@jmtrin/opencode-kevin 0.9.0 → 1.1.0

package/dist/plugin/escape.js

@@ -0,0 +1,60 @@
+/**
+ * v1.0.0 (K10-027 / plan §5.7) — the untrusted-input boundary.
+ *
+ * One pure, total, idempotent escaping function per container Kevin
+ * writes stored text into. Every function here is a fixed point after
+ * one application — applying it twice equals applying it once — because
+ * a re-curated memory passes through the boundary on every regeneration
+ * and must not accumulate escaping.
+ *
+ * This module imports nothing and touches no filesystem. It is the
+ * boundary; the single enforcement point is ArtifactWriter (D6-01).
+ */
+const ENTITY_HEADS = /&(?!(amp|lt|gt|#\d+);)/g;
+/**
+ * Neutralise text destined for the AGENTS.md marker block: HTML-escape
+ * (the memory-format discipline, made idempotent) so the literal
+ * `<!-- kevin:end -->` marker sequence and every comment terminator
+ * lose their meaning inside the block. The line-level strip of anything
+ * containing `kevin:begin`/`kevin:end` stays in
+ * ArtifactWriter.sanitizeArtifactBody — it is a filter, not an escape.
+ */
+export function escapeForMarkerBlock(text) {
+    return text
+        .replace(ENTITY_HEADS, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+}
+/**
+ * Neutralise fenced-code delimiters: any run of three or more backticks
+ * or tildes would close (or open) a markdown fence around the rendered
+ * block and let stored text masquerade as un-fenced document content.
+ * Each byte of the run becomes its numeric HTML entity, which renders
+ * identically but can never form a delimiter again.
+ */
+export function escapeForFence(text) {
+    return text
+        .replace(/`{3,}/g, (run) => "&#96;".repeat(run.length))
+        .replace(/~{3,}/g, (run) => "&#126;".repeat(run.length));
+}
+/**
+ * Neutralise bytes that would terminate an OKF v2 line: newline,
+ * carriage return and every other C0 control character become their
+ * JSON-style escapes, so a statement can never split into a second
+ * line even if a future writer forgets JSON.stringify. Quotation marks
+ * and backslashes are deliberately NOT touched here — the OKF line is
+ * canonical JSON and re-escaping them would corrupt parsing; JSON
+ * already guarantees they stay inside the string.
+ */
+export function escapeForOkfLine(text) {
+    // biome-ignore lint/suspicious/noControlCharactersInRegex: neutralising control bytes is this function's entire job
+    return text.replace(/[\u0000-\u001f]/g, (c) => {
+        if (c === "\n")
+            return "\\n";
+        if (c === "\r")
+            return "\\r";
+        if (c === "\t")
+            return "\\t";
+        return `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`;
+    });
+}

package/dist/plugin/fingerprint.js

@@ -71,4 +71,3 @@ export function fingerprint(content, project_id) {
     const salted = project_id ? `${project_id}\u0000${normalized}` : normalized;
     return fnv1a64(salted);
 }
-//# sourceMappingURL=fingerprint.js.map

package/dist/plugin/host.js

@@ -248,4 +248,3 @@ function packageRootOf(file, notes) {
     }
     return null;
 }
-//# sourceMappingURL=host.js.map

package/dist/plugin/index.d.ts

@@ -16,10 +16,10 @@ export interface KevinPluginOptions {
  * v0.4.0 (K4-021) — settings surfaced by `kevin_config` (plan §8.8).
  * Unknown keys are rejected on `set` unless `strict: false`.
  */
-export declare const KEVIN_CONFIG_KEYS: readonly ["quality_gate_enabled", "lesson_snippet_injection", "patternminer_enabled", "cross_project_enabled", "llm_reflection_enabled", "tool_calls_dedup_enabled", "deterministic_retrieval", "pre_prompt_budget_tokens", "archive_after_days", "curation_enabled", "agents_md_path", "skill_emission_enabled", "reference_emission_enabled", "injection_confidence_floor", "repo_truth_enabled", "convention_mining_enabled", "conflict_detection_enabled", "error_lesson_mode", "shared_layer_enabled", "okf_path", "share_requires_approval", "author_identity_mode", "shared_confidence_floor", "hook_liveness_enabled", "native_registration_enabled", "host_probe_history_enabled", "dead_hook_report_threshold"];
+export declare const KEVIN_CONFIG_KEYS: readonly ["quality_gate_enabled", "lesson_snippet_injection", "patternminer_enabled", "cross_project_enabled", "llm_reflection_enabled", "tool_calls_dedup_enabled", "deterministic_retrieval", "pre_prompt_budget_tokens", "archive_after_days", "curation_enabled", "agents_md_path", "skill_emission_enabled", "reference_emission_enabled", "injection_confidence_floor", "repo_truth_enabled", "convention_mining_enabled", "conflict_detection_enabled", "error_lesson_mode", "shared_layer_enabled", "okf_path", "share_requires_approval", "author_identity_mode", "shared_confidence_floor", "hook_liveness_enabled", "native_registration_enabled", "host_probe_history_enabled", "dead_hook_report_threshold", "perf_enabled", "perf_ring_capacity", "perf_flush_on_idle", "contract_report_enabled"];
 export declare const ERROR_LESSON_MODE_VALUES: readonly ["all", "triage_only"];
 /** Plugin release version — stamped into generated files (K8-021/027). */
-export declare const KEVIN_VERSION = "0.9.0";
+export declare const KEVIN_VERSION = "1.1.0";
 export interface RekeyCounts {
     memories: number;
     shared_entries: number;