@iaforged/context-code 1.0.72 → 1.0.74

package/dist/src/constants/apiLimits.js

@@ -0,0 +1,81 @@
+/**
+ * Anthropic API Limits
+ *
+ * These constants define server-side limits enforced by the Anthropic API.
+ * Keep this file dependency-free to prevent circular imports.
+ *
+ * Last verified: 2025-12-22
+ * Source: api/api/schemas/messages/blocks/ and api/api/config.py
+ *
+ * Future: See issue #13240 for dynamic limits fetching from server.
+ */
+// =============================================================================
+// IMAGE LIMITS
+// =============================================================================
+/**
+ * Maximum base64-encoded image size (API enforced).
+ * The API rejects images where the base64 string length exceeds this value.
+ * Note: This is the base64 length, NOT raw bytes. Base64 increases size by ~33%.
+ */
+export const API_IMAGE_MAX_BASE64_SIZE = 5 * 1024 * 1024; // 5 MB
+/**
+ * Target raw image size to stay under base64 limit after encoding.
+ * Base64 encoding increases size by 4/3, so we derive the max raw size:
+ * raw_size * 4/3 = base64_size → raw_size = base64_size * 3/4
+ */
+export const IMAGE_TARGET_RAW_SIZE = (API_IMAGE_MAX_BASE64_SIZE * 3) / 4; // 3.75 MB
+/**
+ * Client-side maximum dimensions for image resizing.
+ *
+ * Note: The API internally resizes images larger than 1568px (source:
+ * encoding/full_encoding.py), but this is handled server-side and doesn't
+ * cause errors. These client-side limits (2000px) are slightly larger to
+ * preserve quality when beneficial.
+ *
+ * The API_IMAGE_MAX_BASE64_SIZE (5MB) is the actual hard limit that causes
+ * API errors if exceeded.
+ */
+export const IMAGE_MAX_WIDTH = 2000;
+export const IMAGE_MAX_HEIGHT = 2000;
+// =============================================================================
+// PDF LIMITS
+// =============================================================================
+/**
+ * Maximum raw PDF file size that fits within the API request limit after encoding.
+ * The API has a 32MB total request size limit. Base64 encoding increases size by
+ * ~33% (4/3), so 20MB raw → ~27MB base64, leaving room for conversation context.
+ */
+export const PDF_TARGET_RAW_SIZE = 20 * 1024 * 1024; // 20 MB
+/**
+ * Maximum number of pages in a PDF accepted by the API.
+ */
+export const API_PDF_MAX_PAGES = 100;
+/**
+ * Size threshold above which PDFs are extracted into page images
+ * instead of being sent as base64 document blocks. This applies to
+ * first-party API only; non-first-party always uses extraction.
+ */
+export const PDF_EXTRACT_SIZE_THRESHOLD = 3 * 1024 * 1024; // 3 MB
+/**
+ * Maximum PDF file size for the page extraction path. PDFs larger than
+ * this are rejected to avoid processing extremely large files.
+ */
+export const PDF_MAX_EXTRACT_SIZE = 100 * 1024 * 1024; // 100 MB
+/**
+ * Max pages the Read tool will extract in a single call with the pages parameter.
+ */
+export const PDF_MAX_PAGES_PER_READ = 20;
+/**
+ * PDFs with more pages than this get the reference treatment on @ mention
+ * instead of being inlined into context.
+ */
+export const PDF_AT_MENTION_INLINE_THRESHOLD = 10;
+// =============================================================================
+// MEDIA LIMITS
+// =============================================================================
+/**
+ * Maximum number of media items (images + PDFs) allowed per API request.
+ * The API rejects requests exceeding this limit with a confusing error.
+ * We validate client-side to provide a clear error message.
+ */
+export const API_MAX_MEDIA_PER_REQUEST = 100;

