@iowarp/clio-coder 0.4.4 → 0.4.5

package/dist/{chunk-XULDXHTN.js → chunk-DRD2A54W.js}

@@ -2,22 +2,27 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   TASK_MEMORY_DEFAULT_PROCEDURAL_CAP,
   TASK_MEMORY_POLICY_DEFAULT_TIMEOUT_MS,
+  isTerminalRunEnvelope,
   runTaskMemoryPolicy,
   taskMemoryBankDelta
-} from "./chunk-2WZ546HR.js";
-import {
-  isTerminalRunEnvelope
-} from "./chunk-75W7L2E2.js";
+} from "./chunk-TZ7MFRG4.js";
 import {
   hashToolCall
-} from "./chunk-6QOTUPRG.js";
+} from "./chunk-KF6GFW6O.js";
 import {
   taskBoardCounts
-} from "./chunk-6PAZTBPA.js";
+} from "./chunk-7HBHHVCK.js";
 import {
   legacyToolResultDigest,
   sanitizeToolResultDigest
-} from "./chunk-NAI6ZFCY.js";
+} from "./chunk-RLTT5GVY.js";
+import {
+  captureProjectSurface,
+  projectSurfaceTrustNotice
+} from "./chunk-NTK3WTHM.js";
+import {
+  INSTRUCTION_SHAPED_WARNING
+} from "./chunk-WXA2CFJO.js";
 import {
   SKILL_INSTALL_OFFER_OPTION_NEVER,
   SKILL_INSTALL_OFFER_OPTION_NOT_NOW,
@@ -25,36 +30,40 @@ import {
   SKILL_INSTALL_OFFER_OPTION_USER,
   SKILL_SUGGESTION_ANCHOR,
   SKILL_SUGGESTION_PREFIX
-} from "./chunk-54X7T7DK.js";
+} from "./chunk-5ZMXGW7P.js";
 import {
   ToolNames
-} from "./chunk-4NSRCOYP.js";
+} from "./chunk-EHOSNVVM.js";
 import {
   registerForegroundStream
-} from "./chunk-JSD46VO2.js";
+} from "./chunk-TEG3RYVZ.js";
 import {
   ceilChars
-} from "./chunk-NZMNUPZZ.js";
+} from "./chunk-77CZRFTE.js";
 import {
   BusChannels
-} from "./chunk-F4EKGO4N.js";
+} from "./chunk-HL26ADLH.js";
+import {
+  buildSafeToolEnv
+} from "./chunk-GJ24ODAX.js";
 import {
+  gitCommitAttributionEnabled,
   reportCommitAttributionDiagnostic,
   withManagedGitCommitAttributionEnvironment
-} from "./chunk-U6TMQNSI.js";
+} from "./chunk-LTR5QCLS.js";
 import {
   require_dist
-} from "./chunk-APJ265NV.js";
+} from "./chunk-B5GGDIHT.js";
 import {
   safeResourceWrite
-} from "./chunk-WEPFGWHJ.js";
+} from "./chunk-ZZFWWYLX.js";
 import {
   clioConfigDir
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   __toESM,
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/middleware/runtime.ts
 init_esm_shims();
@@ -207,11 +216,33 @@ function createHookBudgetTracker(options = {}) {
 // src/domains/middleware/rules.ts
 init_esm_shims();
 
