@greppleai/grip 0.1.5 → 0.1.6

package/dist/core/agent-session.js

@@ -383,127 +383,105 @@ function extractJsonCandidates(text) {
 // ============================================================================
 // AgentSession Class
 // ============================================================================
+function isWithinSandboxMount(directory, root, flavor) {
+    const paths = flavor === "windows" ? win32 : posix;
+    const relativePath = paths.relative(root, directory);
+    return relativePath !== ".." && !relativePath.startsWith(`..${paths.sep}`) && !paths.isAbsolute(relativePath);
+}
 export class AgentSession {
-    agent;
-    session;
-    settingsManager;
-    _scopedModels;
-    // Event subscription state
-    _unsubscribeAgent;
-    _eventListeners = [];
-    _disposePromise;
-    _shutdownPreparationPromise;
-    _disposed = false;
-    /** Tracks pending steering messages for UI display. Removed when delivered. */
-    _steeringMessages = [];
-    /** Tracks pending follow-up messages for UI display. Removed when delivered. */
-    _followUpMessages = [];
-    /** Messages queued to be included with the next user prompt as context ("asides"). */
-    _pendingNextTurnMessages = [];
-    // Compaction state
-    _compactionInFlight;
-    _compactionAbortController = undefined;
-    _autoCompactionAbortController = undefined;
-    _extensionCompactionQueue = [];
-    _extensionCompactionTimer = undefined;
-    _extensionCompactionActivity;
-    _extensionCompactionRunning = false;
-    _overflowRecoveryAttempted = false;
-    // Branch summarization state
-    _branchSummaryAbortController = undefined;
-    // Retry state
-    _retryAbortController = undefined;
-    _retryAttempt = 0;
-    // Bash execution state
-    _bashAbortControllers = new Set();
-    _pendingBashMessages = [];
-    // Extension system
-    _extensionRunner;
-    _extensionLspOwnership = new WeakMap();
-    _turnIndex = 0;
-    _resourceLoader;
-    _customTools;
-    _baseToolDefinitions = new Map();
-    _workspaceToolHost;
-    _retiredWorkspaceToolHosts = [];
-    _cwd;
-    _extensionRunnerRef;
-    _initialActiveToolNames;
-    _enableLspTools;
-    _allowedToolNames;
-    _excludedToolNames;
-    _baseToolsOverride;
-    _toolOperations;
-    _runtimeToolOperations;
-    _subagentRunner;
-    _subagentRunRegistry;
-    _subagentConfigRegistry;
-    _trustProjectAgents;
-    _localResourceToolOperations;
-    _sandboxToolOperations;
-    _preSandboxToolOperations;
-    _lspRuntimeState;
-    _lspConfiguration;
-    _lspConnectionFactories;
-    _resolveLspConfiguration;
-    _onLspConfigurationDiagnostics;
-    _runtimeLifecycleQueue = Promise.resolve();
-    _sandboxTransitionQueue = Promise.resolve();
-    _runtimeLifecycleContext = new AsyncLocalStorage();
-    _activities = new Set();
-    _activityGeneration = 0;
-    _activeCycle = false;
-    _settlementScheduled = false;
-    _settlementRunning = false;
-    _idleWaiters = new Set();
-    _barrierOwnerContext = new AsyncLocalStorage();
-    _sessionStartEvent;
-    _extensionUIContext;
-    _extensionCommandContextActions;
-    _extensionAbortHandler;
-    _extensionShutdownHandler;
-    _extensionErrorListener;
-    _extensionErrorUnsubscriber;
-    _loadedHooks;
-    _resolveHooks;
-    _hooksEnabled = true;
-    _onHookDiagnostic;
-    _hookExecutionListeners = new Set();
-    _hookExecutionActivityListeners = new Set();
-    _hookRunOptions;
-    _hookAbortController = new AbortController();
-    _hookSessionStartPromise;
-    _hookSessionStartTerminationReason;
-    _pendingHookSessionStartContext;
-    _hookSessionEnded = false;
-    _activePromptId;
-    _stopHookContinuations = 0;
-    _stopHookProgress;
-    _queuedPromptIds = new Map();
-    _toolStartedAt = new Map();
-    _preToolHookContext = new Map();
-    _compressionDetector;
-    _contextCompressionEnabledOverride;
-    _compressionDetectionEnabled = process.env.GRIP_CONTEXT_COMPRESSION_DETECTION === "1";
-    _agentRunEnding = false;
-    _waitingForDetectorAtRequest = false;
-    _pendingContextCompression;
-    _stateCompressionApplied = false;
-    // Model registry for API key resolution
-    _modelRegistry;
-    // Tool registry for extension getTools/setTools