package/dist/src/constants/betas.js

@@ -0,0 +1,45 @@
+import { feature } from '../recovery/bunBundleShim.js';
+export const CLAUDE_CODE_20250219_BETA_HEADER = 'claude-code-20250219';
+export const INTERLEAVED_THINKING_BETA_HEADER = 'interleaved-thinking-2025-05-14';
+export const CONTEXT_1M_BETA_HEADER = 'context-1m-2025-08-07';
+export const CONTEXT_MANAGEMENT_BETA_HEADER = 'context-management-2025-06-27';
+export const STRUCTURED_OUTPUTS_BETA_HEADER = 'structured-outputs-2025-12-15';
+export const WEB_SEARCH_BETA_HEADER = 'web-search-2025-03-05';
+// Tool search beta headers differ by provider:
+// - Claude API / Foundry: advanced-tool-use-2025-11-20
+// - Vertex AI / Bedrock: tool-search-tool-2025-10-19
+export const TOOL_SEARCH_BETA_HEADER_1P = 'advanced-tool-use-2025-11-20';
+export const TOOL_SEARCH_BETA_HEADER_3P = 'tool-search-tool-2025-10-19';
+export const EFFORT_BETA_HEADER = 'effort-2025-11-24';
+export const TASK_BUDGETS_BETA_HEADER = 'task-budgets-2026-03-13';
+export const PROMPT_CACHING_SCOPE_BETA_HEADER = 'prompt-caching-scope-2026-01-05';
+export const FAST_MODE_BETA_HEADER = 'fast-mode-2026-02-01';
+export const REDACT_THINKING_BETA_HEADER = 'redact-thinking-2026-02-12';
+export const TOKEN_EFFICIENT_TOOLS_BETA_HEADER = 'token-efficient-tools-2026-03-28';
+export const SUMMARIZE_CONNECTOR_TEXT_BETA_HEADER = feature('CONNECTOR_TEXT')
+    ? 'summarize-connector-text-2026-03-13'
+    : '';
+export const AFK_MODE_BETA_HEADER = feature('TRANSCRIPT_CLASSIFIER')
+    ? 'afk-mode-2026-01-31'
+    : '';
+export const CLI_INTERNAL_BETA_HEADER = process.env.USER_TYPE === 'ant' ? 'cli-internal-2026-02-09' : '';
+export const ADVISOR_BETA_HEADER = 'advisor-tool-2026-03-01';
+/**
+ * Bedrock only supports a limited number of beta headers and only through
+ * extraBodyParams. This set maintains the beta strings that should be in
+ * Bedrock extraBodyParams *and not* in Bedrock headers.
+ */
+export const BEDROCK_EXTRA_PARAMS_HEADERS = new Set([
+    INTERLEAVED_THINKING_BETA_HEADER,
+    CONTEXT_1M_BETA_HEADER,
+    TOOL_SEARCH_BETA_HEADER_3P,
+]);
+/**
+ * Betas allowed on Vertex countTokens API.
+ * Other betas will cause 400 errors.
+ */
+export const VERTEX_COUNT_TOKENS_ALLOWED_BETAS = new Set([
+    CLAUDE_CODE_20250219_BETA_HEADER,
+    INTERLEAVED_THINKING_BETA_HEADER,
+    CONTEXT_MANAGEMENT_BETA_HEADER,
+]);

package/dist/src/constants/common.js

@@ -0,0 +1,29 @@
+import memoize from 'lodash-es/memoize.js';
+// This ensures you get the LOCAL date in ISO format
+export function getLocalISODate() {
+    // Check for ant-only date override
+    if (process.env.CLAUDE_CODE_OVERRIDE_DATE) {
+        return process.env.CLAUDE_CODE_OVERRIDE_DATE;
+    }
+    const now = new Date();
+    const year = now.getFullYear();
+    const month = String(now.getMonth() + 1).padStart(2, '0');
+    const day = String(now.getDate()).padStart(2, '0');
+    return `${year}-${month}-${day}`;
+}
+// Memoized for prompt-cache stability — captures the date once at session start.
+// The main interactive path gets this behavior via memoize(getUserContext) in
+// context.ts; simple mode (--bare) calls getSystemPrompt per-request and needs
+// an explicit memoized date to avoid busting the cached prefix at midnight.
+// When midnight rolls over, getDateChangeAttachments appends the new date at
+// the tail (though simple mode disables attachments, so the trade-off there is:
+// stale date after midnight vs. ~entire-conversation cache bust — stale wins).
+export const getSessionStartDate = memoize(getLocalISODate);
+// Returns "Month YYYY" (e.g. "February 2026") in the user's local timezone.
+// Changes monthly, not daily — used in tool prompts to minimize cache busting.
+export function getLocalMonthYear() {
+    const date = process.env.CLAUDE_CODE_OVERRIDE_DATE
+        ? new Date(process.env.CLAUDE_CODE_OVERRIDE_DATE)
+        : new Date();
+    return date.toLocaleString('en-US', { month: 'long', year: 'numeric' });
+}