+// src/domains/middleware/injection-screen.ts
+init_esm_shims();
+var INJECTION_SCREEN_RULE = {
+  rule: {
+    id: "safety.untrusted-instructions",
+    source: "builtin",
+    description: "Warn when external tool data contains instruction-shaped markers",
+    enabled: true,
+    hooks: ["after_tool"],
+    effectKinds: ["annotate_tool_result"]
+  },
+  toolNames: ["web_fetch", "read", "bash", "dispatch", "monitor"],
+  predicate: (input) => input.metadata?.untrustedInstructionMarkers === true,
+  effects: [
+    {
+      kind: "annotate_tool_result",
+      severity: "warn",
+      message: INSTRUCTION_SHAPED_WARNING
+    }
+  ]
+};
+
 // src/domains/middleware/stalled-turn.ts
 init_esm_shims();
 var STALLED_TURN_REGISTRATION_ID = "nudge.stalled-turn";
 var STALLED_TURN_REQUEST_CONTINUATION_MESSAGE = "You ended your turn after announcing an action without executing it: no tools were called. Continue now and perform the announced action, or state plainly that you are finished and waiting for the user.";
-var SKILL_SUGGESTION_WAIT_CONTINUATION_MESSAGE = "You ended your turn on a skill suggestion without doing the task. The suggestion line has already made the offer and only the operator loads a skill, so nothing is needed from them before you proceed. Continue the task now without the skill.";
+var SKILL_SUGGESTION_WAIT_CONTINUATION_MESSAGE = "You ended your turn on a skill suggestion without doing the task. The suggestion line has already made the offer and only the operator loads a skill, so the skill choice needs nothing from them before you proceed. Continue the already-authorized task now without the skill. This continuation is not an operator answer to any other question: if the remaining work is a proposal awaiting an explicit operator go-ahead, park it on the task board and say so instead of implementing.";
 var INTENT_PATTERN = /\b(let me|i['’]ll|i will|i am going to|i['’]m going to|now i|next i|let's|let us)\b/i;
 var CONCRETE_ACTION_STEMS = [
   "add",
@@ -294,8 +325,10 @@ var ACTION_OBJECT_CONNECTOR_PATTERN = /^(?:at|for|in|into|on|through|to)\s+/i;
 var ACTION_OBJECT_DETERMINER_PATTERN = /^(?:a|an|my|our|that|the|their|these|this|those|your)\s+/i;
 var ACTION_OBJECT_PATTERN = /^(?!(?:again|everyone|later|next|now|soon|then|you)\b)[`"'./~]*[\p{L}\p{N}_-]/iu;
 var CONDITIONAL_LEAD_IN_PATTERN = /\b(?:if|once|unless|until|when|whenever)\b/i;
-var CONDITIONAL_INVITATION_PATTERN = /\b(?:ask|give|point|say|send|share|tell)\b[\s\S]*\b(?:and|then)\s*$/i;
-var CONDITIONAL_OFFER_SUFFIX_PATTERN = /\b(?:if\s+(?:needed|necessary|requested)\b|if\b[^.!?]*\byou\b|when(?:ever)?\s+you\b)/i;
+var CONDITIONAL_INVITATION_PATTERN = /\b(?:answer|approve|ask|confirm|give|point|reply|respond|say|send|share|tell|type)\b[\s\S]*\b(?:and|then)\s*$/i;
+var CONDITIONAL_OFFER_SUFFIX_PATTERN = /\b(?:if\s+(?:needed|necessary|requested|approved|confirmed)\b|(?:if|after|once|until|unless|when(?:ever)?|as\s+soon\s+as|provided|assuming)\b[^.!?]*\byou\b|(?:upon|on|after|with|pending|awaiting|following)\s+(?:your\s+|the\s+operator(?:'s)?\s+)?(?:approval|go-?ahead|confirmation|sign-?off|decision|word|green\s+light|okay|ok)\b)/i;
+var OPERATOR_WAIT_LEAD_PATTERN = /\b(?:await(?:ing)?|pending|waiting\s+(?:for|on))\b/i;
+var NEGATED_OR_HYPOTHETICAL_CLAUSE_PATTERN = /^\s*(?:not|never|would|could|might|may)\b/i;
 var LET_ME_KNOW_PATTERN = /\blet me know\b/i;
 var DEFERRAL_LEAD_PATTERN = /^\s*(?:just\s+|simply\s+|now\s+)?(?:wait|hold\s+off|hold|stand\s+by|pause|defer)\b/i;
 var COMPLETION_PATTERN = /^\s*(?:all\s+done|done|complete|completed|all\s+set)\b|^\s*(?:here(?:'s| is)\s+)?(?:a\s+)?summary\b|^\s*summary\s*:?$/i;
@@ -346,11 +379,12 @@ function announcesConcreteAction(sentence) {
   const intent = INTENT_PATTERN.exec(sentence);
   if (intent) {
     const leadIn = sentence.slice(0, intent.index);
-    if (CONDITIONAL_LEAD_IN_PATTERN.test(leadIn) || CONDITIONAL_INVITATION_PATTERN.test(leadIn) || CONDITIONAL_OFFER_SUFFIX_PATTERN.test(sentence)) {
+    if (CONDITIONAL_LEAD_IN_PATTERN.test(leadIn) || CONDITIONAL_INVITATION_PATTERN.test(leadIn) || OPERATOR_WAIT_LEAD_PATTERN.test(leadIn) || CONDITIONAL_OFFER_SUFFIX_PATTERN.test(sentence)) {
       return false;
     }
     const clause = sentence.slice(intent.index + intent[0].length);
     if (DEFERRAL_LEAD_PATTERN.test(clause)) return false;
+    if (NEGATED_OR_HYPOTHETICAL_CLAUSE_PATTERN.test(clause)) return false;
     if (hasActionWithObject(clause)) return true;
     if (CONDITIONAL_LEAD_IN_PATTERN.test(clause)) return false;
     return namesToolTarget(clause);
@@ -399,7 +433,10 @@ function isQuestion(sentence) {
 }
 