-    _toolRegistry = new Map();
-    _toolDefinitions = new Map();
-    _sessionTools = new Map();
-    _sessionSkills = new Map();
-    _sessionRules = new Map();
-    _toolPromptSnippets = new Map();
-    _toolPromptGuidelines = new Map();
-    // Base system prompt (without extension appends) - used to apply fresh appends each turn
-    _baseSystemPrompt = "";
-    _baseSystemPromptOptions;
-    _systemPromptOverride;
     constructor(config) {
+        this._eventListeners = [];
+        this._disposed = false;
+        /** Tracks pending steering messages for UI display. Removed when delivered. */
+        this._steeringMessages = [];
+        /** Tracks pending follow-up messages for UI display. Removed when delivered. */
+        this._followUpMessages = [];
+        /** Messages queued to be included with the next user prompt as context ("asides"). */
+        this._pendingNextTurnMessages = [];
+        this._compactionAbortController = undefined;
+        this._autoCompactionAbortController = undefined;
+        this._extensionCompactionQueue = [];
+        this._extensionCompactionTimer = undefined;
+        this._extensionCompactionRunning = false;
+        this._overflowRecoveryAttempted = false;
+        // Branch summarization state
+        this._branchSummaryAbortController = undefined;
+        // Retry state
+        this._retryAbortController = undefined;
+        this._retryAttempt = 0;
+        // Bash execution state
+        this._bashAbortControllers = new Set();
+        this._pendingBashMessages = [];
+        this._extensionLspOwnership = new WeakMap();
+        this._turnIndex = 0;
+        this._baseToolDefinitions = new Map();
+        this._retiredWorkspaceToolHosts = [];
+        this._runtimeLifecycleQueue = Promise.resolve();
+        this._sandboxTransitionQueue = Promise.resolve();
+        this._runtimeLifecycleContext = new AsyncLocalStorage();
+        this._activities = new Set();
+        this._activityGeneration = 0;
+        this._activeCycle = false;
+        this._settlementScheduled = false;
+        this._settlementRunning = false;
+        this._idleWaiters = new Set();
+        this._barrierOwnerContext = new AsyncLocalStorage();
+        this._hooksEnabled = true;
+        this._hookExecutionListeners = new Set();
+        this._hookExecutionActivityListeners = new Set();
+        this._hookAbortController = new AbortController();
+        this._hookSessionEnded = false;
+        this._stopHookContinuations = 0;
+        this._queuedPromptIds = new Map();
+        this._toolStartedAt = new Map();
+        this._preToolHookContext = new Map();
+        this._compressionDetectionEnabled = process.env.GRIP_CONTEXT_COMPRESSION_DETECTION === "1";
+        this._agentRunEnding = false;
+        this._waitingForDetectorAtRequest = false;
+        this._stateCompressionApplied = false;
+        // Tool registry for extension getTools/setTools
+        this._toolRegistry = new Map();
+        this._toolDefinitions = new Map();
+        this._sessionTools = new Map();
+        this._sessionSkills = new Map();
+        this._sessionRules = new Map();
+        this._toolPromptSnippets = new Map();
+        this._toolPromptGuidelines = new Map();
+        // Base system prompt (without extension appends) - used to apply fresh appends each turn
+        this._baseSystemPrompt = "";
+        // Track last assistant message for auto-compaction check
+        this._lastAssistantMessage = undefined;
+        /** Internal handler for agent events - shared by subscribe and reconnect */
+        this._handleAgentEvent = async (event) => {
+            if (event.type === "agent_start")
+                this._agentRunEnding = false;
+            // afterToolCall can be skipped when a prepared call is aborted. Never retain per-run tool state.
+            if (event.type === "agent_end") {
+                this._agentRunEnding = true;
+                this._toolStartedAt.clear();
+                this._preToolHookContext.clear();
+                this._pendingContextCompression = undefined;
+            }
+            this._consumeStartedQueuedMessage(event);
+            // Extensions observe the event before public session listeners.
