belong to your current role and Session write paths. Other sections describe your teammates' work; hand those parts off instead of editing their files.
 - Read the one task skill named under Session before editing. Do not load other SKILL.md files or the full skill catalog. Read only the owning code and references needed for this task; copy the example-module shape where relevant.
 - Batch independent reads and searches when the tools allow it. Reuse files already read in this conversation unless they changed. Search for a symbol in its owning package before widening the search. Do not read whole reference trees or node_modules to discover an API. If a required public API is absent, report that blocker rather than repeating broad searches.
 - Module implementation requires operator approval of the exact current spec hash. Agents never approve specs. Any later spec edit, request for changes, or added module invalidates the approval. Stop implementation until it is renewed.
@@ -40,7 +41,7 @@ export function composeSessionFacts(context: InstructionContext): string {
 		`- Module directory in this workspace: ${context.modulePath}`,
 		`- Session kind: ${context.sessionKind === 'new-module' ? 'new module; author its specification first, then wait for operator approval of the exact spec hash before implementation' : 'change to an existing module; author its spec delta first, then wait for operator approval of the exact spec hash before implementation'}`,
 		`- Blueprint: ${context.blueprint}`,
-		`- Paths you may write: ${context.allowedPaths.join(', ')}`,
+		`- Paths you may write: ${context.allowedPaths.length ? context.allowedPaths.join(', ') : 'none (read-only)'}`,
 	];
 	if (context.skill) {
 		lines.push(`- Task skill: reference/skills/${context.skill}/SKILL.md`);

package/internal/coding-agent/src/roles/registry.ts

@@ -145,12 +145,6 @@ export function composeInstruction(
 		'',
 		role.instruction,
 		'',
-		composeSessionFacts({
-			...context,
-			allowedPaths:
-				context.allowedPaths.length > 0
-					? context.allowedPaths
-					: role.allowedPaths,
-		}),
+		composeSessionFacts(context),
 	].join('\n');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@flowdular/sandbox",
-	"version": "0.2.5",
+	"version": "0.2.6",
 	"description": "The Flowdular sandbox: chat a change, build it behind the gates, preview it in the real application, deliver it as code.",
 	"license": "MIT",
 	"homepage": "https://github.com/flowdular/flowdular/tree/main/packages/sandbox#readme",

package/src/server/reload-log.ts

@@ -0,0 +1,68 @@
+import { relative } from 'node:path';
+import type { ViteDevServer } from 'vite';
+
+/* Watch notifications describe source changes, not successful preview builds.
+   Collect one bounded burst so atomic saves do not flood the terminal. */
+export function watchSandboxReloads(
+	server: Pick<ViteDevServer, 'watcher' | 'httpServer'>,
+	appRoot: string,
+	write: (message: string) => void,
+	verbose = false,
+): () => void {
+	const groups = new Map<string, Set<string>>();
+	let timer: ReturnType<typeof setTimeout> | undefined;
+	let pendingFiles = 0;
+	const flush = () => {
+		if (timer) clearTimeout(timer);
+		timer = undefined;
+		for (const [label, files] of groups) {
+			if (verbose) {
+				for (const path of files) write(path);
+			} else {
+				write(
+					`${label} · ${files.size} ${files.size === 1 ? 'file' : 'files'} changed`,
+				);
+			}
+		}
+		groups.clear();
+		pendingFiles = 0;
+	};
+	const changed = (event: string, path: string) => {
+		if (!['add', 'change', 'unlink'].includes(event)) return;
+		const normalized = path.replaceAll('\\', '/');
+		const draft = normalized.match(
+			/\/(?:\.flowdular|\.coreloom)\/sandbox\/sessions\/([^/]+)\/workspace\/modules\/([^/]+)\//,
+		);
+		const local = relative(appRoot, path);
+		if (
+			!draft &&
+			(local === '..' || local.startsWith('../') || local.startsWith('..\\'))
+		)
+			return;
+		const label = draft
+			? `Draft ${draft[2]} (${draft[1]!.slice(0, 8)})`
+			: 'Sandbox';
+		const files = groups.get(label) ?? new Set<string>();
+		if (!files.has(path)) pendingFiles += 1;
+		files.add(path);
+		groups.set(label, files);
+		// Fixed window, not a reset-on-every-event debounce: continuous writes
+		// remain visible and retained notifications cannot grow without a flush.
+		if (!timer) {
+			timer = setTimeout(flush, 750);
+			timer.unref?.();
+		}
+		if (pendingFiles >= 256) flush();
+	};
+	const dispose = () => {
+		if (timer) clearTimeout(timer);
+		timer = undefined;
+		groups.clear();
+		pendingFiles = 0;
+		server.watcher.off('all', changed);
+		server.httpServer?.off('close', dispose);
+	};
+	server.watcher.on('all', changed);
+	server.httpServer?.once('close', dispose);
+	return dispose;
+}

package/src/server/turns.ts

@@ -688,14 +688,31 @@ export async function* runTurn(
 	);
 
 	const history = historyFrom(await readChat(context.workspaceRoot, session));
+	// Provider conversations retain instructions and tool history. Reuse one only
+	// while its role, module, skill, write ceiling, specification and model match.
+	const resumePrefix = `${driverId}:scope:`;
+	const resumeKey =
+		resumePrefix +
+		createHash('sha256')
+			.update(
+				JSON.stringify([
+					instruction,
+					active.specHash ?? null,
+					session.model ?? context.configuration.driverModel,
+				]),
+			)
+			.digest('hex');
+	const previousKeys = Object.keys(session.resumeIds).filter(
+		(key) => key === driverId || key.startsWith(resumePrefix),
+	);
 	const resumeId = input.freshContext
 		? null
-		: (session.resumeIds[driverId] ?? null);
-	if (input.freshContext) {
+		: (session.resumeIds[resumeKey] ?? null);
+	if (input.freshContext || (!resumeId && previousKeys.length > 0)) {
 		yield await appendChatEntry(context.workspaceRoot, session, {
 			kind: 'system',
 			role: roleId,
-			text: 'Starting with fresh agent context. Draft files, approved specification and sandbox history are preserved; the agent receives the brief and recent messages.',
+			text: `Starting fresh agent context for ${role.name} in ${active.id} with the current task and write scope. Draft files, approved specification and sandbox history are preserved; the agent receives the brief and recent messages.`,
 		});
 	}
 	let nextResumeId = resumeId;
@@ -973,8 +990,9 @@ export async function* runTurn(
 	}
 
 	const resumeIds = { ...session.resumeIds };
-	if (nextResumeId) resumeIds[driverId] = nextResumeId;
-	else if (input.freshContext) delete resumeIds[driverId];
+	// Retain at most one conversation per driver, including after many handoffs.
+	for (const key of previousKeys) delete resumeIds[key];
+	if (nextResumeId) resumeIds[resumeKey] = nextResumeId;
 	const updated = await updateSession(context.workspaceRoot, session.id, {
 		resumeIds,
 		state: failed