 // src/domains/middleware/rules.ts
-var BUILTIN_MIDDLEWARE_RULE_DEFINITIONS = [STALLED_TURN_RULE_DEFINITION];
+var BUILTIN_MIDDLEWARE_RULE_DEFINITIONS = [
+  STALLED_TURN_RULE_DEFINITION,
+  INJECTION_SCREEN_RULE
+];
 var BUILTIN_MIDDLEWARE_RULE_IDS = BUILTIN_MIDDLEWARE_RULE_DEFINITIONS.map((definition) => definition.rule.id);
 function listMiddlewareRuleDefinitions() {
   return BUILTIN_MIDDLEWARE_RULE_DEFINITIONS.map(cloneRuleDefinition);
@@ -1167,7 +1204,9 @@ function matchMarketplaceSkills(userText, entries, excludedNames) {
     const match = scorePromotionEntry(userText, entry);
     if (match) matches.push(match);
   }
-  return matches.sort((a, b) => b.score - a.score || a.entry.name.localeCompare(b.entry.name));
+  return matches.sort(
+    (a, b) => Number(b.matchedTrigger !== void 0) - Number(a.matchedTrigger !== void 0) || b.score - a.score || a.entry.name.localeCompare(b.entry.name)
+  );
 }
 var OWN_MARKETPLACE_URL_PREFIX = "https://github.com/iowarp/clio-coder/";
 function isOwnMarketplaceSource(entry) {
@@ -2017,7 +2056,7 @@ function announceMemoryStepEndpoint(deps, complete) {
 init_esm_shims();
 var TASK_BOARD_REMINDER_REGISTRATION_ID = "observer.task-board-reminder";
 function taskBoardReminderMessage(steps) {
-  return `[Tasks] This request enumerates ${steps} steps. Before the first edit, declare the task board: tasks action="plan" with a title and one task per step, then work them one at a time ("start", then "done" with an evidence note).`;
+  return `[Tasks] This request enumerates ${steps} steps. Before the first edit, declare the task board: tasks action="plan" with a title and one task per authorized step, then work them one at a time ("start", then "done" with an evidence note). A plan does not authorize implementation: for proposed work awaiting an operator go-ahead, use action="block" with a note naming the pending operator decision, or action="drop", and wait.`;
 }
 function countEnumeratedSteps(text) {
   const value = text ?? "";
@@ -2078,7 +2117,7 @@ function buildOpenTasksMessage(board) {
   const rows = open.map((task) => `  ${task.status === "active" ? "[>]" : "[ ]"} ${task.id} ${task.title}`);
   return `[Clio Coder] task board "${board.title}" still has ${open.length} of ${counts.total} task(s) open:
 ${rows.join("\n")}
-Continue working them, or record the honest state on the board: tasks action="done" with an evidence note, action="block" with a reason, or action="drop". Do not end the turn with a stale board.`;
+Continue only work already authorized by the operator. This reminder and a self-created plan are not authorization to implement a proposal. If implementation awaits an operator decision, use tasks action="block" with a note naming that pending operator decision, or action="drop"; then wait for an explicit operator go-ahead. A skill-install choice does not authorize implementation. Otherwise record the honest state on the board: tasks action="done" with an evidence note, action="block" with a reason, or action="drop". Do not end the turn with a stale board.`;
 }
 function createTaskNudgeRegistration(options) {
   return {
@@ -2913,6 +2952,10 @@ function userHookToRegistration(hook, deps) {
     evaluate: (input) => {
       if (!hook.enabled) return [];
       try {
+        if (deps.isTrusted?.() === false) {
+          deps.recordReceipt({ ...baseReceipt(input), outcome: "skipped" });
+          return [];
+        }
         return evaluateHook(hook, deps, baseReceipt(input));
       } catch {
         deps.recordReceipt({ ...baseReceipt(input), outcome: "skipped" });
@@ -2964,16 +3007,8 @@ function evaluateHook(hook, deps, base) {
 init_esm_shims();
 var import_yaml = __toESM(require_dist(), 1);
 import { spawnSync } from "node:child_process";
-import { readFileSync as readFileSync3 } from "node:fs";
-import { join } from "node:path";
 var COMMAND_OUTPUT_MAX_BYTES = 1024 * 1024;