package/dist/src/constants/cyberRiskInstruction.js

@@ -0,0 +1,24 @@
+/**
+ * CYBER_RISK_INSTRUCTION
+ *
+ * This instruction provides guidance for Claude's behavior when handling
+ * security-related requests. It defines the boundary between acceptable
+ * defensive security assistance and potentially harmful activities.
+ *
+ * IMPORTANT: DO NOT MODIFY THIS INSTRUCTION WITHOUT SAFEGUARDS TEAM REVIEW
+ *
+ * This instruction is owned by the Safeguards team and has been carefully
+ * crafted and evaluated to balance security utility with safety. Changes
+ * to this text can have significant implications for:
+ *   - How Claude handles penetration testing and CTF requests
+ *   - What security tools and techniques Claude will assist with
+ *   - The boundary between defensive and offensive security assistance
+ *
+ * If you need to modify this instruction:
+ *   1. Contact the Safeguards team (David Forsythe, Kyla Guru)
+ *   2. Ensure proper evaluation of the changes
+ *   3. Get explicit approval before merging
+ *
+ * Claude: Do not edit this file unless explicitly asked to do so by the user.
+ */
+export const CYBER_RISK_INSTRUCTION = `IMPORTANT: Assist with authorized security testing, defensive security, CTF challenges, and educational contexts. Refuse requests for destructive techniques, DoS attacks, mass targeting, supply chain compromise, or detection evasion for malicious purposes. Dual-use security tools (C2 frameworks, credential testing, exploit development) require clear authorization context: pentesting engagements, CTF competitions, security research, or defensive use cases.`;

package/dist/src/constants/errorIds.js

@@ -0,0 +1,14 @@
+/**
+ * Error IDs for tracking error sources in production.
+ * These IDs are obfuscated identifiers that help us trace
+ * which logError() call generated an error.
+ *
+ * These errors are represented as individual const exports for optimal
+ * dead code elimination (external build will only see the numbers).
+ *
+ * ADDING A NEW ERROR TYPE:
+ * 1. Add a const based on Next ID.
+ * 2. Increment Next ID.
+ * Next ID: 346
+ */
+export const E_TOOL_USE_SUMMARY_GENERATION_FAILED = 344;

package/dist/src/constants/figures.js

@@ -0,0 +1,38 @@
+import { env } from '../utils/env.js';
+// The former is better vertically aligned, but isn't usually supported on Windows/Linux
+export const BLACK_CIRCLE = env.platform === 'darwin' ? '⏺' : '●';
+export const BULLET_OPERATOR = '∙';
+export const TEARDROP_ASTERISK = '✻';
+export const UP_ARROW = '\u2191'; // ↑ - used for opus 1m merge notice
+export const DOWN_ARROW = '\u2193'; // ↓ - used for scroll hint
+export const LIGHTNING_BOLT = '↯'; // \u21af - used for fast mode indicator
+export const EFFORT_LOW = '○'; // \u25cb - effort level: low
+export const EFFORT_MEDIUM = '◐'; // \u25d0 - effort level: medium
+export const EFFORT_HIGH = '●'; // \u25cf - effort level: high
+export const EFFORT_MAX = '◉'; // \u25c9 - effort level: max (Opus 4.6 only)
+// Media/trigger status indicators
+export const PLAY_ICON = '\u25b6'; // ▶
+export const PAUSE_ICON = '\u23f8'; // ⏸
+// MCP subscription indicators
+export const REFRESH_ARROW = '\u21bb'; // ↻ - used for resource update indicator
+export const CHANNEL_ARROW = '\u2190'; // ← - inbound channel message indicator
+export const INJECTED_ARROW = '\u2192'; // → - cross-session injected message indicator
+export const FORK_GLYPH = '\u2442'; // ⑂ - fork directive indicator
+// Review status indicators (ultrareview diamond states)
+export const DIAMOND_OPEN = '\u25c7'; // ◇ - running
+export const DIAMOND_FILLED = '\u25c6'; // ◆ - completed/failed
+export const REFERENCE_MARK = '\u203b'; // ※ - komejirushi, away-summary recap marker
+// Issue flag indicator
+export const FLAG_ICON = '\u2691'; // ⚑ - used for issue flag banner
+// Blockquote indicator
+export const BLOCKQUOTE_BAR = '\u258e'; // ▎ - left one-quarter block, used as blockquote line prefix
+export const HEAVY_HORIZONTAL = '\u2501'; // ━ - heavy box-drawing horizontal
+// Bridge status indicators
+export const BRIDGE_SPINNER_FRAMES = [
+    '\u00b7|\u00b7',
+    '\u00b7/\u00b7',
+    '\u00b7\u2014\u00b7',
+    '\u00b7\\\u00b7',
+];
+export const BRIDGE_READY_INDICATOR = '\u00b7\u2714\ufe0e\u00b7';
+export const BRIDGE_FAILED_INDICATOR = '\u00d7';