+            await this._runAsyncBarrierCallback(`extension ${event.type} handler`, () => this._emitExtensionEvent(event));
+            this._emit(event.type === "agent_end" ? { ...event, willRetry: this._willRetryAfterAgentEnd(event) } : event);
+            if (event.type === "agent_end") {
+                const entries = this.session.getEntries();
+                const ledger = readUsageLedger(entries);
+                const lastEntry = entries.at(-1);
+                if (ledger.checkpointId && !(lastEntry?.type === "custom" && lastEntry.customType === USAGE_LEDGER_ENTRY_TYPE))
+                    this.session.appendCustomEntry(USAGE_LEDGER_ENTRY_TYPE, ledger);
+                this._scheduleExtensionCompactions();
+                if (!this._disposed && this.compressionDetectionEnabled)
+                    this._compressionDetector.check(this.getContextUsage()?.percent, this.agent.state.messages, this._buildCurrentAgentContext().systemPrompt, getCompressibleEntries(this.session, ""));
+            }
+            if (event.type === "message_end") {
+                this._persistCompletedMessage(event.message);
+                this._applyPendingContextCompression(event.message);
+                this._updateRetryStateAfterAssistantMessage(event.message);
+            }
+        };
         this.agent = config.agent;
         this.session = config.session;
         this.settingsManager = config.settingsManager;
@@ -692,6 +670,26 @@ export class AgentSession {
     async activateSandboxDaemon(options) {
         return this._runActivity("sandbox daemon activation", () => this._enqueueSandboxTransition(() => this._activateSessionRemoteOperations(options.expectedCwd, (operations) => operations.configureRemote(options.url, { token: options.token, expectedCwd: options.expectedCwd }))));
     }
+    /** Change only the connected sandbox's working directory, never the host session or mount. */
+    async changeSandboxWorkingDirectory(target) {
+        const operations = this._sandboxToolOperations;
+        const backend = operations?.getBackendInfo();
+        if (!operations || operations !== this._toolOperations || backend?.type !== "remote" || !backend.configured) {
+            throw new Error("No connected sandbox is active");
+        }
+        const paths = backend.workspace.pathFlavor === "windows" ? win32 : posix;
+        const candidate = paths.resolve(operations.cwd, target);
+        if (!isWithinSandboxMount(candidate, backend.workspace.root, backend.workspace.pathFlavor)) {
+            throw new Error(`Directory is outside the mounted workspace: ${target}`);
+        }
+        const directory = await operations.resolveWorkspaceDirectory(candidate);
+        if (!isWithinSandboxMount(directory, backend.workspace.root, backend.workspace.pathFlavor)) {
+            throw new Error(`Directory is outside the mounted workspace: ${target}`);
+        }
+        operations.cwd = directory;
+        this._refreshBaseSystemPrompt();
+        return directory;
+    }
     async _activateSessionRemoteOperations(expectedCwd, configure) {
         if (this._sandboxToolOperations)
             throw new Error("A session sandbox backend is already active");
@@ -1538,8 +1536,6 @@ export class AgentSession {
             followUp: [...this._followUpMessages],
         });
     }
-    // Track last assistant message for auto-compaction check
-    _lastAssistantMessage = undefined;
     _consumeStartedQueuedMessage(event) {
         if (event.type !== "message_start" || event.message.role !== "user")
             return;
@@ -1665,37 +1661,6 @@ export class AgentSession {
         });
         this._retryAttempt = 0;
     }
-    /** Internal handler for agent events - shared by subscribe and reconnect */
-    _handleAgentEvent = async (event) => {
-        if (event.type === "agent_start")
-            this._agentRunEnding = false;
-        // afterToolCall can be skipped when a prepared call is aborted. Never retain per-run tool state.
-        if (event.type === "agent_end") {
-            this._agentRunEnding = true;
-            this._toolStartedAt.clear();
-            this._preToolHookContext.clear();
-            this._pendingContextCompression = undefined;
-        }
-        this._consumeStartedQueuedMessage(event);
-        // Extensions observe the event before public session listeners.
-        await this._runAsyncBarrierCallback(`extension ${event.type} handler`, () => this._emitExtensionEvent(event));
-        this._emit(event.type === "agent_end" ? { ...event, willRetry: this._willRetryAfterAgentEnd(event) } : event);
-        if (event.type === "agent_end") {
-            const entries = this.session.getEntries();
-            const ledger = readUsageLedger(entries);
-            const lastEntry = entries.at(-1);
-            if (ledger.checkpointId && !(lastEntry?.type === "custom" && lastEntry.customType === USAGE_LEDGER_ENTRY_TYPE))
-                this.session.appendCustomEntry(USAGE_LEDGER_ENTRY_TYPE, ledger);
-            this._scheduleExtensionCompactions();
-            if (!this._disposed && this.compressionDetectionEnabled)
-                this._compressionDetector.check(this.getContextUsage()?.percent, this.agent.state.messages, this._buildCurrentAgentContext().systemPrompt, getCompressibleEntries(this.session, ""));
-        }
-        if (event.type === "message_end") {
-            this._persistCompletedMessage(event.message);
-            this._applyPendingContextCompression(event.message);
-            this._updateRetryStateAfterAssistantMessage(event.message);
-        }
-    };
     _willRetryAfterAgentEnd(event) {
         const settings = this.settingsManager.getRetrySettings();
         if (!settings.enabled || this._retryAttempt >= settings.maxRetries) {