-function readBatch(source, filePath, fileIssues) {
-  let text;
-  try {
-    text = readFileSync3(filePath, "utf8");
-  } catch {
-    return null;
-  }
+function readBatch(source, filePath, text, fileIssues) {
   try {
     const parsed = (0, import_yaml.parse)(text);
     return { source, declarations: parsed ?? [] };
@@ -3006,31 +3041,47 @@ function readHookSources(options) {
     }
     batches.push({ source, declarations: entry.declarations });
   }
-  const projectBatch = readBatch(
-    { origin: "project", sourcePath: ".clio-coder/hooks.yaml" },
-    join(options.cwd, ".clio-coder", "hooks.yaml"),
-    fileIssues
-  );
-  if (projectBatch) batches.push(projectBatch);
-  const localBatch = readBatch(
-    { origin: "project.local", sourcePath: ".clio-coder/hooks.local.yaml" },
-    join(options.cwd, ".clio-coder", "hooks.local.yaml"),
-    fileIssues
-  );
-  if (localBatch) batches.push(localBatch);
-  return { batches, fileIssues };
+  const projectSurface = captureProjectSurface(options.cwd, "hooks");
+  for (const [index, file] of projectSurface.files.entries()) {
+    const source = {
+      origin: index === 0 ? "project" : "project.local",
+      sourcePath: index === 0 ? ".clio-coder/hooks.yaml" : ".clio-coder/hooks.local.yaml"
+    };
+    if (file.error !== void 0) fileIssues.push({ source, message: file.error });
+    if (file.text === null) continue;
+    if (projectSurface.verdict !== "trusted") {
+      fileIssues.push({ source, message: projectSurfaceTrustNotice(projectSurface, file.path) });
+      continue;
+    }
+    const batch = readBatch(source, file.path, file.text, fileIssues);
+    if (batch) batches.push(batch);
+  }
+  return { batches, fileIssues, projectSurface };
 }
 function buildUserHookRegistrations(options) {
   const workspaceRoot = options.workspaceRoot ?? options.cwd;
   const readOptions = { cwd: options.cwd };
   if (options.capturedSources !== void 0) readOptions.capturedSources = options.capturedSources;
-  const { batches, fileIssues } = readHookSources(readOptions);
+  const { batches, fileIssues, projectSurface } = readHookSources(readOptions);
   const loaded = loadUserHooks(batches, { workspaceRoot });
   const runCommand = options.runCommand ?? spawnSyncCommandRunner();
+  let reportedUntrusted = false;
+  const projectStillTrusted = () => {
+    const current = captureProjectSurface(options.cwd, "hooks");
+    if (current.verdict === "trusted" && current.contentHash === projectSurface.contentHash) return true;
+    if (!reportedUntrusted) {
+      reportedUntrusted = true;
+      options.report?.(
+        `[clio-coder:hooks] project hooks changed or trust was revoked; hooks skipped. Review with clio-coder config trust hooks, then reload extensions.`
+      );
+    }
+    return false;
+  };
   const registrations = loaded.hooks.map(
     (hook) => userHookToRegistration(hook, {
       recordReceipt: options.recordReceipt,
       runCommand,
+      ...hook.source.origin === "project" || hook.source.origin === "project.local" ? { isTrusted: projectStillTrusted } : {},
       ...options.now !== void 0 ? { now: options.now } : {}
     })
   );
@@ -3039,8 +3090,9 @@ function buildUserHookRegistrations(options) {
 function spawnSyncCommandRunner() {
   return (argv, options) => {
     const [command, ...args] = argv;
-    const attribution = withManagedGitCommitAttributionEnvironment(process.env, {
+    const attribution = withManagedGitCommitAttributionEnvironment(buildSafeToolEnv(), {
       cwd: options.cwd ?? process.cwd(),
+      enabled: gitCommitAttributionEnabled(process.env),
       evidence: {}
     });
     reportCommitAttributionDiagnostic(attribution.diagnostic);
@@ -3096,4 +3148,4 @@ export {
   createWatchdogRegistration,
   MiddlewareDomainModule
 };
-//# sourceMappingURL=chunk-XULDXHTN.js.map
+//# sourceMappingURL=chunk-DRD2A54W.js.map