package/dist/src/constants/files.js

@@ -0,0 +1,150 @@
+/**
+ * Binary file extensions to skip for text-based operations.
+ * These files can't be meaningfully compared as text and are often large.
+ */
+export const BINARY_EXTENSIONS = new Set([
+    // Images
+    '.png',
+    '.jpg',
+    '.jpeg',
+    '.gif',
+    '.bmp',
+    '.ico',
+    '.webp',
+    '.tiff',
+    '.tif',
+    // Videos
+    '.mp4',
+    '.mov',
+    '.avi',
+    '.mkv',
+    '.webm',
+    '.wmv',
+    '.flv',
+    '.m4v',
+    '.mpeg',
+    '.mpg',
+    // Audio
+    '.mp3',
+    '.wav',
+    '.ogg',
+    '.flac',
+    '.aac',
+    '.m4a',
+    '.wma',
+    '.aiff',
+    '.opus',
+    // Archives
+    '.zip',
+    '.tar',
+    '.gz',
+    '.bz2',
+    '.7z',
+    '.rar',
+    '.xz',
+    '.z',
+    '.tgz',
+    '.iso',
+    // Executables/binaries
+    '.exe',
+    '.dll',
+    '.so',
+    '.dylib',
+    '.bin',
+    '.o',
+    '.a',
+    '.obj',
+    '.lib',
+    '.app',
+    '.msi',
+    '.deb',
+    '.rpm',
+    // Documents (PDF is here; FileReadTool excludes it at the call site)
+    '.pdf',
+    '.doc',
+    '.docx',
+    '.xls',
+    '.xlsx',
+    '.ppt',
+    '.pptx',
+    '.odt',
+    '.ods',
+    '.odp',
+    // Fonts
+    '.ttf',
+    '.otf',
+    '.woff',
+    '.woff2',
+    '.eot',
+    // Bytecode / VM artifacts
+    '.pyc',
+    '.pyo',
+    '.class',
+    '.jar',
+    '.war',
+    '.ear',
+    '.node',
+    '.wasm',
+    '.rlib',
+    // Database files
+    '.sqlite',
+    '.sqlite3',
+    '.db',
+    '.mdb',
+    '.idx',
+    // Design / 3D
+    '.psd',
+    '.ai',
+    '.eps',
+    '.sketch',
+    '.fig',
+    '.xd',
+    '.blend',
+    '.3ds',
+    '.max',
+    // Flash
+    '.swf',
+    '.fla',
+    // Lock/profiling data
+    '.lockb',
+    '.dat',
+    '.data',
+]);
+/**
+ * Check if a file path has a binary extension.
+ */
+export function hasBinaryExtension(filePath) {
+    const ext = filePath.slice(filePath.lastIndexOf('.')).toLowerCase();
+    return BINARY_EXTENSIONS.has(ext);
+}
+/**
+ * Number of bytes to read for binary content detection.
+ */
+const BINARY_CHECK_SIZE = 8192;
+/**
+ * Check if a buffer contains binary content by looking for null bytes
+ * or a high proportion of non-printable characters.
+ */
+export function isBinaryContent(buffer) {
+    // Check first BINARY_CHECK_SIZE bytes (or full buffer if smaller)
+    const checkSize = Math.min(buffer.length, BINARY_CHECK_SIZE);
+    let nonPrintable = 0;
+    for (let i = 0; i < checkSize; i++) {
+        const byte = buffer[i];
+        // Null byte is a strong indicator of binary
+        if (byte === 0) {
+            return true;
+        }
+        // Count non-printable, non-whitespace bytes
+        // Printable ASCII is 32-126, plus common whitespace (9, 10, 13)
+        if (byte < 32 &&
+            byte !== 9 && // tab
+            byte !== 10 && // newline
+            byte !== 13 // carriage return
+        ) {
+            nonPrintable++;
+        }
+    }
+    // If more than 10% non-printable, likely binary
+    return nonPrintable / checkSize > 0.1;
+}