package/dist/{chunk-D7E7WCDF.js → chunk-DVNAPPXU.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/naming-compat.ts
 init_esm_shims();
@@ -24,4 +24,4 @@ export {
   warnLegacyNaming,
   namingCompatibilityEnvironment
 };
-//# sourceMappingURL=chunk-D7E7WCDF.js.map
+//# sourceMappingURL=chunk-DVNAPPXU.js.map

package/dist/{chunk-YXLYO42X.js → chunk-DXVMLM3Z.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/engine/env-api-keys.ts
 init_esm_shims();
@@ -15,6 +15,7 @@ var ENV_KEYS = {
   "ant-ling": "ANT_LING_API_KEY",
   "qwen-token-plan": "QWEN_TOKEN_PLAN_API_KEY",
   "qwen-token-plan-cn": "QWEN_TOKEN_PLAN_CN_API_KEY",
+  "qwen-token-plan-individual": "QWEN_TOKEN_PLAN_API_KEY",
   openai: "OPENAI_API_KEY",
   "azure-openai-responses": "AZURE_OPENAI_API_KEY",
   nvidia: "NVIDIA_API_KEY",
@@ -88,4 +89,4 @@ export {
   findEngineEnvKeys,
   getEngineEnvApiKey
 };
-//# sourceMappingURL=chunk-YXLYO42X.js.map
+//# sourceMappingURL=chunk-DXVMLM3Z.js.map

package/dist/{chunk-5MEZN6CB.js → chunk-DZK63TZJ.js}

@@ -1,20 +1,20 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   getVersionInfo
-} from "./chunk-XPLRXC72.js";
+} from "./chunk-GD55RTIW.js";
 import {
   require_dist
-} from "./chunk-APJ265NV.js";
+} from "./chunk-B5GGDIHT.js";
 import {
   safeResourceWrite
-} from "./chunk-WEPFGWHJ.js";
+} from "./chunk-ZZFWWYLX.js";
 import {
   clioConfigDir
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   __toESM,
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/extensions/discovery.ts
 init_esm_shims();
@@ -1331,4 +1331,4 @@ export {
   disableExtension,
   removeExtension
 };
-//# sourceMappingURL=chunk-5MEZN6CB.js.map
+//# sourceMappingURL=chunk-DZK63TZJ.js.map

package/dist/{chunk-IGLP3ODT.js → chunk-E3BQTQUP.js}

@@ -3,45 +3,45 @@ import {
   ensureYaziProfile,
   resetYaziProfile,
   yaziProfileDir
-} from "./chunk-3M6DQK6S.js";
+} from "./chunk-T334FW2H.js";
 import {
   normalizedSkillHash,
   stripProvenanceFrontmatter
-} from "./chunk-NDDGJUXD.js";
+} from "./chunk-DNCE23JJ.js";
 import {
   initializeClioHome
-} from "./chunk-I7XBWTYH.js";
+} from "./chunk-T53XI6I7.js";
 import {
   resolveToolBinary
-} from "./chunk-QSNYB6ZV.js";
+} from "./chunk-XCUDZQLX.js";
 import {
   findPinnedTool
-} from "./chunk-QDC3K2U3.js";
-import {
-  INTEROP_AGENT_KINDS
-} from "./chunk-KXDSS5WJ.js";
+} from "./chunk-K2BLQC5E.js";
 import {
   settingsPath,
   withSettingsLock
-} from "./chunk-GHS5EBTQ.js";
+} from "./chunk-FKIOX6DS.js";
+import {
+  INTEROP_AGENT_KINDS
+} from "./chunk-5CY4Q6QI.js";
 import {
   resolvePackageRoot
-} from "./chunk-IWHMRKLL.js";
+} from "./chunk-E3LEPLQ2.js";
 import {
   require_dist
-} from "./chunk-APJ265NV.js";
+} from "./chunk-B5GGDIHT.js";
 import {
   fsyncDirectory,
   safeResourceWrite
-} from "./chunk-WEPFGWHJ.js";
+} from "./chunk-ZZFWWYLX.js";
 import {
   clioStatePath,
   resolveClioDirs
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   __toESM,
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/lifecycle/state.ts
 init_esm_shims();
@@ -654,4 +654,4 @@ export {
   migrateNamingSettingsFile,
   clio_coder_naming_default
 };
-//# sourceMappingURL=chunk-IGLP3ODT.js.map
+//# sourceMappingURL=chunk-E3BQTQUP.js.map

package/dist/{chunk-IWHMRKLL.js → chunk-E3LEPLQ2.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/package-root.ts
 init_esm_shims();
@@ -65,4 +65,4 @@ export {
   readClioVersion,
   readPiMonoVersion
 };
-//# sourceMappingURL=chunk-IWHMRKLL.js.map
+//# sourceMappingURL=chunk-E3LEPLQ2.js.map

package/dist/{chunk-3R73A4XB.js → chunk-ECBHH7LU.js}

@@ -47,11 +47,11 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// node_modules/tsup/assets/esm_shims.js
+// node_modules/.pnpm/tsup@8.5.1_postcss@8.5.28_tsx@4.22.4_typescript@6.0.3_yaml@2.9.0/node_modules/tsup/assets/esm_shims.js
 import { fileURLToPath } from "node:url";
 var getFilename, __filename;
 var init_esm_shims = __esm({
-  "node_modules/tsup/assets/esm_shims.js"() {
+  "node_modules/.pnpm/tsup@8.5.1_postcss@8.5.28_tsx@4.22.4_typescript@6.0.3_yaml@2.9.0/node_modules/tsup/assets/esm_shims.js"() {
     "use strict";
     getFilename = () => fileURLToPath(import.meta.url);
     __filename = /* @__PURE__ */ getFilename();
@@ -66,4 +66,4 @@ export {
   __filename,
   init_esm_shims
 };
-//# sourceMappingURL=chunk-3R73A4XB.js.map
+//# sourceMappingURL=chunk-ECBHH7LU.js.map