package/dist/src/constants/github-app.js

@@ -0,0 +1,139 @@
+export const PR_TITLE = 'Add Context Code GitHub Workflow';
+export const GITHUB_ACTION_SETUP_DOCS_URL = 'https://github.com/anthropics/claude-code-action/blob/main/docs/setup.md';
+export const WORKFLOW_CONTENT = `name: Context Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  claude:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+      actions: read # Required for Claude to read CI results on PRs
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Context Code
+        id: claude
+        uses: anthropics/claude-code-action@v1
+        with:
+          anthropic_api_key: \${{ secrets.ANTHROPIC_API_KEY }}
+
+          # This is an optional setting that allows Claude to read CI results on PRs
+          additional_permissions: |
+            actions: read
+
+          # Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
+          # prompt: 'Update the pull request description to include a summary of changes.'
+
+          # Optional: Add claude_args to customize behavior and configuration
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://code.claude.com/docs/en/cli-reference for available options
+          # claude_args: '--allowed-tools Bash(gh pr:*)'
+
+`;
+export const PR_BODY = `## 🤖 Installing Context Code GitHub App
+
+This PR adds a GitHub Actions workflow that enables Context Code integration in our repository.
+
+### What is Context Code?
+
+[Context Code](https://claude.com/claude-code) is an AI coding agent that can help with:
+- Bug fixes and improvements  
+- Documentation updates
+- Implementing new features
+- Code reviews and suggestions
+- Writing tests
+- And more!
+
+### How it works
+
+Once this PR is merged, we'll be able to interact with Claude by mentioning @claude in a pull request or issue comment.
+Once the workflow is triggered, Claude will analyze the comment and surrounding context, and execute on the request in a GitHub action.
+
+### Important Notes
+
+- **This workflow won't take effect until this PR is merged**
+- **@claude mentions won't work until after the merge is complete**
+- The workflow runs automatically whenever Claude is mentioned in PR or issue comments
+- Claude gets access to the entire PR or issue context including files, diffs, and previous comments
+
+### Security
+
+- Our Anthropic API key is securely stored as a GitHub Actions secret
+- Only users with write access to the repository can trigger the workflow
+- All Claude runs are stored in the GitHub Actions run history
+- Claude's default tools are limited to reading/writing files and interacting with our repo by creating comments, branches, and commits.
+- We can add more allowed tools by adding them to the workflow file like:
+
+\`\`\`
+allowed_tools: Bash(npm install),Bash(npm run build),Bash(npm run lint),Bash(npm run test)
+\`\`\`
+
+There's more information in the [Context Code action repo](https://github.com/anthropics/claude-code-action).
+
+After merging this PR, let's try mentioning @claude in a comment on any PR to get started!`;
+export const CODE_REVIEW_PLUGIN_WORKFLOW_CONTENT = `name: Context Code Review
+
+on:
+  pull_request:
+    types: [opened, synchronize, ready_for_review, reopened]
+    # Optional: Only run on specific file changes
+    # paths:
+    #   - "src/**/*.ts"
+    #   - "src/**/*.tsx"
+    #   - "src/**/*.js"
+    #   - "src/**/*.jsx"
+
+jobs:
+  claude-review:
+    # Optional: Filter by PR author
+    # if: |
+    #   github.event.pull_request.user.login == 'external-contributor' ||
+    #   github.event.pull_request.user.login == 'new-developer' ||
+    #   github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Context Code Review
+        id: claude-review
+        uses: anthropics/claude-code-action@v1
+        with:
+          anthropic_api_key: \${{ secrets.ANTHROPIC_API_KEY }}
+          plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
+          plugins: 'code-review@claude-code-plugins'
+          prompt: '/code-review:code-review \${{ github.repository }}/pull/\${{ github.event.pull_request.number }}'
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://code.claude.com/docs/en/cli-reference for available options
+
+`;

package/dist/src/constants/keys.js

@@ -0,0 +1,10 @@
+import { isEnvTruthy } from '../utils/envUtils.js';
+// Lazy read so ENABLE_GROWTHBOOK_DEV from globalSettings.env (applied after
+// module load) is picked up. USER_TYPE is a build-time define so it's safe.
+export function getGrowthBookClientKey() {
+    return process.env.USER_TYPE === 'ant'
+        ? isEnvTruthy(process.env.ENABLE_GROWTHBOOK_DEV)
+            ? 'sdk-yZQvlplybuXjYh6L'
+            : 'sdk-xRVcrliHIlrg4og4'
+        : 'sdk-zAZezfDKGoZuXXKe';
+}

package/dist/src/constants/messages.js

@@ -0,0 +1 @@
+export const NO_CONTENT_MESSAGE = '(no content)';