package/dist/chunk-ECOMVOHP.js

@@ -0,0 +1,139 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  EMPTY_WORKING_SET_VIEW,
+  callPathsByToolCallId,
+  compactionCut,
+  hasLegacyCompactionMarker,
+  offloadPathOf,
+  parseRefKey,
+  primaryPathOf,
+  refKey,
+  toolResultPayload,
+  toolResultText
+} from "./chunk-DBREN25X.js";
+import {
+  filterEntriesToActivePath
+} from "./chunk-O5F25NIE.js";
+import {
+  ceilChars
+} from "./chunk-77CZRFTE.js";
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/context/working-set/recall.ts
+init_esm_shims();
+function isThinkingEntry(entry) {
+  return entry.kind === "message" && entry.role === "assistant";
+}
+function isToolResultEntry(entry) {
+  return entry.kind === "message" && entry.role === "tool_result";
+}
+function resolveRecall(entries, view, ref, activeLeafTurnId) {
+  const parsed = parseRefKey(ref, view);
+  if (parsed === null) return { ok: false, error: { kind: "invalid_ref", ref } };
+  const key = refKey(parsed);
+  const active = filterEntriesToActivePath(entries, activeLeafTurnId);
+  const entry = active.find((candidate) => candidate.turnId === key);
+  if (entry === void 0) {
+    return { ok: false, error: { kind: "not_on_active_path", ref: key } };
+  }
+  if (!isToolResultEntry(entry) || hasLegacyCompactionMarker(entry.payload)) {
+    return { ok: false, error: { kind: "unavailable", ref: key } };
+  }
+  const state = view.evicted.has(key) ? "evicted" : compactionCut(active).visible.some((candidate) => candidate.turnId === key) ? "visible" : "summarized";
+  if (state === "visible") return { ok: false, error: { kind: "visible", ref: key } };
+  const payload = toolResultPayload(entry.payload);
+  const body = toolResultText(payload.result);
+  const offloadPath = offloadPathOf(payload);
+  return {
+    ok: true,
+    result: {
+      ref: parsed,
+      state,
+      entry,
+      body,
+      tokens: ceilChars(body.length),
+      ...offloadPath !== void 0 ? { offloadPath } : {}
+    }
+  };
+}
+function recallParentTurnId(entries, activeLeafTurnId) {
+  const active = filterEntriesToActivePath(entries, activeLeafTurnId);
+  for (let i = active.length - 1; i >= 0; i -= 1) {
+    const candidate = active[i];
+    if (candidate?.kind === "message") return candidate.turnId;
+  }
+  return null;
+}
+function buildRecallFields(result, meta) {
+  return {
+    kind: "contextRecall",
+    ref: { entry: result.ref.entry },
+    trigger: meta.trigger,
+    tokensReadmitted: result.tokens,
+    ...meta.toolCallId !== void 0 ? { toolCallId: meta.toolCallId } : {}
+  };
+}
+function recallableRefListing(entries, view, options = {}) {
+  const active = filterEntriesToActivePath(entries, options.activeLeafTurnId);
+  const visible = new Set(compactionCut(active).visible.map((entry) => entry.turnId));
+  const callPaths = callPathsByToolCallId(active);
+  const terms = (options.query ?? "").toLowerCase().split(/\s+/).filter(Boolean);
+  const limit = typeof options.limit === "number" && Number.isFinite(options.limit) ? Math.max(1, Math.min(12, Math.floor(options.limit))) : 8;
+  const offset = typeof options.offset === "number" && Number.isSafeInteger(options.offset) ? Math.max(0, options.offset) : 0;
+  const refs = [];
+  let total = 0;
+  for (const entry of active) {
+    if (!isToolResultEntry(entry) || hasLegacyCompactionMarker(entry.payload)) continue;
+    const state = view.evicted.has(entry.turnId) ? "evicted" : visible.has(entry.turnId) ? "visible" : "summarized";
+    if (state === "visible") continue;
+    const payload = toolResultPayload(entry.payload);
+    const toolCallId = typeof payload.obj.toolCallId === "string" ? payload.obj.toolCallId : void 0;
+    const path = primaryPathOf(payload) ?? (toolCallId === void 0 ? void 0 : callPaths.get(toolCallId));
+    const alias = view.evicted.get(entry.turnId)?.alias;
+    const metadata = `${alias ?? ""} ${entry.turnId} ${payload.toolName} ${path ?? ""}`.toLowerCase();
+    if (!terms.every((term) => metadata.includes(term))) continue;
+    if (total >= offset && refs.length < limit) {
+      const label = `${payload.toolName}${path === void 0 ? "" : ` ${path}`}`.replace(/\s+/g, " ").slice(0, 240);
+      refs.push(`${alias ?? entry.turnId} (${label}) [${state}; ${entry.timestamp}]`);
+    }
+    total += 1;
+  }
+  const remaining = Math.max(0, total - offset - refs.length);
+  return { refs, remaining, total, offset, ...remaining > 0 ? { nextOffset: offset + refs.length } : {} };
+}
+function recallableRefMessage(entries, view, activeLeafTurnId) {
+  const listing = recallableRefListing(entries, view, activeLeafTurnId === void 0 ? {} : { activeLeafTurnId });
+  if (listing.refs.length === 0) return "No recallable refs on the active path.";
+  const more = listing.remaining > 0 ? `, and ${listing.remaining} more` : "";
+  return `Recallable refs on the active path: ${listing.refs.join(", ")}${more}. Discover all matches with context(scope="recall", limit=8, offset=0), omitting ref; query filters path/tool/ref terms. Follow nextOffset.`;
+}
+function recallErrorMessage(error, entries = [], view = EMPTY_WORKING_SET_VIEW, activeLeafTurnId) {
+  const active = filterEntriesToActivePath(entries, activeLeafTurnId);
+  const listing = ` ${recallableRefMessage(active, view, activeLeafTurnId)}`;
+  switch (error.kind) {
+    case "invalid_ref":
+      return `recall ref must be a single recall alias or turnId without whitespace; got '${error.ref}'.`;
+    case "not_on_active_path":
+      return `ref ${error.ref} is not on the active path of this session (unknown or on an abandoned branch).${listing}`;
+    case "visible":
+      return `ref ${error.ref} is visible; its content is already in context.${listing}`;
+    case "unavailable": {
+      const entry = active.find((candidate) => candidate.turnId === error.ref);
+      if (entry !== void 0 && isThinkingEntry(entry)) {
+        return `ref ${error.ref} is an assistant turn; thinking is not recallable.${listing}`;
+      }
+      return `ref ${error.ref} has no recallable original tool result (unsupported entry or legacy destructive compaction).${listing}`;
+    }
+  }
+}
+
+export {
+  resolveRecall,
+  recallParentTurnId,
+  buildRecallFields,
+  recallableRefListing,
+  recallErrorMessage
+};
+//# sourceMappingURL=chunk-ECOMVOHP.js.map

package/dist/chunk-EFSEIZE6.js

@@ -0,0 +1,56 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/safety/redaction.ts
+init_esm_shims();
+function isPlainObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+var SECRET_KEY_RE = /(?:api[-_]?key|access[-_]?key|auth(?:orization)?|credential|password|private[-_]?key|secret|token)/iu;
+var ENV_KEY_RE = /^env(?:ironment)?$/iu;
+var SECRET_STRING_RE = /(https?:\/\/[^\s/@]+:)[^\s/@]+@/giu;
+var SECRET_URL_PARAM_RE = /([?&](?:api[-_]?key|access[-_]?token|auth(?:orization)?|credential|password|secret|token)[^=\s]*=)[^&#\s]+/giu;
+var SECRET_ASSIGNMENT_RE = /(?<![A-Z0-9_])((?:[A-Z0-9_]*(?:ACCESS|API|AUTH|CREDENTIAL|KEY|PASS(?:WORD)?|PRIVATE|SECRET|TOKEN)[A-Z0-9_]*)=)[^\s;&|]+/giu;
+var SECRET_FLAG_RE = /(--?(?:[a-z0-9-]*(?:api[-_]?key|access[-_]?token|auth(?:orization)?|credential|password|secret|token)[a-z0-9-]*))(=|\s+)([^\s;&|]+)/giu;
+function redactSecretString(value) {
+  return value.replace(SECRET_STRING_RE, "$1[redacted]@").replace(SECRET_URL_PARAM_RE, "$1[redacted]").replace(SECRET_ASSIGNMENT_RE, "$1[redacted]").replace(SECRET_FLAG_RE, "$1$2[redacted]");
+}
+function isSecretArgKey(key) {
+  return SECRET_KEY_RE.test(key);
+}
+function isEnvironmentArgKey(key) {
+  return ENV_KEY_RE.test(key);
+}
+function redactEnvironmentValue(value, depth) {
+  if (depth > 8) return "[redacted nested values]";
+  if (typeof value === "string") return "[redacted]";
+  if (Array.isArray(value)) return value.map((item) => redactEnvironmentValue(item, depth + 1));
+  if (!isPlainObject(value)) return value;
+  const out = {};
+  for (const [childKey, childValue] of Object.entries(value)) {
+    out[childKey] = redactEnvironmentValue(childValue, depth + 1);
+  }
+  return out;
+}
+function redactToolArgs(value, key = "", depth = 0) {
+  if (isSecretArgKey(key)) return "[redacted]";
+  if (isEnvironmentArgKey(key)) return redactEnvironmentValue(value, depth);
+  if (typeof value === "string") return redactSecretString(value);
+  if (depth > 8) return "[redacted nested values]";
+  if (Array.isArray(value)) return value.map((item) => redactToolArgs(item, key, depth + 1));
+  if (!isPlainObject(value)) return value;
+  const out = {};
+  for (const [childKey, childValue] of Object.entries(value)) {
+    out[childKey] = redactToolArgs(childValue, childKey, depth + 1);
+  }
+  return out;
+}
+
+export {
+  redactSecretString,
+  isSecretArgKey,
+  redactToolArgs
+};
+//# sourceMappingURL=chunk-EFSEIZE6.js.map